last executing test programs: 4.28358225s ago: executing program 3 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3c0) r0 = fanotify_init(0x200, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x100, 0x0) fanotify_mark(r0, 0x61, 0x40001002, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fanotify_mark(r0, 0x1, 0x4800003e, r2, 0x0) utimes(&(0x7f0000000240)='./file0\x00', 0x0) 4.024035929s ago: executing program 3 (id=152): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="db1f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000640)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="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", 0xdea}], 0x1}}], 0x2, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4067, 0xfe3, 0x0, 0x0, 0x61}, &(0x7f0000000000)=0x40) 3.903760226s ago: executing program 3 (id=153): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "ff55eafb68791461", "2e133e100d9ce0162540a5b1387f2f308ead1ef7721a453ecfc90f36b519d104", "90ed2a90", "5934f0eb0c35b98f"}, 0x38) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.895905544s ago: executing program 1 (id=162): creat(0x0, 0x12e) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000000400)=[0xee01, 0x0]) setgroups(0x0, 0x0) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$setperm(0x5, r0, 0x200400) 2.728840389s ago: executing program 1 (id=164): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000006c0)=""/4085, 0xff5}], 0x1}, 0x8}], 0x1, 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x2) ioctl(r1, 0x400c4d00, &(0x7f0000000a00)) 2.542129251s ago: executing program 1 (id=167): openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x2, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.423317756s ago: executing program 0 (id=169): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000020000000000aaff02000000000000000000000000000111"], 0xffe) 2.336388808s ago: executing program 2 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) 2.233997893s ago: executing program 1 (id=171): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000200)=0x54) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x358, '\x00'/856}, &(0x7f0000000400)=0x380) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000500)={'raw\x00'}, &(0x7f0000000600)=0x54) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000700)={'raw\x00', 0x288, '\x00'/648}, &(0x7f0000000a00)=0x2b0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000b00)={'mangle\x00'}, &(0x7f0000000c00)=0x54) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000d00)={'mangle\x00', 0x4f8, '\x00'/1272}, &(0x7f0000001200)=0x520) 1.929762317s ago: executing program 2 (id=172): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.915915233s ago: executing program 0 (id=173): socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0)) 1.828210864s ago: executing program 1 (id=174): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2c6, 0x4) 1.74061359s ago: executing program 2 (id=175): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xee}], 0x591, 0x10062, 0x0) 1.611029659s ago: executing program 3 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) pipe(0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) 1.415652163s ago: executing program 2 (id=177): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/115, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/100, 0x0, 0x1000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x0, 0xffff2f2f}) 1.366606505s ago: executing program 3 (id=178): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.26248173s ago: executing program 0 (id=179): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x8922, &(0x7f0000000240)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) fstat(r0, 0x0) 1.143883917s ago: executing program 3 (id=180): setitimer(0x2, &(0x7f0000000240)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000340)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x700, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x13}}}}}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.110393733s ago: executing program 2 (id=181): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 987.378626ms ago: executing program 0 (id=182): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x11}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x20000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 863.754572ms ago: executing program 2 (id=183): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x40000002, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff8, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 784.81879ms ago: executing program 1 (id=184): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000002c0)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) 256.330143ms ago: executing program 0 (id=185): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0x88, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0xffffffff], [0xffffffff, 0x7fffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x123080) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000001540)={0x0, &(0x7f0000000540)="0f", 0x1}) 0s ago: executing program 0 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getdents64(r0, 0x0, 0x0) lseek(r0, 0xf596, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 81.667126][ T5599] cgroup: Unknown subsys name 'net' [ 81.761219][ T5599] cgroup: Unknown subsys name 'cpuset' [ 81.770199][ T5599] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.397067][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.731539][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.732851][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.734811][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.759406][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.761318][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.947255][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.949205][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.950444][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.951016][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.953167][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.978331][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.979213][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.979288][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.979874][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.980630][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.982743][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.987325][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.990864][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.993343][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.001282][ T4929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.434230][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.435173][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.435933][ T5609] bridge_slave_0: entered allmulticast mode [ 87.455678][ T5609] bridge_slave_0: entered promiscuous mode [ 