Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. syzkaller login: [ 87.009026][ T10] cfg80211: failed to load regulatory.db 2026/07/24 19:23:12 parsed 1 programs 2026/07/24 19:23:12 serving rpc on tcp://38999 [ 91.754009][ T5608] cgroup: Unknown subsys name 'net' [ 91.976944][ T5608] cgroup: Unknown subsys name 'cpuset' [ 92.030210][ T5608] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.051324][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.374508][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.378788][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.387949][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.391805][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.395518][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.913703][ T1640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.913728][ T1640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.460138][ T1640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.460161][ T1640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.658232][ T5655] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.659472][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.660227][ T5655] bridge_slave_0: entered allmulticast mode [ 103.678067][ T5655] bridge_slave_0: entered promiscuous mode [ 103.737630][ T5655] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.737744][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.737877][ T5655] bridge_slave_1: entered allmulticast mode [ 103.739404][ T5655] bridge_slave_1: entered promiscuous mode [ 103.856143][ T5655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.904097][ T5655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.060209][ T5655] team0: Port device team_slave_0 added [ 104.080596][ T5655] team0: Port device team_slave_1 added [ 104.358258][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.358277][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.358305][ T5655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.426015][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.426032][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.426058][ T5655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.590305][ T5655] hsr_slave_0: entered promiscuous mode [ 104.592183][ T5655] hsr_slave_1: entered promiscuous mode [ 105.463105][ T5655] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.505945][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.507299][ T5655] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.546286][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.547401][ T5655] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.573078][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.574063][ T5655] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.627302][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.115248][ T5655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.176912][ T5655] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.195184][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.196147][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.221947][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.222045][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.707733][ T5655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.783357][ T5655] veth0_vlan: entered promiscuous mode [ 106.804543][ T5655] veth1_vlan: entered promiscuous mode [ 106.856263][ T5655] veth0_macvtap: entered promiscuous mode [ 106.865864][ T5655] veth1_macvtap: entered promiscuous mode [ 106.897587][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.914326][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.965691][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.985361][ T5708] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.993475][ T5708] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.005027][ T5708] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/07/24 19:23:31 executed programs: 0 [ 107.957471][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.980183][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.001461][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.005252][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.058103][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.066391][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.072317][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.072925][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.074896][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.076446][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.333215][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.335982][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.373804][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.376039][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.377801][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.519145][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.550196][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.553455][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.558775][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.566187][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.655012][ T5751] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.706610][ T5751] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.707744][ T5751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.716971][ T5751] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.719081][ T5751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.945682][ T168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.121892][ T59] Bluetooth: hci1: command tx timeout [ 110.200864][ T59] Bluetooth: hci0: command tx timeout [ 110.374570][ T168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.529673][ T59] Bluetooth: hci2: command tx timeout [ 110.633517][ T168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.689792][ T5751] Bluetooth: hci3: command tx timeout [ 110.840041][ T59] Bluetooth: hci4: command tx timeout [ 110.951730][ T168] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.140479][ T168] bridge_slave_1: left allmulticast mode [ 112.140669][ T168] bridge_slave_1: left promiscuous mode [ 112.146388][ T168] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.199806][ T59] Bluetooth: hci1: command tx timeout [ 112.275095][ T168] bridge_slave_0: left allmulticast mode [ 112.275123][ T168] bridge_slave_0: left promiscuous mode [ 112.276740][ T168] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.279848][ T59] Bluetooth: hci0: command tx timeout [ 112.600129][ T59] Bluetooth: hci2: command tx timeout [ 112.769728][ T59] Bluetooth: hci3: command tx timeout [ 112.922338][ T59] Bluetooth: hci4: command tx timeout [ 113.130644][ T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.190388][ T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.231796][ T168] bond0 (unregistering): Released all slaves [ 113.384806][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.384950][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.385155][ T5752] bridge_slave_0: entered allmulticast mode [ 113.388203][ T5752] bridge_slave_0: entered promiscuous mode [ 113.432243][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.432421][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.432656][ T5746] bridge_slave_0: entered allmulticast mode [ 113.435618][ T5746] bridge_slave_0: entered promiscuous mode [ 113.510408][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.510567][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.510737][ T5752] bridge_slave_1: entered allmulticast mode [ 113.515849][ T5752] bridge_slave_1: entered promiscuous mode [ 113.517050][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.517198][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.517311][ T5746] bridge_slave_1: entered allmulticast mode [ 113.518851][ T5746] bridge_slave_1: entered promiscuous mode [ 113.625367][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.625549][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.625742][ T5745] bridge_slave_0: entered allmulticast mode [ 113.636346][ T5745] bridge_slave_0: entered promiscuous mode [ 113.638319][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.638439][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.638591][ T5755] bridge_slave_0: entered allmulticast mode [ 113.643580][ T5755] bridge_slave_0: entered promiscuous mode [ 113.707231][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.707401][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.707514][ T5745] bridge_slave_1: entered allmulticast mode [ 113.709104][ T5745] bridge_slave_1: entered promiscuous mode [ 113.721287][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.721408][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.721651][ T5755] bridge_slave_1: entered allmulticast mode [ 113.724709][ T5755] bridge_slave_1: entered promiscuous mode [ 113.734017][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.746952][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.816656][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.819132][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.903620][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.903715][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.903837][ T5753] bridge_slave_0: entered allmulticast mode [ 113.905629][ T5753] bridge_slave_0: entered promiscuous mode [ 113.920241][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.930419][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.002204][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.002338][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.002505][ T5753] bridge_slave_1: entered allmulticast mode [ 114.004513][ T5753] bridge_slave_1: entered promiscuous mode [ 114.008459][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.025692][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.050032][ T5752] team0: Port device team_slave_0 added [ 114.054304][ T5746] team0: Port device team_slave_0 added [ 114.108955][ T5752] team0: Port device team_slave_1 added [ 114.116794][ T5746] team0: Port device team_slave_1 added [ 114.210790][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.213583][ T5755] team0: Port device team_slave_0 added [ 114.215781][ T5745] team0: Port device team_slave_0 added [ 114.278597][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.280083][ T59] Bluetooth: hci1: command tx timeout [ 114.287071][ T5755] team0: Port device team_slave_1 added [ 114.293377][ T5745] team0: Port device team_slave_1 added [ 114.294496][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.294508][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.294530][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.298536][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.298553][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.298577][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.359665][ T59] Bluetooth: hci0: command tx timeout [ 114.369031][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.369047][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.369069][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.375617][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.375633][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.375655][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.679748][ T59] Bluetooth: hci2: command tx timeout [ 114.839848][ T59] Bluetooth: hci3: command tx timeout [ 114.999791][ T59] Bluetooth: hci4: command tx timeout [ 115.052437][ T5753] team0: Port device team_slave_0 added [ 115.053363][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.053378][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.053403][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.062534][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 115.065354][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.065369][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.065392][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.075889][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.075905][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.075928][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.082976][ T5753] team0: Port device team_slave_1 added [ 115.085224][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.085237][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.085259][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.256822][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.256841][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.256863][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.308779][ T5752] hsr_slave_0: entered promiscuous mode [ 115.312480][ T5752] hsr_slave_1: entered promiscuous mode [ 115.314405][ T5752] debugfs: 'hsr0' already exists in 'hsr' [ 115.314495][ T5752] Cannot create hsr debugfs directory [ 115.342792][ T5746] hsr_slave_0: entered promiscuous mode [ 115.343703][ T5746] hsr_slave_1: entered promiscuous mode [ 115.344319][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 115.344339][ T5746] Cannot create hsr debugfs directory [ 115.345649][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.345659][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.345673][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.570145][ T168] hsr_slave_0: left promiscuous mode [ 115.589937][ T168] hsr_slave_1: left promiscuous mode [ 115.590953][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.591013][ T168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.631301][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.631330][ T168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.691033][ T168] veth1_macvtap: left promiscuous mode [ 115.692269][ T168] veth0_macvtap: left promiscuous mode [ 115.694026][ T168] veth1_vlan: left promiscuous mode [ 115.694296][ T168] veth0_vlan: left promiscuous mode [ 116.359778][ T59] Bluetooth: hci1: command tx timeout [ 116.380263][ T168] team0 (unregistering): Port device team_slave_1 removed [ 116.420237][ T168] team0 (unregistering): Port device team_slave_0 removed [ 116.440265][ T59] Bluetooth: hci0: command tx timeout [ 116.663169][ T5755] hsr_slave_0: entered promiscuous mode [ 116.664118][ T5755] hsr_slave_1: entered promiscuous mode [ 116.759728][ T59] Bluetooth: hci2: command tx timeout [ 116.816972][ T5745] hsr_slave_0: entered promiscuous mode [ 116.817812][ T5745] hsr_slave_1: entered promiscuous mode [ 116.818420][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 116.818437][ T5745] Cannot create hsr debugfs directory [ 116.919675][ T59] Bluetooth: hci3: command tx timeout [ 117.006766][ T5753] hsr_slave_0: entered promiscuous mode [ 117.007703][ T5753] hsr_slave_1: entered promiscuous mode [ 117.008317][ T5753] debugfs: 'hsr0' already exists in 'hsr' [ 117.008335][ T5753] Cannot create hsr debugfs directory [ 117.099653][ T59] Bluetooth: hci4: command tx timeout [ 117.990048][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 119.607860][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.643696][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.652024][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.703987][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.707244][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.775632][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.808262][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.835374][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.046528][ T5755] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 120.081852][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.112105][ T5755] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.157609][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.164826][ T5755] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.206522][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.286036][ T5755] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.328508][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.635186][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.681594][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.707951][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.743872][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.783806][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.818745][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.867637][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.906279][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.184720][ T5752] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 121.224527][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.233657][ T5752] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.267929][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.274789][ T5752] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.295174][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.299221][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.340156][ T5752] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.378805][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.544242][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.553036][ T5753] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 121.608189][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.621107][ T5753] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.662270][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.680970][ T5753] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.718119][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.739682][ T5711] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.739925][ T5711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.743129][ T5753] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.814755][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.841120][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.872791][ T5711] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.872883][ T5711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.973427][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.023463][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.023599][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.072765][ T5711] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.072870][ T5711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.137913][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.313150][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.357734][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.422702][ T1640] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.428219][ T1640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.546169][ T1640] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.546251][ T1640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.586384][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.656363][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.656646][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.672171][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.725003][ T1640] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.725102][ T1640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.928183][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.988409][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.988574][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.051243][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.051390][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.435923][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.845538][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.882546][ T5746] veth0_vlan: entered promiscuous mode [ 123.927476][ T5746] veth1_vlan: entered promiscuous mode [ 124.226329][ T5755] veth0_vlan: entered promiscuous mode [ 124.251188][ T5746] veth0_macvtap: entered promiscuous mode [ 124.326793][ T5746] veth1_macvtap: entered promiscuous mode [ 124.389280][ T5755] veth1_vlan: entered promiscuous mode [ 124.500737][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.504567][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.538173][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.691042][ T4285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.694008][ T4285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.698434][ T4285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.714688][ T4285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.735868][ T5755] veth0_macvtap: entered promiscuous mode [ 124.792966][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.859055][ T5755] veth1_macvtap: entered promiscuous mode [ 125.101932][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.268266][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.316694][ T5745] veth0_vlan: entered promiscuous mode [ 125.373521][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.392400][ T5708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.392422][ T5708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.434057][ T5745] veth1_vlan: entered promiscuous mode [ 125.438646][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.514291][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.530960][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.544794][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.712165][ T5752] veth0_vlan: entered promiscuous mode [ 125.716218][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.716240][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/24 19:23:49 executed programs: 10 [ 126.008099][ T5752] veth1_vlan: entered promiscuous mode [ 126.195497][ T5745] veth0_macvtap: entered promiscuous mode [ 126.208275][ T5711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.208297][ T5711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.293708][ T5745] veth1_macvtap: entered promiscuous mode [ 126.307166][ T6027] [ 126.307177][ T6027] ====================================================== [ 126.307183][ T6027] WARNING: possible circular locking dependency detected [ 126.307191][ T6027] syzkaller #0 Not tainted [ 126.307199][ T6027] ------------------------------------------------------ [ 126.307206][ T6027] syz.1.22/6027 is trying to acquire lock: [ 126.307215][ T6027] ffff888023045290 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: configfs_depend_item_unlocked+0x153/0x420 [ 126.307273][ T6027] [ 126.307273][ T6027] but task is already holding lock: [ 126.307278][ T6027] ffff8880316fc510 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x147/0x590 [ 126.307320][ T6027] [ 126.307320][ T6027] which lock already depends on the new lock. [ 126.307320][ T6027] [ 126.307326][ T6027] [ 126.307326][ T6027] the existing dependency chain (in reverse order) is: [ 126.307332][ T6027] [ 126.307332][ T6027] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 126.307356][ T6027] mutex_lock_nested+0x5a/0x1d0 [ 126.307380][ T6027] tcm_set_name+0x2b/0xd0 [ 126.307401][ T6027] function_make+0x1a8/0x360 [ 126.307423][ T6027] configfs_mkdir+0x4f6/0x9e0 [ 126.307442][ T6027] vfs_mkdir+0x402/0x620 [ 126.307464][ T6027] filename_mkdirat+0x289/0x520 [ 126.307484][ T6027] __se_sys_mkdirat+0x35/0x150 [ 126.307505][ T6027] do_syscall_64+0x174/0x580 [ 126.307522][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.307538][ T6027] [ 126.307538][ T6027] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 126.307562][ T6027] mutex_lock_nested+0x5a/0x1d0 [ 126.307583][ T6027] configfs_rmdir+0x5f0/0x950 [ 126.307601][ T6027] vfs_rmdir+0x3e9/0x6b0 [ 126.307620][ T6027] filename_rmdir+0x292/0x520 [ 126.307641][ T6027] __se_sys_unlinkat+0x71/0x1a0 [ 126.307662][ T6027] do_syscall_64+0x174/0x580 [ 126.307679][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.307695][ T6027] [ 126.307695][ T6027] -> #0 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}: [ 126.307722][ T6027] __lock_acquire+0x1520/0x2ce0 [ 126.307739][ T6027] lock_acquire+0x106/0x350 [ 126.307754][ T6027] down_write+0x3a/0x50 [ 126.307771][ T6027] configfs_depend_item_unlocked+0x153/0x420 [ 126.307790][ T6027] usbg_make_tpg+0x1f6/0x590 [ 126.307809][ T6027] target_fabric_make_tpg+0xa8/0x6d0 [ 126.307834][ T6027] configfs_mkdir+0x4f6/0x9e0 [ 126.307851][ T6027] vfs_mkdir+0x402/0x620 [ 126.307870][ T6027] filename_mkdirat+0x289/0x520 [ 126.307890][ T6027] __se_sys_mkdirat+0x35/0x150 [ 126.307914][ T6027] do_syscall_64+0x174/0x580 [ 126.307931][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.307947][ T6027] [ 126.307947][ T6027] other info that might help us debug this: [ 126.307947][ T6027] [ 126.307952][ T6027] Chain exists of: [ 126.307952][ T6027] &sb->s_type->i_mutex_key#24 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 126.307952][ T6027] [ 126.307985][ T6027] Possible unsafe locking scenario: [ 126.307985][ T6027] [ 126.307990][ T6027] CPU0 CPU1 [ 126.307995][ T6027] ---- ---- [ 126.308000][ T6027] lock(&opts->dep_lock); [ 126.308011][ T6027] lock(gadget_subsys.su_mutex); [ 126.308024][ T6027] lock(&opts->dep_lock); [ 