last executing test programs: 3m9.087152023s ago: executing program 1 (id=2522): r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 3m9.052018704s ago: executing program 1 (id=2523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xf8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m8.919564958s ago: executing program 1 (id=2526): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x202, 0x158}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0, 0x8000000006, 0x0, 0xe448, 0x0, 0x0, {0x0, r3}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r0, 0x26c8, 0x0, 0x1, 0x0, 0x10) 3m7.831215569s ago: executing program 1 (id=2534): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 3m6.881660477s ago: executing program 1 (id=2539): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r0, 0x5) accept4(r0, &(0x7f0000000040)=@x25, 0x0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 3m6.125301172s ago: executing program 1 (id=2543): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$kcm(0x2d, 0x2, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x0) socket(0x10, 0x80002, 0x0) connect$inet(r0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001600)=""/102400, 0x19000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m5.94531537s ago: executing program 32 (id=2543): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$kcm(0x2d, 0x2, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x0) socket(0x10, 0x80002, 0x0) connect$inet(r0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001600)=""/102400, 0x19000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m39.91589338s ago: executing program 4 (id=2680): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000600)="c7", 0x1}], 0x1) 2m39.735503448s ago: executing program 4 (id=2682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048010}, 0x840) 2m39.389605068s ago: executing program 4 (id=2684): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000b40)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) socket$nl_audit(0x10, 0x3, 0x9) 2m37.682193996s ago: executing program 2 (id=2689): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 2m37.569230111s ago: executing program 2 (id=2690): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) write(r0, &(0x7f0000000440)="08008edf", 0x4) read(r0, &(0x7f0000000040)=""/25, 0x19) 2m37.516123046s ago: executing program 2 (id=2691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}]}, 0x3c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a9c2d98e3f752ab88"], 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_DONE(r8, 0x0, 0xc9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) 2m36.623688411s ago: executing program 4 (id=2694): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 2m36.540575861s ago: executing program 4 (id=2696): pipe(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c09000056"], 0x398}}, 0x0) 2m35.650081657s ago: executing program 2 (id=2699): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f00000003c0)={0x10000000008005, r2, 0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000100)={{0xa26, 0xfffffffa}, {0x9, 0x1003ff}, 0xfffffeff, 0x7}) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') request_key(0x0, &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) 2m35.561793182s ago: executing program 4 (id=2700): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240)="eb0c00009fa2bd7d1b07a5c04ea6fc9f5eac3eb176638a9edab609003591a9b45e67439d2a", 0x25, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2m35.285667633s ago: executing program 33 (id=2700): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240)="eb0c00009fa2bd7d1b07a5c04ea6fc9f5eac3eb176638a9edab609003591a9b45e67439d2a", 0x25, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2m33.771268347s ago: executing program 2 (id=2709): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x1c, 0x0, 0x0, 0x0}) syz_emit_vhci(0x0, 0x0) 2m33.165921408s ago: executing program 2 (id=2712): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000000440)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_io_uring_setup(0x88e, &(0x7f0000000300)={0x0, 0xa5a9, 0x0, 0x5, 0x3d2, 0x0, r1}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) socket(0x2, 0x80805, 0x0) sync() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) set_mempolicy(0x4005, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_setup(0xf6b, &(0x7f0000000000)={0x0, 0xd74, 0x100, 0x0, 0x3d0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f00000000c0)=[0xfc8d, 0x4], 0x2) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030"], 0xb8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/card3/oss_mixer\x00', 0x341000, 0x0) dup3(r6, r5, 0x0) 2m17.968731819s ago: executing program 34 (id=2712): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000000440)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_io_uring_setup(0x88e, &(0x7f0000000300)={0x0, 0xa5a9, 0x0, 0x5, 0x3d2, 0x0, r1}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) socket(0x2, 0x80805, 0x0) sync() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) set_mempolicy(0x4005, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_setup(0xf6b, &(0x7f0000000000)={0x0, 0xd74, 0x100, 0x0, 0x3d0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f00000000c0)=[0xfc8d, 0x4], 0x2) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030"], 0xb8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/card3/oss_mixer\x00', 0x341000, 0x0) dup3(r6, r5, 0x0) 7.848687946s ago: executing program 0 (id=3394): setresgid(0xee00, 0xee01, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 7.792275744s ago: executing program 0 (id=3395): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="00010000000000406a0584000000000000010902240001000040050904020081030000000921eaff270122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="002207000000851f"], 0x0}, 0x0) 6.701490722s ago: executing program 5 (id=3399): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.601594126s ago: executing program 5 (id=3400): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan1\x00'}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r2, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) listen(0xffffffffffffffff, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xa, 0x4) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001680)=ANY=[], 0x20) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) 6.399805734s ago: executing program 5 (id=3401): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="4627563e95d073e9c44031e486c6c3c887234dab29bb5d4444d206b6ed7b2b3001b6ed59a692ab0f0251ebf104d3747ab90777b96df4449e5275f86a62902df16f5fba75e202cbdf6fe7cc018a76b412f6485398037d6cb464f1dcf7fda3c76e43cdf64a53f6182a0b7e6476035e8bce74d0582b1ccf32dc8b0cc3b610b143afb4d3c163308a66f2dedd0d45f392d7899f5c4d2ded35c1602f7338dea29e0dff356a32c9e921eeebf8b9845ec2a40b68a8bdcb88009c910e110de23a02648667d740186ee2a3f4a59672477230c4a3a62a1417659b1978cf2b671f836d49fd361ad0af9157916d29cb4fcc1e873a336660b639383485a5322faca6694c74f58fa428582950bd136778dff61da52778dade8b2c3331b31a89259469b0900ab4173202f6256b2d23d3feb8517556292de52662192eca03da5744515c4a92cd3f0f296209bacb28a0267776c9797a784cfd95a52f9de496a5ed70459d55041b663a70d7d471da4f86cd187fd53e667422a0fdfe5eb34e2f2b8c133f2271fe5b1e71533b698169ac8107187533e37765fbd69c327ec608249c44018e3496b2f66fb8bb942f4bd26ed687ee1f7d2a53d7233fbde91cd03f4b4db0c23ed56ff9a61e0d5a1bf6ed50c308e8af0c32b2e0b15df009046ed88d60b772e0cdbfb3d765251aae01b01660df364dce51971ea2034b316a0b0071cb1d28bb86279de377ccb5a18ce981241b5d566e248866f280d71c6775e14fad44342945663bd56ad056f79e49f8071153391f8de78b05496a5f174e812ee0b102e0421c632e4a9f8ffd87ea68df1d7e85af4b30024b2a3cf0e1106871b3427eedfe857f3bc2a021d42fc09224ece3c56e57806a2da229231cc8e3ed5dbd82fd2d3894cba01e36c2ba91a42456eb570446fa3e2eddfe30264572d5d778cbf5d676ad4bd37d11e09573a5566b3656a760c9d3030b2bcd90be0d670866010e2d33c93f223a79ca167bce1a46670db33470c75776582f26b5d9ce847493ddb34612bc829f93f473c24263246011c4ca689f62f4539550ee13b246aeeec477fb2e9e4b223f66c006303abdb003809b9cd4e993b90821750b86608882355e5f587182c1ac6c677b07c26956073ff3a78d4f325139d9c0b8aead052e73fd21b3615ea22acc084bf5060f72936796311e31c038426f0a0e6c304cd2d9c363e7a1a21752032be17adca8b476b0e571b591c9dd923b0066fd5e32e045494c0a9e1e511f147988e0a5fe9652b92ed0e015ef54e3ed2a510b9383f1938dece777ca866f1a21082052827f3a48c2f38482fe3a8286c0ff17d4c24a468a5a0ec0a2eb1165f48cf76fc07450c82294d973a1793dd58008834f0d3aba4e097ceff0ba44656c67839ff3e489975297b334ecf6c7ce4634afbe3d8ab70827563aa75ffafc43429170c3fe3854238485c5a9b567a959a746010c22a92e863e318312e0efc06ab86d1435e06aca5f4b7b7f06a78f90795545c145c9941b74adb9a31ab4f749f81665dd9308acba8d7861856b548eab226377be82611ad79c8d25b176de98003c1ea28b556a2b90360913c39f8f64f0d122c732af5a990603429b354ecd4de797e17722c66546cc38349cb09c40ea54972562734e9816c83103e0bd19451e6144d005e6ce6d6d6fc1ce90238b73d1e0aaa4ee9fd0545054cea97639a404edf3b27c0073be84961084ea685e8ace53c7d7f52b62e378d9ee167aec3e5cbd60ff36c0d3ad40181bad59f111c30e9414112fbc71ad7ede21c288c878dd2509c36f93c31dab5d091107c8e8bdcadffdcb3053eba35b44c70a6421b343922cb11c69b886db0f412e5c23f89dbaff9e5847fd749e28356cab3999f1142449047a3a6c43bf670244e55d888f36ef1dc87bc5bb1460b6c8d1e69efca9a02ba834591906a65102c3e1c1c7dbdeccc7e261795f349d110836445d8ba19cbc699c46d4edc34942a488de1cc1140dc6acf23c8ec1f475e613c85ba025ff7ae639cb2499629eb5f5c88c4057e30bcf41767424af763c9204084856d87cd99f0da06ae6ee5b7382c1f6f2cbb2cf2dfd8320271f16ba7ebd8f0e3c742482f5426530b1ab946c7118f70aa4eac41dd78569341a0f3dd250531aaefdff4cab9e9eed7efdaa865f9b804ade79ced061a1fcd18a6c61a708fdf119841dc232cc5c4e5343cb8a82e9dd9647779bca053b5a2c43481c06ce2a593e388f5f5f4e681771021aaaf0589dac69db22c7285035d1eb89c75935fa4208b3786f2640ce9d65b0e671967dc27808fea5d17ac70a3ac2802f65d45d9c0372aeed530ee58bf04e190f50dac25139caec0b253d17af28eaed173c7043d66567188f04ea51733835c1c66ac7a634d7b90bdac4a6d1075bb277dc6ca420b24485012db44aed5a2e8099f4f3ed53bdb0b35b35905db28169b3e3b3d13ff94bdf2c9549f4a54c64b8d27098b86ff46cfd515f35b1d5a1bbf1bb29df16cdf296e804977a6b583d018c4fdb66264d5f2d9e162059017d6b6cbc6d6c2f1009717c67093f6feaafce1f242f4b730a2e714e9bba79f18c42a158425147b7b2cd9add4ac1d2c1a95b13a4f352d51982a5d967cd611911e6d0777afbc10883c6293f056acc69da89a0a64913be996466ed63f969d5ccd124cd3052d6654e6db0519449f3cbf3a2011541d26e5b76c3c192857905bcf989fd943d42aee9ebd40fee33094eae69154092e9514819ff126040ea7d43a927809149cfaffcc76cb1e332426bf0eb1ac1a3968c70030453a284a0fe39b9ebd704f0950cb5350d4c60d65566b3f24ec4636cd5bb3e23066f4d4f1814e60f286f3ad2d3c10e79c5991c8bf5fdb561723873fe0c75c7bb6ba262aa3a6655349df95f07abb0200d5b9152da4bfdd66a311b29a15755e8465b7b0d99f7f8ccefe9cb3561b5619d4c21b36c9b29442ccd5949882d0167244d84b677685d62074f63b8dc66941f317c78bb093491e2acb7207cc80fe51c22199aae878170af9fa1eb164854587007eb108f23d1c7946bf75aee50eee6fffdae24b992393bd37d268a136b3dcb1b7d2c9b9fbfe0c860b0d344f488e85de2a65a20eb057f0047d0b6b8898bdd68e21f2234a2c66b963a2d86f62297a7d1176c14acaddd4861f5bb74ee91eb3b6ba0c7328433b977e23c02ab67d82a12d620fc034f1c9c3a99a6a07ddf59eaa18384e429101dacbd93ee794e27b774242446fa433a8c03e4312ad56f6c4dfd1ad014d07932480e07caedabda36caaeaaf405dfa1a650843f2e09ae89c666ab8754d9bf9b290f4c4c9242d8f98533bfdbae191a6fbcba6bdb9096427d2d8efb5dcfbd58df7763cc445bf44a0be6de2335a395ab8157dee25794be81c3d87a7d457b52d88f86cabf91f2ec16a8e05a00f72277943737839a5242163025704c7b938f3f424ef5db6b60d3181e3ef94cbdc6516f0ecf01b52164b92f2e12ed55db595fd8de6862a3b12ebe06b19d1f93132b83b2f5ddbc9808b3ce8fa40352c84664d824edd2631a5e2fddaae887689092007d3d0f22a948f54bfd5c42bea5f0d6bf5018cee5ef232c8b6ea3f54ee6f4997c8ad5ccfd28227eeca811312375a849bdf4d343c1b0ec7035279d1bc0892ef193a74018d5ccd5ccaf0503a697b23abb44b7aa3beced0626daa5e1fbfc4d29d2804292fcc60b775f656179510168bf05929dbc92e009d94561d946f7b4b5a18c08d29678c482d90e07abb029e80546e5cee6c4a30712a9b92d556a29b2de021bd49b6398340a9363b689bedc007416bcb659c0c4b6eaa31ec4976ee4896ff87a7dfab48dc7046d44c9c2db6881f7d6b252e582eb878b0be9b24666e74e8eb565c07582f17817ea2422de5da79cb367e76b9b8a9d056de06ad0483986fef2a3b62d64d5d2128cf55499025ad0739ad3ce5e1bfa6aaac16828bdacad2f86b32ed933a2f672efd1f4a32dd23e59aed872d1015eaaf701a0ef8e1427d59728450c4f1bd561e7ef6f8e34d12ae2120a51746a5c346e739c09854caeec07af0d70dd4d9164b3ae8a098a41c081465fdb5537cb560426bc0de4b735f253dbc779b9dce429d99700cd6c0cbd778caeb56401b2bb5c1ca310ab0c91e1d9f4578b5fb3b4f0dad4c565495797e8e83603f3ef188a896fad5bfec24457e0f6f962b8613434f16acf74308171567eae5ad9ec11186a56493a5394042bd1b29fbe0ce64e5f1b0b56e8910343666d627d71c729c0c90bfae0134e117842d67b160ff50688f7b45f0ae330c2d4890732ace7795ff74b6e36466da623c8eef75528b22199c9bf589a1fcd2aca6c5fe3cce2eddabf1ddc8e87380b815ed5928222613383db7941eb9d55b45487b399a9a35ca4cbd9eaf08c71273fc3334b0acdbd117b13697a9ae475e79a44911ce4fed1490a2ec654fe469c9ea933999dae3616b063769446cfefb4562bd124e42f62a3dd0385fe3d21029ad8fd1c58b0badd42e415a76e3e92f246629d3579dd80d940e6dd9bee3d9a6ef8a7840fb253507e718eca32ff4119eb0bcc02aa210939a3bc41704a63202139c68e276254395ab6b858f4528ea2b3a57328e0b31816de3ad85e50e7f4ec9445eaf21a8b9916ed209bb7e79a7a08c2e4e09644ab831c0ba68d05d5ebf57a9eb36bb9caa8e7ac78a8ccca1bcb03cef0c5eb31fafa6e283632c117031aa3919f72aa80a2b9b2557749951348d5294ed2414ffcbafdf976bfb7a401bedb208fe1285738df515af493047aec962bcacb8ea7bad5fc12d5bf415e66c06c4c87044e694291e104ef53850cbc7ef73ab57982d77a3f941c226a915163e8eebd256cb8a1f0130023d2c5d3be77cab39bae4449711d6f39e50cc83eefaf6cc727b1c0b3fc4f7bd110d18262cd872cee8ca95f1be8005d5b339abbde923ef2d4290d5579e4420ff2beb705c16e96101c38c31cfd05639f252730c145182e4406aab68f556e0290ccf05e25a7bf13cdb5db47a8a0841fbeb880d4f0add608d1badb8992924b548ef1426ec774ec9d86678d4c2aae8f1e3b2dfb295802f75727a308dd1b39460f26858eff99fae8d27f24ea6902adabc89311a5fd18c3d9c606db7295f25acd22624bcc753c4c3acdb3f6c563174441333b69a126e4fcc6b06165f6221539c5ed277c20dac4b7978619e10616475de88810bbac714f3651efaa59b75791080a1086c0f3f1b5edb4b3976cc936665855f6a56788d76c6e771b1c968c859fd1ba995d336d301695fc012b8031a14ca529e3e9bf622db6813417925bb4e1a7a5b786aa90f4d048f1f442a2696970dd442d3a6ee117a3e768644c99951b75e51e98de61bc7ed8eb9e87fd43ec75e948829bd19fc545cddefee7a6f068a419e216982ca4ce6ad3256f1e64d203ba1da27e9e175738124ca86a312d0dd0caae6d64751d459d8134830ebb4f4c7931aa90c1ad6fefd99ea4ded3d246236719d6fd48979ee31eaabbea385e91aea0557a58d73a63660ecee981e3da40a39fec3f01caaffafee3504e9f8dc990cc2d69c513db25f6e722ea4811f778af8a338498b6b908682aca6e02e898cb65377f820529d35707cb83ba69b16c92b571728c58188fb08ed6f6c27d6b70e963b147605714468b90966f082d7175fcbc6e770835efb6e7bac5eeaeb5b2c23eb30ecc102e647f1ff71bc6b35f629a55dd305f8ed5287e35403a91b4dc77a6df2fff354460bf563c071846c84617da4df4c46a9e359c45d217a2b096c830ac8614947d110334ca17f587d86825b2b7ae1039fc11109687c1ad0a16f0180d1700414a4694e7ab73c715436dce437a9b3dff55f62fc1ffffc33d3be037c34c9ee7a0fcfeaec1778268565663f39b69c141304c892ae80da42cc854a87c955e6d8060a731eb16ee91e8ea27f90da85196e4f034d40b85ff59eb4b7c76218342f9c9f8d3749c874562829b7ad0c786c5c25ed240aa14755ff7f5ba5298f9f6b6ec3a46ac36d6a39c59c2ecf7781da77931214ac9a8697691d933b20cb64acde409fc159d748e4f92d83ff7767260fdec04b2e80cc524a2366e8fa5b70eb8684d164dec49fa95f42e7e75daa8c268204beec1fbc58cbbe3317af0993a8676dfdb13db7875f50cebdbc629bcd605dd4c4a65c31870495fb9a9ec51c1867ca8b117a6f9507aa26cee54c4c12f8f22b9d88072639ad765bb7906435128d1c146b9e2029880eccbdf78449bd0630381ad16c13444d709a11890d80fae0d24c037180a8726143306a7cd67abbc830167f524008f9a8e3172df597a63af2e87a92e90b70ce53069657f9b46acc9da241a1b00571540ec5fed4a9acfdd0066ba248cb2bf24540d7296256d4c9a5a5bc821817ada912cdde59876d86d4c53c1d047c6bc3442c2ee78326d7c51b6d01bd4f7ff5bc45db88649220d44099b406ac2e4744996b869ea688ecb4e758e755b29717869d5dfccbf5fd553ad83de0c4cd16b3fd4913451734226e4cf29bc0a860943b3e854d8cf49f07d2bfba1c280efaa85bb8f0f8818d1e58178c338c9e46c873adc0a4b6c832aaf0878956d8a04fcc043ff307f60a263cf1bc57ad0434b6a6f99075d932ff75deb8b017cbd16b272139a4addc24749d9551ba44d5bef0536e58de5e9d0b8985f1044163d542859c699f27f033b01d1e5d4c5598bcc4279f29c56eca82cf40c3b2799277e9b0aea04ba5cdd679e3eb63ceb0eafc21c373356caadc0f5730054a0979d7e32117962af0444b7e0e75bf1d30fd1af656956367bbbddf018531833f6c383b76cd63d014c91f67b41548e558cfae6a953a78c36ba3a896b3a0bf48aaa947d042a456a48c8f323682f560f2679f53578f00746cb04c4ef12b905b37f1b1bac9c75a85d6f173d531198f150ee6dbe7fcdbed4e0baf7610b82a793c17124970924ae32c86f9b7b40a229219958cd2445fca613e264adbf29644b1f405c68ef8afff7f4c1dc86f0e578e3716fa86c53f776dc42e7d28978f1e694428560b923b5d44e3aacb18cb38d3efd90ca0812027d336b011557e9e953cbff769e9ba84b903f5fcf1e6b4ab3e210ceaac574f80607116b196b6ded8668729f9be216bfdd049e88d1cb45581701c6ca7c991488a73e6ae5decdfc6416fa69b76f82e92246ee2b29c91885be24e96ea72438499c5c421ffd199f172667adf7d257947bb47945817930a7f2f0dfc73c2a5f6002fd40b9ea51c4a0c610e9759d43c082ed0c126c0de63c5a079b4c8bac46fcc8a1f74d8929ee2b7878430e3caed5f5aad7378fcbc4d659144a7cdbd654185ffdabd9b36257993ca823990df4aa7809ee58b7a278f38085202f3618fefef67f71b39f8ed35a28b3ff47e6caa3cecdbb41b899ea7ef3179ec3d67d0e3380f61d5a57453b9b790d171e1838c68f988a6914f4b81a7a12a0f50612182de8844a5f18026bc4110a10a31a88dae4bb40a3fea22360830784cf82ccde8187d04635e7e5bc6cda8252fa77d7022ae5fdeb978315f925cdbe7cbe0e3894965795fda4b94068bee89f79f86c420b211411929b9b3074703583c0ba0703a4d282441495110dd167c228079db163febc9ea0bcb02ab400999abfecfbca274fca55a055859eb256fcddc1d1773d72d5c3793ca3ff5f2fbe647b04f5ff2b2dc50a3a897e03634a36d21e391e6b6290cf85064711600de9a74057b78d9c04857017bc762300872f674eed1b68fac65025f3252bb803a9ff8ccf4b2b49028622168439db3bc01ea9ae7618b73dc7f858ba388891da14b88f7fee4f5f49abd687ba947969b8b923c2e119fe172126835ab4d1429133a38bbb80f1f6c308ffd180a179c05d9fb112a70e7658f9e3c7b6545556726e6589ba479edf21afd08da62963b5b724fa7b618c27fba201297dd465217de92395734355e9b34e27ff4916d78dbe0424df3d6110297a7847efda2675f12a3bf5e4b07827cdae6c61b0d969f6bb15be656b394a3f3ca8d705a4cac9c78c66c4be58c40888d49ceb08eb9a90c230faace7e4c837a8cb1aa69b020f9f43532cb7315cd698dfffb0179fb24e135480af4c437170c010e6e8f94108523dca95598c59b9e483753b79bafb02a455ceec727fd271b4cb4af7d958751a747afe6625c1e8b0316af5e13e42dc8d97dc42d5960edcaa391164693250a6f98653fa20c78823e1c1a77b798491f197a647b291cdd04087b3143e5b0fc550ecbbff19666b1c8e2a5bf2cb40f9f54c11828a8dd16489f36583e3128cda7a9abde8abbf61294450af638f56444176b5a11f84e67e4e666d6df58c45c0adc45938a2639fb1717a44c8dedf8471ac82fc1771a704f778fb812acb953493a831be5b28b16b20a112aafcee4e44640a6653c4b3035d5de4fcc16312057046bc3c650057dd9be4450b3e837ff8ac19019e67550a124416d671ccc76de36946c2d91f3d63b212111f4f09f39c24c1a981a7e63dd37a8d94ebfae1df5796d971193a8c723f172a9266af23d1d0e48aae73de4e7545a13f09a1ae3feb147ba1c700776148f027abc7dbdd1f3cb823b9a4c0e9dd43fd0bc411dc3eac2369f10fc9669