[ 91.953169][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. 2026/07/25 14:10:43 parsed 1 programs 2026/07/25 14:10:43 serving rpc on tcp://42315 [ 99.898975][ T5610] cgroup: Unknown subsys name 'net' [ 100.141251][ T5610] cgroup: Unknown subsys name 'cpuset' [ 100.185346][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.159262][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.807329][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.808491][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.808689][ T5662] bridge_slave_0: entered allmulticast mode [ 109.811355][ T5662] bridge_slave_0: entered promiscuous mode [ 109.843608][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.843909][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.844135][ T5662] bridge_slave_1: entered allmulticast mode [ 109.864211][ T5662] bridge_slave_1: entered promiscuous mode [ 109.926028][ T5662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.931679][ T5662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.987989][ T5662] team0: Port device team_slave_0 added [ 109.991945][ T5662] team0: Port device team_slave_1 added [ 110.118134][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.118151][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.118171][ T5662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.122431][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.122444][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.122464][ T5662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.281898][ T5662] hsr_slave_0: entered promiscuous mode [ 110.283843][ T5662] hsr_slave_1: entered promiscuous mode [ 110.592215][ T5662] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.633816][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.638713][ T5662] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.663328][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.937048][ T5662] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.961945][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.964662][ T5662] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.010074][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.337596][ T5662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.386101][ T5662] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.410613][ T1417] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.410765][ T1417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.471632][ T1417] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.471785][ T1417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.258029][ T5662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.422558][ T5662] veth0_vlan: entered promiscuous mode [ 112.506779][ T5662] veth1_vlan: entered promiscuous mode [ 112.590264][ T5662] veth0_macvtap: entered promiscuous mode [ 112.610027][ T5662] veth1_macvtap: entered promiscuous mode [ 112.647286][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.686111][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.720048][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.737716][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.756789][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.758089][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.530897][ T70] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.228093][ T70] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.589507][ T70] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.651350][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.689821][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.691058][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.692592][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.693333][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.104659][ T70] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.825887][ T70] bridge_slave_1: left allmulticast mode [ 115.826059][ T70] bridge_slave_1: left promiscuous mode [ 115.851244][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.036694][ T70] bridge_slave_0: left allmulticast mode [ 116.036731][ T70] bridge_slave_0: left promiscuous mode [ 116.036994][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.835590][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.915573][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.957298][ T70] bond0 (unregistering): Released all slaves [ 117.002497][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 117.133160][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.133179][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.237934][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.237953][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.605803][ T70] hsr_slave_0: left promiscuous mode [ 117.646208][ T70] hsr_slave_1: left promiscuous mode [ 117.649585][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.649693][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.699764][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.699794][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.796688][ T70] veth1_macvtap: left promiscuous mode [ 117.798043][ T70] veth0_macvtap: left promiscuous mode [ 117.798379][ T70] veth1_vlan: left promiscuous mode [ 117.798699][ T70] veth0_vlan: left promiscuous mode [ 118.535852][ T70] team0 (unregistering): Port device team_slave_1 removed [ 118.575612][ T70] team0 (unregistering): Port device team_slave_0 removed [ 118.775682][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2 [ 119.698649][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3 2026/07/25 14:11:07 executed programs: 0 [ 119.873878][ T4907] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.907488][ T4907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.912509][ T4907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.914128][ T4907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.942971][ T4907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.933968][ T5253] 8021q: adding VLAN 0 to HW filter on device eth4 [ 121.563174][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.563619][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.563906][ T5775] bridge_slave_0: entered allmulticast mode [ 121.570116][ T5775] bridge_slave_0: entered promiscuous mode [ 121.596619][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.596935][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.597154][ T5775] bridge_slave_1: entered allmulticast mode [ 121.599743][ T5775] bridge_slave_1: entered promiscuous mode [ 121.665862][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.671510][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.726803][ T5775] team0: Port device team_slave_0 added [ 121.730909][ T5775] team0: Port device team_slave_1 added [ 121.784630][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.784643][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.784661][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.836751][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.836765][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.836784][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.938588][ T5775] hsr_slave_0: entered promiscuous mode [ 121.941715][ T5775] hsr_slave_1: entered promiscuous mode [ 122.016750][ T60] Bluetooth: hci0: command tx timeout [ 124.096357][ T60] Bluetooth: hci0: command tx timeout [ 124.756965][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.790994][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.804645][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.853077][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.854648][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.931337][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.933262][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.963513][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.291171][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.340050][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.364602][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.379730][ T1425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.417169][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.417368][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.177188][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.186538][ T60] Bluetooth: hci0: command tx timeout [ 126.332997][ T5775] veth0_vlan: entered promiscuous mode [ 126.395063][ T5775] veth1_vlan: entered promiscuous mode [ 126.473710][ T5775] veth0_macvtap: entered promiscuous mode [ 126.489002][ T5775] veth1_macvtap: entered promiscuous mode [ 126.568542][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.604996][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.644163][ T1425] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.651431][ T1425] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.651473][ T1425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.651509][ T1425] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.207306][ T1425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.207327][ T1425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.280700][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.280723][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/25 14:11:15 executed programs: 2 [ 127.530950][ T5939] [ 127.530962][ T5939] ====================================================== [ 127.530970][ T5939] WARNING: possible circular locking dependency detected [ 127.530989][ T5939] syzkaller #0 Not tainted [ 127.530998][ T5939] ------------------------------------------------------ [ 127.531005][ T5939] syz.0.18/5939 is trying to acquire lock: [ 127.531016][ T5939] ffff8880231686e0 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: configfs_depend_item_unlocked+0x153/0x420 [ 127.531080][ T5939] [ 127.531080][ T5939] but task is already holding lock: [ 127.531086][ T5939] ffff888047115110 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x147/0x590 [ 127.531139][ T5939] [ 127.531139][ T5939] which lock already depends on the new lock. [ 127.531139][ T5939] [ 127.531146][ T5939] [ 127.531146][ T5939] the existing dependency chain (in reverse order) is: [ 127.531153][ T5939] [ 127.531153][ T5939] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 127.531180][ T5939] mutex_lock_nested+0x5a/0x1d0 [ 127.531204][ T5939] tcm_set_name+0x2b/0xd0 [ 127.531220][ T5939] function_make+0x1a8/0x360 [ 127.531245][ T5939] configfs_mkdir+0x4f6/0x9e0 [ 127.531267][ T5939] vfs_mkdir+0x408/0x620 [ 127.531292][ T5939] filename_mkdirat+0x289/0x520 [ 127.531316][ T5939] __se_sys_mkdirat+0x35/0x150 [ 