Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://44095 [ 31.081787][ T4719] cgroup: Unknown subsys name 'net' [ 31.211760][ T4719] cgroup: Unknown subsys name 'cpuset' [ 31.213903][ T4719] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.369080][ T4719] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 34.243083][ T4729] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.066450][ T4762] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.066746][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.066833][ T4762] bridge_slave_0: entered allmulticast mode [ 35.067297][ T4762] bridge_slave_0: entered promiscuous mode [ 35.068873][ T4762] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.068924][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.068973][ T4762] bridge_slave_1: entered allmulticast mode [ 35.069423][ T4762] bridge_slave_1: entered promiscuous mode [ 35.077184][ T4762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.078081][ T4762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.085788][ T4762] team0: Port device team_slave_0 added [ 35.086520][ T4762] team0: Port device team_slave_1 added [ 35.094536][ T4762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.094559][ T4762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.094572][ T4762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.095306][ T4762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.095314][ T4762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.095327][ T4762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.105383][ T4762] hsr_slave_0: entered promiscuous mode [ 35.105700][ T4762] hsr_slave_1: entered promiscuous mode [ 35.151586][ T4762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.154624][ T4762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.155298][ T4762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.157046][ T4762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.157368][ T4762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.159191][ T4762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.159919][ T4762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.162300][ T4762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.171663][ T4762] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.171716][ T4762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.171878][ T4762] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.171906][ T4762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.189601][ T4762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.194298][ T1331] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.195645][ T1331] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.199752][ T4762] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.203589][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.203638][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.208207][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.208247][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.219163][ T4762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.219944][ T4762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.303949][ T4762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.315967][ T4762] veth0_vlan: entered promiscuous mode [ 35.322977][ T4762] veth1_vlan: entered promiscuous mode [ 35.331985][ T4762] veth0_macvtap: entered promiscuous mode [ 35.333165][ T4762] veth1_macvtap: entered promiscuous mode [ 35.337648][ T4762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.338848][ T4762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.340805][ T1331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.343530][ T1331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.344481][ T1331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.344544][ T1331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.418412][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.470608][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.476660][ T4804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.477415][ T4804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.477614][ T4804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.477948][ T4804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.478148][ T4804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.544839][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.572215][ T796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.573909][ T796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.582348][ T796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.583909][ T796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.607574][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:36 executed programs: 0 [ 36.094489][ T4737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.094946][ T4737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.095126][ T4737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.095460][ T4737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.095664][ T4737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.229994][ T4825] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.230571][ T4825] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.230691][ T4825] bridge_slave_0: