last executing test programs:

1m54.547943404s ago: executing program 2 (id=41):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000bc0)={0xc, 0x0, &(0x7f0000000a80)=[@free_buffer], 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
clock_getres(0x5, &(0x7f0000000040))
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
accept4(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000)
getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f00000000c0))
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x50e)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$uinput_user_dev(r0, &(0x7f0000000580)={'syz1\x00', {0x6fc9, 0x7, 0x7, 0x5}, 0x3e, [0x9, 0x3, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x1, 0x3, 0x4, 0xf252, 0x4, 0x5, 0x300000, 0x0, 0x7, 0x4623b, 0x2000, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x2, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x5, 0x6, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x2, 0x1, 0x0, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0xb, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xc, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xfffffffc, 0xeba, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x0, 0x0, 0x3ff, 0x3, 0x6, 0x6, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x1, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x10, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1001, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x5, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3d, 0x7, 0x100002, 0x4, 0x4, 0x10, 0x340a, 0x0, 0x7fff, 0xffffffff, 0xfffffff8, 0x401, 0x1, 0x200, 0x7f, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x6, 0x133, 0x6]}, 0x45c)
r7 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000580)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x1, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96000100", "2809e8dbe10a598948224ad54aeac11d875397bdb22d0040f45b819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000000000000e3ffffffffffffff", [0x4, 0x2]}})
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x12, 0x1c, "21e160df5686132e790003cb051450d3be671e808f41593638df9cad4f47af0de7f60f3f5c475d19cceed5a6f17322ee028f48f0d04cb02d8d17bdaaa7d63cd0", "34f3b60deff02225e096c4a79611bbd2c26e64e034885d32eeade48a414682d3d640ff7124091b469a0fbf4c3f11886f079cf5e0e401e623ca18165fc817343c", "69757344661c3ade17277cd48307bd28d06646ab0a4a9e08e9da8d9c484b7866", [0xce1, 0x7ff]})
ioctl$UI_DEV_CREATE(r0, 0x5501)

1m36.563695133s ago: executing program 2 (id=41):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000bc0)={0xc, 0x0, &(0x7f0000000a80)=[@free_buffer], 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
clock_getres(0x5, &(0x7f0000000040))
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
accept4(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000)
getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f00000000c0))
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x50e)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$uinput_user_dev(r0, &(0x7f0000000580)={'syz1\x00', {0x6fc9, 0x7, 0x7, 0x5}, 0x3e, [0x9, 0x3, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x1, 0x3, 0x4, 0xf252, 0x4, 0x5, 0x300000, 0x0, 0x7, 0x4623b, 0x2000, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x2, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x5, 0x6, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x2, 0x1, 0x0, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0xb, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xc, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xfffffffc, 0xeba, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x0, 0x0, 0x3ff, 0x3, 0x6, 0x6, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x1, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x10, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1001, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x5, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3d, 0x7, 0x100002, 0x4, 0x4, 0x10, 0x340a, 0x0, 0x7fff, 0xffffffff, 0xfffffff8, 0x401, 0x1, 0x200, 0x7f, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x6, 0x133, 0x6]}, 0x45c)
r7 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000580)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x1, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96000100", "2809e8dbe10a598948224ad54aeac11d875397bdb22d0040f45b819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000000000000e3ffffffffffffff", [0x4, 0x2]}})
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x12, 0x1c, "21e160df5686132e790003cb051450d3be671e808f41593638df9cad4f47af0de7f60f3f5c475d19cceed5a6f17322ee028f48f0d04cb02d8d17bdaaa7d63cd0", "34f3b60deff02225e096c4a79611bbd2c26e64e034885d32eeade48a414682d3d640ff7124091b469a0fbf4c3f11886f079cf5e0e401e623ca18165fc817343c", "69757344661c3ade17277cd48307bd28d06646ab0a4a9e08e9da8d9c484b7866", [0xce1, 0x7ff]})
ioctl$UI_DEV_CREATE(r0, 0x5501)

1m16.474601883s ago: executing program 2 (id=41):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000bc0)={0xc, 0x0, &(0x7f0000000a80)=[@free_buffer], 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
clock_getres(0x5, &(0x7f0000000040))
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
accept4(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000)
getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f00000000c0))
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x50e)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$uinput_user_dev(r0, &(0x7f0000000580)={'syz1\x00', {0x6fc9, 0x7, 0x7, 0x5}, 0x3e, [0x9, 0x3, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x1, 0x3, 0x4, 0xf252, 0x4, 0x5, 0x300000, 0x0, 0x7, 0x4623b, 0x2000, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x2, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x5, 0x6, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x2, 0x1, 0x0, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0xb, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xc, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xfffffffc, 0xeba, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x0, 0x0, 0x3ff, 0x3, 0x6, 0x6, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x1, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x10, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1001, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x5, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3d, 0x7, 0x100002, 0x4, 0x4, 0x10, 0x340a, 0x0, 0x7fff, 0xffffffff, 0xfffffff8, 0x401, 0x1, 0x200, 0x7f, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x6, 0x133, 0x6]}, 0x45c)
r7 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000580)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x1, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96000100", "2809e8dbe10a598948224ad54aeac11d875397bdb22d0040f45b819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000000000000e3ffffffffffffff", [0x4, 0x2]}})
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x12, 0x1c, "21e160df5686132e790003cb051450d3be671e808f41593638df9cad4f47af0de7f60f3f5c475d19cceed5a6f17322ee028f48f0d04cb02d8d17bdaaa7d63cd0", "34f3b60deff02225e096c4a79611bbd2c26e64e034885d32eeade48a414682d3d640ff7124091b469a0fbf4c3f11886f079cf5e0e401e623ca18165fc817343c", "69757344661c3ade17277cd48307bd28d06646ab0a4a9e08e9da8d9c484b7866", [0xce1, 0x7ff]})
ioctl$UI_DEV_CREATE(r0, 0x5501)

53.457259689s ago: executing program 2 (id=41):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000bc0)={0xc, 0x0, &(0x7f0000000a80)=[@free_buffer], 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
clock_getres(0x5, &(0x7f0000000040))
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
accept4(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000)
getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f00000000c0))
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x50e)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$uinput_user_dev(r0, &(0x7f0000000580)={'syz1\x00', {0x6fc9, 0x7, 0x7, 0x5}, 0x3e, [0x9, 0x3, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x1, 0x3, 0x4, 0xf252, 0x4, 0x5, 0x300000, 0x0, 0x7, 0x4623b, 0x2000, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x2, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x5, 0x6, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x2, 0x1, 0x0, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0xb, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xc, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xfffffffc, 0xeba, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x0, 0x0, 0x3ff, 0x3, 0x6, 0x6, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x1, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x10, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1001, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x5, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3d, 0x7, 0x100002, 0x4, 0x4, 0x10, 0x340a, 0x0, 0x7fff, 0xffffffff, 0xfffffff8, 0x401, 0x1, 0x200, 0x7f, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x6, 0x133, 0x6]}, 0x45c)
r7 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000580)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x1, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96000100", "2809e8dbe10a598948224ad54aeac11d875397bdb22d0040f45b819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000000000000e3ffffffffffffff", [0x4, 0x2]}})
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x12, 0x1c, "21e160df5686132e790003cb051450d3be671e808f41593638df9cad4f47af0de7f60f3f5c475d19cceed5a6f17322ee028f48f0d04cb02d8d17bdaaa7d63cd0", "34f3b60deff02225e096c4a79611bbd2c26e64e034885d32eeade48a414682d3d640ff7124091b469a0fbf4c3f11886f079cf5e0e401e623ca18165fc817343c", "69757344661c3ade17277cd48307bd28d06646ab0a4a9e08e9da8d9c484b7866", [0xce1, 0x7ff]})
ioctl$UI_DEV_CREATE(r0, 0x5501)

32.155319005s ago: executing program 1 (id=594):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x805020, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$misdntimer(0xffffff9c, &(0x7f0000000040), 0x143, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x0, @val=@perf_event={0x4}}, 0x18)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0x40}}, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r2, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0xc044054)
r3 = epoll_create1(0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8)
r5 = socket(0xa, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x4}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@ptr={0x9}, @typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @float={0xe, 0x0, 0x0, 0x10, 0x2}, @union={0x8, 0x3, 0x0, 0x5, 0x1, 0x7, [{0x10, 0x4, 0x1cc7}, {0x5, 0x3, 0xea6}, {0xc, 0x0, 0xfffffffb}]}, @enum={0x3}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x30, 0x2e, 0x30]}}, &(0x7f00000000c0)=""/47, 0x89, 0x2f, 0x0, 0x2, 0x10000, @value=r4}, 0x28)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4)

31.516822813s ago: executing program 2 (id=41):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000bc0)={0xc, 0x0, &(0x7f0000000a80)=[@free_buffer], 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
clock_getres(0x5, &(0x7f0000000040))
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
accept4(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000)
getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f00000000c0))
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x50e)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$uinput_user_dev(r0, &(0x7f0000000580)={'syz1\x00', {0x6fc9, 0x7, 0x7, 0x5}, 0x3e, [0x9, 0x3, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x1, 0x3, 0x4, 0xf252, 0x4, 0x5, 0x300000, 0x0, 0x7, 0x4623b, 0x2000, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x2, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x5, 0x6, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x2, 0x1, 0x0, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0xb, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xc, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xfffffffc, 0xeba, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x0, 0x0, 0x3ff, 0x3, 0x6, 0x6, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x1, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x10, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1001, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x5, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3d, 0x7, 0x100002, 0x4, 0x4, 0x10, 0x340a, 0x0, 0x7fff, 0xffffffff, 0xfffffff8, 0x401, 0x1, 0x200, 0x7f, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x6, 0x133, 0x6]}, 0x45c)
r7 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000580)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x1, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96000100", "2809e8dbe10a598948224ad54aeac11d875397bdb22d0040f45b819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000000000000e3ffffffffffffff", [0x4, 0x2]}})
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x12, 0x1c, "21e160df5686132e790003cb051450d3be671e808f41593638df9cad4f47af0de7f60f3f5c475d19cceed5a6f17322ee028f48f0d04cb02d8d17bdaaa7d63cd0", "34f3b60deff02225e096c4a79611bbd2c26e64e034885d32eeade48a414682d3d640ff7124091b469a0fbf4c3f11886f079cf5e0e401e623ca18165fc817343c", "69757344661c3ade17277cd48307bd28d06646ab0a4a9e08e9da8d9c484b7866", [0xce1, 0x7ff]})
ioctl$UI_DEV_CREATE(r0, 0x5501)