127.531340][ T5939] do_syscall_64+0x17b/0x530 [ 127.531358][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.531377][ T5939] [ 127.531377][ T5939] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 127.531405][ T5939] mutex_lock_nested+0x5a/0x1d0 [ 127.531430][ T5939] configfs_rmdir+0x5f0/0x950 [ 127.531452][ T5939] vfs_rmdir+0x3e9/0x6b0 [ 127.531478][ T5939] filename_rmdir+0x292/0x520 [ 127.531503][ T5939] __se_sys_unlinkat+0x71/0x1a0 [ 127.531531][ T5939] do_syscall_64+0x17b/0x530 [ 127.531549][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.531568][ T5939] [ 127.531568][ T5939] -> #0 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}: [ 127.531600][ T5939] __lock_acquire+0x15ff/0x2e40 [ 127.531617][ T5939] lock_acquire+0x115/0x350 [ 127.531646][ T5939] down_write+0x3a/0x50 [ 127.531664][ T5939] configfs_depend_item_unlocked+0x153/0x420 [ 127.531689][ T5939] usbg_make_tpg+0x1f6/0x590 [ 127.531716][ T5939] target_fabric_make_tpg+0xa8/0x6d0 [ 127.531743][ T5939] configfs_mkdir+0x4f6/0x9e0 [ 127.531783][ T5939] vfs_mkdir+0x408/0x620 [ 127.531807][ T5939] filename_mkdirat+0x289/0x520 [ 127.531833][ T5939] __se_sys_mkdirat+0x35/0x150 [ 127.531858][ T5939] do_syscall_64+0x17b/0x530 [ 127.531877][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.531897][ T5939] [ 127.531897][ T5939] other info that might help us debug this: [ 127.531897][ T5939] [ 127.531904][ T5939] Chain exists of: [ 127.531904][ T5939] &sb->s_type->i_mutex_key#23 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 127.531904][ T5939] [ 127.531947][ T5939] Possible unsafe locking scenario: [ 127.531947][ T5939] [ 127.531953][ T5939] CPU0 CPU1 [ 127.531960][ T5939] ---- ---- [ 127.531967][ T5939] lock(&opts->dep_lock); [ 127.531982][ T5939] lock(gadget_subsys.su_mutex); [ 127.531998][ T5939] lock(&opts->dep_lock); [ 127.532014][ T5939] lock(&sb->s_type->i_mutex_key#23); [ 127.532035][ T5939] [ 127.532035][ T5939] *** DEADLOCK *** [ 127.532035][ T5939] [ 127.532040][ T5939] locks held by syz.0.18/5939: 5, last CPU#1: [ 127.532056][ T5939] #0: ffff88801c7d6510 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 127.532116][ T5939] #1: ffff88803d9f11b0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 127.532182][ T5939] #2: ffffffff8eea86e0 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b0/0x9e0 [ 127.532236][ T5939] #3: ffffffff8f1defd8 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0xf7/0x590 [ 127.532294][ T5939] #4: ffff888047115110 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x147/0x590 [ 127.532354][ T5939] [ 127.532354][ T5939] stack backtrace: [ 127.532379][ T5939] CPU: 1 UID: 0 PID: 5939 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.532403][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 127.532424][ T5939] Call Trace: [ 127.532431][ T5939] [ 127.532440][ T5939] dump_stack_lvl+0xe8/0x150 [ 127.532467][ T5939] print_circular_bug+0x2e2/0x300 [ 127.532495][ T5939] check_noncircular+0x12f/0x150 [ 127.532524][ T5939] __lock_acquire+0x15ff/0x2e40 [ 127.532557][ T5939] lock_acquire+0x115/0x350 [ 127.532588][ T5939] ? configfs_depend_item_unlocked+0x153/0x420 [ 127.532621][ T5939] down_write+0x3a/0x50 [ 127.532643][ T5939] ? configfs_depend_item_unlocked+0x153/0x420 [ 127.532670][ T5939] configfs_depend_item_unlocked+0x153/0x420 [ 127.532699][ T5939] usbg_make_tpg+0x1f6/0x590 [ 127.532741][ T5939] ? __pfx_usbg_make_tpg+0x10/0x10 [ 127.532774][ T5939] ? lockdep_hardirqs_on+0x7a/0x110 [ 127.532796][ T5939] target_fabric_make_tpg+0xa8/0x6d0 [ 127.532819][ T5939] configfs_mkdir+0x4f6/0x9e0 [ 127.532845][ T5939] ? __pfx_current_check_access_path+0x10/0x10 [ 127.532873][ T5939] ? __pfx_configfs_mkdir+0x10/0x10 [ 127.532898][ T5939] ? generic_permission+0x2bf/0x670 [ 127.532922][ T5939] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 127.532952][ T5939] vfs_mkdir+0x408/0x620 [ 127.532981][ T5939] filename_mkdirat+0x289/0x520 [ 127.533012][ T5939] ? __pfx_filename_mkdirat+0x10/0x10 [ 127.533038][ T5939] ? strncpy_from_user+0x150/0x2c0 [ 127.533064][ T5939] ? do_getname+0x151/0x250 [ 127.533097][ T5939] __se_sys_mkdirat+0x35/0x150 [ 127.533127][ T5939] do_syscall_64+0x17b/0x530 [ 127.533147][ T5939] ? irqentry_exit+0x10f/0x8f0 [ 127.533167][ T5939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.533188][ T5939] ? clear_bhb_loop+0x40/0x90 [ 127.533212][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.533234][ T5939] RIP: 0033:0x7f0364e7de99 [ 127.533258][ T5939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.533291][ T5939] RSP: 002b:00007ffed06636d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 127.533312][ T5939] RAX: ffffffffffffffda RBX: 00007f0365105fa0 RCX: 00007f0364e7de99 [ 127.533327][ T5939] RDX: 00000000000001ff RSI: 0000200000001000 RDI: ffffffffffffff9c [ 127.533342][ T5939] RBP: 00007f0364f13eaf R08: 0000000000000000 R09: 0000000000000000 [ 127.533355][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.533368][ T5939] R13: 00007f0365105fac R14: 00007f0365105fa0 R15: 00007f0365105fa0 [ 127.533390][ T5939] [ 128.255028][ T60] Bluetooth: hci0: command tx timeout 2026/07/25 14:11:20 executed programs: 59 [ 132.896269][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.896372][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 2026/07/25 14:11:25 executed programs: 126