Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs 1970/01/01 00:00:29 serving rpc on tcp://35321 [ 30.681301][ T4722] cgroup: Unknown subsys name 'net' [ 30.791398][ T4722] cgroup: Unknown subsys name 'cpuset' [ 30.793276][ T4722] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.962886][ T4722] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.292897][ T4730] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.710459][ T465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.710482][ T465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.727016][ T465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.728871][ T465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.046542][ T4770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.048923][ T4770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.050633][ T4770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.052230][ T4770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.054316][ T4770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.507838][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.507906][ T4785] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.507969][ T4785] bridge_slave_0: entered allmulticast mode [ 34.508441][ T4785] bridge_slave_0: entered promiscuous mode [ 34.509609][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.509655][ T4785] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.509698][ T4785] bridge_slave_1: entered allmulticast mode [ 34.510137][ T4785] bridge_slave_1: entered promiscuous mode [ 34.517474][ T4785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.518445][ T4785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.527835][ T4785] team0: Port device team_slave_0 added [ 34.528912][ T4785] team0: Port device team_slave_1 added [ 34.534861][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.534885][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.534900][ T4785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.535610][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.535618][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.535632][ T4785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.545805][ T4785] hsr_slave_0: entered promiscuous mode [ 34.546125][ T4785] hsr_slave_1: entered promiscuous mode [ 34.592982][ T4785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.595908][ T4785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.597753][ T4785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.600518][ T4785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.601218][ T4785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.602777][ T4785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.603175][ T4785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.605193][ T4785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.614205][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.614252][ T4785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.614396][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.614425][ T4785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.632924][ T4785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.637251][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.638726][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.643176][ T4785] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.646158][ T465] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.646213][ T465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.650593][ T465] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.650629][ T465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.742245][ T4785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.753194][ T4785] veth0_vlan: entered promiscuous mode [ 34.755353][ T4785] veth1_vlan: entered promiscuous mode [ 34.762640][ T4785] veth0_macvtap: entered promiscuous mode [ 34.763795][ T4785] veth1_macvtap: entered promiscuous mode [ 34.768798][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.773953][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.776789][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.777067][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.777122][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.777246][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.875524][ T3300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.949704][ T3300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:34 executed programs: 0 [ 34.997079][ T4770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.998535][ T4770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.999113][ T4770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.999493][ T4770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.999690][ T4770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.023227][ T3300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.048656][ T3300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.130181][ T4825] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.130249][ T4825] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.130471][ T4825] bridge_slave_0: entered allmulticast mode [ 35.130985][ T4825] bridge_slave_0: entered