30.090608841s ago: executing program 1 (id=597):
socket$key(0xf, 0x3, 0x2)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x113940, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x3, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0)
socket$kcm(0x10, 0x2, 0x0)
getpid()
madvise(&(0x7f00004c7000/0x3000)=nil, 0x3000, 0x8)

29.452399997s ago: executing program 1 (id=600):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e73657400000800"], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24054000)

28.837730283s ago: executing program 1 (id=604):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r1 = socket(0x2a, 0x2, 0x5)
sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80)
r2 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
iopl(0x3)
syz_usbip_server_init(0x4)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0)
mount$fuseblk(&(0x7f0000002440), 0x0, 0x0, 0x4000, 0x0)
shmctl$SHM_LOCK(r2, 0xb)
shmctl$IPC_RMID(r2, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0xfd, @tick, {}, {0xf}, @addr={0x1b}}], 0x1c)
read$qrtrtun(r0, 0x0, 0x0)
dup2(r0, r1)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
clock_gettime(0x0, &(0x7f0000000000))

25.596482337s ago: executing program 1 (id=612):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = getpid()
mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1000008, 0x20010, r2, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
prlimit64(r3, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = signalfd(0xffffffffffffffff, 0x0, 0x0)
fcntl$setownex(r6, 0xf, 0x0)
faccessat2(r6, &(0x7f0000000100)='.\x00', 0x20, 0x600)
setpgid(0x0, r5)
mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77660600000000e1ffff06d04b255c8e0debc8e3efa49c8ffc", @ANYRESHEX=r4, @ANYBLOB=',\x00'])
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x48004, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000100bd97d0900ba242b5222838900004b9905c8548a7e822931c858725b7461419c6f56dd8d605c21120683bf71e814beb178a53846", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r7}, 0x18)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x14)
mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0)
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001)

25.20859497s ago: executing program 1 (id=614):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e73657400000800"], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24054000)

12.006663299s ago: executing program 2 (id=41):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000bc0)={0xc, 0x0, &(0x7f0000000a80)=[@free_buffer], 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
clock_getres(0x5, &(0x7f0000000040))
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
accept4(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000)
getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f00000000c0))
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x50e)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$uinput_user_dev(r0, &(0x7f0000000580)={'syz1\x00', {0x6fc9, 0x7, 0x7, 0x5}, 0x3e, [0x9, 0x3, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x1, 0x3, 0x4, 0xf252, 0x4, 0x5, 0x300000, 0x0, 0x7, 0x4623b, 0x2000, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x2, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x5, 0x6, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x2, 0x1, 0x0, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0xb, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xc, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xfffffffc, 0xeba, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x0, 0x0, 0x3ff, 0x3, 0x6, 0x6, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x1, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x10, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1001, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x5, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3d, 0x7, 0x100002, 0x4, 0x4, 0x10, 0x340a, 0x0, 0x7fff, 0xffffffff, 0xfffffff8, 0x401, 0x1, 0x200, 0x7f, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x6, 0x133, 0x6]}, 0x45c)
r7 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000580)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x1, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96000100", "2809e8dbe10a598948224ad54aeac11d875397bdb22d0040f45b819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000000000000e3ffffffffffffff", [0x4, 0x2]}})
ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x12, 0x1c, "21e160df5686132e790003cb051450d3be671e808f41593638df9cad4f47af0de7f60f3f5c475d19cceed5a6f17322ee028f48f0d04cb02d8d17bdaaa7d63cd0", "34f3b60deff02225e096c4a79611bbd2c26e64e034885d32eeade48a414682d3d640ff7124091b469a0fbf4c3f11886f079cf5e0e401e623ca18165fc817343c", "69757344661c3ade17277cd48307bd28d06646ab0a4a9e08e9da8d9c484b7866", [0xce1, 0x7ff]})
ioctl$UI_DEV_CREATE(r0, 0x5501)

9.931003991s ago: executing program 32 (id=614):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e73657400000800"], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24054000)

8.056821448s ago: executing program 4 (id=659):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x5}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x6, 0x9, 0x3}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x4004800)

7.328080595s ago: executing program 3 (id=661):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
fstat(0xffffffffffffffff, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0xef92, 0x44, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/54, 0x57}], 0x1)

7.113716508s ago: executing program 4 (id=662):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x805020, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$misdntimer(0xffffff9c, &(0x7f0000000040), 0x143, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x0, @val=@perf_event={0x4}}, 0x18)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0x40}}, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r2, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0xc044054)
r3 = epoll_create1(0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8)
r4 = socket(0xa, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x4}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000f000000700e0000a0f0ffff80060000", @ANYRES32, @ANYBLOB="000021fea220e6794779654a80c4e2f86b87ffc3ebbca8fcdef8ca3ad3f9dc4a0b960c3c969f65116a20483d4b464d294388ea0962ae5ba33740b8e3f1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000004000000020000000a00"/28], 0x50)

6.242201685s ago: executing program 3 (id=663):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

5.977660352s ago: executing program 4 (id=664):
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@local, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x420005e, 0x0, 0x9, 0x0, 0x200000})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000440)={@host})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0x0, 0x0, 0x20005e})

5.792475864s ago: executing program 4 (id=665):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
unlinkat(0xffffffffffffffff, 0x0, 0x200)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', <r4=>0x0, 0x2f, 0x1, 0xfe, 0xfff, 0x60, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x20, 0x7, 0x80, 0x7fffffff}})
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x8c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x8c}}, 0x4008000)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000c80)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0)
r6 = dup(r5)
r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(r7, 0x5437, 0x0)
read(r7, 0x0, 0x0)
write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)

3.625968441s ago: executing program 0 (id=668):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x8004000, 0x7, 0x8, 0x8000, 0x4, 0x0, 0x0, 0x10, 0x5}}, 0x50)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22)

3.467676889s ago: executing program 0 (id=669):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[])
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000280))

3.157764378s ago: executing program 4 (id=670):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', <r0=>0x0}, 0x6a)
r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r1, 0x0, 0x80000000, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x1b)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f00000000c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x1, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x5}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x9}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a)
unshare(0x22020600)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4)
sendfile(r3, r3, 0x0, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000280)=0x400)
lseek(r3, 0x4, 0x0)
syz_io_uring_setup(0x4088, &(0x7f0000000100)={0x0, 0x213d, 0x20000, 0x2, 0x320}, &(0x7f00000001c0), &(0x7f00000002c0))
readv(r3, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1)

3.114314962s ago: executing program 0 (id=671):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = inotify_init()
r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r4 = inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf)
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69)
close(r3)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
getegid()

2.925812494s ago: executing program 3 (id=672):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
fstat(0xffffffffffffffff, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0xef92, 0x44, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/54, 0x57}], 0x1)

2.039574931s ago: executing program 3 (id=673):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x40381)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x354, 0xffffffff, 0x1e4, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x3}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, [0xff000000, 0x0, 0x0, 0xff], [0xff000000, 0xff000000, 0x0, 0xffffffff], 'bridge_slave_1\x00', 'team_slave_1\x00', {}, {0xbf820dc36854cbc6}, 0x6, 0x9, 0x2, 0x43}, 0x2f2, 0xc8, 0xec, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x11, 0x1, 0x6, 0x4}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x2, 0x79496b969af2e55d}, {0x2, 0x3, 0x6}, 0x8, 0x9}}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0xfffd}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3b0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, 0x0, 0x0, 0x7d, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0x6)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec537208120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8aa53f38054f0b56a20ff27fff", 0x8b}], 0x1}, 0x24000810)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r9, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
listen(r9, 0xfff)
accept4$bt_l2cap(r9, 0x0, 0x0, 0x800)
r10 = dup(r8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='contention_begin\x00', r10, 0x0, 0x9}, 0x18)
syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000580), &(0x7f0000000600))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

1.459240866s ago: executing program 0 (id=674):
syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})

1.296884916s ago: executing program 0 (id=675):
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x181040)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "f1a1173fb9462d3b89e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb0100"}, 0x48, 0xffffffffffffffff)
keyctl$setperm(0x5, r3, 0x2000004)

341.9867ms ago: executing program 0 (id=676):
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
write$qrtrtun(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0x9362, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil)
brk(0xffff0001)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r3, r4, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
dup2(r5, r0)

292.830648ms ago: executing program 3 (id=677):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0)

274.711897ms ago: executing program 3 (id=678):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)

0s ago: executing program 4 (id=679):
socket$key(0xf, 0x3, 0x2)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x113940, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x3, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x1, 0x100)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0)
socket$kcm(0x10, 0x2, 0x0)
getpid()
madvise(&(0x7f00004c7000/0x3000)=nil, 0x3000, 0x8)

kernel console output (not intermixed with test programs):

