Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. 2026/08/17 08:16:12 parsed 1 programs 2026/08/17 08:16:12 serving rpc on tcp://39601 [ 63.264271][ T4198] cgroup: Unknown subsys name 'net' [ 63.364888][ T4198] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.605915][ T4198] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.385444][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.408124][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.431470][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.443583][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.454284][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.462944][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.527370][ T4247] chnl_net:caif_netlink_parms(): no params data found [ 67.588057][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.595779][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.603835][ T4247] device bridge_slave_0 entered promiscuous mode [ 67.612856][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.620271][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.628933][ T4247] device bridge_slave_1 entered promiscuous mode [ 67.648092][ T4247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.659134][ T4247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.687105][ T4247] team0: Port device team_slave_0 added [ 67.694605][ T4247] team0: Port device team_slave_1 added [ 67.717346][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.724316][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.750418][ T4247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.766217][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.773484][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.799808][ T4247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.836684][ T4247] device hsr_slave_0 entered promiscuous mode [ 67.844373][ T4247] device hsr_slave_1 entered promiscuous mode [ 67.932689][ T4247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.943309][ T4247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.952027][ T4247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.961087][ T4247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.980351][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.987597][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.995358][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.002470][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.041215][ T4247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.052319][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.063755][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.072202][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.080556][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 68.092684][ T4247] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.103800][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.112599][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.119673][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.139584][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.148908][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.156017][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.165864][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.176171][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.210273][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.226443][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.234760][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.248244][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.343567][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.351840][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.364310][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.394032][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.412381][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.421744][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.429764][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.440519][ T4247] device veth0_vlan entered promiscuous mode [ 68.460153][ T4247] device veth1_vlan entered promiscuous mode [ 68.479513][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.487793][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.495765][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.508781][ T4247] device veth0_macvtap entered promiscuous mode [ 68.533581][ T4247] device veth1_macvtap entered promiscuous mode [ 68.549433][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.556891][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.565809][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.577837][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.585341][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.594514][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.608758][ T4247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.620976][ T4247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.630343][ T4247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.639324][ T4247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.732094][ T4247] syz-executor (4247) used greatest stack depth: 20336 bytes left 2026/08/17 08:16:20 executed programs: 0 [ 70.144303][ T4301] chnl_net:caif_netlink_parms(): no params data found [ 70.202014][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.209760][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.218589][ T4301] device bridge_slave_0 entered promiscuous mode [ 70.228007][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.235117][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.242962][ T4301] device bridge_slave_1 entered promiscuous mode [ 70.261635][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.273276][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.298022][ T4301] team0: Port device team_slave_0 added [ 70.306068][ T4301] team0: Port device team_slave_1 added [ 70.324174][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.332395][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.358516][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.370932][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.377934][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.404110][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.442199][ T4301] device hsr_slave_0 entered promiscuous mode [ 70.451448][ T4301] device hsr_slave_1 entered promiscuous mode [ 70.458134][ T4301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.466003][ T4301] Cannot create hsr debugfs directory [ 70.558757][ T4301] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.249317][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.255746][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.047574][ T4312] Bluetooth: hci0: command 0x0409 tx timeout [ 73.963464][ T4301] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.012079][ T4301] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.062108][ T4301] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.129910][ T1109] Bluetooth: hci0: command 0x041b tx timeout [ 74.171928][ T4301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.180912][ T4301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.190305][ T4301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.198995][ T4301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.250849][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.263642][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.272407][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.299202][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.309402][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.318182][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.326473][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.333696][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.348323][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.356368][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.365261][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.373923][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.381019][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.390421][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.399065][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.411376][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.420377][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.428993][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.454635][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.463450][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.475301][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.484865][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.508223][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.516609][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.526631][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.604040][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.612052][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.624695][ T9] device hsr_slave_0 left promiscuous mode [ 74.631467][ T9] device hsr_slave_1 left promiscuous mode [ 74.639433][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.646832][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.656467][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.664193][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.672003][ T9] device bridge_slave_1 left promiscuous mode [ 74.678881][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.691368][ T9] device bridge_slave_0 left promiscuous mode [ 74.698888][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.714038][ T9] device veth1_macvtap left promiscuous mode [ 74.720419][ T9] device veth0_macvtap left promiscuous mode [ 74.726501][ T9] device veth1_vlan left promiscuous mode [ 74.734368][ T9] device veth0_vlan left promiscuous mode [ 74.868715][ T9] team0 (unregistering): Port device team_slave_1 removed [ 74.881706][ T9] team0 (unregistering): Port device team_slave_0 removed [ 74.893769][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.911085][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.959913][ T9] bond0 (unregistering): Released all slaves [ 75.003115][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.021832][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.031014][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.050343][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.058764][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.066881][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.075043][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.084832][ T4301] device veth0_vlan entered promiscuous mode [ 75.101183][ T4301] device veth1_vlan entered promiscuous mode [ 75.121229][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.129341][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.137504][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.145870][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.159079][ T4301] device veth0_macvtap entered promiscuous mode [ 75.170103][ T4301] device veth1_macvtap entered promiscuous mode [ 75.189911][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.197528][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.205520][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.214018][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.222718][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.235007][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.242468][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.252126][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.263858][ T4301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.272947][ T4301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.281865][ T4301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.291005][ T4301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.343171][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.353362][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.372510][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.380682][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.381237][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.396282][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.707104][ T1108] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 76.067745][ T1108] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 76.077231][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.138855][ T1108] mdc800 1-1:1.0: Found Mustek MDC800 on USB. [ 76.208237][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 76.337786][ T4319] [ 76.340130][ T4319] ====================================================== [ 76.347121][ T4319] WARNING: possible circular locking dependency detected [ 76.354118][ T4319] syzkaller #0 Not tainted [ 76.358511][ T4319] ------------------------------------------------------ [ 76.365506][ T4319] syz.0.17/4319 is trying to acquire lock: [ 76.371304][ T4319] ffff888023b61220 (&mdc800->io_lock){+.+.}-{3:3}, at: mdc800_device_open+0x2a/0x430 [ 76.380776][ T4319] [ 76.380776][ T4319] but task is already holding lock: [ 76.388325][ T4319] ffffffff8cdbb3d0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x2c/0x300 [ 76.396663][ T4319] [ 76.396663][ T4319] which lock already depends on the new lock. [ 76.396663][ T4319] [ 76.407049][ T4319] [ 76.407049][ T4319] the existing dependency chain (in reverse order) is: [ 76.416040][ T4319] [ 76.416040][ T4319] -> #1 (minor_rwsem#2){++++}-{3:3}: [ 76.423513][ T4319] down_write+0x38/0x60 [ 76.428175][ T4319] usb_register_dev+0x2a3/0x7f0 [ 76.433543][ T4319] mdc800_usb_probe+0xf8a/0x1870 [ 76.438977][ T4319] usb_probe_interface+0x5be/0xae0 [ 76.444589][ T4319] really_probe+0x276/0xc70 [ 76.449590][ T4319] __driver_probe_device+0x1f5/0x390 [ 76.455438][ T4319] driver_probe_device+0x4f/0x420 [ 76.460971][ T4319] __device_attach_driver+0x2b0/0x500 [ 76.466850][ T4319] bus_for_each_drv+0x184/0x210 [ 76.472201][ T4319] __device_attach+0x2a7/0x480 [ 76.477467][ T4319] bus_probe_device+0xba/0x1d0 [ 76.482743][ T4319] device_add+0xbcf/0x1050 [ 76.487903][ T4319] usb_set_configuration+0x19d5/0x2030 [ 76.493884][ T4319] usb_generic_driver_probe+0x89/0x150 [ 76.499845][ T4319] usb_probe_device+0x126/0x250 [ 76.505198][ T4319] really_probe+0x276/0xc70 [ 76.510203][ T4319] __driver_probe_device+0x1f5/0x390 [ 76.515996][ T4319] driver_probe_device+0x4f/0x420 [ 76.521521][ T4319] __device_attach_driver+0x2b0/0x500 [ 76.527393][ T4319] bus_for_each_drv+0x184/0x210 [ 76.532759][ T4319] __device_attach+0x2a7/0x480 [ 76.538021][ T4319] bus_probe_device+0xba/0x1d0 [ 76.543283][ T4319] device_add+0xbcf/0x1050 [ 76.548198][ T4319] usb_new_device+0x9f6/0x15d0 [ 76.553470][ T4319] hub_event+0x2b8d/0x5260 [ 76.558383][ T4319] process_one_work+0x867/0xff0 [ 76.563734][ T4319] worker_thread+0xad7/0x12a0 [ 76.568902][ T4319] kthread+0x42e/0x520 [ 76.573465][ T4319] ret_from_fork+0x1f/0x30 [ 76.578377][ T4319] [ 76.578377][ T4319] -> #0 (&mdc800->io_lock){+.+.