ffaec5ef76da6b7f8884430b3a00da63a0e5272de159ea047584f4804a14159b1321309db45c55af563081d126300dc3ac446936f6653db92fc09d225716f425997dc247939b8c1e09a11f8b10c36b671cc590922051871ce19f6db85eefac9a666c3cec6fd5a69e7610ae5123413b458024b02521420d8c50c265d7b763f070b8fd1981824da47079135a667ee2395e43cae172e6a5ae96aeb7ce490212792498e427b80036f52cc557d3f94b118b2248af9a75a6d27d084ba423edc616981864cb0069a06f359a953a6e7df6b765d222626030248253e4e93eb0979b0a5550ee15d1489f56cc1d30b1584f37b51dfa029af5b45a85b141f4f8ffdc809a19e01f22f80c8a11e9d35f790a6de2d898462a19f412de4df26896a3d107baa7a661b5482cd71453b5f88f889b93ee6df84363ecaf04cb0dcd4369f9d1a827b955182334a998e8f2edbfe74beb14e9ff50134f03d24d70b068801684e25370c1cfc065d88582389713500f974e8a6c6e7f015b8e84e5b9861e45d4ce4eef79f0e8d4f15eaf7c1b33e64287470b5b3c0b8b6bdadae567f977341b57486c1eb279be8ee1cdf11b6e0dbd42d32c95b6801cea98e6000ea80777c6ad3f62012732859497080b3aa127a0f3a7b80a99182406ccfd54affb463f8eaf01b0c65ab582628b3c2237d039ee68d307dd113e4b593b243bd64eb6f58a0ccdd8e9a78f9ed393e2affde8d616d57c7aa1d12ebb4be718b49843ec6a90d5d8c197f154f27805046c410d4e1b66cbf4a8e495a3a229a2a1d58b4909a240d7ae6ea9e740c055b06e756e57e2ff19c148cbaf37357c0d3273b7f2ec631565e9f6c6c8722ddb0c1180695fb204f35917dc2fe11469801c545b2560a59d0666ec129b88e4f427989e820982329c2c39321f25648666af651f87b495195a95a5d158fd161324796272303114d99d22890385853dbc66d37ce22de0db447260217cf51aaed240e4f4963ca7510522fc6e7dbe164ccdedc334787ddb24bbc8205bf3353d447a1de2407c248775fa7e318d83e3ff18150b3cd9a7cbb0df0703aab6ef8d0f71bf9b5a305dc25fbd200e06b73c7f298320bd90dab05ec62b5f885e7cf95274c656051c71628f31196354460b001b6366c26fd2e92f6ad68ea37d7e3fe91fe98223563b4d23f802b3911a5241a793cb9f5b4f80081ace5877f95da7499f728ab09837120ca75c63d725e46f9f77c3da16318c9bcdd4a9d68379b627c1a71a34b684e5614ab3fabceab8d2741aca921b1b018098060686c56d7ed190e7470f529f6e680ed72e749fe7c9c2f37ea8cf08d4520e496361d2437018bbda93396c05abb2aeba443ea1ee56a3da04a8b880452a3610cb4163154e02df8a08a5e48c03fb0b0cdd4d355142cc736b344b9fd987b49b85791e5bf7805250dfe63b04c7ff56608129ef43664aa2acf82f18b49cdfd2ae5551ea4d486b35cd2ea60e3f032c58f531d4d36054f5ce268a29862ded0a3cc0ff1d30882f7c85b95e9a8599bf1d143d2d25555bbaa6f8b673b76ca8cc17b693519194784833d902581fec4e656ca546eade53abfd7e4650df648cb61a146bef5382f9255bf4a7c380854568495bdb7b33f490d240ead3d1851ce3b6400eda5a370f13ec998605f46b234bc9293c026bd1d648647bf52d506deb522012ae89c4ea75414ae6677c4aef28dd756f877af23d1a5ae3cb2205850c14f27f595d1a1542bb1eaf641293e3ba40e0bb54193a1e5db969d37c97709efbc34ab509f08a51ba71ecc4f9f66c27190115948cffaae914e7eb4e8d0c59ef7368e9b08a05bbbd340e1c1d34319f150d299c0ddf3bb2138359e826f4997068b99d13cc454fea46b8664d413b79b19656d62cbb5b31744aa33f99651fa56703eaec2e6998c7321f69f6cd110c89ae0c612a96f9a84dd751fd81ff66c80563e7091f5c5b67f89d52e7c58eb26218cddeaf5c6def3ad07a610bd4e5785675580c199b8550cbb02e3b4e1d240bb8df8e514fb505f39fd222209584331bef5d271056accaef84c88741ebd9f116cce3fe7b07b78ac4bad346c0d6e71c9daecd8d60aa8ea0914f85c9078dfaff04ba5e9bbbacddbc0cb40fe20f869d7f196c5edb6657c50b82c67f1abab663bff0a8da16422fe31a4a17995ee25081a06154d1c03f1a87a9d4ad5141a9227849bd920d2515ca16a245b635c85a77884cce0b8ae56929b5e22c52f971c2eed4ccfd64f7790a616f719fc0305af71405abae9407ed1cdaa26606331fdcf9b3c19b90e561f646ea15e0e668ef37b349594a335baf26962b89ef33c98aec3ca3e7df47c20dc2928d074e5f87c0edcf37cb25d3b8304f57f8257a5ae96791697e3c6d04f4ec2eb6a69f25346defed5b509368dea2b1960218bc6dd21b567583c229fc7b5fc85f7f2032eb304c3a1f72204f75ee950344cdef846d94e916b29a43d00c789256810de5fff6f9fd1af0fcfc2edd3fff9e2010d88083fc0b9e6a291e9a7a08af62433689a39e34bed8dafc90fec82be5c63a843d82132ce8916e395791dc86c8d11caf57f7fd096c28537ec38d6c14df9782312abc85fba2d04b0b159637b0e09f7e9faa1a6136359d17cf7c58b83994d58674ddbc248b804a82156900ca95a5002ef62de046e2f5ddf8e1e19f00189d4f5169bfc3c67afc149c6bc155767e64eac433cfb787be7f7bae7f869c0ec3d142668c2f90d383af7207a635850c515d69c6a62e24e0d58c5da244a917a17caa6be01992c4f8be0b9fff57522db4756840bdf72cafa6061ff2b86305c180c470b3af589e7c9e5328d98cf737bf01d80762e1e41a4d63a8655387be7f295862fdea629aa97b40c2ba1b563f1a103a860f7dff7fd5ee8423ce3dbf0fad41b66965c67299e35483130d461ac6c68215850fd441323bb856cdf03f624520743f7b445641c72e08994c8f252fe179b29226637b533f0ed6c94a0b84efc1a884af940fbc05c654b59d37a54047de233c496103bb27b657e7f63c24ef3ce29709622f67653f398dc7c4e44", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x150, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {0x0, 0x0, 0x8, 0x4, 'group_id'}}, {{0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, r2}}, {0x0, 0x0, 0x8, 0x2, 'group_id'}}]}, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) 5.739826179s ago: executing program 6 (id=3404): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)='t/1', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000a00)="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", 0x158}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="05df87755953", 0x6}, {&(0x7f0000000d00)="9b8fcf31b9c2496651b2081f4dc6f3b9b9ca00ad421d57579462d1353c7e4d3ff6bda4a52fe1dd0e641411992dc125e83c376dd876da42d769aa773ffbd30ae0f61d42d6884d950d354e8ea1a44d3c377ab295768d467a8447e18ebc12bb5484f633750a7611ac46ced0de41df68ebda5535f1341f0f717be9329c9189373dc4008f69dfb4b5b43d7e623b31c6e6839ec393aa2dfc4493d483d73f3fddcb05c3c7357afd168ce7886f037ea7261ac935aba425840a7bff3e1568bb31139a5e3260020dd8362399816607ea105e5376064d987df2e1", 0xd5}], 0x2, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000e00)="174dbbc4cb440e66b35d7806d5d0fd6202b490652f26aaf1216beeb537d5665c2268fea65d415252fa850f143fa5ccef495735ec2d6f9769a5869a149ab97877cef8e410fce906f7c4a609c5186492f03ab3ab56cffa8ef4d2337f4a7029c1adc31517557fae5abed00ebc2a3e3bcef4b82e05aec92550fc8ed146da40335055f1312d3954880c9f0c6974282b64764729ccbd5402e751511ea4902d77d8349b1952281a536805e27bb31df49587d23ab5ee13a84238f8a138931badf4cb17c6ff8107159e605e4daba2e3c99764b2db85dc8fe6fbc658f882ad56605508177f3141af4cc6b01fe20c5a7e", 0xeb}, {&(0x7f0000000700)="75fa54", 0x3}, {&(0x7f0000000f00)="dccba3d357820841deb7a91d662fc5addabec7d63648c75e172ca244e88e045c1f7965611b2fd952040760c9b1c789556ff82c609dd6ff540b9338ea20919fc69ec1f8f233b76f120e8c4b47b21f0b2738d73f5c5d000b2b7fed46aa04b5a3d0f771e9261d70f8f4c26ff029a40ff04c98786260277f8ed6bf5d43d87b68ea922ba984966c16a5796cf829d9b9aa1c6e3f655a946f4e689ee393d67b768c03bf3483f7baa3afac58d6e5df78a886de84c6281aa1d9bda705795b3190062dbe3bd3afd32c65107004d747774be50638870a1848d16132497a023048ed983d24", 0xdf}, {&(0x7f0000001000)="9f285c6be7891ac4ba5aecbe8d8d727fc4e347dd771bfdd867ca16fb5cc4079164f9ce7aab941259170f588736b3ecb502c76dd9e80f2cee15fd936c7d5d2bcc9fca173c5452fc101072c8ca24525e13ccbf967d739bb4bdbdd13c144fe521af81bc8716778d71b11ef64f9c402191f5cc00dbed68c27e8afbcf74d6378af09e594c972cf022793bb211ee131b562e7077bff71ad2faa952d51f504e0012b7862d9a368edbb03ebd03a01acdbbe5183bbec43c3805efd1a2e556495014c2f4d979f44de8c53797c8a3d2657c83c7663d49101e35a0e60b813c", 0xd9}, {&(0x7f0000000740)="7bb1b846728bcb9b6b6a1a90b1b13f60ec8f4a8fd9126834052932dcf541703603c75951f28804b2883bab306a9c76a5dc315c6c01ca", 0x36}, {&(0x7f0000000bc0)="331cddd7782485f980a0b5608326015a4851286f470762f792859fe7903303b45ef1b928000f96372ec917da2e8bf70b3921c2a600b47322c7aefda4dd640a84815cf65c3f9f7ebd52b36e9f91e7ab73cc007b1cec35c924", 0x58}, {&(0x7f0000001100)="abe0be638413291aa79a0a5a712bc75d682c1a29f21738ce2545280ead72225bb5aeec8da4422cb4e562d76d516cce82abe02979", 0x34}], 0x7}}], 0x4, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.636789978s ago: executing program 6 (id=3405): setresgid(0xee00, 0xee01, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 5.188863389s ago: executing program 0 (id=3406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000040), 0xfe46) 5.151182528s ago: executing program 5 (id=3407): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 5.14987094s ago: executing program 6 (id=3408): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xaa, &(0x7f0000000ac0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.869004448s ago: executing program 3 (id=3411): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x400000000080803, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_restrict_self(r1, 0x0) ioctl$I2C_SLAVE(0xffffffffffffffff, 0x703, 0x3b0) landlock_restrict_self(r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timerfd_create(0x8, 0x0) 4.416089661s ago: executing program 3 (id=3412): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000600)="c7", 0x1}], 0x1) 4.325704491s ago: executing program 7 (id=3413): socket$xdp(0x2c, 0x3, 0x0) gettid() pipe(&(0x7f00000008c0)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYBLOB="00001000252155b21c001200714d9e0272d14fe9614af9484a1c34890c0001"], 0x3c}}, 0x40005) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x2, "3eccd8000200000500"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.31927574s ago: executing program 3 (id=3414): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800100000000000000000000000000085000000850000002a0000009500"/40], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0200}]}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r1, 0x0, 0x0, 0x24064044) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x74, 0x3000, 0x47504a50, 0x4, 0x1, [{0x592e3537, 0x2}, {0xfffffff3, 0xd}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0xb}, {0x7, 0xc}, {0x8, 0x7}, {0x1, 0xfffffff0}], 0xd5, 0x4, 0x3, 0x2, 0x4}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r1], 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x101000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x9, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0xbbaa, 0x4, 0x4, 0x10003, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x10003, 0x4, 0x7, 0x70f]}) 3.977445087s ago: executing program 6 (id=3415): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)='t/1', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000a00)="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", 0x158}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="05df87755953", 0x6}, {&(0x7f0000000d00)="9b8fcf31b9c2496651b2081f4dc6f3b9b9ca00ad421d57579462d1353c7e4d3ff6bda4a52fe1dd0e641411992dc125e83c376dd876da42d769aa773ffbd30ae0f61d42d6884d950d354e8ea1a44d3c377ab295768d467a8447e18ebc12bb5484f633750a7611ac46ced0de41df68ebda5535f1341f0f717be9329c9189373dc4008f69dfb4b5b43d7e623b31c6e6839ec393aa2dfc4493d483d73f3fddcb05c3c7357afd168ce7886f037ea7261ac935aba425840a7bff3e1568bb31139a5e3260020dd8362399816607ea105e5376064d987df2e1", 0xd5}], 0x2, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000e00)="174dbbc4cb440e66b35d7806d5d0fd6202b490652f26aaf1216beeb537d5665c2268fea65d415252fa850f143fa5ccef495735ec2d6f9769a5869a149ab97877cef8e410fce906f7c4a609c5186492f03ab3ab56cffa8ef4d2337f4a7029c1adc31517557fae5abed00ebc2a3e3bcef4b82e05aec92550fc8ed146da40335055f1312d3954880c9f0c6974282b64764729ccbd5402e751511ea4902d77d8349b1952281a536805e27bb31df49587d23ab5ee13a84238f8a138931badf4cb17c6ff8107159e605e4daba2e3c99764b2db85dc8fe6fbc658f882ad56605508177f3141af4cc6b01fe20c5a7e", 0xeb}, {&(0x7f0000000700)="75fa54", 0x3}, {&(0x7f0000000f00)="dccba3d357820841deb7a91d662fc5addabec7d63648c75e172ca244e88e045c1f7965611b2fd952040760c9b1c789556ff82c609dd6ff540b9338ea20919fc69ec1f8f233b76f120e8c4b47b21f0b2738d73f5c5d000b2b7fed46aa04b5a3d0f771e9261d70f8f4c26ff029a40ff04c98786260277f8ed6bf5d43d87b68ea922ba984966c16a5796cf829d9b9aa1c6e3f655a946f4e689ee393d67b768c03bf3483f7baa3afac58d6e5df78a886de84c6281aa1d9bda705795b3190062dbe3bd3afd32c65107004d747774be50638870a1848d16132497a023048ed983d24", 0xdf}, {&(0x7f0000000740)="7bb1b846728bcb9b6b6a1a90b1b13f60ec8f4a8fd9126834052932dcf541703603c75951f28804b2883bab306a9c76a5dc315c6c01ca8c", 0x37}, {&(0x7f0000000bc0)="331cddd7782485f980a0b5608326015a4851286f470762f792859fe7903303b45ef1b928000f96372ec917da2e8bf70b3921c2a600b47322c7aefda4dd640a84815cf65c3f9f7ebd52b36e9f91e7ab73cc007b1cec35c924", 0x58}, {&(0x7f0000001100)="abe0be638413291aa79a0a5a712bc75d682c1a29f21738ce2545280ead72225bb5aeec8da4422cb4e562d76d516cce82abe02979", 0x34}], 0x6}}], 0x4, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.437992826s ago: executing program 0 (id=3416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x262) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) 3.437145821s ago: executing program 7 (id=3417): socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x4302}, 0x18, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x3) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3.428928265s ago: executing program 5 (id=3418): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)={0x150, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {0x0, 0x0, 0x8, 0x4, 'group_id'}}, {{0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, r2}}, {0x0, 0x0, 0x8, 0x2, 'group_id'}}]}, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) 3.067620255s ago: executing program 6 (id=3419): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0xf) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000500)="000000c6d222406b096cc34801000000647418aaf9784416ed438eb9a332f44a1ec989b2d2e513f57632c54d863ecd9b0df090728300e43d59f817b99310b6b600968f3d2f02bbdfbbcb5c4f13e25d19bfdffe6f178f3580ea2b14da36c6095d68284c04c724611344d68d651a", 0x6d, r4) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 3.007758046s ago: executing program 3 (id=3420): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4db130420df295ea16aa3e841d50dc813025315eea3990c2de68e835c4fec57e2dd70f47b58472c2f915de1a58a32d", 0xd1}, {&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca7ec68acd35c32cdace2471dce1452c62550a9bf975bb6adf889077c111c77030761c0f5d6baccf58dd38bdc0889b55669170d96224c8fd12762ad7f2a635040cde08fb0cdfb05e64", 0xde}], 0x2}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000180)="17", 0x59a, 0x0, 0x0, 0xffffffffffffffa1) 3.006066096s ago: executing program 3 (id=3421): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 2.502628781s ago: executing program 7 (id=3422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380), 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 2.37791018s ago: executing program 0 (id=3423): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2010}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r3 = fsopen(0x0, 0x0) getpid() ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getpid() socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x100400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) read(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) 2.312406156s ago: executing program 7 (id=3424): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000600)="c7", 0x1}], 0x1) 2.229617389s ago: executing program 5 (id=3425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.068937026s ago: executing program 7 (id=3426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7ff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000002}, 0x90) 1.047953448s ago: executing program 3 (id=3427): socket$xdp(0x2c, 0x3, 0x0) gettid() pipe(&(0x7f00000008c0)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYBLOB="00001000252155b21c001200714d9e0272d14fe9614af9484a1c34890c0001"], 0x3c}}, 0x40005) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x2, "3eccd8000200000500"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 923.516797ms ago: executing program 6 (id=3428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000040), 0xfe46) 879.853002ms ago: executing program 7 (id=3429): syz_usb_connect(0x0, 0x2ee, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=3430): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e9c31000000000001090224000100000000090400002103000000092100000001220700090581030000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x3, 0x400000000], 0x80ad003}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="40000700000007005e7da34d856af773b234f8"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 62.320216][T12529] bridge_slave_0: entered promiscuous mode [ 262.349104][T12529] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.363973][T12529] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.390516][T12529] bridge_slave_1: entered allmulticast mode [ 262.416911][T12529] bridge_slave_1: entered promiscuous mode [ 262.844454][ T51] Bluetooth: hci2: command tx timeout [ 263.130413][T12529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.154329][T12529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.165771][T12574] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2562'. [ 263.209618][T12529] team0: Port device team_slave_0 added [ 263.257314][T12529] team0: Port device team_slave_1 added [ 264.182597][T12587] block device autoloading is deprecated and will be removed. [ 264.512395][ T30] audit: type=1326 audit(1753978436.816:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 264.569665][ T30] audit: type=1326 audit(1753978436.816:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 264.618137][ T30] audit: type=1326 audit(1753978436.816:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 264.671127][ T30] audit: type=1326 audit(1753978436.826:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 264.717027][ T30] audit: type=1326 audit(1753978436.826:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 264.745355][ T30] audit: type=1326 audit(1753978436.826:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 264.771007][ T30] audit: type=1326 audit(1753978436.826:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 264.805346][ T30] audit: type=1326 audit(1753978436.826:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 264.864409][ T30] audit: type=1326 audit(1753978436.826:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 264.898002][ T51] Bluetooth: hci2: command tx timeout [ 264.923595][ T30] audit: type=1326 audit(1753978436.826:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.3.