Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs 1970/01/01 00:00:29 serving rpc on tcp://45055 [ 31.042398][ T4723] cgroup: Unknown subsys name 'net' [ 31.192387][ T4723] cgroup: Unknown subsys name 'cpuset' [ 31.194501][ T4723] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.356736][ T4723] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.504228][ T4732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.943048][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.943073][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.980663][ T3751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.982469][ T3751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.241723][ T4772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.243964][ T4772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.244871][ T4772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.245216][ T4772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.245417][ T4772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.943915][ T4789] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.944200][ T4789] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.944263][ T4789] bridge_slave_0: entered allmulticast mode [ 34.944740][ T4789] bridge_slave_0: entered promiscuous mode [ 34.946422][ T4789] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.946444][ T4789] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.946526][ T4789] bridge_slave_1: entered allmulticast mode [ 34.946932][ T4789] bridge_slave_1: entered promiscuous mode [ 34.954865][ T4789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.955756][ T4789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.972404][ T4789] team0: Port device team_slave_0 added [ 34.973131][ T4789] team0: Port device team_slave_1 added [ 34.983113][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.983131][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.983145][ T4789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.983851][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.983859][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.983874][ T4789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.001523][ T4789] hsr_slave_0: entered promiscuous mode [ 35.001860][ T4789] hsr_slave_1: entered promiscuous mode [ 35.047449][ T4789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.050554][ T4789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.051581][ T4789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.052723][ T4789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.055133][ T4789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.057335][ T4789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.058901][ T4789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.062683][ T4789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.084548][ T4789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.089262][ T4789] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.092428][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.092480][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.093373][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.093394][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.194034][ T4789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.205166][ T4789] veth0_vlan: entered promiscuous mode [ 35.207231][ T4789] veth1_vlan: entered promiscuous mode [ 35.215479][ T4789] veth0_macvtap: entered promiscuous mode [ 35.216784][ T4789] veth1_macvtap: entered promiscuous mode [ 35.220628][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.224158][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.226072][ T1169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.226209][ T1169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.226307][ T1169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.226368][ T1169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.346886][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.413857][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:35 executed programs: 0 [ 35.467287][ T4772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.467642][ T4772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.467900][ T4772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.468242][ T4772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.468440][ T4772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.495122][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.524271][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.605284][ T4827] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.605371][ T4827] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.605420][ T4827] bridge_slave_0: entered allmulticast mode [ 35.605822][ T4827] bridge_slave_0: entered promiscuous mode [ 35.606630][ T4827] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.606650][ T4827] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.606692][ T4827] bridge_slave_1: entered allmulticast