program:
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000940)='/dev/comedi4\x00', 0x400, 0x0)
ioctl$COMEDI_SETWSUBD(r0, 0x6411)
r1 = socket$inet(0x2, 0x2, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000c40), &(0x7f0000000c00)=""/6, 0x2}, 0x20)
mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0)
write(r4, &(0x7f0000000a00)='rd_pages=8', 0xa)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
write(r5, &(0x7f0000000c00)='1', 0x1)
mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff)
symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00')
openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/members\x00', 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000040), 0xe}, 0x804)
[ 124.820566][ T4653] Bluetooth: hci0: command tx timeout
[ 125.016359][ T5336] ------------[ cut here ]------------
[ 125.018817][ T5336] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[ 125.018830][ T5336] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x12d8/0x1550, CPU#0: syz.0.0/5336
[ 125.025124][ T5336] Modules linked in:
[ 125.026680][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 125.030435][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 125.035445][ T5336] RIP: 0010:__mutex_lock+0x12df/0x1550
[ 125.037835][ T5336] Code: e5 57 90 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 47 02 00 00 83 3d 35 95 83 04 00 75 13 48 8d 3d 98 e4 86 04 48 c7 c6 40 f7 ec 8b <67> 48 0f b9 3a 90 e9 75 ee ff ff 90 0f 0b 90 e9 48 f2 ff ff 90 0f
[ 125.046130][ T5336] RSP: 0018:ffffc9000f847980 EFLAGS: 00010246
[ 125.048894][ T5336] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000
[ 125.052531][ T5336] RDX: ffffc9000edf9000 RSI: ffffffff8becf740 RDI: ffffffff905b34b0
[ 125.055912][ T5336] RBP: ffffc9000f847b10 R08: ffffffff9057e543 R09: 1ffffffff20afca8
[ 125.059678][ T5336] R10: dffffc0000000000 R11: fffffbfff20afca9 R12: ffff88801d2b34b8
[ 125.063302][ T5336] R13: 0000000000000000 R14: 1ffff92001f08f44 R15: 0000000000000000
[ 125.066603][ T5336] FS: 00007f778d4016c0(0000) GS:ffff88808c545000(0000) knlGS:0000000000000000
[ 125.070601][ T5336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 125.073562][ T5336] CR2: 00007ffeee55b2c0 CR3: 000000004434a000 CR4: 0000000000352ef0
[ 125.077219][ T5336] Call Trace:
[ 125.078882][ T5336]
[ 125.080199][ T5336] ? __se_sys_mkdir+0x34/0x150
[ 125.082483][ T5336] ? __mutex_lock+0x5d4/0x1550
[ 125.084628][ T5336] ? usbg_make_tpg+0x147/0x590
[ 125.087065][ T5336] ? __pfx___mutex_lock+0x10/0x10
[ 125.089610][ T5336] ? kstrtoull+0x12f/0x1d0
[ 125.091612][ T5336] usbg_make_tpg+0x147/0x590
[ 125.093744][ T5336] ? configfs_mkdir+0x4b0/0x9e0
[ 125.095838][ T5336] ? __pfx___mutex_lock+0x10/0x10
[ 125.097956][ T5336] ? __pfx_usbg_make_tpg+0x10/0x10
[ 125.100278][ T5336] ? do_raw_spin_lock+0x12b/0x2f0
[ 125.102528][ T5336] target_fabric_make_tpg+0xa8/0x6d0
[ 125.104914][ T5336] configfs_mkdir+0x4f6/0x9e0
[ 125.106882][ T5336] ? d_splice_alias+0x12/0x30
[ 125.109102][ T5336] ? __pfx_configfs_mkdir+0x10/0x10
[ 125.111341][ T5336] ? generic_permission+0x2bf/0x670
[ 125.113572][ T5336] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 125.115795][ T5336] vfs_mkdir+0x406/0x620
[ 125.117656][ T5336] filename_mkdirat+0x285/0x510
[ 125.119872][ T5336] ? __pfx_filename_mkdirat+0x10/0x10
[ 125.122278][ T5336] ? do_getname+0x151/0x250
[ 125.124161][ T5336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.126798][ T5336] __se_sys_mkdir+0x34/0x150
[ 125.128934][ T5336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.131581][ T5336] do_syscall_64+0x174/0x580
[ 125.133594][ T5336] ? trace_irq_disable+0x3b/0x140
[ 125.135942][ T5336] ? clear_bhb_loop+0x40/0x90
[ 125.137962][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.140683][ T5336] RIP: 0033:0x7f778c59de99
[ 125.142616][ T5336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 125.151020][ T5336] RSP: 002b:00007f778d400fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 125.154779][ T5336] RAX: ffffffffffffffda RBX: 00007f778c825fa0 RCX: 00007f778c59de99
[ 125.158445][ T5336] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600
[ 125.162020][ T5336] RBP: 00007f778c633eaf R08: 0000000000000000 R09: 0000000000000000
