last executing test programs: 1.674250502s ago: executing program 1 (id=2): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1, &(0x7f0000000080)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f0000000000)=0xfffffffffffffd55) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000000000000010162"], 0x2c}], 0x1}, 0x800) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000280)={0xffff, {{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6fe}}}, 0x88) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600040001", 0x37}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private2, 0x0, r5}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000040)={@private2, r5}, 0x14) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="300000002400050500000000000000000000000018000000000001"], 0x30}], 0x1}, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="0d0228bd7000fedbdfc7948b2501000000050006000200000005000500010040000800030006000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="03e600230000d5ce98cadb5e48b7480051e3486124274f98194c5ff8030adaadb0a202e0d33fdc6f38b8c337e7bbbfae05d4a27af546b6990e991bc46d81909e54dbb1fea73e9b62ff5faf99d1264c60c474e3c7267a6917887faf3f054baed21aceff5584", @ANYRES16=r9, @ANYBLOB="04002dbd7000fddbdf250300000008000200010000000500050002000000"], 0x24}}, 0x404c095) 1.260692113s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newsa={0x154, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@mcast1, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@broadcast, {0x1000, 0x0, 0xfffffffffffff801, 0x2, 0x0, 0x4000000, 0xffffffff}, {0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x8a}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x70bd2c, 0x0, 0x0, 0x400004}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="400cf202"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.100568685s ago: executing program 1 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa8000066b8f7008ec0", 0x7e}], 0x1, 0x74, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.100108734s ago: executing program 2 (id=3): r0 = syz_socket_connect_nvme_tcp() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x600) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004c80), r3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r6, &(0x7f00000002c0)=[{&(0x7f00000003c0)='\x00!E\x00\v,\x00\v', 0x8}], 0x1, 0x0, 0x4) write(r5, &(0x7f0000000100)="060000000300010000", 0x9) write(r5, &(0x7f0000000300)="060000000300000000", 0x9) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r7, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000001c0)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='ocfs2\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write$P9_RREADDIR(r8, &(0x7f00000005c0)={0x46, 0x29, 0x2, {0x2, [{{0x80, 0x0, 0x7}, 0x7ff, 0x80, 0x21, './debug/ieee80211/phy0/aql_enable'}]}}, 0x44) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB="010026bd7000fed3df25060000002400070073797374656d5f75006f626a6563745f723af37368645f6b65795f743a7330006fcf07b9392eafa220e8d819aafe2900"/78], 0x38}}, 0x805) r9 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x101100) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000580)={'Wc9\t', 0xff, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", '\x00', "0300", "798a202d", ["c2ff0000008000", "08000000558084eafad12c27", "1d25aaed1700", "38a70ed483c99b9f1600d333"]}) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000040)={{0x200, 0x100}}, 0x10) close(r0) 916.5428ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) 713.653471ms ago: executing program 0 (id=6): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 629.812385ms ago: executing program 1 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.stat\x00', 0x26e1, 0x0) close(r0) 412.026242ms ago: executing program 1 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x4, 0xf9, 0x38}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.934793ms ago: executing program 1 (id=9): prlimit64(0x0, 0x8, &(0x7f0000000780)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0) madvise(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000040)='\a', 0x1) mlockall(0x7) 0s ago: executing program 0 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. [ 71.159722][ T5601] cgroup: Unknown subsys name 'net' [ 71.263342][ T5601] cgroup: Unknown subsys name 'cpuset' [ 71.271523][ T5601] cgroup: Unknown subsys name 'rlimit' [ 71.468133][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.468237][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 Setting up swapspace version 1, size = 127995904 bytes [ 72.648214][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.059172][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.062849][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.064329][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.065455][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.067195][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.069213][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.069595][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.070547][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.071018][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.071704][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.072035][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.073467][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.096175][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.096413][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.100490][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.101196][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.102032][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.105070][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.139644][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.147193][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.534854][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.534962][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.535357][ T5611] bridge_slave_0: entered allmulticast mode [ 77.538696][ T5611] bridge_slave_0: entered promiscuous mode [ 77.600000][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.600110][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.600245][ T5611] bridge_slave_1: entered allmulticast mode [ 77.602144][ T5611] bridge_slave_1: entered promiscuous mode [ 77.636763][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.636851][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.636960][ T5613] bridge_slave_0: entered allmulticast mode [ 77.638337][ T5613] bridge_slave_0: entered promiscuous mode [ 77.641385][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.641539][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.641657][ T5613] bridge_slave_1: entered allmulticast mode [ 77.643164][ T5613] bridge_slave_1: entered promiscuous mode [ 77.723416][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.744124][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.761056][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.771342][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.809973][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.810138][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.810898][ T5610] bridge_slave_0: entered allmulticast mode [ 77.811812][ T5610] bridge_slave_0: entered promiscuous mode [ 77.849280][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.849377][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.849492][ T5610] bridge_slave_1: entered allmulticast mode [ 77.853314][ T5610] bridge_slave_1: entered promiscuous mode [ 77.879019][ T5611] team0: Port device team_slave_0 added [ 77.882135][ T5613] team0: Port device team_slave_0 added [ 77.885392][ T5613] team0: Port device team_slave_1 added [ 77.898420][ T5611] team0: Port device team_slave_1 added [ 77.898648][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.898767][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.898883][ T5612] bridge_slave_0: entered allmulticast mode [ 77.900821][ T5612] bridge_slave_0: entered promiscuous mode [ 77.905313][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.905407][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.905525][ T5612] bridge_slave_1: entered allmulticast mode [ 77.907219][ T5612] bridge_slave_1: entered promiscuous mode [ 77.926992][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.987063][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.987912][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.987924][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.987942][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.990030][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.990042][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.990063][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.060304][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.060321][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.060342][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.068493][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.074960][ T5610] team0: Port device team_slave_0 added [ 78.090938][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.121163][ T5612] team0: Port device team_slave_0 added [ 78.122189][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.122201][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.122222][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.136009][ T5610] team0: Port device team_slave_1 added [ 78.177319][ T5612] team0: Port device team_slave_1 added [ 78.201342][ T54] Bluetooth: hci1: command tx timeout [ 78.201505][ T54] Bluetooth: hci2: command tx timeout [ 78.201699][ T5619] Bluetooth: hci0: command tx timeout [ 78.242567][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.242583][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.242601][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.294162][ T5619] Bluetooth: hci3: command tx timeout [ 78.304020][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.304035][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.304058][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.309627][ T5613] hsr_slave_0: entered promiscuous mode [ 78.312386][ T5613] hsr_slave_1: entered promiscuous mode [ 78.318549][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.318564][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.318585][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.353904][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.353921][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.353943][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.390845][ T5611] hsr_slave_0: entered promiscuous mode [ 78.391838][ T5611] hsr_slave_1: entered promiscuous mode [ 78.392568][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 78.392684][ T5611] Cannot create hsr debugfs