mode [ 35.607136][ T4827] bridge_slave_1: entered promiscuous mode [ 35.614403][ T4827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.615672][ T4827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.621583][ T4827] team0: Port device team_slave_0 added [ 35.622291][ T4827] team0: Port device team_slave_1 added [ 35.628448][ T4827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.628471][ T4827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.628487][ T4827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.628976][ T4827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.628983][ T4827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.628998][ T4827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.639353][ T4827] hsr_slave_0: entered promiscuous mode [ 35.639629][ T4827] hsr_slave_1: entered promiscuous mode [ 35.639811][ T4827] debugfs: 'hsr0' already exists in 'hsr' [ 35.639854][ T4827] Cannot create hsr debugfs directory [ 37.531239][ T4772] Bluetooth: hci0: command tx timeout [ 38.974534][ T12] bridge_slave_1: left allmulticast mode [ 38.974573][ T12] bridge_slave_1: left promiscuous mode [ 38.974820][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.977731][ T12] bridge_slave_0: left allmulticast mode [ 38.977743][ T12] bridge_slave_0: left promiscuous mode [ 38.977810][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.030826][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.053209][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.101714][ T12] bond0 (unregistering): Released all slaves [ 39.141135][ T12] hsr_slave_0: left promiscuous mode [ 39.142725][ T12] hsr_slave_1: left promiscuous mode [ 39.143011][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.143033][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.147147][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.148622][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.157733][ T12] veth1_macvtap: left promiscuous mode [ 39.158848][ T12] veth0_macvtap: left promiscuous mode [ 39.160081][ T12] veth1_vlan: left promiscuous mode [ 39.161618][ T12] veth0_vlan: left promiscuous mode [ 39.247357][ T12] team0 (unregistering): Port device team_slave_1 removed [ 39.251186][ T12] team0 (unregistering): Port device team_slave_0 removed [ 39.294877][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.611165][ T4772] Bluetooth: hci0: command tx timeout [ 39.618933][ T4827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.622015][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.625799][ T4827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.628077][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.629808][ T4827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.632846][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.634510][ T4827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.637635][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.662162][ T4827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.667130][ T4827] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.670028][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.670068][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.678362][ T4827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.678390][ T4827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.680030][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.680064][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.763188][ T4827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.774769][ T4827] veth0_vlan: entered promiscuous mode [ 39.776654][ T4827] veth1_vlan: entered promiscuous mode [ 39.786459][ T4827] veth0_macvtap: entered promiscuous mode [ 39.787597][ T4827] veth1_macvtap: entered promiscuous mode [ 39.791582][ T4827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.792668][ T4827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.796196][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.796239][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.796264][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.796283][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.818689][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.820017][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.824909][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.824934][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.878913][ T4927] [ 39.879353][ T4927] ====================================================== [ 39.880517][ T4927] WARNING: possible circular locking dependency detected [ 39.881707][ T4927] syzkaller #0 Not tainted [ 39.882503][ T4927] ------------------------------------------------------ [ 39.883780][ T4927] syz.0.18/4927 is trying to acquire lock: [ 39.884743][ T4927] ffff80008970de48 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_extension_allow_link+0x70/0x1f8 [ 39.886625][ T4927] [ 39.886625][ T4927] but task is already holding lock: [ 39.887857][ T4927] ffff0000ee63e740 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: configfs_symlink+0x394/0xde0 [ 39.889601][ T4927] [ 39.889601][ T4927] which lock already depends on the new lock. [ 39.889601][ T4927] [ 39.891360][ T4927] [ 39.891360][ T4927] the existing dependency chain (in reverse order) is: [ 39.892915][ T4927] [ 39.892915][ T4927] -> #2 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}: [ 39.894410][ T4927] down_write+0x50/0xc0 [ 39.895186][ T4927] configfs_depend_item_unlocked+0x154/0x344 [ 39.896300][ T4927] usbg_make_tpg+0x230/0x4b4 [ 39.897142][ T4927] target_fabric_make_tpg+0x98/0x518 [ 39.898194][ T4927] configfs_mkdir+0x374/0x7d4 [ 39.899077][ T4927] vfs_mkdir+0x2dc/0x464 [ 39.899837][ T4927] filename_mkdirat+0x228/0x3f4 [ 39.900723][ T4927] __arm64_sys_mkdirat+0x94/0xb8 [ 39.901588][ T4927] invoke_syscall+0x98/0x244 [ 39.902396][ T4927] el0_svc_common+0xec/0x23c [ 39.903217][ T4927] do_el0_svc+0x4c/0x5c [ 39.903994][ T4927] el0_svc+0x64/0x260 [ 39.904758][ T4927] el0t_64_sync_handler+0x48/0x148 [ 39.905762][ T4927] el0t_64_sync+0x198/0x19c [ 39.906647][ T4927] [ 39.906647][ T4927] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 39.907933][ T4927] __mutex_lock+0x164/0xf14 [ 39.908762][ T4927] mutex_lock_nested+0x24/0x30 [ 39.909641][ T4927] tcm_set_name+0x34/0xd0 [ 39.910470][ T4927] function_make+0x18c/0x300 [ 39.911323][ T4927] configfs_mkdir+0x374/0x7d4 [ 39.912200][ T4927] vfs_mkdir+0x2dc/0x464 [ 39.913015][ T4927] filename_mkdirat+0x228/0x3f4 [ 39.913966][ T4927] __arm64_sys_mkdirat+0x94/0xb8 [ 39.914870][ T4927] invoke_syscall+0x98/0x244 [ 39.915752][ T4927] el0_svc_common+0xec/0x23c [ 39.916609][ T4927] do_el0_svc+0x4c/0x5c [ 39.917451][ T4927] el0_svc+0x64/0x260 [ 39.918274][ T4927] el0t_64_sync_handler+0x48/0x148 [ 39.919216][ T4927] el0t_64_sync+0x198/0x19c [ 39.920063][ T4927] [ 39.920063][ T4927] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 39.921454][ T4927] __lock_acquire+0x17c0/0x2ebc [ 39.922364][ T4927] lock_acquire+0x140/0x364 [ 39.923192][ T4927] __mutex_lock+0x164/0xf14 [ 39.924007][ T4927] mutex_lock_nested+0x24/0x30 [ 39.924886][ T4927] uvcg_extension_allow_link+0x70/0x1f8 [ 39.925908][ T4927] configfs_symlink+0x478/0xde0 [ 39.926818][ T4927] vfs_symlink+0x16c/0x290 [ 39.927622][ T4927] filename_symlinkat+0x18c/0x328 [ 39.928560][ T4927] __arm64_sys_symlinkat+0xa8/0xd4 [ 39.929516][ T4927] invoke_syscall+0x98/0x244 [ 39.930367][ T4927] el0_svc_common+0xec/0x23c [ 39.931228][ T4927] do_el0_svc+0x4c/0x5c [ 39.932015][ T4927] el0_svc+0x64/0x260 [ 39.932780][ T4927] el0t_64_sync_handler+0x48/0x148 [ 39.933721][ T4927] el0t_64_sync+0x198/0x19c [ 39.934591][ T4927] [ 39.934591][ T4927] other info that might help us debug this: [ 39.934591][ T4927] [ 39.936310][ T4927] Chain exists of: [ 39.936310][ T4927] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#23 [ 39.936310][ T4927] [ 39.938886][ T4927] Possible unsafe locking scenario: [ 39.938886][ T4927] [ 39.940179][ T4927] CPU0 CPU1 [ 39.941086][ T4927] ---- ---- [ 39.941991][ T4927] lock(&sb->s_type->i_mutex_key#23); [ 39.942911][ T4927] lock(&opts->dep_lock); [ 39.944020][ T4927] lock(&sb->s_type->i_mutex_key#23); [ 39.945328][ T4927] lock(gadget_subsys.su_mutex); [ 39.946135][ T4927] [ 39.946135][ T4927] *** DEADLOCK *** [ 39.946135][ T4927] [ 39.947450][ T4927] 2 locks held by syz.0.18/4927: [ 39.948256][ T4927] #0: ffff0000c41fa450 (sb_writers#11){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 39.949874][ T4927] #1: ffff0000ee63e740 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: configfs_symlink+0x394/0xde0 [ 39.951834][ T4927] [ 39.951834][ T4927] stack backtrace: [ 39.952900][ T4927] CPU: 0 UID: 0 PID: 4927 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT [ 39.954283][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 39.955947][ T4927] Call trace: [ 39.956497][ T4927] show_stack+0x2c/0x3c (C) [ 39.957267][ T4927] __dump_stack+0x30/0x40 [ 39.958003][ T4927] dump_stack_lvl+0xd8/0x12c [ 39.958774][ T4927] dump_stack+0x1c/0x28 [ 39.959447][ T4927] print_circular_bug+0x328/0x330 [ 39.960278][ T4927] check_noncircular+0x158/0x174 [ 39.961089][ T4927] __lock_acquire+0x17c0/0x2ebc [ 39.961895][ T4927] lock_acquire+0x140/0x364 [ 39.962695][ T4927] __mutex_lock+0x164/0xf14 [ 39.963441][ T4927] mutex_lock_nested+0x24/0x30 [ 39.964240][ T4927] uvcg_extension_allow_link+0x70/0x1f8 [ 39.965133][ T4927] configfs_symlink+0x478/0xde0 [ 39.965922][ T4927] vfs_symlink+0x16c/0x290 [ 39.966636][ T4927] filename_symlinkat+0x18c/0x328 [ 39.967518][ T4927] __arm64_sys_symlinkat+0xa8/0xd4 [ 39.968356][ T4927] invoke_syscall+0x98/0x244 [ 39.969126][ T4927] el0_svc_common+0xec/0x23c [ 39.969891][ T4927] do_el0_svc+0x4c/0x5c [ 39.970584][ T4927] el0_svc+0x64/0x260 [ 39.971253][ T4927] el0t_64_sync_handler+0x48/0x148 [ 39.972109][ T4927] el0t_64_sync+0x198/0x19c 1970/01/01 00:00:40 executed programs: 31 [ 41.691119][ T4772] Bluetooth: hci0: command tx timeout [ 43.771056][ T4772] Bluetooth: hci0: command tx timeout 1970/01/01 00:00:45 executed programs: 319