last executing test programs: 1m18.159354191s ago: executing program 3 (id=1008): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, 0x0) 59.280517651s ago: executing program 3 (id=1008): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, 0x0) 44.49239702s ago: executing program 3 (id=1008): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, 0x0) 31.455731637s ago: executing program 3 (id=1008): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, 0x0) 18.430915274s ago: executing program 1 (id=1279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100110008000300", @ANYRES32=r2], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @private=0xa010101, @local}}}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r3, 0x8b19, &(0x7f0000000040)) 17.851698108s ago: executing program 3 (id=1008): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, 0x0) 17.210026097s ago: executing program 1 (id=1283): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x20048014) r1 = dup(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) 16.534735004s ago: executing program 1 (id=1291): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000e40)="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", 0x241, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4004) shutdown(r0, 0x1) recvfrom$inet(r0, &(0x7f0000000d00)=""/166, 0xa6, 0x0, 0x0, 0x0) 16.110172019s ago: executing program 1 (id=1293): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) syz_open_dev$vim2m(&(0x7f00000002c0), 0x7b1, 0x2) pipe2$9p(&(0x7f0000000000), 0x0) pselect6(0x71, &(0x7f0000000900), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 15.099276202s ago: executing program 1 (id=1296): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0x810c9365, 0x0) 14.923461764s ago: executing program 1 (id=1297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x0, 0x3f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x2c0710}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.213991641s ago: executing program 3 (id=1008): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, 0x0) 5.31083755s ago: executing program 0 (id=1345): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = io_uring_setup(0xc25, &(0x7f0000000740)) dup2(r1, r2) write$uinput_user_dev(r0, &(0x7f00000007c0)={'syz0\x00'}, 0x45c) 4.935427597s ago: executing program 2 (id=1349): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000140)={0x20, 0xc}, 0x0, 0x0}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x81, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @private0}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x14) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100) 2.929185528s ago: executing program 0 (id=1352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000400)=@ccm_128={{0x304}, "424ac87e182cf327", "219cfe099e024fe4ca45bced7130e417", "2601ffe2", "ffffffffffffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0xffffe000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_128={{0x304}, "4b3a40404d4dbb7e", "492e12fd9ae6a89915f0564cff2dc689", "8ac5ee78", "37b0ec034395263b"}, 0xa) 2.599453673s ago: executing program 2 (id=1354): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000280)={0x8, 0xffffffffffffff7f, 0x874, 0xfffffefffffffffb, 0x0, 0xa}) 2.406555269s ago: executing program 0 (id=1355): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) 2.351732108s ago: executing program 2 (id=1356): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x4, "ff0f00000000000001a82d866bf4ff0713e4b89c3c00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0xea}, 0x0, 0x0, 0x0) 2.215124485s ago: executing program 0 (id=1357): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r3, 0x40086604, 0x0) 2.19431771s ago: executing program 2 (id=1358): pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r4, 0x0, r3, 0x0, 0x1000, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.040673753s ago: executing program 0 (id=1359): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x47586635) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x3, &(0x7f0000000040)=0x3, 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 1.91657163s ago: executing program 2 (id=1361): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x3, "1f65a0d5"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0xdbf}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x0, 0x6, 0x33, "4e7703040ea1710c8690908567667cd5e9cf4a7edc57f3561a92076c3f05eb0b5dd578e5b60df5dd3e0b51441989d25d0c5a1b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000580)={0x20, 0x1, 0xaf, "90eed5be4bd7f64e1baaf7c013a2634767c8b5acba61a053530feb98ec69e7727fcbf41262c99d8b5d1dd455ce6036d0aa34d5f08a8b7d63cd52798e6a1b9fda92d6e97414897de1b32e45054fff3fbe17540468367833e952cc47b349eea0cff75df9b3b0c36f83f01741cc436163abe9b8102bbfd0b6031eabdc1ca2d86981e7dd01356c63473344fbed9ef9fd5d7ad1a6b9ba972ef759a764435828413f8045395d76b5a27c034b22ff177b37ed"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x7f}}) 1.298036085s ago: executing program 4 (id=1365): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 1.035954227s ago: executing program 4 (id=1366): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 977.347277ms ago: executing program 0 (id=1367): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="200125"], 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0}) 858.448378ms ago: executing program 4 (id=1368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 740.835824ms ago: executing program 4 (id=1369): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x2, 0x200000000000006, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4048aecb, 0x0) sendmsg$kcm(r1, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703240000007ea60264160af365040014000d000a000e0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 532.508801ms ago: executing program 4 (id=1370): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000240), &(0x7f0000000280)=@udp6=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r0, r3, 0x4, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000240), &(0x7f0000000180)=@tcp=r2}, 0x20) 459.025029ms ago: executing program 4 (id=1371): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001800010000000000000000000a2000000000000100000000060015000300000008"], 0x2c}}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x6, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) read$nci(0xffffffffffffffff, &(0x7f0000000200)=""/100, 0x64) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x126, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4000084) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @sco={0x1f, @none}, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x9fe0, 0x0, 0xaf7e, 0xfffffffffffffff9, 0x3}) 0s ago: executing program 2 (id=1372): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) kernel console output (not intermixed with test programs): d: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.184886][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.208432][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.242112][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.254997][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.274275][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.294278][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.304302][ T184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.314270][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.324448][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.334225][ T184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.344303][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.354567][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.356674][ T184] bond0 (unregistering): Released all slaves [ 254.375347][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.414259][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.434871][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.450720][ T9] plantronics 0003:047F:FFFF.0020: ignoring exceeding usage max [ 254.464154][ T9] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 254.472248][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.485296][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.528367][ T9] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 254.549881][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.574259][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.595410][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.614280][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.634271][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.644840][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.684276][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.707927][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.724830][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.744386][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.784247][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.824795][ T8250] 9pnet_fd: p9_fd_create_tcp (8250): problem connecting socket to 127.0.0.1 [ 254.852498][ T5231] Bluetooth: hci1: command 0x0c1a tx timeout [ 254.859632][ T5233] Bluetooth: hci5: command 0x0c1a tx timeout [ 255.021581][ T5233] Bluetooth: hci3: command 0x0c1a tx timeout [ 255.065147][ T29] audit: type=1400 audit(1728512344.662:575): avc: denied { create } for pid=8263 comm="syz.0.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 255.092258][ T5233] Bluetooth: hci0: command 0x041b tx timeout [ 255.193360][ T29] audit: type=1400 audit(1728512344.662:576): avc: denied { connect } for pid=8263 comm="syz.0.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 255.252234][ T184] hsr_slave_0: left promiscuous mode [ 255.280595][ T184] hsr_slave_1: left promiscuous mode [ 255.295632][ T29] audit: type=1400 audit(1728512344.722:577): avc: denied { listen } for pid=8263 comm="syz.0.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 255.320474][ T184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.334716][ T184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.354697][ T184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.371756][ T80] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 255.379505][ T184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.437180][ T184] veth1_macvtap: left promiscuous mode [ 255.445436][ T8275] capability: warning: `syz.4.1011' uses 32-bit capabilities (legacy support in use) [ 255.459042][ T184] veth0_macvtap: left promiscuous mode [ 255.466889][ T184] veth1_vlan: left promiscuous mode [ 255.481672][ T184] veth0_vlan: left promiscuous mode [ 255.541626][ T80] usb 1-1: Using ep0 maxpacket: 8 [ 255.550417][ T80] usb 1-1: config 0 has no interfaces? [ 255.579615][ T80] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 255.610702][ T80] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.644219][ T80] usb 1-1: config 0 descriptor?? [ 255.752788][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.765020][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.777545][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.788221][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.797433][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 255.805884][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.865644][ T29] audit: type=1400 audit(1728512345.462:578): avc: denied { write } for pid=8263 comm="syz.0.1009" path="socket:[24079]" dev="sockfs" ino=24079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 255.899047][ T9] usb 1-1: USB disconnect, device number 18 [ 256.060882][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.071658][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.397906][ T184] team0 (unregistering): Port device team_slave_1 removed [ 256.526989][ T184] team0 (unregistering): Port device team_slave_0 removed [ 256.934946][ T5221] usb 3-1: reset high-speed USB device number 15 using dummy_hcd [ 257.105482][ T5231] Bluetooth: hci3: command 0x0c1a tx timeout [ 257.116422][ T5221] usb 3-1: device firmware changed [ 257.138145][ T80] usb 3-1: USB disconnect, device number 15 [ 257.183295][ T5231] Bluetooth: hci0: command 0x041b tx timeout [ 257.292353][ T80] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 257.365896][ T8193] chnl_net:caif_netlink_parms(): no params data found [ 257.473434][ T80] usb 3-1: config 0 has no interfaces? [ 257.489688][ T80] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.509687][ T80] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.538269][ T80] usb 3-1: config 0 descriptor?? [ 257.701658][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.709935][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.730027][ T8193] bridge_slave_0: entered allmulticast mode [ 257.738472][ T8193] bridge_slave_0: entered promiscuous mode [ 257.761572][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.768802][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.791019][ T8193] bridge_slave_1: entered allmulticast mode [ 257.812879][ T8193] bridge_slave_1: entered promiscuous mode [ 257.892479][ T5231] Bluetooth: hci2: command tx timeout [ 257.936134][ T8193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.035220][ T8193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.224630][ T80] usb 3-1: USB disconnect, device number 16 [ 258.349543][ T8193] team0: Port device team_slave_0 added [ 258.372150][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'. [ 258.386383][ T8332] netlink: 'syz.0.1020': attribute type 12 has an invalid length. [ 258.415250][ T8193] team0: Port device team_slave_1 added [ 258.424590][ T8282] chnl_net:caif_netlink_parms(): no params data found [ 258.469290][ T184] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.529274][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.538465][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.566108][ T8193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.601685][ T5221] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 258.623774][ T184] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.637597][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.644707][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.672755][ T8193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.727736][ T184] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.761345][ T8193] hsr_slave_0: entered promiscuous mode [ 258.767308][ T5221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.767353][ T5221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.767397][ T5221] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 258.767428][ T5221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.769759][ T8287] syz.2.1013 (8287) used greatest stack depth: 21440 bytes left [ 258.823853][ T5221] usb 5-1: config 0 descriptor?? [ 258.837307][ T8193] hsr_slave_1: entered promiscuous mode [ 258.871964][ T8193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.879610][ T8193] Cannot create hsr debugfs directory [ 258.907299][ T8282] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.918392][ T8282] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.930513][ T8282] bridge_slave_0: entered allmulticast mode [ 258.943841][ T8282] bridge_slave_0: entered promiscuous mode [ 259.001472][ T184] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.031061][ T8282] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.047483][ T8282] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.064658][ T8282] bridge_slave_1: entered allmulticast mode [ 259.077762][ T8282] bridge_slave_1: entered promiscuous mode [ 259.173304][ T5231] Bluetooth: hci3: command 0x0c1a tx timeout [ 259.252006][ T5231] Bluetooth: hci0: command 0x041b tx timeout [ 259.269022][ T8282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.309402][ T8282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.322507][ T5221] isku 0003:1E7D:319C.