last executing test programs: 3.998627073s ago: executing program 3 (id=115): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup3(r0, r2, 0x80000) r4 = dup(r3) pwrite64(r0, &(0x7f0000000040)="46f4", 0x2, 0x4) read(r4, 0x0, 0x0) timer_settime(r1, 0x0, 0x0, 0x0) 2.370286657s ago: executing program 2 (id=135): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106d0415c200000000000109022400010000a0020904000102030002000921000040012218000905810320"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) poll(0x0, 0x0, 0x4) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) 2.211444329s ago: executing program 1 (id=136): r0 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="f2", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000200)={0x0, r0}, 0x0, 0x0, 0x0) r1 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r1, 0x80044dfd, &(0x7f0000000080)) r2 = openat$btrfs_control(0xffffff9c, 0x0, 0x108400, 0x0) getsockname$packet(r2, 0x0, 0x0) mkdirat(r2, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/net/pppol2tp\x00', 0x80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.143621174s ago: executing program 0 (id=138): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d07, 0x0, 0x5}]}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x8, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.143505385s ago: executing program 1 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) 2.090440338s ago: executing program 1 (id=140): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/15, 0xf}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x800081fd, 0x2001, 0x4001}, 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x66) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x20) sendmmsg(r2, &(0x7f00000030c0), 0x8000000000002e9, 0x9200000000000004) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7fffffff, 0x88}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) openat$nvme_fabrics(0xffffff9c, 0x0, 0x109000, 0x0) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) 1.120282944s ago: executing program 1 (id=141): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xf58b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.120103011s ago: executing program 0 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc041) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c1f300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff) 1.082341366s ago: executing program 0 (id=143): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)='\f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="aa97", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)="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", 0x18f}, {&(0x7f0000000940)="aef5d59b82c6a013afe61d96ae7e0adbfd99e710305be3122739d403978a491a8772ba50a3ab450029b98b173b99e860fbdd1519c4477da33921e469cbda8313c92b40378f81dcd2257ec6667cb9ae97f5f4e9b609f1b06e3b9252a6488cbb26b6", 0x61}, {&(0x7f00000009c0)="ce0b13e73e01acbaee5f37c85a0967a9162bcc2de0", 0x15}, {&(0x7f0000000c40)="ee0d9a36d39822ce35e32fa21c5c283b41faf795c9a840bac491", 0x1a}], 0x4}}], 0x4, 0x4000000) 1.04113643s ago: executing program 0 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) 957.844116ms ago: executing program 0 (id=145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4048002}, 0x400) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='bridge0\x00') sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x68}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fff}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ba7b499f78ecc867f5dd9c4598817eb4"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8baa}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8b8321886a6e7d27"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e68795d40c9f4f5b63f19156421e53ae390c18f5c9d93f48"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3b27}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1404d540f7aeaa1a"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "40b7132808336325"}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44001}, 0x8811) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) syz_open_pts(r1, 0x40480) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000002c0)={0x9, 0xaf95, 0xe43e, 0xe0, 0x2, "6a374234210cbfcead6d0cbff9de1177717f29", 0x8f, 0xac}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) nanosleep(&(0x7f0000000340)={r2, r3+10000000}, &(0x7f0000000380)) r4 = openat$snapshot(0xffffff9c, &(0x7f00000003c0), 0x41, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000000400)) 768.738765ms ago: executing program 3 (id=146): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/vs/conn_lfactor\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 736.507372ms ago: executing program 3 (id=147): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) 677.907127ms ago: executing program 3 (id=148): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) 588.640292ms ago: executing program 3 (id=149): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x10001, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 512.167735ms ago: executing program 3 (id=150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 434.506115ms ago: executing program 2 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc041) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 338.309495ms ago: executing program 2 (id=152): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 207.912091ms ago: executing program 2 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) 189.815884ms ago: executing program 1 (id=154): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x8000]}, 0x8, 0x800) fchmod(r0, 0x3) 189.200503ms ago: executing program 2 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/vs/conn_lfactor\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 91.432294ms ago: executing program 1 (id=156): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 4.17416ms ago: executing program 2 (id=157): mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) 0s ago: executing program 0 (id=158): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x8, 0x2, &(0x7f0000000000)={0x1d, "abac4ac61249972954192560d5ee2f26cac166eb838fc36a24621b964c9026846f"}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. [ 76.238888][ T5600] cgroup: Unknown subsys name 'net' [ 76.387043][ T5600] cgroup: Unknown subsys name 'cpuset' [ 