.168374][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  159.172092][ T5866] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  159.214246][ T5866] usb 4-1: selecting invalid altsetting 1
[  159.220074][ T5866] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  159.239152][ T5866] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  159.455605][ T5866] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  159.642759][ T5866] usb 4-1: media controller created
[  159.752089][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  159.774378][   T24] usb 2-1: device descriptor read/64, error -71
[  159.803594][ T5866] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  159.972870][   T30] audit: type=1400 audit(1749921281.525:286): avc:  denied  { listen } for  pid=7074 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  160.139276][ T7078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.239431][ T5866] zl10353_read_register: readreg error (reg=127, ret==-71)
[  160.291432][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  161.268010][   T24] usb 2-1: device descriptor read/64, error -71
[  161.341101][ T5928] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  161.381826][   T24] usb usb2-port1: attempt power cycle
[  161.530639][ T5928] usb 5-1: Using ep0 maxpacket: 8
[  161.597272][ T5866] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  161.733696][ T5928] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  161.743433][ T5928] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  161.770527][   T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  162.261196][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  162.284496][ T5825] Bluetooth: hci5: command 0x1003 tx timeout
[  163.005324][ T5928] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  163.015793][ T5928] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  163.025880][ T5928] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  163.040943][ T5928] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  163.050008][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.084319][   T24] usb 2-1: device descriptor read/8, error -71
[  163.180639][ T5866] usb 4-1: USB disconnect, device number 5
[  163.194811][ T5928] usb 5-1: can't set config #16, error -71
[  163.215539][ T5928] usb 5-1: USB disconnect, device number 4
[  164.221600][ T6880] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  164.274803][ T6880] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  164.402491][ T6880] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  164.437097][ T7121] ALSA: mixer_oss: invalid OSS volume 'MON'
[  164.443806][ T7121] overlayfs: failed to resolve './file1': -2
[  165.041761][ T6880] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  165.333984][   T30] audit: type=1400 audit(1749921286.885:287): avc:  denied  { execute } for  pid=7136 comm="syz.1.267" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  165.931860][   T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  166.761479][ T6880] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.840429][   T24] usb 4-1: device descriptor read/64, error -71
[  166.904123][ T6880] 8021q: adding VLAN 0 to HW filter on device team0
[  166.936297][   T30] audit: type=1400 audit(1749921288.485:288): avc:  denied  { create } for  pid=7154 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  166.963914][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.971095][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.016305][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.023505][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.072514][ T7158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7158 comm=syz.0.271
[  167.100692][   T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  167.131972][   T30] audit: type=1400 audit(1749921288.695:289): avc:  denied  { ioctl } for  pid=7157 comm="syz.0.271" path="socket:[13201]" dev="sockfs" ino=13201 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  167.330442][   T24] usb 4-1: device descriptor read/64, error -71
[  167.395012][ T7170] capability: warning: `syz.0.271' uses 32-bit capabilities (legacy support in use)
[  167.442976][   T24] usb usb4-port1: attempt power cycle
[  167.798133][ T6880] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.812409][   T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  167.851730][   T24] usb 4-1: device descriptor read/8, error -71
[  167.861362][ T6880] veth0_vlan: entered promiscuous mode
[  167.968332][ T6880] veth1_vlan: entered promiscuous mode
[  167.997935][ T6880] veth0_macvtap: entered promiscuous mode
[  168.047688][ T6880] veth1_macvtap: entered promiscuous mode
[  168.089068][ T7182] 9pnet_virtio: no channels available for device syz
[  168.101415][ T7182] capability: warning: `syz.1.269' uses deprecated v2 capabilities in a way that may be insecure
[  168.225005][ T6880] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.301759][ T6880] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.556383][ T6880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.739475][ T6880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.917915][ T6880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.034705][ T6880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.532329][ T7205] ALSA: mixer_oss: invalid OSS volume 'MON'
[  169.539100][ T7205] overlayfs: failed to resolve './file1': -2
[  169.874116][ T5825] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  170.308693][ T7213] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  170.320764][ T7213] UDF-fs: Scanning with blocksize 512 failed
[  170.330545][ T7213] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  170.338151][ T7213] UDF-fs: Scanning with blocksize 1024 failed
[  170.345827][ T7213] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  170.353528][ T7213] UDF-fs: Scanning with blocksize 2048 failed
[  170.361564][ T7213] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  170.369125][ T7213] UDF-fs: Scanning with blocksize 4096 failed
[  170.572910][ T6646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.601849][ T6646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.761113][ T6134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.824889][   T30] audit: type=1400 audit(1749921292.385:290): avc:  denied  { write } for  pid=7219 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  170.847844][ T6134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.973128][ T7226] random: crng reseeded on system resumption
[  170.980442][ T5893] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  171.010718][   T30] audit: type=1400 audit(1749921292.525:291): avc:  denied  { append } for  pid=7219 comm="syz.4.284" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  171.180653][ T5893] usb 1-1: Using ep0 maxpacket: 16
[  171.182421][   T30] audit: type=1400 audit(1749921292.525:292): avc:  denied  { open } for  pid=7219 comm="syz.4.284" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  171.187703][ T5893] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  171.396837][ T5893] usb 1-1: config 0 has no interface number 0
[  171.413703][ T5893] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  171.439747][ T5893] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  171.454379][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  171.464329][ T5893] usb 1-1: Product: syz
[  171.468864][ T5893] usb 1-1: SerialNumber: syz
[  171.476535][ T5893] usb 1-1: config 0 descriptor??
[  171.494395][ T5893] usbhid 1-1:0.8: couldn't find an input interrupt endpoint
[  171.992741][ T5873] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  172.258106][ T5873] usb 2-1: device descriptor read/64, error -71
[  172.500518][ T5873] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  172.670903][ T5873] usb 2-1: device descriptor read/64, error -71
[  172.712362][ T1029] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.800703][ T5873] usb usb2-port1: attempt power cycle
[  172.843701][ T1029] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.978541][ T1029] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.087348][ T1029] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.170493][ T5873] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  173.220898][ T5873] usb 2-1: device descriptor read/8, error -71
[  173.317122][ T1029] bridge_slave_1: left allmulticast mode
[  173.346584][ T1029] bridge_slave_1: left promiscuous mode
[  173.363772][ T1029] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.373534][ T1029] bridge_slave_0: left allmulticast mode
[  173.379192][ T1029] bridge_slave_0: left promiscuous mode
[  173.389489][ T1029] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.470531][ T5873] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  173.510880][ T5873] usb 2-1: device descriptor read/8, error -71
[  173.621423][ T5873] usb usb2-port1: unable to enumerate USB device
[  174.381376][ T3078] usb 1-1: USB disconnect, device number 6
[  175.413993][ T7302] loop6: detected capacity change from 0 to 524287999
[  175.542285][ T7303] ALSA: mixer_oss: invalid OSS volume 'MON'
[  175.549040][ T7303] overlayfs: failed to resolve './file1': -2
[  175.658752][ T7306] /dev/nullb0: Can't open blockdev
[  176.519807][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.533847][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.558968][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.578932][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  176.596853][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  177.391151][ T1029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.429829][ T1029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.475216][ T1029] bond0 (unregistering): Released all slaves
[  178.015635][ T7307] lo speed is unknown, defaulting to 1000
[  178.683981][ T5825] Bluetooth: hci3: command tx timeout
[  179.210369][ T5928] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  179.230954][ T5873] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  179.278413][ T7307] chnl_net:caif_netlink_parms(): no params data found
[  179.389948][ T5928] usb 4-1: device descriptor read/64, error -71
[  179.680556][ T5928] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  179.810445][ T5901] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  179.830618][ T5873] usb 1-1: Using ep0 maxpacket: 16
[  179.842845][ T5873] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  179.854697][ T5873] usb 1-1: config 0 has no interface number 0
[  179.860992][ T5873] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  179.870461][ T5928] usb 4-1: device descriptor read/64, error -71
[  179.873108][ T5873] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  179.888019][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  179.896641][ T5873] usb 1-1: Product: syz
[  179.904556][ T5873] usb 1-1: SerialNumber: syz
[  179.984059][ T5928] usb usb4-port1: attempt power cycle
[  179.993993][ T5873] usb 1-1: config 0 descriptor??
[  180.015517][ T5901] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  180.031066][ T5873] usbhid 1-1:0.8: couldn't find an input interrupt endpoint
[  180.045119][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  180.057031][ T1029] hsr_slave_0: left promiscuous mode
[  180.062881][ T5901] usb 2-1: Product: syz
[  180.067115][ T5901] usb 2-1: Manufacturer: syz
[  180.072051][ T5901] usb 2-1: SerialNumber: syz
[  180.081017][ T5901] usb 2-1: config 0 descriptor??
[  180.087008][ T1029] hsr_slave_1: left promiscuous mode
[  180.089035][ T5901] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  180.103969][ T1029] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.104502][ T5901] dvb-usb: bulk message failed: -22 (2/0)
[  180.121738][ T1029] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.121882][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  180.139712][ T5901] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  180.140050][ T1029] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.148722][ T5901] usb 2-1: media controller created
