last executing test programs: 6.302932577s ago: executing program 0 (id=5): syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x97156000) 5.457444742s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/msr/parameters/allow_writes\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='on\n', 0x3) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./trace/events/irq_vectors/x86_platform_ipi_exit/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./trace/events/irq_vectors/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./dev\x00', &(0x7f0000000b00)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/cpu/0/msr\x00', 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000d00)='./msr0\x00', 0x81ff, 0xca00) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/cpu/1/msr\x00', 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000f00)='./msr1\x00', 0x81ff, 0xca01) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./msr1\x00', 0x2, 0x0) pwrite64(r4, 0x0, 0x0, 0x83f) pwrite64(r5, &(0x7f0000001000)="f700000000000000", 0x8, 0x83f) pwrite64(r6, &(0x7f0000001000)="f700000000000000", 0x8, 0x83f) pwrite64(r7, &(0x7f0000001000)="f700000000000000", 0x8, 0x83f) pwrite64(r7, &(0x7f0000001100)="f700040000000000", 0x8, 0x830) pwrite64(r4, &(0x7f0000001200)="f700080000000000", 0x8, 0x830) pwrite64(r5, &(0x7f0000001200)="f700080000000000", 0x8, 0x830) pwrite64(r7, &(0x7f0000001200)="f700080000000000", 0x8, 0x830) nanosleep(&(0x7f0000001300)={0x0, 0x5f5e100}, 0x0) 5.237049857s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mount(0x0, &(0x7f00000023c0)='.\x00', &(0x7f00000024c0)='hugetlbfs\x00', 0x2200890, 0x0) 4.694945211s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/msr/parameters/allow_writes\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='on\n', 0x3) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./trace/events/irq_vectors/x86_platform_ipi_exit/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./trace/events/irq_vectors/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./dev\x00', &(0x7f0000000b00)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/cpu/0/msr\x00', 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000d00)='./msr0\x00', 0x81ff, 0xca00) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/cpu/1/msr\x00', 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000f00)='./msr1\x00', 0x81ff, 0xca01) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./msr1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000001000), 0x0, 0x83f) pwrite64(r5, &(0x7f0000001000)="f700000000000000", 0x8, 0x83f) pwrite64(r6, &(0x7f0000001000)="f7000000", 0x4, 0x83f) pwrite64(r7, &(0x7f0000001000)="f700000000000000", 0x8, 0x83f) pwrite64(r7, &(0x7f0000001100)="f700040000000000", 0x8, 0x830) pwrite64(r4, &(0x7f0000001200)="f700080000000000", 0x8, 0x830) pwrite64(r5, &(0x7f0000001200)="f700080000000000", 0x8, 0x830) pwrite64(r7, &(0x7f0000001200)="f700080000000000", 0x8, 0x830) nanosleep(&(0x7f0000001300)={0x0, 0x5f5e100}, 0x0) 4.456724132s ago: executing program 0 (id=11): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0) 4.394166519s ago: executing program 0 (id=12): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000240)={0x20, 0x17, 0x1, '|'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.359206027s ago: executing program 2 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) mq_timedreceive(r0, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) linkat(r1, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467d, &(0x7f0000000400)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8d46, 0x8000, 0x3, 0x92}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x4000, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x20, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9, 0x800, 0x1, 0x22d}}], 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000001138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00multipath\x00\x00\x00\x00\x00\x00\x002 queue_mode bio 0 0 0', 0x3e) ioctl(r5, 0xc138fd09, &(0x7f0000001000)="0400000000000000000000007801000038010000010000000000000000000000000000000000000000000000000000006d706174683000") prctl$PR_SET_VMA(0x4a, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x6, 0x2000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r6) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="002979ff6718f6fcc8d2000000defff6b8", @ANYRES16=r7, @ANYBLOB="65572abd7000f9dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x89}, 0x24004052) 3.730151725s ago: executing program 1 (id=20): writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80043f679a", 0x10}], 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.530098479s ago: executing program 2 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.123582799s ago: executing program 3 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x10) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/ttyUSB0\x00', 0x2, 0x0) 2.777469369s ago: executing program 1 (id=26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x80000001, 0x3, 0x1000045, 0xfffc, 0x9, 0xf, 0x6, 0x0, 0xab], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.651021959s ago: executing program 1 (id=27): recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x9, 0xa08, 0x7, 0x3, 0x20004, 0xe8c0, 0x20000000000080, 0x2, 0x400, 0xb, 0x20040000004, 0x2, 0x7f, 0x40, 0x3, 