Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. 1970/01/01 00:00:31 parsed 1 programs 1970/01/01 00:00:31 serving rpc on tcp://32833 [ 32.135482][ T4721] cgroup: Unknown subsys name 'net' [ 32.255634][ T4721] cgroup: Unknown subsys name 'cpuset' [ 32.257592][ T4721] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.433967][ T4721] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.505712][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.505737][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.515473][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.515497][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.547797][ T4730] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.735339][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.735599][ T4734] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.735665][ T4734] bridge_slave_0: entered allmulticast mode [ 33.736104][ T4734] bridge_slave_0: entered promiscuous mode [ 33.737659][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.737711][ T4734] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.737757][ T4734] bridge_slave_1: entered allmulticast mode [ 33.738171][ T4734] bridge_slave_1: entered promiscuous mode [ 33.745627][ T4734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.746511][ T4734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.752726][ T4734] team0: Port device team_slave_0 added [ 33.753727][ T4734] team0: Port device team_slave_1 added [ 33.795010][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.795040][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.795489][ T4734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.796986][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.796995][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.797012][ T4734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.811222][ T4734] hsr_slave_0: entered promiscuous mode [ 33.811551][ T4734] hsr_slave_1: entered promiscuous mode [ 33.869593][ T4734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.872641][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.874723][ T4734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.878107][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.905803][ T4734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.908765][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.912460][ T4734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.916098][ T4734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.928769][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.928822][ T4734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.928982][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.929027][ T4734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.947746][ T4734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.951536][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.953300][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.957606][ T4734] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.960089][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.960145][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.963567][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.963605][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.058422][ T4734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.070195][ T4734] veth0_vlan: entered promiscuous mode [ 34.072269][ T4734] veth1_vlan: entered promiscuous mode [ 34.080780][ T4734] veth0_macvtap: entered promiscuous mode [ 34.081917][ T4734] veth1_macvtap: entered promiscuous mode [ 34.089708][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.090962][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.093016][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.093759][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.093779][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.093794][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.203131][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.273157][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.332786][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.420921][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.997038][ T4743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.998704][ T4743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.000359][ T4743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.002094][ T4743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.003684][ T4743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:35 executed programs: 0 [ 35.218609][ T4743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.219885][ T4743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.220145][ T4743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.220461][ T4743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.220649][ T4743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.359932][ T4825] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.360011][ T4825] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.360116][ T4825] bridge_slave_0: entered allmulticast mode [ 35.360544][ T4825] bridge_slave_0: entered promiscuous mode [ 35.361890][ T4825] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.361939][ T4825] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.361998][ T4825] bridge_slave_1: entered allmulticast mode [ 35.362651][ T4825] bridge_slave_1: entered promiscuous mode [ 35.371192][ T4825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.372249][ T4825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.379217][ T4825] team0: Port device team_slave_0 added [ 35.380026][ T4825] team0: Port device team_slave_1 added [ 35.386598][ T4825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.386618][ T4825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.386633][ T4825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.387163][ T4825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.387170][ T4825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.387183][ T4825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.397912][ T4825] hsr_slave_0: entered promiscuous mode [ 35.398245][ T4825] hsr_slave_1: entered promiscuous mode [ 35.398472][ T4825] debugfs: 'hsr0' already exists in 'hsr' [ 35.398515][ T4825] Cannot create hsr debugfs directory [ 37.314384][ T50] Bluetooth: hci0: command tx timeout [ 37.593918][ T39] bridge_slave_1: left allmulticast mode [ 37.593958][ T39] bridge_slave_1: left promiscuous mode [ 37.594357][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.596818][ T39] bridge_slave_0: left allmulticast mode [ 37.596831][ T39] bridge_slave_0: left promiscuous mode [ 37.596907][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.651171][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.706187][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.754904][ T39] bond0 (unregistering): Released all slaves [ 37.817842][ T39] hsr_slave_0: left promiscuous mode [ 37.818235][ T39] hsr_slave_1: left promiscuous mode [ 37.818538][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.818553][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.819738][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.819752][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.825817][ T39] veth1_macvtap: left promiscuous mode [ 37.826854][ T39] veth0_macvtap: left promiscuous mode [ 37.827855][ T39] veth1_vlan: left promiscuous mode [ 37.828878][ T39] veth0_vlan: left promiscuous mode [ 37.923807][ T39] team0 (unregistering): Port device team_slave_1 removed [ 37.928230][ T39] team0 (unregistering): Port device team_slave_0 removed [ 37.980434][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 38.222668][ T4825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.225266][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.227015][ T4825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.229882][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.240779][ T4825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.249246][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.250991][ T4825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.259167][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.515351][ T4825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.521057][ T4825] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.524013][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.524080][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.527789][ T1952] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.527827][ T1952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.540604][ T4825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.542413][ T4825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.668096][ T4825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.683175][ T4825] veth0_vlan: entered promiscuous mode [ 38.689682][ T4825] veth1_vlan: entered promiscuous mode [ 38.699743][ T4825] veth0_macvtap: entered promiscuous mode [ 38.702254][ T4825] veth1_macvtap: entered promiscuous mode [ 38.708053][ T4825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.709025][ T4825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.712888][ T1239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.713257][ T1239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.713276][ T1239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.713293][ T1239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.738478][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.738504][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.746079][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.746105][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.798827][ T4919] [ 38.799298][ T4919] ====================================================== [ 38.800395][ T4919] WARNING: possible circular locking dependency detected [ 38.801449][ T4919] syzkaller #0 Not tainted [ 38.802175][ T4919] ------------------------------------------------------ [ 38.803321][ T4919] syz.0.18/4919 is trying to acquire lock: [ 38.804204][ T4919] ffff80008970de48 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_extension_allow_link+0x70/0x1f8 [ 38.806126][ T4919] [ 38.806126][ T4919] but task is already holding