Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. 2026/08/09 09:24:37 parsed 1 programs 2026/08/09 09:24:37 serving rpc on tcp://46793 [ 63.484422][ T4200] cgroup: Unknown subsys name 'net' [ 63.616888][ T4200] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.862799][ T4200] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.791264][ T4239] chnl_net:caif_netlink_parms(): no params data found [ 66.849831][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.857773][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.866524][ T4239] device bridge_slave_0 entered promiscuous mode [ 66.876341][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.883731][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.891961][ T4239] device bridge_slave_1 entered promiscuous mode [ 66.915812][ T4239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.927213][ T4239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.961549][ T4239] team0: Port device team_slave_0 added [ 66.969212][ T4239] team0: Port device team_slave_1 added [ 66.990577][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.997609][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.023884][ T4239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.036996][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.044260][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.070339][ T4239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.107082][ T4239] device hsr_slave_0 entered promiscuous mode [ 67.114112][ T4239] device hsr_slave_1 entered promiscuous mode [ 67.248092][ T4239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.259739][ T4239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.271021][ T4239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.280826][ T4239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.311471][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.318689][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.326687][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.333801][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.399801][ T4239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.417615][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.431105][ T1271] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.440771][ T1271] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.458051][ T4239] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.470098][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.479104][ T391] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.486218][ T391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.515633][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.525072][ T1271] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.532202][ T1271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.542643][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.551727][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.560385][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.578611][ T4239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.589414][ T4239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.603734][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.613680][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.626591][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.734017][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.741787][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.763641][ T4239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.779240][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.788919][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.804837][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.813392][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.822403][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.830247][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.839840][ T4239] device veth0_vlan entered promiscuous mode [ 67.854322][ T4239] device veth1_vlan entered promiscuous mode [ 67.916110][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.924422][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.933917][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.943584][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.958187][ T4239] device veth0_macvtap entered promiscuous mode [ 67.968471][ T4239] device veth1_macvtap entered promiscuous mode [ 67.982507][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.990158][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.999448][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.008035][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.017391][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.028483][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.046858][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.055525][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.069296][ T4239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.078410][ T4239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.087152][ T4239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.096628][ T4239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.183384][ T4239] syz-executor (4239) used greatest stack depth: 20896 bytes left [ 68.636436][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.655329][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.678113][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.696639][ T391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.706014][ T391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.715847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/08/09 09:24:45 executed programs: 0 [ 70.210953][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.268203][ T4292] chnl_net:caif_netlink_parms(): no params data found [ 70.300966][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.308862][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.316735][ T4292] device bridge_slave_0 entered promiscuous mode [ 70.325003][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.332490][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.340155][ T4292] device bridge_slave_1 entered promiscuous mode [ 70.357729][ T4292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.368540][ T4292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.388602][ T4292] team0: Port device team_slave_0 added [ 70.395703][ T4292] team0: Port device team_slave_1 added [ 70.412613][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.419565][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.445792][ T4292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.458434][ T4292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.465683][ T4292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.492103][ T4292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.519224][ T4292] device hsr_slave_0 entered promiscuous mode [ 70.526231][ T4292] device hsr_slave_1 entered promiscuous mode [ 70.533541][ T4292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.541368][ T4292] Cannot create hsr debugfs directory [ 71.254693][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.261170][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.222458][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 72.927918][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.986589][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.037057][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.924625][ T4292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.938348][ T4292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.948252][ T4292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.963726][ T4292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.080214][ T4292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.095099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.105930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.119886][ T4292] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.129235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.140316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.149296][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.156408][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.186861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.196301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.206448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.215164][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.222281][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.230022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.239045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.248050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.256894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.265602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.277282][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.286646][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.296737][ T4324] Bluetooth: hci0: command 0x041b tx timeout [ 74.304231][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.314416][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.324012][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.333026][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.342718][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.457359][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.465611][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.477311][ T4292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.495588][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.504961][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.536801][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.545073][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.554175][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.562981][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.572899][ T4292] device veth0_vlan entered promiscuous mode [ 74.597354][ T4292] device veth1_vlan entered promiscuous mode [ 74.614222][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.623415][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.631339][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.640281][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.654419][ T4292] device veth0_macvtap entered promiscuous mode [ 74.678834][ T4292] device veth1_macvtap entered promiscuous mode [ 74.692905][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.704106][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.716112][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.724808][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.732955][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.740760][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.749782][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.761178][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.771820][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.784056][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.797490][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.808531][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.826110][ T4292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.834987][ T4292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.843880][ T4292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.853275][ T4292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.886055][ T9] device hsr_slave_0 left promiscuous mode [ 74.894885][ T9] device hsr_slave_1 left promiscuous mode [ 74.901227][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.909430][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.919032][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.926522][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.934806][ T9] device bridge_slave_1 left promiscuous mode [ 74.941819][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.956120][ T9] device bridge_slave_0 left promiscuous mode [ 74.963325][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.979883][ T9] device veth1_macvtap left promiscuous mode [ 74.988484][ T9] device veth0_macvtap left promiscuous mode [ 74.995453][ T9] device veth1_vlan left promiscuous mode [ 75.001349][ T9] device veth0_vlan left promiscuous mode [ 75.147886][ T9] team0 (unregistering): Port device team_slave_1 removed [ 75.159767][ T9] team0 (unregistering): Port device team_slave_0 removed [ 75.178112][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.192895][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.239883][ T9] bond0 (unregistering): Released all slaves [ 75.318901][ T391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.329414][ T391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.356607][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/08/09 09:24:50 executed programs: 2 [ 75.366316][ T1271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.379551][ T1271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.390062][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.470931][ T4377] [ 75.473287][ T4377] ====================================================== [ 75.480282][ T4377] WARNING: possible circular locking dependency detected [ 75.487288][ T4377] syzkaller #0 Not tainted [ 75.491683][ T4377] ------------------------------------------------------ [ 75.498698][ T4377] syz.0.18/4377 is trying to acquire lock: [ 75.504475][ T4377] ffffffff8ceceff0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x638/0x980 [ 75.514203][ T4377] [ 75.514203][ T4377] but task is already holding lock: [ 75.521545][ T4377] ffff888073435fb0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_rmdir+0xe1/0x410 [ 75.531205][ T4377] [ 75.531205][ T4377] which lock already depends on the new lock. [ 75.531205][ T4377] [ 75.541588][ T4377] [ 75.541588][ T4377] the existing dependency chain (in reverse order) is: [ 75.550587][ T4377] [ 75.550587][ T4377] -> #2 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}: [ 75.559293][ T4377] down_write+0x38/0x60 [ 75.563956][ T4377] configfs_depend_item_unlocked+0x14f/0x430 [ 75.570445][ T4377] usbg_make_tpg+0x1f3/0x580 [ 75.575540][ T4377] target_fabric_make_tpg+0xa0/0x6d0 [ 75.581350][ T4377] configfs_mkdir+0x511/0x9e0 [ 75.586532][ T4377] vfs_mkdir+0x386/0x570 [ 75.591281][ T4377] do_mkdirat+0x1dd/0x5c0 [ 75.596106][ T4377] __x64_sys_mkdir+0x6a/0x80 [ 75.601191][ T4377] do_syscall_64+0x4c/0xa0 [ 75.606112][ T4377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.612507][ T4377] [ 75.612507][ T4377] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 75.620126][ T4377] __mutex_lock_common+0x1e5/0x2400 [ 75.625847][ T4377] mutex_lock_nested+0x17/0x20 [ 75.631121][ T4377] tcm_set_name+0x26/0x90 [ 75.636068][ T4377] function_make+0x195/0x350 [ 75.641174][ T4377] configfs_mkdir+0x511/0x9e0 [ 75.646362][ T4377] vfs_mkdir+0x386/0x570 [ 75.651115][ T4377] do_mkdirat+0x1dd/0x5c0 [ 75.655952][ T4377] __x64_sys_mkdir+0x6a/0x80 [ 75.661065][ T4377] do_syscall_64+0x4c/0xa0 [ 75.665981][ T4377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.672394][ T4377] [ 75.672394][ T4377] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 75.680642][ T4377] __lock_acquire+0x2c66/0x7b50 [ 75.686048][ T4377] lock_acquire+0x19e/0x400 [ 75.691060][ T4377] __mutex_lock_common+0x1e5/0x2400 [ 75.696755][ T4377] mutex_lock_nested+0x17/0x20 [ 75.702029][ T4377] configfs_rmdir+0x638/0x980 [ 75.707205][ T4377] vfs_rmdir+0x19d/0x410 [ 75.711950][ T4377] do_rmdir+0x27f/0x710 [ 75.716609][ T4377] __x64_sys_rmdir+0x45/0x50 [ 75.721717][ T4377] do_syscall_64+0x4c/0xa0 [ 75.726631][ T4377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.733035][ T4377] [ 75.733035][ T4377] other info that might help us debug this: [ 75.733035][ T4377] [ 75.743264][ T4377] Chain exists of: [ 75.743264][ T4377] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#21 [ 75.743264][ T4377] [ 75.757925][ T4377] Possible unsafe locking scenario: [ 75.757925][ T4377] [ 75.765354][ T4377] CPU0 CPU1 [ 75.770695][ T4377] ---- ---- [ 75.776036][ T4377] lock(&sb->s_type->i_mutex_key#21); [ 75.781483][ T4377] lock(&opts->dep_lock); [ 75.788409][ T4377] lock(&sb->s_type->i_mutex_key#21); [ 75.796403][ T4377] lock(gadget_subsys.su_mutex); [ 75.801403][ T4377] [ 75.801403][ T4377] *** DEADLOCK *** [ 75.801403][ T4377] [ 75.809533][ T4377] 3 locks held by syz.0.18/4377: [ 75.814448][ T4377] #0: ffff888144e5e460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 75.823649][ T4377] #1: ffff888068514b70 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1b0/0x710 [ 75.834411][ T4377] #2: ffff888073435fb0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_rmdir+0xe1/0x410 [ 75.844495][ T4377] [ 75.844495][ T4377] stack backtrace: [ 75.850388][ T4377] CPU: 0 PID: 4377 Comm: syz.0.18 Not tainted syzkaller #0 [ 75.857567][ T4377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.867647][ T4377] Call Trace: [ 75.870909][ T4377] [ 75.873823][ T4377] dump_stack_lvl+0x188/0x250 [ 75.878486][ T4377] ? load_image+0x410/0x410 [ 75.882990][ T4377] ? show_regs_print_info+0x20/0x20 [ 75.888180][ T4377] ? print_circular_bug+0x12b/0x1a0 [ 75.893362][ T4377] check_noncircular+0x296/0x330 [ 75.898287][ T4377] ? add_chain_block+0x9b0/0x9b0 [ 75.903203][ T4377] ? lockdep_lock+0xf1/0x1f0 [ 75.907772][ T4377] ? __lock_acquire+0x2844/0x7b50 [ 75.912776][ T4377] ? mark_lock+0x94/0x320 [ 75.917082][ T4377] ? _find_first_zero_bit+0xd1/0xf0 [ 75.922261][ T4377] __lock_acquire+0x2c66/0x7b50 [ 75.927097][ T4377] ? __lock_acquire+0x13dc/0x7b50 [ 75.932121][ T4377] ? verify_lock_unused+0x140/0x140 [ 75.937302][ T4377] ? __lock_acquire+0x1305/0x7b50 [ 75.942312][ T4377] lock_acquire+0x19e/0x400 [ 75.946798][ T4377] ? configfs_rmdir+0x638/0x980 [ 75.951637][ T4377] ? __might_sleep+0xf0/0xf0 [ 75.956220][ T4377] ? read_lock_is_recursive+0x10/0x10 [ 75.961591][ T4377] __mutex_lock_common+0x1e5/0x2400 [ 75.966775][ T4377] ? configfs_rmdir+0x638/0x980 [ 75.971615][ T4377] ? configfs_rmdir+0x638/0x980 [ 75.976460][ T4377] ? __rwlock_init+0x140/0x140 [ 75.981200][ T4377] ? rcu_lock_release+0x5/0x20 [ 75.985944][ T4377] ? mutex_lock_io_nested+0x60/0x60 [ 75.991123][ T4377] ? _raw_spin_unlock+0x24/0x40 [ 75.995951][ T4377] mutex_lock_nested+0x17/0x20 [ 76.000691][ T4377] configfs_rmdir+0x638/0x980 [ 76.005355][ T4377] vfs_rmdir+0x19d/0x410 [ 76.009584][ T4377] do_rmdir+0x27f/0x710 [ 76.013722][ T4377] ? d_delete_notify+0x150/0x150 [ 76.018639][ T4377] ? getname_flags+0x1f9/0x4f0 [ 76.023381][ T4377] __x64_sys_rmdir+0x45/0x50 [ 76.027947][ T4377] do_syscall_64+0x4c/0xa0 [ 76.032343][ T4377] ? clear_bhb_loop+0x30/0x80 [ 76.036999][ T4377] ? clear_bhb_loop+0x30/0x80 [ 76.041663][ T4377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.047553][ T4377] RIP: 0033:0x7f17d29760d9 [ 76.051949][ T4377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.071536][ T4377] RSP: 002b:00007ffd49d2a1f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 76.079956][ T4377] RAX: ffffffffffffffda RBX: 00007f17d2bfdfa0 RCX: 00007f17d29760d9 [ 76.087945][ T4377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 76.095907][ T4377] RBP: 00007f17d2a0d024 R08: 0000000000000000 R09: 0000000000000000 [ 76.103864][ T4377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.111847][ T4377] R13: 00007f17d2bfdfac R14: 00007f17d2bfdfa0 R15: 00007f17d2bfdfa0 [ 76.119823][ T4377] [ 76.373310][ T4325] Bluetooth: hci0: command 0x040f tx timeout [ 78.451526][ T4202] Bluetooth: hci0: command 0x0419 tx timeout 2026/08/09 09:24:55 executed programs: 251 [ 81.491920][ T1112] cfg80211: failed to load regulatory.db 2026/08/09 09:25:00 executed programs: 548