0x4], 0x70000, 0x160a55}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.435453152s ago: executing program 1 (id=28): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8416, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x0, 0x6, 0x5, 0x100000}) 1.660125245s ago: executing program 1 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x9) 1.616498691s ago: executing program 3 (id=30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000005c0)=0x9) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.517666497s ago: executing program 1 (id=31): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.423843277s ago: executing program 3 (id=32): r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/cpu/1/msr\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000001000)="f7000000", 0x4, 0x83f) 1.333963615s ago: executing program 3 (id=33): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000200)='./tracing/dynamic_events\x00', 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, 0x19, 0x1, 0x0, 0x25ffdbfb, {0xa, 0xd601, 0x9}, [@nested={0x8, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}]}, @typed={0x8, 0x17, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, 0x19, 0x1, 0x0, 0x25ffdbfb, {0xa, 0xd601, 0x9}, [@nested={0x8, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}]}, @typed={0x8, 0x17, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.327428503s ago: executing program 3 (id=34): writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400192340834b80043f679a", 0x10}], 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 423.848733ms ago: executing program 2 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES8, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 327.350822ms ago: executing program 0 (id=36): recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x9, 0xa08, 0x7, 0x3, 0x20004, 0xe8c0, 0x20000000000080, 0x2, 0x400, 0xb, 0x20040000004, 0x2, 0x7f, 0x40, 0x3, 0x4], 0x70000, 0x160a55}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 251.241515ms ago: executing program 3 (id=37): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8416, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x0, 0x6, 0x5, 0x100000}) 109.430479ms ago: executing program 0 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x10) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/ttyUSB0\x00', 0x2, 0x0) 0s ago: executing program 2 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. [ 73.061667][ T5596] cgroup: Unknown subsys name 'net' [ 73.157908][ T5596] cgroup: Unknown subsys name 'cpuset' [ 73.166058][ T5596] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.514212][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.106228][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.110983][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.120479][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.158551][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.160755][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.160947][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.163366][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.163988][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.165692][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.166073][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.166654][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.171429][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.171856][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.172033][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.194950][ T4929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.195238][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.195439][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.203185][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.210835][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.217585][ T4929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.654674][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.654774][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.655207][ T5614] bridge_slave_0: entered allmulticast mode [ 79.656875][ T5614] bridge_slave_0: entered promiscuous mode [ 79.697446][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.697534][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.697879][ T5614] bridge_slave_1: entered allmulticast mode [ 79.699212][ T5614] bridge_slave_1: entered promiscuous mode [ 79.751982][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.752072][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.752183][ T5615] bridge_slave_0: entered allmulticast mode [ 79.755957][ T5615] bridge_slave_0: entered promiscuous mode [ 79.763274][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.765018][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.765421][ T5615] bridge_slave_1: entered allmulticast mode [ 79.767767][ T5615] bridge_slave_1: entered promiscuous mode [ 79.802464][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.802562][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.804873][ T5610] bridge_slave_0: entered allmulticast mode [ 79.806709][ T5610] bridge_slave_0: entered promiscuous mode [ 79.840374][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.840503][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.840587][ T5610] bridge_slave_1: entered allmulticast mode [ 79.842176][ T5610] bridge_slave_1: entered promiscuous mode [ 79.848423][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.891074][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.894647][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.898057][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.940136][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.940279][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.940359][ T5616] bridge_slave_0: entered allmulticast mode [ 79.941276][ T5616] bridge_slave_0: entered promiscuous mode [ 79.946012][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.946176][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.946551][ T5616] bridge_slave_1: entered allmulticast mode [ 79.948117][ T5616] bridge_slave_1: entered promiscuous mode [ 79.953998][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.007301][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.009247][ T5614] team0: Port device team_slave_0 added [ 80.011592][ T5615] team0: Port device team_slave_0 added [ 80.039519][ T5614] team0: Port device team_slave_1 added [ 80.042279][ T5615] team0: Port device team_slave_1 added [ 80.046020][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.063310][ T5610] team0: Port device team_slave_0 added [ 80.084368][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.086276][ T5610] team0: Port device team_slave_1 added [ 80.131189][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.131212][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.131230][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.134265][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.134279][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.134300][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.163934][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.163951][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.163973][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.167677][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.167700][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.167721][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.182247][ T5616] team0: Port device team_slave_0 added [ 80.185435][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.185451][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.185471][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.217030][ T5616] team0: Port device team_slave_1 added [ 80.217993][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.218006][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.218042][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.229066][ T5624] Bluetooth: hci0: command tx timeout [ 80.271548][ T5614] hsr_slave_0: entered promiscuous mode [ 80.273635][ T5614] hsr_slave_1: entered promiscuous mode [ 80.310401][ T5619] Bluetooth: hci2: command tx timeout [ 80.310668][ T5611] Bluetooth: hci1: command tx timeout [ 80.310865][ T5624] Bluetooth: hci3: command tx timeout [ 80.448394][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.448412][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.448434][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.483498][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.483515][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.483537][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.504648][ T5615] hsr_slave_0: entered promiscuous mode [ 80.505661][ T5615] hsr_slave_1: entered promiscuous mode [ 80.506445][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 80.506545][ T5615] Cannot create hsr debugfs directory [ 80.548158][ T5610] hsr_slave_0: entered promiscuous mode [ 80.549164][ T5610] hsr_slave_1: entered promiscuous mode [ 80.549849][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 80.549866][ T5610] Cannot create hsr debugfs directory [ 80.688971][ T5616] hsr_slave_0: entered promiscuous mode [ 80.689735][ T5616] hsr_slave_1: entered promiscuous mode [ 80.690172][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 80.690189][ T5616] Cannot create hsr debugfs directory [ 80.998306][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.006703][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.007605][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.014168][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.017532][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.028248][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.029060][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.035905][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.116130][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.126852][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.127685][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.134741][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.163277][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.167687][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.169457][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.174309][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.292148][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.301776][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.318655][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.322417][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