76.396742][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.813882][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.062849][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.072417][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.075579][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.078309][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.086310][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.093809][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.094506][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.095427][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.096466][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.097811][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.100193][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.100848][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.101840][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.103634][ T4928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.105055][ T4928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.105597][ T4928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.118222][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.125453][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.127757][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.146875][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.402491][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.403156][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.403536][ T5610] bridge_slave_0: entered allmulticast mode [ 81.406679][ T5610] bridge_slave_0: entered promiscuous mode [ 81.448878][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.448976][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.449107][ T5610] bridge_slave_1: entered allmulticast mode [ 81.451169][ T5610] bridge_slave_1: entered promiscuous mode [ 81.584169][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.613259][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.701093][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.701198][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.701927][ T5612] bridge_slave_0: entered allmulticast mode [ 81.703549][ T5612] bridge_slave_0: entered promiscuous mode [ 81.707204][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.707326][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.707481][ T5612] bridge_slave_1: entered allmulticast mode [ 81.709041][ T5612] bridge_slave_1: entered promiscuous mode [ 81.761829][ T5610] team0: Port device team_slave_0 added [ 81.762024][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.762125][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.762238][ T5613] bridge_slave_0: entered allmulticast mode [ 81.763757][ T5613] bridge_slave_0: entered promiscuous mode [ 81.803318][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.803474][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.803550][ T5613] bridge_slave_1: entered allmulticast mode [ 81.811607][ T5613] bridge_slave_1: entered promiscuous mode [ 81.828375][ T5610] team0: Port device team_slave_1 added [ 81.831915][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.865017][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.865232][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.865364][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.865439][ T5611] bridge_slave_0: entered allmulticast mode [ 81.866334][ T5611] bridge_slave_0: entered promiscuous mode [ 81.936078][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.936178][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.936293][ T5611] bridge_slave_1: entered allmulticast mode [ 81.937817][ T5611] bridge_slave_1: entered promiscuous mode [ 81.941160][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.942161][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.942173][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.942198][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.955835][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.958045][ T5612] team0: Port device team_slave_0 added [ 81.961699][ T5612] team0: Port device team_slave_1 added [ 82.004545][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.004565][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.004587][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.066439][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.086667][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.086683][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.086703][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.092158][ T5613] team0: Port device team_slave_0 added [ 82.096976][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.137587][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.137604][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.137626][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.140704][ T5613] team0: Port device team_slave_1 added [ 82.146214][ T55] Bluetooth: hci3: command tx timeout [ 82.154190][ T5614] Bluetooth: hci1: command tx timeout [ 82.154361][ T55] Bluetooth: hci2: command tx timeout [ 82.166901][ T5610] hsr_slave_0: entered promiscuous mode [ 82.171003][ T5610] hsr_slave_1: entered promiscuous mode [ 82.235045][ T55] Bluetooth: hci0: command tx timeout [ 82.238594][ T5611] team0: Port device team_slave_0 added [ 82.278275][ T5611] team0: Port device team_slave_1 added [ 82.278898][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.278910][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.278930][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.345895][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.345912][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.345935][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.364366][ T5612] hsr_slave_0: entered promiscuous mode [ 82.365457][ T5612] hsr_slave_1: entered promiscuous mode [ 82.366687][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 82.366757][ T5612] Cannot create hsr debugfs directory [ 82.368853][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.368865][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.368886][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.387566][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.387579][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.387599][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.562806][ T5613] hsr_slave_0: entered promiscuous mode [ 82.563500][ T5613] hsr_slave_1: entered promiscuous mode [ 82.569713][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 82.569731][ T5613] Cannot create hsr debugfs directory [ 82.622529][ T5611] hsr_slave_0: entered promiscuous mode [ 82.623139][ T5611] hsr_slave_1: entered promiscuous mode [ 82.623528][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 82.623545][ T5611] Cannot create hsr debugfs directory [ 82.916664][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.922418][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.925585][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.947106][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.975468][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.978400][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.979121][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.982242][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.074870][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.080886][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.098709][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.109194][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.109896][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.125330][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.145014][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.147971][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.229015][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.241177][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.241966][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.259835][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.260576][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.278488][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.298183][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.300349][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.392659][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.398573][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.399404][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.406321][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.429628][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.433196][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.452061][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.457009][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.517721][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.567823][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.570440][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.608470][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.608601][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.646021][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.646095][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.674685][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.695736][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.695802][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.703069][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.703177][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.780374][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.844444][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.859728][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.873205][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.873303][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.878048][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.878147][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.941072][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.996490][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.996599][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.039870][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.039974][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.191811][ T5611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.226557][ T5614] Bluetooth: hci1: command tx timeout [ 84.226595][ T5614] Bluetooth: hci3: command tx timeout [ 84.227822][ T55] Bluetooth: hci2: command tx timeout [ 84.306313][ T55] Bluetooth: hci0: command tx timeout [ 84.978057][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.985140][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.032458][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.078888][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.111150][ T5612] veth0_vlan: entered promiscuous mode [ 85.153026][ T5612] veth1_vlan: entered promiscuous mode [ 85.168538][ T5610] veth0_vlan: entered promiscuous mode [ 85.213679][ T5610] veth1_vlan: entered promiscuous mode [ 85.216500][ T5613] veth0_vlan: entered promiscuous mode [ 85.249257][ T5611] veth0_vlan: entered promiscuous mode [ 85.269381][ T5613] veth1_vlan: entered promiscuous mode [ 85.288139][ T5612] veth0_macvtap: entered promiscuous mode [ 85.292590][ T5611] veth1_vlan: entered promiscuous mode [ 85.316860][ T5610] veth0_macvtap: entered promiscuous mode [ 85.322684][ T5612] veth1_macvtap: entered promiscuous mode [ 85.347765][ T5610] veth1_macvtap: entered promiscuous mode [ 85.368813][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.383406][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.398290][ T5613] veth0_macvtap: entered promiscuous mode [ 85.418830][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.449421][ T5613] veth1_macvtap: entered promiscuous mode [ 85.460628][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.466874][ T5611] veth0_macvtap: entered promiscuous mode [ 85.507044][ T5611] veth1_macvtap: entered promiscuous mode [ 85.515622][ T63] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.516200][ T63] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.517897][ T145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.517935][ T145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.517968][ T145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.517999][ T145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.518031][ T145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.518064][ T145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.555161][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.572771][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.684582][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.693302][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.693323][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.725838][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.775600][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.775618][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.845808][ T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.845852][ T63] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.845884][ T63] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.845915][ T63] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.845942][ T63] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.845971][ T63] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.846001][ T63] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.846031][ T63] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.952988][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.953009][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.055585][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.055603][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.124456][ T5610] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.169558][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.169576][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.255745][ T5765] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.282834][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.282851][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.304683][ T55] Bluetooth: hci2: command tx timeout [ 86.304718][ T55] Bluetooth: hci3: command tx timeout [ 86.304741][ T55] Bluetooth: hci1: command tx timeout [ 86.386675][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.386693][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.395796][ T5622] Bluetooth: hci0: command tx timeout [ 86.407371][ T5765] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 86.432064][ T5769] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 86.472344][ T5769] null_blk: rnullb0: using native zone append [ 86.510943][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.510963][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.937917][ T5769] null_blk: disk rnullb0 created [ 87.034931][ T5775] FAULT_INJECTION: forcing a failure. [ 87.034931][ T5775] name failslab, interval 1, probability 0, space 0, times 1 [ 87.034972][ T5775] CPU: 1 UID: 0 PID: 5775 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 87.035011][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.035030][ T5775] Call Trace: [ 87.035042][ T5775] [ 87.035051][ T5775] dump_stack_lvl+0xe8/0x150 [ 87.035087][ T5775] should_fail_ex+0x3eb/0x540 [ 87.035115][ T5775] should_failslab+0xa8/0x100 [ 87.035137][ T5775] __kmalloc_noprof+0xf9/0x710 [ 87.035158][ T5775] ? __kmalloc_cache_noprof+0x148/0x600 [ 87.035176][ T5775] ? mpi_alloc+0x77/0x140 [ 87.035193][ T5775] ? mpi_alloc+0x77/0x140 [ 87.035217][ T5775] mpi_alloc+0x77/0x140 [ 87.035237][ T5775] mpi_read_raw_data+0x139/0x970 [ 87.035266][ T5775] rsa_set_pub_key+0x2c3/0x5b0 [ 87.035297][ T5775] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 87.035333][ T5775] ? __kmalloc_noprof+0x387/0x710 [ 87.035356][ T5775] rsassa_pkcs1_set_pub_key+0xba/0x1a0 [ 87.035381][ T5775] public_key_verify_signature+0x57a/0x9e0 [ 87.035414][ T5775] ? __pfx_public_key_verify_signature+0x10/0x10 [ 87.035450][ T5775] ? asymmetric_key_generate_id+0x60/0x170 [ 87.035468][ T5775] ? asymmetric_key_id_same+0x67/0xe0 [ 87.035493][ T5775] x509_check_for_self_signed+0x326/0x430 [ 87.035517][ T5775] x509_cert_parse+0x622/0x7a0 [ 87.035541][ T5775] x509_key_preparse+0x64/0x6d0 [ 87.035560][ T5775] ? down_read+0x2b9/0x320 [ 87.035583][ T5775] asymmetric_key_preparse+0xb9/0x1b0 [ 87.035604][ T5775] __key_create_or_update+0x34f/0xa70 [ 87.035634][ T5775] ? __pfx___key_create_or_update+0x10/0x10 [ 87.035672][ T5775] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 87.035702][ T5775] key_create_or_update+0x42/0x60 [ 87.035726][ T5775] __se_sys_add_key+0x349/0x420 [ 87.035749][ T5775] ? __pfx___se_sys_add_key+0x10/0x10 [ 87.035778][ T5775] ? __x64_sys_add_key+0x20/0xc0 [ 87.035800][ T5775] do_syscall_64+0x166/0x520 [ 87.035818][ T5775] ? trace_irq_disable+0x3b/0x140 [ 87.035834][ T5775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.035854][ T5775] ? clear_bhb_loop+0x70/0xc0 [ 87.035876][ T5775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.035896][ T5775] RIP: 0033:0x7f3f19b9e159 [ 87.035925][ T5775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.035941][ T5775] RSP: 002b:00007f3f1a9bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 87.035967][ T5775] RAX: ffffffffffffffda RBX: 00007f3f19e25fa0 RCX: 00007f3f19b9e159 [ 87.035982][ T5775] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 87.036001][ T5775] RBP: 00007f3f19c3506b R08: ffffffffffffffff R09: 0000000000000000 [ 87.036014][ T5775] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 87.036025][ T5775] R13: 00007f3f19e26038 R14: 00007f3f19e25fa0 R15: 00007ffd105289f8 [ 87.036052][ T5775] [ 88.184450][ T5776] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 88.384189][ T5622] Bluetooth: hci1: command tx timeout [ 88.384225][ T5622] Bluetooth: hci3: command tx timeout [ 88.384246][ T5622] Bluetooth: hci2: command tx timeout [ 88.475753][ T55] Bluetooth: hci0: command tx timeout [ 91.454702][ T992] cfg80211: failed to load regulatory.db [ 91.925169][ T5809] FAULT_INJECTION: forcing a failure. [ 91.925169][ T5809] name failslab, interval 1, probability 0, space 0, times 0 [ 91.925216][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: syz.3.15 Not tainted syzkaller #0 PREEMPT(full) [ 91.925239][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.925250][ T5809] Call Trace: [ 91.925258][ T5809] [ 91.925266][ T5809] dump_stack_lvl+0xe8/0x150 [ 91.925293][ T5809] should_fail_ex+0x3eb/0x540 [ 91.925319][ T5809] should_failslab+0xa8/0x100 [ 91.925346][ T5809] __kmalloc_noprof+0xf9/0x710 [ 91.925367][ T5809] ? __kmalloc_cache_noprof+0x148/0x600 [ 91.925385][ T5809] ? mpi_alloc+0x77/0x140 [ 91.925401][ T5809] ? mpi_alloc+0x77/0x140 [ 91.925425][ T5809] mpi_alloc+0x77/0x140 [ 91.925445][ T5809] mpi_read_raw_data+0x139/0x970 [ 91.925474][ T5809] rsa_set_pub_key+0x2c3/0x5b0 [ 91.925506][ T5809] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 91.925541][ T5809] ? __kmalloc_noprof+0x387/0x710 [ 91.925572][ T5809] rsassa_pkcs1_set_pub_key+0xba/0x1a0 [ 91.925598][ T5809] public_key_verify_signature+0x57a/0x9e0 [ 91.925631][ T5809] ? __pfx_public_key_verify_signature+0x10/0x10 [ 91.925667][ T5809] ? asymmetric_key_generate_id+0x60/0x170 [ 91.925685][ T5809] ? asymmetric_key_id_same+0x67/0xe0 [ 91.925712][ T5809] x509_check_for_self_signed+0x326/0x430 [ 91.925736][ T5809] x509_cert_parse+0x622/0x7a0 [ 91.925760][ T5809] x509_key_preparse+0x64/0x6d0 [ 91.925779][ T5809] ? down_read+0x2b9/0x320 [ 91.925803][ T5809] asymmetric_key_preparse+0xb9/0x1b0 [ 91.925825][ T5809] __key_create_or_update+0x34f/0xa70 [ 91.925854][ T5809] ? __pfx___key_create_or_update+0x10/0x10 [ 91.925892][ T5809] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 91.925922][ T5809] key_create_or_update+0x42/0x60 [ 91.925946][ T5809] __se_sys_add_key+0x349/0x420 [ 91.925969][ T5809] ? __pfx___se_sys_add_key+0x10/0x10 [ 91.925997][ T5809] ? __x64_sys_add_key+0x20/0xc0 [ 91.926019][ T5809] do_syscall_64+0x166/0x520 [ 91.926037][ T5809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.926057][ T5809] ? clear_bhb_loop+0x70/0xc0 [ 91.926078][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.926098][ T5809] RIP: 0033:0x7f7c6279e159 [ 91.926117][ T5809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.926132][ T5809] RSP: 002b:00007f7c636b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 91.926153][ T5809] RAX: ffffffffffffffda RBX: 00007f7c62a25fa0 RCX: 00007f7c6279e159 [ 91.926181][ T5809] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 91.926194][ T5809] RBP: 00007f7c6283506b R08: ffffffffffffffff R09: 0000000000000000 [ 91.926207][ T5809] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 91.926218][ T5809] R13: 00007f7c62a26038 R14: 00007f7c62a25fa0 R15: 00007fff190998a8 [ 91.926250][ T5809] [ 91.941393][ T5808] netlink: 'syz.0.16': attribute type 1 has an invalid length. [ 93.010593][ T5825] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET) [ 93.189856][ T32] audit: type=1326 audit(1791127510.696:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.25" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f19b9e159 code=0x7ffc0000 [ 93.189951][ T32] audit: type=1326 audit(1791127510.696:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.25" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f19b9e159 code=0x7ffc0000 [ 93.190298][ T32] audit: type=1326 audit(1791127510.696:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.25" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3f19b9e159 code=0x7ffc0000 [ 93.190423][ T32] audit: type=1326 audit(1791127510.696:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.25" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f19b9e159 code=0x7ffc0000 [ 93.190598][ T32] audit: type=1326 audit(1791127510.696:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.25" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f19b9e159 code=0x7ffc0000 [ 93.190730][ T32] audit: type=1326 audit(1791127510.696:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.25" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f19b9e159 code=0x7ffc0000 [ 93.191194][ T32] audit: type=1326 audit(1791127510.696:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.25" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f19b9e159 code=0x7ffc0000 [ 93.191476][ T32] audit: type=1326 audit(1791127510.696:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.25" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f19b9e159 code=0x7ffc0000 [ 93.191614][ T32] audit: type=1326 audit(1791127510.696:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.25" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f3f19b9e159 code=0x7ffc0000 [ 93.191714][ T32] audit: type=1326 audit(1791127510.696:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.25" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f19b9e159 code=0x7ffc0000 [ 93.676827][ T5840] netlink: 'syz.3.28': attribute type 1 has an invalid length. [ 94.285114][ T992] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.444682][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 94.458295][ T992] usb 4-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 94.476825][ T992] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 94.476872][ T992] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 94.476895][ T992] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.476918][ T992] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 94.501441][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.501481][ T992] usb 4-1: Product: syz [ 94.501625][ T992] usb 4-1: Manufacturer: syz [ 94.501830][ T992] usb 4-1: SerialNumber: syz [ 94.760658][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 94.976075][ T992] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input5 [ 95.143685][ T992] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 95.143706][ T992] (id 0x00) [ 95.219590][ T992] rc_core: IR keymap rc-imon-pad not found [ 95.219610][ T992] Registered IR keymap rc-empty [ 95.221444][ T992] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 95.221464][ T992] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 95.242087][ T992] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 95.246855][ T992] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input6 [ 95.306293][ T992] imon 4-1:155.0: iMON device (15c2:ffdc) on usb<4:2> initialized [ 95.358637][ T5863] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.717297][ T5845] imon:send_packet: task interrupted [ 95.717362][ T5845] imon:send_packet: packet tx failed (-512) [ 95.717818][ T5845] imon:vfd_write: send packet #1 failed [ 95.746456][ T5782] usb 4-1: USB disconnect, device number 2 [ 95.881270][ T5870] netlink: 'syz.1.39': attribute type 1 has an invalid length. [ 95.965871][ T5876] process 'syz.2.41' launched './file2' with NULL argv: empty string added [ 96.083773][ T5882] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 96.374125][ T5894] jffs2: notice: (5894) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.471873][ T5906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.472105][ T5906] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.501853][ T5906] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.521552][ T5906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.521627][ T5906] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.542091][ T5906] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.551742][ T5906] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.551820][ T5906] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.567379][ T5906] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.585431][ T5906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.585510][ T5906] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.588699][ T5906] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 98.012956][ T5949] random: crng reseeded on system resumption [ 98.023945][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.173671][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 98.174405][ T9] usb 1-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 98.174997][ T9] usb 1-1: config 0 has no interfaces? [ 98.175029][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.179751][ T9] usb 1-1: config 0 descriptor?? [ 98.387227][ T4940] usb 1-1: USB disconnect, device number 2 [ 98.513672][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.663774][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 98.665556][ T9] usb 4-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 98.666525][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 98.666553][ T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.666575][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 98.666594][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.670436][ T9] usb 4-1: config 0 descriptor?? [ 98.714081][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.040773][ T5978] input: syz0 as /devices/virtual/input/input7 [ 99.205060][ T9] input: HID 1e7d:2cf6 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1E7D:2CF6.0001/input/input8 [ 99.405038][ T9] pyra 0003:1E7D:2CF6.0001: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 99.446771][ T9] usb 4-1: USB disconnect, device number 3 [ 99.583919][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.584004][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.665067][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.719737][ T5984] fido_id[5984]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 99.895025][ T5782] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.043755][ T5782] usb 1-1: Using ep0 maxpacket: 16 [ 100.044408][ T5782] usb 1-1: New USB device found: idVendor=0c70, idProduct=f00e, bcdDevice=0.00 [ 100.048962][ T5782] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.048994][ T5782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.058997][ T5782] usb 1-1: config 0 descriptor?? [ 100.060652][ T5990] NILFS (nullb0): couldn't find nilfs on the device [ 100.071693][ T5990] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 100.329072][ T5782] usbhid 1-1:0.0: can't add hid device: -71 [ 100.329200][ T5782] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 100.341791][ T5782] usb 1-1: USB disconnect, device number 3 [ 100.783803][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.902462][ T6012] netlink: 64 bytes leftover after parsing attributes in process `syz.0.97'. [ 101.036125][ T6016] 9pnet_virtio: no channels available for device syz [ 101.354505][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.505725][ T9] usb 1-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 101.506964][ T9] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 101.506987][ T9] usb 1-1: config 0 has no interface number 0 [ 101.507026][ T9] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.509191][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.509213][ T9] usb 1-1: Product: syz [ 101.509226][ T9] usb 1-1: Manufacturer: syz [ 101.509239][ T9] usb 1-1: SerialNumber: syz [ 101.513237][ T9] usb 1-1: config 0 descriptor?? [ 101.546108][ T9] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 101.673785][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.673888][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.742007][ T5782] usb 1-1: USB disconnect, device number 4 [ 101.754905][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.776576][ T5782] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 101.850817][ T5970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.295554][ T6041] Zero length message leads to an empty skb [ 102.351476][ T6043] 9p: Bad value for 'rfdno' [ 102.454532][ T6047] FAULT_INJECTION: forcing a failure. [ 102.454532][ T6047] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 102.454561][ T6047] CPU: 1 UID: 0 PID: 6047 Comm: syz.1.112 Not tainted syzkaller #0 PREEMPT(full) [ 102.454583][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.454594][ T6047] Call Trace: [ 102.454601][ T6047] [ 102.454610][ T6047] dump_stack_lvl+0xe8/0x150 [ 102.454637][ T6047] should_fail_ex+0x3eb/0x540 [ 102.454664][ T6047] strncpy_from_user+0x36/0x2c0 [ 102.454688][ T6047] __se_sys_add_key+0xdb/0x420 [ 102.454712][ T6047] ? __pfx___se_sys_add_key+0x10/0x10 [ 102.454739][ T6047] ? __x64_sys_add_key+0x20/0xc0 [ 102.454761][ T6047] do_syscall_64+0x166/0x520 [ 102.454779][ T6047] ? trace_irq_disable+0x3b/0x140 [ 102.454797][ T6047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.454825][ T6047] ? clear_bhb_loop+0x70/0xc0 [ 102.454846][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.454865][ T6047] RIP: 0033:0x7f4202b9e159 [ 102.454884][ T6047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.454900][ T6047] RSP: 002b:00007f42039e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 102.454922][ T6047] RAX: ffffffffffffffda RBX: 00007f4202e25fa0 RCX: 00007f4202b9e159 [ 102.454937][ T6047] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 102.454950][ T6047] RBP: 00007f4202c3506b R08: ffffffffffffffff R09: 0000000000000000 [ 102.454963][ T6047] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 102.454975][ T6047] R13: 00007f4202e26038 R14: 00007f4202e25fa0 R15: 00007fff94660da8 [ 102.455007][ T6047] [ 102.755479][ T6059] syzkaller1: entered promiscuous mode [ 102.755502][ T6059] syzkaller1: entered allmulticast mode [ 102.866138][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.879790][ T4940] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 102.955832][ T6071] FAULT_INJECTION: forcing a failure. [ 102.955832][ T6071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.955857][ T6071] CPU: 0 UID: 0 PID: 6071 Comm: syz.0.124 Not tainted syzkaller #0 PREEMPT(full) [ 102.955869][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.955875][ T6071] Call Trace: [ 102.955880][ T6071] [ 102.955885][ T6071] dump_stack_lvl+0xe8/0x150 [ 102.955902][ T6071] should_fail_ex+0x3eb/0x540 [ 102.955917][ T6071] strncpy_from_user+0x36/0x2c0 [ 102.955930][ T6071] __se_sys_add_key+0xdb/0x420 [ 102.955943][ T6071] ? __pfx___se_sys_add_key+0x10/0x10 [ 102.955958][ T6071] ? __x64_sys_add_key+0x20/0xc0 [ 102.955970][ T6071] do_syscall_64+0x166/0x520 [ 102.955981][ T6071] ? trace_irq_disable+0x3b/0x140 [ 102.955991][ T6071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.956003][ T6071] ? clear_bhb_loop+0x70/0xc0 [ 102.956020][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.956031][ T6071] RIP: 0033:0x7f3f19b9e159 [ 102.956043][ T6071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.956052][ T6071] RSP: 002b:00007f3f1a9bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 102.956064][ T6071] RAX: ffffffffffffffda RBX: 00007f3f19e25fa0 RCX: 00007f3f19b9e159 [ 102.956072][ T6071] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 102.956079][ T6071] RBP: 00007f3f19c3506b R08: ffffffffffffffff R09: 0000000000000000 [ 102.956087][ T6071] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 102.956093][ T6071] R13: 00007f3f19e26038 R14: 00007f3f19e25fa0 R15: 00007ffd105289f8 [ 102.956108][ T6071] [ 102.956320][ T6070] 9p: Bad value for 'rfdno' [ 103.043859][ T4940] usb 4-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 103.098059][ T4940] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 103.098110][ T4940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 103.098136][ T4940] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.098158][ T4940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 103.098181][ T4940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 103.147996][ T4940] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 103.148048][ T4940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 103.148073][ T4940] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.148096][ T4940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 103.148119][ T4940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 103.240082][ T4940] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 103.240137][ T4940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 103.240163][ T4940] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.240187][ T4940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 103.240210][ T4940] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 103.318950][ T4940] usb 4-1: string descriptor 0 read error: -22 [ 103.319177][ T4940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.362336][ T4940] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 103.746358][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.746399][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.833757][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.121394][ T6105] FAULT_INJECTION: forcing a failure. [ 104.121394][ T6105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.121425][ T6105] CPU: 0 UID: 0 PID: 6105 Comm: syz.1.133 Not tainted syzkaller #0 PREEMPT(full) [ 104.121446][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.121458][ T6105] Call Trace: [ 104.121465][ T6105] [ 104.121473][ T6105] dump_stack_lvl+0xe8/0x150 [ 104.121499][ T6105] should_fail_ex+0x3eb/0x540 [ 104.121524][ T6105] strncpy_from_user+0x36/0x2c0 [ 104.121548][ T6105] __se_sys_add_key+0xdb/0x420 [ 104.121571][ T6105] ? __pfx___se_sys_add_key+0x10/0x10 [ 104.121599][ T6105] ? __x64_sys_add_key+0x20/0xc0 [ 104.121620][ T6105] do_syscall_64+0x166/0x520 [ 104.121639][ T6105] ? trace_irq_disable+0x3b/0x140 [ 104.121656][ T6105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.121676][ T6105] ? clear_bhb_loop+0x70/0xc0 [ 104.121697][ T6105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.121717][ T6105] RIP: 0033:0x7f4202b9e159 [ 104.121741][ T6105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.121757][ T6105] RSP: 002b:00007f42039e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 104.121779][ T6105] RAX: ffffffffffffffda RBX: 00007f4202e25fa0 RCX: 00007f4202b9e159 [ 104.121794][ T6105] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 104.121807][ T6105] RBP: 00007f4202c3506b R08: ffffffffffffffff R09: 0000000000000000 [ 104.121821][ T6105] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 104.121833][ T6105] R13: 00007f4202e26038 R14: 00007f4202e25fa0 R15: 00007fff94660da8 [ 104.121863][ T6105] [ 104.279835][ T6109] 9p: Bad value for 'rfdno' [ 104.446940][ T32] kauditd_printk_skb: 1 callbacks suppressed [ 104.446961][ T32] audit: type=1326 audit(1791127521.956:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6115 comm="syz.0.138" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f19b9e159 code=0x0 [ 104.484118][ T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.643651][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 104.644347][ T46] usb 3-1: New USB device found: idVendor=046d, idProduct=c215, bcdDevice=0.00 [ 104.645643][ T46] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.645670][ T46] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.645693][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 104.645725][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.689336][ T46] usb 3-1: config 0 descriptor?? [ 104.733372][ T6124] bond0: Error: Cannot enslave bond to itself. [ 105.139102][ T46] input: HID 046d:c215 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C215.0002/input/input9 [ 105.217697][ T46] logitech 0003:046D:C215.0002: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.2-1/input0 [ 105.530469][ T6137] 9p: Bad value for 'wfdno' [ 105.578285][ T992] usb 3-1: USB disconnect, device number 2 [ 105.629848][ T5782] usb 4-1: USB disconnect, device number 4 [ 105.729762][ T6140] random: crng reseeded on system resumption [ 106.313616][ T6158] 9p: Bad value for 'wfdno' [ 106.542808][ T6165] [ 106.545150][ T6165] ====================================================== [ 106.552146][ T6165] WARNING: possible circular locking dependency detected [ 106.559148][ T6165] syzkaller #0 Not tainted [ 106.563563][ T6165] ------------------------------------------------------ [ 106.570576][ T6165] syz.1.156/6165 is trying to acquire lock: [ 106.576440][ T6165] ffff888056c78eb8 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 106.585919][ T6165] [ 106.585919][ T6165] but task is already holding lock: [ 106.593270][ T6165] ffff8880787b65e0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 106.603018][ T6165] [ 106.603018][ T6165] which lock already depends on the new lock. [ 106.603018][ T6165] [ 106.613402][ T6165] [ 106.613402][ T6165] the existing dependency chain (in reverse order) is: [ 106.622396][ T6165] [ 106.622396][ T6165] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 106.630213][ T6165] __d_alloc_parallel+0xc32/0x1700 [ 106.635832][ T6165] __lookup_slow+0x82/0x2f0 [ 106.640839][ T6165] lookup_slow+0x59/0x80 [ 106.645583][ T6165] link_path_walk+0xd22/0x1910 [ 106.650850][ T6165] path_openat+0x1c4/0x1da0 [ 106.655857][ T6165] do_file_open+0x23e/0x4a0 [ 106.660857][ T6165] do_sys_openat2+0x115/0x200 [ 106.666036][ T6165] __x64_sys_openat+0x138/0x170 [ 106.671400][ T6165] do_syscall_64+0x166/0x520 [ 106.676512][ T6165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.682913][ T6165] [ 106.682913][ T6165] -> #0 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 106.691317][ T6165] __lock_acquire+0x164c/0x2de0 [ 106.696668][ T6165] lock_acquire+0x115/0x350 [ 106.701692][ T6165] down_read+0x45/0x320 [ 106.706358][ T6165] lookup_slow+0x46/0x80 [ 106.711102][ T6165] ovl_lookup_single+0x323/0xe90 [ 106.716539][ T6165] ovl_lookup_layer+0x377/0x440 [ 106.721886][ T6165] ovl_lookup+0x5e5/0x1c80 [ 106.726802][ T6165] lookup_open+0x94b/0x1970 [ 106.731806][ T6165] path_openat+0x673/0x1da0 [ 106.736805][ T6165] do_file_open+0x23e/0x4a0 [ 106.741811][ T6165] do_sys_openat2+0x115/0x200 [ 106.747004][ T6165] __x64_sys_open+0x11e/0x150 [ 106.752182][ T6165] do_syscall_64+0x166/0x520 [ 106.757274][ T6165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.763674][ T6165] [ 106.763674][ T6165] other info that might help us debug this: [ 106.763674][ T6165] [ 106.773886][ T6165] Possible unsafe locking scenario: [ 106.773886][ T6165] [ 106.781311][ T6165] CPU0 CPU1 [ 106.786652][ T6165] ---- ---- [ 106.791993][ T6165] lock(DCACHE_PAR_LOOKUP); [ 106.796562][ T6165] lock(&type->i_mutex_dir_key#5); [ 106.804261][ T6165] lock(DCACHE_PAR_LOOKUP); [ 106.811347][ T6165] rlock(&type->i_mutex_dir_key#5); [ 106.816611][ T6165] [ 106.816611][ T6165] *** DEADLOCK *** [ 106.816611][ T6165] [ 106.824731][ T6165] locks held by syz.1.156/6165: 3, last CPU#0: [ 106.830859][ T6165] #0: ffff88803347a460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 106.840060][ T6165] #1: ffff8880684763d0 (&ovl_i_mutex_dir_key[depth]){+.+.}-{4:4}, at: lookup_open+0x246/0x1970 [ 106.850481][ T6165] #2: ffff8880787b65e0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 106.860635][ T6165] [ 106.860635][ T6165] stack backtrace: [ 106.866519][ T6165] CPU: 0 UID: 0 PID: 6165 Comm: syz.1.156 Not tainted syzkaller #0 PREEMPT(full) [ 106.875700][ T6165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.885746][ T6165] Call Trace: [ 106.889017][ T6165] [ 106.891928][ T6165] dump_stack_lvl+0xe8/0x150 [ 106.896509][ T6165] print_circular_bug+0x2e2/0x300 [ 106.901524][ T6165] check_noncircular+0x12f/0x150 [ 106.906441][ T6165] __lock_acquire+0x164c/0x2de0 [ 106.911276][ T6165] ? lock_acquire+0x115/0x350 [ 106.915930][ T6165] lock_acquire+0x115/0x350 [ 106.920412][ T6165] ? lookup_slow+0x46/0x80 [ 106.924827][ T6165] down_read+0x45/0x320 [ 106.928963][ T6165] ? lookup_slow+0x46/0x80 [ 106.933356][ T6165] ? d_lookup+0x8a/0xa0 [ 106.937490][ T6165] lookup_slow+0x46/0x80 [ 106.941712][ T6165] ovl_lookup_single+0x323/0xe90 [ 106.946639][ T6165] ? __pfx_ovl_lookup_single+0x10/0x10 [ 106.952082][ T6165] ? tomoyo_path_number_perm+0x219/0x5f0 [ 106.957711][ T6165] ? tomoyo_path_number_perm+0x219/0x5f0 [ 106.963330][ T6165] ovl_lookup_layer+0x377/0x440 [ 106.968180][ T6165] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 106.974146][ T6165] ovl_lookup+0x5e5/0x1c80 [ 106.978544][ T6165] ? __pfx_from_kgid+0x10/0x10 [ 106.983287][ T6165] ? apparmor_capable+0x126/0x170 [ 106.988295][ T6165] ? bpf_lsm_capable+0x9/0x20 [ 106.992953][ T6165] ? security_capable+0x7e/0x2c0 [ 106.997871][ T6165] ? capable_wrt_inode_uidgid+0x1c2/0x270 [ 107.003597][ T6165] ? __pfx_ovl_lookup+0x10/0x10 [ 107.008430][ T6165] ? ovl_permission+0x187/0x300 [ 107.013266][ T6165] ? __pfx_ovl_permission+0x10/0x10 [ 107.018442][ T6165] ? from_kgid+0x1c6/0x660 [ 107.022839][ T6165] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 107.028276][ T6165] ? __pfx_from_kgid+0x10/0x10 [ 107.033019][ T6165] ? inode_permission+0x2b8/0x600 [ 107.038025][ T6165] ? bpf_lsm_inode_create+0x9/0x20 [ 107.043113][ T6165] ? security_inode_create+0xc3/0x340 [ 107.048471][ T6165] lookup_open+0x94b/0x1970 [ 107.052961][ T6165] path_openat+0x673/0x1da0 [ 107.057451][ T6165] do_file_open+0x23e/0x4a0 [ 107.061938][ T6165] ? __pfx_do_file_open+0x10/0x10 [ 107.066952][ T6165] ? _raw_spin_unlock+0x28/0x50 [ 107.071786][ T6165] ? alloc_fd+0x6af/0x760 [ 107.076120][ T6165] do_sys_openat2+0x115/0x200 [ 107.080778][ T6165] ? __se_sys_futex+0x3a8/0x450 [ 107.085612][ T6165] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.090790][ T6165] ? __pfx___se_sys_futex+0x10/0x10 [ 107.095966][ T6165] ? __se_sys_chdir+0x1ce/0x2a0 [ 107.100799][ T6165] ? __pfx___se_sys_chdir+0x10/0x10 [ 107.105976][ T6165] __x64_sys_open+0x11e/0x150 [ 107.110635][ T6165] do_syscall_64+0x166/0x520 [ 107.115207][ T6165] ? trace_irq_disable+0x3b/0x140 [ 107.120207][ T6165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.126263][ T6165] ? clear_bhb_loop+0x70/0xc0 [ 107.130937][ T6165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.136814][ T6165] RIP: 0033:0x7f4202b9e159 [ 107.141213][ T6165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.160801][ T6165] RSP: 002b:00007f42039e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 107.169199][ T6165] RAX: ffffffffffffffda RBX: 00007f4202e25fa0 RCX: 00007f4202b9e159 [ 107.177159][ T6165] RDX: 1df2a23c5997fad6 RSI: 0000000000084242 RDI: 0000200000000040 [ 107.185113][ T6165] RBP: 00007f4202c3506b R08: 0000000000000000 R09: 0000000000000000 [ 107.193076][ T6165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.201150][ T6165] R13: 00007f4202e26038 R14: 00007f4202e25fa0 R15: 00007fff94660da8 [ 107.209117][ T6165] [ 107.216746][ T32] audit: type=1800 audit(1791127524.726:14): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.156" name="file0" dev="overlay" ino=247 res=0 errno=-22