entered allmulticast mode [ 36.231147][ T4825] bridge_slave_0: entered promiscuous mode [ 36.232199][ T4825] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.232249][ T4825] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.232310][ T4825] bridge_slave_1: entered allmulticast mode [ 36.232718][ T4825] bridge_slave_1: entered promiscuous mode [ 36.241231][ T4825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.242241][ T4825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.248452][ T4825] team0: Port device team_slave_0 added [ 36.249234][ T4825] team0: Port device team_slave_1 added [ 36.257098][ T4825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.257132][ T4825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.257148][ T4825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.257656][ T4825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.257662][ T4825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.257677][ T4825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.267472][ T4825] hsr_slave_0: entered promiscuous mode [ 36.267775][ T4825] hsr_slave_1: entered promiscuous mode [ 36.267996][ T4825] debugfs: 'hsr0' already exists in 'hsr' [ 36.268051][ T4825] Cannot create hsr debugfs directory [ 38.170824][ T4804] Bluetooth: hci0: command tx timeout [ 38.471344][ T40] bridge_slave_1: left allmulticast mode [ 38.472593][ T40] bridge_slave_1: left promiscuous mode [ 38.474469][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.477952][ T40] bridge_slave_0: left allmulticast mode [ 38.477983][ T40] bridge_slave_0: left promiscuous mode [ 38.478107][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.531617][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.561871][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.601025][ T40] bond0 (unregistering): Released all slaves [ 38.651738][ T40] hsr_slave_0: left promiscuous mode [ 38.652815][ T40] hsr_slave_1: left promiscuous mode [ 38.653105][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.653121][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.653583][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.653593][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.657265][ T40] veth1_macvtap: left promiscuous mode [ 38.657294][ T40] veth0_macvtap: left promiscuous mode [ 38.657341][ T40] veth1_vlan: left promiscuous mode [ 38.657387][ T40] veth0_vlan: left promiscuous mode [ 38.757884][ T40] team0 (unregistering): Port device team_slave_1 removed [ 38.762397][ T40] team0 (unregistering): Port device team_slave_0 removed [ 38.804934][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.051353][ T4825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.053804][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.054449][ T4825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.056802][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.058424][ T4825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.066741][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.068541][ T4825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.071038][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.214392][ T4825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.227576][ T4825] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.231115][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.231163][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.235303][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.235348][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.385029][ T4825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.407627][ T4825] veth0_vlan: entered promiscuous mode [ 39.465743][ T4825] veth1_vlan: entered promiscuous mode [ 39.473674][ T4825] veth0_macvtap: entered promiscuous mode [ 39.475053][ T4825] veth1_macvtap: entered promiscuous mode [ 39.479438][ T4825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.481993][ T4825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.486404][ T1331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.486450][ T1331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.486468][ T1331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.486482][ T1331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556161][ T796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.556187][ T796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.563497][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.563528][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.624480][ T4921] [ 39.624996][ T4921] ====================================================== [ 39.626236][ T4921] WARNING: possible circular locking dependency detected [ 39.627489][ T4921] syzkaller #0 Not tainted [ 39.628216][ T4921] ------------------------------------------------------ [ 39.629312][ T4921] syz.0.18/4921 is trying to acquire lock: [ 39.630232][ T4921] ffff0000c1534140 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: configfs_depend_item_unlocked+0x154/0x344 [ 39.632214][ T4921] [ 39.632214][ T4921] but task is already holding lock: [ 39.633548][ T4921] ffff0000d1560518 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x188/0x4b4 [ 39.635211][ T4921] [ 39.635211][ T4921] which lock already depends