.356657][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.357530][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.360486][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.379980][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.389911][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.448909][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.451858][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.462639][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.465352][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.472015][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.487652][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.494761][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.509520][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.512038][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.521763][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.521905][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.550626][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.553585][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.553679][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.615939][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.638997][ T4004] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.639058][ T4004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.666878][ T4004] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.666938][ T4004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.753661][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.838169][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.864113][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.864224][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.890201][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.890305][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.921405][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.032151][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.094738][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.094844][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.120683][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.120805][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.302881][ T5624] Bluetooth: hci0: command tx timeout [ 82.383950][ T5624] Bluetooth: hci3: command tx timeout [ 82.383983][ T5624] Bluetooth: hci1: command tx timeout [ 82.384012][ T5624] Bluetooth: hci2: command tx timeout [ 82.927450][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.938628][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.058876][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.073595][ T5610] veth0_vlan: entered promiscuous mode [ 83.116118][ T5614] veth0_vlan: entered promiscuous mode [ 83.131023][ T5610] veth1_vlan: entered promiscuous mode [ 83.177053][ T5614] veth1_vlan: entered promiscuous mode [ 83.212173][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.250885][ T5610] veth0_macvtap: entered promiscuous mode [ 83.252307][ T5615] veth0_vlan: entered promiscuous mode [ 83.279529][ T5610] veth1_macvtap: entered promiscuous mode [ 83.287781][ T5614] veth0_macvtap: entered promiscuous mode [ 83.303063][ T5614] veth1_macvtap: entered promiscuous mode [ 83.307171][ T5615] veth1_vlan: entered promiscuous mode [ 83.354091][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.373627][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.396081][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.406793][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.431146][ T5616] veth0_vlan: entered promiscuous mode [ 83.445458][ T5615] veth0_macvtap: entered promiscuous mode [ 83.459788][ T5616] veth1_vlan: entered promiscuous mode [ 83.463823][ T5615] veth1_macvtap: entered promiscuous mode [ 83.544432][ T4004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.545465][ T4004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.545520][ T4004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.545552][ T4004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.574941][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.585440][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.630077][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.642279][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.642305][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.677843][ T5616] veth0_macvtap: entered promiscuous mode [ 83.699306][ T5616] veth1_macvtap: entered promiscuous mode [ 83.711311][ T4004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.711331][ T4004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.780398][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.780419][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.821940][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.831948][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.831967][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.833569][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.834100][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.893946][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.957614][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.957635][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.983685][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.984961][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.984999][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.985030][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.999735][ T5614] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.014065][ T154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.073001][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.073047][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.073078][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.073108][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.078024][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.078044][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.282095][ T5763] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.375072][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.375092][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.383881][ T5611] Bluetooth: hci0: command tx timeout [ 84.462938][ T5611] Bluetooth: hci2: command tx timeout [ 84.462969][ T5611] Bluetooth: hci1: command tx timeout [ 84.462986][ T5611] Bluetooth: hci3: command tx timeout [ 84.497468][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.497490][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.856346][ T5770] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 85.481203][ T5785] FAULT_INJECTION: forcing a failure. [ 85.481203][ T5785] name failslab, interval 1, probability 0, space 0, times 1 [ 85.481264][ T5785] CPU: 0 UID: 0 PID: 5785 Comm: syz.0.8 Tainted: G S syzkaller #0 PREEMPT(full) [ 85.481292][ T5785] Tainted: [S]=CPU_OUT_OF_SPEC [ 85.481300][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 85.481318][ T5785] Call Trace: [ 85.481329][ T5785] [ 85.481338][ T5785] dump_stack_lvl+0xe8/0x150 [ 85.481370][ T5785] should_fail_ex+0x3eb/0x540 [ 85.481396][ T5785] should_failslab+0xa8/0x100 [ 85.481418][ T5785] __kmalloc_cache_noprof+0x9e/0x600 [ 85.481437][ T5785] ? do_raw_spin_lock+0x12b/0x2f0 [ 85.481457][ T5785] ? get_mountpoint+0x2cc/0x530 [ 85.481474][ T5785] ? get_mountpoint+0x2cc/0x530 [ 85.481499][ T5785] get_mountpoint+0x2cc/0x530 [ 85.481523][ T5785] do_lock_mount+0x64f/0xd40 [ 85.481552][ T5785] do_new_mount+0x484/0xb00 [ 85.481578][ T5785] ? __pfx_do_new_mount+0x10/0x10 [ 85.481599][ T5785] ? ns_capable+0x84/0xe0 [ 85.481620][ T5785] ? path_mount+0x647/0x1050 [ 85.481643][ T5785] ? user_path_at+0xd4/0x160 [ 85.481664][ T5785] __se_sys_mount+0x31d/0x420 [ 85.481694][ T5785] ? __pfx___se_sys_mount+0x10/0x10 [ 85.481720][ T5785] ? __x64_sys_mount+0x20/0xc0 [ 85.481740][ T5785] do_syscall_64+0x166/0x520 [ 85.481759][ T5785] ? trace_irq_disable+0x3b/0x140 [ 85.481776][ T5785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.481797][ T5785] ? clear_bhb_loop+0x70/0xc0 [ 85.481818][ T5785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.481838][ T5785] RIP: 0033:0x7fc60ab9e199 [ 85.481863][ T5785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.481878][ T5785] RSP: 002b:00007fc608df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.481903][ T5785] RAX: ffffffffffffffda RBX: 00007fc60ae25fa0 RCX: 00007fc60ab9e199 [ 85.481917][ T5785] RDX: 00002000000024c0 RSI: 00002000000023c0 RDI: 0000000000000000 [ 85.481930][ T5785] RBP: 00007fc60ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 85.481943][ T5785] R10: 0000000002200890 R11: 0000000000000246 R12: 0000000000000000 [ 85.481955][ T5785] R13: 00007fc60ae26038 R14: 00007fc60ae25fa0 R15: 00007fffda0382a8 [ 85.481987][ T5785] [ 86.294325][ T5799] capability: warning: `syz.2.13' uses deprecated v2 capabilities in a way that may be insecure [ 86.339891][ T5795] mmap: syz.2.13 (5795) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.433719][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.463916][ T5624] Bluetooth: hci0: command tx timeout [ 86.542908][ T5624] Bluetooth: hci3: command tx timeout [ 86.542942][ T5624] Bluetooth: hci1: command tx timeout [ 86.542961][ T5624] Bluetooth: hci2: command tx timeout [ 86.593546][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 86.595329][ T10] usb 1-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 86.598706][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 86.598731][ T10] usb 1-1: config 0 has no interface number 0 [ 86.599209][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 86.601830][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.601851][ T10] usb 1-1: Product: syz [ 86.601863][ T10] usb 1-1: Manufacturer: syz [ 86.601875][ T10] usb 1-1: SerialNumber: syz [ 86.621186][ T10] usb 1-1: config 0 descriptor?? [ 87.040505][ T9] cfg80211: failed to load regulatory.db [ 87.325041][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.485128][ T9] usb 3-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 87.487682][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 87.487819][ T9] usb 3-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 87.487840][ T9] usb 3-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 87.493685][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 87.493733][ T9] usb 3-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 87.493751][ T9] usb 3-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 87.523755][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.523931][ T9] usb 3-1: Product: syz [ 87.523945][ T9] usb 3-1: Manufacturer: syz [ 87.523958][ T9] usb 3-1: SerialNumber: syz [ 87.569796][ T9] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 87.571518][ T9] ti_usb_3410_5052 3-1:2.0: missing endpoints [ 87.792993][ T4941] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 87.939467][ T5836] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.957978][ T4941] usb 4-1: not running at top speed; connect to a high speed hub [ 87.958015][ T4941] usb 4-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 87.960194][ T4941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.960345][ T4941] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 87.960381][ T4941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.003987][ T4941] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 88.033739][ T4941] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 88.033872][ T4941] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 88.051566][ T4941] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 88.067231][ T4941] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 88.067389][ T4941] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 88.112562][ T4941] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 88.355270][ T4941] usb 4-1: USB disconnect, device number 2 [ 88.397204][ T4941] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 88.449718][ T4941] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 88.460723][ T4941] keyspan 4-1:1.0: device disconnected [ 89.001269][ T5847] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 89.332722][ T5717] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.494719][ T5717] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 89.503109][ T5717] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.503235][ T5717] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 89.503255][ T5717] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 89.503274][ T5717] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.503311][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.507769][ T10] f81534 1-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 89.507823][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 89.507837][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 89.507911][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 89.650139][ T10] usb 1-1: USB disconnect, device number 2 [ 90.100968][ T5758] usb 3-1: USB disconnect, device number 2 [ 90.308235][ T5862] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.430010][ T5717] gud 2-1:1.0: Failed to get connectors (error=-5) [ 90.430741][ T5717] gud 2-1:1.0: probe with driver gud failed with error -5 [ 90.589857][ T5872] ======================================================= [ 90.589857][ T5872] WARNING: The mand mount option has been deprecated and [ 90.589857][ T ** replaying previous printk message ** [ 90.589857][ T5872] ======================================================= [ 90.589857][ T5872] WARNING: The mand mount option has been deprecated and [ 90.589857][ T5872] and is ignored by this kernel. Remove the mand [ 90.589857][ T5872] option from the mount to silence this warning. [ 90.589857][ T5872] ======================================================= [ 90.607589][ T5872] [ 90.649304][ T5872] ====================================================== [ 90.656522][ T5872] WARNING: possible circular locking dependency detected [ 90.663697][ T5872] syzkaller #0 Tainted: G S [ 90.669861][ T5872] ------------------------------------------------------ [ 90.676976][ T5872] syz.2.39/5872 is trying to acquire lock: [ 90.682794][ T5872] ffff88802a50e460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 90.691787][ T5872] [ 90.691787][ T5872] but task is already holding lock: [ 90.699265][ T5872] ffff88805ae7e2a0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 90.709034][ T5872] [ 90.709034][ T5872] which lock already depends on the new lock. [ 90.709034][ T5872] [ 90.719803][ T5872] [ 90.719803][ T5872] the existing dependency chain (in reverse order) is: [ 90.728918][ T5872] [ 90.728918][ T5872] -> #2 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 90.736942][ T5872] __d_alloc_parallel+0xc32/0x1700 [ 90.742610][ T5872] __lookup_slow+0x82/0x2f0 [ 90.747742][ T5872] lookup_slow+0x59/0x80 [ 90.752530][ T5872] link_path_walk+0xd22/0x1910 [ 90.758091][ T5872] path_openat+0x1c4/0x1da0 [ 90.763136][ T5872] do_file_open+0x23e/0x4a0 [ 90.768192][ T5872] do_sys_openat2+0x115/0x200 [ 90.773425][ T5872] __x64_sys_openat+0x138/0x170 [ 90.778815][ T5872] do_syscall_64+0x166/0x520 [ 90.783933][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.790369][ T5872] [ 90.790369][ T5872] -> #1 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 90.798807][ T5872] down_write+0x91/0x200 [ 90.803651][ T5872] lookup_open+0x246/0x1970 [ 90.808679][ T5872] path_openat+0x673/0x1da0 [ 90.813700][ T5872] do_file_open+0x23e/0x4a0 [ 90.818742][ T5872] do_sys_openat2+0x115/0x200 [ 90.823942][ T5872] __x64_sys_openat+0x138/0x170 [ 90.829308][ T5872] do_syscall_64+0x166/0x520 [ 90.834593][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.841016][ T5872] [ 90.841016][ T5872] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 90.848406][ T5872] __lock_acquire+0x164c/0x2de0 [ 90.853774][ T5872] lock_acquire+0x115/0x350 [ 90.858786][ T5872] sb_start_write+0x48/0x1c0 [ 90.863886][ T5872] mnt_want_write+0x41/0x90 [ 90.868897][ T5872] ovl_lookup+0xb93/0x1c80 [ 90.873827][ T5872] lookup_open+0x94b/0x1970 [ 90.878843][ T5872] path_openat+0x673/0x1da0 [ 90.883854][ T5872] do_file_open+0x23e/0x4a0 [ 90.888879][ T5872] do_sys_openat2+0x115/0x200 [ 90.894090][ T5872] __x64_sys_openat+0x138/0x170 [ 90.899457][ T5872] do_syscall_64+0x166/0x520 [ 90.904577][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.910994][ T5872] [ 90.910994][ T5872] other info that might help us debug this: [ 90.910994][ T5872] [ 90.921238][ T5872] Chain exists of: [ 90.921238][ T5872] sb_writers#5 --> &type->i_mutex_dir_key#5 --> DCACHE_PAR_LOOKUP [ 90.921238][ T5872] [ 90.934965][ T5872] Possible unsafe locking scenario: [ 90.934965][ T5872] [ 90.943229][ T5872] CPU0 CPU1 [ 90.948924][ T5872] ---- ---- [ 90.954300][ T5872] lock(DCACHE_PAR_LOOKUP); [ 90.959104][ T5872] lock(&type->i_mutex_dir_key#5); [ 90.966951][ T5872] lock(DCACHE_PAR_LOOKUP); [ 90.974067][ T5872] rlock(sb_writers#5); [ 90.978336][ T5872] [ 90.978336][ T5872] *** DEADLOCK *** [ 90.978336][ T5872] [ 90.986477][ T5872] locks held by syz.2.39/5872: 2, last CPU#0: [ 90.992579][ T5872] #0: ffff88805aeb2230 (&ovl_i_mutex_dir_key[depth]){.+.+}-{4:4}, at: lookup_open+0x221/0x1970 [ 91.003124][ T5872] #1: ffff88805ae7e2a0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 91.013431][ T5872] [ 91.013431][ T5872] stack backtrace: [ 91.019319][ T5872] CPU: 0 UID: 0 PID: 5872 Comm: syz.2.39 Tainted: G S syzkaller #0 PREEMPT(full) [ 91.030267][ T5872] Tainted: [S]=CPU_OUT_OF_SPEC [ 91.035040][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.045112][ T5872] Call Trace: [ 91.048412][ T5872] [ 91.051337][ T5872] dump_stack_lvl+0xe8/0x150 [ 91.055917][ T5872] print_circular_bug+0x2e2/0x300 [ 91.060959][ T5872] check_noncircular+0x12f/0x150 [ 91.065917][ T5872] __lock_acquire+0x164c/0x2de0 [ 91.070761][ T5872] ? preempt_schedule_common+0x7f/0xd0 [ 91.076226][ T5872] ? preempt_schedule_thunk+0x16/0x40 [ 91.081612][ T5872] lock_acquire+0x115/0x350 [ 91.086112][ T5872] ? mnt_want_write+0x41/0x90 [ 91.091231][ T5872] sb_start_write+0x48/0x1c0 [ 91.095921][ T5872] ? mnt_want_write+0x41/0x90 [ 91.100597][ T5872] mnt_want_write+0x41/0x90 [ 91.105182][ T5872] ovl_lookup+0xb93/0x1c80 [ 91.109764][ T5872] ? lock_acquire+0x115/0x350 [ 91.114888][ T5872] ? __pfx_ovl_lookup+0x10/0x10 [ 91.119759][ T5872] ? __d_lookup+0x66/0x790 [ 91.124334][ T5872] ? __pfx___d_alloc_parallel+0x10/0x10 [ 91.129897][ T5872] ? __d_lookup+0x6f3/0x790 [ 91.134425][ T5872] ? d_lookup+0x1f/0xa0 [ 91.138590][ T5872] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 91.144753][ T5872] ? lockdep_hardirqs_on+0x7b/0x110 [ 91.149971][ T5872] lookup_open+0x94b/0x1970 [ 91.154487][ T5872] path_openat+0x673/0x1da0 [ 91.159215][ T5872] do_file_open+0x23e/0x4a0 [ 91.163967][ T5872] ? __pfx_do_file_open+0x10/0x10 [ 91.169019][ T5872] ? _raw_spin_unlock+0x28/0x50 [ 91.173890][ T5872] ? alloc_fd+0x6af/0x760 [ 91.178239][ T5872] do_sys_openat2+0x115/0x200 [ 91.183036][ T5872] ? __se_sys_futex+0x3a8/0x450 [ 91.187893][ T5872] ? __pfx_do_sys_openat2+0x10/0x10 [ 91.193091][ T5872] ? rcu_is_watching+0x16/0xb0 [ 91.197892][ T5872] __x64_sys_openat+0x138/0x170 [ 91.202765][ T5872] do_syscall_64+0x166/0x520 [ 91.207449][ T5872] ? trace_irq_disable+0x3b/0x140 [ 91.212464][ T5872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.218522][ T5872] ? clear_bhb_loop+0x70/0xc0 [ 91.223310][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.229219][ T5872] RIP: 0033:0x7f4819f9e199 [ 91.233635][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.253263][ T5872] RSP: 002b:00007f481ad9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.261694][ T5872] RAX: ffffffffffffffda RBX: 00007f481a225fa0 RCX: 00007f4819f9e199 [ 91.269842][ T5872] RDX: 0000000000000400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 91.277902][ T5872] RBP: 00007f481a035888 R08: 0000000000000000 R09: 0000000000000000 [ 91.285884][ T5872] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 91.293866][ T5872] R13: 00007f481a226038 R14: 00007f481a225fa0 R15: 00007ffc87186288 [ 91.301850][ T5872] [ 91.432827][ T5688] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 91.584644][ T5688] usb 1-1: not running at top speed; connect to a high speed hub [ 91.584680][ T5688] usb 1-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 91.585743][ T5688] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.585779][ T5688] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 91.585812][ T5688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.590264][ T5688] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 91.594199][ T5688] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 91.594307][ T5688] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 91.611346][ T5688] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 91.614407][ T5688] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 91.614487][ T5688] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 91.623987][ T5688] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 91.909980][ T32] usb 1-1: USB disconnect, device number 3 [ 91.919057][ T32] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 91.922249][ T32] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 91.942195][ T32] keyspan 1-1:1.0: device disconnected [ 92.085330][ T5717] usb 2-1: USB disconnect, device number 2