directory [ 78.507668][ T5612] hsr_slave_0: entered promiscuous mode [ 78.508359][ T5612] hsr_slave_1: entered promiscuous mode [ 78.508812][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 78.508830][ T5612] Cannot create hsr debugfs directory [ 78.530830][ T5610] hsr_slave_0: entered promiscuous mode [ 78.531739][ T5610] hsr_slave_1: entered promiscuous mode [ 78.532418][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 78.532435][ T5610] Cannot create hsr debugfs directory [ 78.900379][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.924095][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.924956][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.928072][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.928822][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.947763][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.951969][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.958040][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.016153][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.031898][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.036180][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.051317][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.054360][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.067081][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.067969][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.074005][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.167114][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.173031][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.173799][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.181184][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.181981][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.187820][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.216632][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.221479][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.330304][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.332913][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.334641][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.337074][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.337777][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.341417][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.352050][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.365093][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.398908][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.443220][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.445789][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.477972][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.478087][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.515436][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.515497][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.528939][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.547103][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.547246][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.548477][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.548536][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.643398][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.689263][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.719325][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.719423][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.746944][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.747006][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.822222][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.911896][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.954151][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.954323][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.998447][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.998571][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.263129][ T4930] Bluetooth: hci2: command tx timeout [ 80.263161][ T4930] Bluetooth: hci1: command tx timeout [ 80.263276][ T5619] Bluetooth: hci0: command tx timeout [ 80.342854][ T5619] Bluetooth: hci3: command tx timeout [ 80.687052][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.754856][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.809348][ T5611] veth0_vlan: entered promiscuous mode [ 80.845798][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.847203][ T5611] veth1_vlan: entered promiscuous mode [ 80.957411][ T5613] veth0_vlan: entered promiscuous mode [ 80.972387][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.993540][ T5611] veth0_macvtap: entered promiscuous mode [ 80.997569][ T5613] veth1_vlan: entered promiscuous mode [ 81.016489][ T5611] veth1_macvtap: entered promiscuous mode [ 81.030651][ T5612] veth0_vlan: entered promiscuous mode [ 81.070796][ T5612] veth1_vlan: entered promiscuous mode [ 81.103249][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.123095][ T5613] veth0_macvtap: entered promiscuous mode [ 81.127097][ T5610] veth0_vlan: entered promiscuous mode [ 81.132586][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.158350][ T5613] veth1_macvtap: entered promiscuous mode [ 81.165184][ T5610] veth1_vlan: entered promiscuous mode [ 81.190954][ T177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.221526][ T5612] veth0_macvtap: entered promiscuous mode [ 81.237284][ T5612] veth1_macvtap: entered promiscuous mode [ 81.247172][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.250254][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.251236][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.251272][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.295978][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.355351][ T5610] veth0_macvtap: entered promiscuous mode [ 81.371650][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.371677][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.401334][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.413971][ T5610] veth1_macvtap: entered promiscuous mode [ 81.430780][ T177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.442413][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.451039][ T177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.451090][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.451102][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.456952][ T1052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.457001][ T1052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.551594][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.551642][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.551674][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.551700][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.558941][ T5611] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.592614][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.627608][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.695554][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.695575][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.809437][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.809458][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.875822][ T5766] PID 5766 killed due to inadequate hugepage pool [ 81.878639][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.878657][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.881705][ T5766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 81.970276][ T5766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 81.977431][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.977448][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.011418][ T177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.013524][ T1052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.013561][ T1052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.013592][ T1052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.088851][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.088872][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.183346][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.183367][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.352880][ T54] Bluetooth: hci1: command tx timeout [ 82.352913][ T54] Bluetooth: hci2: command tx timeout [ 82.353153][ T5619] Bluetooth: hci0: command tx timeout [ 82.378097][ T5772] Bluetooth: MGMT ver 1.23 [ 82.429008][ T5774] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.430270][ T4930] Bluetooth: hci3: command tx timeout [ 82.562863][ T5777] zram0: detected capacity change from 0 to 65536 [ 82.587573][ T5722] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.769654][ T5782] ======================================================= [ 82.769654][ T5782] WARNING: The mand mount option has been deprecated and [ 82.769654][ T5782] and is ignored by this kernel. Remove the mand [ 82.769654][ T5782] option from the mount to silence this warning. [ 82.769654][ T5782] ======================================================= [ 82.773474][ T5722] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 82.832475][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.832521][ T5722] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.832541][ T5722] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 82.832561][ T5722] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.832600][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.407744][ T5792] [ 83.410129][ T5792] ====================================================== [ 83.417156][ T5792] WARNING: possible circular locking dependency detected [ 83.424192][ T5792] syzkaller #0 Not tainted [ 83.428604][ T5792] ------------------------------------------------------ [ 83.435646][ T5792] syz.0.10/5792 is trying to acquire lock: [ 83.441450][ T5792] ffff88802c4b8460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 83.450263][ T5792] [ 83.450263][ T5792] but task is already holding lock: [ 83.457620][ T5792] ffff8880775b72e0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 83.467362][ T5792] [ 83.467362][ T5792] which lock already depends on the new lock. [ 83.467362][ T5792] [ 83.477763][ T5792] [ 83.477763][ T5792] the existing dependency chain (in reverse order) is: [ 83.486778][ T5792] [ 83.486778][ T5792] -> #2 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 83.494616][ T5792] __d_alloc_parallel+0xc32/0x1700 [ 83.500262][ T5792] __lookup_slow+0x82/0x2f0 [ 83.505302][ T5792] lookup_slow+0x59/0x80 [ 83.510072][ T5792] link_path_walk+0xd22/0x1910 [ 83.515360][ T5792] path_openat+0x1c4/0x1da0 [ 83.520386][ T5792] do_file_open+0x23e/0x4a0 [ 83.525420][ T5792] do_sys_openat2+0x115/0x200 [ 83.530617][ T5792] __x64_sys_openat+0x138/0x170 [ 83.535984][ T5792] do_syscall_64+0x166/0x520 [ 83.541090][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.547521][ T5792] [ 83.547521][ T5792] -> #1 