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 265.780484][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'. [ 265.828554][T12529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.853570][T12529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.992845][T12529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.018275][T12529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.043770][T12529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.096010][T12529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.631345][T12529] hsr_slave_0: entered promiscuous mode [ 266.934975][T12529] hsr_slave_1: entered promiscuous mode [ 266.943211][T12529] debugfs: 'hsr0' already exists in 'hsr' [ 266.983067][T12529] Cannot create hsr debugfs directory [ 266.988510][ T51] Bluetooth: hci2: command tx timeout [ 267.256069][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2582'. [ 267.665173][T12643] program syz.4.2577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.948847][T12529] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.158666][T12529] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.362605][T12529] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.387522][T12673] syz_tun: entered allmulticast mode [ 269.060054][ T51] Bluetooth: hci2: command tx timeout [ 269.407125][T12689] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 269.407125][T12689] program syz.4.2594 not setting count and/or reply_len properly [ 271.031758][T12529] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.041193][T12672] syz_tun: left allmulticast mode [ 271.051515][T12697] tipc: Enabling of bearer rejected, failed to enable media [ 271.070377][T12700] syzkaller0: entered promiscuous mode [ 271.085936][T12700] syzkaller0: entered allmulticast mode [ 271.193690][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 271.195416][T12529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.230908][T12529] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.267058][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.274220][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.292337][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.299482][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.363951][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 271.375898][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 271.392846][ T9] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 271.416787][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 271.441570][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.468536][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.489059][ T9] usb 5-1: invalid MIDI out EP 0 [ 271.532423][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.567837][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.592534][ T43] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 271.623135][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.626570][ T9] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 271.659128][ T43] usb 4-1: config 0 descriptor?? [ 271.671749][T12529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.680663][ T9] usb 5-1: USB disconnect, device number 13 [ 272.119774][T12529] veth0_vlan: entered promiscuous mode [ 272.207565][T12529] veth1_vlan: entered promiscuous mode [ 272.318220][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 272.346686][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 272.366461][ T43] usb 4-1: USB disconnect, device number 7 [ 272.450144][T12529] veth0_macvtap: entered promiscuous mode [ 272.500830][T12529] veth1_macvtap: entered promiscuous mode [ 272.545439][T12760] syz_tun: entered allmulticast mode [ 272.568063][T12529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.594357][T12759] syz_tun: left allmulticast mode [ 272.617566][T12529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.648120][T11230] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.668664][ T2907] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.732938][ T2907] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.770372][ T2907] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.837344][T12762] : entered promiscuous mode [ 275.334371][ T43] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 275.370644][T12791] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 275.495300][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.512177][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.523404][ T43] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 275.539878][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.586830][ T43] usb 5-1: config 0 descriptor?? [ 276.209162][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 276.220940][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 276.231856][ T43] usb 5-1: USB disconnect, device number 14 [ 276.476950][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.491150][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.592358][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.601290][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.797367][ T30] kauditd_printk_skb: 403 callbacks suppressed [ 276.797382][ T30] audit: type=1400 audit(1753978449.126:3388): avc: denied { setopt } for pid=12818 comm="syz.2.2632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.588926][T12826] syz_tun: entered allmulticast mode [ 277.619265][T12825] syz_tun: left allmulticast mode [ 277.637696][T12828] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2633'. [ 277.647078][ T55] block nbd2: Possible stuck request ffff888026ef4ec0: control (read@0,1024B). Runtime 90 seconds [ 277.658030][ T55] block nbd2: Possible stuck request ffff888026ef5080: control (read@1024,1024B). Runtime 90 seconds [ 277.994421][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2638'. [ 278.451878][T12840] syz_tun: entered allmulticast mode [ 279.109746][ T127] block nbd4: Possible stuck request ffff888026f9b980: control (read@0,1024B). Runtime 90 seconds [ 279.121884][ T127] block nbd4: Possible stuck request ffff888026f9bb40: control (read@1024,1024B). Runtime 90 seconds [ 279.133001][ T127] block nbd4: Possible stuck request ffff888026f9bd00: control (read@2048,1024B). Runtime 90 seconds [ 279.146356][ T127] block nbd4: Possible stuck request ffff888026f9bec0: control (read@3072,1024B). Runtime 90 seconds [ 280.064101][ T5954] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 280.224920][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.238953][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.251703][ T5954] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 280.262029][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.278775][ T5954] usb 3-1: config 0 descriptor?? [ 280.913361][ T5954] usbhid 3-1:0.0: can't add hid device: -71 [ 281.041103][ T5954] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 281.234508][ T5954] usb 3-1: USB disconnect, device number 21 [ 281.941630][T12886] tipc: Enabling of bearer rejected, failed to enable media [ 281.952071][T12886] syzkaller0: entered promiscuous mode [ 281.962283][T12886] syzkaller0: entered allmulticast mode [ 282.048709][T12898] bridge0: entered allmulticast mode [ 282.263797][ T5827] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 282.456461][ T5827] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 282.882317][ T5827] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 282.892412][ T5827] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 282.902932][ T5827] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 282.924230][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.953038][ T5827] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.026213][ T5827] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 283.161255][ T5827] usb 4-1: USB disconnect, device number 8 [ 283.289318][ T6261] udevd[6261]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.651181][T12928] syz_tun: entered allmulticast mode [ 284.658181][T12931] syz_tun: left allmulticast mode [ 285.076678][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2676'. [ 285.119640][ T30] audit: type=1326 audit(1753978457.446:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44058eb69 code=0x7ffc0000 [ 285.193092][ T30] audit: type=1326 audit(1753978457.446:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb44058eb69 code=0x7ffc0000 [ 285.224877][ T30] audit: type=1326 audit(1753978457.446:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44058eb69 code=0x7ffc0000 [ 285.945948][ T30] audit: type=1326 audit(1753978457.446:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44058eb69 code=0x7ffc0000 [ 285.983095][ T30] audit: type=1326 audit(1753978457.446:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fb44058eb69 code=0x7ffc0000 [ 286.013958][ T30] audit: type=1326 audit(1753978457.446:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44058eb69 code=0x7ffc0000 [ 286.039576][ T30] audit: type=1326 audit(1753978457.446:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb44058eb69 code=0x7ffc0000 [ 286.105660][T12957] hub 2-0:1.0: USB hub found [ 286.140514][T12957] hub 2-0:1.0: 1 port detected [ 286.196054][ T30] audit: type=1326 audit(1753978457.446:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44058eb69 code=0x7ffc0000 [ 286.223183][ T30] audit: type=1326 audit(1753978457.446:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb44058eb69 code=0x7ffc0000 [ 286.255538][ T30] audit: type=1326 audit(1753978457.556:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.0.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44058eb69 code=0x7ffc0000 [ 288.677080][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2691'. [ 289.403946][T13043] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2693'. [ 289.565594][ T5828] syz_tun (unregistering): left allmulticast mode [ 290.280750][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 290.280765][ T30] audit: type=1400 audit(1753978462.606:3445): avc: denied { connect } for pid=13050 comm="syz.3.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 290.379437][ T30] audit: type=1400 audit(1753978462.616:3446): avc: denied { write } for pid=13050 comm="syz.3.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 290.946497][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 290.955593][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 290.963350][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 290.972100][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.004610][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.105875][ T30] audit: type=1400 audit(1753978463.406:3447): avc: denied { write } for pid=13061 comm="syz.2.2699" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 291.363216][ T30] audit: type=1400 audit(1753978463.516:3448): avc: denied { ioctl } for pid=13061 comm="syz.2.2699" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 292.943961][ T30] audit: type=1400 audit(1753978465.266:3449): avc: denied { listen } for pid=13092 comm="syz.0.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.091456][ T5822] Bluetooth: hci4: command tx timeout [ 293.735079][T13079] chnl_net:caif_netlink_parms(): no params data found [ 293.989585][T13079] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.015538][T13079] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.030616][T13079] bridge_slave_0: entered allmulticast mode [ 294.062253][T13079] bridge_slave_0: entered promiscuous mode [ 294.329011][T13079] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.340909][T13079] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.357795][T13079] bridge_slave_1: entered allmulticast mode [ 294.381624][T13079] bridge_slave_1: entered promiscuous mode [ 294.525749][T13079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.549530][T13079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.669839][T13079] team0: Port device team_slave_0 added [ 294.695924][T13079] team0: Port device team_slave_1 added [ 294.921909][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2726'. [ 295.029560][T13079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.085338][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.138990][ T5822] Bluetooth: hci4: command tx timeout [ 295.265569][T13079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.288659][T13149] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2727'. [ 295.301617][T13079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.316169][T13079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.343384][T13079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.419275][T13079] hsr_slave_0: entered promiscuous mode [ 295.430792][T13079] hsr_slave_1: entered promiscuous mode [ 295.437907][T13079] debugfs: 'hsr0' already exists in 'hsr' [ 295.447413][T13079] Cannot create hsr debugfs directory [ 295.508693][T13156] tipc: Enabling of bearer rejected, failed to enable media [ 295.528547][T13156] syzkaller0: entered promiscuous mode [ 295.534682][T13156] syzkaller0: entered allmulticast mode [ 295.741671][T13079] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 295.759545][T13079] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 295.771031][T13079] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 295.798302][T13079] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 296.017914][T13079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.212599][T13183] openvswitch: : Dropping previously announced user features [ 296.295745][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2737'. [ 296.482914][T13079] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.505598][T11230] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.512736][T11230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.552837][T11230] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.560005][T11230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.631614][T13079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.981771][T13079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.056037][ T5954] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 297.214183][ T5822] Bluetooth: hci4: command tx timeout [ 297.234907][ T5954] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.255512][ T5954] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 297.270785][ T5954] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 297.301845][ T5954] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.329887][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.361012][ T5954] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.538568][T13079] veth0_vlan: entered promiscuous mode [ 297.565367][ T5954] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 297.567669][T13079] veth1_vlan: entered promiscuous mode [ 297.580381][ T5954] usb 1-1: USB disconnect, device number 14 [ 297.724047][T13079] veth0_macvtap: entered promiscuous mode [ 297.736225][T13079] veth1_macvtap: entered promiscuous mode [ 297.771811][T13079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.807638][T13079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.842984][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.864189][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.884990][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.892889][T13222] netlink: 'syz.3.2747': attribute type 1 has an invalid length. [ 297.938327][T13222] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2747'. [ 297.969389][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.048053][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.079127][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.134065][ T2210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.162185][ T2210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.716621][T13245] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2756'. [ 298.734416][ T5954] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 299.019726][ T5954] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 299.159008][ T5954] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 299.186528][ T5954] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 299.219207][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.248624][T13235] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 299.267095][ T5954] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 299.293680][ T5822] Bluetooth: hci4: command tx timeout [ 299.471677][ T5954] usb 6-1: USB disconnect, device number 2 [ 299.567262][T13254] netlink: 'syz.6.2759': attribute type 4 has an invalid length. [ 299.575239][T13254] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2759'. [ 299.624172][T13254] : renamed from bond0 (while UP) [ 299.699175][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2759'. [ 300.313636][T13251] comedi comedi2: reset error (fatal) [ 300.534211][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 300.719660][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 300.758944][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 300.996449][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 301.083628][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.092787][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.126370][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.356113][ T6202] udevd[6202]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.387686][ T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 301.566786][T13288] : entered promiscuous mode [ 301.880085][ T9] usb 1-1: USB disconnect, device number 15 [ 302.596286][ T30] audit: type=1400 audit(1753978474.426:3450): avc: denied { sqpoll } for pid=13292 comm="syz.5.