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 259.457314][ T8353] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.1024'. [ 259.488373][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'. [ 259.511851][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 259.580703][ T8282] team0: Port device team_slave_0 added [ 259.597629][ T8282] team0: Port device team_slave_1 added [ 259.706406][ T8282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.714655][ T8282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.746856][ T939] usb 5-1: USB disconnect, device number 15 [ 259.752923][ T8282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.787675][ T8282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.800665][ T8282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.844094][ T8282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.941203][ T184] bridge_slave_1: left allmulticast mode [ 259.948249][ T184] bridge_slave_1: left promiscuous mode [ 259.961818][ T184] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.971982][ T5231] Bluetooth: hci2: command tx timeout [ 259.988363][ T184] bridge_slave_0: left allmulticast mode [ 259.994727][ T184] bridge_slave_0: left promiscuous mode [ 260.032258][ T184] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.409767][ T5221] libceph: connect (1)[c::]:6789 error -101 [ 260.431954][ T5221] libceph: mon0 (1)[c::]:6789 connect error [ 260.485556][ T8377] ceph: No mds server is up or the cluster is laggy [ 260.591725][ T5221] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 260.763866][ T5221] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 260.785651][ T5221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.819239][ T5221] usb 3-1: config 0 descriptor?? [ 261.104986][ T184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.125786][ T184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.143304][ T184] bond0 (unregistering): Released all slaves [ 261.208186][ T8282] hsr_slave_0: entered promiscuous mode [ 261.232346][ T8282] hsr_slave_1: entered promiscuous mode [ 261.255227][ T8282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.272471][ T8282] Cannot create hsr debugfs directory [ 261.334491][ T5231] Bluetooth: hci0: command 0x041b tx timeout [ 261.367970][ T8392] mkiss: ax0: crc mode is auto. [ 261.518793][ T5231] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 261.851777][ T939] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 262.023088][ T939] usb 1-1: Using ep0 maxpacket: 8 [ 262.041608][ T939] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.051889][ T5231] Bluetooth: hci2: command tx timeout [ 262.061469][ T939] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.072637][ T939] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 262.083798][ T939] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 262.094619][ T939] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.108120][ T939] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.117413][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.131670][ T184] hsr_slave_0: left promiscuous mode [ 262.134598][ T939] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 262.161770][ T184] hsr_slave_1: left promiscuous mode [ 262.179512][ T184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.187684][ T184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.201391][ T184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.209502][ T184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.239015][ T184] veth1_macvtap: left promiscuous mode [ 262.249169][ T184] veth0_macvtap: left promiscuous mode [ 262.256065][ T184] veth1_vlan: left promiscuous mode [ 262.261919][ T184] veth0_vlan: left promiscuous mode [ 262.426115][ T80] usb 1-1: USB disconnect, device number 19 [ 262.481641][ T5221] pegasus 3-1:0.0: can't reset MAC [ 262.488296][ T5221] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 262.538249][ T5221] usb 3-1: USB disconnect, device number 17 [ 262.994383][ T8408] openvswitch: netlink: Actions may not be safe on all matching packets [ 263.312690][ T184] team0 (unregistering): Port device team_slave_1 removed [ 263.380490][ T184] team0 (unregistering): Port device team_slave_0 removed [ 263.411692][ T5231] Bluetooth: hci0: command 0x041b tx timeout [ 264.142034][ T5231] Bluetooth: hci2: command tx timeout [ 264.237285][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1044'. [ 264.261674][ T8407] b: renamed from lo (while UP) [ 264.274052][ T8407] b: entered allmulticast mode [ 264.288905][ T8415] netlink: 2040 bytes leftover after parsing attributes in process `syz.0.1046'. [ 264.300190][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1046'. [ 264.414953][ T8419] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 265.476514][ T8193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 265.514998][ T5231] Bluetooth: hci0: command 0x041b tx timeout [ 265.515782][ T8193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.575197][ T5231] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 265.584072][ T5231] Bluetooth: hci5: Injecting HCI hardware error event [ 265.601377][ T5231] Bluetooth: hci5: hardware error 0x00 [ 265.649471][ T8193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 265.661038][ T8193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.721168][ T8282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.728523][ T5221] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 265.749236][ T8282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.817592][ T8193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.836439][ T8193] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.849541][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.853875][ T80] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 265.856795][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.895730][ T5221] usb 1-1: Using ep0 maxpacket: 8 [ 265.903347][ T5221] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.911421][ T5221] usb 1-1: config 0 has no interface number 0 [ 265.922203][ T5221] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.940071][ T8282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.946960][ T5221] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 265.966421][ T8282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.978242][ T5221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.995593][ T5221] usb 1-1: config 0 descriptor?? [ 266.005110][ T2890] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.012310][ T2890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.023197][ T80] usb 5-1: Using ep0 maxpacket: 16 [ 266.042789][ T80] usb 5-1: config 0 has no interfaces? [ 266.048563][ T5221] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 266.051452][ T80] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 266.140863][ T80] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.172717][ T80] usb 5-1: config 0 descriptor?? [ 266.185942][ T8282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.227371][ T8193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.270988][ T8282] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.294791][ T80] usb 1-1: USB disconnect, device number 20 [ 266.298802][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.300799][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 266.307867][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.352384][ T80] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 266.413955][ T29] audit: type=1326 audit(1728512355.992:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d777dff9 code=0x7fc00000 [ 266.419537][ T5301] usb 5-1: USB disconnect, device number 16 [ 266.460157][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.467357][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.490495][ T29] audit: type=1326 audit(1728512355.992:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6d777dff9 code=0x7fc00000 [ 266.513848][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.559978][ T29] audit: type=1326 audit(1728512355.992:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d777dff9 code=0x7fc00000 [ 266.583299][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.602909][ T29] audit: type=1326 audit(1728512355.992:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d777dff9 code=0x7fc00000 [ 266.648582][ T29] audit: type=1326 audit(1728512355.992:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d777dff9 code=0x7fc00000 [ 266.711658][ T29] audit: type=1326 audit(1728512355.992:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d777dff9 code=0x7fc00000 [ 266.771337][ T29] audit: type=1326 audit(1728512355.992:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d777dff9 code=0x7fc00000 [ 266.794737][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.805857][ T8193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.827197][ T29] audit: type=1326 audit(1728512355.992:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d777dff9 code=0x7fc00000 [ 266.850516][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.893978][ T29] audit: type=1326 audit(1728512355.992:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d777dff9 code=0x7fc00000 [ 266.917313][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.939907][ T8193] veth0_vlan: entered promiscuous mode [ 266.989774][ T29] audit: type=1326 audit(1728512355.992:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.2.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d777dff9 code=0x7fc00000 [ 266.997665][ T8193] veth1_vlan: entered promiscuous mode [ 267.013165][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.114514][ T8282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.194773][ T8193] veth0_macvtap: entered promiscuous mode [ 267.225219][ T8193] veth1_macvtap: entered promiscuous mode [ 267.271393][ T8282] veth0_vlan: entered promiscuous mode [ 267.290772][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.307539][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.324027][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.335027][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.345417][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.356282][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.381405][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.415111][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.434208][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.446176][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.488091][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.514300][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.534330][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.547666][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.594114][ T8282] veth1_vlan: entered promiscuous mode [ 267.623010][ T8193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.636198][ T8193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.658339][ T5231] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 267.668227][ T8193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.688073][ T8193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.685151][ T5359] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 268.846799][ T5359] usb 3-1: Using ep0 maxpacket: 8 [ 268.892064][ T5359] usb 3-1: config 0 has no interfaces? [ 268.897642][ T5359] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 268.913464][ T5359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.940669][ T5359] usb 3-1: config 0 descriptor?? [ 269.067169][ T8522] kvm: emulating exchange as write [ 269.202980][ T5270] usb 3-1: USB disconnect, device number 18 [ 271.169618][ T8554] overlayfs: overlapping lowerdir path [ 271.605554][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 271.605573][ T29] audit: type=1400 audit(1728512361.202:612): avc: denied { unmount } for pid=7882 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 271.746080][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 271.784983][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 271.796475][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 271.808155][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 271.818816][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 271.840111][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 271.847979][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 271.862352][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 271.873136][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 271.883608][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 271.918802][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 271.927220][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 271.964594][ T8282] veth0_macvtap: entered promiscuous mode [ 271.978558][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 271.989650][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 272.013429][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 272.032808][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 272.040693][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 272.051034][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 272.059718][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 272.068761][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 272.073639][ T8282] veth1_macvtap: entered promiscuous mode [ 272.085407][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 272.099100][ T8576] netlink: 'syz.4.1094': attribute type 2 has an invalid length. [ 272.108147][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 272.112707][ T8576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1094'. [ 272.124782][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 272.133290][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 272.141068][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 272.149298][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 272.157369][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: unknown main item tag 0x0 [ 272.159378][ T8576] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 272.185034][ T5359] hid-generic 0000:FFFFFFFE:0000.0022: hidraw0: HID vffffff.fb Device [syz0] on syz0 [ 272.212104][ T2890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.235681][ T2890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.284595][ T8282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.296893][ T8282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.307367][ T8282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.321673][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 272.333829][ T8282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.347594][ T8282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.362042][ T8282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.373011][ T8282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.388733][ T8282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.402554][ T8282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.418916][ T2890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.429534][ T2890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.441445][ T8282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.452963][ T8282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.465140][ T8282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.475908][ T8282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.486523][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 272.491893][ T8282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.503362][ T8282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.514483][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.525909][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.536050][ T8] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 272.545393][ T8282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.556070][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.564304][ T8282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.578975][ T8282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.588497][ T8] usb 1-1: config 0 descriptor?? [ 272.597947][ T8282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.620181][ T5301] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 272.629331][ T8282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.644966][ T8282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.654425][ T8282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.818481][ T5301] usb 3-1: Using ep0 maxpacket: 8 [ 272.836405][ T5301] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.869059][ T5301] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.888393][ T5301] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 272.904008][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.919504][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.928048][ T5301] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.959627][ T5301] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.976956][ T5301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.051043][ T2890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.056525][ T8] steelseries 0003:1038:1410.0023: unknown main item tag 0x0 [ 273.082198][ T2890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.101126][ T8] steelseries 0003:1038:1410.0023: unknown main item tag 0x0 [ 273.137148][ T8] steelseries 0003:1038:1410.0023: missing HID_OUTPUT_REPORT 0 [ 273.209661][ T5301] usb 3-1: GET_CAPABILITIES returned 0 [ 273.222328][ T5301] usbtmc 3-1:16.0: can't read capabilities [ 273.312907][ T5359] usb 1-1: USB disconnect, device number 21 [ 273.369944][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 273.396682][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.443994][ T29] audit: type=1400 audit(1728512363.032:613): avc: denied { create } for pid=8580 comm="syz.2.