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 83.555957][ T5792] down_write+0x91/0x200 [ 83.560720][ T5792] lookup_open+0x246/0x1970 [ 83.565771][ T5792] path_openat+0x673/0x1da0 [ 83.570788][ T5792] do_file_open+0x23e/0x4a0 [ 83.575856][ T5792] do_sys_openat2+0x115/0x200 [ 83.581058][ T5792] __x64_sys_openat+0x138/0x170 [ 83.586433][ T5792] do_syscall_64+0x166/0x520 [ 83.591549][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.597964][ T5792] [ 83.597964][ T5792] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 83.605346][ T5792] __lock_acquire+0x164c/0x2de0 [ 83.610718][ T5792] lock_acquire+0x115/0x350 [ 83.615738][ T5792] sb_start_write+0x48/0x1c0 [ 83.620846][ T5792] mnt_want_write+0x41/0x90 [ 83.625879][ T5792] ovl_lookup+0xb93/0x1c80 [ 83.630814][ T5792] lookup_open+0x94b/0x1970 [ 83.635843][ T5792] path_openat+0x673/0x1da0 [ 83.640860][ T5792] do_file_open+0x23e/0x4a0 [ 83.645875][ T5792] do_sys_openat2+0x115/0x200 [ 83.651065][ T5792] __x64_sys_openat+0x138/0x170 [ 83.656442][ T5792] do_syscall_64+0x166/0x520 [ 83.661566][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.667998][ T5792] [ 83.667998][ T5792] other info that might help us debug this: [ 83.667998][ T5792] [ 83.678233][ T5792] Chain exists of: [ 83.678233][ T5792] sb_writers#5 --> &type->i_mutex_dir_key#5 --> DCACHE_PAR_LOOKUP [ 83.678233][ T5792] [ 83.691997][ T5792] Possible unsafe locking scenario: [ 83.691997][ T5792] [ 83.699455][ T5792] CPU0 CPU1 [ 83.704832][ T5792] ---- ---- [ 83.710208][ T5792] lock(DCACHE_PAR_LOOKUP); [ 83.714817][ T5792] lock(&type->i_mutex_dir_key#5); [ 83.722554][ T5792] lock(DCACHE_PAR_LOOKUP); [ 83.729677][ T5792] rlock(sb_writers#5); [ 83.734123][ T5792] [ 83.734123][ T5792] *** DEADLOCK *** [ 83.734123][ T5792] [ 83.742364][ T5792] locks held by syz.0.10/5792: 2, last CPU#1: [ 83.748616][ T5792] #0: ffff88805a470160 (&ovl_i_mutex_dir_key[depth]){.+.+}-{4:4}, at: lookup_open+0x221/0x1970 [ 83.759085][ T5792] #1: ffff8880775b72e0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 83.769295][ T5792] [ 83.769295][ T5792] stack backtrace: [ 83.775216][ T5792] CPU: 1 UID: 0 PID: 5792 Comm: syz.0.10 Not tainted syzkaller #0 PREEMPT(full) [ 83.784352][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.794441][ T5792] Call Trace: [ 83.797740][ T5792] [ 83.800677][ T5792] dump_stack_lvl+0xe8/0x150 [ 83.805280][ T5792] print_circular_bug+0x2e2/0x300 [ 83.810324][ T5792] check_noncircular+0x12f/0x150 [ 83.815264][ T5792] __lock_acquire+0x164c/0x2de0 [ 83.820119][ T5792] ? do_raw_spin_unlock+0xf5/0x200 [ 83.825226][ T5792] lock_acquire+0x115/0x350 [ 83.829718][ T5792] ? mnt_want_write+0x41/0x90 [ 83.834391][ T5792] sb_start_write+0x48/0x1c0 [ 83.838977][ T5792] ? mnt_want_write+0x41/0x90 [ 83.843643][ T5792] mnt_want_write+0x41/0x90 [ 83.848138][ T5792] ovl_lookup+0xb93/0x1c80 [ 83.852548][ T5792] ? lock_acquire+0x115/0x350 [ 83.857241][ T5792] ? __pfx_ovl_lookup+0x10/0x10 [ 83.862085][ T5792] ? __d_lookup+0x66/0x790 [ 83.866504][ T5792] ? __pfx___d_alloc_parallel+0x10/0x10 [ 83.872042][ T5792] ? __d_lookup+0x6f3/0x790 [ 83.876573][ T5792] ? d_lookup+0x1f/0xa0 [ 83.880726][ T5792] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 83.886877][ T5792] ? lockdep_hardirqs_on+0x7b/0x110 [ 83.892070][ T5792] lookup_open+0x94b/0x1970 [ 83.896606][ T5792] path_openat+0x673/0x1da0 [ 83.901127][ T5792] do_file_open+0x23e/0x4a0 [ 83.905630][ T5792] ? __pfx_do_file_open+0x10/0x10 [ 83.910651][ T5792] ? _raw_spin_unlock+0x28/0x50 [ 83.915493][ T5792] ? alloc_fd+0x6af/0x760 [ 83.919816][ T5792] do_sys_openat2+0x115/0x200 [ 83.924492][ T5792] ? __se_sys_futex+0x3a8/0x450 [ 83.929333][ T5792] ? __pfx_do_sys_openat2+0x10/0x10 [ 83.934524][ T5792] ? rcu_is_watching+0x16/0xb0 [ 83.939284][ T5792] __x64_sys_openat+0x138/0x170 [ 83.944137][ T5792] do_syscall_64+0x166/0x520 [ 83.948731][ T5792] ? trace_irq_disable+0x3b/0x140 [ 83.953755][ T5792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.959820][ T5792] ? clear_bhb_loop+0x70/0xc0 [ 83.964501][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.970396][ T5792] RIP: 0033:0x7fd4a8b9e1d9 [ 83.974822][ T5792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.994426][ T5792] RSP: 002b:00007fd4a9a59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 84.002839][ T5792] RAX: ffffffffffffffda RBX: 00007fd4a8e25fa0 RCX: 00007fd4a8b9e1d9 [ 84.010814][ T5792] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 84.018783][ T5792] RBP: 00007fd4a8c35888 R08: 0000000000000000 R09: 0000000000000000 [ 84.026859][ T5792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.035274][ T5792] R13: 00007fd4a8e26038 R14: 00007fd4a8e25fa0 R15: 00007fff55324218 [ 84.043462][ T5792] [ 84.208183][ T5722] [drm] Initialized gud 1.0.0 for 4-1:1.0 on minor 1 [ 84.420501][ T4930] Bluetooth: hci0: command tx timeout [ 84.420529][ T4930] Bluetooth: hci2: command tx timeout [ 84.420544][ T4930] Bluetooth: hci1: command tx timeout [ 84.420654][ T5619] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 84.448308][ T5722] Console: switching to colour frame buffer device 128x48 [ 84.455900][ T5722] gud 4-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 84.461509][ T5722] usb 4-1: USB disconnect, device number 2 [ 84.467888][ T5722] Console: switching to colour VGA+ 80x25 [ 84.500250][ T5619] Bluetooth: hci3: command tx timeout [ 86.500271][ T5619] Bluetooth: hci0: command 0x0c3a tx timeout [ 86.821349][ T27] cfg80211: failed to load regulatory.db