last executing test programs: 3.131071687s ago: executing program 3 (id=4): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x3d, 0x68, {0x68, 0xf, "6db74862b61e5bbc87791e4a5c6b76b77c06e9c07b509bc70de357cb391f04570bd6224f9a094582a6cdc171b59195f31044be17462a8156ff48dbfbf0d6c1bdba5e5db398191545df53fd06a93ad960325605b9a5d14ad50ab0b6aa7ec925c7633c7c3dea65"}}, &(0x7f0000000100)={0x0, 0x3, 0x19, @string={0x19, 0x3, "49f28af9491ddefb25e836a393d6fbdbb42d5dfabb6f8a"}}}, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x40, 0x12, 0x57, "becad343140637eed6035cbf365369f5bf6a6ad011d9decd6ab23141e791940f7c8e5627256cf3044b3cd2e685bf8f98fdbfbe5e86a315174368f9127eac66a212aaf66e2e91758c2b20edfac08b45b31c65e524c24ab1"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000003c0)={0x20, 0x81, 0x1, 'j'}, &(0x7f0000000400)={0x20, 0x82, 0x2, "598b"}, &(0x7f0000000440)={0x20, 0x83, 0x3, "0e348f"}, &(0x7f0000000480)={0x20, 0x84, 0x1, '+'}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "2c457f"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002d80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.224831576s ago: executing program 2 (id=3): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) write$hidraw(r1, &(0x7f0000000900)="d882", 0x4000) 1.938681443s ago: executing program 0 (id=1): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x63feb6dd21e60ac9, 0x5c, 0xe9, 0xae, 0x8, 0x13d8, 0x10, 0xbcd4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x9, 0x80, 0x1, "", [{{0x9, 0x4, 0x58, 0x80, 0x0, 0x36, 0xd8, 0x77, 0xfc}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 1.789894792s ago: executing program 1 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) (async) r5 = eventfd2(0x4, 0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0xa1, 0x0, 0x3, r3, &(0x7f0000000040)="1d", 0xfffffd7b, 0x801, 0x0, 0x1, r5}]) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x20}}, 0x2000850) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) (async, rerun: 64) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x400000b0, 0x0, 0xffffffffffffffff}, {0x400000b1, 0x0, 0xfffffffffffff7f7}]}) (rerun: 64) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000240)={0x6, 0xb, 0x2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003b00010354bd7002fadbdf2538ca72479e52780900b25bd8abfc7d5ee73f084e4a33d54e68"], 0x14}}, 0xc048) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.605457056s ago: executing program 2 (id=6): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000580)={0x23, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x5e23, @dev={0xac, 0x14, 0x14, 0x36}}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket(0x11, 0x800000003, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write(r1, &(0x7f0000000000)='3', 0x4e) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x200}, {0x3, 0x7fffffff}], 0xffffffffffffffff}, 0x18, 0x1) close(0x3) 1.426293002s ago: executing program 1 (id=7): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0x13, 0x9, 0x1004, 0xff, "5acf05007c9b74df"}) (async) write$UHID_INPUT(r0, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) 1.214132804s ago: executing program 1 (id=8): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0500000000160000009714cc170166d7e4e7ffc736d5d959a41a50128db548299457ca000300", @ANYRES32=r5, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026007c150000"], 0x44}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0xb014853145f0758b, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x20000000) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x88) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/438], 0x220) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80"], 0x24}], 0x1}, 0x0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r6) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 860.25743ms ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x850800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf2504000000080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 762.550661ms ago: executing program 2 (id=10): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x20, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, 0x0, 0x0) bind$phonet(r3, 0x0, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) r6 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r6, &(0x7f0000000800)={&(0x7f0000000080)=@vsock, 0x80, &(0x7f0000000780)=[{&(0x7f0000000180)=""/89, 0x59}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000300)=""/153, 0x99}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000000580)=""/80, 0x50}, {&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/134, 0x86}], 0x7}, 0x0) write$hidraw(r5, &(0x7f0000000900)="d882", 0x2) 761.922385ms ago: executing program 1 (id=11): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4000000290001000000000000000000fc020000000000000000000000000001fe800000000000000000fffd000000200000000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="be6b6e000000000050001100ac1414aa000000000000000000000000ffffffff0000000000000000fc020000000000000000000000000001ff0200000000000000000000000000013c040000080000000a000a00280004"], 0xf4}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 735.381183ms ago: executing program 1 (id=12): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffffffff84bedbf4, 0x2) io_setup(0x4, &(0x7f00000014c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000001000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40804) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000005c0)={0x5, 