[  180.161041][ T1029] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.182969][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  180.188136][ T1029] veth1_macvtap: left promiscuous mode
[  180.197042][ T1029] veth0_macvtap: left promiscuous mode
[  180.207226][ T1029] veth1_vlan: left promiscuous mode
[  180.213607][ T1029] veth0_vlan: left promiscuous mode
[  180.294501][ T5901] cxusb: set interface failed
[  180.299249][ T5901] dvb-usb: bulk message failed: -22 (1/0)
[  180.357317][ T5901] DVB: Unable to find symbol mt352_attach()
[  180.360361][ T5928] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  180.363767][ T5901] dvb-usb: bulk message failed: -22 (5/0)
[  180.377284][ T5901] zl10353_read_register: readreg error (reg=127, ret==-121)
[  180.386099][ T5901] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  180.403635][ T5928] usb 4-1: device descriptor read/8, error -71
[  180.461827][ T5901] rc_core: IR keymap rc-dvico-mce not found
[  180.467762][ T5901] Registered IR keymap rc-empty
[  180.478493][ T5901] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  180.490243][ T5901] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input12
[  180.502430][ T5901] dvb-usb: schedule remote query interval to 100 msecs.
[  180.509392][ T5901] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  180.521683][ T5901] usb 2-1: USB disconnect, device number 14
[  180.583678][ T5901] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  180.672358][ T5928] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  180.696570][ T1029] team0 (unregistering): Port device team_slave_1 removed
[  180.705720][ T5928] usb 4-1: device descriptor read/8, error -71
[  180.729670][ T1029] team0 (unregistering): Port device team_slave_0 removed
[  180.737138][ T5825] Bluetooth: hci3: command tx timeout
[  180.824730][ T5928] usb usb4-port1: unable to enumerate USB device
[  181.020483][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.027692][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.037474][ T7307] bridge_slave_0: entered allmulticast mode
[  181.045805][ T7307] bridge_slave_0: entered promiscuous mode
[  181.059360][ T7307] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.073606][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.083428][ T7307] bridge_slave_1: entered allmulticast mode
[  181.091013][ T7307] bridge_slave_1: entered promiscuous mode
[  181.202556][ T7307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.234456][ T7307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.344038][ T7307] team0: Port device team_slave_0 added
[  181.352709][ T7307] team0: Port device team_slave_1 added
[  181.422501][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.429480][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.459534][ T7307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.480908][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.487880][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.536553][ T7307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.616969][ T7307] hsr_slave_0: entered promiscuous mode
[  181.627535][ T7307] hsr_slave_1: entered promiscuous mode
[  181.638558][ T7307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  181.650043][ T7307] Cannot create hsr debugfs directory
[  182.077723][ T3078] usb 1-1: USB disconnect, device number 7
[  182.482854][   T30] audit: type=1400 audit(1749921303.965:293): avc:  denied  { getopt } for  pid=7399 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  182.872458][ T5825] Bluetooth: hci3: command tx timeout
[  183.128939][   T30] audit: type=1400 audit(1749921304.685:294): avc:  denied  { getopt } for  pid=7401 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  183.879349][ T7307] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  183.951153][ T7307] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  184.009711][ T7307] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  184.029210][ T7307] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  184.330542][ T5901] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  184.732368][ T5928] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  184.890368][ T5141] Bluetooth: hci3: command tx timeout
[  184.930340][ T5901] usb 4-1: Using ep0 maxpacket: 8
[  184.944302][ T7446] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  184.951912][ T7446] UDF-fs: Scanning with blocksize 512 failed
[  184.962267][ T7446] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  184.969795][ T7446] UDF-fs: Scanning with blocksize 1024 failed
[  184.978477][ T7446] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  184.986266][ T7446] UDF-fs: Scanning with blocksize 2048 failed
[  185.007396][ T7446] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  185.015000][ T7446] UDF-fs: Scanning with blocksize 4096 failed
[  185.663147][ T5928] usb 1-1: device descriptor read/64, error -71
[  185.730565][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  185.750252][ T5901] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  185.759395][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.766888][ T7307] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.770416][ T5901] usb 4-1: config 0 descriptor??
[  185.843315][ T7307] 8021q: adding VLAN 0 to HW filter on device team0
[  185.858790][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.865976][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.899635][ T6647] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.906833][ T6647] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.936581][ T5141] Bluetooth: hci4: command 0x0406 tx timeout
[  185.937686][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  185.943399][ T5831] Bluetooth: hci2: command 0x0406 tx timeout
[  185.980906][ T5928] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  186.016794][ T5901] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  186.040717][   T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  186.121323][ T5928] usb 1-1: device descriptor read/64, error -71
[  186.210481][   T43] usb 5-1: Using ep0 maxpacket: 16
[  186.217103][   T43] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  186.225667][   T43] usb 5-1: config 0 has no interface number 0
[  186.232151][ T5928] usb usb1-port1: attempt power cycle
[  186.247738][   T43] usb 5-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  186.276087][   T43] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  186.299715][ T7307] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.299985][   T43] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  186.340324][   T43] usb 5-1: Product: syz
[  186.344520][   T43] usb 5-1: SerialNumber: syz
[  186.363060][   T43] usb 5-1: config 0 descriptor??
[  186.375426][ T7307] veth0_vlan: entered promiscuous mode
[  186.382379][   T43] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  186.395114][ T7307] veth1_vlan: entered promiscuous mode
[  186.467872][ T7307] veth0_macvtap: entered promiscuous mode
[  186.487365][ T7307] veth1_macvtap: entered promiscuous mode
[  186.517801][ T7307] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.537030][ T7307] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.549800][ T7307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.559240][ T7307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.569769][ T7307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.585085][ T7307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.603488][ T5928] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  186.641667][ T5928] usb 1-1: device descriptor read/8, error -71
[  186.687723][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.708274][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.755657][ T6647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.769616][ T6647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.880418][ T5928] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  186.964344][ T5928] usb 1-1: device descriptor read/8, error -71
[  187.171035][ T5928] usb usb1-port1: unable to enumerate USB device
[  187.623988][ T5928] usb 4-1: USB disconnect, device number 14
[  188.014901][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.249682][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.194383][ T5866] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  189.205396][ T7511] syz.3.331: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  189.339418][ T7511] CPU: 0 UID: 0 PID: 7511 Comm: syz.3.331 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[  189.339451][ T7511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  189.339463][ T7511] Call Trace:
[  189.339470][ T7511]  <TASK>
[  189.339478][ T7511]  dump_stack_lvl+0x16c/0x1f0
[  189.339515][ T7511]  warn_alloc+0x248/0x3a0
[  189.339542][ T7511]  ? __pfx_warn_alloc+0x10/0x10
[  189.339565][ T7511]  ? __pfx_stack_trace_save+0x10/0x10
[  189.339590][ T7511]  ? stack_depot_save_flags+0x28/0xa40
[  189.339622][ T7511]  ? kasan_save_stack+0x42/0x60
[  189.339644][ T7511]  ? kasan_save_stack+0x33/0x60
[  189.339664][ T7511]  ? kasan_save_track+0x14/0x30
[  189.339686][ T7511]  ? xskq_create+0x52/0x1d0
[  189.339708][ T7511]  ? xsk_setsockopt+0x640/0x840
[  189.339728][ T7511]  ? do_sock_setsockopt+0x224/0x470
[  189.339749][ T7511]  ? xskq_create+0xfb/0x1d0
[  189.339772][ T7511]  __vmalloc_node_range_noprof+0xff5/0x14b0
[  189.339802][ T7511]  ? xskq_create+0xfb/0x1d0
[  189.339831][ T7511]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  189.339859][ T7511]  ? xskq_create+0xfb/0x1d0
[  189.339882][ T7511]  vmalloc_user_noprof+0x9e/0xe0
[  189.339901][ T7511]  ? xskq_create+0xfb/0x1d0
[  189.339926][ T7511]  xskq_create+0xfb/0x1d0
[  189.339951][ T7511]  xsk_setsockopt+0x640/0x840
[  189.339976][ T7511]  ? __pfx_xsk_setsockopt+0x10/0x10
[  189.339997][ T7511]  ? __lock_acquire+0x622/0x1c90
[  189.340031][ T7511]  ? selinux_socket_setsockopt+0x6a/0x80
[  189.340056][ T7511]  ? __pfx_xsk_setsockopt+0x10/0x10
[  189.340078][ T7511]  do_sock_setsockopt+0x224/0x470
[  189.340097][ T7511]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  189.340137][ T7511]  __sys_setsockopt+0x1a0/0x230
[  189.340169][ T7511]  __x64_sys_setsockopt+0xbd/0x160
[  189.340193][ T7511]  ? do_syscall_64+0x91/0x4c0
[  189.340220][ T7511]  ? lockdep_hardirqs_on+0x7c/0x110
[  189.340247][ T7511]  do_syscall_64+0xcd/0x4c0
[  189.340274][ T7511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.340292][ T7511] RIP: 0033:0x7f6621b8e929
[  189.340308][ T7511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.340326][ T7511] RSP: 002b:00007f66229ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  189.340345][ T7511] RAX: ffffffffffffffda RBX: 00007f6621db5fa0 RCX: 00007f6621b8e929
[  189.340358][ T7511] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  189.340370][ T7511] RBP: 00007f6621c10b39 R08: 0000000000000004 R09: 0000000000000000
[  189.340382][ T7511] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.340392][ T7511] R13: 0000000000000000 R14: 00007f6621db5fa0 R15: 00007ffff5371ad8
[  189.340418][ T7511]  </TASK>
[  189.602679][    C0] vkms_vblank_simulate: vblank timer overrun
[  189.898359][ T7511] Mem-Info:
[  189.912898][ T5893] usb 5-1: USB disconnect, device number 5
[  189.987097][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  189.999419][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  190.017174][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  190.027659][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  190.035591][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  190.063826][ T7511] active_anon:8714 inactive_anon:0 isolated_anon:0
[  190.063826][ T7511]  active_file:13161 inactive_file:40588 isolated_file:0
[  190.063826][ T7511]  unevictable:768 dirty:189 writeback:0
[  190.063826][ T7511]  slab_reclaimable:11670 slab_unreclaimable:98260
[  190.063826][ T7511]  mapped:30180 shmem:1362 pagetables:1160
[  190.063826][ T7511]  sec_pagetables:0 bounce:0
[  190.063826][ T7511]  kernel_misc_reclaimable:0
[  190.063826][ T7511]  free:1296142 free_pcp:17564 free_cma:0
[  190.077415][ T7517] lo speed is unknown, defaulting to 1000
