Warning: Permanently added '[localhost]:54239' (ED25519) to the list of known hosts. 2026/10/20 05:17:29 parsed 1 programs 2026/10/20 05:17:29 serving rpc on tcp://42353 [ 56.837864][ T5749] cgroup: Unknown subsys name 'net' [ 56.978505][ T5749] cgroup: Unknown subsys name 'cpuset' [ 56.980520][ T5749] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.953469][ T5749] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.749331][ T5755] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.753884][ T5755] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 59.769617][ T5755] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 59.770589][ T5755] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 59.779013][ T5755] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 60.549752][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.550741][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.551258][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.552931][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.553295][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.771725][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.771739][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.785392][ T235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.785403][ T235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.197818][ T5798] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.199953][ T5798] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.201192][ T5798] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.308662][ T5798] infiniband rxe0: set active [ 61.309101][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.309345][ T5798] infiniband rxe0: added rxe_eth0 [ 61.317433][ T5798] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 61.317453][ T5798] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 61.317474][ T5798] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 61.333082][ T5798] RDS/IB: rxe0: added [ 61.334591][ T5798] smc: adding ib device rxe0 with port count 1 [ 61.334628][ T5798] smc: ib device rxe0 port 1 has no pnetid [ 61.335110][ T29] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.351329][ T5798] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.590168][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.590695][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.590782][ T5798] bridge_slave_0: entered allmulticast mode [ 61.591618][ T5798] bridge_slave_0: entered promiscuous mode [ 61.594486][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.594556][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.594613][ T5798] bridge_slave_1: entered allmulticast mode [ 61.595394][ T5798] bridge_slave_1: entered promiscuous mode [ 61.610313][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.612278][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.624275][ T5798] team0: Port device team_slave_0 added [ 61.625539][ T5798] team0: Port device team_slave_1 added [ 61.638477][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.638488][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.638500][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.640137][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.640144][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.640156][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.661733][ T5798] hsr_slave_0: entered promiscuous mode [ 61.662206][ T5798] hsr_slave_1: entered promiscuous mode [ 61.767795][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.772671][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.773648][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.778252][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.778945][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.783310][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.792273][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.794704][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.809211][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.809266][ T5798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.809522][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.809609][ T5798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.838684][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.839572][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.846046][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.853690][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.857410][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.857501][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.861142][ T235] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.861185][ T235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.146658][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.179949][ T5798] veth0_vlan: entered promiscuous mode [ 62.184074][ T5798] veth1_vlan: entered promiscuous mode [ 62.198821][ T5798] veth0_macvtap: entered promiscuous mode [ 62.202701][ T5798] veth1_macvtap: entered promiscuous mode [ 62.212355][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.218847][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.237687][ T5802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.265821][ T5802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.266120][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.266139][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.324390][ T5802] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.373029][ T5841] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.397360][ T5802] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.453457][ T5802] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.503419][ T5802] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.597412][ T5846] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.791127][ T5852] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.949428][ T5857] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.080451][ T5861] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.289727][ T5864] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.527250][ T5869] rxe_eth0 speed is unknown, defaulting to 1000 2026/10/20 05:17:38 executed programs: 0 [ 63.831158][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.832186][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.833285][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.835430][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.836046][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.028091][ T5873] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.303809][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.303897][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.303986][ T5873] bridge_slave_0: entered allmulticast mode [ 64.305202][ T5873] bridge_slave_0: entered promiscuous mode [ 64.310030][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.310148][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.310263][ T5873] bridge_slave_1: entered allmulticast mode [ 64.311043][ T5873] bridge_slave_1: entered promiscuous mode [ 64.333188][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.336743][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.357279][ T5873] team0: Port device team_slave_0 added [ 64.359977][ T5873] team0: Port device team_slave_1 added [ 64.382502][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.382518][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.382537][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.384246][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.384258][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.384277][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.408751][ T5873] hsr_slave_0: entered promiscuous mode [ 64.409535][ T5873] hsr_slave_1: entered promiscuous mode [ 64.410189][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 64.410263][ T5873] Cannot create hsr debugfs directory [ 65.203885][ T5802] bridge_slave_1: left allmulticast mode [ 65.203907][ T5802] bridge_slave_1: left promiscuous mode [ 65.204641][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.217990][ T5802] bridge_slave_0: left allmulticast mode [ 65.218004][ T5802] bridge_slave_0: left promiscuous mode [ 65.218106][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.307682][ T5802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.310581][ T5802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.311912][ T5802] bond0 (unregistering): Released all slaves [ 65.472850][ T5802] hsr_slave_0: left promiscuous mode [ 65.475386][ T5802] hsr_slave_1: left promiscuous mode [ 65.477595][ T5802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.477623][ T5802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.479442][ T5802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.479458][ T5802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.492483][ T5802] veth1_macvtap: left promiscuous mode [ 65.492527][ T5802] veth0_macvtap: left promiscuous mode [ 65.492670][ T5802] veth1_vlan: left promiscuous mode [ 65.492738][ T5802] veth0_vlan: left promiscuous mode [ 65.685623][ T5802] team0 (unregistering): Port device team_slave_1 removed [ 65.693974][ T5802] team0 (unregistering): Port device team_slave_0 removed [ 65.744918][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 65.884263][ T5873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.888717][ T5873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.889411][ T5873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.894719][ T5873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.895702][ T5873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.904662][ T5873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.905534][ T5873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.911735][ T5873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.916754][ T5096] Bluetooth: hci0: command tx timeout [ 65.962707][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.968939][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.974995][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.975079][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.982120][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.982237][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.413822][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.448645][ T5873] veth0_vlan: entered promiscuous mode [ 66.454048][ T5873] veth1_vlan: entered promiscuous mode [ 66.474957][ T5873] veth0_macvtap: entered promiscuous mode [ 66.480635][ T5873] veth1_macvtap: entered promiscuous mode [ 66.488614][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.491761][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.506689][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.506946][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.506970][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.506992][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.580503][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.580518][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.610908][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.610923][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.672965][ T5921] [ 66.673803][ T5921] ====================================================== [ 66.675991][ T5921] WARNING: possible circular locking dependency detected [ 66.678132][ T5921] syzkaller #0 Not tainted [ 66.679573][ T5921] ------------------------------------------------------ [ 66.681746][ T5921] syz.0.18/5921 is trying to acquire lock: [ 66.683560][ T5921] ffff88801f89a740 (&sb->s_type->i_mutex_key#25){+.+.}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 66.687002][ T5921] [ 66.687002][ T5921] but task is already holding lock: [ 66.689220][ T5921] ffffffff91484f80 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 66.692039][ T5921] [ 66.692039][ T5921] which lock already depends on the new lock. [ 66.692039][ T5921] [ 66.695162][ T5921] [ 66.695162][ T5921] the existing dependency chain (in reverse order) is: [ 66.697842][ T5921] [ 66.697842][ T5921] -> #3 (tpg_instances_lock){+.+.}-{4:4}: [ 66.700261][ T5921] lock_acquire+0x1d1/0x380 [ 66.701808][ T5921] __mutex_lock+0x1a4/0x1bd0 [ 66.703376][ T5921] tcm_alloc_inst+0x5f/0x1e0 [ 66.704930][ T5921] try_get_usb_function_instance+0x136/0x1f0 [ 66.706893][ T5921] usb_get_function_instance+0x16/0x70 [ 66.708728][ T5921] function_make+0x18c/0x3f0 [ 66.710334][ T5921] configfs_mkdir+0x525/0xd40 [ 66.711944][ T5921] vfs_mkdir+0x364/0x850 [ 66.713408][ T5921] filename_mkdirat+0x48b/0x5e0 [ 66.715061][ T5921] __ia32_sys_mkdirat+0x88/0xc0 [ 66.716691][ T5921] __do_fast_syscall_32+0x13a/0x8b0 [ 66.718384][ T5921] do_fast_syscall_32+0x32/0x70 [ 66.720059][ T5921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.722104][ T5921] [ 66.722104][ T5921] -> #2 (func_lock){+.+.}-{4:4}: [ 66.724222][ T5921] lock_acquire+0x1d1/0x380 [ 66.725769][ T5921] __mutex_lock+0x1a4/0x1bd0 [ 66.727331][ T5921] try_get_usb_function_instance+0x26/0x1f0 [ 66.729268][ T5921] usb_get_function_instance+0x16/0x70 [ 66.731086][ T5921] function_make+0x18c/0x3f0 [ 66.732633][ T5921] configfs_mkdir+0x525/0xd40 [ 66.734217][ T5921] vfs_mkdir+0x364/0x850 [ 66.735660][ T5921] filename_mkdirat+0x48b/0x5e0 [ 66.737294][ T5921] __ia32_sys_mkdir+0x6a/0x90 [ 66.738878][ T5921] __do_fast_syscall_32+0x13a/0x8b0 [ 66.740638][ T5921] do_fast_syscall_32+0x32/0x70 [ 66.742280][ T5921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.744333][ T5921] [ 66.744333][ T5921] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 66.746785][ T5921] lock_acquire+0x1d1/0x380 [ 66.748322][ T5921] __mutex_lock+0x1a4/0x1bd0 [ 66.749849][ T5921] uvcg_streaming_header_allow_link+0x7c/0x650 [ 66.751843][ T5921] configfs_symlink+0x695/0x1340 [ 66.753459][ T5921] vfs_symlink+0x178/0x4d0 [ 66.754966][ T5921] filename_symlinkat+0x2a6/0x560 [ 66.756614][ T5921] __ia32_sys_symlink+0x78/0xb0 [ 66.758466][ T5921] __do_fast_syscall_32+0x13a/0x8b0 [ 66.760477][ T5921] do_fast_syscall_32+0x32/0x70 [ 66.762372][ T5921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.764889][ T5921] [ 66.764889][ T5921] -> #0 (&sb->s_type->i_mutex_key#25){+.+.