126.308037][ T6027] lock(&sb->s_type->i_mutex_key#24); [ 126.308052][ T6027] [ 126.308052][ T6027] *** DEADLOCK *** [ 126.308052][ T6027] [ 126.308057][ T6027] 5 locks held by syz.1.22/6027: [ 126.308067][ T6027] #0: ffff88801d7a2500 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 126.308116][ T6027] #1: ffff88803dae5290 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 126.308176][ T6027] #2: ffffffff8ec97520 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b0/0x9e0 [ 126.308220][ T6027] #3: ffffffff8efcd1b8 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0xf7/0x590 [ 126.308264][ T6027] #4: ffff8880316fc510 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x147/0x590 [ 126.308309][ T6027] [ 126.308309][ T6027] stack backtrace: [ 126.308319][ T6027] CPU: 0 UID: 0 PID: 6027 Comm: syz.1.22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.308338][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 126.308348][ T6027] Call Trace: [ 126.308355][ T6027] [ 126.308361][ T6027] dump_stack_lvl+0xe8/0x150 [ 126.308387][ T6027] print_circular_bug+0x2e1/0x300 [ 126.308410][ T6027] check_noncircular+0x12e/0x150 [ 126.308434][ T6027] __lock_acquire+0x1520/0x2ce0 [ 126.308459][ T6027] ? configfs_depend_item_unlocked+0x153/0x420 [ 126.308480][ T6027] lock_acquire+0x106/0x350 [ 126.308496][ T6027] ? configfs_depend_item_unlocked+0x153/0x420 [ 126.308521][ T6027] down_write+0x3a/0x50 [ 126.308540][ T6027] ? configfs_depend_item_unlocked+0x153/0x420 [ 126.308560][ T6027] configfs_depend_item_unlocked+0x153/0x420 [ 126.308582][ T6027] usbg_make_tpg+0x1f6/0x590 [ 126.308605][ T6027] ? __pfx_usbg_make_tpg+0x10/0x10 [ 126.308628][ T6027] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.308648][ T6027] target_fabric_make_tpg+0xa8/0x6d0 [ 126.308673][ T6027] configfs_mkdir+0x4f6/0x9e0 [ 126.308696][ T6027] ? __pfx_configfs_mkdir+0x10/0x10 [ 126.308715][ T6027] ? generic_permission+0x2bf/0x670 [ 126.308735][ T6027] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 126.308759][ T6027] vfs_mkdir+0x402/0x620 [ 126.308783][ T6027] filename_mkdirat+0x289/0x520 [ 126.308807][ T6027] ? __pfx_filename_mkdirat+0x10/0x10 [ 126.308831][ T6027] ? do_getname+0x151/0x250 [ 126.308855][ T6027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.308873][ T6027] __se_sys_mkdirat+0x35/0x150 [ 126.308896][ T6027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.308914][ T6027] do_syscall_64+0x174/0x580 [ 126.308933][ T6027] ? clear_bhb_loop+0x40/0x90 [ 126.308952][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.308969][ T6027] RIP: 0033:0x7f78863cde99 [ 126.308984][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.308997][ T6027] RSP: 002b:00007f7885a2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 126.309015][ T6027] RAX: ffffffffffffffda RBX: 00007f7886655fa0 RCX: 00007f78863cde99 [ 126.309028][ T6027] RDX: 00000000000001ff RSI: 0000200000001000 RDI: ffffffffffffff9c [ 126.309040][ T6027] RBP: 00007f7886463eaf R08: 0000000000000000 R09: 0000000000000000 [ 126.309051][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.309061][ T6027] R13: 00007f7886656038 R14: 00007f7886655fa0 R15: 00007ffe889db7a8 [ 126.309080][ T6027] [ 126.352206][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.352226][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.366587][ T5753] veth0_vlan: entered promiscuous mode [ 126.400007][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.410623][ T5753] veth1_vlan: entered promiscuous mode [ 126.412407][ T5752] veth0_macvtap: entered promiscuous mode [ 126.424893][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.442360][ T5752] veth1_macvtap: entered promiscuous mode [ 126.455033][ T168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.457043][ T168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.460910][ T168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.464465][ T168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.516272][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.824645][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.881485][ T5753] veth0_macvtap: entered promiscuous mode [ 126.898904][ T5745] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 126.898977][ T168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.899442][ T5753] veth1_macvtap: entered promiscuous mode [ 126.906023][ T168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.908097][ T168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.916057][ T168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.017754][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.017774][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.054193][ T5745] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 127.065919][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.164847][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.178716][ T5752] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 127.186743][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.186763][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.197276][ T4285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.198114][ T4285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.198364][ T4285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.198466][ T4285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.232066][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.232086][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.278435][ T5752] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 127.358252][ T5711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.358275][ T5711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.413834][ T5753] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 127.507533][ T5708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.507556][ T5708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.516846][ T5753] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 127.551346][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.551362][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/24 19:23:54 executed programs: 184 [ 133.092759][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.092824][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 2026/07/24 19:23:59 executed programs: 423