[  190.109140][    C0] vkms_vblank_simulate: vblank timer overrun
[  190.110310][ T5866] usb 1-1: Using ep0 maxpacket: 8
[  190.140546][ T7511] Node 0 active_anon:34856kB inactive_anon:0kB active_file:52564kB inactive_file:162148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120640kB dirty:752kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12140kB pagetables:4520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  190.143851][ T5866] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  190.174329][    C0] vkms_vblank_simulate: vblank timer overrun
[  190.175502][ T7511] Node 1 active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  190.245043][ T7516] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  190.246050][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.252387][ T5866] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  190.271797][ T5866] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  190.276934][ T7511] Node 0 
[  190.283752][ T5866] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  190.300803][ T5866] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  190.302994][ T7511] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  190.310663][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.338309][    C0] vkms_vblank_simulate: vblank timer overrun
[  190.340057][ T7511] lowmem_reserve[]: 0 2481 2482 2482 2482
[  190.376863][ T7511] Node 0 DMA32 free:1288152kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34928kB inactive_anon:0kB active_file:52564kB inactive_file:160832kB unevictable:1536kB writepending:848kB present:3129332kB managed:2540624kB mlocked:0kB bounce:0kB free_pcp:34432kB local_pcp:27200kB free_cma:0kB
[  190.437812][ T7511] lowmem_reserve[]: 0 0 1 1 1
[  190.461067][ T7511] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB
[  190.490092][    C0] vkms_vblank_simulate: vblank timer overrun
[  190.550756][ T7511] lowmem_reserve[]: 0 0 0 0 0
[  190.660817][ T7511] Node 1 Normal free:3880456kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:35416kB local_pcp:22360kB free_cma:0kB
[  190.710528][ T5866] usb 1-1: GET_CAPABILITIES returned 0
[  190.784647][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.799747][ T5866] usbtmc 1-1:16.0: can't read capabilities
[  190.827993][ T7511] lowmem_reserve[]: 0 0 0 0 0
[  190.834455][ T7511] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  190.849999][ T7511] Node 0 DMA32: 498*4kB (UME) 842*8kB (UME) 357*16kB (ME) 266*32kB (UME) 397*64kB (UME) 105*128kB (UME) 63*256kB (UM) 28*512kB (UM) 18*1024kB (UME) 7*2048kB (UME) 284*4096kB (M) = 1288296kB
[  190.937887][ T7511] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  190.975360][ T7511] Node 1 Normal: 5*4kB (UME) 3*8kB (E) 11*16kB (UE) 31*32kB (UME) 8*64kB (UME) 3*128kB (UE) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (UM) = 3880508kB
[  190.994861][ T7511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  191.005420][ T7511] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  191.014873][ T7511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  191.024585][ T7511] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  191.034250][ T7511] 55106 total pagecache pages
[  191.035923][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.039009][ T7511] 0 pages in swap cache
[  191.052597][ T7511] Free swap  = 124996kB
[  191.056763][ T7511] Total swap = 124996kB
[  191.060975][ T7511] 2097051 pages RAM
[  191.064896][ T7511] 0 pages HighMem/MovableOnly
[  191.070820][ T7511] 429917 pages reserved
[  191.075126][ T7511] 0 pages cma reserved
[  191.095066][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.104203][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.145856][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.158127][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.167258][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.176360][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.185452][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.194544][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.203649][    C0] vkms_vblank_simulate: vblank timer overrun
[  191.222480][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.231614][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.240707][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.249789][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.258873][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.268006][    C0] vkms_vblank_simulate: vblank timer overrun
[  191.292139][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.301254][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  191.342854][   T43] usb 1-1: USB disconnect, device number 12
[  191.345106][ T7517] chnl_net:caif_netlink_parms(): no params data found
[  191.441263][ T7540] netlink: 'syz.3.336': attribute type 1 has an invalid length.
[  191.467899][   T30] audit: type=1400 audit(1749921313.015:295): avc:  denied  { module_load } for  pid=7535 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  191.844481][   T13] bridge_slave_1: left allmulticast mode
[  191.853648][   T13] bridge_slave_1: left promiscuous mode
[  191.859871][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.886358][   T13] bridge_slave_0: left allmulticast mode
[  191.892127][   T13] bridge_slave_0: left promiscuous mode
[  191.897849][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.090389][ T5820] Bluetooth: hci3: command tx timeout
[  193.172718][   T30] audit: type=1400 audit(1749921314.735:296): avc:  denied  { read } for  pid=7547 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  193.367618][   T30] audit: type=1400 audit(1749921314.925:297): avc:  denied  { mounton } for  pid=7563 comm="syz.4.343" path="/96/file0" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  193.393512][   T30] audit: type=1400 audit(1749921314.925:298): avc:  denied  { read write } for  pid=7563 comm="syz.4.343" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  193.418354][   T30] audit: type=1400 audit(1749921314.925:299): avc:  denied  { open } for  pid=7563 comm="syz.4.343" path="/96/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  193.442591][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  193.461398][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  193.470075][   T30] audit: type=1400 audit(1749921314.975:300): avc:  denied  { unmount } for  pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  193.495183][   T13] bond0 (unregistering): Released all slaves
[  193.510420][ T5866] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  193.660801][ T5866] usb 1-1: Using ep0 maxpacket: 16
[  193.694716][ T5866] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  193.751422][ T5866] usb 1-1: config 0 has no interface number 0
[  193.757509][ T5866] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  193.776955][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  193.783363][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  194.102179][ T7517] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.122477][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.132728][ T7517] bridge_slave_0: entered allmulticast mode
[  194.139539][ T5866] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  194.151181][ T7517] bridge_slave_0: entered promiscuous mode
[  194.169002][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  194.177681][ T5820] Bluetooth: hci3: command tx timeout
[  194.198334][ T5866] usb 1-1: Product: syz
[  194.202847][ T5866] usb 1-1: SerialNumber: syz
[  194.212808][ T5866] usb 1-1: config 0 descriptor??
[  194.220710][ T7517] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.234400][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.242699][ T7517] bridge_slave_1: entered allmulticast mode
[  194.252037][ T5866] usbhid 1-1:0.8: couldn't find an input interrupt endpoint
[  194.261971][ T7517] bridge_slave_1: entered promiscuous mode
[  194.384889][ T7517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.397079][ T7517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.502780][   T13] hsr_slave_0: left promiscuous mode
[  194.509033][   T13] hsr_slave_1: left promiscuous mode
[  194.774191][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.784006][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.802230][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.810031][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.822816][   T30] audit: type=1400 audit(1749921316.375:301): avc:  denied  { bind } for  pid=7580 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  194.859555][   T30] audit: type=1400 audit(1749921316.375:302): avc:  denied  { write } for  pid=7580 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  194.887773][   T13] veth1_macvtap: left promiscuous mode
[  194.897703][   T13] veth0_macvtap: left promiscuous mode
[  194.910564][   T13] veth1_vlan: left promiscuous mode
[  194.918146][   T13] veth0_vlan: left promiscuous mode
[  195.078352][ T7582] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  195.735639][   T13] team0 (unregistering): Port device team_slave_1 removed
[  195.764557][   T13] team0 (unregistering): Port device team_slave_0 removed
[  195.832466][ T7607] misc userio: Invalid payload size
[  196.149632][ T7517] team0: Port device team_slave_0 added
[  196.217152][ T7613] netlink: 136 bytes leftover after parsing attributes in process `syz.3.353'.
[  196.244893][ T7613] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  196.245961][   T30] audit: type=1400 audit(1749921317.805:303): avc:  denied  { append } for  pid=7612 comm="syz.3.353" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  196.289766][ T5820] Bluetooth: hci3: command tx timeout
[  196.317771][ T3078] usb 1-1: USB disconnect, device number 13
[  196.353062][ T7517] team0: Port device team_slave_1 added
[  196.629295][ T7615] 9pnet_virtio: no channels available for device syz
[  196.646298][ T7517] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.646314][ T7517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.646337][ T7517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.651694][ T7517] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.990134][ T7626] ceph: No mds server is up or the cluster is laggy
[  197.149331][ T7517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.175337][ T7517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.176765][ T5893] libceph: connect (1)[c::]:6789 error -101
[  197.176932][ T5893] libceph: mon0 (1)[c::]:6789 connect error
[  197.627037][ T7517] hsr_slave_0: entered promiscuous mode
[  197.676794][ T7517] hsr_slave_1: entered promiscuous mode
[  197.698676][ T7517] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.720593][ T7517] Cannot create hsr debugfs directory
[  198.195659][ T7653] ALSA: mixer_oss: invalid OSS volume 'MON'
[  198.202675][ T7653] overlayfs: failed to resolve './file1': -2
[  198.330700][ T5820] Bluetooth: hci3: command tx timeout
[  199.899116][ T7517] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  199.942653][ T7517] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  199.951042][ T7681] misc userio: Invalid payload size
[  199.960023][ T7517] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  199.973802][ T7517] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  200.362654][ T7517] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.514344][ T7517] 8021q: adding VLAN 0 to HW filter on device team0
[  200.593309][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.600556][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.664602][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.671804][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.854527][   T30] audit: type=1400 audit(1749921322.415:304): avc:  denied  { read } for  pid=7698 comm="syz.4.369" name="btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  200.909253][   T30] audit: type=1400 audit(1749921322.415:305): avc:  denied  { open } for  pid=7698 comm="syz.4.369" path="/dev/btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  201.035125][ T7517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  201.049234][ T7517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  202.551313][   T30] audit: type=1400 audit(1749921324.115:306): avc:  denied  { connect } for  pid=7731 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  202.560949][ T7733] netlink: 108 bytes leftover after parsing attributes in process `syz.3.375'.