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 302.903680][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 302.903763][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 303.054189][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 303.075534][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 303.077078][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 303.093394][ T43] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 303.121953][ T43] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 303.131739][ T43] usb 6-1: Product: syz [ 303.138018][ T43] usb 6-1: Manufacturer: syz [ 303.143008][ T43] usb 6-1: SerialNumber: syz [ 303.179801][ T43] usb 6-1: config 0 descriptor?? [ 303.258637][T13293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 303.278665][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 303.438566][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 303.463162][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.486485][T13298] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 303.502284][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 303.580404][T13321] binder: 13320:13321 ioctl c0306201 0 returned -14 [ 303.719179][ T9] usb 6-1: USB disconnect, device number 3 [ 303.723139][T13321] binder: 13320:13321 ioctl c0306201 200000000240 returned -11 [ 304.275360][ T976] usb 7-1: USB disconnect, device number 2 [ 304.378746][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2784'. [ 305.405158][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 305.624074][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 305.778147][T13365] syz_tun: entered allmulticast mode [ 306.066271][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 306.077354][ T9] usb 4-1: config 1 has an invalid interface number: 26 but max is 1 [ 306.090658][ T9] usb 4-1: config 1 has an invalid interface number: 89 but max is 1 [ 306.099914][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.113167][ T9] usb 4-1: config 1 has no interface number 0 [ 306.119513][ T9] usb 4-1: config 1 has no interface number 1 [ 306.128905][ T9] usb 4-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 306.149764][ T9] usb 4-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.168948][ T9] usb 4-1: config 1 interface 26 has no altsetting 0 [ 306.179354][ T9] usb 4-1: config 1 interface 89 has no altsetting 0 [ 306.188459][ T9] usb 4-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 306.198276][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.209570][ T9] usb 4-1: Product: syz [ 306.214423][ T9] usb 4-1: Manufacturer: syz [ 306.219059][ T9] usb 4-1: SerialNumber: syz [ 306.259127][T13353] syz_tun: left allmulticast mode [ 306.484339][ T9] usb 4-1: unknown interface protocol 0x7d, assuming v1 [ 306.503596][ T9] usb 4-1: 26:2 : does not exist [ 306.511664][ T9] usb 4-1: unknown interface protocol 0x13, assuming v1 [ 306.523770][ T9] usb 4-1: 89:0 : does not exist [ 306.557656][ T9] usb 4-1: USB disconnect, device number 9 [ 306.617539][T11389] udevd[11389]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.685714][T13389] openvswitch: : Dropping previously announced user features [ 307.823592][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 307.982563][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 307.985663][ T55] block nbd2: Possible stuck request ffff888026ef4ec0: control (read@0,1024B). Runtime 120 seconds [ 307.985709][ T55] block nbd2: Possible stuck request ffff888026ef5080: control (read@1024,1024B). Runtime 120 seconds [ 308.021573][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 308.021608][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 308.021643][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 308.021665][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.025847][T13388] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 308.040483][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.232653][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.232679][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 308.232710][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 308.232730][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.234923][ T9] usb 4-1: config 0 descriptor?? [ 308.290479][ T24] usb 6-1: USB disconnect, device number 4 [ 308.593375][T13396] [U] [ 308.596385][T13396] [U] [ 308.599050][T13396] [U] [ 308.601728][T13396] [U] [ 308.605282][T13396] [U] [ 308.607972][T13396] [U] [ 308.610657][T13396] [U] [ 308.613342][T13396] [U] [ 308.617504][T13396] [U] [ 308.620202][T13396] [U] [ 308.622889][T13396] [U] [ 308.625574][T13396] [U] [ 308.628855][T13396] [U] [ 308.631541][T13396] [U] [ 308.634225][T13396] [U] [ 308.636907][T13396] [U] [ 308.640173][T13396] [U] [ 308.642858][T13396] [U] [ 308.645542][T13396] [U] [ 308.648223][T13396] [U] [ 308.655511][T13396] [U] [ 308.658209][T13396] [U] [ 308.660891][T13396] [U] [ 308.663572][T13396] [U] [ 308.666815][T13396] [U] [ 308.669501][T13396] [U] [ 308.672182][T13396] [U] [ 308.674867][T13396] [U] [ 308.678044][T13396] [U] [ 308.680733][T13396] [U] [ 308.683413][T13396] [U] [ 308.686099][T13396] [U] [ 308.689391][T13396] [U] [ 308.692101][T13396] [U] [ 308.694782][T13396] [U] [ 308.697467][T13396] [U] [ 308.700674][T13396] [U] [ 308.703365][T13396] [U] [ 308.706054][T13396] [U] [ 308.708741][T13396] [U] [ 308.714000][T13396] [U] [ 308.716698][T13396] [U] [ 308.719383][T13396] [U] [ 308.722065][T13396] [U] [ 308.725571][T13396] [U] [ 308.728258][T13396] [U] [ 308.730939][T13396] [U] [ 308.733619][T13396] [U] [ 308.736932][T13396] [U] [ 308.739616][T13396] [U] [ 308.742301][T13396] [U] [ 308.744980][T13396] [U] [ 308.748149][T13396] [U] [ 308.750831][T13396] [U] [ 308.753511][T13396] [U] [ 308.756194][T13396] [U] [ 308.759403][T13396] [U] [ 308.762085][T13396] [U] [ 308.764764][T13396] [U] [ 308.767445][T13396] [U] [ 308.770584][T13396] [U] [ 308.773268][T13396] [U] [ 308.775948][T13396] [U] [ 308.778628][T13396] [U] [ 308.781829][T13396] [U] [ 308.784513][T13396] [U] [ 308.787193][T13396] [U] [ 308.789872][T13396] [U] [ 308.793786][T13396] [U] [ 308.796469][T13396] [U] [ 308.799148][T13396] [U] [ 308.801827][T13396] [U] [ 308.805004][T13396] [U] [ 308.807687][T13396] [U] [ 308.810373][T13396] [U] [ 308.813054][T13396] [U] [ 308.817067][T13396] [U] [ 308.819765][T13396] [U] [ 308.822464][T13396] [U] [ 308.825147][T13396] [U] [ 308.828689][T13396] [U] [ 308.831375][T13396] [U] [ 308.834054][T13396] [U] [ 308.836741][T13396] [U] [ 308.839950][T13396] [U] [ 308.842630][T13396] [U] [ 308.845312][T13396] [U] [ 308.847994][T13396] [U] [ 308.851186][T13396] [U] [ 308.853870][T13396] [U] [ 308.856549][T13396] [U] [ 308.859228][T13396] [U] [ 308.862367][T13396] [U] [ 308.865051][T13396] [U] [ 308.867736][T13396] [U] [ 308.870419][T13396] [U] [ 308.873589][T13396] [U] [ 308.876271][T13396] [U] [ 308.878957][T13396] [U] [ 308.881637][T13396] [U] [ 308.884773][T13396] [U] [ 308.887455][T13396] [U] [ 308.890134][T13396] [U] [ 308.892814][T13396] [U] [ 308.895982][T13396] [U] [ 308.898666][T13396] [U] [ 308.901347][T13396] [U] [ 308.904028][T13396] [U] [ 308.907170][T13396] [U] [ 308.909854][T13396] [U] [ 308.912534][T13396] [U] [ 308.915215][T13396] [U] [ 308.918745][T13396] [U] [ 308.921431][T13396] [U] [ 308.924112][T13396] [U] [ 308.926792][T13396] [U] [ 308.930389][T13396] [U] [ 308.933072][T13396] [U] [ 308.935759][T13396] [U] [ 308.938440][T13396] [U] [ 308.941622][T13396] [U] [ 308.944304][T13396] [U] [ 308.946984][T13396] [U] [ 308.949665][T13396] [U] [ 308.952913][T13396] [U] [ 308.955598][T13396] [U] [ 308.958279][T13396] [U] [ 309.332101][T13394] [U] [ 309.559703][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.568746][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.577360][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.585316][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.593024][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.614433][ T127] block nbd4: Possible stuck request ffff888026f9b980: control (read@0,1024B). Runtime 120 seconds [ 309.625299][ T127] block nbd4: Possible stuck request ffff888026f9bb40: control (read@1024,1024B). Runtime 120 seconds [ 309.638355][ T127] block nbd4: Possible stuck request ffff888026f9bd00: control (read@2048,1024B). Runtime 120 seconds [ 309.649527][ T127] block nbd4: Possible stuck request ffff888026f9bec0: control (read@3072,1024B). Runtime 120 seconds [ 310.399826][T13401] chnl_net:caif_netlink_parms(): no params data found [ 310.547379][T13401] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.571433][ T976] usb 4-1: USB disconnect, device number 10 [ 310.584580][T13401] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.593365][T13401] bridge_slave_0: entered allmulticast mode [ 310.601131][T13401] bridge_slave_0: entered promiscuous mode [ 310.609655][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2811'. [ 310.610170][T13401] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.626072][T13401] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.633429][T13401] bridge_slave_1: entered allmulticast mode [ 310.642342][T13401] bridge_slave_1: entered promiscuous mode [ 310.649700][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2811'. [ 310.708624][T13401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.731375][T13401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.925421][T13401] team0: Port device team_slave_0 added [ 311.019541][T13401] team0: Port device team_slave_1 added [ 311.554861][T13401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.562127][T13401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.588039][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.597945][T13401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.675820][T13401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.683478][T13401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.696850][ T51] Bluetooth: hci5: command tx timeout [ 311.709362][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.734683][T13401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.822317][T13401] hsr_slave_0: entered promiscuous mode [ 311.828812][T13401] hsr_slave_1: entered promiscuous mode [ 311.836308][T13401] debugfs: 'hsr0' already exists in 'hsr' [ 311.842241][T13401] Cannot create hsr debugfs directory [ 312.659557][T13401] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 312.682676][T13401] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 312.689962][ T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 312.711245][T13401] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 312.733010][T13401] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 312.949991][T13401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.966026][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.982756][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.986861][T13401] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.517209][ T43] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 313.531812][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.541148][ T2210] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.544503][ T43] usb 1-1: config 0 descriptor?? [ 313.548273][ T2210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.565463][ T43] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 313.594517][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.601646][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.773748][ T51] Bluetooth: hci5: command tx timeout [ 314.113606][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 314.289755][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.318123][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.341434][T13401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.351594][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 314.390070][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.449571][ T9] usb 7-1: config 0 descriptor?? [ 314.937854][ T9] isku 0003:1E7D:319C.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 315.009298][T13401] veth0_vlan: entered promiscuous mode [ 315.028794][T13401] veth1_vlan: entered promiscuous mode [ 315.067037][T13401] veth0_macvtap: entered promiscuous mode [ 315.093200][T13401] veth1_macvtap: entered promiscuous mode [ 315.116848][T13401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.128038][T13401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.153334][ T2907] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.172954][ T2907] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.210577][ T2907] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.233431][ T2907] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.376757][ T9] usb 7-1: USB disconnect, device number 3 [ 315.401097][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.433237][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.495945][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.509056][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.564020][ T10] usb 1-1: USB disconnect, device number 16 [ 315.805774][T13535] : entered promiscuous mode [ 315.854039][ T51] Bluetooth: hci5: command tx timeout [ 316.793752][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.805111][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.213273][ T51] Bluetooth: hci5: command tx timeout [ 319.772260][T13593] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 319.772260][T13593] program syz.7.2859 not setting count and/or reply_len properly [ 321.025419][T13598] syzkaller0: entered promiscuous mode [ 321.039457][T13598] syzkaller0: entered allmulticast mode [ 321.593487][ T30] audit: type=1400 audit(1753978493.886:3451): avc: denied { getopt } for pid=13629 comm="syz.5.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 323.550481][ T30] audit: type=1400 audit(1753978495.876:3452): avc: denied { connect } for pid=13668 comm="syz.7.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 323.614551][ T30] audit: type=1400 audit(1753978495.886:3453): avc: denied { setopt } for pid=13668 comm="syz.7.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 323.732937][ T30] audit: type=1400 audit(1753978495.886:3454): avc: denied { write } for pid=13668 comm="syz.7.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 324.221296][T13681] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2887'. [ 324.232190][T13681] x_tables: ip_tables: udp match: only valid for protocol 17 [ 325.872834][T13708] tipc: Started in network mode [ 325.881733][T13708] tipc: Node identity 227f25ccd141, cluster identity 4711 [ 325.904076][T13708] tipc: Enabled bearer , priority 0 [ 326.054918][T13714] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2897'. [ 326.064473][T13714] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2897'. [ 326.081551][T13709] syzkaller0: entered promiscuous mode [ 326.204146][T13709] syzkaller0: entered allmulticast mode [ 326.246381][T13708] tipc: Resetting bearer [ 326.296184][T13707] tipc: Resetting bearer [ 326.311477][T13707] tipc: Disabling bearer [ 326.354006][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 326.525662][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 326.550994][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.567921][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.581955][ T30] audit: type=1326 audit(1753978498.906:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.6.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 326.609332][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 326.622800][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 326.650603][ T30] audit: type=1326 audit(1753978498.906:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.6.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 326.684072][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.701462][ T30] audit: type=1326 audit(1753978498.906:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.6.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 326.726045][ T24] usb 4-1: config 0 descriptor?? [ 326.740210][ T30] audit: type=1326 audit(1753978498.906:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.6.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 326.779233][ T30] audit: type=1326 audit(1753978498.906:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.6.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 326.808195][ T30] audit: type=1326 audit(1753978498.906:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.6.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 326.840533][ T30] audit: type=1326 audit(1753978498.906:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.6.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 326.864850][ T30] audit: type=1326 audit(1753978498.906:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.6.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 326.890974][ T30] audit: type=1326 audit(1753978498.906:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.6.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 326.926410][ T30] audit: type=1326 audit(1753978498.906:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.6.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 326.958506][ T30] audit: type=1326 audit(1753978498.916:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.6.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2a8185b27 code=0x7ffc0000 [ 327.697384][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 328.247427][ T24] isku 0003:1E7D:319C.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 328.551182][ T24] isku 0003:1E7D:319C.000A: couldn't init struct isku_device [ 328.599956][ T24] isku 0003:1E7D:319C.000A: couldn't install keyboard [ 328.616441][ T24] isku 0003:1E7D:319C.000A: probe with driver isku failed with error -71 [ 328.656773][ T24] usb 4-1: USB disconnect, device number 11 [ 331.320563][ T10] libceph: connect (1)[c::]:6789 error -101 [ 331.351036][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 331.398454][T13767] ceph: No mds server is up or the cluster is laggy [ 331.797056][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 331.797071][ T30] audit: type=1400 audit(1753978504.126:3609): avc: denied { write } for pid=13781 comm="syz.7.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 331.983774][T13787] syzkaller0: entered promiscuous mode [ 331.989260][T13787] syzkaller0: entered allmulticast mode [ 334.382412][ T30] audit: type=1400 audit(1753978506.706:3610): avc: denied { append } for pid=13807 comm="syz.7.2929" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 334.622296][ T30] audit: type=1400 audit(1753978506.766:3611): avc: denied { map } for pid=13807 comm="syz.7.2929" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 334.956475][ T30] audit: type=1400 audit(1753978506.766:3612): avc: denied { write execute } for pid=13807 comm="syz.7.2929" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 334.999809][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.037210][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2932'. [ 335.172945][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.182702][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.193720][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.216719][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.637840][ T30] audit: type=1326 audit(1753978507.946:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13825 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 335.820443][ T30] audit: type=1326 audit(1753978507.946:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13825 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 336.002033][ T30] audit: type=1326 audit(1753978507.946:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13825 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 336.067492][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.091028][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.107843][ T30] audit: type=1326 audit(1753978507.946:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13825 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 337.000668][ T30] audit: type=1326 audit(1753978507.946:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13825 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 337.024540][ T30] audit: type=1326 audit(1753978507.946:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13825 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 337.053726][ T30] audit: type=1326 audit(1753978507.946:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13825 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 337.099953][ T30] audit: type=1326 audit(1753978507.946:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13825 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 337.148278][ T30] audit: type=1326 audit(1753978507.946:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13825 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 337.175866][ T30] audit: type=1326 audit(1753978507.946:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13825 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 337.204358][ T30] audit: type=1326 audit(1753978507.956:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13825 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb629f85b27 code=0x7ffc0000 [ 337.227984][ T30] audit: type=1326 audit(1753978507.956:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13825 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb629f2ad69 code=0x7ffc0000 [ 337.251375][ T30] audit: type=1326 audit(1753978507.956:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13825 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 337.276210][ T30] audit: type=1326 audit(1753978508.106:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13825 comm="syz.3.