0x1000, {0xffffffffffffffff}, {}, 0x2, 0xfffffffffffffffe}) capset(&(0x7f0000000600)={0x20071026, r4}, &(0x7f0000000640)={0xdf, 0x8, 0x401, 0xaa4, 0xfff, 0xf}) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x410800, 0x0) io_submit(r1, 0x5, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6a3f, 0xffffffffffffffff, &(0x7f00000000c0)="564e095bf4717b05b8d57ca56b3080e7e9a88604ed29f983c19e323b01b83a85d1f76dd5397309ae3dc3d5a69cf4960575bf6a02a0284b6209c0c371610a477185cadb8070a836e3f28f232e5336c571747712d18cedc7ac00f5a23198c63abf2d08cb0fa5d446b30c272eed2e6f5d9087431773360ee16ac2429caf182944251d8c2130372e97a7621b29b6ec217c8511bcbb8c950965773a90b31e60c1cb245f4294177f97c28bbcf6338539da2e045ffaa7ae7d5b", 0xb6, 0x101, 0x0, 0x6, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xfff4, r5, &(0x7f0000000200)="a269d8056dc8353e566a98802c7d7c5e3751515d547596d696ff0dae1668c69b746ae4895a9ec426b1de484ec6326c0f23e67705b5b5c245270932a65a294871f95e023d976020db8b8129780df353504a4c3f753749e4dbb948da7a0f621d4ee62c9d97e2ab91ba56835a73a8744430d6e77054a8888336c64c660375dc29178ddb6fd47c605d2610d04fbad64624024f055e23ea3c9d6e728b5c075e7eb8383f949f6e18cf97", 0xa7, 0x6, 0x0, 0x1, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xe, r0, &(0x7f0000000340)="ce2ad2", 0x3, 0x667, 0x0, 0x2, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0xc0, r5, &(0x7f00000003c0)="3da38b70ce4bc19537639c7ecfa08b46d7dff49a5f02e9cb3459fc66cb36b233fb669efe5e9501f377b24cb9e6e91e640cca2514e4cca8253f0c1b6193e7b74c5393a958c91e25b3ed934f84850145ad6389c0c57a9ffde8f75aee818a2e62a54179e74f392b479133b82657c6f85265892fff3a2ac2a4ceec8b67d52362d209c762937a62dd88489ca2f806cf0923710ce20d542d3321a0777f8b67da63820bc81265d2e67bd2efe322a82ec21377bf2d31ae23384d0bccaf9461aac763c3f2a5de400c42fe5d8b40cae44b132d6e302fda36e8ef4a8d24124524f64056cdf8126b2a8fbff3aafe85e539ec1421803e2ff7c3e59ac5", 0xf6, 0x8, 0x0, 0x2, r2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f0000000500)="c52005e3539406b067269f7df6331c81388f16d55c61b47516c1ced9b3982b03411f3c91ae6b", 0x26, 0xe, 0x0, 0x1}]) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2842, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x26e, 0x0, 0x8000000}]}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 548.890453ms ago: executing program 0 (id=13): r0 = socket(0x2b, 0x80801, 0x1) (async, rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]', @ANYRES8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc0000000800110007"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) (async, rerun: 32) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166e", 0x2, 0xfffffffffffffffe) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (async) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (rerun: 64) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) lseek(r5, 0x289e0cb5, 0x0) r6 = dup(r4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x10004, @loopback, 0x1}, 0x1c) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000080)="f3ec262648423158fb545f7290e190245b69a9315f9d3f45f37c927d382203723ad56cbbb4555131f8bbee75be54f9ecdd28af5b4264b2e21064439d9d3428a9939569721f2636acf3be1da3941ca8934084aa24ef2e515103c903d6af79cd41832cd1a7", 0x64) 479.008533ms ago: executing program 1 (id=14): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) write$hidraw(r1, &(0x7f0000000900)="d882", 0x4000) 0s ago: executing program 3 (id=15): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat(r0, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x268100, 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000200)='.\x00', 0x301f00, 0x393) renameat2(r4, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. [ 62.285726][ T5601] cgroup: Unknown subsys name 'net' [ 62.410035][ T5601] cgroup: Unknown subsys name 'cpuset' [ 62.418592][ T5601] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.750156][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.278527][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.282989][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.284568][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.285548][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.286104][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.405247][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.417489][ T4932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.418327][ T4932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.419265][ T4932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.419954][ T4932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.421199][ T4932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.423605][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.424800][ T4932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.455154][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.462715][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.472670][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.474074][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.475223][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.507608][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.522424][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.780117][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.780232][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.780365][ T5611] bridge_slave_0: entered allmulticast mode [ 68.782029][ T5611] bridge_slave_0: entered promiscuous mode [ 68.799764][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.800090][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.800243][ T5618] bridge_slave_0: entered allmulticast mode [ 68.801802][ T5618] bridge_slave_0: entered promiscuous mode [ 68.804749][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.804840][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.805848][ T5618] bridge_slave_1: entered allmulticast mode [ 68.807405][ T5618] bridge_slave_1: entered promiscuous mode [ 68.835238][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.835330][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.835436][ T5611] bridge_slave_1: entered allmulticast mode [ 68.836952][ T5611] bridge_slave_1: entered promiscuous mode [ 68.897053][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.926494][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.926591][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.926701][ T5617] bridge_slave_0: entered allmulticast mode [ 68.928357][ T5617] bridge_slave_0: entered promiscuous mode [ 68.933010][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.948380][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.948553][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.948646][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.948983][ T5622] bridge_slave_0: entered allmulticast mode [ 68.951241][ T5622] bridge_slave_0: entered promiscuous mode [ 68.953087][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.953178][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.953278][ T5617] bridge_slave_1: entered allmulticast mode [ 68.955735][ T5617] bridge_slave_1: entered promiscuous mode [ 68.981592][ T5618] team0: Port device team_slave_0 added [ 68.984883][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.985060][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.985151][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.985252][ T5622] bridge_slave_1: entered allmulticast mode [ 68.987053][ T5622] bridge_slave_1: entered promiscuous mode [ 69.043419][ T5618] team0: Port device team_slave_1 added [ 69.080398][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.103514][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.105466][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.119804][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.119817][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.119843][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.123859][ T5611] team0: Port device team_slave_0 added [ 69.126612][ T5611] team0: Port device team_slave_1 added [ 69.129974][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.154953][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.154966][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.154987][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.238057][ T5622] team0: Port device team_slave_0 added [ 69.240010][ T5617] team0: Port device team_slave_0 added [ 69.243302][ T5617] team0: Port device team_slave_1 added [ 69.243917][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.243929][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.243955][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.245774][ T5622] team0: Port device team_slave_1 added [ 69.285477][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.285490][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.285512][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.332336][ T5618] hsr_slave_0: entered promiscuous mode [ 69.333449][ T5618] hsr_slave_1: entered promiscuous mode [ 69.343615][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.343627][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.343648][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.346084][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.346095][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.346116][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.358819][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.358831][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.358852][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.361802][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.361813][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.361834][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.408086][ T5623] Bluetooth: hci0: command tx timeout [ 69.488810][ T5621] Bluetooth: hci1: command tx timeout [ 69.489095][ T5623] Bluetooth: hci2: command tx timeout [ 69.559673][ T5623] Bluetooth: hci3: command tx timeout [ 69.589506][ T5611] hsr_slave_0: entered promiscuous mode [ 69.590067][ T5611] hsr_slave_1: entered promiscuous mode [ 69.590474][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 69.590536][ T5611] Cannot create hsr debugfs directory [ 69.658120][ T5617] hsr_slave_0: entered promiscuous mode [ 69.658704][ T5617] hsr_slave_1: entered promiscuous mode [ 69.659107][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 69.659124][ T5617] Cannot create hsr debugfs directory [ 69.664417][ T5622] hsr_slave_0: entered promiscuous mode [ 69.665010][ T5622] hsr_slave_1: entered promiscuous mode [ 69.665408][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 69.665424][ T5622] Cannot create hsr debugfs directory [ 