Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. 1970/01/01 00:03:37 parsed 1 programs 1970/01/01 00:03:37 serving rpc on tcp://39645 [ 218.348756][ T4705] cgroup: Unknown subsys name 'net' [ 218.478835][ T4705] cgroup: Unknown subsys name 'cpuset' [ 218.481155][ T4705] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 218.601848][ T4705] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 220.890614][ T4711] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 221.385699][ T4739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.386241][ T4739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.386399][ T4739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.386725][ T4739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.386918][ T4739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.531234][ T432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.531269][ T432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.556953][ T432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.556989][ T432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.241550][ T4768] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.241944][ T4768] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.242023][ T4768] bridge_slave_0: entered allmulticast mode [ 222.242670][ T4768] bridge_slave_0: entered promiscuous mode [ 222.251557][ T4768] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.252971][ T4768] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.254361][ T4768] bridge_slave_1: entered allmulticast mode [ 222.254843][ T4768] bridge_slave_1: entered promiscuous mode [ 222.262183][ T4768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.263088][ T4768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.270240][ T4768] team0: Port device team_slave_0 added [ 222.270960][ T4768] team0: Port device team_slave_1 added [ 222.276643][ T4768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.276680][ T4768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.276696][ T4768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.277689][ T4768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.277698][ T4768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.277710][ T4768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.288329][ T4768] hsr_slave_0: entered promiscuous mode [ 222.288666][ T4768] hsr_slave_1: entered promiscuous mode [ 222.332836][ T4768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.336163][ T4768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.338002][ T4768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.340550][ T4768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.343669][ T4768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.346065][ T4768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.346467][ T4768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.350472][ T4768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.376659][ T4768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.382760][ T4768] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.388599][ T432] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.388672][ T432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.392298][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.392339][ T432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.495966][ T4768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.508720][ T4768] veth0_vlan: entered promiscuous mode [ 222.512829][ T4768] veth1_vlan: entered promiscuous mode [ 222.521066][ T4768] veth0_macvtap: entered promiscuous mode [ 222.522238][ T4768] veth1_macvtap: entered promiscuous mode [ 222.526175][ T4768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.528698][ T4768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.533930][ T3032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.535772][ T3032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.557743][ T432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.557857][ T3032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.633598][ T432] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.681902][ T432] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.742863][ T432] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:03:42 executed programs: 0 [ 222.792787][ T432] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.796381][ T4739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.797916][ T4739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.798539][ T4739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.798883][ T4739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.799083][ T4739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.931936][ T4807] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.932021][ T4807] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.932152][ T4807] bridge_slave_0: entered allmulticast mode [ 222.932573][ T4807] bridge_slave_0: entered promiscuous mode [ 222.933696][ T4807] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.933754][ T4807] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.933803][ T4807] bridge_slave_1: entered allmulticast mode [ 222.934223][ T4807] bridge_slave_1: entered promiscuous mode [ 222.941501][ T4807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.942382][ T4807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.950219][ T4807] team0: Port device team_slave_0 added [ 222.950974][ T4807] team0: Port device team_slave_1 added [ 222.957076][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.957495][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.957518][ T4807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.958086][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.958093][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.958105][ T4807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.969526][ T4807] hsr_slave_0: entered promiscuous mode [ 222.969811][ T4807] hsr_slave_1: entered promiscuous mode [ 222.970015][ T4807] debugfs: 'hsr0' already exists in 'hsr' [ 222.970071][ T4807] Cannot create hsr debugfs directory [ 224.827697][ T4739] Bluetooth: hci0: command tx timeout [ 225.569758][ T432] bridge_slave_1: left allmulticast mode [ 225.569794][ T432] bridge_slave_1: left promiscuous mode [ 225.570031][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.576488][ T432] bridge_slave_0: left allmulticast mode [ 225.576795][ T432] bridge_slave_0: left promiscuous mode [ 225.576866][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.635162][ T432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.640100][ T432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.668135][ T432] bond0 (unregistering): Released all slaves [ 225.710399][ T432] hsr_slave_0: left promiscuous mode [ 225.712015][ T432] hsr_slave_1: left promiscuous mode [ 225.712375][ T432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.712400][ T432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.716811][ T432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.718879][ T432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.723467][ T432] veth1_macvtap: left promiscuous mode [ 225.724632][ T432] veth0_macvtap: left promiscuous mode [ 225.725810][ T432] veth1_vlan: left promiscuous mode [ 225.725897][ T432] veth0_vlan: left promiscuous mode [ 225.823568][ T432] team0 (unregistering): Port device team_slave_1 removed [ 225.828695][ T432] team0 (unregistering): Port device team_slave_0 removed [ 225.876131][ T4394] 8021q: adding VLAN 0 to HW filter on device eth0 [ 226.101125][ T4807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.104774][ T4807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.106647][ T4807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.112827][ T4807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.114665][ T4807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.117005][ T4807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.119004][ T4807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.121425][ T4807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.147490][ T4807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.155945][ T4807] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.166047][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.166096][ T1398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.173132][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.173180][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.308084][ T4807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.321024][ T4807] veth0_vlan: entered promiscuous mode [ 226.324083][ T4807] veth1_vlan: entered promiscuous mode [ 226.331579][ T4807] veth0_macvtap: entered promiscuous mode [ 226.334079][ T4807] veth1_macvtap: entered promiscuous mode [ 226.338062][ T4807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.339023][ T4807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.364765][ T1398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.364798][ T1398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.368658][ T432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.368689][ T432] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.368705][ T432] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.368720][ T432] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.376747][ T1398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.376778][ T1398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.647492][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 226.798078][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 226.800228][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.800255][ T9] usb 1-1: Product: syz [ 226.800267][ T9] usb 1-1: Manufacturer: syz [ 226.800277][ T9] usb 1-1: SerialNumber: syz [ 226.805891][ T9] mdc800 1-1:1.0: Found Mustek MDC800 on USB. [ 226.897320][ T4739] Bluetooth: hci0: command tx timeout [ 227.005436][ T4895] [ 227.005859][ T4895] ====================================================== [ 227.007050][ T4895] WARNING: possible circular locking dependency detected [ 227.008320][ T4895] syzkaller #0 Not tainted [ 227.009089][ T4895] ------------------------------------------------------ [ 227.010285][ T4895] syz.0.17/4895 is trying to acquire lock: [ 227.011310][ T4895] ffff0000c9c18a18 (&mdc800->io_lock){+.+.