[ 91.973466][ T198] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. 2026/07/24 23:58:18 parsed 1 programs 2026/07/24 23:58:18 serving rpc on tcp://38781 [ 100.185645][ T5608] cgroup: Unknown subsys name 'net' [ 100.427743][ T5608] cgroup: Unknown subsys name 'cpuset' [ 100.481243][ T5608] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.486792][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.654808][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.654844][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.726150][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.726172][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.570291][ T5682] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.570828][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.570986][ T5682] bridge_slave_0: entered allmulticast mode [ 112.593340][ T5682] bridge_slave_0: entered promiscuous mode [ 112.612920][ T5682] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.613116][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.613232][ T5682] bridge_slave_1: entered allmulticast mode [ 112.615064][ T5682] bridge_slave_1: entered promiscuous mode [ 112.676406][ T5682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.679419][ T5682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.736414][ T5682] team0: Port device team_slave_0 added [ 112.738951][ T5682] team0: Port device team_slave_1 added [ 112.784541][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.784554][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.784573][ T5682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.786905][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.786916][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.786934][ T5682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.927628][ T5682] hsr_slave_0: entered promiscuous mode [ 112.928772][ T5682] hsr_slave_1: entered promiscuous mode [ 113.446565][ T5682] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.498422][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.511230][ T5682] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.554526][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.555637][ T5682] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.595178][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.598224][ T5682] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.635190][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.765140][ T5682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.817452][ T5682] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.853580][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.853832][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.914559][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.914917][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.391455][ T5682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.485542][ T5682] veth0_vlan: entered promiscuous mode [ 114.504521][ T5682] veth1_vlan: entered promiscuous mode [ 114.553602][ T5682] veth0_macvtap: entered promiscuous mode [ 114.567536][ T5682] veth1_macvtap: entered promiscuous mode [ 114.598789][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.643130][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.675850][ T55] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.694535][ T55] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.694585][ T55] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.694622][ T55] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.386478][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.733134][ T5725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.737775][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.762490][ T5725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.763674][ T5725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.770194][ T5725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.796185][ T5725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/07/24 23:58:39 executed programs: 0 [ 116.765863][ T5725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.768137][ T5725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.768972][ T5725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.770036][ T5725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.814451][ T5725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.896927][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.528775][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.528924][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.529088][ T5734] bridge_slave_0: entered allmulticast mode [ 117.535550][ T5734] bridge_slave_0: entered promiscuous mode [ 117.560150][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.560311][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.560441][ T5734] bridge_slave_1: entered allmulticast mode [ 117.569128][ T5734] bridge_slave_1: entered promiscuous mode [ 117.619569][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.635105][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.677119][ T5734] team0: Port device team_slave_0 added [ 117.680025][ T5734] team0: Port device team_slave_1 added [ 