70.035047][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.047501][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.048339][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.053486][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.054675][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.059537][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.060719][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.068855][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.150948][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.154527][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.171608][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.177012][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.178348][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.183917][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.191736][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.199341][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.285297][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.289617][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.291402][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.301005][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.303256][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.307748][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.319130][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.327226][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.335827][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.410307][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.442006][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.442133][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.444430][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.449132][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.449994][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.459813][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.461792][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.471772][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.519422][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.519477][ T487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.520004][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.522348][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.620624][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.691896][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.705993][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.732778][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.732876][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.741261][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.741352][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.771759][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.807203][ T487] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.807347][ T487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.837626][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.837727][ T487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.865007][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.926050][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.946408][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.946509][ T3268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.970663][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.970762][ T3268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.445117][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.481663][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.481731][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.482618][ T5623] Bluetooth: hci0: command tx timeout [ 71.559384][ T5621] Bluetooth: hci1: command tx timeout [ 71.559461][ T5623] Bluetooth: hci2: command tx timeout [ 71.564961][ T5618] veth0_vlan: entered promiscuous mode [ 71.594261][ T5618] veth1_vlan: entered promiscuous mode [ 71.639403][ T5623] Bluetooth: hci3: command tx timeout [ 71.706687][ T5618] veth0_macvtap: entered promiscuous mode [ 71.738501][ T5618] veth1_macvtap: entered promiscuous mode [ 71.770229][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.792129][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.830205][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.928841][ T5622] veth0_vlan: entered promiscuous mode [ 71.935113][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.990791][ T5622] veth1_vlan: entered promiscuous mode [ 72.006950][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.049868][ T487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.050101][ T487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.051072][ T3268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.051846][ T3268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.052186][ T3268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.052431][ T3268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.141592][ T5617] veth0_vlan: entered promiscuous mode [ 72.147859][ T487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.147874][ T487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.195100][ T5617] veth1_vlan: entered promiscuous mode [ 72.206341][ T5622] veth0_macvtap: entered promiscuous mode [ 72.222285][ T5622] veth1_macvtap: entered promiscuous mode [ 72.252813][ T5611] veth0_vlan: entered promiscuous mode [ 72.257024][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.281730][ T5611] veth1_vlan: entered promiscuous mode [ 72.298689][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.331077][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.346061][ T5617] veth0_macvtap: entered promiscuous mode [ 72.373477][ T5617] veth1_macvtap: entered promiscuous mode [ 72.412240][ T5611] veth0_macvtap: entered promiscuous mode [ 