lock: [ 38.807463][ T4919] ffff0000f06efa40 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: configfs_symlink+0x394/0xde0 [ 38.809401][ T4919] [ 38.809401][ T4919] which lock already depends on the new lock. [ 38.809401][ T4919] [ 38.811319][ T4919] [ 38.811319][ T4919] the existing dependency chain (in reverse order) is: [ 38.812995][ T4919] [ 38.812995][ T4919] -> #2 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}: [ 38.814478][ T4919] down_write+0x50/0xc0 [ 38.815253][ T4919] configfs_depend_item_unlocked+0x154/0x344 [ 38.816337][ T4919] usbg_make_tpg+0x230/0x4b4 [ 38.817234][ T4919] target_fabric_make_tpg+0x98/0x518 [ 38.818210][ T4919] configfs_mkdir+0x374/0x7d4 [ 38.819062][ T4919] vfs_mkdir+0x2dc/0x464 [ 38.819868][ T4919] filename_mkdirat+0x228/0x3f4 [ 38.820802][ T4919] __arm64_sys_mkdirat+0x94/0xb8 [ 38.821708][ T4919] invoke_syscall+0x98/0x244 [ 38.822610][ T4919] el0_svc_common+0xec/0x23c [ 38.823453][ T4919] do_el0_svc+0x4c/0x5c [ 38.824228][ T4919] el0_svc+0x64/0x260 [ 38.824970][ T4919] el0t_64_sync_handler+0x48/0x148 [ 38.825861][ T4919] el0t_64_sync+0x198/0x19c [ 38.826706][ T4919] [ 38.826706][ T4919] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 38.827985][ T4919] __mutex_lock+0x164/0xf14 [ 38.828790][ T4919] mutex_lock_nested+0x24/0x30 [ 38.829690][ T4919] tcm_set_name+0x34/0xd0 [ 38.830583][ T4919] function_make+0x18c/0x300 [ 38.831462][ T4919] configfs_mkdir+0x374/0x7d4 [ 38.832387][ T4919] vfs_mkdir+0x2dc/0x464 [ 38.833205][ T4919] filename_mkdirat+0x228/0x3f4 [ 38.834091][ T4919] __arm64_sys_mkdirat+0x94/0xb8 [ 38.835020][ T4919] invoke_syscall+0x98/0x244 [ 38.835832][ T4919] el0_svc_common+0xec/0x23c [ 38.836658][ T4919] do_el0_svc+0x4c/0x5c [ 38.837437][ T4919] el0_svc+0x64/0x260 [ 38.838150][ T4919] el0t_64_sync_handler+0x48/0x148 [ 38.839085][ T4919] el0t_64_sync+0x198/0x19c [ 38.839918][ T4919] [ 38.839918][ T4919] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 38.841273][ T4919] __lock_acquire+0x17c0/0x2ebc [ 38.842135][ T4919] lock_acquire+0x140/0x364 [ 38.842946][ T4919] __mutex_lock+0x164/0xf14 [ 38.843814][ T4919] mutex_lock_nested+0x24/0x30 [ 38.844721][ T4919] uvcg_extension_allow_link+0x70/0x1f8 [ 38.845699][ T4919] configfs_symlink+0x478/0xde0 [ 38.846575][ T4919] vfs_symlink+0x16c/0x290 [ 38.847353][ T4919] filename_symlinkat+0x18c/0x328 [ 38.848278][ T4919] __arm64_sys_symlinkat+0xa8/0xd4 [ 38.849188][ T4919] invoke_syscall+0x98/0x244 [ 38.850053][ T4919] el0_svc_common+0xec/0x23c [ 38.850907][ T4919] do_el0_svc+0x4c/0x5c [ 38.851716][ T4919] el0_svc+0x64/0x260 [ 38.852514][ T4919] el0t_64_sync_handler+0x48/0x148 [ 38.853468][ T4919] el0t_64_sync+0x198/0x19c [ 38.854313][ T4919] [ 38.854313][ T4919] other info that might help us debug this: [ 38.854313][ T4919] [ 38.855976][ T4919] Chain exists of: [ 38.855976][ T4919] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#23 [ 38.855976][ T4919] [ 38.858642][ T4919] Possible unsafe locking scenario: [ 38.858642][ T4919] [ 38.859997][ T4919] CPU0 CPU1 [ 38.861000][ T4919] ---- ---- [ 38.861952][ T4919] lock(&sb->s_type->i_mutex_key#23); [ 38.862939][ T4919] lock(&opts->dep_lock); [ 38.864214][ T4919] lock(&sb->s_type->i_mutex_key#23); [ 38.865601][ T4919] lock(gadget_subsys.su_mutex); [ 38.866473][ T4919] [ 38.866473][ T4919] *** DEADLOCK *** [ 38.866473][ T4919] [ 38.867870][ T4919] 2 locks held by syz.0.18/4919: [ 38.868687][ T4919] #0: ffff0000c38e0450 (sb_writers#11){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 38.870249][ T4919] #1: ffff0000f06efa40 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: configfs_symlink+0x394/0xde0 [ 38.872086][ T4919] [ 38.872086][ T4919] stack backtrace: [ 38.873125][ T4919] CPU: 0 UID: 0 PID: 4919 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT [ 38.874666][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 38.876468][ T4919] Call trace: [ 38.877056][ T4919] show_stack+0x2c/0x3c (C) [ 38.877775][ T4919] __dump_stack+0x30/0x40 [ 38.878501][ T4919] dump_stack_lvl+0xd8/0x12c [ 38.879252][ T4919] dump_stack+0x1c/0x28 [ 38.879937][ T4919] print_circular_bug+0x328/0x330 [ 38.880751][ T4919] check_noncircular+0x158/0x174 [ 38.881574][ T4919] __lock_acquire+0x17c0/0x2ebc [ 38.882324][ T4919] lock_acquire+0x140/0x364 [ 38.883015][ T4919] __mutex_lock+0x164/0xf14 [ 38.883770][ T4919] mutex_lock_nested+0x24/0x30 [ 38.884503][ T4919] uvcg_extension_allow_link+0x70/0x1f8 [ 38.885397][ T4919] configfs_symlink+0x478/0xde0 [ 38.886130][ T4919] vfs_symlink+0x16c/0x290 [ 38.886813][ T4919] filename_symlinkat+0x18c/0x328 [ 38.887644][ T4919] __arm64_sys_symlinkat+0xa8/0xd4 [ 38.888487][ T4919] invoke_syscall+0x98/0x244 [ 38.889213][ T4919] el0_svc_common+0xec/0x23c [ 38.890024][ T4919] do_el0_svc+0x4c/0x5c [ 38.890725][ T4919] el0_svc+0x64/0x260 [ 38.891384][ T4919] el0t_64_sync_handler+0x48/0x148 [ 38.892220][ T4919] el0t_64_sync+0x198/0x19c [ 39.384127][ T50] Bluetooth: hci0: command tx timeout 1970/01/01 00:00:40 executed programs: 82 [ 41.464155][ T50] Bluetooth: hci0: command tx timeout [ 43.544469][ T50] Bluetooth: hci0: command tx timeout 1970/01/01 00:00:45 executed programs: 382