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 273.529155][ T939] usb 3-1: USB disconnect, device number 19 [ 273.698351][ T2890] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.827295][ T2890] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.987683][ T2890] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.681915][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.713026][ T5224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.735190][ T2890] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.747009][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.758946][ T5224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.768912][ T5224] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.790013][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.921696][ T939] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 275.091862][ T939] usb 5-1: Using ep0 maxpacket: 32 [ 275.104688][ T939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.171793][ T939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.197359][ T29] audit: type=1400 audit(1728512364.782:614): avc: denied { create } for pid=8638 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 275.241912][ T939] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 275.265882][ T2575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.274494][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.282953][ T5301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.296802][ T5221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.307791][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.316239][ T5359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.326005][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.334465][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.356981][ T29] audit: type=1400 audit(1728512364.832:615): avc: denied { name_bind } for pid=8637 comm="syz.0.1116" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 275.365274][ T939] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 275.397828][ T29] audit: type=1400 audit(1728512364.842:616): avc: denied { name_connect } for pid=8637 comm="syz.0.1116" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 275.443607][ T2890] bridge_slave_1: left allmulticast mode [ 275.454766][ T29] audit: type=1400 audit(1728512364.892:617): avc: denied { setopt } for pid=8638 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 275.456590][ T2890] bridge_slave_1: left promiscuous mode [ 275.486592][ T939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.501702][ T2890] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.510258][ T939] usb 5-1: config 0 descriptor?? [ 275.519450][ T29] audit: type=1400 audit(1728512364.892:618): avc: denied { write } for pid=8638 comm="syz.2.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 275.542515][ T2890] bridge_slave_0: left allmulticast mode [ 275.553939][ T2890] bridge_slave_0: left promiscuous mode [ 275.566073][ T2890] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.585215][ T29] audit: type=1400 audit(1728512364.942:619): avc: denied { read } for pid=8637 comm="syz.0.1116" lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 275.903131][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.997989][ T939] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0024/input/input24 [ 276.104311][ T939] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0024/input/input25 [ 276.239237][ T939] kye 0003:0458:5011.0024: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 276.873146][ T5224] Bluetooth: hci2: command tx timeout [ 276.965374][ T8665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.064355][ T8665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.106490][ C1] kye 0003:0458:5011.0024: usb_submit_urb(ctrl) failed: -1 [ 277.180693][ T8] net_ratelimit: 4 callbacks suppressed [ 277.180714][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.311162][ T2890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.323727][ T2890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.334367][ T5272] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 277.349909][ T2890] bond0 (unregistering): Released all slaves [ 277.369441][ T8619] chnl_net:caif_netlink_parms(): no params data found [ 277.381626][ T5221] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 277.443898][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.541663][ T5221] usb 3-1: Using ep0 maxpacket: 16 [ 277.556027][ T5272] usb 1-1: Using ep0 maxpacket: 8 [ 277.557591][ T5221] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 277.564938][ T5272] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 277.580612][ T5221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 277.606475][ T5221] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 277.608792][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.629521][ T5272] usb 1-1: Product: syz [ 277.635267][ T5272] usb 1-1: Manufacturer: syz [ 277.635398][ T5221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.640026][ T5272] usb 1-1: SerialNumber: syz [ 277.652173][ T5221] usb 3-1: Product: syz [ 277.659991][ T5221] usb 3-1: Manufacturer: syz [ 277.699444][ T5272] usb 1-1: config 0 descriptor?? [ 277.725735][ T5272] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 277.729538][ T5221] usb 3-1: SerialNumber: syz [ 277.781436][ T5221] usb 3-1: config 0 descriptor?? [ 277.840083][ T5221] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 277.855223][ T5221] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 277.895841][ T9] usb 5-1: USB disconnect, device number 17 [ 277.906501][ T8619] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.940640][ T8619] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.000364][ T8619] bridge_slave_0: entered allmulticast mode [ 278.058643][ T8619] bridge_slave_0: entered promiscuous mode [ 278.100130][ T8681] netlink: 'syz.4.1124': attribute type 5 has an invalid length. [ 278.163526][ T2890] hsr_slave_0: left promiscuous mode [ 278.199684][ T2890] hsr_slave_1: left promiscuous mode [ 278.223888][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.231429][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.252534][ T2890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.260166][ T2890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.301780][ T2890] veth1_macvtap: left promiscuous mode [ 278.307410][ T2890] veth0_macvtap: left promiscuous mode [ 278.313194][ T2890] veth1_vlan: left promiscuous mode [ 278.318557][ T2890] veth0_vlan: left promiscuous mode [ 278.318757][ T29] audit: type=1400 audit(1728512367.912:620): avc: denied { create } for pid=8687 comm="syz.4.1125" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 278.419100][ T29] audit: type=1400 audit(1728512367.952:621): avc: denied { rename } for pid=8687 comm="syz.4.1125" name="file1" dev="overlay" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 278.448178][ T5221] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 278.456841][ T5221] em28xx 3-1:0.0: Config register raw data: 0x7b [ 278.463682][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.465186][ T5221] em28xx 3-1:0.0: I2S Audio (3 sample rate(s)) [ 278.497598][ T5221] em28xx 3-1:0.0: No AC97 audio processor [ 278.564245][ T29] audit: type=1400 audit(1728512367.962:622): avc: denied { setattr } for pid=8687 comm="syz.4.1125" name="#34" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 278.681761][ T29] audit: type=1400 audit(1728512368.152:623): avc: denied { unlink } for pid=7882 comm="syz-executor" name="file1" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 278.741940][ T8695] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 9 (only 8 groups) [ 278.932328][ T5224] Bluetooth: hci2: command tx timeout [ 279.014547][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.381712][ T5272] gspca_sonixj: i2c_w8 err -71 [ 279.451692][ T5272] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 279.466524][ T5272] usb 1-1: USB disconnect, device number 22 [ 279.491780][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.533895][ T5221] usb 3-1: USB disconnect, device number 20 [ 279.603975][ T8703] input: syz1 as /devices/virtual/input/input26 [ 279.738989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.747823][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.757744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.766445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.774710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.988520][ T2890] team0 (unregistering): Port device team_slave_1 removed [ 280.687050][ T2890] team0 (unregistering): Port device team_slave_0 removed [ 281.012696][ T5224] Bluetooth: hci2: command tx timeout [ 281.532052][ T5272] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 281.722671][ T5272] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.769322][ T5272] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 281.781113][ T5272] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.791026][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.819780][ T8733] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 281.847032][ T5272] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.964706][ T8619] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.979629][ T8619] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.994870][ T8619] bridge_slave_1: entered allmulticast mode [ 282.003888][ T8619] bridge_slave_1: entered promiscuous mode [ 282.197246][ T8619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.247914][ T8619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.259799][ T939] usb 3-1: USB disconnect, device number 21 [ 282.427844][ T8619] team0: Port device team_slave_0 added [ 282.503058][ T8619] team0: Port device team_slave_1 added [ 282.576760][ T29] audit: type=1400 audit(1728512372.172:624): avc: denied { write } for pid=8759 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 282.766244][ T8619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.788570][ T8619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.834615][ T8619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.866925][ T8619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.891011][ T8619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.980353][ T8619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.093498][ T5224] Bluetooth: hci2: command tx timeout [ 283.099247][ T939] net_ratelimit: 31 callbacks suppressed [ 283.099265][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.391833][ T8619] hsr_slave_0: entered promiscuous mode [ 283.422795][ T8619] hsr_slave_1: entered promiscuous mode [ 283.593920][ T8788] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 284.131827][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.223128][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.653709][ T8619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 284.725510][ T8619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 284.784301][ T8619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 284.844087][ T8619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.036966][ T8619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.073602][ T8619] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.101720][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 285.106048][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.116461][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.147556][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.154770][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.171923][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.230789][ T8619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.267353][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 285.281571][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.348591][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.352580][ T8619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.392096][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 285.436945][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 285.483988][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.526566][ T9] usb 2-1: config 0 descriptor?? [ 285.789727][ T8619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.940171][ T8619] veth0_vlan: entered promiscuous mode [ 285.980240][ T8619] veth1_vlan: entered promiscuous mode [ 286.053875][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0025/input/input27 [ 286.066573][ T8619] veth0_macvtap: entered promiscuous mode [ 286.089483][ T8619] veth1_macvtap: entered promiscuous mode [ 286.129353][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0025/input/input28 [ 286.226666][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.236723][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.281884][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.315104][ T9] kye 0003:0458:5011.0025: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 286.328141][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.391036][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.422041][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.453613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.461538][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.496556][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.519701][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.565984][ T8619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.605104][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1167'. [ 286.635451][ T8856] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.644550][ T8856] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.653868][ T8856] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.662970][ T8856] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.674463][ T8856] vxlan0: entered promiscuous mode [ 