72.422568][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.423264][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.423303][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.423337][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.423369][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.461266][ T5611] veth1_macvtap: entered promiscuous mode [ 72.482925][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.516036][ T3268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.516053][ T3268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.551131][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.582090][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.606331][ T3268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.606347][ T3268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.628116][ T5699] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.675682][ T3268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.675698][ T3268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.698281][ T3268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.699076][ T3268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.699113][ T3268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.699154][ T3268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.699186][ T3268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.699218][ T3268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.699250][ T3268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.699281][ T3268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.804862][ T5699] usb 4-1: unable to get BOS descriptor or descriptor too short [ 72.805090][ T5699] usb 4-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 72.827544][ T5699] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.827574][ T5699] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 72.827617][ T5699] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 72.827652][ T5699] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 72.827686][ T5699] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.827708][ T5699] usb 4-1: config 1 interface 1 has no altsetting 0 [ 72.829712][ T5684] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 72.831785][ T5699] usb 4-1: string descriptor 0 read error: -22 [ 72.831915][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.892915][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.892931][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.945278][ T5684] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 73.036653][ T3268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.036670][ T3268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.139208][ T5699] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 73.276845][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.276865][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.345427][ T5758] hid-generic 0000:0000:0000.0001: pid 5758 passed too large report [ 73.385133][ T1227] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.410764][ T1227] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 73.558281][ T5623] Bluetooth: hci0: command tx timeout [ 73.637870][ T5621] Bluetooth: hci1: command tx timeout [ 73.638236][ T5623] Bluetooth: hci2: command tx timeout [ 73.689495][ T5772] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.717360][ T5623] Bluetooth: hci3: command tx timeout [ 73.847207][ T1227] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.999458][ T1227] usb 1-1: Using ep0 maxpacket: 8 [ 74.001695][ T1227] usb 1-1: unable to get BOS descriptor or descriptor too short [ 74.001739][ T1227] usb 1-1: New USB device found: idVendor=13d8, idProduct=0010, bcdDevice=bc.d4 [ 74.005039][ T1227] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 74.005061][ T1227] usb 1-1: config 2 has no interface number 0 [ 74.005088][ T1227] usb 1-1: config 2 interface 88 has no altsetting 0 [ 74.061825][ T1227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.061849][ T1227] usb 1-1: Product: syz [ 74.061862][ T1227] usb 1-1: Manufacturer: syz [ 74.061876][ T1227] usb 1-1: SerialNumber: syz [ 74.366305][ T1227] usb 1-1: selecting invalid altsetting 1 [ 74.366335][ T1227] comedi comedi5: could not switch to alternate setting 1 [ 74.366349][ T1227] usbduxfast 1-1:2.88: driver 'usbduxfast' failed to auto-configure device. [ 74.415404][ T1227] usb 1-1: USB disconnect, device number 2 [ 74.417526][ T5788] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8'. [ 74.484185][ T5778] forcing mempool usage for __sg_alloc_table+0x1bb/0x700 [ 74.501947][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 74.684424][ T5798] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11'. [ 74.746114][ T5801] capability: warning: `syz.1.12' uses deprecated v2 capabilities in a way that may be insecure [ 75.011132][ T5692] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.021437][ T5692] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.427422][ T1227] usb 4-1: USB disconnect, device number 2 [ 75.638998][ T5623] Bluetooth: hci0: command tx timeout [ 75.644846][ T5814] [ 75.652582][ T5814] ====================================================== [ 75.659600][ T5814] WARNING: possible circular locking dependency detected [ 75.666636][ T5814] syzkaller #0 Not tainted [ 75.671043][ T5814] ------------------------------------------------------ [ 75.678053][ T5814] syz.3.15/5814 is trying to acquire lock: [ 75.683858][ T5814] ffff888057873f78 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 75.693372][ T5814] [ 75.693372][ T5814] but task is