Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. 2026/08/19 06:54:48 parsed 1 programs 2026/08/19 06:54:48 serving rpc on tcp://34045 [ 100.360891][ T4294] cgroup: Unknown subsys name 'net' [ 100.460671][ T4294] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.006572][ T4294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 103.913320][ T4315] chnl_net:caif_netlink_parms(): no params data found [ 103.962938][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.970859][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.979803][ T4315] device bridge_slave_0 entered promiscuous mode [ 103.990664][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.997859][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.005978][ T4315] device bridge_slave_1 entered promiscuous mode [ 104.026498][ T4315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.037759][ T4315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.062250][ T4315] team0: Port device team_slave_0 added [ 104.069670][ T4315] team0: Port device team_slave_1 added [ 104.087772][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.094747][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.120943][ T4315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.134228][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.141273][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.167237][ T4315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.201081][ T4315] device hsr_slave_0 entered promiscuous mode [ 104.207944][ T4315] device hsr_slave_1 entered promiscuous mode [ 104.331180][ T4315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.343109][ T4315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.356242][ T4315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.378061][ T4315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.407321][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.414695][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.422780][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.429913][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.478900][ T4315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.498686][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.508958][ T2965] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.518040][ T2965] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.532273][ T4315] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.550244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.559320][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.566695][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.577747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.586649][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.593728][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.618891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.628547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.641241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.656629][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.669605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.681672][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.854782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.864335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.880415][ T4315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.897408][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.906356][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.924280][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.933380][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.943262][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.951420][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.968663][ T4315] device veth0_vlan entered promiscuous mode [ 104.980252][ T4315] device veth1_vlan entered promiscuous mode [ 105.003260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.013951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.022886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.032617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.044368][ T4315] device veth0_macvtap entered promiscuous mode [ 105.056221][ T4315] device veth1_macvtap entered promiscuous mode [ 105.079454][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.088925][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.098918][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.107060][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.116478][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.129033][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.137494][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.146530][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.159498][ T4315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.168893][ T4315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.178362][ T4315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.187766][ T4315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.308383][ T2965] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.474984][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.484896][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.499007][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.517907][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.526066][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.533613][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.208377][ T4367] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.216620][ T4367] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.224263][ T4367] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.233363][ T4367] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.241109][ T4367] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.248669][ T4367] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/08/19 06:54:57 executed programs: 0 [ 107.616145][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.624803][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.634692][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.644339][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.652461][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.660817][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.699769][ T2965] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.795897][ T4376] chnl_net:caif_netlink_parms(): no params data found [ 107.841098][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.848450][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.856756][ T4376] device bridge_slave_0 entered promiscuous mode [ 107.864814][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.872842][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.881047][ T4376] device bridge_slave_1 entered promiscuous mode [ 107.901707][ T4376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.912868][ T4376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.936308][ T4376] team0: Port device team_slave_0 added [ 107.944210][ T4376] team0: Port device team_slave_1 added [ 107.961592][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.968756][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.994984][ T4376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.007650][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.014712][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.040895][ T4376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.072874][ T4376] device hsr_slave_0 entered promiscuous mode [ 108.079742][ T4376] device hsr_slave_1 entered promiscuous mode [ 108.086989][ T4376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.094816][ T4376] Cannot create hsr debugfs directory [ 109.736348][ T4369] Bluetooth: hci0: command 0x0409 tx timeout [ 109.916473][ T2965] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.988120][ T2965] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.834587][ T4376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.844879][ T4376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.856068][ T4376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.872255][ T2965] device hsr_slave_0 left promiscuous mode [ 110.879690][ T2965] device hsr_slave_1 left promiscuous mode [ 110.886946][ T2965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.894485][ T2965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.903760][ T2965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.915180][ T2965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.923113][ T2965] device bridge_slave_1 left promiscuous mode [ 110.930785][ T2965] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.942906][ T2965] device bridge_slave_0 left promiscuous mode [ 110.950699][ T2965] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.976430][ T2965] device veth1_macvtap left promiscuous mode [ 110.982857][ T2965] device veth0_macvtap left promiscuous mode [ 110.989651][ T2965] device veth1_vlan left promiscuous mode [ 110.995932][ T2965] device veth0_vlan left promiscuous mode [ 111.422665][ T2965] team0 (unregistering): Port device team_slave_1 removed [ 111.452249][ T2965] team0 (unregistering): Port device team_slave_0 removed [ 111.482920][ T2965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.513041][ T2965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.726499][ T2965] bond0 (unregistering): Released all slaves [ 111.814887][ T4376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.822147][ T4369] Bluetooth: hci0: command 0x041b tx timeout [ 111.872383][ T4376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.893061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.902398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.913264][ T4376] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.934319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.944374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.953325][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.960458][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.971282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.993744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.003278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.013425][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.020595][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.037510][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.047981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.056711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.065979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.074391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.091864][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.101833][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.113261][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.122175][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.134881][ T4376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.146824][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.154863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.164340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.404732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.418429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.433439][ T4376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.468634][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.478005][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.510180][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.526265][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.540900][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.553220][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.567350][ T4376] device veth0_vlan entered promiscuous mode [ 112.580004][ T4376] device veth1_vlan entered promiscuous mode [ 112.631808][ T4376] device veth0_macvtap entered promiscuous mode [ 112.647110][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.656598][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.664953][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.680267][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.689892][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.699711][ T4376] device veth1_macvtap entered promiscuous mode [ 112.716782][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.724159][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.733534][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.745032][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.757390][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.764788][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.774365][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.788840][ T4376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.798038][ T4376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.806925][ T4376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.816361][ T4376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.878218][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.887598][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.899491][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.918569][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.926609][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.934276][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.990385][ T4438] [ 112.992749][ T4438] ====================================================== [ 112.999759][ T4438] WARNING: possible circular locking dependency detected [ 113.006770][ T4438] syzkaller #0 Not tainted [ 113.011178][ T4438] ------------------------------------------------------ [ 113.018189][ T4438] syz.0.17/4438 is trying to acquire lock: [ 113.024000][ T4438] ffffffff8d8089e8 (tpg_instances_lock){+.+.}-{3:3}, at: tcm_alloc+0x1d/0x1e0 [ 113.033055][ T4438] [ 113.033055][ T4438] but task is already holding lock: [ 113.040534][ T4438] ffff888075fab310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250 [ 113.049526][ T4438] [ 113.049526][ T4438] which lock already depends on the new lock. [ 113.049526][ T4438] [ 113.059944][ T4438] [ 113.059944][ T4438] the existing dependency chain (in reverse order) is: [ 113.069233][ T4438] [ 113.069233][ T4438] -> #3 (&gi->lock){+.+.}-{3:3}: [ 113.076443][ T4438] __mutex_lock+0x12d/0xae0 [ 113.081470][ T4438] config_usb_cfg_link+0x55/0x250 [ 113.087012][ T4438] configfs_symlink+0x5a4/0x13c0 [ 113.092560][ T4438] vfs_symlink+0x245/0x3d0 [ 113.097509][ T4438] do_symlinkat+0x1b6/0x400 [ 113.102545][ T4438] __x64_sys_symlinkat+0x95/0xa0 [ 113.108199][ T4438] do_syscall_64+0x4c/0xa0 [ 113.113148][ T4438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.119658][ T4438] [ 113.119658][ T4438] -> #2 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}: [ 113.128766][ T4438] down_write+0x36/0x60 [ 113.133451][ T4438] configfs_depend_item_unlocked+0x14f/0x430 [ 113.139957][ T4438] usbg_make_tpg+0x1f3/0x580 [ 113.145101][ T4438] target_fabric_make_tpg+0xa0/0x6d0 [ 113.150944][ T4438] configfs_mkdir+0x511/0x9e0 [ 113.156156][ T4438] vfs_mkdir+0x386/0x570 [ 113.160922][ T4438] do_mkdirat+0x1d8/0x440 [ 113.165772][ T4438] __x64_sys_mkdirat+0x85/0x90 [ 113.171052][ T4438] do_syscall_64+0x4c/0xa0 [ 113.176002][ T4438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.182450][ T4438] [ 113.182450][ T4438] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 113.190124][ T4438] __mutex_lock+0x12d/0xae0 [ 113.195161][ T4438] usbg_make_tpg+0x144/0x580 [ 113.200288][ T4438] target_fabric_make_tpg+0xa0/0x6d0 [ 113.206347][ T4438] configfs_mkdir+0x511/0x9e0 [ 113.211774][ T4438] vfs_mkdir+0x386/0x570 [ 113.216533][ T4438] do_mkdirat+0x1d8/0x440 [ 113.221425][ T4438] __x64_sys_mkdirat+0x85/0x90 [ 113.226900][ T4438] do_syscall_64+0x4c/0xa0 [ 113.231920][ T4438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.238331][ T4438] [ 113.238331][ T4438] -> #0 (tpg_instances_lock){+.