}-{4:4}, at: mdc800_device_open+0x38/0x3c4 [ 227.013027][ T4895] [ 227.013027][ T4895] but task is already holding lock: [ 227.014328][ T4895] ffff8000896fe188 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x3c/0x1c0 [ 227.015918][ T4895] [ 227.015918][ T4895] which lock already depends on the new lock. [ 227.015918][ T4895] [ 227.017837][ T4895] [ 227.017837][ T4895] the existing dependency chain (in reverse order) is: [ 227.019353][ T4895] [ 227.019353][ T4895] -> #1 (minor_rwsem#2){++++}-{4:4}: [ 227.020765][ T4895] down_write+0x50/0xc0 [ 227.021665][ T4895] usb_register_dev+0x11c/0x428 [ 227.022668][ T4895] mdc800_usb_probe+0x5a4/0xd28 [ 227.023708][ T4895] usb_probe_interface+0x374/0x834 [ 227.024744][ T4895] really_probe+0x29c/0x800 [ 227.025710][ T4895] __driver_probe_device+0x1e0/0x350 [ 227.026853][ T4895] driver_probe_device+0x6c/0x19c [ 227.027894][ T4895] __device_attach_driver+0x198/0x2f8 [ 227.028973][ T4895] bus_for_each_drv+0x144/0x1dc [ 227.029955][ T4895] __device_attach+0x248/0x390 [ 227.030966][ T4895] device_initial_probe+0x90/0xc8 [ 227.032010][ T4895] bus_probe_device+0x58/0x120 [ 227.032959][ T4895] device_add+0x6cc/0x9e0 [ 227.033792][ T4895] usb_set_configuration+0x1184/0x158c [ 227.034812][ T4895] usb_generic_driver_probe+0x8c/0x148 [ 227.035898][ T4895] usb_probe_device+0x114/0x2b0 [ 227.036862][ T4895] really_probe+0x29c/0x800 [ 227.037848][ T4895] __driver_probe_device+0x1e0/0x350 [ 227.038887][ T4895] driver_probe_device+0x6c/0x19c [ 227.039995][ T4895] __device_attach_driver+0x198/0x2f8 [ 227.041031][ T4895] bus_for_each_drv+0x144/0x1dc [ 227.041993][ T4895] __device_attach+0x248/0x390 [ 227.043146][ T4895] device_initial_probe+0x90/0xc8 [ 227.044275][ T4895] bus_probe_device+0x58/0x120 [ 227.045307][ T4895] device_add+0x6cc/0x9e0 [ 227.046219][ T4895] usb_new_device+0x9c4/0x11f8 [ 227.047207][ T4895] hub_event+0x1ef0/0x39fc [ 227.048166][ T4895] process_scheduled_works+0x91c/0x1250 [ 227.049251][ T4895] worker_thread+0x798/0xbd0 [ 227.050179][ T4895] kthread+0x304/0x3d4 [ 227.051018][ T4895] ret_from_fork+0x10/0x20 [ 227.051908][ T4895] [ 227.051908][ T4895] -> #0 (&mdc800->io_lock){+.+.}-{4:4}: [ 227.053395][ T4895] __lock_acquire+0x1600/0x2a6c [ 227.054388][ T4895] lock_acquire+0x150/0x370 [ 227.055348][ T4895] __mutex_lock+0x164/0xf14 [ 227.056321][ T4895] mutex_lock_nested+0x24/0x30 [ 227.057323][ T4895] mdc800_device_open+0x38/0x3c4 [ 227.058391][ T4895] usb_open+0x150/0x1c0 [ 227.059243][ T4895] chrdev_open+0x398/0x3e8 [ 227.060180][ T4895] do_dentry_open+0x5c4/0xfc0 [ 227.061190][ T4895] vfs_open+0x44/0x2dc [ 227.062048][ T4895] path_openat+0x1084/0x18f4 [ 227.063051][ T4895] do_file_open+0x1c8/0x2e8 [ 227.063997][ T4895] do_sys_openat2+0x114/0x1e8 [ 227.064956][ T4895] do_sys_open+0xb0/0xe0 [ 227.065852][ T4895] __arm64_sys_openat+0xa8/0xc4 [ 227.066817][ T4895] invoke_syscall+0x98/0x244 [ 227.067761][ T4895] el0_svc_common+0xec/0x23c [ 227.068689][ T4895] do_el0_svc+0x4c/0x5c [ 227.069544][ T4895] el0_svc+0x64/0x260 [ 227.070327][ T4895] el0t_64_sync_handler+0x44/0x104 [ 227.071407][ T4895] el0t_64_sync+0x198/0x19c [ 227.072360][ T4895] [ 227.072360][ T4895] other info that might help us debug this: [ 227.072360][ T4895] [ 227.074188][ T4895] Possible unsafe locking scenario: [ 227.074188][ T4895] [ 227.075499][ T4895] CPU0 CPU1 [ 227.076485][ T4895] ---- ---- [ 227.077450][ T4895] rlock(minor_rwsem#2); [ 227.078280][ T4895] lock(&mdc800->io_lock); [ 227.079520][ T4895] lock(minor_rwsem#2); [ 227.080827][ T4895] lock(&mdc800->io_lock); [ 227.081719][ T4895] [ 227.081719][ T4895] *** DEADLOCK *** [ 227.081719][ T4895] [ 227.083155][ T4895] locks held by syz.0.17/4895: 1, last CPU#1: [ 227.084256][ T4895] #0: ffff8000896fe188 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x3c/0x1c0 [ 227.085836][ T4895] [ 227.085836][ T4895] stack backtrace: [ 227.086908][ T4895] CPU: 1 UID: 0 PID: 4895 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 227.088538][ T4895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 227.090430][ T4895] Call trace: [ 227.091063][ T4895] show_stack+0x2c/0x3c (C) [ 227.091952][ T4895] __dump_stack+0x30/0x40 [ 227.092760][ T4895] dump_stack_lvl+0xd8/0x12c [ 227.093614][ T4895] dump_stack+0x1c/0x28 [ 227.094392][ T4895] print_circular_bug+0x328/0x330 [ 227.095381][ T4895] check_noncircular+0x158/0x174 [ 227.096353][ T4895] __lock_acquire+0x1600/0x2a6c [ 227.097301][ T4895] lock_acquire+0x150/0x370 [ 227.098134][ T4895] __mutex_lock+0x164/0xf14 [ 227.098970][ T4895] mutex_lock_nested+0x24/0x30 [ 227.099762][ T4895] mdc800_device_open+0x38/0x3c4 [ 227.100685][ T4895] usb_open+0x150/0x1c0 [ 227.101460][ T4895] chrdev_open+0x398/0x3e8 [ 227.102341][ T4895] do_dentry_open+0x5c4/0xfc0 [ 227.103220][ T4895] vfs_open+0x44/0x2dc [ 227.103948][ T4895] path_openat+0x1084/0x18f4 [ 227.104840][ T4895] do_file_open+0x1c8/0x2e8 [ 227.105658][ T4895] do_sys_openat2+0x114/0x1e8 [ 227.106529][ T4895] do_sys_open+0xb0/0xe0 [ 227.107297][ T4895] __arm64_sys_openat+0xa8/0xc4 [ 227.108216][ T4895] invoke_syscall+0x98/0x244 [ 227.109133][ T4895] el0_svc_common+0xec/0x23c [ 227.109957][ T4895] do_el0_svc+0x4c/0x5c [ 227.110755][ T4895] el0_svc+0x64/0x260 [ 227.111497][ T4895] el0t_64_sync_handler+0x44/0x104 [ 227.112461][ T4895] el0t_64_sync+0x198/0x19c [ 227.114929][ T4466] usb 1-1: USB disconnect, device number 2 [ 227.118178][ T4466] mdc800 1-1:1.0: Mustek MDC800 disconnected from USB.