87.468047][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.468162][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.468539][ T5609] bridge_slave_1: entered allmulticast mode [ 87.470326][ T5609] bridge_slave_1: entered promiscuous mode [ 87.566571][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.630913][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.711872][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.712022][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.712184][ T5617] bridge_slave_0: entered allmulticast mode [ 87.713456][ T5617] bridge_slave_0: entered promiscuous mode [ 87.719784][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.720050][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.720397][ T5617] bridge_slave_1: entered allmulticast mode [ 87.724390][ T5617] bridge_slave_1: entered promiscuous mode [ 87.742037][ T5609] team0: Port device team_slave_0 added [ 87.805045][ T5609] team0: Port device team_slave_1 added [ 87.860898][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.867827][ T4929] Bluetooth: hci0: command tx timeout [ 87.906483][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.911560][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.911614][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.911681][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.989461][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.989479][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.989507][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.990240][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.990399][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.990529][ T5619] bridge_slave_0: entered allmulticast mode [ 87.992045][ T5619] bridge_slave_0: entered promiscuous mode [ 88.031185][ T4929] Bluetooth: hci1: command tx timeout [ 88.091861][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.092038][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.092170][ T5619] bridge_slave_1: entered allmulticast mode [ 88.093714][ T5619] bridge_slave_1: entered promiscuous mode [ 88.108967][ T55] Bluetooth: hci2: command tx timeout [ 88.110850][ T4929] Bluetooth: hci3: command tx timeout [ 88.144168][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.144277][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.144403][ T5618] bridge_slave_0: entered allmulticast mode [ 88.145957][ T5618] bridge_slave_0: entered promiscuous mode [ 88.184591][ T5617] team0: Port device team_slave_0 added [ 88.184828][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.184999][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.185132][ T5618] bridge_slave_1: entered allmulticast mode [ 88.186657][ T5618] bridge_slave_1: entered promiscuous mode [ 88.210676][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.216609][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.243475][ T5617] team0: Port device team_slave_1 added [ 88.332996][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.345450][ T5609] hsr_slave_0: entered promiscuous mode [ 88.350847][ T5609] hsr_slave_1: entered promiscuous mode [ 88.359921][ T5619] team0: Port device team_slave_0 added [ 88.360984][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.360998][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.361025][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.366403][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.377610][ T5619] team0: Port device team_slave_1 added [ 88.379778][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.379793][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.379868][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.529577][ T5618] team0: Port device team_slave_0 added [ 88.544616][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.544636][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.544655][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.550815][ T5618] team0: Port device team_slave_1 added [ 88.605875][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.605891][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.605915][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.678439][ T5617] hsr_slave_0: entered promiscuous mode [ 88.679681][ T5617] hsr_slave_1: entered promiscuous mode [ 88.680241][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 88.680321][ T5617] Cannot create hsr debugfs directory [ 88.730333][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.730350][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.730381][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.791611][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.791629][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.791653][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.822416][ T5619] hsr_slave_0: entered promiscuous mode [ 88.825750][ T5619] hsr_slave_1: entered promiscuous mode [ 88.828440][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 88.828504][ T5619] Cannot create hsr debugfs directory [ 89.036343][ T5618] hsr_slave_0: entered promiscuous mode [ 89.038904][ T5618] hsr_slave_1: entered promiscuous mode [ 89.041326][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 89.041388][ T5618] Cannot create hsr debugfs directory [ 89.292509][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.298396][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.320719][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.325249][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.348734][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.352994][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.390056][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.396645][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.481447][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.485503][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.486479][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.512043][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.513423][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.516149][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.543538][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.560789][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.664462][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.679214][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.680131][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.683064][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.684682][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.694294][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.721580][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.736591][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.848437][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.851842][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.873878][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.884680][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.885698][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.904029][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.915190][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.922262][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.943437][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.947603][ T55] Bluetooth: hci0: command tx timeout [ 90.009817][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.036512][ T1410] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.036713][ T1410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.070258][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.092342][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.092420][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.119643][ T55] Bluetooth: hci1: command tx timeout [ 90.158073][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.187515][ T55] Bluetooth: hci2: command tx timeout [ 90.187551][ T55] Bluetooth: hci3: command tx timeout [ 90.188941][ T1410] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.189057][ T1410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.234208][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.234323][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.279729][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.359898][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.390685][ T1410] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.390797][ T1410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.408883][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.451023][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.451141][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.515568][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.550324][ T3373] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.550435][ T3373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.621444][ T3373] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.621563][ T3373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.350538][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.535282][ T5609] veth0_vlan: entered promiscuous mode [ 91.550646][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.592394][ T5609] veth1_vlan: entered promiscuous mode [ 91.680687][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.748558][ T5617] veth0_vlan: entered promiscuous mode [ 91.753935][ T5609] veth0_macvtap: entered promiscuous mode [ 91.783259][ T5609] veth1_macvtap: entered promiscuous mode [ 91.794226][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.814906][ T5617] veth1_vlan: entered promiscuous mode [ 91.851137][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.876078][ T5618] veth0_vlan: entered promiscuous mode [ 91.889701][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.940005][ T5618] veth1_vlan: entered promiscuous mode [ 91.941803][ T5617] veth0_macvtap: entered promiscuous mode [ 91.971819][ T5617] veth1_macvtap: entered promiscuous mode [ 92.022045][ T5619] veth0_vlan: entered promiscuous mode [ 92.028318][ T4929] Bluetooth: hci0: command tx timeout [ 92.040085][ T51] cfg80211: failed to load regulatory.db [ 92.067493][ T3373] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.070615][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.119669][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.164130][ T5619] veth1_vlan: entered promiscuous mode [ 92.182382][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.182409][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.191731][ T5618] veth0_macvtap: entered promiscuous mode [ 92.202767][ T4929] Bluetooth: hci1: command tx timeout [ 92.254065][ T5618] veth1_macvtap: entered promiscuous mode [ 92.270211][ T55] Bluetooth: hci2: command tx timeout [ 92.270310][ T4929] Bluetooth: hci3: command tx timeout [ 92.281793][ T3373] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.283539][ T1410] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.283586][ T1410] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.283626][ T1410] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.283665][ T1410] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.283703][ T1410] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.283740][ T1410] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.369030][ T3373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.369052][ T3373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.438055][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.473198][ T5619] veth0_macvtap: entered promiscuous mode [ 92.480361][ T1410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.480416][ T1410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.493542][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.533175][ T5609] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.562792][ T5619] veth1_macvtap: entered promiscuous mode [ 92.613073][ T3373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.613095][ T3373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.700169][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.723642][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.778327][ T3373] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.805449][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.805489][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.828946][ T3373] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.829021][ T3373] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.829060][ T3373] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.953626][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.953649][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.114105][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.114129][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.272556][ T3373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.272579][ T3373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.311906][ T5780] netlink: 'syz.3.9': attribute type 4 has an invalid length. [ 93.343840][ T5780] netlink: 'syz.3.9': attribute type 4 has an invalid length. [ 93.369152][ T3373] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.450825][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.454325][ T1410] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.518065][ T1410] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.518119][ T1410] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.587100][ T5707] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.609080][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 93.610019][ T32] usb 1-1: New USB device found: idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 93.617953][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.617981][ T32] usb 1-1: Product: syz [ 93.617997][ T32] usb 1-1: Manufacturer: syz [ 93.618012][ T32] usb 1-1: SerialNumber: syz [ 93.713357][ T32] usb 1-1: config 0 descriptor?? [ 93.776924][ T5707] usb 3-1: Using ep0 maxpacket: 32 [ 93.777889][ T5707] usb 3-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 93.780064][ T5707] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 93.780093][ T5707] usb 3-1: config 0 has no interface number 0 [ 93.780307][ T5707] usb 3-1: config 0 interface 