117.718906][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.718919][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.718940][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.767731][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.767749][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.767776][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.960284][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.031448][ T5734] hsr_slave_0: entered promiscuous mode [ 118.032525][ T5734] hsr_slave_1: entered promiscuous mode [ 118.033396][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 118.033483][ T5734] Cannot create hsr debugfs directory [ 118.743599][ T55] bridge_slave_1: left allmulticast mode [ 118.743706][ T55] bridge_slave_1: left promiscuous mode [ 118.749688][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.922756][ T59] Bluetooth: hci0: command tx timeout [ 118.952636][ T55] bridge_slave_0: left allmulticast mode [ 118.952672][ T55] bridge_slave_0: left promiscuous mode [ 118.952949][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.731443][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.791370][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.844802][ T55] bond0 (unregistering): Released all slaves [ 119.957945][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 120.360911][ T55] hsr_slave_0: left promiscuous mode [ 120.401548][ T55] hsr_slave_1: left promiscuous mode [ 120.402853][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.402943][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.462497][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.462530][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.553169][ T55] veth1_macvtap: left promiscuous mode [ 120.553385][ T55] veth0_macvtap: left promiscuous mode [ 120.553583][ T55] veth1_vlan: left promiscuous mode [ 120.553788][ T55] veth0_vlan: left promiscuous mode [ 121.000831][ T59] Bluetooth: hci0: command tx timeout [ 121.292021][ T55] team0 (unregistering): Port device team_slave_1 removed [ 121.351442][ T55] team0 (unregistering): Port device team_slave_0 removed [ 121.559294][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 122.584272][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.639254][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.648148][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.679975][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.704291][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.746826][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.754951][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.807694][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.020022][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.090729][ T59] Bluetooth: hci0: command tx timeout [ 123.412332][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.434119][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.434337][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.469262][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.485943][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.045162][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.178622][ T5734] veth0_vlan: entered promiscuous mode [ 124.193219][ T5734] veth1_vlan: entered promiscuous mode [ 124.238901][ T5734] veth0_macvtap: entered promiscuous mode [ 124.247814][ T5734] veth1_macvtap: entered promiscuous mode [ 124.273368][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.292754][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.316674][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.319702][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.319748][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.319786][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.708931][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.708952][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.782189][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.782210][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/24 23:58:47 executed programs: 2 [ 125.066331][ T5837] [ 125.066343][ T5837] ====================================================== [ 125.066351][ T5837] WARNING: possible circular locking dependency detected [ 125.066374][ T5837] syzkaller #0 Not tainted [ 125.066384][ T5837] ------------------------------------------------------ [ 125.066392][ T5837] syz.0.18/5837 is trying to acquire lock: [ 125.066402][ T5837] ffffffff8ef6f000 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x75/0x4d0 [ 125.066484][ T5837] [ 125.066484][ T5837] but task is already holding lock: [ 125.066491][ T5837] ffff88803cdb6830 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: configfs_symlink+0x3af/0x1030 [ 125.066549][ T5837] [ 125.066549][ T5837] which lock already depends on the new lock. [ 125.066549][ T5837] [ 125.066556][ T5837] [ 125.066556][ T5837] the existing dependency chain (in reverse order) is: [ 125.066564][ T5837] [ 125.066564][ T5837] -> #2 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}: [ 125.066597][ T5837] down_write+0x3a/0x50 [ 125.066621][ T5837] configfs_depend_item_unlocked+0x153/0x420 [ 125.066645][ T5837] usbg_make_tpg+0x1f6/0x590 [ 125.066670][ T5837] target_fabric_make_tpg+0xa8/0x6d0 [ 125.066700][ T5837] configfs_mkdir+0x4f6/0x9e0 [ 125.066723][ T5837] vfs_mkdir+0x402/0x620 [ 125.066748][ T5837] filename_mkdirat+0x289/0x520 [ 125.066774][ T5837] __se_sys_mkdir+0x34/0x150 [ 125.066801][ T5837] do_syscall_64+0x174/0x580 [ 125.066824][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.066844][ T5837] [ 125.066844][ T5837] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 125.066873][ T5837] mutex_lock_nested+0x5a/0x1d0 [ 125.066911][ T5837] tcm_set_name+0x2b/0xd0 [ 125.066938][ T5837] function_make+0x1a8/0x360 [ 125.066968][ T5837] configfs_mkdir+0x4f6/0x9e0 [ 125.066991][ T5837] vfs_mkdir+0x402/0x620 [ 125.067016][ T5837] filename_mkdirat+0x289/0x520 [ 125.067040][ T5837] __se_sys_mkdir+0x34/0x150 [ 125.067071][ T5837] do_syscall_64+0x174/0x580 [ 125.067087][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.067101][ T5837] [ 125.067101][ T5837] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 125.067121][ T5837] __lock_acquire+0x1520/0x2ce0 [ 125.067136][ T5837] lock_acquire+0x106/0x350 [ 125.067149][ T5837] mutex_lock_nested+0x5a/0x1d0 [ 125.067169][ T5837] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 125.067188][ T5837] configfs_symlink+0x59a/0x1030 [ 125.067208][ T5837] vfs_symlink+0x18b/0x330 [ 125.067228][ T5837] filename_symlinkat+0x1cd/0x420 [ 125.067250][ T5837] __se_sys_symlink+0x4d/0x2b0 [ 125.067272][ T5837] do_syscall_64+0x174/0x580 [ 125.067287][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.067301][ T5837] [ 125.067301][ T5837] other info that might help us debug this: [ 125.067301][ T5837] [ 125.067306][ T5837] Chain exists of: [ 125.067306][ T5837] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#24 [ 125.067306][ T5837] [ 125.067334][ T5837] Possible unsafe locking scenario: [ 125.067334][ T5837] [ 125.067338][ T5837] CPU0 CPU1 [ 125.067342][ T5837] ---- ---- [ 125.067347][ T5837] lock(&sb->s_type->i_mutex_key#24); [ 125.067360][ T5837] lock(&opts->dep_lock); [ 125.067371][ T5837] lock(&sb->s_type->i_mutex_key#24); [ 125.067388][ T5837] lock(gadget_subsys.su_mutex); [ 125.067400][ T5837] [ 125.067400][ T5837] *** DEADLOCK *** [ 125.067400][ T5837] [ 125.067405][ T5837] 2 locks held by syz.0.18/5837: [ 125.067428][ T5837] #0: ffff88801bf26500 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 125.067471][ T5837] #1: ffff88803cdb6830 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: configfs_symlink+0x3af/0x1030 [ 125.067516][ T5837] [ 125.067516][ T5837] stack backtrace: [ 125.067533][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.067554][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 125.067569][ T5837] Call Trace: [ 125.067575][ T5837] [ 125.067581][ T5837] dump_stack_lvl+0xe8/0x150 [ 125.067605][ T5837] print_circular_bug+0x2e1/0x300 [ 125.067627][ T5837] check_noncircular+0x12e/0x150 [ 125.067650][ T5837] __lock_acquire+0x1520/0x2ce0 [ 125.067668][ T5837] ? __pfx_smack_log+0x10/0x10 [ 125.067695][ T5837] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 125.067714][ T5837] lock_acquire+0x106/0x350 [ 125.067729][ T5837] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 125.067750][ T5837] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 125.067770][ T5837] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 125.067788][ T5837] mutex_lock_nested+0x5a/0x1d0 [ 125.067810][ T5837] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 125.067830][ T5837] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 125.067852][ T5837] configfs_symlink+0x59a/0x1030 [ 125.067878][ T5837] ? __pfx_configfs_symlink+0x10/0x10 [ 125.067905][ T5837] ? bpf_lsm_inode_symlink+0x9/0x20 [ 125.067928][ T5837] vfs_symlink+0x18b/0x330 [ 125.067949][ T5837] ? security_path_symlink+0xfd/0x360 [ 125.067974][ T5837] filename_symlinkat+0x1cd/0x420 [ 125.067999][ T5837] ? __pfx_filename_symlinkat+0x10/0x10 [ 125.068023][ T5837] ? do_getname+0x151/0x250 [ 125.068047][ T5837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.068062][ T5837] __se_sys_symlink+0x4d/0x2b0 [ 125.068085][ T5837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.068101][ T5837] do_syscall_64+0x174/0x580 [ 125.068117][ T5837] ? trace_irq_disable+0x3b/0x140 [ 125.068132][ T5837] ? clear_bhb_loop+0x40/0x90 [ 125.068149][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.068164][ T5837] RIP: 0033:0x7f02ea0fde99 [ 125.068180][ T5837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.068193][ T5837] RSP: 002b:00007ffed3700ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 125.068240][ T5837] RAX: ffffffffffffffda RBX: 00007f02ea385fa0 RCX: 00007f02ea0fde99 [ 125.068259][ T5837] RDX: 0000000000000000 RSI: 0000200000001500 RDI: 0000200000001400 [ 125.068274][ T5837] RBP: 00007f02ea193eaf R08: 0000000000000000 R09: 0000000000000000 [ 125.068284][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.068293][ T5837] R13: 00007f02ea385fac R14: 00007f02ea385fa0 R15: 00007f02ea385fa0 [ 125.068310][ T5837] [ 125.160806][ T59] Bluetooth: hci0: command tx timeout 2026/07/24 23:58:52 executed programs: 107 [ 132.921735][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.921790][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 2026/07/24 23:58:57 executed programs: 225