286.693946][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.756302][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.772522][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.776235][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.799859][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.809901][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.830781][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.843098][ T29] audit: type=1400 audit(1728512376.442:625): avc: denied { accept } for pid=8860 comm="syz.2.1169" path="socket:[29237]" dev="sockfs" ino=29237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 286.849211][ T8619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.885786][ T8619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.929840][ T8619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.969802][ T8619] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.986139][ T8619] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.993554][ T8859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.000720][ T8619] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.031673][ T8619] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.058714][ T8859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.161784][ C0] kye 0003:0458:5011.0025: usb_submit_urb(ctrl) failed: -1 [ 287.255346][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.265470][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.344232][ T2575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.353222][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.361141][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.377584][ T2575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.521675][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 287.701169][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.719033][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.744780][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 287.772333][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.790436][ T9] usb 5-1: config 0 descriptor?? [ 287.949285][ T80] usb 2-1: USB disconnect, device number 17 [ 288.226142][ T9] magicmouse 0003:05AC:0269.0026: item fetching failed at offset 6/7 [ 288.267942][ T9] magicmouse 0003:05AC:0269.0026: magicmouse hid parse failed [ 288.292100][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.298208][ T9] magicmouse 0003:05AC:0269.0026: probe with driver magicmouse failed with error -22 [ 288.443422][ T9] usb 5-1: USB disconnect, device number 18 [ 288.593153][ T2575] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.332850][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.449282][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.459754][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.469440][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.551824][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.725037][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 289.734057][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.745170][ T2575] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.985187][ T2575] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.185783][ T2575] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.311635][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.363541][ T29] audit: type=1400 audit(1728512379.962:626): avc: denied { read } for pid=8947 comm="syz.1.1185" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 290.419996][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.464231][ T939] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 290.531909][ T939] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 290.611892][ T5359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.716291][ T2575] bridge_slave_1: left allmulticast mode [ 290.722416][ T2575] bridge_slave_1: left promiscuous mode [ 290.730551][ T2575] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.794828][ T2575] bridge_slave_0: left allmulticast mode [ 290.800541][ T2575] bridge_slave_0: left promiscuous mode [ 290.821709][ T5274] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 290.829841][ T2575] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.087184][ T5274] usb 5-1: unable to get BOS descriptor or descriptor too short [ 291.121886][ T5274] usb 5-1: no configurations [ 291.126565][ T5274] usb 5-1: can't read configurations, error -22 [ 291.551916][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.823296][ T5224] Bluetooth: hci2: command tx timeout [ 292.192175][ T8990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.203386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.221792][ T5274] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 292.588267][ T2575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.608632][ T2575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.629800][ T2575] bond0 (unregistering): Released all slaves [ 292.991762][ T29] audit: type=1800 audit(1728512382.572:627): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1193" name="file1" dev="overlay" ino=656 res=0 errno=0 [ 293.030275][ T29] audit: type=1804 audit(1728512382.582:628): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1193" name="/newroot/113/bus/file1" dev="overlay" ino=656 res=1 errno=0 [ 293.170867][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.181882][ T8966] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1187'. [ 293.201987][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.202923][ T29] audit: type=1400 audit(1728512382.802:629): avc: denied { read } for pid=9001 comm="syz.0.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 293.213119][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.280803][ T8912] chnl_net:caif_netlink_parms(): no params data found [ 293.301010][ T5274] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.359647][ T5274] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.368982][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.391028][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.420829][ T5274] usb 5-1: config 0 descriptor?? [ 293.685532][ T2575] hsr_slave_0: left promiscuous mode [ 293.727334][ T2575] hsr_slave_1: left promiscuous mode [ 293.751709][ T2575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.763719][ T2575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.803778][ T2575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.836643][ T2575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.856414][ T5274] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 293.885287][ T5274] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 293.892888][ T5224] Bluetooth: hci2: command tx timeout [ 293.929464][ T5274] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 293.939129][ T2575] veth1_macvtap: left promiscuous mode [ 293.960188][ T2575] veth0_macvtap: left promiscuous mode [ 293.979011][ T2575] veth1_vlan: left promiscuous mode [ 293.985142][ T5274] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 293.998842][ T2575] veth0_vlan: left promiscuous mode [ 294.019340][ T9001] delete_channel: no stack [ 294.237111][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.254849][ T939] usb 5-1: USB disconnect, device number 20 [ 294.464802][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.147192][ T9084] block nbd1: shutting down sockets [ 295.191644][ T5274] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 295.269219][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.309894][ T9086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.358152][ T9086] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 295.358933][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.380079][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.390493][ T2575] team0 (unregistering): Port device team_slave_1 removed [ 295.415233][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 295.426894][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 295.438173][ T5274] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 295.452924][ T5274] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 295.475849][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.531211][ T5274] usb 5-1: config 0 descriptor?? [ 295.546888][ T2575] team0 (unregistering): Port device team_slave_0 removed [ 295.690047][ T9090] binder: 9089:9090 ioctl c0306201 20000280 returned -14 [ 295.950203][ T5274] ntrig 0003:1B96:000A.0029: unknown main item tag 0x0 [ 295.958743][ T5274] ntrig 0003:1B96:000A.0029: unknown main item tag 0x0 [ 295.972795][ T5224] Bluetooth: hci2: command tx timeout [ 295.978978][ T5274] ntrig 0003:1B96:000A.0029: unknown main item tag 0x0 [ 295.986803][ T5274] ntrig 0003:1B96:000A.0029: unknown main item tag 0x0 [ 296.004417][ T5274] ntrig 0003:1B96:000A.0029: unknown main item tag 0x0 [ 296.033663][ T5274] ntrig 0003:1B96:000A.0029: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 296.215579][ T5274] ntrig 0003:1B96:000A.0029: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 296.292490][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.432363][ T5274] usb 5-1: USB disconnect, device number 21 [ 296.596819][ T9009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1197'. [ 296.625711][ T8912] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.637132][ T8912] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.645308][ T8912] bridge_slave_0: entered allmulticast mode [ 296.664943][ T8912] bridge_slave_0: entered promiscuous mode [ 296.687366][ T8912] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.698366][ T8912] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.711112][ T8912] bridge_slave_1: entered allmulticast mode [ 296.718690][ T8912] bridge_slave_1: entered promiscuous mode [ 296.790055][ T8912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.823563][ T8912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.860852][ T8912] team0: Port device team_slave_0 added [ 296.872048][ T8912] team0: Port device team_slave_1 added [ 296.931812][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 296.940275][ T8912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.979490][ T8912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.017222][ T8912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.046248][ T8912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.061402][ T8912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.101311][ T8912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.102283][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 297.137475][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.162522][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 297.172268][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.195114][ T8] usb 2-1: config 0 descriptor?? [ 297.215288][ T8] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 297.257116][ T8912] hsr_slave_0: entered promiscuous mode [ 297.279744][ T8912] hsr_slave_1: entered promiscuous mode [ 297.345371][ T5301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.369987][ T29] audit: type=1400 audit(1728512386.962:630): avc: denied { bind } for pid=9116 comm="syz.4.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 297.491995][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.601643][ T29] audit: type=1400 audit(1728512387.182:631): avc: denied { write } for pid=9120 comm="syz.4.1211" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 297.696977][ T29] audit: type=1400 audit(1728512387.232:632): avc: denied { open } for pid=9120 comm="syz.4.1211" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 297.842141][ T29] audit: type=1400 audit(1728512387.432:633): avc: denied { unlink } for pid=9122 comm="syz.2.1212" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 298.080868][ T5224] Bluetooth: hci2: command tx timeout [ 298.134778][ T29] audit: type=1400 audit(1728512387.702:634): avc: denied { read } for pid=9133 comm="syz.2.1214" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 298.134832][ T29] audit: type=1400 audit(1728512387.702:635): avc: denied { open } for pid=9133 comm="syz.2.1214" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 298.391287][ T5301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.423299][ T8912] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 298.435602][ T8912] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 298.475204][ T8912] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 298.503884][ T8912] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 298.678705][ T8912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.715244][ T8912] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.738049][ T2575] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.745284][ T2575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.773183][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.780544][ T9070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.888087][ T8] gspca_vc032x: reg_w err -71 [ 298.893799][ T8] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 298.911915][ T5359] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 298.930821][ T8] usb 2-1: USB disconnect, device number 18 [ 299.051421][ T9166] input: syz0 as /devices/virtual/input/input29 [ 299.083303][ T5359] usb 3-1: Using ep0 maxpacket: 32 [ 299.128532][ T5359] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 299.141455][ T5359] usb 3-1: config 0 has no interface number 0 [ 299.172033][ T5359] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 299.181392][ T5359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.199676][ T8912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.202685][ T5359] usb 3-1: Product: syz [ 299.210884][ T5359] usb 3-1: Manufacturer: syz [ 299.228252][ T5359] usb 3-1: SerialNumber: syz [ 299.240941][ T5359] usb 3-1: config 0 descriptor?? [ 299.270023][ T5359] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 299.316447][ T8912] veth0_vlan: entered promiscuous mode [ 299.353884][ T8912] veth1_vlan: entered promiscuous mode [ 299.420294][ T8912] veth0_macvtap: entered promiscuous mode [ 299.439620][ T5301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.456846][ T8912] veth1_macvtap: entered promiscuous mode [ 299.489081][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.524035][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.561974][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.596522][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.624647][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.648422][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.678662][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.705867][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.728619][ T8912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.776066][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.808437][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.830359][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.847549][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.881183][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.911717][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.941690][ T8912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.957990][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.979885][ T8912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.018219][ T8912] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.048183][ T8912] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.072524][ T8912] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.094215][ T8912] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.239558][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.259026][ T9070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.273662][ T9070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.367988][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.386664][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.474476][ T5301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.532676][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.716268][ T5359] gspca_topro: Sensor cx0342 [ 300.983174][ T8] usb 3-1: USB