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb629f85b27 code=0x7ffc0000 [ 337.311031][ T51] Bluetooth: hci6: command tx timeout [ 337.354063][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.479289][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.686221][T13849] 9pnet_fd: Insufficient options for proto=fd [ 337.959845][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.983664][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.146573][T13819] chnl_net:caif_netlink_parms(): no params data found [ 338.661491][ T55] block nbd2: Possible stuck request ffff888026ef4ec0: control (read@0,1024B). Runtime 150 seconds [ 338.696748][ T55] block nbd2: Possible stuck request ffff888026ef5080: control (read@1024,1024B). Runtime 150 seconds [ 338.833360][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.943493][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.373767][ T51] Bluetooth: hci6: command tx timeout [ 339.694548][ T127] block nbd4: Possible stuck request ffff888026f9b980: control (read@0,1024B). Runtime 150 seconds [ 339.705519][ T127] block nbd4: Possible stuck request ffff888026f9bb40: control (read@1024,1024B). Runtime 150 seconds [ 339.718125][ T127] block nbd4: Possible stuck request ffff888026f9bd00: control (read@2048,1024B). Runtime 150 seconds [ 339.729872][ T127] block nbd4: Possible stuck request ffff888026f9bec0: control (read@3072,1024B). Runtime 150 seconds [ 340.387155][T13819] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.403937][T13819] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.418720][T13819] bridge_slave_0: entered allmulticast mode [ 340.517934][T13888] Invalid ELF header magic: != ELF [ 340.916636][T13819] bridge_slave_0: entered promiscuous mode [ 340.980877][T13819] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.995978][T13819] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.013279][T13819] bridge_slave_1: entered allmulticast mode [ 341.039474][T13819] bridge_slave_1: entered promiscuous mode [ 341.221516][T13897] netlink: 'syz.5.2957': attribute type 10 has an invalid length. [ 341.467280][ T51] Bluetooth: hci6: command tx timeout [ 342.177442][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.188315][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.200329][ T50] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 342.209322][ T50] bond0 (unregistering): Released all slaves [ 342.569447][ T50] bond1 (unregistering): Released all slaves [ 342.634000][T13897] batman_adv: batadv0: Adding interface: netdevsim0 [ 342.640626][T13897] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.693760][T13897] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 342.796359][T13819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.830049][T13819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.866642][ T50] : left promiscuous mode [ 343.533775][ T5822] Bluetooth: hci6: command tx timeout [ 344.423602][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 344.943627][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 344.943643][ T30] audit: type=1800 audit(1753978517.026:3685): pid=13924 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2964" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 344.980162][T13819] team0: Port device team_slave_0 added [ 345.099346][ T50] tipc: Left network mode [ 345.181359][T13819] team0: Port device team_slave_1 added [ 345.510937][T13819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.520154][T13819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.598033][T13819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.754040][T13819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.781662][T13819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.920205][ T30] audit: type=1400 audit(1753978518.206:3686): avc: denied { bind } for pid=13937 comm="syz.3.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 346.263526][T13819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.450881][T13819] hsr_slave_0: entered promiscuous mode [ 346.537198][T13819] hsr_slave_1: entered promiscuous mode [ 346.543367][T13819] debugfs: 'hsr0' already exists in 'hsr' [ 346.552676][T13819] Cannot create hsr debugfs directory [ 346.619612][ T50] hsr_slave_0: left promiscuous mode [ 346.627649][ T50] hsr_slave_1: left promiscuous mode [ 347.312587][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.377387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.430137][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.514258][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.552117][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.591075][ T50] veth1_macvtap: left promiscuous mode [ 347.596703][ T50] veth0_macvtap: left promiscuous mode [ 347.604774][ T50] veth1_vlan: left promiscuous mode [ 347.610110][ T50] veth0_vlan: left promiscuous mode [ 347.664726][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 347.833505][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 347.840259][ T43] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 347.851730][ T43] usb 4-1: config 0 has no interface number 0 [ 347.857966][ T43] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 347.868278][ T43] usb 4-1: config 0 interface 41 has no altsetting 0 [ 347.881472][ T43] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 347.890914][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.902017][ T43] usb 4-1: Product: syz [ 347.907490][ T43] usb 4-1: Manufacturer: syz [ 347.912202][ T43] usb 4-1: SerialNumber: syz [ 347.923425][ T43] usb 4-1: config 0 descriptor?? [ 347.934174][T13966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 347.947618][ T43] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 348.041866][ T50] team0 (unregistering): Port device team_slave_1 removed [ 348.069360][ T50] team0 (unregistering): Port device team_slave_0 removed [ 350.413728][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 350.414208][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 350.508710][ T9] usb 4-1: USB disconnect, device number 12 [ 351.440761][T14044] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2990'. [ 351.726044][T13819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 351.789034][T13819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 351.843094][T13819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 351.901726][T13819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 353.097286][T13819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.872788][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 354.424526][T13819] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.451375][ T9] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 354.472980][ T2210] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.480242][ T2210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.522836][ T9] usb 7-1: config 0 has no interface number 0 [ 354.541477][ T9] usb 7-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 354.559400][ T9] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.572440][ T9] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.589042][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.596117][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.623604][ T9] usb 7-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 354.680487][ T9] usb 7-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 354.699147][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.818681][ T9] usb 7-1: config 0 descriptor?? [ 355.104062][T13819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.525079][ T9] usbhid 7-1:0.2: can't add hid device: -71 [ 356.071346][ T9] usbhid 7-1:0.2: probe with driver usbhid failed with error -71 [ 356.090001][ T9] usb 7-1: USB disconnect, device number 4 [ 356.292704][T13819] veth0_vlan: entered promiscuous mode [ 356.352046][T13819] veth1_vlan: entered promiscuous mode [ 356.448641][T13819] veth0_macvtap: entered promiscuous mode [ 356.510015][T13819] veth1_macvtap: entered promiscuous mode [ 356.587092][T13819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.679867][T13819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.729863][ T2210] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.761567][ T2210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.808439][ T2210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.917780][ T2210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.335179][ T2210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.373530][ T2210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.694632][ T30] audit: type=1400 audit(1753978529.996:3687): avc: denied { ioctl } for pid=14147 comm="syz.6.3015" path="socket:[43350]" dev="sockfs" ino=43350 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 357.738881][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.791558][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.062055][ T5908] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 358.799927][T14170] binder: BINDER_SET_CONTEXT_MGR already set [ 358.807471][T14170] binder: 14169:14170 ioctl 4018620d 2000000002c0 returned -16 [ 358.936053][ T5908] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 358.948120][ T5908] usb 6-1: config 0 has no interface number 0 [ 358.956229][ T5908] usb 6-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 359.000091][ T5908] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.044869][T14179] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3024'. [ 359.055440][T14179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3024'. [ 359.064498][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 359.105959][ T5908] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.124728][ T5908] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 359.157981][ T5908] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 359.251469][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.295388][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.524240][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.556244][ T24] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 359.568894][ T5908] usb 6-1: config 0 descriptor?? [ 359.607907][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.656272][ T24] usb 1-1: config 0 descriptor?? [ 359.731586][ T30] audit: type=1326 audit(1753978532.056:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.3.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 359.760972][ T30] audit: type=1326 audit(1753978532.056:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.3.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 359.791694][ T30] audit: type=1326 audit(1753978532.056:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.3.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 359.822855][ T30] audit: type=1326 audit(1753978532.066:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.3.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 359.870265][ T30] audit: type=1326 audit(1753978532.066:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.3.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 359.898716][ T30] audit: type=1326 audit(1753978532.066:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.3.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 359.924394][ T5934] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 359.932416][ T30] audit: type=1326 audit(1753978532.066:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.3.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 359.959320][ T30] audit: type=1326 audit(1753978532.066:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.3.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 359.986177][ T5908] usbhid 6-1:0.2: can't add hid device: -71 [ 359.990017][ T30] audit: type=1326 audit(1753978532.066:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14192 comm="syz.3.3028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb629f8eb69 code=0x7ffc0000 [ 359.992186][ T5908] usbhid 6-1:0.2: probe with driver usbhid failed with error -71 [ 360.043523][ T5908] usb 6-1: USB disconnect, device number 5 [ 360.097268][ T24] hid-steam 0003:28DE:1142.000B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 360.113705][ T5934] usb 8-1: Using ep0 maxpacket: 8 [ 360.123027][ T5934] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 360.143494][ T5934] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.164061][ T24] hid-steam 0003:28DE:1142.000B: Steam wireless receiver connected [ 360.164798][ T5934] pvrusb2: Hardware description: Terratec Grabster AV400 [ 360.229690][ T5934] pvrusb2: ********** [ 360.254052][ T24] hid-steam 0003:28DE:1142.000C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 360.269853][ T5934] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 360.299434][ T5934] pvrusb2: Important functionality might not be entirely working. [ 360.323135][ T5934] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 360.346890][ T5934] pvrusb2: ********** [ 360.388606][ T2336] pvrusb2: Invalid write control endpoint [ 360.508748][ T24] usb 1-1: USB disconnect, device number 17 [ 360.518808][ T2336] pvrusb2: Invalid write control endpoint [ 360.535394][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 360.563064][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 360.601633][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 360.609534][ T24] hid-steam 0003:28DE:1142.000B: Steam wireless receiver disconnected [ 360.639847][ T2336] pvrusb2: Device being rendered inoperable [ 360.678113][T14191] pvrusb2: Killing an I2C read to 1 that has wlen too large (desired=61 limit=60) [ 360.704640][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 360.717294][ T5934] usb 8-1: USB disconnect, device number 2 [ 360.732898][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 361.000910][ T2336] pvrusb2: Attached sub-driver cx25840 [ 361.069271][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 361.079520][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 361.186131][ T5908] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 361.539590][ T5908] usb 6-1: Using ep0 maxpacket: 32 [ 361.550473][ T5908] usb 6-1: config 8 has an invalid interface number: 203 but max is 0 [ 361.818675][ T5908] usb 6-1: config 8 has no interface number 0 [ 361.833631][ T5908] usb 6-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 361.849285][ T5908] usb 6-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 361.874923][ T5908] usb 6-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 361.888371][ T5908] usb 6-1: config 8 interface 203 has no altsetting 0 [ 361.900973][ T5908] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 361.916290][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.933079][ T5908] usb 6-1: Product: syz [ 361.937746][ T5908] usb 6-1: Manufacturer: syz [ 361.942366][ T5908] usb 6-1: SerialNumber: syz [ 362.054230][T14224] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 362.076259][T14224] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 362.637582][T14224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.652746][T14252] fuse: Bad value for 'fd' [ 362.720253][T14224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.735591][ T30] kauditd_printk_skb: 220 callbacks suppressed [ 362.735605][ T30] audit: type=1326 audit(1753978535.036:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14256 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 363.275179][ T30] audit: type=1326 audit(1753978535.046:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14256 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 363.382332][ T30] audit: type=1326 audit(1753978535.046:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14256 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 363.815965][ T30] audit: type=1326 audit(1753978535.046:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14256 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 363.842409][ T30] audit: type=1326 audit(1753978535.046:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14256 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 363.893537][ T30] audit: type=1326 audit(1753978535.046:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14256 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 363.933588][ T30] audit: type=1326 audit(1753978535.046:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14256 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 363.987449][ T30] audit: type=1326 audit(1753978535.046:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14256 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 364.022695][ T30] audit: type=1326 audit(1753978535.046:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14256 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 364.025008][ T5934] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 364.046634][ T30] audit: type=1326 audit(1753978535.046:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14256 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a818eb69 code=0x7ffc0000 [ 364.203644][ T5934] usb 8-1: Using ep0 maxpacket: 16 [ 364.220582][ T5934] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 364.231924][ T5934] usb 8-1: config 0 has no interface number 0 [ 364.248808][ T5934] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 364.281775][ T5934] usb 8-1: config 0 interface 41 has no altsetting 0 [ 364.292949][T14285] fuse: Bad value for 'fd' [ 364.301805][ T5934] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 364.322634][ T5934] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.345597][ T5934] usb 8-1: Product: syz [ 364.358062][ T5934] usb 8-1: Manufacturer: syz [ 364.374179][ T5934] usb 8-1: SerialNumber: syz [ 364.399072][ T5934] usb 8-1: config 0 descriptor?? [ 364.435380][T14264] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 364.543467][ T5934] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -22 [ 365.095929][ C1] port100 6-1:8.203: NFC: Urb failure (status -71) [ 365.110028][ C1] port100 6-1:8.203: NFC: Urb failure (status -71) [ 365.119213][ T5908] port100 6-1:8.203: NFC: Could not get supported command types [ 365.155179][ T5908] usb 6-1: USB disconnect, device number 6 [ 365.374979][T14299] 9pnet_fd: Insufficient options for proto=fd [ 365.652345][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3063'. [ 366.797235][ T5827] usb 8-1: USB disconnect, device number 3 [ 367.102107][T14374] netlink: 'syz.0.3082': attribute type 10 has an invalid length. [ 367.579957][T14374] veth1_vlan: entered allmulticast mode [ 367.592925][T14374] team0: Device veth1_vlan failed to register rx_handler [ 369.222485][ T55] block nbd2: Possible stuck request ffff888026ef4ec0: control (read@0,1024B). Runtime 180 seconds [ 369.234815][ T55] block nbd2: Possible stuck request ffff888026ef5080: control (read@1024,1024B). Runtime 180 seconds [ 369.315770][T14416] syzkaller0: entered promiscuous mode [ 369.321257][T14416] syzkaller0: entered allmulticast mode [ 369.855258][ T127] block nbd4: Possible stuck request ffff888026f9b980: control (read@0,1024B). Runtime 180 seconds [ 369.909652][ T127] block nbd4: Possible stuck request ffff888026f9bb40: control (read@1024,1024B). Runtime 180 seconds [ 369.920653][ T127] block nbd4: Possible stuck request ffff888026f9bd00: control (read@2048,1024B). Runtime 180 seconds [ 369.931815][ T127] block nbd4: Possible stuck request ffff888026f9bec0: control (read@3072,1024B). Runtime 180 seconds [ 370.017496][T14435] netlink: 'syz.6.3106': attribute type 64 has an invalid length. [ 370.025380][T14435] netlink: 'syz.6.3106': attribute type 4 has an invalid length. [ 370.033100][T14435] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3106'. [ 373.839812][ T2907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.887637][ T2907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.903650][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.919044][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.931181][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.942741][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.951863][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.038435][ T5836] Bluetooth: hci0: command tx timeout [ 376.236072][ T2907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.246406][ T2907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.290585][T14513] syz_tun: entered allmulticast mode [ 376.722843][ T2907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.733661][ T2907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.916783][ T2907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.942457][ T2907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.031333][T14512] syz_tun: left allmulticast mode [ 377.213755][ T5903] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 377.418789][ T5903] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 377.465080][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.549731][ T30] kauditd_printk_skb: 290 callbacks suppressed [ 377.549763][ T30] audit: type=1400 audit(1753978549.876:4217): avc: denied { bind } for pid=14544 comm="syz.7.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 377.556002][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.556032][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0 [ 377.575570][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.769093][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.813385][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0 [ 377.847123][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.857211][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.870542][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0 [ 377.887200][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.896991][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.921848][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0 [ 378.096839][ T5836] Bluetooth: hci0: command tx timeout [ 378.108054][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 378.109154][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.123384][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.281390][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 378.406859][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0 [ 378.441250][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 378.455613][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 378.471314][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0 [ 378.490422][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 378.503174][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 378.516834][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0 [ 378.525772][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 378.549731][ T5903] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 378.569526][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0 [ 378.591953][ T5903] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 378.617539][ T5903] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 378.630444][ T5903] usb 6-1: Product: syz [ 378.639534][ T5903] usb 6-1: Manufacturer: syz [ 378.668399][ T5903] usb 6-1: SerialNumber: syz [ 378.689175][ T5903] usb 6-1: config 0 descriptor?? [ 378.712985][ T5903] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 378.791706][ T2907]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.806200][ T2907]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.829309][ T2907]  (unregistering): (slave dummy0): Releasing backup interface [ 378.868980][ T2907]  (unregistering): Released all slaves [ 379.019280][ T5903] usb 6-1: USB disconnect, device number 7 [ 379.062903][ T5903] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 379.094918][T14492] chnl_net:caif_netlink_parms(): no params data found [ 379.237559][ T2907] : left promiscuous mode [ 379.301623][T14569] syz_tun: entered allmulticast mode [ 379.459201][ T2907] tipc: Left network mode [ 379.954328][T14563] syz_tun: left allmulticast mode [ 380.173582][ T5836] Bluetooth: hci0: command tx timeout [ 380.367475][T14593] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 380.367475][T14593] program syz.6.3152 not setting count and/or reply_len properly [ 380.793209][T14592] tipc: Started in network mode [ 380.814293][T14592] tipc: Node identity 02c9f7b51f8, cluster identity 4711 [ 380.847104][T14592] tipc: Enabled bearer , priority 0 [ 381.106668][ T30] audit: type=1400 audit(1753978553.416:4218): avc: denied { create } for pid=14604 comm="syz.7.3158" name="#a" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 381.384748][T14492] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.402459][T14492] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.409709][T14492] bridge_slave_0: entered allmulticast mode [ 381.417467][T14492] bridge_slave_0: entered promiscuous mode [ 381.448918][ T30] audit: type=1400 audit(1753978553.426:4219): avc: denied { link } for pid=14604 comm="syz.7.3158" name="#a" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 381.472565][ T30] audit: type=1400 audit(1753978553.426:4220): avc: denied { rename } for pid=14604 comm="syz.7.3158" name="#b" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 381.503105][ T2907] hsr_slave_0: left promiscuous mode [ 381.511880][ T2907] hsr_slave_1: left promiscuous mode [ 381.541907][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.576760][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.589243][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.596816][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.608415][ T2907] veth1_macvtap: left promiscuous mode [ 381.614161][ T2907] veth0_macvtap: left promiscuous mode [ 381.621107][ T2907] veth1_vlan: left promiscuous mode [ 381.626793][ T2907] veth0_vlan: left promiscuous mode [ 381.965229][ T5832] tipc: Node number set to 491386805 [ 382.254205][ T5836] Bluetooth: hci0: command tx timeout [ 382.288984][ T2907] team0 (unregistering): Port device team_slave_1 removed [ 382.357309][ T2907] team0 (unregistering): Port device team_slave_0 removed [ 382.555183][ T5832] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 382.569342][T14610] tipc: Resetting bearer [ 382.575944][T14492] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.583084][T14492] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.593841][T14492] bridge_slave_1: entered allmulticast mode [ 382.601076][T14492] bridge_slave_1: entered promiscuous mode [ 382.628196][T14591] tipc: Disabling bearer [ 382.652940][T14618] tipc: Started in network mode [ 382.668585][T14618] tipc: Node identity a29ecedd4843, cluster identity 4711 [ 382.714396][T14618] tipc: Enabled bearer , priority 0 [ 382.721667][T14620] syzkaller0: entered promiscuous mode [ 382.732622][ T5832] usb 8-1: Using ep0 maxpacket: 8 [ 382.739674][ T5832] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 382.750924][T14620] syzkaller0: entered allmulticast mode [ 382.757852][ T5832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.798027][ T5832] pvrusb2: Hardware description: Terratec Grabster AV400 [ 382.853953][ T5832] pvrusb2: ********** [ 382.860568][ T5832] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 382.893141][ T5832] pvrusb2: Important functionality might not be entirely working. [ 382.954429][T14492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.120793][T14616] tipc: Resetting bearer [ 383.303718][T14616] tipc: Disabling bearer [ 383.353651][ T5832] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 383.371814][ T5832] pvrusb2: ********** [ 383.384672][T14492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.397509][ T2336] pvrusb2: Invalid write control endpoint [ 383.476247][T14647] pvrusb2: Killing an I2C read to 1 that has wlen too large (desired=61 limit=60) [ 383.646739][ T2336] pvrusb2: Invalid write control endpoint [ 383.683556][ T918] usb 8-1: USB disconnect, device number 4 [ 383.691228][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 383.732808][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 383.758627][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 383.793768][ T2336] pvrusb2: Device being rendered inoperable [ 383.802757][T14492] team0: Port device team_slave_0 added [ 383.824102][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 383.878088][T14492] team0: Port device team_slave_1 added [ 383.924608][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 383.974014][ T2336] pvrusb2: Attached sub-driver cx25840 [ 383.980679][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 384.321601][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 384.672371][T14492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.710871][T14492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.742722][T14492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.760534][T14492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.768693][T14492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.821401][T14492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.983749][T14681] tipc: Started in network mode [ 385.003704][T14681] tipc: Node identity 4684711d0edd, cluster identity 4711 [ 385.028130][T14681] tipc: Enabled bearer , priority 0 [ 385.174089][T14680] tipc: Resetting bearer [ 385.294946][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 385.456780][T14676] tipc: Disabling bearer [ 385.508158][T14492] hsr_slave_0: entered promiscuous mode [ 385.530556][T14492] hsr_slave_1: entered promiscuous mode [ 385.545376][T14492] debugfs: 'hsr0' already exists in 'hsr' [ 385.670315][T14492] Cannot create hsr debugfs directory [ 386.243174][ T30] audit: type=1400 audit(1753978558.556:4221): avc: denied { create } for pid=14692 comm="syz.7.3179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 386.300365][ T30] audit: type=1400 audit(1753978558.556:4222): avc: denied { write } for pid=14692 comm="syz.7.3179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 386.641392][T14698] tipc: Enabled bearer , priority 0 [ 386.886291][ T43] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 386.950902][T14698] syzkaller0: entered promiscuous mode [ 386.965994][T14698] syzkaller0: entered allmulticast mode [ 387.067076][ T43] usb 8-1: config 255 has an invalid interface number: 38 but max is 0 [ 387.079585][T14697] tipc: Resetting bearer [ 387.108899][ T43] usb 8-1: config 255 has no interface number 0 [ 387.167694][ T43] usb 8-1: New USB device found, idVendor=10b8, idProduct=1ebc, bcdDevice= 1.7d [ 387.206837][T14697] tipc: Disabling bearer [ 387.235639][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.613162][ T43] usb 8-1: Product: syz [ 387.642456][ T43] usb 8-1: Manufacturer: syz [ 387.683223][ T43] usb 8-1: SerialNumber: syz [ 387.916908][ T43] dvb-usb: found a 'DiBcom STK7070P reference design' in cold state, will try to load a firmware [ 387.994885][ T30] audit: type=1400 audit(1753978560.326:4223): avc: denied { firmware_load } for pid=43 comm="kworker/1:1" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 388.021723][ T43] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 388.057993][ T43] dib0700: firmware download failed at 7 with -22 [ 388.121155][ T43] usb 8-1: USB disconnect, device number 5 [ 388.510780][T14492] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 388.515793][ T5832] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 388.542900][T14492] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 388.591600][T14492] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 388.652755][T14492] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 388.693492][ T5832] usb 6-1: Using ep0 maxpacket: 16 [ 388.755926][ T5832] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 388.783697][ T5832] usb 6-1: config 0 has no interface number 0 [ 388.816757][ T5832] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 388.842455][ T5832] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 388.866262][ T5832] usb 6-1: config 0 interface 41 has no altsetting 0 [ 388.884845][ T5832] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 388.929907][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.969674][ T5832] usb 6-1: Product: syz [ 389.000732][ T5832] usb 6-1: Manufacturer: syz [ 389.019293][ T5832] usb 6-1: SerialNumber: syz [ 389.036855][ T5832] usb 6-1: config 0 descriptor?? [ 389.067628][T14492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.094619][T14730] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 389.106770][T14730] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 389.174827][T14492] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.238677][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.245918][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.463108][T14730] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 389.488112][T14730] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 389.558071][T14492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.570154][T14492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.719245][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.726368][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.226527][ T5832] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -32 [ 390.381890][ T30] audit: type=1400 audit(1753978562.706:4224): avc: denied { module_request } for pid=14492 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 390.953985][ T918] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 391.018028][T14492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.142430][T14492] veth0_vlan: entered promiscuous mode [ 391.180925][T14492] veth1_vlan: entered promiscuous mode [ 391.228101][ T918] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 391.248282][T14492] veth0_macvtap: entered promiscuous mode [ 391.257677][ T918] usb 7-1: config 0 has no interface number 0 [ 391.276606][ T918] usb 7-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 391.301739][ T5908] usb 6-1: USB disconnect, device number 8 [ 391.301814][T14492] veth1_macvtap: entered promiscuous mode [ 391.378111][ T918] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.426274][T14492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.427794][ T918] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.449177][ T918] usb 7-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 391.472683][ T918] usb 7-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 391.482362][ T918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.627860][ T918] usb 7-1: config 0 descriptor?? [ 391.634503][T14492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.741848][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.769023][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.809692][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.864360][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.059002][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 392.076836][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 392.084695][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 392.091874][ T918] usbhid 7-1:0.2: can't add hid device: -32 [ 392.098096][ T918] usbhid 7-1:0.2: probe with driver usbhid failed with error -32 [ 392.114519][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.164904][ T918] usb 7-1: USB disconnect, device number 5 [ 392.181801][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.381224][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.408673][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.435436][T14826] syzkaller0: entered promiscuous mode [ 393.440920][T14826] syzkaller0: entered allmulticast mode [ 393.953144][T14844] : entered promiscuous mode [ 394.328147][T14847] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3206'. [ 