[ 125.165551][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 125.169085][ T5336] R13: 00007f778c826038 R14: 00007f778c825fa0 R15: 00007fff4b73ca78
[ 125.172341][ T5336]
[ 125.173602][ T5336] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 125.176459][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 125.179977][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 125.184040][ T5336] Call Trace:
[ 125.185453][ T5336]
[ 125.186666][ T5336] vpanic+0x56c/0xa60
[ 125.188429][ T5336] ? __pfx__printk+0x10/0x10
[ 125.190454][ T5336] ? __pfx_vpanic+0x10/0x10
[ 125.192520][ T5336] ? is_bpf_text_address+0x292/0x2b0
[ 125.194800][ T5336] ? is_bpf_text_address+0x26/0x2b0
[ 125.197101][ T5336] panic+0xc5/0xd0
[ 125.198766][ T5336] ? __pfx_panic+0x10/0x10
[ 125.200819][ T5336] __warn+0x315/0x4c0
[ 125.202574][ T5336] ? __mutex_lock+0x12d8/0x1550
[ 125.204645][ T5336] ? __mutex_lock+0x12d8/0x1550
[ 125.206708][ T5336] __report_bug+0x276/0x570
[ 125.208695][ T5336] ? __mutex_lock+0x12d8/0x1550
[ 125.210841][ T5336] ? __pfx___report_bug+0x10/0x10
[ 125.213053][ T5336] report_bug_entry+0x19a/0x290
[ 125.215081][ T5336] ? __mutex_lock+0x12df/0x1550
[ 125.216985][ T5336] ? __mutex_lock+0x12e4/0x1550
[ 125.218976][ T5336] handle_bug+0xce/0x200
[ 125.220799][ T5336] exc_invalid_op+0x1a/0x50
[ 125.222683][ T5336] asm_exc_invalid_op+0x1a/0x20
[ 125.224764][ T5336] RIP: 0010:__mutex_lock+0x12df/0x1550
[ 125.227072][ T5336] Code: e5 57 90 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 47 02 00 00 83 3d 35 95 83 04 00 75 13 48 8d 3d 98 e4 86 04 48 c7 c6 40 f7 ec 8b <67> 48 0f b9 3a 90 e9 75 ee ff ff 90 0f 0b 90 e9 48 f2 ff ff 90 0f
[ 125.235205][ T5336] RSP: 0018:ffffc9000f847980 EFLAGS: 00010246
[ 125.237802][ T5336] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000
[ 125.241320][ T5336] RDX: ffffc9000edf9000 RSI: ffffffff8becf740 RDI: ffffffff905b34b0
[ 125.244908][ T5336] RBP: ffffc9000f847b10 R08: ffffffff9057e543 R09: 1ffffffff20afca8
[ 125.248485][ T5336] R10: dffffc0000000000 R11: fffffbfff20afca9 R12: ffff88801d2b34b8
[ 125.251974][ T5336] R13: 0000000000000000 R14: 1ffff92001f08f44 R15: 0000000000000000
[ 125.255572][ T5336] ? __se_sys_mkdir+0x34/0x150
[ 125.257741][ T5336] ? __mutex_lock+0x5d4/0x1550
[ 125.259908][ T5336] ? usbg_make_tpg+0x147/0x590
[ 125.262063][ T5336] ? __pfx___mutex_lock+0x10/0x10
[ 125.264270][ T5336] ? kstrtoull+0x12f/0x1d0
[ 125.266200][ T5336] usbg_make_tpg+0x147/0x590
[ 125.268132][ T5336] ? configfs_mkdir+0x4b0/0x9e0
[ 125.270090][ T5336] ? __pfx___mutex_lock+0x10/0x10
[ 125.272427][ T5336] ? __pfx_usbg_make_tpg+0x10/0x10
[ 125.274706][ T5336] ? do_raw_spin_lock+0x12b/0x2f0
[ 125.277015][ T5336] target_fabric_make_tpg+0xa8/0x6d0
[ 125.279494][ T5336] configfs_mkdir+0x4f6/0x9e0
[ 125.281685][ T5336] ? d_splice_alias+0x12/0x30
[ 125.283713][ T5336] ? __pfx_configfs_mkdir+0x10/0x10
[ 125.286201][ T5336] ? generic_permission+0x2bf/0x670
[ 125.288566][ T5336] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 125.290955][ T5336] vfs_mkdir+0x406/0x620
[ 125.292717][ T5336] filename_mkdirat+0x285/0x510
[ 125.294695][ T5336] ? __pfx_filename_mkdirat+0x10/0x10
[ 125.296865][ T5336] ? do_getname+0x151/0x250
[ 125.298717][ T5336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.301236][ T5336] __se_sys_mkdir+0x34/0x150
[ 125.303343][ T5336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.306061][ T5336] do_syscall_64+0x174/0x580
[ 125.308105][ T5336] ? trace_irq_disable+0x3b/0x140
[ 125.310244][ T5336] ? clear_bhb_loop+0x40/0x90
[ 125.312567][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.315212][ T5336] RIP: 0033:0x7f778c59de99
[ 125.317293][ T5336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 125.325679][ T5336] RSP: 002b:00007f778d400fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 125.329298][ T5336] RAX: ffffffffffffffda RBX: 00007f778c825fa0 RCX: 00007f778c59de99
[ 125.332808][ T5336] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600
[ 125.335889][ T5336] RBP: 00007f778c633eaf R08: 0000000000000000 R09: 0000000000000000
[ 125.338998][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 125.342144][ T5336] R13: 00007f778c826038 R14: 00007f778c825fa0 R15: 00007fff4b73ca78
[ 125.345402][ T5336]
[ 125.347198][ T5336] Kernel Offset: disabled
[ 125.349068][ T5336] Rebooting in 86400 seconds..