12 has no altsetting 0 [ 93.785456][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.785484][ T5707] usb 3-1: Product: syz [ 93.785526][ T5707] usb 3-1: Manufacturer: syz [ 93.785542][ T5707] usb 3-1: SerialNumber: syz [ 93.858332][ T5707] usb 3-1: config 0 descriptor?? [ 93.927579][ T32] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 94.107228][ T4929] Bluetooth: hci0: command tx timeout [ 94.267224][ T4929] Bluetooth: hci1: command tx timeout [ 94.347362][ T55] Bluetooth: hci2: command tx timeout [ 94.347413][ T4929] Bluetooth: hci3: command tx timeout [ 95.040931][ T5810] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 95.118204][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.267745][ T9] usb 2-1: New USB device found: idVendor=28de, idProduct=1142, bcdDevice=0.00 [ 95.269780][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.269814][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.269841][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.276039][ T9] usb 2-1: config 0 descriptor?? [ 95.361714][ T32] usb write operation failed. (-71) [ 95.377698][ T32] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 95.378454][ T32] dvbdev: DVB: registering new adapter (Terratec H7) [ 95.378539][ T32] usb 1-1: media controller created [ 95.379098][ T32] usb read operation failed. (-71) [ 95.380303][ T32] usb write operation failed. (-71) [ 95.433409][ T32] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 95.452923][ T32] usb 1-1: USB disconnect, device number 2 [ 95.588175][ T5707] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 95.588238][ T5707] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 95.588257][ T5707] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 95.588380][ T5707] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 95.633633][ T5707] usb 3-1: USB disconnect, device number 2 [ 95.725313][ T9] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 95.735460][ T9] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 95.792124][ T9] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 95.792319][ T9] hid-steam 0003:28DE:1142.0001: steam_probe:steam_get_conn_status failed with error -22 [ 95.823014][ T9] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 95.843630][ T9] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 95.933102][ T9] usb 2-1: USB disconnect, device number 2 [ 95.983998][ T9] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 96.020919][ T5815] fido_id[5815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 96.258749][ T5821] tipc: Started in network mode [ 96.258782][ T5821] tipc: Node identity 3eb108b5e2e2, cluster identity 4711 [ 96.259031][ T5821] tipc: Enabled bearer , priority 1 [ 96.260486][ T5820] tipc: Resetting bearer [ 96.297779][ T5820] tipc: Disabling bearer [ 96.413928][ T5826] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.751202][ T5707] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.909551][ T5707] usb 2-1: Using ep0 maxpacket: 32 [ 96.910298][ T5707] usb 2-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 96.912798][ T5707] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 96.912825][ T5707] usb 2-1: config 0 has no interface number 0 [ 96.912867][ T5707] usb 2-1: config 0 interface 184 has no altsetting 0 [ 96.915585][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 96.916284][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.916310][ T5707] usb 2-1: Product: syz [ 96.916324][ T5707] usb 2-1: Manufacturer: syz [ 96.916339][ T5707] usb 2-1: SerialNumber: syz [ 96.987627][ T5707] usb 2-1: config 0 descriptor?? [ 97.272619][ T33] audit: type=1326 audit(1791526177.021:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.3.36" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d8c39e1d9 code=0x0 [ 97.303152][ T5857] kvm: emulating exchange as write [ 98.428111][ T5707] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 98.428146][ T5707] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 98.431063][ T5707] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 98.431094][ T5707] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 98.431113][ T5707] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 98.431132][ T5707] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 98.431607][ T5707] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 98.527273][ T5707] usb 2-1: USB disconnect, device number 3 [ 98.564592][ T5907] syz.3.59 uses obsolete (PF_INET,SOCK_PACKET) [ 98.616425][ T27] kernel read not supported for file /swaps (pid: 27 comm: kworker/1:0) [ 98.715684][ T5915] FAULT_INJECTION: forcing a failure. [ 98.715684][ T5915] name failslab, interval 1, probability 0, space 0, times 1 [ 98.715738][ T5915] CPU: 1 UID: 0 PID: 5915 Comm: syz.2.62 Not tainted syzkaller #0 PREEMPT(full) [ 98.715769][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.715790][ T5915] Call Trace: [ 98.715802][ T5915] [ 98.715811][ T5915] dump_stack_lvl+0xe8/0x150 [ 98.715842][ T5915] should_fail_ex+0x3eb/0x540 [ 98.715872][ T5915] should_failslab+0xa8/0x100 [ 98.715896][ T5915] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 98.715921][ T5915] ? __pfx_gfs2_parse_param+0x10/0x10 [ 98.715940][ T5915] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 98.715958][ T5915] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 98.715984][ T5915] kmemdup_nul+0x36/0xf0 [ 98.716005][ T5915] vfs_parse_monolithic_sep+0x21b/0x360 [ 98.716025][ T5915] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 98.716045][ T5915] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 98.716066][ T5915] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 98.716094][ T5915] ? alloc_fs_context+0x9b2/0xd00 [ 98.716124][ T5915] do_new_mount+0x2ee/0xb00 [ 98.716151][ T5915] ? __pfx_do_new_mount+0x10/0x10 [ 98.716175][ T5915] ? ns_capable+0x84/0xe0 [ 98.716199][ T5915] ? path_mount+0x647/0x1050 [ 98.716224][ T5915] ? user_path_at+0xd4/0x160 [ 98.716258][ T5915] __se_sys_mount+0x31d/0x420 [ 98.716284][ T5915] ? __pfx___se_sys_mount+0x10/0x10 [ 98.716310][ T5915] ? __x64_sys_mount+0x20/0xc0 [ 98.716333][ T5915] do_syscall_64+0x166/0x520 [ 98.716355][ T5915] ? trace_irq_disable+0x3b/0x140 [ 98.716375][ T5915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.716398][ T5915] ? clear_bhb_loop+0x70/0xc0 [ 98.716421][ T5915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.716445][ T5915] RIP: 0033:0x7f263fd9e1d9 [ 98.716474][ T5915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.716492][ T5915] RSP: 002b:00007f2640c12028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.716522][ T5915] RAX: ffffffffffffffda RBX: 00007f2640025fa0 RCX: 00007f263fd9e1d9 [ 98.716538][ T5915] RDX: 0000200000000680 RSI: 00002000000001c0 RDI: 0000200000000180 [ 98.716553][ T5915] RBP: 00007f263fe35888 R08: 00002000000006c0 R09: 0000000000000000 [ 98.716568][ T5915] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 98.716581][ T5915] R13: 00007f2640026038 R14: 00007f2640025fa0 R15: 00007fffedb5c348 [ 98.716614][ T5915] [ 99.518120][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.586969][ T1223] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.677597][ T27] usb 1-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 99.678729][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.678778][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 99.678806][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 99.678849][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.709669][ T5707] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.767967][ T1223] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 99.775643][ T1223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.775672][ T1223] usb 2-1: Product: syz [ 99.775688][ T1223] usb 2-1: Manufacturer: syz [ 99.775703][ T1223] usb 2-1: SerialNumber: syz [ 99.891689][ T5707] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 99.893469][ T5707] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.909231][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.909357][ T5707] usb 3-1: Product: syz [ 99.909399][ T5707] usb 3-1: Manufacturer: syz [ 99.909433][ T5707] usb 3-1: SerialNumber: syz [ 100.141704][ T5928] syz.3.67 (5928): drop_caches: 2 [ 100.169660][ T27] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 100.169755][ T27] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 100.169770][ T27] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 100.212385][ T27] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 100.227747][ T27] usb 1-1: USB disconnect, device number 3 [ 100.258587][ T1223] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 100.258655][ T1223] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 101.028089][ T5707] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 101.028668][ T5699] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.051036][ T5707] cdc_ncm 3-1:1.0: bind() failure [ 101.064162][ T5707] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 101.064213][ T5707] cdc_ncm 3-1:1.1: bind() failure [ 101.082189][ T5707] usb 3-1: USB disconnect, device number 3 [ 101.087759][ T1223] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 101.087942][ T1223] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 101.146197][ T1223] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 101.160791][ T1223] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 101.178661][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 101.179385][ T5699] usb 1-1: New USB device found: idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 101.185084][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.185112][ T5699] usb 1-1: Product: syz [ 101.185128][ T5699] usb 1-1: Manufacturer: syz [ 101.185143][ T5699] usb 1-1: SerialNumber: syz [ 101.212690][ T5699] usb 1-1: config 0 descriptor?? [ 101.251367][ T1223] usb 2-1: USB disconnect, device number 4 [ 101.279497][ T5699] gspca_main: spca508-2.14.0 probing 041e:4018 [ 101.440580][ T5699] gspca_spca508: reg_read err -32 [ 101.442426][ T5699] gspca_spca508: reg_read err -32 [ 101.443879][ T5699] gspca_spca508: reg_read err -32 [ 101.660231][ T5699] gspca_spca508: reg_read err -32 [ 101.869005][ T5699] gspca_spca508: reg write: error -71 [ 101.869092][ T5699] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 101.896903][ T5699] usb 1-1: USB disconnect, device number 4 [ 102.474217][ T5974] FAULT_INJECTION: forcing a failure. [ 102.474217][ T5974] name failslab, interval 1, probability 0, space 0, times 0 [ 102.474258][ T5974] CPU: 0 UID: 0 PID: 5974 Comm: syz.3.88 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.474290][ T5974] Tainted: [L]=SOFTLOCKUP [ 102.474298][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.474312][ T5974] Call Trace: [ 102.474320][ T5974] [ 102.474329][ T5974] dump_stack_lvl+0xe8/0x150 [ 102.474361][ T5974] should_fail_ex+0x3eb/0x540 [ 102.474390][ T5974] should_failslab+0xa8/0x100 [ 102.474415][ T5974] __kvmalloc_node_noprof+0x171/0x820 [ 102.474438][ T5974] ? netdev_alloc_config+0x4f/0xc0 [ 102.474459][ T5974] ? netdev_alloc_config+0x4f/0xc0 [ 102.474480][ T5974] ? alloc_netdev_mqs+0xd5b/0x1240 [ 102.474501][ T5974] ? alloc_netdev_mqs+0xd5b/0x1240 [ 102.474529][ T5974] alloc_netdev_mqs+0xd5b/0x1240 [ 102.474559][ T5974] vif_add+0x625/0x1780 [ 102.474590][ T5974] ? trace_contention_end+0x3d/0x140 [ 102.474614][ T5974] ? __pfx_vif_add+0x10/0x10 [ 102.474632][ T5974] ? hook_capable+0x24b/0x7b0 [ 102.474660][ T5974] ? lock_acquire+0x115/0x350 [ 102.474713][ T5974] ip_mroute_setsockopt+0xf8a/0x10d0 [ 102.474746][ T5974] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 102.474796][ T5974] do_ip_setsockopt+0xeba/0x2e30 [ 102.474825][ T5974] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 102.474845][ T5974] ? do_futex+0x3e7/0x4e0 [ 102.474865][ T5974] ? __asan_memcpy+0x40/0x70 [ 102.474889][ T5974] ? lock_acquire+0x115/0x350 [ 102.474921][ T5974] ? aa_sock_opt_perm+0xe8/0x1e0 [ 102.474948][ T5974] ip_setsockopt+0x66/0x110 [ 102.474967][ T5974] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 102.474992][ T5974] do_sock_setsockopt+0x17c/0x1b0 [ 102.475019][ T5974] __x64_sys_setsockopt+0x13d/0x1b0 [ 102.475048][ T5974] do_syscall_64+0x166/0x520 [ 102.475068][ T5974] ? trace_irq_disable+0x3b/0x140 [ 102.475088][ T5974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.475111][ T5974] ? clear_bhb_loop+0x70/0xc0 [ 102.475135][ T5974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.475157][ T5974] RIP: 0033:0x7f9d8c39e1d9 [ 102.475177][ T5974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.475203][ T5974] RSP: 002b:00007f9d8d1bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 102.475228][ T5974] RAX: ffffffffffffffda RBX: 00007f9d8c625fa0 RCX: 00007f9d8c39e1d9 [ 102.475248][ T5974] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000004 [ 102.475261][ T5974] RBP: 00007f9d8c435888 R08: 0000000000000010 R09: 0000000000000000 [ 102.475276][ T5974] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 102.475290][ T5974] R13: 00007f9d8c626038 R14: 00007f9d8c625fa0 R15: 00007ffd687d5f08 [ 102.475326][ T5974] [ 103.177220][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.181513][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.328812][ T27] usb 4-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 103.329627][ T27] usb 4-1: config 0 has no interfaces? [ 103.331795][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 103.331821][ T27] usb 4-1: Product: syz [ 103.331837][ T27] usb 4-1: Manufacturer: syz [ 103.365643][ T27] usb 4-1: config 0 descriptor?? [ 103.403993][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 103.405822][ T9] usb 2-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 103.415866][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 103.415956][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 103.416010][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 103.416122][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.416200][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.416273][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 103.416381][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.436187][ T9] usb 2-1: config 0 descriptor?? [ 103.587987][ T6000] gadgetfs: bound to dummy_udc driver [ 103.593926][ T27] usb 4-1: USB disconnect, device number 2 [ 103.692413][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 103.725301][ T9] usb 2-1: USB disconnect, device number 5 [ 103.781479][ T9] usblp0: removed [ 104.197424][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.348930][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 104.350833][ T9] usb 2-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 104.353099][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 104.353135][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 104.353156][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 104.353203][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.353226][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.353252][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.353295][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.442696][ T9] usb 2-1: config 0 descriptor?? [ 104.564517][ T6021] KVM: debugfs: duplicate directory 6021-5 [ 104.652055][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 104.979534][ T6036] kvm [6035]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 104.979638][ T6036] kvm [6035]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 105.005063][ T6036] kvm [6035]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 105.031678][ T6036] kvm [6035]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 105.031764][ T6036] kvm [6035]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 105.311124][ T6046] netlink: 'syz.3.117': attribute type 10 has an invalid length. [ 105.311150][ T6046] netlink: 55 bytes leftover after parsing attributes in process `syz.3.117'. [ 106.102237][ T5610] usb 2-1: USB disconnect, device number 6 [ 106.126218][ T5610] usblp0: removed [ 106.377879][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 106.410761][ T6078] tipc: Started in network mode [ 106.410796][ T6078] tipc: Node identity ac1414aa, cluster identity 4711 [ 106.411592][ T6078] tipc: New replicast peer: 172.20.20.187 [ 106.413730][ T6078] tipc: Enabled bearer , priority 10 [ 106.633469][ T6087] input: syz0 as /devices/virtual/input/input5 [ 107.255232][ T6110] syzkaller1: entered promiscuous mode [ 107.255258][ T6110] syzkaller1: entered allmulticast mode [ 107.409671][ T5699] tipc: Node number set to 2886997162 [ 107.422563][ T33] audit: type=1326 audit(1791526187.161:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.1.133" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55cd9e1d9 code=0x7fc00000 [ 107.553666][ T6117] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.646919][ T5699] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.692528][ T6125] FAULT_INJECTION: forcing a failure. [ 107.692528][ T6125] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 107.692566][ T6125] CPU: 1 UID: 0 PID: 6125 Comm: syz.0.148 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.692598][ T6125] Tainted: [L]=SOFTLOCKUP [ 107.692606][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.692619][ T6125] Call Trace: [ 107.692628][ T6125] [ 107.692638][ T6125] dump_stack_lvl+0xe8/0x150 [ 107.692678][ T6125] should_fail_ex+0x3eb/0x540 [ 107.692708][ T6125] prepare_alloc_pages+0x21e/0x5f0 [ 107.692739][ T6125] __alloc_frozen_pages_noprof+0x17a/0x400 [ 107.692766][ T6125] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 107.692794][ T6125] ? try_to_migrate+0x33d/0x400 [ 107.692815][ T6125] ? __pfx_try_to_migrate+0x10/0x10 [ 107.692843][ T6125] __alloc_pages_noprof+0x10/0x100 [ 107.692867][ T6125] __folio_alloc_noprof+0x1b/0x120 [ 107.692895][ T6125] migrate_pages_batch+0xb2c/0x5020 [ 107.692943][ T6125] ? __pfx_alloc_migration_target+0x10/0x10 [ 107.692965][ T6125] ? queue_folios_pte_range+0xca6/0xe10 [ 107.692988][ T6125] ? __pfx_migrate_pages_batch+0x10/0x10 [ 107.693027][ T6125] ? __pfx_queue_folios_pte_range+0x10/0x10 [ 107.693061][ T6125] ? walk_pgd_range+0x1cab/0x1dc0 [ 107.693109][ T6125] migrate_pages+0x1b95/0x2910 [ 107.693148][ T6125] ? __pfx_alloc_migration_target+0x10/0x10 [ 107.693173][ T6125] ? __walk_page_range+0x6c1/0x720 [ 107.693198][ T6125] ? __pfx_migrate_pages+0x10/0x10 [ 107.693223][ T6125] ? queue_pages_test_walk+0x3dc/0x410 [ 107.693249][ T6125] ? walk_page_range_mm_unsafe+0x595/0x680 [ 107.693285][ T6125] ? __pfx___up_read+0x10/0x10 [ 107.693313][ T6125] do_migrate_pages+0x656/0x8b0 [ 107.693347][ T6125] ? __pfx_do_migrate_pages+0x10/0x10 [ 107.693379][ T6125] ? rcu_is_watching+0x16/0xb0 [ 107.693405][ T6125] ? security_capable+0xb9/0x2c0 [ 107.693434][ T6125] __se_sys_migrate_pages+0xaa2/0xc90 [ 107.693457][ T6125] ? __se_sys_futex+0x3a8/0x450 [ 107.693483][ T6125] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 107.693508][ T6125] ? rcu_is_watching+0x16/0xb0 [ 107.693542][ T6125] do_syscall_64+0x166/0x520 [ 107.693564][ T6125] ? trace_irq_disable+0x3b/0x140 [ 107.693584][ T6125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.693606][ T6125] ? clear_bhb_loop+0x70/0xc0 [ 107.693631][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.693652][ T6125] RIP: 0033:0x7f841259e1d9 [ 107.693683][ T6125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.693701][ T6125] RSP: 002b:00007f8413532028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 107.693724][ T6125] RAX: ffffffffffffffda RBX: 00007f8412825fa0 RCX: 00007f841259e1d9 [ 107.693741][ T6125] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000 [ 107.693755][ T6125] RBP: 00007f8412635888 R08: 0000000000000000 R09: 0000000000000000 [ 107.693769][ T6125] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 107.693782][ T6125] R13: 00007f8412826038 R14: 00007f8412825fa0 R15: 00007fff4a7f9328 [ 107.693818][ T6125] [ 107.859472][ T5699] usb 3-1: Using ep0 maxpacket: 8 [ 107.893029][ T5699] usb 3-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 108.036284][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.036313][ T5699] usb 3-1: Product: syz [ 108.036328][ T5699] usb 3-1: Manufacturer: syz [ 108.036343][ T5699] usb 3-1: SerialNumber: syz [ 108.061429][ T5699] usb 3-1: config 0 descriptor?? [ 108.284995][ T5699] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 108.514888][ T5699] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 108.532571][ T5699] usb 3-1: USB disconnect, device number 4 [ 108.626877][ T1223] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.777382][ T1223] usb 4-1: Using ep0 maxpacket: 32 [ 108.778099][ T1223] usb 4-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 108.779365][ T1223] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 108.779391][ T1223] usb 4-1: config 0 has no interface number 0 [ 108.779980][ T6154] netlink: 156 bytes leftover after parsing attributes in process `syz.0.157'. [ 108.783317][ T1223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.783342][ T1223] usb 4-1: Product: syz [ 108.783357][ T1223] usb 4-1: Manufacturer: syz [ 108.783372][ T1223] usb 4-1: SerialNumber: syz [ 108.849605][ T1223] usb 4-1: config 0 descriptor?? [ 108.989798][ T6159] FAULT_INJECTION: forcing a failure. [ 108.989798][ T6159] name failslab, interval 1, probability 0, space 0, times 0 [ 108.989833][ T6159] CPU: 0 UID: 0 PID: 6159 Comm: syz.0.158 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.989865][ T6159] Tainted: [L]=SOFTLOCKUP [ 108.989873][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.989885][ T6159] Call Trace: [ 108.989894][ T6159] [ 108.989903][ T6159] dump_stack_lvl+0xe8/0x150 [ 108.989935][ T6159] should_fail_ex+0x3eb/0x540 [ 108.989964][ T6159] should_failslab+0xa8/0x100 [ 108.989987][ T6159] __kmalloc_cache_noprof+0x9e/0x600 [ 108.990011][ T6159] ? nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 108.990033][ T6159] ? nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 108.990062][ T6159] nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 108.990087][ T6159] notifier_call_chain+0x1a5/0x3d0 [ 108.990128][ T6159] blocking_notifier_call_chain+0x6a/0x90 [ 108.990156][ T6159] netlink_release+0x11fb/0x1a80 [ 108.990189][ T6159] ? netlink_release+0x106/0x1a80 [ 108.990213][ T6159] ? __pfx_netlink_release+0x10/0x10 [ 108.990232][ T6159] ? down_write+0x166/0x200 [ 108.990252][ T6159] ? __pfx_down_write+0x10/0x10 [ 108.990284][ T6159] __sock_release+0xa0/0x1f0 [ 108.990307][ T6159] ? __pfx_sock_close+0x10/0x10 [ 108.990327][ T6159] sock_close+0x1c/0x30 [ 108.990348][ T6159] __fput+0x408/0xa40 [ 108.990378][ T6159] fput_close_sync+0x11f/0x240 [ 108.990400][ T6159] ? __pfx_fput_close_sync+0x10/0x10 [ 108.990422][ T6159] ? do_raw_spin_unlock+0xf5/0x200 [ 108.990452][ T6159] __se_sys_close+0xa2/0x160 [ 108.990476][ T6159] do_syscall_64+0x166/0x520 [ 108.990497][ T6159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.990520][ T6159] ? clear_bhb_loop+0x70/0xc0 [ 108.990545][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.990568][ T6159] RIP: 0033:0x7f841259e1d9 [ 108.990589][ T6159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.990609][ T6159] RSP: 002b:00007f8413532028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 108.990632][ T6159] RAX: ffffffffffffffda RBX: 00007f8412825fa0 RCX: 00007f841259e1d9 [ 108.990649][ T6159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 108.990661][ T6159] RBP: 00007f8412635888 R08: 0000000000000000 R09: 0000000000000000 [ 108.990675][ T6159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.990689][ T6159] R13: 00007f8412826038 R14: 00007f8412825fa0 R15: 00007fff4a7f9328 [ 108.990726][ T6159] [ 109.413194][ T1223] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 109.413230][ T1223] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 110.012958][ T6194] FAULT_INJECTION: forcing a failure. [ 110.012958][ T6194] name failslab, interval 1, probability 0, space 0, times 0 [ 110.013034][ T6194] CPU: 1 UID: 0 PID: 6194 Comm: syz.2.170 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.013067][ T6194] Tainted: [L]=SOFTLOCKUP [ 110.013075][ T6194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.013088][ T6194] Call Trace: [ 110.013105][ T6194] [ 110.013115][ T6194] dump_stack_lvl+0xe8/0x150 [ 110.013159][ T6194] should_fail_ex+0x3eb/0x540 [ 110.013187][ T6194] should_failslab+0xa8/0x100 [ 110.013211][ T6194] __kmalloc_noprof+0xf9/0x710 [ 110.013234][ T6194] ? _iommufd_object_alloc+0x28/0x210 [ 110.013255][ T6194] ? _iommufd_object_alloc+0x28/0x210 [ 110.013286][ T6194] _iommufd_object_alloc+0x28/0x210 [ 110.013311][ T6194] iommufd_ioas_alloc_ioctl+0x9f/0x340 [ 110.013338][ T6194] iommufd_fops_ioctl+0x465/0x600 [ 110.013367][ T6194] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 110.013394][ T6194] ? __fget_files+0x2a/0x420 [ 110.013430][ T6194] ? bpf_lsm_file_ioctl+0x9/0x20 [ 110.013452][ T6194] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 110.013474][ T6194] __se_sys_ioctl+0xfc/0x170 [ 110.013498][ T6194] do_syscall_64+0x166/0x520 [ 110.013519][ T6194] ? trace_irq_disable+0x3b/0x140 [ 110.013538][ T6194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.013562][ T6194] ? clear_bhb_loop+0x70/0xc0 [ 110.013586][ T6194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.013608][ T6194] RIP: 0033:0x7f263fd9e1d9 [ 110.013634][ T6194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.013652][ T6194] RSP: 002b:00007f2640c12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.013680][ T6194] RAX: ffffffffffffffda RBX: 00007f2640025fa0 RCX: 00007f263fd9e1d9 [ 110.013697][ T6194] RDX: 0000200000000100 RSI: 0000000000003b81 RDI: 0000000000000004 [ 110.013712][ T6194] RBP: 00007f263fe35888 R08: 0000000000000000 R09: 0000000000000000 [ 110.013725][ T6194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.013738][ T6194] R13: 00007f2640026038 R14: 00007f2640025fa0 R15: 00007fffedb5c348 [ 110.013773][ T6194] [ 110.033663][ T1223] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 110.033986][ T1223] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 110.270224][ T1223] usb 4-1: USB disconnect, device number 3 [ 110.397467][ T6202] capability: warning: `syz.2.172' uses deprecated v2 capabilities in a way that may be insecure [ 111.254313][ T6230] process 'syz.2.181' launched './file1' with NULL argv: empty string added [ 111.369453][ T5610] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.519188][ T5610] usb 4-1: Using ep0 maxpacket: 32 [ 111.521432][ T5610] usb 4-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 111.523675][ T5610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 111.523709][ T5610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1044, setting to 1024 [ 111.523754][ T5610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.581926][ T5610] usb 4-1: config 0 descriptor?? [ 111.585050][ T6226] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 111.602545][ T5610] hub 4-1:0.0: USB hub found [ 111.791671][ T5610] hub 4-1:0.0: 1 port detected [ 111.847149][ T32] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 112.025903][ T32] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 112.048519][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.048553][ T32] usb 2-1: Product: syz [ 112.048571][ T32] usb 2-1: Manufacturer: syz [ 112.048589][ T32] usb 2-1: SerialNumber: syz [ 112.086439][ T32] usb 2-1: config 0 descriptor?? [ 112.243277][ T6247] ======================================================= [ 112.243277][ T6247] WARNING: The mand mount option has been deprecated and [ ** replaying previous printk message ** [ 112.243277][ T6247] ======================================================= [ 112.243277][ T6247] WARNING: The mand mount option has been deprecated and [ 112.243277][ T6247] and is ignored by this kernel. Remove the mand [ 112.243277][ T6247] option from the mount to silence this warning. [ 112.243277][ T6247] ======================================================= [ 112.260763][ T6247] [ 112.302090][ T6247] ====================================================== [ 112.309138][ T6247] WARNING: possible circular locking dependency detected [ 112.316204][ T6247] syzkaller #0 Tainted: G L [ 112.322297][ T6247] ------------------------------------------------------ [ 112.329364][ T6247] syz.0.186/6247 is trying to acquire lock: [ 112.335278][ T6247] ffff888059366c00 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: iterate_dir+0x287/0x880 [ 112.344975][ T6247] [ 112.344975][ T6247] but task is already holding lock: [ 112.352364][ T6247] ffff8880591dcdf0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0 [ 112.363214][ T6247] [ 112.363214][ T6247] which lock already depends on the new lock. [ 112.363214][ T6247] [ 112.373648][ T6247] [ 112.373648][ T6247] the existing dependency chain (in reverse order) is: [ 112.382724][ T6247] [ 112.382724][ T6247] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 112.391448][ T6247] down_read+0x45/0x320 [ 112.396163][ T6247] lookup_slow+0x46/0x80 [ 112.400960][ T6247] ovl_lookup_single+0x323/0xe90 [ 112.406461][ T6247] ovl_lookup_layer+0x377/0x440 [ 112.411871][ T6247] ovl_lookup+0x9ae/0x1c80 [ 112.416847][ T6247] lookup_open+0x94b/0x1970 [ 112.421901][ T6247] path_openat+0x673/0x1da0 [ 112.426945][ T6247] do_file_open+0x23e/0x4a0 [ 112.431991][ T6247] do_sys_openat2+0x115/0x200 [ 112.437229][ T6247] __x64_sys_openat+0x138/0x170 [ 112.442634][ T6247] do_syscall_64+0x166/0x520 [ 112.447774][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.454219][ T6247] [ 112.454219][ T6247] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 112.462065][ T6247] __d_alloc_parallel+0xc32/0x1700 [ 112.467723][ T6247] __lookup_slow+0x82/0x2f0 [ 112.473471][ T6247] lookup_slow+0x59/0x80 [ 112.478256][ T6247] path_lookupat+0x3f5/0x8c0 [ 112.483406][ T6247] filename_lookup+0x265/0x5d0 [ 112.488722][ T6247] do_readlinkat+0xe3/0x510 [ 112.493774][ T6247] __x64_sys_readlink+0x7f/0x90 [ 112.499183][ T6247] do_syscall_64+0x166/0x520 [ 112.504324][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.510770][ T6247] [ 112.510770][ T6247] -> #0 (&type->i_mutex_dir_key#4){++++}-{4:4}: [ 112.519233][ T6247] __lock_acquire+0x164c/0x2de0 [ 112.524634][ T6247] lock_acquire+0x115/0x350 [ 112.529702][ T6247] down_read_killable+0x4b/0x3b0 [ 112.535190][ T6247] iterate_dir+0x287/0x880 [ 112.540193][ T6247] ovl_dir_read+0x141/0x4a0 [ 112.545248][ T6247] ovl_dir_read_merged+0x2fb/0x520 [ 112.550907][ T6247] ovl_iterate+0xd5a/0x2160 [ 112.555989][ T6247] wrap_directory_iterator+0x96/0xe0 [ 112.561822][ T6247] iterate_dir+0x3db/0x880 [ 112.566785][ T6247] __se_sys_getdents64+0xf1/0x280 [ 112.572358][ T6247] do_syscall_64+0x166/0x520 [ 112.577492][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.583989][ T6247] [ 112.583989][ T6247] other info that might help us debug this: [ 112.583989][ T6247] [ 112.594236][ T6247] Chain exists of: [ 112.594236][ T6247] &type->i_mutex_dir_key#4 --> DCACHE_PAR_LOOKUP --> &ovl_i_mutex_dir_key[depth] [ 112.594236][ T6247] [ 112.609313][ T6247] Possible unsafe locking scenario: [ 112.609313][ T6247] [ 112.616791][ T6247] CPU0 CPU1 [ 112.622185][ T6247] ---- ---- [ 112.627576][ T6247] lock(&ovl_i_mutex_dir_key[depth]); [ 112.633066][ T6247] lock(DCACHE_PAR_LOOKUP); [ 112.640209][ T6247] lock(&ovl_i_mutex_dir_key[depth]); [ 112.648212][ T6247] rlock(&type->i_mutex_dir_key#4); [ 112.653534][ T6247] [ 112.653534][ T6247] *** DEADLOCK *** [ 112.653534][ T6247] [ 112.661786][ T6247] locks held by syz.0.186/6247: 2, last CPU#0: [ 112.667965][ T6247] #0: ffff88802ba5f270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 112.677076][ T6247] #1: ffff8880591dcdf0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x5a/0xe0 [ 112.688346][ T6247] [ 112.688346][ T6247] stack backtrace: [ 112.694303][ T6247] CPU: 0 UID: 0 PID: 6247 Comm: syz.0.186 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.705188][ T6247] Tainted: [L]=SOFTLOCKUP [ 112.709540][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.719625][ T6247] Call Trace: [ 112.722935][ T6247] [ 112.725931][ T6247] dump_stack_lvl+0xe8/0x150 [ 112.730559][ T6247] print_circular_bug+0x2e2/0x300 [ 112.735625][ T6247] check_noncircular+0x12f/0x150 [ 112.740606][ T6247] __lock_acquire+0x164c/0x2de0 [ 112.745503][ T6247] ? apparmor_file_open+0x523/0x6c0 [ 112.750743][ T6247] ? __pfx_aa_file_perm+0x10/0x10 [ 112.755805][ T6247] lock_acquire+0x115/0x350 [ 112.760342][ T6247] ? iterate_dir+0x287/0x880 [ 112.764962][ T6247] ? iterate_dir+0x287/0x880 [ 112.769582][ T6247] down_read_killable+0x4b/0x3b0 [ 112.774553][ T6247] ? iterate_dir+0x287/0x880 [ 112.779180][ T6247] iterate_dir+0x287/0x880 [ 112.783624][ T6247] ovl_dir_read+0x141/0x4a0 [ 112.788168][ T6247] ? __pfx_ovl_dir_read+0x10/0x10 [ 112.793224][ T6247] ? ovl_path_upper+0x105/0x170 [ 112.798114][ T6247] ? ovl_path_next+0x21a/0x430 [ 112.802908][ T6247] ovl_dir_read_merged+0x2fb/0x520 [ 112.808060][ T6247] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 112.813747][ T6247] ? __pfx_ovl_fill_merge+0x10/0x10 [ 112.818983][ T6247] ? __kasan_kmalloc+0x93/0xb0 [ 112.823775][ T6247] ? __kmalloc_cache_noprof+0x148/0x600 [ 112.829355][ T6247] ? ovl_iterate+0xcbc/0x2160 [ 112.834059][ T6247] ? ovl_iterate+0xcbc/0x2160 [ 112.838767][ T6247] ovl_iterate+0xd5a/0x2160 [ 112.843308][ T6247] ? __pfx_ovl_iterate+0x10/0x10 [ 112.848280][ T6247] ? irqentry_exit+0x218/0x920 [ 112.853110][ T6247] ? lockdep_hardirqs_on+0x7b/0x110 [ 112.858333][ T6247] ? irqentry_exit+0x218/0x920 [ 112.863123][ T6247] ? trace_irq_disable+0x3b/0x140 [ 112.868189][ T6247] ? __pfx_hlock_conflict+0x10/0x10 [ 112.873460][ T6247] ? lock_acquire+0x232/0x350 [ 112.878187][ T6247] ? down_write+0x166/0x200 [ 112.882741][ T6247] ? __pfx_down_write+0x10/0x10 [ 112.887642][ T6247] ? wrap_directory_iterator+0x52/0xe0 [ 112.893155][ T6247] ? __pfx_ovl_iterate+0x10/0x10 [ 112.898134][ T6247] wrap_directory_iterator+0x96/0xe0 [ 112.903470][ T6247] iterate_dir+0x3db/0x880 [ 112.907939][ T6247] __se_sys_getdents64+0xf1/0x280 [ 112.913026][ T6247] ? __pfx___se_sys_getdents64+0x10/0x10 [ 112.918712][ T6247] ? __pfx_filldir64+0x10/0x10 [ 112.923511][ T6247] ? rcu_is_watching+0x16/0xb0 [ 112.928311][ T6247] do_syscall_64+0x166/0x520 [ 112.932940][ T6247] ? trace_irq_disable+0x3b/0x140 [ 112.938006][ T6247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.944115][ T6247] ? clear_bhb_loop+0x70/0xc0 [ 112.948829][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.954752][ T6247] RIP: 0033:0x7f841259e1d9 [ 112.959204][ T6247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.978849][ T6247] RSP: 002b:00007f8413532028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 112.987299][ T6247] RAX: ffffffffffffffda RBX: 00007f8412825fa0 RCX: 00007f841259e1d9 [ 112.995349][ T6247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 113.003362][ T6247] RBP: 00007f8412635888 R08: 0000000000000000 R09: 0000000000000000 [ 113.011369][ T6247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.019376][ T6247] R13: 00007f8412826038 R14: 00007f8412825fa0 R15: 00007fff4a7f9328 [ 113.027430][ T6247] [ 113.044505][ T32] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 113.240399][ T5707] usb 4-1: USB disconnect, device number 4 [ 114.249447][ T32] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 114.253194][ T32] usb 2-1: USB disconnect, device number 7