[  202.615329][ T7517] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.724652][ T7517] veth0_vlan: entered promiscuous mode
[  202.748189][ T7517] veth1_vlan: entered promiscuous mode
[  203.881672][ T7517] veth0_macvtap: entered promiscuous mode
[  203.889095][ T7517] veth1_macvtap: entered promiscuous mode
[  204.035221][ T7517] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.048700][ T7517] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.100982][ T7517] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.149666][ T7517] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.159206][ T7517] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.167947][ T7517] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.681315][   T30] audit: type=1400 audit(1749921325.885:307): avc:  denied  { write } for  pid=7730 comm="syz.1.374" path="socket:[17321]" dev="sockfs" ino=17321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  204.980585][ T5893] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  204.989619][ T5820] Bluetooth: hci0: unexpected event for opcode 0xff24
[  205.053975][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.100634][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.150558][ T5893] usb 2-1: Using ep0 maxpacket: 8
[  205.189755][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.190374][ T5893] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  205.198672][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.504123][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  205.516374][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  205.531317][ T5893] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  205.585066][ T5893] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  205.630652][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.815643][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.995193][ T5893] usb 2-1: GET_CAPABILITIES returned 0
[  206.001347][ T5893] usbtmc 2-1:16.0: can't read capabilities
[  206.133611][ T5873] usb 2-1: USB disconnect, device number 15
[  206.164256][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.391323][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.521144][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.646480][   T12] bridge_slave_1: left allmulticast mode
[  206.657231][   T12] bridge_slave_1: left promiscuous mode
[  206.664903][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.686921][   T12] bridge_slave_0: left allmulticast mode
[  206.695575][   T12] bridge_slave_0: left promiscuous mode
[  206.701400][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.421460][   T43] libceph: connect (1)[c::]:6789 error -101
[  207.452316][ T7818] ceph: No mds server is up or the cluster is laggy
[  207.797601][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  208.134366][ T5820] Bluetooth: hci4: unexpected event for opcode 0xff24
[  208.327141][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  208.349989][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  208.359376][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  208.376380][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  208.395477][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  208.770042][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.789454][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.800062][   T12] bond0 (unregistering): Released all slaves
[  208.854095][ T7832] lo speed is unknown, defaulting to 1000
[  208.920535][ T5893] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  209.090715][ T5893] usb 4-1: Using ep0 maxpacket: 8
[  209.110350][ T5893] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  209.135999][ T5893] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  209.152135][ T5893] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  209.180554][ T5893] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  209.202165][ T5893] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  209.211722][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.443538][ T5893] usb 4-1: GET_CAPABILITIES returned 0
[  209.449082][ T5893] usbtmc 4-1:16.0: can't read capabilities
[  209.516196][   T12] hsr_slave_0: left promiscuous mode
[  209.535685][   T12] hsr_slave_1: left promiscuous mode
[  209.551185][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.563198][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.591207][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.598654][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.645149][ T5873] usb 4-1: USB disconnect, device number 15
[  209.700195][   T12] veth1_macvtap: left promiscuous mode
[  209.713945][   T12] veth0_macvtap: left promiscuous mode
[  209.719680][   T12] veth1_vlan: left promiscuous mode
[  209.727454][   T12] veth0_vlan: left promiscuous mode
[  210.530509][ T5820] Bluetooth: hci3: command tx timeout
[  211.666111][ T3078] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  211.810538][ T5820] Bluetooth: hci0: unexpected event for opcode 0xff24
[  211.820370][ T3078] usb 4-1: Using ep0 maxpacket: 8
[  211.847788][ T3078] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  211.891173][ T3078] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  211.921433][ T3078] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  211.936107][ T3078] usb 4-1: Product: syz
[  211.950247][ T3078] usb 4-1: Manufacturer: syz
[  211.958019][ T3078] usb 4-1: SerialNumber: syz
[  211.991737][   T12] team0 (unregistering): Port device team_slave_1 removed
[  212.025710][   T12] team0 (unregistering): Port device team_slave_0 removed
[  212.240521][ T7903] siw: device registration error -23
[  212.282334][ T3078] usb 4-1: palm_os_3_probe - error -110 getting connection information
[  212.292265][ T3078] visor 4-1:1.0: probe with driver visor failed with error -110
[  212.432541][ T7832] chnl_net:caif_netlink_parms(): no params data found
[  212.555017][ T7832] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.564408][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.620507][ T5820] Bluetooth: hci3: command tx timeout
[  212.665611][ T7832] bridge_slave_0: entered allmulticast mode
[  212.687035][ T7832] bridge_slave_0: entered promiscuous mode
[  212.716443][ T7832] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.756453][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.766485][ T7832] bridge_slave_1: entered allmulticast mode
[  212.789780][ T7832] bridge_slave_1: entered promiscuous mode
[  213.064286][ T7832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.096326][ T7832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.190166][ T7832] team0: Port device team_slave_0 added
[  213.217963][ T7832] team0: Port device team_slave_1 added
[  213.267286][ T7832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.284935][ T7832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.346121][ T7832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.378234][ T7832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.385529][ T7832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.411698][ T7832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.509939][ T7832] hsr_slave_0: entered promiscuous mode
[  213.520401][ T7832] hsr_slave_1: entered promiscuous mode
[  213.528534][ T7832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  213.620697][ T7832] Cannot create hsr debugfs directory
[  214.650347][ T5820] Bluetooth: hci3: command tx timeout
[  214.869046][   T30] audit: type=1400 audit(1749921336.425:308): avc:  denied  { unmount } for  pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  214.913710][ T3078] usb 4-1: USB disconnect, device number 16
[  214.978427][ T7950] syz.0.417: attempt to access beyond end of device
[  214.978427][ T7950] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0
[  215.015822][ T7950] gfs2: error -5 reading superblock
[  217.100309][ T5820] Bluetooth: hci3: command tx timeout
[  217.827919][ T7832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  217.862749][ T7832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  217.946409][ T7832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  217.974940][   T30] audit: type=1400 audit(1749921339.525:309): avc:  denied  { write } for  pid=7994 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  217.994677][    C1] vkms_vblank_simulate: vblank timer overrun
[  218.022145][ T7832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  218.050199][ T7996] warning: `syz.0.431' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  218.067681][   T30] audit: type=1326 audit(1749921339.535:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.0.431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f065618e929 code=0x0
[  218.609256][   T30] audit: type=1400 audit(1749921339.595:311): avc:  denied  { ioctl } for  pid=7994 comm="syz.0.431" path="socket:[19779]" dev="sockfs" ino=19779 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  218.649391][ T8012] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.680510][ T8012] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.701462][ T8012] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.728081][ T8012] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.892556][ T8018] warn_alloc: 1 callbacks suppressed
[  218.892573][ T8018] syz.4.424: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  218.958206][ T7832] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.974486][ T8018] CPU: 1 UID: 0 PID: 8018 Comm: syz.4.424 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[  218.974514][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  218.974525][ T8018] Call Trace:
[  218.974532][ T8018]  <TASK>
[  218.974540][ T8018]  dump_stack_lvl+0x16c/0x1f0
[  218.974572][ T8018]  warn_alloc+0x248/0x3a0
[  218.974598][ T8018]  ? __pfx_warn_alloc+0x10/0x10
[  218.974618][ T8018]  ? __pfx_stack_trace_save+0x10/0x10
[  218.974640][ T8018]  ? stack_depot_save_flags+0x28/0xa40
[  218.974671][ T8018]  ? kasan_save_stack+0x42/0x60
[  218.974693][ T8018]  ? kasan_save_stack+0x33/0x60
[  218.974714][ T8018]  ? kasan_save_track+0x14/0x30
[  218.974736][ T8018]  ? xskq_create+0x52/0x1d0
[  218.974758][ T8018]  ? xsk_setsockopt+0x640/0x840
[  218.974785][ T8018]  ? do_sock_setsockopt+0x224/0x470
[  218.974806][ T8018]  ? xskq_create+0xfb/0x1d0
[  218.974832][ T8018]  __vmalloc_node_range_noprof+0xff5/0x14b0
[  218.974865][ T8018]  ? xskq_create+0xfb/0x1d0
[  218.974898][ T8018]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  218.974929][ T8018]  ? xskq_create+0xfb/0x1d0
[  218.974952][ T8018]  vmalloc_user_noprof+0x9e/0xe0
[  218.974971][ T8018]  ? xskq_create+0xfb/0x1d0
[  218.974995][ T8018]  xskq_create+0xfb/0x1d0
[  218.975021][ T8018]  xsk_setsockopt+0x640/0x840
[  218.975045][ T8018]  ? __pfx_xsk_setsockopt+0x10/0x10
[  218.975065][ T8018]  ? __lock_acquire+0x622/0x1c90
[  218.975101][ T8018]  ? selinux_socket_setsockopt+0x6a/0x80
[  218.975126][ T8018]  ? __pfx_xsk_setsockopt+0x10/0x10
[  218.975148][ T8018]  do_sock_setsockopt+0x224/0x470
[  218.975165][ T8018]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  218.975204][ T8018]  __sys_setsockopt+0x1a0/0x230
[  218.975235][ T8018]  __x64_sys_setsockopt+0xbd/0x160
[  218.975260][ T8018]  ? do_syscall_64+0x91/0x4c0
[  218.975287][ T8018]  ? lockdep_hardirqs_on+0x7c/0x110
[  218.975313][ T8018]  do_syscall_64+0xcd/0x4c0
[  218.975342][ T8018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.975361][ T8018] RIP: 0033:0x7f130498e929
[  218.975376][ T8018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.975394][ T8018] RSP: 002b:00007f130571b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  218.975412][ T8018] RAX: ffffffffffffffda RBX: 00007f1304bb5fa0 RCX: 00007f130498e929