already holding lock: [ 75.700735][ T5814] ffff88801242de40 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 75.710486][ T5814] [ 75.710486][ T5814] which lock already depends on the new lock. [ 75.710486][ T5814] [ 75.720883][ T5814] [ 75.720883][ T5814] the existing dependency chain (in reverse order) is: [ 75.722641][ T5623] Bluetooth: hci2: command tx timeout [ 75.722666][ T5623] Bluetooth: hci1: command tx timeout [ 75.740593][ T5814] [ 75.740593][ T5814] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 75.748424][ T5814] __d_alloc_parallel+0xc32/0x1700 [ 75.754067][ T5814] __lookup_slow+0x82/0x2f0 [ 75.759087][ T5814] lookup_slow+0x59/0x80 [ 75.763846][ T5814] link_path_walk+0xd22/0x1910 [ 75.769124][ T5814] path_openat+0x1c4/0x1da0 [ 75.774156][ T5814] do_file_open+0x23e/0x4a0 [ 75.779184][ T5814] do_sys_openat2+0x115/0x200 [ 75.784393][ T5814] __x64_sys_openat+0x138/0x170 [ 75.789771][ T5814] do_syscall_64+0x166/0x520 [ 75.794893][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.797767][ T5621] Bluetooth: hci3: command tx timeout [ 75.806658][ T5814] [ 75.806658][ T5814] -> #0 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 75.815092][ T5814] __lock_acquire+0x164c/0x2de0 [ 75.820458][ T5814] lock_acquire+0x115/0x350 [ 75.825475][ T5814] down_read+0x45/0x320 [ 75.830141][ T5814] lookup_slow+0x46/0x80 [ 75.834892][ T5814] ovl_lookup_single+0x323/0xe90 [ 75.840339][ T5814] ovl_lookup_layer+0x377/0x440 [ 75.845702][ T5814] ovl_lookup+0x5e5/0x1c80 [ 75.850632][ T5814] __lookup_slow+0x1fb/0x2f0 [ 75.855731][ T5814] lookup_slow+0x59/0x80 [ 75.860484][ T5814] link_path_walk+0xd22/0x1910 [ 75.865757][ T5814] __filename_parentat+0x287/0x6f0 [ 75.871378][ T5814] filename_renameat2+0x202/0x9a0 [ 75.876915][ T5814] __se_sys_renameat2+0x5a/0x2c0 [ 75.882366][ T5814] do_syscall_64+0x166/0x520 [ 75.887472][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.893875][ T5814] [ 75.893875][ T5814] other info that might help us debug this: [ 75.893875][ T5814] [ 75.904085][ T5814] Possible unsafe locking scenario: [ 75.904085][ T5814] [ 75.911521][ T5814] CPU0 CPU1 [ 75.916871][ T5814] ---- ---- [ 75.922225][ T5814] lock(DCACHE_PAR_LOOKUP); [ 75.926809][ T5814] lock(&type->i_mutex_dir_key#5); [ 75.934522][ T5814] lock(DCACHE_PAR_LOOKUP); [ 75.941623][ T5814] rlock(&type->i_mutex_dir_key#5); [ 75.946907][ T5814] [ 75.946907][ T5814] *** DEADLOCK *** [ 75.946907][ T5814] [ 75.955038][ T5814] locks held by syz.3.15/5814: 2, last CPU#0: [ 75.961099][ T5814] #0: ffff8880125da230 (&ovl_i_mutex_dir_key[depth]){.+.+}-{4:4}, at: lookup_slow+0x46/0x80 [ 75.971276][ T5814] #1: ffff88801242de40 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 75.981444][ T5814] [ 75.981444][ T5814] stack backtrace: [ 75.987337][ T5814] CPU: 0 UID: 0 PID: 5814 Comm: syz.3.15 Not tainted syzkaller #0 PREEMPT(full) [ 75.996439][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.006510][ T5814] Call Trace: [ 76.009788][ T5814] [ 76.012708][ T5814] dump_stack_lvl+0xe8/0x150 [ 76.017288][ T5814] print_circular_bug+0x2e2/0x300 [ 76.022318][ T5814] check_noncircular+0x12f/0x150 [ 76.027267][ T5814] __lock_acquire+0x164c/0x2de0 [ 76.032109][ T5814] ? lock_acquire+0x115/0x350 [ 76.036789][ T5814] lock_acquire+0x115/0x350 [ 76.041282][ T5814] ? lookup_slow+0x46/0x80 [ 76.045694][ T5814] down_read+0x45/0x320 [ 76.049837][ T5814] ? lookup_slow+0x46/0x80 [ 76.054239][ T5814] ? d_lookup+0x8a/0xa0 [ 76.058383][ T5814] lookup_slow+0x46/0x80 [ 76.062618][ T5814] ovl_lookup_single+0x323/0xe90 [ 76.067556][ T5814] ? __pfx_ovl_lookup_single+0x10/0x10 [ 76.073002][ T5814] ? __lock_acquire+0x747/0x2de0 [ 76.077929][ T5814] ovl_lookup_layer+0x377/0x440 [ 76.082777][ T5814] ovl_lookup+0x5e5/0x1c80 [ 76.087190][ T5814] ? lock_acquire+0x115/0x350 [ 76.091864][ T5814] ? __d_alloc_parallel+0x156f/0x1700 [ 76.097220][ T5814] ? __d_alloc_parallel+0x39e/0x1700 [ 76.102500][ T5814] ? __pfx_ovl_lookup+0x10/0x10 [ 76.107335][ T5814] ? __pfx___d_alloc_parallel+0x10/0x10 [ 76.112871][ T5814] ? lock_acquire+0x232/0x350 [ 76.117541][ T5814] __lookup_slow+0x1fb/0x2f0 [ 76.122133][ T5814] lookup_slow+0x59/0x80 [ 76.126371][ T5814] link_path_walk+0xd22/0x1910 [ 76.131133][ T5814] __filename_parentat+0x287/0x6f0 [ 76.136241][ T5814] ? __pfx___filename_parentat+0x10/0x10 [ 76.141865][ T5814] ? kasan_save_track+0x4f/0x80 [ 76.146712][ T5814] filename_renameat2+0x202/0x9a0 [ 76.151733][ T5814] ? __pfx_filename_renameat2+0x10/0x10 [ 76.157281][ T5814] ? do_getname+0x151/0x250 [ 76.161774][ T5814] __se_sys_renameat2+0x5a/0x2c0 [ 76.166710][ T5814] do_syscall_64+0x166/0x520 [ 76.171292][ T5814] ? trace_irq_disable+0x3b/0x140 [ 76.176304][ T5814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.182358][ T5814] ? clear_bhb_loop+0x70/0xc0 [ 76.187022][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.192900][ T5814] RIP: 0033:0x7fc4a379e159 [ 76.197320][ T5814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.216922][ T5814] RSP: 002b:00007fc4a46e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 76.225329][ T5814] RAX: ffffffffffffffda RBX: 00007fc4a3a25fa0 RCX: 00007fc4a379e159 [ 76.233290][ T5814] RDX: 0000000000000006 RSI: 0000200000000100 RDI: 0000000000000006 [ 76.241250][ T5814] RBP: 00007fc4a383506b R08: 0000000000000002 R09: 0000000000000000 [ 76.249210][ T5814] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 76.257170][ T5814] R13: 00007fc4a3a26038 R14: 00007fc4a3a25fa0 R15: 00007ffe2a54e358 [ 76.265141][ T5814] [ 81.721585][ T10] cfg80211: failed to load regulatory.db