Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. 2026/08/17 07:58:55 parsed 1 programs 2026/08/17 07:58:55 serving rpc on tcp://35749 [ 58.551386][ T4197] cgroup: Unknown subsys name 'net' [ 58.665010][ T4197] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.877115][ T4197] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.636393][ T4229] chnl_net:caif_netlink_parms(): no params data found [ 61.675165][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.682821][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.691068][ T4229] device bridge_slave_0 entered promiscuous mode [ 61.699893][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.707042][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.715012][ T4229] device bridge_slave_1 entered promiscuous mode [ 61.737452][ T4229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.748001][ T4229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.767470][ T4229] team0: Port device team_slave_0 added [ 61.774388][ T4229] team0: Port device team_slave_1 added [ 61.791653][ T4229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.798605][ T4229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.824732][ T4229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.838144][ T4229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.846352][ T4229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.874966][ T4229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.913844][ T4229] device hsr_slave_0 entered promiscuous mode [ 61.921940][ T4229] device hsr_slave_1 entered promiscuous mode [ 62.048404][ T4229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.059741][ T4229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.071061][ T4229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.082788][ T4229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.109985][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.117191][ T4229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.125172][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.132314][ T4229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.193413][ T4229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.210852][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.224858][ T3070] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.234396][ T3070] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.251535][ T4229] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.264967][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.274069][ T3070] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.281182][ T3070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.294161][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.303189][ T3070] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.310306][ T3070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.331436][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.340726][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.358538][ T4229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.369366][ T4229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.383222][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.391949][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.401730][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.413498][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.538556][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.547816][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.563020][ T4229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.594878][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.606421][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.628745][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.639245][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.650447][ T4229] device veth0_vlan entered promiscuous mode [ 62.663704][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.671775][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.682442][ T4229] device veth1_vlan entered promiscuous mode [ 62.719534][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.729134][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.739399][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.748691][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.762261][ T4229] device veth0_macvtap entered promiscuous mode [ 62.774873][ T4229] device veth1_macvtap entered promiscuous mode [ 62.791829][ T4229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.799355][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.811705][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.819631][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.829077][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.840919][ T4229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.851280][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.861228][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.873449][ T4229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.882767][ T4229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.893278][ T4229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.902776][ T4229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.118787][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.835343][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.273921][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.316530][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.606827][ T3070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.624534][ T3070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.636668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.655932][ T3070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.664428][ T3070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.672966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.429740][ T144] device hsr_slave_0 left promiscuous mode [ 69.447790][ T144] device hsr_slave_1 left promiscuous mode [ 69.455108][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.462919][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.472316][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.479782][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.495891][ T144] device bridge_slave_1 left promiscuous mode [ 69.503016][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.542903][ T144] device bridge_slave_0 left promiscuous mode [ 69.549134][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.582214][ T144] device veth1_macvtap left promiscuous mode [ 69.588399][ T144] device veth0_macvtap left promiscuous mode [ 69.594711][ T144] device veth1_vlan left promiscuous mode [ 69.600594][ T144] device veth0_vlan left promiscuous mode [ 69.725681][ T144] team0 (unregistering): Port device team_slave_1 removed [ 69.738025][ T144] team0 (unregistering): Port device team_slave_0 removed [ 69.749652][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.764118][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.807772][ T144] bond0 (unregistering): Released all slaves 2026/08/17 07:59:09 executed programs: 0 [ 70.700133][ T4347] chnl_net:caif_netlink_parms(): no params data found [ 70.798206][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.805480][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.813868][ T4347] device bridge_slave_0 entered promiscuous mode [ 70.822706][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.830054][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.838281][ T4347] device bridge_slave_1 entered promiscuous mode [ 70.899349][ T4347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.920875][ T4347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.958931][ T4347] team0: Port device team_slave_0 added [ 70.979431][ T4347] team0: Port device team_slave_1 added [ 71.002031][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.008992][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.037356][ T4347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.064250][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.077343][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.104742][ T4347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.150244][ T4347] device hsr_slave_0 entered promiscuous mode [ 71.157050][ T4347] device hsr_slave_1 entered promiscuous mode [ 71.167268][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.173857][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.744624][ T4347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.770963][ T4347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.791263][ T4347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.811455][ T4347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.886153][ T4347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.900092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 71.911619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.919205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.935497][ T4347] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.952315][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.963288][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.978453][ T3070] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.985569][ T3070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.995790][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.011117][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.019577][ T3070] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.026686][ T3070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.044102][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.052296][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.063419][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.080852][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.094442][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.103990][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.113760][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.122264][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.130664][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.149432][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.164431][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.185143][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.201747][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.316193][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.325182][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.338475][ T4347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.364909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.374857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.398162][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.407490][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.416518][ T4347] device veth0_vlan entered promiscuous mode [ 72.427644][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.435619][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.448565][ T4347] device veth1_vlan entered promiscuous mode [ 72.475037][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.485616][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.494453][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.504745][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.516465][ T4347] device veth0_macvtap entered promiscuous mode [ 72.528214][ T4347] device veth1_macvtap entered promiscuous mode [ 72.530701][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 72.547087][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.556874][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.565840][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.574269][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.583052][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.619364][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.630730][ T4347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.639446][ T4347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.650355][ T4347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.659492][ T4347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.672891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.682292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.776301][ T3070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.786821][ T3070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.804737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.857434][ T3070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.869105][ T3070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.878276][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.231080][ T4395] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 73.590099][ T4395] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 73.609613][ T4395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.684053][ T4395] mdc800 1-1:1.0: Found Mustek MDC800 on USB. [ 73.884820][ T4439] [ 73.887172][ T4439] ====================================================== [ 73.894181][ T4439] WARNING: possible circular locking dependency detected [ 73.901203][ T4439] syzkaller #0 Not tainted [ 73.905613][ T4439] ------------------------------------------------------ [ 73.912621][ T4439] syz.0.17/4439 is trying to acquire lock: [ 73.918415][ T4439] ffff888023f2fa20 (&mdc800->io_lock){+.+.}-{3:3}, at: mdc800_device_open+0x2a/0x430 [ 73.927912][ T4439] [ 73.927912][ T4439] but task is already holding lock: [ 73.935272][ T4439] ffffffff8cdbb3d0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x2c/0x300 [ 73.943639][ T4439] [ 73.943639][ T4439] which lock already depends on the new lock. [ 73.943639][ T4439] [ 73.954029][ T4439] [ 73.954029][ T4439] the existing dependency chain (in reverse order) is: [ 73.963029][ T4439] [ 73.963029][ T4439] -> #1 (minor_rwsem#2){++++}-{3:3}: [ 73.970503][ T4439] down_write+0x38/0x60 [ 73.975177][ T4439] usb_register_dev+0x2a3/0x7f0 [ 73.980540][ T4439] mdc800_usb_probe+0xf8a/0x1870 [ 73.985990][ T4439] usb_probe_interface+0x5be/0xae0 [ 73.991617][ T4439] really_probe+0x276/0xc70 [ 73.996638][ T4439] __driver_probe_device+0x1f5/0x390 [ 74.002437][ T4439] driver_probe_device+0x4f/0x420 [ 74.007976][ T4439] __device_attach_driver+0x2b0/0x500 [ 74.013858][ T4439] bus_for_each_drv+0x184/0x210 [ 74.019219][ T4439] __device_attach+0x2a7/0x480 [ 74.024498][ T4439] bus_probe_device+0xba/0x1d0 [ 74.029775][ T4439] device_add+0xbcf/0x1050 [ 74.034702][ T4439] usb_set_configuration+0x19d5/0x2030 [ 74.040676][ T4439] usb_generic_driver_probe+0x89/0x150 [ 74.046655][ T4439] usb_probe_device+0x126/0x250 [ 74.052107][ T4439] really_probe+0x276/0xc70 [ 74.057124][ T4439] __driver_probe_device+0x1f5/0x390 [ 74.062928][ T4439] driver_probe_device+0x4f/0x420 [ 74.068465][ T4439] __device_attach_driver+0x2b0/0x500 [ 74.074353][ T4439] bus_for_each_drv+0x184/0x210 [ 74.079717][ T4439] __device_attach+0x2a7/0x480 [ 74.084995][ T4439] bus_probe_device+0xba/0x1d0 [ 74.090274][ T4439] device_add+0xbcf/0x1050 [ 74.095202][ T4439] usb_new_device+0x9f6/0x15d0 [ 74.100485][ T4439] hub_event+0x2b8d/0x5260 [ 74.105414][ T4439] process_one_work+0x867/0xff0 [ 74.110775][ T4439] worker_thread+0xad7/0x12a0 [ 74.115957][ T4439] kthread+0x42e/0x520 [ 74.120526][ T4439] ret_from_fork+0x1f/0x30 [ 74.125444][ T4439] [ 74.125444][ T4439] -> #0 (&mdc800->io_lock){+.+.