[  218.975424][ T8018] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  218.975435][ T8018] RBP: 00007f1304a10b39 R08: 0000000000000004 R09: 0000000000000000
[  218.975446][ T8018] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.975457][ T8018] R13: 0000000000000000 R14: 00007f1304bb5fa0 R15: 00007ffece7b9728
[  218.975482][ T8018]  </TASK>
[  218.975635][ T8018] Mem-Info:
[  219.155922][ T7832] 8021q: adding VLAN 0 to HW filter on device team0
[  219.260422][ T8018] active_anon:12353 inactive_anon:0 isolated_anon:0
[  219.260422][ T8018]  active_file:15145 inactive_file:40600 isolated_file:0
[  219.260422][ T8018]  unevictable:768 dirty:202 writeback:0
[  219.260422][ T8018]  slab_reclaimable:11684 slab_unreclaimable:98595
[  219.260422][ T8018]  mapped:33750 shmem:4923 pagetables:1214
[  219.260422][ T8018]  sec_pagetables:0 bounce:0
[  219.260422][ T8018]  kernel_misc_reclaimable:0
[  219.260422][ T8018]  free:1281033 free_pcp:26757 free_cma:0
[  219.366538][ T8025] netlink: 36 bytes leftover after parsing attributes in process `syz.0.434'.
[  219.381313][ T8025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.434'.
[  219.387435][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.397387][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.407030][ T8018] Node 0 active_anon:58216kB inactive_anon:0kB active_file:60500kB inactive_file:162196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132248kB dirty:800kB writeback:0kB shmem:26852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12196kB pagetables:4624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  219.409474][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.447693][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.455509][ T8025] netlink: 36 bytes leftover after parsing attributes in process `syz.0.434'.
[  219.666399][ T8025] netlink: 36 bytes leftover after parsing attributes in process `syz.0.434'.
[  219.678913][ T8020] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  219.693625][ T8018] Node 1 active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  219.807820][ T8018] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  219.901320][ T8018] lowmem_reserve[]: 0 2481 2482 2482 2482
[  219.907078][ T8018] Node 0 DMA32 free:1226448kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49488kB inactive_anon:0kB active_file:60500kB inactive_file:160880kB unevictable:1536kB writepending:896kB present:3129332kB managed:2540624kB mlocked:0kB bounce:0kB free_pcp:74384kB local_pcp:27272kB free_cma:0kB
[  219.959883][ T8018] lowmem_reserve[]: 0 0 1 1 1
[  219.970013][ T8018] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB
[  220.009656][ T8018] lowmem_reserve[]: 0 0 0 0 0
[  220.015744][ T8018] Node 1 Normal free:3882524kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:33400kB local_pcp:13056kB free_cma:0kB
[  220.183023][ T8018] lowmem_reserve[]: 0 0 0 0 0
[  220.187797][ T8018] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  220.230340][ T8018] Node 0 DMA32: 2134*4kB (UME) 1195*8kB (UME) 546*16kB (UM) 344*32kB (UME) 209*64kB (UME) 45*128kB (UME) 30*256kB (UM) 26*512kB (UM) 7*1024kB (UME) 5*2048kB (ME) 278*4096kB (M) = 1234064kB
[  220.255833][   T30] audit: type=1400 audit(1749921341.815:312): avc:  denied  { write } for  pid=8048 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  220.284419][ T8018] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  220.310038][ T7832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.362244][ T8018] Node 1 Normal: 5*4kB (UME) 3*8kB (E) 11*16kB (UE) 30*32kB (UME) 8*64kB (UME) 3*128kB (UE) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (UM) = 3882524kB
[  220.423416][ T8018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  220.458539][ T8018] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  220.487987][ T8018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  220.498696][ T8018] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  220.510733][ T8018] 57604 total pagecache pages
[  220.515422][ T8018] 0 pages in swap cache
[  220.519662][ T8018] Free swap  = 124996kB
[  220.524756][ T8018] Total swap = 124996kB
[  220.529773][ T8018] 2097051 pages RAM
[  220.539423][ T8018] 0 pages HighMem/MovableOnly
[  220.554995][ T8018] 429917 pages reserved
[  220.566489][ T8018] 0 pages cma reserved
[  221.276479][ T8067] : entered promiscuous mode
[  221.658510][ T7832] veth0_vlan: entered promiscuous mode
[  221.669460][ T7832] veth1_vlan: entered promiscuous mode
[  222.875121][ T8079] ALSA: mixer_oss: invalid OSS volume 'MON'
[  222.906755][ T7832] veth0_macvtap: entered promiscuous mode
[  222.906998][ T8079] overlayfs: failed to resolve './file1': -2
[  222.927187][ T7832] veth1_macvtap: entered promiscuous mode
[  223.063772][ T7832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.245179][ T7832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.289638][ T7832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.320425][ T7832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.494567][ T8094] misc userio: Invalid payload size
[  223.577161][ T7832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.724960][ T7832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.043617][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.106766][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.122886][ T8109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8109 comm=syz.1.449
[  224.144780][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.321899][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.986975][ T6134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.146168][ T6134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.266202][ T6134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.355950][ T6134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.511545][ T6134] bridge_slave_1: left allmulticast mode
[  226.518025][ T6134] bridge_slave_1: left promiscuous mode
[  226.531099][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.545053][ T6134] bridge_slave_0: left allmulticast mode
[  226.555632][ T6134] bridge_slave_0: left promiscuous mode
[  226.563019][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.899800][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.976452][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  227.029118][ T6134] bond0 (unregistering): Released all slaves
[  227.996611][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  228.007359][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  228.018020][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  228.027492][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  228.035545][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  229.072316][ T8194] lo speed is unknown, defaulting to 1000
[  229.247295][   T30] audit: type=1400 audit(1749921350.805:313): avc:  denied  { name_connect } for  pid=8196 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  229.364762][   T30] audit: type=1400 audit(1749921350.905:314): avc:  denied  { firmware_load } for  pid=8196 comm="syz.1.460" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  229.406281][ T8212] ALSA: mixer_oss: invalid OSS volume 'MON'
[  229.413197][ T8212] overlayfs: failed to resolve './file1': -2
[  229.629254][ T8199] syz.1.460 (8199) used greatest stack depth: 18136 bytes left
[  230.129719][ T5141] Bluetooth: hci3: command tx timeout
[  230.256484][ T6134] hsr_slave_0: left promiscuous mode
[  230.516219][ T6134] hsr_slave_1: left promiscuous mode
[  230.539651][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.574234][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.601874][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.717935][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.759355][ T6134] veth1_macvtap: left promiscuous mode
[  230.774449][ T6134] veth0_macvtap: left promiscuous mode
[  230.780114][ T6134] veth1_vlan: left promiscuous mode
[  230.805174][ T6134] veth0_vlan: left promiscuous mode
[  231.839070][ T8243] misc userio: Invalid payload size
[  232.019616][ T8259] netlink: 88 bytes leftover after parsing attributes in process `syz.4.473'.
[  232.170373][ T5141] Bluetooth: hci3: command tx timeout
[  233.707153][ T6134] team0 (unregistering): Port device team_slave_1 removed
[  233.740819][ T6134] team0 (unregistering): Port device team_slave_0 removed
[  234.343943][ T5141] Bluetooth: hci3: command tx timeout
[  234.609278][ T8194] chnl_net:caif_netlink_parms(): no params data found
[  234.809979][ T8194] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.817685][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.827866][ T8194] bridge_slave_0: entered allmulticast mode
[  234.842323][ T8194] bridge_slave_0: entered promiscuous mode
[  234.856683][ T8194] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.875140][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.883488][ T8194] bridge_slave_1: entered allmulticast mode
[  234.895345][ T8194] bridge_slave_1: entered promiscuous mode
[  235.064735][ T8194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.109008][ T8194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.822604][ T8194] team0: Port device team_slave_0 added
[  235.829895][ T8194] team0: Port device team_slave_1 added
[  235.921304][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.932366][   T30] audit: type=1800 audit(1749921357.495:315): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.487" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0
[  236.050975][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.116647][ T8194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.190909][ T8194] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.197883][ T8194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.223750][    C0] vkms_vblank_simulate: vblank timer overrun
[  236.248948][ T8194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.348595][ T8194] hsr_slave_0: entered promiscuous mode
[  236.484853][ T5141] Bluetooth: hci3: command tx timeout
[  236.857139][ T8194] hsr_slave_1: entered promiscuous mode
[  236.863745][ T8194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.873092][ T8194] Cannot create hsr debugfs directory
[  239.307120][ T8379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8379 comm=syz.3.500
[  240.252721][ T5901] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  241.203439][ T5901] usb 1-1: Using ep0 maxpacket: 8
[  241.224058][ T5901] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  241.246242][ T5901] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 7
[  241.287376][ T5901] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  241.306502][ T5901] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  241.326973][ T5901] usb 1-1: Product: syz
[  241.332662][ T5901] usb 1-1: Manufacturer: syz
[  241.337390][ T5901] usb 1-1: SerialNumber: syz
[  241.594505][ T5928] usb 1-1: USB disconnect, device number 14
[  241.699485][ T8194] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  241.731735][ T8194] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  241.758267][ T8194] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  242.011110][ T8405] misc userio: Invalid payload size
[  242.034380][ T8194] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  242.447633][ T8194] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.503287][ T8194] 8021q: adding VLAN 0 to HW filter on device team0
[  242.545747][ T6647] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.552906][ T6647] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.621050][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.628214][ T6646] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.635023][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'.
[  243.657600][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'.
[  243.693373][   T30] audit: type=1400 audit(1749921365.255:316): avc:  denied  { remount } for  pid=8453 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  243.948550][   T30] audit: type=1400 audit(1749921365.465:317): avc:  denied  { map } for  pid=8453 comm="syz.0.512" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  244.587943][   T30] audit: type=1400 audit(1749921365.465:318): avc:  denied  { execute } for  pid=8453 comm="syz.0.512" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  244.734208][ T8470] random: crng reseeded on system resumption