}-{4:4}: [ 66.768021][ T5921] check_prev_add+0xeb/0xe60 [ 66.769823][ T5921] __lock_acquire+0x1528/0x1f40 [ 66.771477][ T5921] lock_acquire+0x1d1/0x380 [ 66.773189][ T5921] down_write+0x8b/0x1f0 [ 66.774868][ T5921] configfs_depend_item_unlocked+0xf3/0x6a0 [ 66.777174][ T5921] usbg_make_tpg+0x251/0x610 [ 66.778884][ T5921] target_fabric_make_tpg+0xab/0x8c0 [ 66.780824][ T5921] configfs_mkdir+0x525/0xd40 [ 66.782397][ T5921] vfs_mkdir+0x364/0x850 [ 66.783843][ T5921] filename_mkdirat+0x48b/0x5e0 [ 66.785459][ T5921] __ia32_sys_mkdirat+0x88/0xc0 [ 66.787082][ T5921] __do_fast_syscall_32+0x13a/0x8b0 [ 66.788777][ T5921] do_fast_syscall_32+0x32/0x70 [ 66.790444][ T5921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.792485][ T5921] [ 66.792485][ T5921] other info that might help us debug this: [ 66.792485][ T5921] [ 66.795569][ T5921] Chain exists of: [ 66.795569][ T5921] &sb->s_type->i_mutex_key#25 --> func_lock --> tpg_instances_lock [ 66.795569][ T5921] [ 66.799634][ T5921] Possible unsafe locking scenario: [ 66.799634][ T5921] [ 66.801837][ T5921] CPU0 CPU1 [ 66.803431][ T5921] ---- ---- [ 66.805015][ T5921] lock(tpg_instances_lock); [ 66.806438][ T5921] lock(func_lock); [ 66.808308][ T5921] lock(tpg_instances_lock); [ 66.810468][ T5921] lock(&sb->s_type->i_mutex_key#25); [ 66.812080][ T5921] [ 66.812080][ T5921] *** DEADLOCK *** [ 66.812080][ T5921] [ 66.814464][ T5921] locks held by syz.0.18/5921: 4, last CPU#1: [ 66.816308][ T5921] #0: ffff888023b06460 (sb_writers#12){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 66.819146][ T5921] #1: ffff888029987340 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 66.822346][ T5921] #2: ffffffff90fb7de8 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 66.825201][ T5921] #3: ffffffff91484f80 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 66.828046][ T5921] [ 66.828046][ T5921] stack backtrace: [ 66.829823][ T5921] CPU: 1 UID: 0 PID: 5921 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 66.832500][ T5921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.835541][ T5921] Call Trace: [ 66.836567][ T5921] [ 66.837477][ T5921] dump_stack_lvl+0x100/0x190 [ 66.838913][ T5921] print_circular_bug.cold+0x178/0x1be [ 66.840570][ T5921] check_noncircular+0x146/0x160 [ 66.842072][ T5921] check_prev_add+0xeb/0xe60 [ 66.843469][ T5921] __lock_acquire+0x1528/0x1f40 [ 66.844948][ T5921] ? rcu_is_watching+0x13/0xc0 [ 66.846382][ T5921] lock_acquire+0x1d1/0x380 [ 66.847737][ T5921] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 66.849585][ T5921] ? __pfx___might_resched+0x10/0x10 [ 66.851158][ T5921] down_write+0x8b/0x1f0 [ 66.852432][ T5921] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 66.854256][ T5921] ? __pfx_down_write+0x10/0x10 [ 66.855708][ T5921] ? kstrtou16+0xde/0x130 [ 66.857022][ T5921] configfs_depend_item_unlocked+0xf3/0x6a0 [ 66.858780][ T5921] usbg_make_tpg+0x251/0x610 [ 66.860184][ T5921] ? __pfx_usbg_make_tpg+0x10/0x10 [ 66.861712][ T5921] ? find_held_lock+0x2b/0x80 [ 66.863132][ T5921] ? __pfx_usbg_make_tpg+0x10/0x10 [ 66.864661][ T5921] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 66.866447][ T5921] target_fabric_make_tpg+0xab/0x8c0 [ 66.868022][ T5921] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 66.869786][ T5921] configfs_mkdir+0x525/0xd40 [ 66.871233][ T5921] ? __pfx_configfs_mkdir+0x10/0x10 [ 66.872779][ T5921] vfs_mkdir+0x364/0x850 [ 66.874045][ T5921] filename_mkdirat+0x48b/0x5e0 [ 66.875512][ T5921] ? __pfx_filename_mkdirat+0x10/0x10 [ 66.877117][ T5921] ? strncpy_from_user+0x19d/0x2d0 [ 66.878651][ T5921] ? do_getname+0x191/0x390 [ 66.880048][ T5921] __ia32_sys_mkdirat+0x88/0xc0 [ 66.881498][ T5921] __do_fast_syscall_32+0x13a/0x8b0 [ 66.883066][ T5921] do_fast_syscall_32+0x32/0x70 [ 66.884520][ T5921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.886413][ T5921] RIP: 0023:0xf7fa2fec [ 66.887634][ T5921] Code: Unable to access opcode bytes at 0xf7fa2fc2. [ 66.889582][ T5921] RSP: 002b:00000000ffcf9c5c EFLAGS: 00000296 ORIG_RAX: 0000000000000128 [ 66.892051][ T5921] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000380 [ 66.894381][ T5921] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 66.896701][ T5921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.899059][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.901441][ T5921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.903854][ T5921] [ 67.996134][ T5096] Bluetooth: hci0: command tx timeout 2026/10/20 05:17:43 executed programs: 116 [ 70.086208][ T5096] Bluetooth: hci0: command tx timeout [ 70.876632][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.876657][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.887561][ T1343] cfg80211: failed to load regulatory.db [ 72.156575][ T5096] Bluetooth: hci0: command tx timeout [ 72.504041][ T854] rxe_eth0 speed is unknown, defaulting to 1000 2026/10/20 05:17:48 executed programs: 410