}-{3:3}: [ 76.586074][ T4319] __lock_acquire+0x2c66/0x7b50 [ 76.591418][ T4319] lock_acquire+0x19e/0x400 [ 76.596416][ T4319] __mutex_lock_common+0x1e5/0x2400 [ 76.602113][ T4319] mutex_lock_nested+0x17/0x20 [ 76.607388][ T4319] mdc800_device_open+0x2a/0x430 [ 76.612847][ T4319] usb_open+0x1fe/0x300 [ 76.617522][ T4319] chrdev_open+0x585/0x5f0 [ 76.622454][ T4319] do_dentry_open+0x7f7/0xf90 [ 76.627630][ T4319] path_openat+0x2718/0x2fb0 [ 76.632714][ T4319] do_filp_open+0x1df/0x400 [ 76.637714][ T4319] do_sys_openat2+0x14b/0x500 [ 76.642885][ T4319] __x64_sys_openat+0x135/0x160 [ 76.648246][ T4319] do_syscall_64+0x4c/0xa0 [ 76.653158][ T4319] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.659547][ T4319] [ 76.659547][ T4319] other info that might help us debug this: [ 76.659547][ T4319] [ 76.669750][ T4319] Possible unsafe locking scenario: [ 76.669750][ T4319] [ 76.677175][ T4319] CPU0 CPU1 [ 76.682522][ T4319] ---- ---- [ 76.687876][ T4319] lock(minor_rwsem#2); [ 76.692137][ T4319] lock(&mdc800->io_lock); [ 76.699132][ T4319] lock(minor_rwsem#2); [ 76.705868][ T4319] lock(&mdc800->io_lock); [ 76.710342][ T4319] [ 76.710342][ T4319] *** DEADLOCK *** [ 76.710342][ T4319] [ 76.718459][ T4319] 1 lock held by syz.0.17/4319: [ 76.723280][ T4319] #0: ffffffff8cdbb3d0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x2c/0x300 [ 76.732044][ T4319] [ 76.732044][ T4319] stack backtrace: [ 76.737917][ T4319] CPU: 1 PID: 4319 Comm: syz.0.17 Not tainted syzkaller #0 [ 76.745087][ T4319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.755126][ T4319] Call Trace: [ 76.758381][ T4319] [ 76.761292][ T4319] dump_stack_lvl+0x188/0x250 [ 76.765953][ T4319] ? load_image+0x410/0x410 [ 76.770436][ T4319] ? show_regs_print_info+0x20/0x20 [ 76.775618][ T4319] ? print_circular_bug+0x12b/0x1a0 [ 76.780797][ T4319] check_noncircular+0x296/0x330 [ 76.785713][ T4319] ? add_chain_block+0x9b0/0x9b0 [ 76.790621][ T4319] ? lockdep_lock+0xf1/0x1f0 [ 76.795188][ T4319] ? mark_lock+0x94/0x320 [ 76.799488][ T4319] ? _find_first_zero_bit+0xd1/0xf0 [ 76.804662][ T4319] __lock_acquire+0x2c66/0x7b50 [ 76.809510][ T4319] ? lockdep_lock+0xf1/0x1f0 [ 76.814085][ T4319] ? verify_lock_unused+0x140/0x140 [ 76.819272][ T4319] ? lockdep_unlock+0x143/0x2e0 [ 76.824106][ T4319] ? lockdep_lock+0x1f0/0x1f0 [ 76.828761][ T4319] ? mark_lock+0x286/0x320 [ 76.833151][ T4319] ? _find_first_zero_bit+0xd1/0xf0 [ 76.838345][ T4319] ? __lock_acquire+0x2844/0x7b50 [ 76.843350][ T4319] lock_acquire+0x19e/0x400 [ 76.847835][ T4319] ? mdc800_device_open+0x2a/0x430 [ 76.852921][ T4319] ? __might_sleep+0xf0/0xf0 [ 76.857487][ T4319] ? read_lock_is_recursive+0x10/0x10 [ 76.862838][ T4319] ? verify_lock_unused+0x140/0x140 [ 76.868012][ T4319] __mutex_lock_common+0x1e5/0x2400 [ 76.873190][ T4319] ? mdc800_device_open+0x2a/0x430 [ 76.878279][ T4319] ? mdc800_device_open+0x2a/0x430 [ 76.883373][ T4319] ? mutex_lock_io_nested+0x60/0x60 [ 76.888549][ T4319] ? chrdev_open+0x381/0x5f0 [ 76.893115][ T4319] ? __lock_acquire+0x7b50/0x7b50 [ 76.898115][ T4319] ? do_raw_spin_lock+0x128/0x2f0 [ 76.903115][ T4319] ? mdc800_device_write+0x11d0/0x11d0 [ 76.908551][ T4319] mutex_lock_nested+0x17/0x20 [ 76.913297][ T4319] mdc800_device_open+0x2a/0x430 [ 76.918207][ T4319] ? mdc800_device_write+0x11d0/0x11d0 [ 76.923638][ T4319] usb_open+0x1fe/0x300 [ 76.927779][ T4319] chrdev_open+0x585/0x5f0 [ 76.932193][ T4319] ? cd_forget+0x160/0x160 [ 76.936583][ T4319] ? fsnotify_perm+0x3a7/0x560 [ 76.941319][ T4319] ? cd_forget+0x160/0x160 [ 76.945709][ T4319] do_dentry_open+0x7f7/0xf90 [ 76.950364][ T4319] ? vfs_open+0x2b/0x80 [ 76.954493][ T4319] path_openat+0x2718/0x2fb0 [ 76.959064][ T4319] ? __kasan_slab_alloc+0xa9/0xc0 [ 76.964067][ T4319] ? do_filp_open+0x400/0x400 [ 76.968735][ T4319] do_filp_open+0x1df/0x400 [ 76.973213][ T4319] ? vfs_tmpfile+0x300/0x300 [ 76.977780][ T4319] ? _raw_spin_unlock+0x24/0x40 [ 76.982605][ T4319] ? alloc_fd+0x59e/0x650 [ 76.986907][ T4319] do_sys_openat2+0x14b/0x500 [ 76.991559][ T4319] ? __lock_acquire+0x7b50/0x7b50 [ 76.996559][ T4319] ? do_sys_open+0xe0/0xe0 [ 77.000968][ T4319] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.006932][ T4319] ? lock_chain_count+0x20/0x20 [ 77.011798][ T4319] __x64_sys_openat+0x135/0x160 [ 77.016642][ T4319] do_syscall_64+0x4c/0xa0 [ 77.021034][ T4319] ? clear_bhb_loop+0x30/0x80 [ 77.025708][ T4319] ? clear_bhb_loop+0x30/0x80 [ 77.030362][ T4319] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.036262][ T4319] RIP: 0033:0x7f4bb253890e [ 77.040662][ T4319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.060246][ T4319] RSP: 002b:00007ffcf431ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 77.068664][ T4319] RAX: ffffffffffffffda RBX: 00005555727f6500 RCX: 00007f4bb253890e [ 77.076613][ T4319] RDX: 0000000000000002 RSI: 00007ffcf431f000 RDI: ffffffffffffff9c [ 77.084561][ T4319] RBP: 00007f4bb260f024 R08: 0000000000000000 R09: 0000000000000000 [ 77.092515][ T4319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.100645][ T4319] R13: 00007f4bb27fffac R14: 00007f4bb27fffa0 R15: 00007f4bb27fffa0 [ 77.108608][ T4319] [ 77.138136][ T1108] usb 1-1: USB disconnect, device number 2 [ 77.145029][ T1108] mdc800 1-1:1.0: Mustek MDC800 disconnected from USB.