+.}-{3:3}: [ 113.246239][ T4438] __lock_acquire+0x2d18/0x7c40 [ 113.251635][ T4438] lock_acquire+0x1bb/0x4a0 [ 113.256668][ T4438] __mutex_lock+0x12d/0xae0 [ 113.261795][ T4438] tcm_alloc+0x1d/0x1e0 [ 113.266483][ T4438] usb_get_function+0x59/0xa0 [ 113.271697][ T4438] config_usb_cfg_link+0x144/0x250 [ 113.277502][ T4438] configfs_symlink+0x5a4/0x13c0 [ 113.283134][ T4438] vfs_symlink+0x245/0x3d0 [ 113.288601][ T4438] do_symlinkat+0x1b6/0x400 [ 113.293629][ T4438] __x64_sys_symlinkat+0x95/0xa0 [ 113.299089][ T4438] do_syscall_64+0x4c/0xa0 [ 113.304053][ T4438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.310474][ T4438] [ 113.310474][ T4438] other info that might help us debug this: [ 113.310474][ T4438] [ 113.320699][ T4438] Chain exists of: [ 113.320699][ T4438] tpg_instances_lock --> &sb->s_type->i_mutex_key#21 --> &gi->lock [ 113.320699][ T4438] [ 113.334606][ T4438] Possible unsafe locking scenario: [ 113.334606][ T4438] [ 113.342059][ T4438] CPU0 CPU1 [ 113.347421][ T4438] ---- ---- [ 113.352949][ T4438] lock(&gi->lock); [ 113.356838][ T4438] lock(&sb->s_type->i_mutex_key#21); [ 113.364899][ T4438] lock(&gi->lock); [ 113.371314][ T4438] lock(tpg_instances_lock); [ 113.376002][ T4438] [ 113.376002][ T4438] *** DEADLOCK *** [ 113.376002][ T4438] [ 113.384307][ T4438] 3 locks held by syz.0.17/4438: [ 113.389257][ T4438] #0: ffff88801a3a2460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 113.398515][ T4438] #1: ffff88805a56cb70 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 113.409384][ T4438] #2: ffff888075fab310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250 [ 113.418773][ T4438] [ 113.418773][ T4438] stack backtrace: [ 113.424648][ T4438] CPU: 1 PID: 4438 Comm: syz.0.17 Not tainted syzkaller #0 [ 113.431842][ T4438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.441998][ T4438] Call Trace: [ 113.445285][ T4438] [ 113.448225][ T4438] dump_stack_lvl+0x188/0x24e [ 113.452929][ T4438] ? load_image+0x410/0x410 [ 113.457430][ T4438] ? show_regs_print_info+0x12/0x12 [ 113.462622][ T4438] ? print_circular_bug+0x12b/0x1a0 [ 113.467837][ T4438] check_noncircular+0x296/0x330 [ 113.472772][ T4438] ? add_chain_block+0x9b0/0x9b0 [ 113.477705][ T4438] ? lockdep_lock+0xf1/0x1f0 [ 113.482302][ T4438] ? _find_first_zero_bit+0xd2/0x100 [ 113.487684][ T4438] __lock_acquire+0x2d18/0x7c40 [ 113.492534][ T4438] ? module_check_misalignment+0x100/0x5c0 [ 113.498342][ T4438] ? verify_lock_unused+0x140/0x140 [ 113.503534][ T4438] ? verify_lock_unused+0x140/0x140 [ 113.508726][ T4438] lock_acquire+0x1bb/0x4a0 [ 113.513224][ T4438] ? tcm_alloc+0x1d/0x1e0 [ 113.517650][ T4438] ? __might_sleep+0xd0/0xd0 [ 113.522244][ T4438] ? read_lock_is_recursive+0x10/0x10 [ 113.527623][ T4438] ? __mutex_trylock_common+0x15c/0x260 [ 113.533278][ T4438] __mutex_lock+0x12d/0xae0 [ 113.537794][ T4438] ? tcm_alloc+0x1d/0x1e0 [ 113.542203][ T4438] ? rcu_is_watching+0x11/0xa0 [ 113.546971][ T4438] ? trace_contention_end+0x5f/0x170 [ 113.552283][ T4438] ? __mutex_lock+0x1ab/0xae0 [ 113.557004][ T4438] ? tcm_alloc+0x1d/0x1e0 [ 113.561440][ T4438] ? mutex_lock_nested+0x10/0x10 [ 113.566403][ T4438] ? config_usb_cfg_link+0x55/0x250 [ 113.571622][ T4438] ? mutex_lock_nested+0x10/0x10 [ 113.576579][ T4438] tcm_alloc+0x1d/0x1e0 [ 113.580758][ T4438] usb_get_function+0x59/0xa0 [ 113.585557][ T4438] config_usb_cfg_link+0x144/0x250 [ 113.590779][ T4438] configfs_symlink+0x5a4/0x13c0 [ 113.595735][ T4438] ? end_current_label_crit_section+0x14b/0x170 [ 113.602151][ T4438] ? common_perm+0x15d/0x1b0 [ 113.606916][ T4438] ? from_kgid+0x14f/0x6a0 [ 113.611328][ T4438] ? make_kgid+0x650/0x650 [ 113.615781][ T4438] ? apparmor_path_symlink+0x1ac/0x230 [ 113.621232][ T4438] ? lookup_one_qstr_excl+0x11c/0x240 [ 113.626685][ T4438] ? detach_groups+0x370/0x370 [ 113.631477][ T4438] ? inode_permission+0xef/0x480 [ 113.636461][ T4438] ? bpf_lsm_inode_symlink+0x5/0x10 [ 113.641665][ T4438] ? security_inode_symlink+0xb2/0x100 [ 113.647121][ T4438] vfs_symlink+0x245/0x3d0 [ 113.651538][ T4438] do_symlinkat+0x1b6/0x400 [ 113.656051][ T4438] ? vfs_symlink+0x3d0/0x3d0 [ 113.660663][ T4438] __x64_sys_symlinkat+0x95/0xa0 [ 113.665612][ T4438] do_syscall_64+0x4c/0xa0 [ 113.670137][ T4438] ? clear_bhb_loop+0x60/0xb0 [ 113.675243][ T4438] ? clear_bhb_loop+0x60/0xb0 [ 113.679935][ T4438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.685828][ T4438] RIP: 0033:0x7ff323d9e0d9 [ 113.690246][ T4438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.709939][ T4438] RSP: 002b:00007ffc0dcabfb8 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 113.718388][ T4438] RAX: ffffffffffffffda RBX: 00007ff324025fa0 RCX: 00007ff323d9e0d9 [ 113.726562][ T4438] RDX: 0000200000000540 RSI: ffffffffffffff9c RDI: 0000200000000500 [ 113.734841][ T4438] RBP: 00007ff323e35024 R08: 0000000000000000 R09: 0000000000000000 [ 113.742916][ T4438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.750886][ T4438] R13: 00007ff324025fac R14: 00007ff324025fa0 R15: 00007ff324025fa0 [ 113.758858][ T4438]