395.603926][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 395.783377][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 395.793464][ T9] usb 1-1: config 0 has no interface number 0 [ 395.822148][ T9] usb 1-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 396.002121][ T9] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.013080][ T9] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.022852][ T9] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 396.035894][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 396.045599][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.075934][ T9] usb 1-1: config 0 descriptor?? [ 396.603541][ T43] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 398.080085][ T9] usbhid 1-1:0.2: can't add hid device: -71 [ 398.158319][ T9] usbhid 1-1:0.2: probe with driver usbhid failed with error -71 [ 398.365462][ T43] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 398.407898][ T9] usb 1-1: USB disconnect, device number 18 [ 398.822162][T14902] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3219'. [ 399.019652][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.031784][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.041622][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 399.054604][ T43] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 399.063715][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.080208][ T43] usb 7-1: config 0 descriptor?? [ 399.105721][ T43] usb 7-1: can't set config #0, error -71 [ 399.114793][ T43] usb 7-1: USB disconnect, device number 6 [ 399.481104][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3227'. [ 399.663291][T14935] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3231'. [ 399.673623][T14930] bridge_slave_1: left allmulticast mode [ 399.679486][T14930] bridge_slave_1: left promiscuous mode [ 399.692197][T14930] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.725435][T14930] bridge_slave_0: left allmulticast mode [ 399.731205][T14930] bridge_slave_0: left promiscuous mode [ 399.742832][T14930] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.853666][ T5908] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 399.865138][ T55] block nbd2: Possible stuck request ffff888026ef4ec0: control (read@0,1024B). Runtime 210 seconds [ 399.877518][ T55] block nbd2: Possible stuck request ffff888026ef5080: control (read@1024,1024B). Runtime 210 seconds [ 400.023613][ T5908] usb 8-1: Using ep0 maxpacket: 16 [ 400.035850][ T5908] usb 8-1: unable to get BOS descriptor or descriptor too short [ 400.058874][ T5908] usb 8-1: config 1 has an invalid interface number: 26 but max is 1 [ 400.069296][ T5908] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.209033][ T5908] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 400.254937][ T5908] usb 8-1: config 1 has no interface number 0 [ 400.939322][ T127] block nbd4: Possible stuck request ffff888026f9b980: control (read@0,1024B). Runtime 210 seconds [ 400.950031][ T127] block nbd4: Possible stuck request ffff888026f9bb40: control (read@1024,1024B). Runtime 210 seconds [ 400.961189][ T127] block nbd4: Possible stuck request ffff888026f9bd00: control (read@2048,1024B). Runtime 210 seconds [ 400.972186][ T127] block nbd4: Possible stuck request ffff888026f9bec0: control (read@3072,1024B). Runtime 210 seconds [ 401.001984][ T5908] usb 8-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 401.088014][ T5908] usb 8-1: config 1 interface 26 has no altsetting 0 [ 401.121069][ T5908] usb 8-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 401.243046][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.257878][ T5908] usb 8-1: Product: syz [ 401.262051][ T5908] usb 8-1: Manufacturer: syz [ 401.267768][ T5908] usb 8-1: SerialNumber: syz [ 401.533968][ T30] audit: type=1400 audit(1753978573.836:4225): avc: denied { read } for pid=14963 comm="syz.0.3242" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 401.537193][ T9] IPVS: starting estimator thread 0... [ 401.556985][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.784053][ T30] audit: type=1400 audit(1753978573.846:4226): avc: denied { open } for pid=14963 comm="syz.0.3242" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 401.811410][ T5908] usb 8-1: unknown interface protocol 0x7d, assuming v1 [ 401.843157][ T5908] usb 8-1: 26:2 : does not exist [ 401.907994][T14966] IPVS: using max 72 ests per chain, 172800 per kthread [ 401.932714][ T5908] usb 8-1: USB disconnect, device number 6 [ 402.041414][T11389] udevd[11389]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.241653][T14965] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 402.251919][T14965] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 402.301294][T14965] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 402.339631][T14965] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 402.362008][T14965] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 402.379337][T14965] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 402.398838][T14965] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 402.415462][T14965] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 402.437238][T14965] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 402.456735][T14965] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 402.483283][T14965] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 402.536060][T14965] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 402.552468][T14965] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 402.561902][T14965] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 402.572615][T14965] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 403.813310][T14998] syzkaller0: entered promiscuous mode [ 403.836708][T14998] syzkaller0: entered allmulticast mode [ 403.876427][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 404.371962][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 404.423553][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 404.430137][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 404.493508][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 404.649627][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 404.685636][T15013] block nbd6: not configured, cannot reconfigure [ 404.701166][T15016] fuse: Unknown parameter 'group_i00000000000000000000' [ 404.705192][T15007] NILFS (nbd6): device size too small [ 404.741369][ T5836] block nbd0: Receive control failed (result -32) [ 404.773512][ T5832] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 404.825736][T15019] [U] [ 404.828442][T15019] [U] [ 404.831123][T15019] [U] [ 404.833802][T15019] [U] [ 404.836986][T15019] [U] [ 404.839669][T15019] [U] [ 404.842354][T15019] [U] [ 404.845038][T15019] [U] [ 404.848142][T15019] [U] [ 404.850829][T15019] [U] [ 404.853511][T15019] [U] [ 404.856200][T15019] [U] [ 404.859449][T15019] [U] [ 404.862133][T15019] [U] [ 404.864821][T15019] [U] [ 404.867499][T15019] [U] [ 404.878093][T15019] [U] [ 404.880794][T15019] [U] [ 404.883477][T15019] [U] [ 404.886159][T15019] [U] [ 404.889279][T15019] [U] [ 404.891966][T15019] [U] [ 404.894646][T15019] [U] [ 404.897329][T15019] [U] [ 404.901356][T15019] [U] [ 404.904050][T15019] [U] [ 404.906732][T15019] [U] [ 404.909413][T15019] [U] [ 404.912733][T15019] [U] [ 404.915418][T15019] [U] [ 404.918097][T15019] [U] [ 404.920775][T15019] [U] [ 404.923862][T15019] [U] [ 404.926554][T15019] [U] [ 404.929245][T15019] [U] [ 404.931935][T15019] [U] [ 404.935125][T15019] [U] [ 404.937819][T15019] [U] [ 404.940509][T15019] [U] [ 404.943193][T15019] [U] [ 404.950048][T15019] [U] [ 404.952741][T15019] [U] [ 404.955432][T15019] [U] [ 404.958115][T15019] [U] [ 404.961384][T15019] [U] [ 404.964069][T15019] [U] [ 404.966752][T15019] [U] [ 404.969433][T15019] [U] [ 404.974049][T15019] [U] [ 404.976741][T15019] [U] [ 404.979422][T15019] [U] [ 404.982101][T15019] [U] [ 404.987993][T15019] [U] [ 404.990680][T15019] [U] [ 404.993361][T15019] [U] [ 404.996040][T15019] [U] [ 404.999235][T15019] [U] [ 405.001919][T15019] [U] [ 405.004599][T15019] [U] [ 405.007285][T15019] [U] [ 405.010661][T15019] [U] [ 405.013345][T15019] [U] [ 405.016026][T15019] [U] [ 405.018704][T15019] [U] [ 405.022120][T15019] [U] [ 405.024802][T15019] [U] [ 405.027481][T15019] [U] [ 405.030158][T15019] [U] [ 405.033446][T15019] [U] [ 405.036129][T15019] [U] [ 405.038807][T15019] [U] [ 405.041484][T15019] [U] [ 405.044815][T15019] [U] [ 405.047493][T15019] [U] [ 405.050174][T15019] [U] [ 405.052857][T15019] [U] [ 405.056117][T15019] [U] [ 405.058798][T15019] [U] [ 405.061476][T15019] [U] [ 405.064158][T15019] [U] [ 405.067562][T15019] [U] [ 405.070246][T15019] [U] [ 405.072931][T15019] [U] [ 405.075609][T15019] [U] [ 405.079842][T15019] [U] [ 405.082529][T15019] [U] [ 405.085208][T15019] [U] [ 405.087887][T15019] [U] [ 405.091265][T15019] [U] [ 405.093947][T15019] [U] [ 405.096627][T15019] [U] [ 405.099306][T15019] [U] [ 405.102648][T15019] [U] [ 405.105332][T15019] [U] [ 405.108010][T15019] [U] [ 405.110690][T15019] [U] [ 405.114100][T15019] [U] [ 405.116785][T15019] [U] [ 405.119464][T15019] [U] [ 405.122146][T15019] [U] [ 405.125322][T15019] [U] [ 405.128015][T15019] [U] [ 405.130703][T15019] [U] [ 405.133388][T15019] [U] [ 405.137914][T15019] [U] [ 405.140600][T15019] [U] [ 405.143287][T15019] [U] [ 405.145966][T15019] [U] [ 405.149144][T15019] [U] [ 405.151828][T15019] [U] [ 405.154507][T15019] [U] [ 405.157190][T15019] [U] [ 405.160315][T15019] [U] [ 405.163001][T15019] [U] [ 405.165680][T15019] [U] [ 405.168359][T15019] [U] [ 405.173561][T15019] [U] [ 405.176260][T15019] [U] [ 405.178942][T15019] [U] [ 405.181621][T15019] [U] [ 405.184764][T15019] [U] [ 405.187447][T15019] [U] [ 405.190127][T15019] [U] [ 405.192807][T15019] [U] [ 405.195814][T15019] [U] [ 405.198492][T15019] [U] [ 405.201174][T15019] [U] [ 405.570660][T15017] [U] [ 406.053526][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 406.296735][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 406.384738][ T5832] usb 1-1: unable to get BOS descriptor or descriptor too short [ 406.394666][ T5832] usb 1-1: config 1 has an invalid interface number: 26 but max is 1 [ 406.413607][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 406.487380][ T5832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.506779][ T5836] Bluetooth: hci5: command 0x0c1a tx timeout [ 406.506785][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 406.560255][ T5832] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 406.573507][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 406.733647][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 406.748400][ T5832] usb 1-1: config 1 has no interface number 0 [ 406.756127][ T5832] usb 1-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 406.769436][ T5832] usb 1-1: config 1 interface 26 has no altsetting 0 [ 406.778096][ T5832] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 407.253552][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.261566][ T5832] usb 1-1: Product: syz [ 407.265846][ T5832] usb 1-1: Manufacturer: syz [ 407.270487][ T5832] usb 1-1: SerialNumber: syz [ 407.529538][ T5832] usb 1-1: unknown interface protocol 0x7d, assuming v1 [ 407.552533][ T5832] usb 1-1: 26:2 : does not exist [ 408.089700][ T5832] usb 1-1: USB disconnect, device number 19 [ 408.585787][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 408.654166][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 408.815222][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 409.267187][T15061] fuse: Unknown parameter 'group_i00000000000000000000' [ 410.338815][T15081] syz.7.3278 (15081) used greatest stack depth: 19832 bytes left [ 411.480672][ T30] audit: type=1800 audit(1753978583.806:4227): pid=15089 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3284" name="file1" dev="tmpfs" ino=89 res=0 errno=0 [ 411.818657][T15103] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3287'. [ 411.994952][T15103] x_tables: ip_tables: udp match: only valid for protocol 17 [ 412.471855][T15116] [U] [ 412.474551][T15116] [U] [ 412.477231][T15116] [U] [ 412.479915][T15116] [U] [ 412.483079][T15116] [U] [ 412.485768][T15116] [U] [ 412.488448][T15116] [U] [ 412.491129][T15116] [U] [ 412.494410][T15116] [U] [ 412.497097][T15116] [U] [ 412.499777][T15116] [U] [ 412.502456][T15116] [U] [ 412.505555][T15116] [U] [ 412.508246][T15116] [U] [ 412.510926][T15116] [U] [ 412.513605][T15116] [U] [ 412.516804][T15116] [U] [ 412.519491][T15116] [U] [ 412.522172][T15116] [U] [ 412.524852][T15116] [U] [ 412.529932][T15116] [U] [ 412.532633][T15116] [U] [ 412.535317][T15116] [U] [ 412.537999][T15116] [U] [ 412.541256][T15116] [U] [ 412.543938][T15116] [U] [ 412.546622][T15116] [U] [ 412.549304][T15116] [U] [ 412.554238][T15116] [U] [ 412.556928][T15116] [U] [ 412.559610][T15116] [U] [ 412.562294][T15116] [U] [ 412.565415][T15116] [U] [ 412.568099][T15116] [U] [ 412.570782][T15116] [U] [ 412.573461][T15116] [U] [ 412.576560][T15116] [U] [ 412.579251][T15116] [U] [ 412.581932][T15116] [U] [ 412.584618][T15116] [U] [ 412.587868][T15116] [U] [ 412.590550][T15116] [U] [ 412.593239][T15116] [U] [ 412.595919][T15116] [U] [ 412.599311][T15116] [U] [ 412.602004][T15116] [U] [ 412.604687][T15116] [U] [ 412.607369][T15116] [U] [ 412.610658][T15116] [U] [ 412.613345][T15116] [U] [ 412.616024][T15116] [U] [ 412.618705][T15116] [U] [ 412.621824][T15116] [U] [ 412.624507][T15116] [U] [ 412.627187][T15116] [U] [ 412.629870][T15116] [U] [ 412.633024][T15116] [U] [ 412.635709][T15116] [U] [ 412.638390][T15116] [U] [ 412.641070][T15116] [U] [ 412.644365][T15116] [U] [ 412.647053][T15116] [U] [ 412.649735][T15116] [U] [ 412.652415][T15116] [U] [ 412.663755][T15116] [U] [ 412.666448][T15116] [U] [ 412.669128][T15116] [U] [ 412.671805][T15116] [U] [ 412.675640][T15116] [U] [ 412.678324][T15116] [U] [ 412.681001][T15116] [U] [ 412.683678][T15116] [U] [ 412.686878][T15116] [U] [ 412.689558][T15116] [U] [ 412.692240][T15116] [U] [ 412.694921][T15116] [U] [ 412.698047][T15116] [U] [ 412.700731][T15116] [U] [ 412.703408][T15116] [U] [ 412.706087][T15116] [U] [ 412.709288][T15116] [U] [ 412.711970][T15116] [U] [ 412.714647][T15116] [U] [ 412.717327][T15116] [U] [ 412.720502][T15116] [U] [ 412.723181][T15116] [U] [ 412.725865][T15116] [U] [ 412.728545][T15116] [U] [ 412.731780][T15116] [U] [ 412.734462][T15116] [U] [ 412.737140][T15116] [U] [ 412.739817][T15116] [U] [ 412.744052][T15116] [U] [ 412.746741][T15116] [U] [ 412.749420][T15116] [U] [ 412.752100][T15116] [U] [ 412.757896][T15116] [U] [ 412.760583][T15116] [U] [ 412.763265][T15116] [U] [ 412.765944][T15116] [U] [ 412.770679][T15116] [U] [ 412.773364][T15116] [U] [ 412.776044][T15116] [U] [ 412.778723][T15116] [U] [ 412.782012][T15116] [U] [ 412.784694][T15116] [U] [ 412.787374][T15116] [U] [ 412.790054][T15116] [U] [ 412.793159][T15116] [U] [ 412.795840][T15116] [U] [ 412.798518][T15116] [U] [ 412.801196][T15116] [U] [ 412.804473][T15116] [U] [ 412.807155][T15116] [U] [ 412.809834][T15116] [U] [ 412.812512][T15116] [U] [ 412.815635][T15116] [U] [ 412.818315][T15116] [U] [ 412.820991][T15116] [U] [ 412.823667][T15116] [U] [ 412.826851][T15116] [U] [ 412.829533][T15116] [U] [ 412.832211][T15116] [U] [ 412.834895][T15116] [U] [ 412.837956][T15116] [U] [ 412.840634][T15116] [U] [ 412.843316][T15116] [U] [ 413.159650][T15111] [U] [ 413.490580][T15122] block nbd6: not configured, cannot reconfigure [ 413.635296][ T51] block nbd3: Receive control failed (result -32) [ 414.090601][ T30] audit: type=1800 audit(1753978586.416:4228): pid=15134 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3296" name="file1" dev="tmpfs" ino=678 res=0 errno=0 [ 415.956126][T15158] bridge0: port 3(syz_tun) entered blocking state [ 415.991700][T15158] bridge0: port 3(syz_tun) entered disabled state [ 416.021597][T15158] syz_tun: entered allmulticast mode [ 416.057274][T15158] syz_tun: entered promiscuous mode [ 416.063650][T15158] bridge0: port 3(syz_tun) entered blocking state [ 416.070274][T15158] bridge0: port 3(syz_tun) entered forwarding state [ 417.429948][ T30] audit: type=1400 audit(1753978589.756:4229): avc: denied { name_bind } for pid=15177 comm="syz.3.3314" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 417.609365][ T5954] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 418.453558][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 418.623273][ T5954] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 419.485491][ T5954] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 419.513599][ T5954] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 419.524808][T15199] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3319'. [ 419.526390][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 419.543824][ T5954] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 419.554818][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 419.569146][ T5954] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 419.579323][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.582448][T15199] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3319'. [ 419.678201][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3321'. [ 419.714258][ T5954] usb 1-1: config 0 descriptor?? [ 419.773541][ T30] audit: type=1400 audit(1753978592.096:4230): avc: denied { create } for pid=15202 comm="syz.3.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 419.828523][ T30] audit: type=1400 audit(1753978592.136:4231): avc: denied { bind } for pid=15202 comm="syz.3.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 420.059783][ T5954] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 420.376545][ T5954] usb 1-1: USB disconnect, device number 20 [ 421.286114][ T5954] usblp0: removed [ 421.913498][ T5954] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 424.604267][ T5954] usb 1-1: device descriptor read/all, error -71 [ 425.780315][T15253] vivid-003: kernel_thread() failed [ 426.335175][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3337'. [ 426.603640][ T5832] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 427.185426][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.200813][T15279] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3343'. [ 427.207704][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.221131][T15279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3343'. [ 427.231840][ T5832] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 427.243167][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.271086][ T5832] usb 4-1: config 0 descriptor?? [ 428.265579][ T5832] usbhid 4-1:0.0: can't add hid device: -71 [ 428.271561][ T5832] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 428.369755][ T5832] usb 4-1: USB disconnect, device number 13 [ 428.413779][ T5903] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 428.616246][ T5903] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 428.641697][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.653215][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.665857][ T5903] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 428.679478][ T5903] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 428.717974][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.745358][ T5903] usb 7-1: config 0 descriptor?? [ 429.939153][ T55] block nbd2: Possible stuck request ffff888026ef4ec0: control (read@0,1024B). Runtime 240 seconds [ 429.950501][ T55] block nbd2: Possible stuck request ffff888026ef5080: control (read@1024,1024B). Runtime 240 seconds [ 430.047497][ T5903] isku 0003:1E7D:319C.