}-{3:3}: [ 74.133150][ T4439] __lock_acquire+0x2c66/0x7b50 [ 74.138501][ T4439] lock_acquire+0x19e/0x400 [ 74.143505][ T4439] __mutex_lock_common+0x1e5/0x2400 [ 74.149204][ T4439] mutex_lock_nested+0x17/0x20 [ 74.154465][ T4439] mdc800_device_open+0x2a/0x430 [ 74.159905][ T4439] usb_open+0x1fe/0x300 [ 74.164557][ T4439] chrdev_open+0x585/0x5f0 [ 74.169474][ T4439] do_dentry_open+0x7f7/0xf90 [ 74.174650][ T4439] path_openat+0x2718/0x2fb0 [ 74.179739][ T4439] do_filp_open+0x1df/0x400 [ 74.184739][ T4439] do_sys_openat2+0x14b/0x500 [ 74.189915][ T4439] __x64_sys_openat+0x135/0x160 [ 74.195265][ T4439] do_syscall_64+0x4c/0xa0 [ 74.200182][ T4439] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.206575][ T4439] [ 74.206575][ T4439] other info that might help us debug this: [ 74.206575][ T4439] [ 74.216776][ T4439] Possible unsafe locking scenario: [ 74.216776][ T4439] [ 74.224201][ T4439] CPU0 CPU1 [ 74.229558][ T4439] ---- ---- [ 74.234896][ T4439] lock(minor_rwsem#2); [ 74.239124][ T4439] lock(&mdc800->io_lock); [ 74.246121][ T4439] lock(minor_rwsem#2); [ 74.252872][ T4439] lock(&mdc800->io_lock); [ 74.257354][ T4439] [ 74.257354][ T4439] *** DEADLOCK *** [ 74.257354][ T4439] [ 74.265469][ T4439] 1 lock held by syz.0.17/4439: [ 74.270292][ T4439] #0: ffffffff8cdbb3d0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x2c/0x300 [ 74.279063][ T4439] [ 74.279063][ T4439] stack backtrace: [ 74.284935][ T4439] CPU: 0 PID: 4439 Comm: syz.0.17 Not tainted syzkaller #0 [ 74.292109][ T4439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.302157][ T4439] Call Trace: [ 74.305416][ T4439] [ 74.308334][ T4439] dump_stack_lvl+0x188/0x250 [ 74.312998][ T4439] ? load_image+0x410/0x410 [ 74.317480][ T4439] ? show_regs_print_info+0x20/0x20 [ 74.322675][ T4439] ? print_circular_bug+0x12b/0x1a0 [ 74.327857][ T4439] check_noncircular+0x296/0x330 [ 74.332779][ T4439] ? add_chain_block+0x9b0/0x9b0 [ 74.337691][ T4439] ? lockdep_lock+0xf1/0x1f0 [ 74.342262][ T4439] ? mark_lock+0x94/0x320 [ 74.346568][ T4439] ? _find_first_zero_bit+0xd1/0xf0 [ 74.351748][ T4439] __lock_acquire+0x2c66/0x7b50 [ 74.356587][ T4439] ? lockdep_lock+0xf1/0x1f0 [ 74.361166][ T4439] ? verify_lock_unused+0x140/0x140 [ 74.366343][ T4439] ? lockdep_unlock+0x143/0x2e0 [ 74.371171][ T4439] ? lockdep_lock+0x1f0/0x1f0 [ 74.375829][ T4439] ? mark_lock+0x286/0x320 [ 74.380221][ T4439] ? _find_first_zero_bit+0xd1/0xf0 [ 74.385407][ T4439] ? __lock_acquire+0x2844/0x7b50 [ 74.390426][ T4439] lock_acquire+0x19e/0x400 [ 74.394914][ T4439] ? mdc800_device_open+0x2a/0x430 [ 74.400013][ T4439] ? __might_sleep+0xf0/0xf0 [ 74.404588][ T4439] ? read_lock_is_recursive+0x10/0x10 [ 74.409945][ T4439] ? verify_lock_unused+0x140/0x140 [ 74.415133][ T4439] __mutex_lock_common+0x1e5/0x2400 [ 74.420317][ T4439] ? mdc800_device_open+0x2a/0x430 [ 74.425415][ T4439] ? mdc800_device_open+0x2a/0x430 [ 74.430506][ T4439] ? mutex_lock_io_nested+0x60/0x60 [ 74.435683][ T4439] ? chrdev_open+0x381/0x5f0 [ 74.440257][ T4439] ? __lock_acquire+0x7b50/0x7b50 [ 74.445260][ T4439] ? do_raw_spin_lock+0x128/0x2f0 [ 74.450262][ T4439] ? mdc800_device_write+0x11d0/0x11d0 [ 74.455701][ T4439] mutex_lock_nested+0x17/0x20 [ 74.460450][ T4439] mdc800_device_open+0x2a/0x430 [ 74.465373][ T4439] ? mdc800_device_write+0x11d0/0x11d0 [ 74.470826][ T4439] usb_open+0x1fe/0x300 [ 74.474963][ T4439] chrdev_open+0x585/0x5f0 [ 74.479371][ T4439] ? cd_forget+0x160/0x160 [ 74.483771][ T4439] ? fsnotify_perm+0x3a7/0x560 [ 74.488518][ T4439] ? cd_forget+0x160/0x160 [ 74.492913][ T4439] do_dentry_open+0x7f7/0xf90 [ 74.497575][ T4439] ? vfs_open+0x2b/0x80 [ 74.501712][ T4439] path_openat+0x2718/0x2fb0 [ 74.506290][ T4439] ? __kasan_slab_alloc+0xa9/0xc0 [ 74.511297][ T4439] ? do_filp_open+0x400/0x400 [ 74.515958][ T4439] do_filp_open+0x1df/0x400 [ 74.520445][ T4439] ? vfs_tmpfile+0x300/0x300 [ 74.525018][ T4439] ? _raw_spin_unlock+0x24/0x40 [ 74.529847][ T4439] ? alloc_fd+0x59e/0x650 [ 74.534162][ T4439] do_sys_openat2+0x14b/0x500 [ 74.538816][ T4439] ? __lock_acquire+0x7b50/0x7b50 [ 74.543822][ T4439] ? do_sys_open+0xe0/0xe0 [ 74.548217][ T4439] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 74.554176][ T4439] ? lock_chain_count+0x20/0x20 [ 74.559007][ T4439] __x64_sys_openat+0x135/0x160 [ 74.563836][ T4439] do_syscall_64+0x4c/0xa0 [ 74.568234][ T4439] ? clear_bhb_loop+0x30/0x80 [ 74.572892][ T4439] ? clear_bhb_loop+0x30/0x80 [ 74.577549][ T4439] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.583431][ T4439] RIP: 0033:0x7fec7eb7b90e [ 74.587833][ T4439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 74.607417][ T4439] RSP: 002b:00007ffc490d6078 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.615812][ T4439] RAX: ffffffffffffffda RBX: 000055555cea3500 RCX: 00007fec7eb7b90e [ 74.623764][ T4439] RDX: 0000000000000002 RSI: 00007ffc490d6150 RDI: ffffffffffffff9c [ 74.631717][ T4439] RBP: 00007fec7ec52024 R08: 0000000000000000 R09: 0000000000000000 [ 74.639666][ T4439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.647616][ T4439] R13: 00007fec7ee42fac R14: 00007fec7ee42fa0 R15: 00007fec7ee42fa0 [ 74.655578][ T4439] [ 74.662227][ T4271] Bluetooth: hci0: command 0x041b tx timeout [ 74.734938][ T4271] usb 1-1: USB disconnect, device number 2 [ 74.750849][ T4271] mdc800 1-1:1.0: Mustek MDC800 disconnected from USB.