on the new lock. [ 39.635211][ T4921] [ 39.636958][ T4921] [ 39.636958][ T4921] the existing dependency chain (in reverse order) is: [ 39.638504][ T4921] [ 39.638504][ T4921] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 39.639913][ T4921] __mutex_lock+0x164/0xf14 [ 39.640782][ T4921] mutex_lock_nested+0x24/0x30 [ 39.641719][ T4921] tcm_set_name+0x34/0xd0 [ 39.642574][ T4921] function_make+0x18c/0x300 [ 39.643445][ T4921] configfs_mkdir+0x374/0x7d4 [ 39.644315][ T4921] vfs_mkdir+0x2dc/0x464 [ 39.645107][ T4921] filename_mkdirat+0x228/0x3f4 [ 39.646233][ T4921] __arm64_sys_mkdirat+0x94/0xb8 [ 39.647304][ T4921] invoke_syscall+0x98/0x244 [ 39.648302][ T4921] el0_svc_common+0xec/0x23c [ 39.649274][ T4921] do_el0_svc+0x4c/0x5c [ 39.650172][ T4921] el0_svc+0x64/0x260 [ 39.651033][ T4921] el0t_64_sync_handler+0x48/0x148 [ 39.652067][ T4921] el0t_64_sync+0x198/0x19c [ 39.652978][ T4921] [ 39.652978][ T4921] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 39.654497][ T4921] __mutex_lock+0x164/0xf14 [ 39.655398][ T4921] mutex_lock_nested+0x24/0x30 [ 39.656323][ T4921] configfs_rmdir+0x548/0x6b8 [ 39.657200][ T4921] vfs_rmdir+0x354/0x590 [ 39.658016][ T4921] filename_rmdir+0x208/0x3d0 [ 39.658917][ T4921] __arm64_sys_unlinkat+0xc8/0x104 [ 39.659900][ T4921] invoke_syscall+0x98/0x244 [ 39.660805][ T4921] el0_svc_common+0xec/0x23c [ 39.661711][ T4921] do_el0_svc+0x4c/0x5c [ 39.662577][ T4921] el0_svc+0x64/0x260 [ 39.663382][ T4921] el0t_64_sync_handler+0x48/0x148 [ 39.664389][ T4921] el0t_64_sync+0x198/0x19c [ 39.665295][ T4921] [ 39.665295][ T4921] -> #0 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}: [ 39.666838][ T4921] __lock_acquire+0x17c0/0x2ebc [ 39.667762][ T4921] lock_acquire+0x140/0x364 [ 39.668609][ T4921] down_write+0x50/0xc0 [ 39.669429][ T4921] configfs_depend_item_unlocked+0x154/0x344 [ 39.670577][ T4921] usbg_make_tpg+0x230/0x4b4 [ 39.671447][ T4921] target_fabric_make_tpg+0x98/0x518 [ 39.672468][ T4921] configfs_mkdir+0x374/0x7d4 [ 39.673360][ T4921] vfs_mkdir+0x2dc/0x464 [ 39.674179][ T4921] filename_mkdirat+0x228/0x3f4 [ 39.675120][ T4921] __arm64_sys_mkdirat+0x94/0xb8 [ 39.676042][ T4921] invoke_syscall+0x98/0x244 [ 39.676940][ T4921] el0_svc_common+0xec/0x23c [ 39.677856][ T4921] do_el0_svc+0x4c/0x5c [ 39.678660][ T4921] el0_svc+0x64/0x260 [ 39.679420][ T4921] el0t_64_sync_handler+0x48/0x148 [ 39.680347][ T4921] el0t_64_sync+0x198/0x19c [ 39.681214][ T4921] [ 39.681214][ T4921] other info that might help us debug this: [ 39.681214][ T4921] [ 39.683066][ T4921] Chain exists of: [ 39.683066][ T4921] &sb->s_type->i_mutex_key#23 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 39.683066][ T4921] [ 39.685680][ T4921] Possible unsafe locking scenario: [ 39.685680][ T4921] [ 39.687018][ T4921] CPU0 CPU1 [ 39.688024][ T4921] ---- ---- [ 39.689019][ T4921] lock(&opts->dep_lock); [ 39.689852][ T4921] lock(gadget_subsys.su_mutex); [ 39.691191][ T4921] lock(&opts->dep_lock); [ 39.692418][ T4921] lock(&sb->s_type->i_mutex_key#23); [ 39.693383][ T4921] [ 39.693383][ T4921] *** DEADLOCK *** [ 39.693383][ T4921] [ 39.694833][ T4921] 5 locks held by syz.0.18/4921: [ 39.695693][ T4921] #0: ffff0000c4212450 (sb_writers#11){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 39.697325][ T4921] #1: ffff0000da504600 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: __start_dirop+0xa0/0xf4 [ 39.699148][ T4921] #2: ffff800089463088 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x334/0x7d4 [ 39.700869][ T4921] #3: ffff80008975ba00 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x14c/0x4b4 [ 39.702643][ T4921] #4: ffff0000d1560518 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x188/0x4b4 [ 39.704409][ T4921] [ 39.704409][ T4921] stack backtrace: [ 39.705423][ T4921] CPU: 1 UID: 0 PID: 4921 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT [ 39.706893][ T4921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 39.708629][ T4921] Call trace: [ 39.709205][ T4921] show_stack+0x2c/0x3c (C) [ 39.710004][ T4921] __dump_stack+0x30/0x40 [ 39.710772][ T4921] dump_stack_lvl+0xd8/0x12c [ 39.711609][ T4921] dump_stack+0x1c/0x28 [ 39.712344][ T4921] print_circular_bug+0x328/0x330 [ 39.713232][ T4921] check_noncircular+0x158/0x174 [ 39.714108][ T4921] __lock_acquire+0x17c0/0x2ebc [ 39.714961][ T4921] lock_acquire+0x140/0x364 [ 39.715759][ T4921] down_write+0x50/0xc0 [ 39.716507][ T4921] configfs_depend_item_unlocked+0x154/0x344 [ 39.717575][ T4921] usbg_make_tpg+0x230/0x4b4 [ 39.718394][ T4921] target_fabric_make_tpg+0x98/0x518 [ 39.719359][ T4921] configfs_mkdir+0x374/0x7d4 [ 39.720139][ T4921] vfs_mkdir+0x2dc/0x464 [ 39.720883][ T4921] filename_mkdirat+0x228/0x3f4 [ 39.721743][ T4921] __arm64_sys_mkdirat+0x94/0xb8 [ 39.722605][ T4921] invoke_syscall+0x98/0x244 [ 39.723409][ T4921] el0_svc_common+0xec/0x23c [ 39.724202][ T4921] do_el0_svc+0x4c/0x5c [ 39.724940][ T4921] el0_svc+0x64/0x260 [ 39.725633][ T4921] el0t_64_sync_handler+0x48/0x148 [ 39.726516][ T4921] el0t_64_sync+0x198/0x19c [ 40.250414][ T4804] Bluetooth: hci0: command tx timeout 1970/01/01 00:00:41 executed programs: 79 [ 42.330209][ T4804] Bluetooth: hci0: command tx timeout [ 44.410311][ T4804] Bluetooth: hci0: command tx timeout 1970/01/01 00:00:46 executed programs: 364