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 430.281740][T15319] : entered promiscuous mode [ 430.780114][ T5903] isku 0003:1E7D:319C.000D: couldn't init struct isku_device [ 430.808920][ T5903] isku 0003:1E7D:319C.000D: couldn't install keyboard [ 430.848612][ T5903] isku 0003:1E7D:319C.000D: probe with driver isku failed with error -71 [ 430.978689][ T5903] usb 7-1: USB disconnect, device number 7 [ 431.214664][ T127] block nbd4: Possible stuck request ffff888026f9b980: control (read@0,1024B). Runtime 240 seconds [ 431.225598][ T127] block nbd4: Possible stuck request ffff888026f9bb40: control (read@1024,1024B). Runtime 240 seconds [ 431.236638][ T127] block nbd4: Possible stuck request ffff888026f9bd00: control (read@2048,1024B). Runtime 240 seconds [ 431.247846][ T127] block nbd4: Possible stuck request ffff888026f9bec0: control (read@3072,1024B). Runtime 240 seconds [ 433.076325][T15337] fuse: Bad value for 'fd' [ 434.127918][T15352] tipc: Enabled bearer , priority 0 [ 434.140858][T15352] tipc: Resetting bearer [ 434.177943][T15351] tipc: Disabling bearer [ 434.313747][ T5954] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 434.521428][ T5954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.588384][ T5954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.638262][ T5954] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 434.649394][ T5954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.669415][ T5954] usb 7-1: config 0 descriptor?? [ 435.092136][ T5954] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 435.125525][ T5954] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 435.138307][ T5954] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 435.160489][ T5954] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 435.175541][ T5954] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 435.260656][ T5954] cm6533_jd 0003:0D8C:0022.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 435.341085][ T5954] usb 7-1: USB disconnect, device number 8 [ 435.415283][T15367] fido_id[15367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 436.373985][T15382] fuse: Bad value for 'fd' [ 436.494187][T15386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3379'. [ 436.503093][T15386] bridge_slave_1: left allmulticast mode [ 436.548075][T15386] bridge_slave_1: left promiscuous mode [ 436.565263][T15386] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.580077][T15392] No control pipe specified [ 436.586605][T15386] bridge_slave_0: left allmulticast mode [ 436.593980][T15386] bridge_slave_0: left promiscuous mode [ 436.603495][T15386] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.123515][ T5903] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 438.161864][T15430] No control pipe specified [ 438.392764][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.405870][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.416813][ T5903] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 438.427003][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.443691][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 438.840069][ T24] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 438.872335][ T5903] usb 4-1: config 0 descriptor?? [ 438.938979][ T24] usb 1-1: config 0 has no interface number 0 [ 438.946409][ T24] usb 1-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 438.957264][ T24] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.971951][ T24] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.990668][ T24] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 439.149108][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 439.178618][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.189162][ T24] usb 1-1: config 0 descriptor?? [ 439.315032][ T5903] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 439.367000][ T5903] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 439.387194][ T5903] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 439.403708][ T5903] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 439.413769][ T5903] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 439.466634][ T5903] cm6533_jd 0003:0D8C:0022.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 439.521863][ T5903] usb 4-1: USB disconnect, device number 14 [ 439.541475][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.549106][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.619749][ T24] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 439.641533][T15455] fido_id[15455]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 439.656275][ T24] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 439.663163][ T24] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 439.671932][ T24] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 439.685273][ T24] wacom 0003:056A:0084.0010: unknown main item tag 0x0 [ 439.817992][ T24] usb 1-1: USB disconnect, device number 23 [ 440.799078][T15469] No control pipe specified [ 442.749215][T15496] : entered promiscuous mode [ 444.824571][T15526] tipc: Enabled bearer , priority 0 [ 444.831927][T15526] syzkaller0: entered promiscuous mode [ 444.881842][T15526] syzkaller0: entered allmulticast mode [ 445.062272][T15527] tipc: Resetting bearer [ 445.123787][T15525] tipc: Resetting bearer [ 445.943577][ T31] INFO: task syz.2.2712:13101 blocked for more than 143 seconds. [ 445.951317][ T31] Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 [ 445.962600][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.968435][ T5908] tipc: Node number set to 4080936396 [ 445.971297][ T31] task:syz.2.2712 state:D stack:26232 pid:13101 tgid:13097 ppid:5824 task_flags:0x400140 flags:0x00004006 [ 445.988587][ T31] Call Trace: [ 445.991862][ T31] [ 445.994838][ T31] __schedule+0x1190/0x5df0 [ 445.999372][ T31] ? __pfx___schedule+0x10/0x10 [ 446.004269][ T31] ? find_held_lock+0x2b/0x80 [ 446.008947][ T31] ? schedule+0x2d7/0x3a0 [ 446.013282][ T31] schedule+0xe7/0x3a0 [ 446.017400][ T31] schedule_preempt_disabled+0x13/0x30 [ 446.022875][ T31] __mutex_lock+0x81a/0x1070 [ 446.027526][ T31] ? sync_bdevs+0xfd/0x360 [ 446.033779][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 446.038830][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 446.044158][ T31] ? iput+0xd3/0x880 [ 446.048058][ T31] ? sync_bdevs+0xfd/0x360 [ 446.052468][ T31] sync_bdevs+0xfd/0x360 [ 446.056743][ T31] ksys_sync+0xb2/0x150 [ 446.060894][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 446.073442][ T31] ? rcu_is_watching+0x12/0xc0 [ 446.082791][ T31] ? do_syscall_64+0x91/0x4c0 [ 446.092564][ T31] __do_sys_sync+0xe/0x20 [ 446.102529][ T31] do_syscall_64+0xcd/0x4c0 [ 446.107222][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.113156][ T31] RIP: 0033:0x7ff9f398eb69 [ 446.117817][ T31] RSP: 002b:00007ff9f17f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 446.126445][ T31] RAX: ffffffffffffffda RBX: 00007ff9f3bb6080 RCX: 00007ff9f398eb69 [ 446.136160][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 446.144335][ T31] RBP: 00007ff9f3bb6080 R08: 0000000000000000 R09: 0000000000000000 [ 446.152313][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.160599][ T31] R13: 0000000000000000 R14: 00007ff9f3bb6080 R15: 00007ffe0b088d08 [ 446.168616][ T31] [ 446.171670][ T31] [ 446.171670][ T31] Showing all locks held in the system: [ 446.179510][ T31] 1 lock held by khungtaskd/31: [ 446.184395][ T31] #0: ffffffff8e5c1060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 446.198480][ T31] 6 locks held by kworker/1:1/43: [ 446.204504][ T31] #0: ffff888140afb148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 446.215366][ T31] #1: ffffc90000b37d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 446.226852][ T31] #2: ffff88802a57c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 446.236316][ T31] #3: ffff88802a57f518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 446.246420][ T31] #4: ffff88802a506168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 446.256113][ T31] #5: ffffffff8f933510 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1cb0 [ 446.263676][ T43] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 446.266620][ T31] 3 locks held by kworker/u8:6/2907: [ 446.279287][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 446.290501][ T31] #1: ffffc9000bdc7d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 446.300856][ T31] #2: ffffffff9034cd48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 446.309990][ T31] 2 locks held by getty/5583: [ 446.314987][ T31] #0: ffff88814ca870a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 446.324869][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 446.333518][ T5954] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 446.337535][ T31] 10 locks held by kworker/1:7/5954: [ 446.347845][ T31] #0: ffff888140afb148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 446.358727][ T31] #1: ffffc90005427d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 446.369980][ T31] #2: ffff88802a134198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 446.378916][ T31] #3: ffff88802a137518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 446.388866][ T31] #4: ffff888029e70268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 446.398601][ T31] #5: ffffffff8f933510 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1cb0 [ 446.409040][ T31] #6: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 446.419085][ T31] #7: ffff8880b8524088 (per_cpu_ptr(&psi_seq, cpu)){-.-.}-{0:0}, at: __schedule+0x1861/0x5df0 [ 446.429455][ T31] #8: ffff8880b8539a98 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x26b/0x10f0 [ 446.438608][ T43] usb 8-1: Using ep0 maxpacket: 16 [ 446.445351][ T31] #9: ffff88801ea952a8 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xb2/0x1680 [ 446.451139][ T43] usb 8-1: unable to get BOS descriptor or descriptor too short [ 446.454651][ T31] 1 lock held by udevd/6195: [ 446.467017][ T31] #0: ffff888026e7b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 446.467443][ T43] usb 8-1: config 1 has an invalid interface number: 26 but max is 1 [ 446.476614][ T31] 1 lock held by udevd/10486: [ 446.488170][ T43] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.489274][ T31] #0: ffff888026e9b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 446.507563][ T43] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 446.509479][ T31] 1 lock held by syz.2.2712/13101: [ 446.517891][ T43] usb 8-1: config 1 has no interface number 0 [ 446.523007][ T31] #0: ffff888026e9b358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 446.533582][ T43] usb 8-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 446.538542][ T31] 2 locks held by syz.5.3425/15525: [ 446.558507][ T31] #0: ffffffff9034cd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 446.561486][ T43] usb 8-1: config 1 interface 26 has no altsetting 0 [ 446.567739][ T31] #1: ffffffff8e5cc5f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 446.574645][ T5954] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 446.588937][ T31] [ 446.595193][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.598089][T15525] tipc: Disabling bearer [ 446.617183][ T31] ============================================= [ 446.617183][ T31] [ 446.617622][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.626069][ T31] NMI backtrace for cpu 0 [ 446.626081][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 446.626103][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.626114][ T31] Call Trace: [ 446.626120][ T31] [ 446.626125][ T31] dump_stack_lvl+0x116/0x1f0 [ 446.626153][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 446.626172][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 446.626194][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 446.626218][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 446.626240][ T31] watchdog+0xf0e/0x1260 [ 446.626261][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.626276][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 446.626300][ T31] ? __kthread_parkme+0x19e/0x250 [ 446.626322][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.626339][ T31] kthread+0x3c5/0x780 [ 446.626353][ T31] ? __pfx_kthread+0x10/0x10 [ 446.626369][ T31] ? rcu_is_watching+0x12/0xc0 [ 446.626387][ T31] ? __pfx_kthread+0x10/0x10 [ 446.626403][ T31] ret_from_fork+0x5d4/0x6f0 [ 446.626416][ T31] ? __pfx_kthread+0x10/0x10 [ 446.626431][ T31] ret_from_fork_asm+0x1a/0x30 [ 446.626459][ T31] [ 446.626464][ T31] Sending NMI from CPU 0 to CPUs 1: [ 446.640178][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 446.652795][ C1] NMI backtrace for cpu 1 [ 446.652811][ C1] CPU: 1 UID: 0 PID: 5954 Comm: kworker/1:7 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 446.652828][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.652836][ C1] Workqueue: usb_hub_wq hub_event [ 446.652854][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 446.652871][ C1] Code: 74 59 fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 fd 73 2d 06 e8 28 73 bf fc eb a2 e8 b1 73 [ 446.652882][ C1] RSP: 0018:ffffc90005426fe8 EFLAGS: 00000002 [ 446.652892][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 446.652900][ C1] RDX: 00000000000003fd RSI: ffffffff85620ef0 RDI: ffffffff9b0c11e0 [ 446.652908][ C1] RBP: ffffffff9b0c11a0 R08: 0000000000000001 R09: 000000000000001f [ 446.652916][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 446.652923][ C1] R13: 0000000000000020 R14: fffffbfff361828e R15: dffffc0000000000 [ 446.652932][ C1] FS: 0000000000000000(0000) GS:ffff888124819000(0000) knlGS:0000000000000000 [ 446.652945][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.652953][ C1] CR2: 00007ffea070bbd8 CR3: 000000004ff78000 CR4: 00000000003526f0 [ 446.652962][ C1] Call Trace: [ 446.652966][ C1] [ 446.652972][ C1] wait_for_lsr+0x13a/0x210 [ 446.652990][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 446.653004][ C1] serial8250_console_write+0xf81/0x1890 [ 446.653025][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 446.653044][ C1] ? lock_acquire+0x179/0x350 [ 446.653065][ C1] console_flush_all+0x801/0xc60 [ 446.653082][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 446.653096][ C1] ? __lock_acquire+0x622/0x1c90 [ 446.653115][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 446.653133][ C1] console_unlock+0xd8/0x210 [ 446.653147][ C1] ? __pfx_console_unlock+0x10/0x10 [ 446.653163][ C1] vprintk_emit+0x418/0x6d0 [ 446.653178][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 446.653194][ C1] dev_printk_emit+0xfa/0x140 [ 446.653208][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 446.653227][ C1] __dev_printk+0xf5/0x270 [ 446.653241][ C1] _dev_notice+0xe4/0x120 [ 446.653254][ C1] ? __pfx__dev_notice+0x10/0x10 [ 446.653269][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.653284][ C1] ? trace_kmalloc+0x2b/0xd0 [ 446.653302][ C1] usb_get_configuration+0x2ff5/0x6530 [ 446.653326][ C1] ? __pfx_usb_get_configuration+0x10/0x10 [ 446.653346][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 446.653360][ C1] ? mark_held_locks+0x49/0x80 [ 446.653383][ C1] usb_new_device+0x11d3/0x1a60 [ 446.653402][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 446.653418][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 446.653432][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 446.653450][ C1] ? mark_held_locks+0x49/0x80 [ 446.653472][ C1] hub_event+0x2f34/0x4fe0 [ 446.653500][ C1] ? __pfx_hub_event+0x10/0x10 [ 446.653516][ C1] ? devm_arch_io_reserve_memtype_wc+0xc0/0x140 [ 446.653544][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.653563][ C1] process_one_work+0x9cf/0x1b70 [ 446.653583][ C1] ? __pfx_hcd_resume_work+0x10/0x10 [ 446.653604][ C1] ? __pfx_process_one_work+0x10/0x10 [ 446.653623][ C1] ? assign_work+0x1a0/0x250 [ 446.653639][ C1] worker_thread+0x6c8/0xf10 [ 446.653658][ C1] ? __kthread_parkme+0x19e/0x250 [ 446.653679][ C1] ? __pfx_worker_thread+0x10/0x10 [ 446.653695][ C1] kthread+0x3c5/0x780 [ 446.653709][ C1] ? __pfx_kthread+0x10/0x10 [ 446.653725][ C1] ? rcu_is_watching+0x12/0xc0 [ 446.653742][ C1] ? __pfx_kthread+0x10/0x10 [ 446.653757][ C1] ret_from_fork+0x5d4/0x6f0 [ 446.653771][ C1] ? __pfx_kthread+0x10/0x10 [ 446.653785][ C1] ret_from_fork_asm+0x1a/0x30 [ 446.653813][ C1] [ 446.659939][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 446.659950][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(full) [ 446.659969][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.659979][ T31] Call Trace: [ 446.659985][ T31] [ 446.659991][ T31] dump_stack_lvl+0x3d/0x1f0 [ 446.660016][ T31] vpanic+0x6a3/0x780 [ 446.660039][ T31] ? __pfx_vpanic+0x10/0x10 [ 446.660069][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 446.660090][ T31] panic+0xca/0xd0 [ 446.660111][ T31] ? __pfx_panic+0x10/0x10 [ 446.660134][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 446.660157][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 446.660178][ T31] ? watchdog+0xd78/0x1260 [ 446.660195][ T31] ? watchdog+0xd6b/0x1260 [ 446.660212][ T31] watchdog+0xd89/0x1260 [ 446.660233][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.660249][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 446.660274][ T31] ? __kthread_parkme+0x19e/0x250 [ 446.660296][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.660313][ T31] kthread+0x3c5/0x780 [ 446.660329][ T31] ? __pfx_kthread+0x10/0x10 [ 446.660345][ T31] ? rcu_is_watching+0x12/0xc0 [ 446.660363][ T31] ? __pfx_kthread+0x10/0x10 [ 446.660383][ T31] ret_from_fork+0x5d4/0x6f0 [ 446.660397][ T31] ? __pfx_kthread+0x10/0x10 [ 446.660412][ T31] ret_from_fork_asm+0x1a/0x30 [ 446.660440][ T31] [ 446.662612][ T31] Kernel Offset: disabled