promiscuous mode [ 35.131963][ T4825] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.132362][ T4825] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.132464][ T4825] bridge_slave_1: entered allmulticast mode [ 35.132857][ T4825] bridge_slave_1: entered promiscuous mode [ 35.140190][ T4825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.141164][ T4825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.147985][ T4825] team0: Port device team_slave_0 added [ 35.148920][ T4825] team0: Port device team_slave_1 added [ 35.155204][ T4825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.155223][ T4825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.155237][ T4825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.155856][ T4825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.155864][ T4825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.155877][ T4825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.166418][ T4825] hsr_slave_0: entered promiscuous mode [ 35.166686][ T4825] hsr_slave_1: entered promiscuous mode [ 35.166871][ T4825] debugfs: 'hsr0' already exists in 'hsr' [ 35.166914][ T4825] Cannot create hsr debugfs directory [ 37.050331][ T4770] Bluetooth: hci0: command tx timeout [ 37.840708][ T3300] bridge_slave_1: left allmulticast mode [ 37.842199][ T3300] bridge_slave_1: left promiscuous mode [ 37.842553][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.850528][ T3300] bridge_slave_0: left allmulticast mode [ 37.850560][ T3300] bridge_slave_0: left promiscuous mode [ 37.850748][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.917075][ T3300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.957043][ T3300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.991109][ T3300] bond0 (unregistering): Released all slaves [ 37.995053][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 38.034100][ T3300] hsr_slave_0: left promiscuous mode [ 38.035421][ T3300] hsr_slave_1: left promiscuous mode [ 38.035693][ T3300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.035709][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.036753][ T3300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.036765][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.042579][ T3300] veth1_macvtap: left promiscuous mode [ 38.043584][ T3300] veth0_macvtap: left promiscuous mode [ 38.044589][ T3300] veth1_vlan: left promiscuous mode [ 38.045474][ T3300] veth0_vlan: left promiscuous mode [ 38.143418][ T3300] team0 (unregistering): Port device team_slave_1 removed [ 38.148554][ T3300] team0 (unregistering): Port device team_slave_0 removed [ 38.192425][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 38.408285][ T4825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.414840][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.416572][ T4825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.419252][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.421096][ T4825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.424742][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.427344][ T4825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.432243][ T4825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.454620][ T4825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.460116][ T4825] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.463183][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.463227][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.467021][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.467068][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.479429][ T4825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.482573][ T4825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.599581][ T4825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.612731][ T4825] veth0_vlan: entered promiscuous mode [ 38.616263][ T4825] veth1_vlan: entered promiscuous mode [ 38.628914][ T4825] veth0_macvtap: entered promiscuous mode [ 38.632682][ T4825] veth1_macvtap: entered promiscuous mode [ 38.637642][ T4825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.642201][ T4825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.648613][ T3300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.648666][ T3300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.648686][ T3300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.648701][ T3300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.672732][ T465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.672759][ T465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.679430][ T3300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.679468][ T3300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.741966][ T4946] [ 38.742420][ T4946] ====================================================== [ 38.743644][ T4946] WARNING: possible circular locking dependency detected [ 38.744850][ T4946] syzkaller #0 Not tainted [ 38.745584][ T4946] ------------------------------------------------------ [ 38.746694][ T4946] syz.0.18/4946 is trying to acquire lock: [ 38.747696][ T4946] ffff80008970de48 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_extension_allow_link+0x70/0x1f8 [ 38.749652][ T4946] [ 38.749652][ T4946] but task is already holding lock: [ 38.750958][ T4946] ffff0000ecb11dc0 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: configfs_symlink+0x394/0xde0 [ 38.752816][ T4946] [ 38.752816][ T4946] which lock already depends on the new lock. [ 38.752816][ T4946] [ 38.754675][ T4946] [ 38.754675][ T4946] the existing dependency chain (in reverse order) is: [ 38.756235][ T4946] [ 38.756235][ T4946] -> #2 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}: [ 38.757768][ T4946] down_write+0x50/0xc0 [ 38.758599][ T4946] configfs_depend_item_unlocked+0x154/0x344 [ 38.759660][ T4946] usbg_make_tpg+0x230/0x4b4 [ 38.760501][ T4946] target_fabric_make_tpg+0x98/0x518 [ 38.761408][ T4946] configfs_mkdir+0x374/0x7d4 [ 38.762243][ T4946] vfs_mkdir+0x2dc/0x464 [ 38.763041][ T4946] filename_mkdirat+0x228/0x3f4 [ 38.763916][ T4946] __arm64_sys_mkdirat+0x94/0xb8 [ 38.764798][ T4946] invoke_syscall+0x98/0x244 [ 38.765615][ T4946] el0_svc_common+0xec/0x23c [ 38.766463][ T4946] do_el0_svc+0x4c/0x5c [ 38.767229][ T4946] el0_svc+0x64/0x260 [ 38.767954][ T4946] el0t_64_sync_handler+0x48/0x148 [ 38.768845][ T4946] el0t_64_sync+0x198/0x19c [ 38.769653][ T4946] [ 38.769653][ T4946] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 38.770961][ T4946] __mutex_lock+0x164/0xf14 [ 38.771822][ T4946] mutex_lock_nested+0x24/0x30 [ 38.772756][ T4946] tcm_set_name+0x34/0xd0 [ 38.773579][ T4946] function_make+0x18c/0x300 [ 38.774449][ T4946] configfs_mkdir+0x374/0x7d4 [ 38.775273][ T4946] vfs_mkdir+0x2dc/0x464 [ 38.776042][ T4946] filename_mkdirat+0x228/0x3f4 [ 38.776955][ T4946] __arm64_sys_mkdirat+0x94/0xb8 [ 38.777829][ T4946] invoke_syscall+0x98/0x244 [ 38.778673][ T4946] el0_svc_common+0xec/0x23c [ 38.779492][ T4946] do_el0_svc+0x4c/0x5c [ 38.780265][ T4946] el0_svc+0x64/0x260 [ 38.780987][ T4946] el0t_64_sync_handler+0x48/0x148 [ 38.781907][ T4946] el0t_64_sync+0x198/0x19c [ 38.782667][ T4946] [ 38.782667][ T4946] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 38.784013][ T4946] __lock_acquire+0x17c0/0x2ebc [ 38.784903][ T4946] lock_acquire+0x140/0x364 [ 38.785734][ T4946] __mutex_lock+0x164/0xf14 [ 38.786574][ T4946] mutex_lock_nested+0x24/0x30 [ 38.787453][ T4946] uvcg_extension_allow_link+0x70/0x1f8 [ 38.788420][ T4946] configfs_symlink+0x478/0xde0 [ 38.789318][ T4946] vfs_symlink+0x16c/0x290 [ 38.790150][ T4946] filename_symlinkat+0x18c/0x328 [ 38.791092][ T4946] __arm64_sys_symlinkat+0xa8/0xd4 [ 38.792060][ T4946] invoke_syscall+0x98/0x244 [ 38.792920][ T4946] el0_svc_common+0xec/0x23c [ 38.793778][ T4946] do_el0_svc+0x4c/0x5c [ 38.794566][ T4946] el0_svc+0x64/0x260 [ 38.795338][ T4946] el0t_64_sync_handler+0x48/0x148 [ 38.796234][ T4946] el0t_64_sync+0x198/0x19c [ 38.797030][ T4946] [ 38.797030][ T4946] other info that might help us debug this: [ 38.797030][ T4946] [ 38.798663][ T4946] Chain exists of: [ 38.798663][ T4946] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#23 [ 38.798663][ T4946] [ 38.801016][ T4946] Possible unsafe locking scenario: [ 38.801016][ T4946] [ 38.802211][ T4946] CPU0 CPU1 [ 38.803097][ T4946] ---- ---- [ 38.804032][ T4946] lock(&sb->s_type->i_mutex_key#23); [ 38.805026][ T4946] lock(&opts->dep_lock); [ 38.806202][ T4946] lock(&sb->s_type->i_mutex_key#23); [ 38.807560][ T4946] lock(gadget_subsys.su_mutex); [ 38.808424][ T4946] [ 38.808424][ T4946] *** DEADLOCK *** [ 38.808424][ T4946] [ 38.809800][ T4946] 2 locks held by syz.0.18/4946: [ 38.810656][ T4946] #0: ffff0000c471e450 (sb_writers#11){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 38.812339][ T4946] #1: ffff0000ecb11dc0 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: configfs_symlink+0x394/0xde0 [ 38.814252][ T4946] [ 38.814252][ T4946] stack backtrace: [ 38.815215][ T4946] CPU: 0 UID: 0 PID: 4946 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT [ 38.816650][ T4946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 38.818327][ T4946] Call trace: [ 38.818903][ T4946] show_stack+0x2c/0x3c (C) [ 38.819625][ T4946] __dump_stack+0x30/0x40 [ 38.820344][ T4946] dump_stack_lvl+0xd8/0x12c [ 38.821276][ T4946] dump_stack+0x1c/0x28 [ 38.822127][ T4946] print_circular_bug+0x328/0x330 [ 38.823059][ T4946] check_noncircular+0x158/0x174 [ 38.823928][ T4946] __lock_acquire+0x17c0/0x2ebc [ 38.824761][ T4946] lock_acquire+0x140/0x364 [ 38.825561][ T4946] __mutex_lock+0x164/0xf14 [ 38.826351][ T4946] mutex_lock_nested+0x24/0x30 [ 38.827222][ T4946] uvcg_extension_allow_link+0x70/0x1f8 [ 38.828237][ T4946] configfs_symlink+0x478/0xde0 [ 38.828999][ T4946] vfs_symlink+0x16c/0x290 [ 38.829700][ T4946] filename_symlinkat+0x18c/0x328 [ 38.830532][ T4946] __arm64_sys_symlinkat+0xa8/0xd4 [ 38.831388][ T4946] invoke_syscall+0x98/0x244 [ 38.832144][ T4946] el0_svc_common+0xec/0x23c [ 38.832898][ T4946] do_el0_svc+0x4c/0x5c [ 38.833580][ T4946] el0_svc+0x64/0x260 [ 38.834231][ T4946] el0t_64_sync_handler+0x48/0x148 [ 38.835108][ T4946] el0t_64_sync+0x198/0x19c [ 39.129878][ T4770] Bluetooth: hci0: command tx timeout 1970/01/01 00:00:40 executed programs: 67 [ 41.209901][ T4770] Bluetooth: hci0: command tx timeout [ 43.289865][ T4770] Bluetooth: hci0: command tx timeout 1970/01/01 00:00:45 executed programs: 361