disconnect, device number 22 [ 301.111399][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'. [ 301.128020][ T9213] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.137141][ T9213] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.146021][ T9213] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.154829][ T9213] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.177978][ T9213] vxlan0: entered promiscuous mode [ 301.490819][ T9068] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.535419][ T5301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.219049][ T9068] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.463532][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.492344][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.493264][ T9068] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.521923][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.540672][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.553342][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 302.561856][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.619867][ T5301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.736497][ T9068] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.871819][ T9239] veth0_vlan: entered allmulticast mode [ 303.041156][ T29] audit: type=1804 audit(1728512392.632:636): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1234" name="/newroot/124/bus/file0" dev="overlay" ino=722 res=1 errno=0 [ 303.063956][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.087058][ T9068] bridge_slave_1: left allmulticast mode [ 303.097345][ T9068] bridge_slave_1: left promiscuous mode [ 303.105787][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.132991][ T9068] bridge_slave_0: left allmulticast mode [ 303.148338][ T9068] bridge_slave_0: left promiscuous mode [ 303.170012][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.575444][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.652309][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.732054][ T5224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.743526][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.745972][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 303.765044][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.784001][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.792118][ T5224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 303.799590][ T5224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.323063][ T5231] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 304.336000][ T9068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.349331][ T9068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.363392][ T9068] bond0 (unregistering): Released all slaves [ 304.403355][ T9225] chnl_net:caif_netlink_parms(): no params data found [ 304.612149][ T5231] Bluetooth: hci2: command tx timeout [ 304.707906][ T5301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.609648][ T9225] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.645323][ T9225] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.671256][ T9225] bridge_slave_0: entered allmulticast mode [ 305.688996][ T9225] bridge_slave_0: entered promiscuous mode [ 305.708676][ T9225] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.722752][ T9316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.732042][ T9225] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.739297][ T9225] bridge_slave_1: entered allmulticast mode [ 305.749132][ T5301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.762811][ T9225] bridge_slave_1: entered promiscuous mode [ 305.771797][ T9316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.786974][ T9316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.797024][ T9316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.811421][ T9316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.821175][ T9316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.874418][ T9068] hsr_slave_0: left promiscuous mode [ 305.880454][ T9068] hsr_slave_1: left promiscuous mode [ 305.887101][ T9068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.892571][ T5231] Bluetooth: hci4: command tx timeout [ 305.894665][ T5274] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 305.908633][ T9068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.920857][ T9068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.928925][ T9068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.961321][ T9068] veth1_macvtap: left promiscuous mode [ 305.982624][ T9068] veth0_macvtap: left promiscuous mode [ 305.988342][ T9068] veth1_vlan: left promiscuous mode [ 306.001995][ T9068] veth0_vlan: left promiscuous mode [ 306.071577][ T5274] usb 2-1: Using ep0 maxpacket: 8 [ 306.108233][ T5274] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 306.123317][ T5274] usb 2-1: config 179 has no interface number 0 [ 306.131085][ T5274] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 306.155044][ T5274] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 306.168025][ T5274] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 306.188459][ T5274] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 306.203047][ T5274] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 306.212906][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.239733][ T9311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 306.405808][ T9323] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 306.638425][ T5274] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input30 [ 306.710899][ T5231] Bluetooth: hci2: command tx timeout [ 306.911848][ T5274] usb 2-1: USB disconnect, device number 19 [ 306.917842][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 306.917901][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 306.969038][ T5274] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 307.212092][ T5359] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 307.426424][ T5359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.450843][ T5359] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.563477][ T5359] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.598161][ T5359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.752315][ T5359] usb 5-1: config 0 descriptor?? [ 307.847400][ T29] audit: type=1400 audit(1728512397.442:637): avc: denied { read } for pid=9337 comm="syz.2.1266" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 307.902244][ T29] audit: type=1400 audit(1728512397.442:638): avc: denied { open } for pid=9337 comm="syz.2.1266" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 307.940246][ T9068] team0 (unregistering): Port device team_slave_1 removed [ 307.976070][ T5231] Bluetooth: hci4: command tx timeout [ 308.018026][ T9068] team0 (unregistering): Port device team_slave_0 removed [ 308.099185][ T5274] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 308.171668][ T5221] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 308.221434][ T5359] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 308.229555][ T5359] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 308.261650][ T5274] usb 2-1: Using ep0 maxpacket: 32 [ 308.269627][ T5359] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 308.281771][ T5274] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.310815][ T5274] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 308.331676][ T5221] usb 3-1: Using ep0 maxpacket: 32 [ 308.333784][ T5274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.338424][ T5221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.345510][ T5274] usb 2-1: Product: syz [ 308.361340][ T5221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.377827][ T5231] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 308.382629][ T5221] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 308.388113][ T5231] Bluetooth: hci1: Injecting HCI hardware error event [ 308.403259][ T5221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.405629][ T5231] Bluetooth: hci1: hardware error 0x00 [ 308.418352][ T5221] usb 3-1: config 0 descriptor?? [ 308.422228][ T5274] usb 2-1: Manufacturer: syz [ 308.428941][ T5274] usb 2-1: SerialNumber: syz [ 308.447822][ T5274] usb 2-1: config 0 descriptor?? [ 308.455974][ T5274] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 308.573444][ T939] usb 5-1: USB disconnect, device number 22 [ 308.745667][ T5221] usbhid 3-1:0.0: can't add hid device: -71 [ 308.752850][ T5221] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 308.763940][ T5221] usb 3-1: USB disconnect, device number 23 [ 308.771740][ T5224] Bluetooth: hci2: command tx timeout [ 308.852523][ T939] net_ratelimit: 357 callbacks suppressed [ 308.852538][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.114865][ T9225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.132599][ T9225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.266594][ T9225] team0: Port device team_slave_0 added [ 309.291216][ T9225] team0: Port device team_slave_1 added [ 309.527359][ T9225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.541629][ T8] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 309.558774][ T9225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.622674][ T9225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.649900][ T9225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.659092][ T5221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.681728][ T9225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.748577][ T8] usb 5-1: config 0 has no interfaces? [ 309.755322][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 309.770160][ T9225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.787461][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.807828][ T8] usb 5-1: config 0 descriptor?? [ 309.814893][ T5221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.837403][ T9261] chnl_net:caif_netlink_parms(): no params data found [ 309.894035][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.970425][ T9225] hsr_slave_0: entered promiscuous mode [ 310.002128][ T9225] hsr_slave_1: entered promiscuous mode [ 310.052461][ T5224] Bluetooth: hci4: command tx timeout [ 310.125459][ T5274] gspca_sunplus: reg_r err -71 [ 310.129102][ T8] usb 5-1: USB disconnect, device number 23 [ 310.130495][ T5274] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 310.165822][ T5274] usb 2-1: USB disconnect, device number 20 [ 310.287591][ T9261] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.296582][ T9261] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.304693][ T9261] bridge_slave_0: entered allmulticast mode [ 310.316645][ T9261] bridge_slave_0: entered promiscuous mode [ 310.339490][ T9261] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.351644][ T9261] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.361284][ T9261] bridge_slave_1: entered allmulticast mode [ 310.368960][ T9261] bridge_slave_1: entered promiscuous mode [ 310.448472][ T9261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.462475][ T5231] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 310.468477][ T9261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.657997][ T9261] team0: Port device team_slave_0 added [ 310.700662][ T9261] team0: Port device team_slave_1 added [ 310.792114][ T29] audit: type=1400 audit(1728512400.392:639): avc: denied { read } for pid=9381 comm="syz.2.1274" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 310.837651][ T29] audit: type=1400 audit(1728512400.412:640): avc: denied { open } for pid=9381 comm="syz.2.1274" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 310.862307][ T5231] Bluetooth: hci2: command tx timeout [ 310.879777][ T29] audit: type=1400 audit(1728512400.472:641): avc: denied { map } for pid=9381 comm="syz.2.1274" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 310.903937][ T29] audit: type=1400 audit(1728512400.472:642): avc: denied { execute } for pid=9381 comm="syz.2.1274" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 310.932661][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.094742][ T9261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.119978][ T9261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.159653][ T9261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.258893][ T9261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.267513][ T9261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.295140][ T9261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.349634][ T9261] hsr_slave_0: entered promiscuous mode [ 311.367335][ T9261] hsr_slave_1: entered promiscuous mode [ 311.378124][ T9261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.385954][ T9261] Cannot create hsr debugfs directory [ 311.524196][ T9225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 311.591311][ T9261] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.619479][ T9261] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.640368][ T9225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 311.652867][ T9225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 311.668067][ T9225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.719373][ T9261] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.731273][ T9261] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.808868][ T9261] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.822590][ T9261] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.928687][ T9261] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.951615][ T9261] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.973786][ T939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.000283][ T9225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.040744][ T9225] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.075245][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.082417][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.131618][ T5231] Bluetooth: hci4: command tx timeout [ 312.151526][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.158694][ T9070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.279263][ T9261] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.308144][ T9261] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.334881][ T9261] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.361795][ T9261] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 312.538295][ T9225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.579293][ T9261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.639554][ T9261] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.678912][ T9225] veth0_vlan: entered promiscuous mode [ 312.693677][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.693717][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.708960][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.739808][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.746979][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.793461][ T9225] veth1_vlan: entered promiscuous mode [ 312.884973][ T9225] veth0_macvtap: entered promiscuous mode [ 312.895247][ T9225] veth1_macvtap: entered promiscuous mode [ 312.928796][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.953192][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.963394][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.976016][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.996319][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.018991][ T5301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.036485][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.050248][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.064913][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.080600][ T9225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.128695][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.140348][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.158610][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.191692][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.213616][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.231740][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.242425][ T9225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.253161][ T9225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.265464][ T9225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.286714][ T9225] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.295625][ T9225] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.307762][ T9225] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.316844][ T9225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.356257][ T9261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.443066][ T9070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.444161][ T9261] veth0_vlan: entered promiscuous mode [ 313.451064][ T9070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.464088][ T9261] veth1_vlan: entered promiscuous mode [ 313.514698][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.515623][ T9261] veth0_macvtap: entered promiscuous mode [ 313.524572][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.536448][ T9261] veth1_macvtap: entered promiscuous mode [ 313.568808][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.580981][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.592201][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.603202][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.613194][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.624081][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.634352][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.649007][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.661273][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.676317][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.689681][ T9261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.706233][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.716842][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.728044][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.738663][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.748567][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.759744][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.769689][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.780191][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.790093][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.800931][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.821951][ T9261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.848327][ T9261] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.864298][ T9261] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.875134][ T9261] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.884193][ T9261] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.999250][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.016518][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.044608][ T9068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.053996][ T5301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.064801][ T9068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.959657][ T9458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1279'. [ 315.103230][ T5301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.170475][ T9059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.709095][ T9473] EXT4-fs warning (device sda1): verify_group_input:166: Cannot read last block (262911) [ 315.719137][ T29] audit: type=1326 audit(1728512405.302:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9471 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f34d7dff9 code=0x7ffc0000 [ 315.719193][ T29] audit: type=1326 audit(1728512405.302:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9471 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f34d7dff9 code=0x7ffc0000 [ 315.719236][ T29] audit: type=1326 audit(1728512405.302:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9471 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7f34d7dff9 code=0x7ffc0000 [ 315.719274][ T29] audit: type=1326 audit(1728512405.302:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9471 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f34d7dff9 code=0x7ffc0000 [ 315.814610][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.824127][ T29] audit: type=1326 audit(1728512405.302:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9471 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f34d7dff9 code=0x7ffc0000 [ 315.848074][ T29] audit: type=1326 audit(1728512405.342:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9471 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f7f34d7dff9 code=0x7ffc0000 [ 315.871869][ T29] audit: type=1326 audit(1728512405.342:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9471 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f34d7dff9 code=0x7ffc0000 [ 315.896535][ T29] audit: type=1326 audit(1728512405.342:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9471 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f34d7dff9 code=0x7ffc0000 [ 315.956389][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.961641][ T80] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 315.982254][ T5224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.991233][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.000700][ T5224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.009374][ T5224] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 316.019841][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.132521][ T80] usb 5-1: Using ep0 maxpacket: 16 [ 316.139126][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.164460][ T80] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.174552][ T80] usb 5-1: config 0 has no interface number 0 [ 316.183611][ T80] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 316.193042][ T80] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.201158][ T80] usb 5-1: Product: syz [ 316.206615][ T80] usb 5-1: Manufacturer: syz [ 316.221010][ T80] usb 5-1: SerialNumber: syz [ 316.228220][ T80] usb 5-1: config 0 descriptor?? [ 316.240704][ T80] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 316.258933][ T9481] netlink: 'syz.2.1290': attribute type 10 has an invalid length. [ 316.285742][ T9481] team0: Port device netdevsim0 added [ 316.316479][ T9059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.443103][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 316.456460][ T9059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.483649][ T9475] chnl_net:caif_netlink_parms(): no params data found [ 316.557061][ T9059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.562985][ T9487] block nbd2: shutting down sockets [ 316.612125][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 316.635595][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 316.666823][ T9] usb 1-1: config 0 has no interface number 0 [ 316.681607][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 316.711517][ T9475] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.718669][ T9475] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.739616][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 316.779580][ T9475] bridge_slave_0: entered allmulticast mode [ 316.781072][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 316.787275][ T9475] bridge_slave_0: entered promiscuous mode [ 316.804441][ T9475] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.812539][ T9475] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.821771][ T9475] bridge_slave_1: entered allmulticast mode [ 316.829275][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 316.829813][ T9475] bridge_slave_1: entered promiscuous mode [ 316.839268][ T9] usb 1-1: Product: syz [ 316.861580][ T9] usb 1-1: SerialNumber: syz [ 316.876636][ T9] usb 1-1: config 0 descriptor?? [ 316.887959][ T9] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 316.905467][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input31 [ 316.934932][ T9475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.970266][ T9475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.097353][ T9475] team0: Port device team_slave_0 added [ 317.173228][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.198991][ T9475] team0: Port device team_slave_1 added [ 317.361253][ T9059] bridge_slave_1: left allmulticast mode [ 317.361314][ T9059] bridge_slave_1: left promiscuous mode [ 317.361828][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.369253][ T9059] bridge_slave_0: left allmulticast mode [ 317.369285][ T9059] bridge_slave_0: left promiscuous mode [ 317.369505][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.496190][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.503095][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.534271][ T5274] usb 1-1: USB disconnect, device number 23 [ 317.538022][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 317.547194][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 317.559759][ T5274] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 317.622136][ T5272] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 317.802810][ T5272] usb 3-1: Using ep0 maxpacket: 32 [ 317.818393][ T5272] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 317.831039][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.855181][ T5272] usb 3-1: config 0 descriptor?? [ 317.867135][ T80] gspca_spca1528: reg_r err -71 [ 317.878357][ T5272] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 317.884692][ T80] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 317.914094][ T80] usb 5-1: USB disconnect, device number 24 [ 318.061934][ T5231] Bluetooth: hci2: command tx timeout [ 318.110058][ T9059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.129713][ T9059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.153629][ T9059] bond0 (unregistering): Released all slaves [ 318.173057][ T9475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.180119][ T9475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.206950][ T9475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.218520][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.329879][ T9475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.337041][ T9475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.367301][ T9475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.526338][ T9475] hsr_slave_0: entered promiscuous mode [ 318.536019][ T9475] hsr_slave_1: entered promiscuous mode [ 318.546086][ T9475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.556605][ T9475] Cannot create hsr debugfs directory [ 318.679119][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1299'. [ 318.703006][ T9510] netlink: 'syz.4.1299': attribute type 11 has an invalid length. [ 318.738757][ T9059] hsr_slave_0: left promiscuous mode [ 318.748161][ T9059] hsr_slave_1: left promiscuous mode [ 318.755036][ T9059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.762998][ T9059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.781036][ T9059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.789573][ T9059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.852387][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.880270][ T9059] veth1_macvtap: left promiscuous mode [ 318.889478][ T9059] veth0_macvtap: left promiscuous mode [ 318.902565][ T9059] veth1_vlan: left promiscuous mode [ 318.920459][ T9059] veth0_vlan: left promiscuous mode [ 319.092080][ T9518] nbd0: detected capacity change from 0 to 22 [ 319.114025][ T9524] block nbd0: shutting down sockets [ 319.127749][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.137206][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 319.148617][ T7459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.165731][ T7459] Buffer I/O error on dev nbd0, logical block 0, async page read [ 319.174233][ T7459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.184524][ T7459] Buffer I/O error on dev nbd0, logical block 0, async page read [ 319.192672][ T7459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.202089][ T7459] Buffer I/O error on dev nbd0, logical block 0, async page read [ 319.210070][ T7459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.219556][ T7459] Buffer I/O error on dev nbd0, logical block 0, async page read [ 319.227751][ T7459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.247154][ T7459] Buffer I/O error on dev nbd0, logical block 0, async page read [ 319.256139][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.272350][ T7459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.299571][ T7459] Buffer I/O error on dev nbd0, logical block 0, async page read [ 319.321028][ T7459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.336884][ T7459] Buffer I/O error on dev nbd0, logical block 0, async page read [ 319.366276][ T7459] ldm_validate_partition_table(): Disk read failed. [ 319.400079][ T7459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.413696][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.420947][ T7459] Buffer I/O error on dev nbd0, logical block 0, async page read [ 319.432851][ T7459] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.442127][ T7459] Buffer I/O error on dev nbd0, logical block 0, async page read [ 319.467999][ T7459] Dev nbd0: unable to read RDB block 0 [ 319.481992][ T7459] nbd0: unable to read partition table [ 319.496784][ T7459] nbd0: partition table beyond EOD, truncated [ 319.506573][ T9518] ldm_validate_partition_table(): Disk read failed. [ 319.514000][ T5272] gspca_nw80x: reg_w err -71 [ 319.518790][ T5272] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 319.531154][ T5272] usb 3-1: USB disconnect, device number 24 [ 319.532072][ T9518] Dev nbd0: unable to read RDB block 0 [ 319.572807][ T9518] nbd0: unable to read partition table [ 319.580256][ T9518] nbd0: partition table beyond EOD, truncated [ 319.616706][ T7459] ldm_validate_partition_table(): Disk read failed. [ 319.625914][ T7459] Dev nbd0: unable to read RDB block 0 [ 319.643192][ T7459] nbd0: unable to read partition table [ 319.648899][ T7459] nbd0: partition table beyond EOD, truncated [ 320.131602][ T5231] Bluetooth: hci2: command tx timeout [ 320.292103][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.396569][ T9059] team0 (unregistering): Port device team_slave_1 removed [ 320.512002][ T9059] team0 (unregistering): Port device team_slave_0 removed [ 320.934762][ T9555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.943417][ T9555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.957317][ T9555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.039728][ T9556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.062137][ T9556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.073980][ T9556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.288821][ T29] audit: type=1804 audit(1728512410.882:651): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1311" name="/newroot/96/bus/bus" dev="overlay" ino=550 res=1 errno=0 [ 321.337575][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.213114][ T5231] Bluetooth: hci2: command tx timeout [ 322.474778][ T9475] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 322.490572][ T9475] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 322.515942][ T9475] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 322.542419][ T9475] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 322.710029][ T9475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.758793][ T9475] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.849647][ T9475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 322.905055][ T9475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.943456][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.950683][ T9059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.009429][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.016618][ T9059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.547984][ T9475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.722713][ T9475] veth0_vlan: entered promiscuous mode [ 323.749238][ T9475] veth1_vlan: entered promiscuous mode [ 323.836113][ T9475] veth0_macvtap: entered promiscuous mode [ 323.868352][ T9475] veth1_macvtap: entered promiscuous mode [ 323.924804][ T9475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.946287][ T9475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.971626][ T9475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.005834][ T9475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.031535][ T9475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.054564][ T9475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.081574][ T9475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.108325][ T9475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.157391][ T9475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.195300][ T9475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.228706][ T9475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.289720][ T9475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.305046][ T5231] Bluetooth: hci2: command tx timeout [ 324.335016][ T9475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.411524][ T9475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.451717][ T9475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.477544][ T9475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.510810][ T9475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.541215][ T9475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.572729][ T9475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.589514][ T9475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.600968][ T9475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.655565][ T9475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.689136][ T9636] netem: incorrect ge model size [ 324.695248][ T9636] netem: change failed [ 324.720336][ T9638] bond0: entered promiscuous mode [ 324.727533][ T9638] bond_slave_0: entered promiscuous mode [ 324.742209][ T9638] bond_slave_1: entered promiscuous mode [ 324.778449][ T9642] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 324.923787][ T9475] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.952277][ T9475] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.983419][ T9475] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.001538][ T9475] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.053167][ T9637] bond0: left promiscuous mode [ 325.058088][ T9637] bond_slave_0: left promiscuous mode [ 325.104322][ T9637] bond_slave_1: left promiscuous mode [ 325.406120][ T9072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.443279][ T9072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.543511][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.566634][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.954017][ T9059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.029067][ T9059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.122872][ T9059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.182932][ T9059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.330128][ T9059] bridge_slave_1: left allmulticast mode [ 327.336130][ T9059] bridge_slave_1: left promiscuous mode [ 327.343597][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.354700][ T9059] bridge_slave_0: left allmulticast mode [ 327.360352][ T9059] bridge_slave_0: left promiscuous mode [ 327.366721][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.558204][ T9715] input: syz0 as /devices/virtual/input/input32 [ 327.815839][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.826869][ T5224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.836098][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.869444][ T5224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 327.883865][ T5224] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 327.921640][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.261611][ T5271] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 328.454313][ T5271] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 328.466330][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 328.478628][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 328.489020][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 328.504605][ T5271] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 328.514086][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.522258][ T5271] usb 3-1: Product: syz [ 328.527669][ T5271] usb 3-1: Manufacturer: syz [ 328.536715][ T5271] usb 3-1: SerialNumber: syz [ 328.661950][ T5271] usb 3-1: config 0 descriptor?? [ 328.683679][ T5224] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 328.988398][ T5224] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 329.000837][ T5224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 329.015834][ T5224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 329.025381][ T5224] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 329.032997][ T5224] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 329.087818][ T9059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.101081][ T9059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.173970][ T9059] bond0 (unregistering): Released all slaves [ 329.428657][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.438140][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.445624][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.461584][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.468072][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.480833][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.487307][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.504237][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.510799][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.564806][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.581564][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.603044][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.609415][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.694375][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.704643][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.717887][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.730474][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.748039][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.757228][ T5271] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 329.769687][ T5271] input input33: Timeout waiting for response from device. [ 329.808091][ T5271] usb 3-1: USB disconnect, device number 25 [ 329.877608][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'. [ 330.054758][ T5224] Bluetooth: hci2: command tx timeout [ 330.311017][ T9757] EXT4-fs warning (device sda1): verify_group_input:158: Reserved blocks too high (10) [ 330.349348][ T9059] hsr_slave_0: left promiscuous mode [ 330.359616][ T9059] hsr_slave_1: left promiscuous mode [ 330.396557][ T9059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.428054][ T9059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.459660][ T9059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.479104][ T9059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.525501][ T29] audit: type=1400 audit(1728512420.122:652): avc: denied { mounton } for pid=9768 comm="syz.0.1355" path="/24/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 330.554076][ T9059] veth1_macvtap: left promiscuous mode [ 330.574814][ T9059] veth0_macvtap: left promiscuous mode [ 330.598639][ T9059] veth1_vlan: left promiscuous mode [ 330.607387][ T9059] veth0_vlan: left promiscuous mode [ 330.717863][ T9775] EXT4-fs warning (device sda1): __ext4_ioctl:1257: Setting inode version is not supported with metadata_csum enabled. [ 331.037322][ T29] audit: type=1400 audit(1728512420.622:653): avc: denied { write } for pid=9784 comm="syz.4.1360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 331.091805][ T5231] Bluetooth: hci6: command tx timeout [ 331.202341][ T939] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 331.401711][ T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.427918][ T939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.438011][ T939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.468308][ T939] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 331.477529][ T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.510569][ T939] usb 3-1: config 0 descriptor?? [ 331.861430][ T9059] team0 (unregistering): Port device team_slave_1 removed [ 332.002253][ T939] prodikeys 0003:041E:2801.002B: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 332.027138][ T9059] team0 (unregistering): Port device team_slave_0 removed [ 332.131812][ T5231] Bluetooth: hci2: command tx timeout [ 332.149615][ T29] audit: type=1400 audit(1728512421.742:654): avc: denied { write } for pid=9802 comm="syz.4.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 332.169299][ T80] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 332.208508][ T5271] usb 3-1: USB disconnect, device number 26 [ 332.352108][ T80] usb 1-1: Using ep0 maxpacket: 16 [ 332.390031][ T80] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.408658][ T80] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.431285][ T80] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 332.446430][ T80] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.462124][ T80] usb 1-1: config 0 descriptor?? [ 332.910276][ T80] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 332.914580][ T9810] [ 332.919605][ T9810] ====================================================== [ 332.920110][ T80] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 332.926626][ T9810] WARNING: possible circular locking dependency detected [ 332.926651][ T9810] 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 Not tainted [ 332.926665][ T9810] ------------------------------------------------------ [ 332.926673][ T9810] syz.2.1372/9810 is trying to acquire lock: [ 332.926685][ T9810] ffffffff90173448 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_exists+0x5f/0x1a0 [ 332.926775][ T9810] [ 332.926775][ T9810] but task is already holding lock: [ 332.926783][ T9810] ffffffff90178408 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x905/0x1ca0 [ 332.926844][ T9810] [ 332.926844][ T9810] which lock already depends on the new lock. [ 332.926844][ T9810] [ 332.926852][ T9810] [ 332.926852][ T9810] the existing dependency chain (in reverse order) is: [ 332.926861][ T9810] [ 332.926861][ T9810] -> #3 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 332.926898][ T9810] __mutex_lock+0x175/0x9c0 [ 332.926928][ T9810] rfcomm_dev_ioctl+0x905/0x1ca0 [ 332.926962][ T9810] rfcomm_sock_ioctl+0xb4/0xe0 [ 332.926987][ T9810] sock_do_ioctl+0x116/0x280 [ 332.927016][ T9810] sock_ioctl+0x228/0x6c0 [ 332.927039][ T9810] __x64_sys_ioctl+0x18f/0x220 [ 332.935913][ T80] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 332.940985][ T9810] do_syscall_64+0xcd/0x250 [ 332.948537][ T80] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 332.955080][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.955115][ T9810] [ 332.955115][ T9810] -> #2 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 333.080211][ T9810] lock_sock_nested+0x3a/0xf0 [ 333.085426][ T9810] rfcomm_sk_state_change+0x6d/0x3b0 [ 333.091231][ T9810] __rfcomm_dlc_close+0x28c/0x700 [ 333.096782][ T9810] rfcomm_dlc_close+0x1eb/0x240 [ 333.102244][ T9810] __rfcomm_sock_close+0xa7/0x230 [ 333.107786][ T9810] rfcomm_sock_shutdown+0xd5/0x230 [ 333.113419][ T9810] rfcomm_sock_release+0x5d/0x140 [ 333.118981][ T9810] __sock_release+0xb0/0x270 [ 333.124112][ T9810] sock_close+0x1c/0x30 [ 333.128801][ T9810] __fput+0x3f6/0xb60 [ 333.133306][ T9810] task_work_run+0x14e/0x250 [ 333.138417][ T9810] get_signal+0x1ca/0x2770 [ 333.143360][ T9810] arch_do_signal_or_restart+0x90/0x7e0 [ 333.149434][ T9810] syscall_exit_to_user_mode+0x150/0x2a0 [ 333.155601][ T9810] do_syscall_64+0xda/0x250 [ 333.160626][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.167131][ T9810] [ 333.167131][ T9810] -> #1 (&d->lock){+.+.}-{3:3}: [ 333.174176][ T9810] __mutex_lock+0x175/0x9c0 [ 333.179202][ T9810] __rfcomm_dlc_close+0x235/0x700 [ 333.184754][ T9810] rfcomm_dlc_close+0x1eb/0x240 [ 333.190131][ T9810] __rfcomm_sock_close+0xa7/0x230 [ 333.195673][ T9810] rfcomm_sock_shutdown+0xd5/0x230 [ 333.201319][ T9810] rfcomm_sock_release+0x5d/0x140 [ 333.206861][ T9810] __sock_release+0xb0/0x270 [ 333.212148][ T9810] sock_close+0x1c/0x30 [ 333.216823][ T9810] __fput+0x3f6/0xb60 [ 333.221324][ T9810] task_work_run+0x14e/0x250 [ 333.226437][ T9810] get_signal+0x1ca/0x2770 [ 333.231372][ T9810] arch_do_signal_or_restart+0x90/0x7e0 [ 333.237440][ T9810] syscall_exit_to_user_mode+0x150/0x2a0 [ 333.243597][ T9810] do_syscall_64+0xda/0x250 [ 333.248632][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.255058][ T9810] [ 333.255058][ T9810] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 333.262445][ T9810] __lock_acquire+0x250b/0x3ce0 [ 333.267811][ T9810] lock_acquire.part.0+0x11b/0x380 [ 333.273436][ T9810] __mutex_lock+0x175/0x9c0 [ 333.278459][ T9810] rfcomm_dlc_exists+0x5f/0x1a0 [ 333.284012][ T9810] rfcomm_dev_ioctl+0x9e6/0x1ca0 [ 333.289466][ T9810] rfcomm_sock_ioctl+0xb4/0xe0 [ 333.294757][ T9810] sock_do_ioctl+0x116/0x280 [ 333.299865][ T9810] sock_ioctl+0x228/0x6c0 [ 333.304890][ T9810] __x64_sys_ioctl+0x18f/0x220 [ 333.310177][ T9810] do_syscall_64+0xcd/0x250 [ 333.315209][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.321629][ T9810] [ 333.321629][ T9810] other info that might help us debug this: [ 333.321629][ T9810] [ 333.331852][ T9810] Chain exists of: [ 333.331852][ T9810] rfcomm_mutex --> sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_ioctl_mutex [ 333.331852][ T9810] [ 333.346632][ T9810] Possible unsafe locking scenario: [ 333.346632][ T9810] [ 333.354074][ T9810] CPU0 CPU1 [ 333.359425][ T9810] ---- ---- [ 333.364785][ T9810] lock(rfcomm_ioctl_mutex); [ 333.369468][ T9810] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 333.378137][ T9810] lock(rfcomm_ioctl_mutex); [ 333.385331][ T9810] lock(rfcomm_mutex); [ 333.389490][ T9810] [ 333.389490][ T9810] *** DEADLOCK *** [ 333.389490][ T9810] [ 333.397619][ T9810] 2 locks held by syz.2.1372/9810: [ 333.402815][ T9810] #0: ffff88802468f258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_ioctl+0xa7/0xe0 [ 333.414238][ T9810] #1: ffffffff90178408 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x905/0x1ca0 [ 333.424360][ T9810] [ 333.424360][ T9810] stack backtrace: [ 333.430260][ T9810] CPU: 0 UID: 0 PID: 9810 Comm: syz.2.1372 Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 333.440935][ T9810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 333.450990][ T9810] Call Trace: [ 333.454264][ T9810] [ 333.457286][ T9810] dump_stack_lvl+0x116/0x1f0 [ 333.461981][ T9810] print_circular_bug+0x41c/0x610 [ 333.467022][ T9810] check_noncircular+0x31a/0x400 [ 333.471967][ T9810] ? __pfx_check_noncircular+0x10/0x10 [ 333.477430][ T9810] ? unwind_get_return_address+0x59/0xa0 [ 333.483074][ T9810] ? lockdep_lock+0xc6/0x200 [ 333.487664][ T9810] ? __pfx_lockdep_lock+0x10/0x10 [ 333.492699][ T9810] __lock_acquire+0x250b/0x3ce0 [ 333.497579][ T9810] ? __pfx___lock_acquire+0x10/0x10 [ 333.502796][ T9810] ? add_lock_to_list+0x17d/0x390 [ 333.507833][ T9810] lock_acquire.part.0+0x11b/0x380 [ 333.512950][ T9810] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 333.517990][ T9810] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 333.523627][ T9810] ? rcu_is_watching+0x12/0xc0 [ 333.528520][ T9810] ? trace_lock_acquire+0x14a/0x1d0 [ 333.533733][ T9810] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 333.538769][ T9810] ? lock_acquire+0x2f/0xb0 [ 333.543273][ T9810] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 333.548308][ T9810] __mutex_lock+0x175/0x9c0 [ 333.552815][ T9810] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 333.557848][ T9810] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 333.562877][ T9810] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 333.569135][ T9810] ? __pfx___mutex_lock+0x10/0x10 [ 333.574162][ T9810] ? __pfx_lock_release+0x10/0x10 [ 333.579179][ T9810] ? trace_lock_acquire+0x14a/0x1d0 [ 333.584420][ T9810] ? lock_acquire+0x2f/0xb0 [ 333.588917][ T9810] ? __might_fault+0xe3/0x190 [ 333.593598][ T9810] ? cap_capable+0x1cf/0x240 [ 333.598194][ T9810] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 333.603232][ T9810] rfcomm_dlc_exists+0x5f/0x1a0 [ 333.608182][ T9810] rfcomm_dev_ioctl+0x9e6/0x1ca0 [ 333.613298][ T9810] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 333.618678][ T9810] ? __pfx_lock_release+0x10/0x10 [ 333.623721][ T9810] ? mark_held_locks+0x9f/0xe0 [ 333.628513][ T9810] ? rfcomm_sock_ioctl+0xa7/0xe0 [ 333.633467][ T9810] ? __local_bh_enable_ip+0xa4/0x120 [ 333.638773][ T9810] rfcomm_sock_ioctl+0xb4/0xe0 [ 333.643547][ T9810] sock_do_ioctl+0x116/0x280 [ 333.648153][ T9810] ? __pfx_sock_do_ioctl+0x10/0x10 [ 333.653270][ T9810] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 333.659771][ T9810] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 333.666279][ T9810] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 333.673128][ T9810] sock_ioctl+0x228/0x6c0 [ 333.677483][ T9810] ? __pfx_sock_ioctl+0x10/0x10 [ 333.682336][ T9810] ? selinux_file_ioctl+0x180/0x270 [ 333.687529][ T9810] ? selinux_file_ioctl+0xb4/0x270 [ 333.692637][ T9810] ? __pfx_sock_ioctl+0x10/0x10 [ 333.697501][ T9810] __x64_sys_ioctl+0x18f/0x220 [ 333.702270][ T9810] do_syscall_64+0xcd/0x250 [ 333.706951][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.712846][ T9810] RIP: 0033:0x7fd6d777dff9 [ 333.717286][ T9810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.736900][ T9810] RSP: 002b:00007fd6d85e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.745313][ T9810] RAX: ffffffffffffffda RBX: 00007fd6d7935f80 RCX: 00007fd6d777dff9 [ 333.753279][ T9810] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000007 [ 333.761245][ T9810] RBP: 00007fd6d77f0296 R08: 0000000000000000 R09: 0000000000000000 [ 333.769209][ T9810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.777173][ T9810] R13: 0000000000000000 R14: 00007fd6d7935f80 R15: 00007fff3b5261a8 [ 333.785154][ T9810] [ 333.793307][ T80] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 333.798198][ T5231] Bluetooth: hci6: command tx timeout [ 333.828636][ T80] cp2112 0003:10C4:EA90.002C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 333.931439][ T80] cp2112 0003:10C4:EA90.002C: Part Number: 0x00 Device Version: 0x00 [ 333.997797][ T9732] chnl_net:caif_netlink_parms(): no params data found [ 334.137697][ T80] cp2112 0003:10C4:EA90.002C: error requesting SMBus config [ 334.146092][ T9723] chnl_net:caif_netlink_parms(): no params data found [ 334.165152][ T80] cp2112 0003:10C4:EA90.002C: probe with driver cp2112 failed with error -71 [ 334.211565][ T5231] Bluetooth: hci2: command tx timeout [ 334.227924][ T80] usb 1-1: USB disconnect, device number 24 [ 334.311354][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.319845][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.327094][ T9732] bridge_slave_0: entered allmulticast mode [ 334.335668][ T9732] bridge_slave_0: entered promiscuous mode [ 334.345112][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.352460][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.359635][ T9732] bridge_slave_1: entered allmulticast mode [ 334.367429][ T9732] bridge_slave_1: entered promiscuous mode [ 334.373994][ T9723] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.381118][ T9723] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.389801][ T9723] bridge_slave_0: entered allmulticast mode [ 334.396514][ T9723] bridge_slave_0: entered promiscuous mode [ 334.405824][ T9723] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.414195][ T9723] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.421669][ T9723] bridge_slave_1: entered allmulticast mode [ 334.429320][ T9723] bridge_slave_1: entered promiscuous mode [ 334.449470][ T9732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.473783][ T9732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.491987][ T9723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.503150][ T9723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.518998][ T9059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.529723][ T9059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.555499][ T9732] team0: Port device team_slave_0 added [ 334.574547][ T9732] team0: Port device team_slave_1 added [ 334.586381][ T9059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.597289][ T9059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.637415][ T9723] team0: Port device team_slave_0 added [ 334.652788][ T9059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.666172][ T9059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.679710][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.689740][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.718804][ T9732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.731713][ T9723] team0: Port device team_slave_1 added [ 334.753005][ T9059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.766260][ T9059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.785844][ T9723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.793193][ T9723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.820679][ T9723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.832412][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.839397][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.866542][ T9732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.890310][ T9723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.898303][ T9723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.926100][ T9723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.996055][ T9732] hsr_slave_0: entered promiscuous mode [ 335.004043][ T9732] hsr_slave_1: entered promiscuous mode [ 335.016694][ T9723] hsr_slave_0: entered promiscuous mode [ 335.023951][ T9723] hsr_slave_1: entered promiscuous mode [ 335.030297][ T9723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.038449][ T9723] Cannot create hsr debugfs directory [ 335.044944][ T9059] bridge_slave_1: left allmulticast mode [ 335.050597][ T9059] bridge_slave_1: left promiscuous mode [ 335.057053][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.065159][ T9059] bridge_slave_0: left allmulticast mode [ 335.070819][ T9059] bridge_slave_0: left promiscuous mode [ 335.076710][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.186397][ T9059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.197137][ T9059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.207475][ T9059] bond0 (unregistering): Released all slaves [ 335.429498][ T9059] hsr_slave_0: left promiscuous mode [ 335.438131][ T9059] hsr_slave_1: left promiscuous mode [ 335.444917][ T9059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.455516][ T9059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.467354][ T9059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.475095][ T9059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.486613][ T9059] veth1_macvtap: left promiscuous mode [ 335.492452][ T9059] veth0_macvtap: left promiscuous mode [ 335.498031][ T9059] veth1_vlan: left promiscuous mode [ 335.505880][ T9059] veth0_vlan: left promiscuous mode [ 335.663875][ T9059] team0 (unregistering): Port device team_slave_1 removed [ 335.676186][ T9059] team0 (unregistering): Port device team_slave_0 removed [ 335.811551][ T5231] Bluetooth: hci6: command tx timeout [ 336.073491][ T9723] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 336.083188][ T9723] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 336.096442][ T9723] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 336.106526][ T9723] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 336.190580][ T9723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.206852][ T9723] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.216904][ T2575] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.224018][ T2575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.239507][ T2575] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.246640][ T2575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.292913][ T5231] Bluetooth: hci2: command tx timeout [ 336.351098][ T9732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.370941][ T9732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.394549][ T9732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.421360][ T9732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.470604][ T9723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.535603][ T9732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.549933][ T9723] veth0_vlan: entered promiscuous mode [ 336.567154][ T9732] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.578225][ T9723] veth1_vlan: entered promiscuous mode [ 336.592883][ T9072] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.600005][ T9072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.622883][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.630007][ T9059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.673987][ T9723] veth0_macvtap: entered promiscuous mode [ 336.702496][ T9723] veth1_macvtap: entered promiscuous mode [ 336.732828][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.748683][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.758931][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.769458][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.779375][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.793479][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.803878][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.814724][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.825542][ T9723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.838585][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.860979][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.871224][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.883024][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.893955][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.905193][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.915082][ T9723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.925989][ T9723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.937207][ T9723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.947590][ T9723] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.956516][ T9723] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.966146][ T9723] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.974977][ T9723] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.014725][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.025460][ T9723] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 337.050262][ T9059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.059850][ T9723] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 337.073369][ T9059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.110072][ T9732] veth0_vlan: entered promiscuous mode [ 337.129720][ T2575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.138858][ T9732] veth1_vlan: entered promiscuous mode [ 337.142166][ T2575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.179889][ T9732] veth0_macvtap: entered promiscuous mode [ 337.244640][ T9732] veth1_macvtap: entered promiscuous mode [ 337.258843][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.271317][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.281443][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.292520][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.303505][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.314646][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.324869][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.337376][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.347645][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.359887][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.373972][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.383485][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.395168][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.405089][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.416859][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.426759][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.437428][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.447335][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.457784][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.467635][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.478121][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.488666][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.502203][ T9732] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.512120][ T9732] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.520939][ T9732] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.529716][ T9732] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.582411][ T9732] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 337.613801][ T9068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.614423][ T9732] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 337.635836][ T9068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.672238][ T2575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.682796][ T2575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.901563][ T5231] Bluetooth: hci6: command tx timeout [ 338.411159][ T9068] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.736038][ T9068] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.007361][ T9068] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.088210][ T9068] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.194224][ T9068] bridge_slave_1: left allmulticast mode [ 340.199908][ T9068] bridge_slave_1: left promiscuous mode [ 340.208263][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.218186][ T9068] bridge_slave_0: left allmulticast mode [ 340.224784][ T9068] bridge_slave_0: left promiscuous mode [ 340.230461][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.355617][ T9068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.368346][ T9068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.379883][ T9068] bond0 (unregistering): Released all slaves [ 340.594281][ T9068] hsr_slave_0: left promiscuous mode [ 340.612954][ T9068] hsr_slave_1: left promiscuous mode [ 340.623728][ T9068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.631193][ T9068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.658407][ T9068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.670137][ T9068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.680166][ T9068] veth1_macvtap: left promiscuous mode [ 340.687016][ T9068] veth0_macvtap: left promiscuous mode [ 340.693165][ T9068] veth1_vlan: left promiscuous mode [ 340.698437][ T9068] veth0_vlan: left promiscuous mode [ 340.833422][ T9068] team0 (unregistering): Port device team_slave_1 removed [ 340.849657][ T9068] team0 (unregistering): Port device team_slave_0 removed [ 342.722626][ T29] audit: type=1400 audit(1728512432.322:655): avc: denied { sys_chroot } for pid=10092 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 342.772068][ T29] audit: type=1400 audit(1728512432.322:656): avc: denied { setgid } for pid=10092 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 342.794872][ T29] audit: type=1400 audit(1728512432.322:657): avc: denied { setrlimit } for pid=10092 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1