[  245.120757][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'.
[  245.322189][ T8194] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.397826][ T8488] netlink: 'syz.0.522': attribute type 9 has an invalid length.
[  245.600625][   T30] audit: type=1400 audit(1749921367.135:319): avc:  denied  { mount } for  pid=8485 comm="syz.0.522" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  246.019277][ T8194] veth0_vlan: entered promiscuous mode
[  246.045584][ T8194] veth1_vlan: entered promiscuous mode
[  246.525090][   T30] audit: type=1400 audit(1749921368.085:320): avc:  denied  { unmount } for  pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  246.553656][ T8194] veth0_macvtap: entered promiscuous mode
[  246.577179][ T8194] veth1_macvtap: entered promiscuous mode
[  246.600598][ T8194] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.613751][ T8194] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.759329][ T8194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.806128][ T8194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.845820][ T8194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.866768][ T8194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.124494][   T30] audit: type=1400 audit(1749921368.635:321): avc:  denied  { open } for  pid=8482 comm="syz.3.521" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  248.020595][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  248.035899][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.075672][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  248.084631][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.452467][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'.
[  248.611171][ T8548] random: crng reseeded on system resumption
[  249.032133][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.145498][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.240036][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.318935][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.466368][   T13] bridge_slave_1: left allmulticast mode
[  249.475074][   T13] bridge_slave_1: left promiscuous mode
[  249.482711][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.493786][   T13] bridge_slave_0: left allmulticast mode
[  249.499439][   T13] bridge_slave_0: left promiscuous mode
[  249.507512][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.846427][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.863176][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.874097][   T13] bond0 (unregistering): Released all slaves
[  250.187825][   T30] audit: type=1400 audit(1749921371.745:322): avc:  denied  { write } for  pid=8589 comm="syz.1.536" name="protocols" dev="proc" ino=4026533095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  250.254668][ T8597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8597 comm=syz.4.538
[  251.273664][ T5893] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  251.287256][   T13] hsr_slave_0: left promiscuous mode
[  251.340371][   T13] hsr_slave_1: left promiscuous mode
[  251.346532][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.359507][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.431159][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.482276][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.666982][   T13] veth1_macvtap: left promiscuous mode
[  251.672566][   T13] veth0_macvtap: left promiscuous mode
[  251.678989][   T13] veth1_vlan: left promiscuous mode
[  251.701685][   T13] veth0_vlan: left promiscuous mode
[  251.800376][ T5893] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  251.826659][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  251.830307][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  251.856213][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  251.870448][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  251.902454][ T5893] usb 4-1: Product: syz
[  251.902478][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  251.906638][ T5893] usb 4-1: Manufacturer: syz
[  251.926847][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.963548][ T5893] usb 4-1: SerialNumber: syz
[  251.999338][ T5893] usb 4-1: config 0 descriptor??
[  252.025184][ T5893] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  252.079672][ T5893] dvb-usb: bulk message failed: -22 (2/0)
[  252.146212][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  252.185553][ T5893] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  252.200354][ T5893] usb 4-1: media controller created
[  252.223212][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  252.255497][ T5820] Bluetooth: hci1: unexpected event for opcode 0x0c57
[  252.264716][ T8610] loop2: detected capacity change from 0 to 7
[  252.286218][ T8610] Dev loop2: unable to read RDB block 7
[  252.318878][ T8610]  loop2: AHDI p1 p2 p3
[  252.350464][ T8610] loop2: partition table partially beyond EOD, truncated
[  252.370519][ T8610] loop2: p1 start 1601398130 is beyond EOD, truncated
[  252.393937][ T8610] loop2: p2 start 1702059890 is beyond EOD, truncated
[  252.521692][ T5893] cxusb: set interface failed
[  252.540672][ T5893] dvb-usb: bulk message failed: -22 (1/0)
[  252.567386][ T8635] random: crng reseeded on system resumption
[  252.630495][ T5893] DVB: Unable to find symbol mt352_attach()
[  252.645115][ T5893] dvb-usb: bulk message failed: -22 (5/0)
[  252.665505][ T5893] zl10353_read_register: readreg error (reg=127, ret==-121)
[  252.674356][ T5893] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  252.761969][ T5893] rc_core: IR keymap rc-dvico-mce not found
[  252.768294][ T5893] Registered IR keymap rc-empty
[  252.784202][ T5893] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  252.796703][ T5893] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input13
[  252.812426][ T5893] dvb-usb: schedule remote query interval to 100 msecs.
[  252.819396][ T5893] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  252.840477][ T5893] usb 4-1: USB disconnect, device number 17
[  252.910666][ T5901] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  252.934088][   T13] team0 (unregistering): Port device team_slave_1 removed
[  252.949120][ T5893] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  253.024747][   T13] team0 (unregistering): Port device team_slave_0 removed
[  253.074616][ T5901] usb 5-1: Using ep0 maxpacket: 8
[  253.083546][ T5901] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  253.096158][ T5901] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  253.107160][ T5901] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  253.115650][ T5901] usb 5-1: Product: syz
[  253.119883][ T5901] usb 5-1: Manufacturer: syz
[  253.124826][ T5901] usb 5-1: SerialNumber: syz
[  253.610867][ T5901] usb 5-1: palm_os_3_probe - error -110 getting connection information
[  253.681628][ T8654] siw: device registration error -23
[  254.012069][ T5820] Bluetooth: hci3: command tx timeout
[  254.182091][ T8653] program syz.0.551 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  254.209774][ T5901] visor 5-1:1.0: probe with driver visor failed with error -110
[  254.570454][ T5901] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  254.766190][ T5901] usb 1-1: config 129 has an invalid interface number: 138 but max is 3
[  254.826809][ T5901] usb 1-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[  254.878926][ T5901] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 4
[  254.939517][ T5901] usb 1-1: config 129 has no interface number 0
[  254.976569][ T5901] usb 1-1: config 129 has no interface number 1
[  255.016537][ T5901] usb 1-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10
[  255.087394][ T5901] usb 1-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[  255.148473][ T5901] usb 1-1: config 129 interface 138 has no altsetting 0
[  255.171410][ T5901] usb 1-1: config 129 interface 2 has no altsetting 0
[  255.210021][ T5901] usb 1-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f
[  255.222537][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  255.234265][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.258853][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  255.288175][ T5901] usb 1-1: Product: 臮휯킄뇋経荥ሡ嬩緪뾪ｰ鷔惎孺荄韈梚䤃뷾ⷺ偰䘽Ṽ˟型笻拡쮂쳐깒ㆅ夅㼿觤䝨☕ι猄⺴턙뛰漆ጒ⇧万⑓ꦛ焈뇝玺鱛缌㣑蒯疣۱鉻賴ꊢ븚혽㛬苼눩倕鮊ႆᏝ▛鱧짮ﶭ╴䶦簿绰鶐钬㎆
[  255.385626][ T5901] usb 1-1: Manufacturer: Ű为脜䔗෥䄖┾鹮༧Ѫせ䅌ຣแꪧ
[  255.423874][ T5901] usb 1-1: SerialNumber: 荾娳뙍镱寥룻勚쓠黜箿蕴瘬첶⳴ः낍燕㵂젆悸乜䪣뜄蘻꣢몹贪ቛ濪戴⾙瘈凈Գ쓼뷞⻔泭Ⴉ鋜뺤詝ᚓ✏溪㯈ⷕ껭෡٠볾렦督幐祖ʱग़⪮ੲ栮㽠闑磎퀼䤬暆蓿踏灈ᯘ鹆쟁儡쐿句쨃몌
[  255.857337][ T8656] No control pipe specified
[  256.090892][ T5820] Bluetooth: hci3: command tx timeout
[  256.254228][ T5901] usb 1-1: USB disconnect, device number 15
[  256.268498][ T8624] lo speed is unknown, defaulting to 1000
[  256.332707][ T5893] usb 5-1: USB disconnect, device number 6
[  257.051167][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'.
[  257.357781][ T8681] syzkaller0 speed is unknown, defaulting to 1000
[  257.436557][ T8695] loop6: detected capacity change from 0 to 524287999
[  257.615097][ T8681] syzkaller0 speed is unknown, defaulting to 1000
[  257.736494][ T8683] misc userio: Invalid payload size
[  257.845073][ T8681] syzkaller0 speed is unknown, defaulting to 1000
[  257.888928][ T8624] chnl_net:caif_netlink_parms(): no params data found
[  258.170610][ T5820] Bluetooth: hci3: command tx timeout
[  258.351543][ T8624] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.358686][ T8624] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.402493][ T8624] bridge_slave_0: entered allmulticast mode
[  258.420074][ T8624] bridge_slave_0: entered promiscuous mode
[  258.432311][ T8624] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.439505][ T8624] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.529780][ T8624] bridge_slave_1: entered allmulticast mode
[  258.615606][ T8624] bridge_slave_1: entered promiscuous mode
[  258.837353][ T8681] infiniband syz1: set down
[  258.882504][ T8681] infiniband syz1: added syzkaller0
[  258.898239][ T8719] syz.1.564: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  258.924817][ T8681] syz1: rxe_create_cq: returned err = -12
[  258.948432][ T8681] infiniband syz1: Couldn't create ib_mad CQ
[  258.957946][ T8719] CPU: 0 UID: 0 PID: 8719 Comm: syz.1.564 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[  258.957974][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  258.957986][ T8719] Call Trace:
[  258.957993][ T8719]  <TASK>
[  258.958001][ T8719]  dump_stack_lvl+0x16c/0x1f0
[  258.958033][ T8719]  warn_alloc+0x248/0x3a0
[  258.958060][ T8719]  ? __pfx_warn_alloc+0x10/0x10
[  258.958084][ T8719]  ? __pfx_stack_trace_save+0x10/0x10
[  258.958109][ T8719]  ? stack_depot_save_flags+0x28/0xa40
[  258.958142][ T8719]  ? kasan_save_stack+0x42/0x60
[  258.958166][ T8719]  ? kasan_save_stack+0x33/0x60
[  258.958187][ T8719]  ? kasan_save_track+0x14/0x30
[  258.958209][ T8719]  ? xskq_create+0x52/0x1d0
[  258.958231][ T8719]  ? xsk_setsockopt+0x640/0x840
[  258.958251][ T8719]  ? do_sock_setsockopt+0x224/0x470
[  258.958271][ T8719]  ? xskq_create+0xfb/0x1d0
[  258.958294][ T8719]  __vmalloc_node_range_noprof+0xff5/0x14b0
[  258.958333][ T8719]  ? xskq_create+0xfb/0x1d0
[  258.958365][ T8719]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  258.958400][ T8719]  ? xskq_create+0xfb/0x1d0
[  258.958424][ T8719]  vmalloc_user_noprof+0x9e/0xe0
[  258.958443][ T8719]  ? xskq_create+0xfb/0x1d0
[  258.958467][ T8719]  xskq_create+0xfb/0x1d0
[  258.958494][ T8719]  xsk_setsockopt+0x640/0x840
[  258.958518][ T8719]  ? __pfx_xsk_setsockopt+0x10/0x10
[  258.958539][ T8719]  ? __lock_acquire+0x622/0x1c90
[  258.958573][ T8719]  ? selinux_socket_setsockopt+0x6a/0x80
[  258.958598][ T8719]  ? __pfx_xsk_setsockopt+0x10/0x10
[  258.958621][ T8719]  do_sock_setsockopt+0x224/0x470
[  258.958643][ T8719]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  258.958682][ T8719]  __sys_setsockopt+0x1a0/0x230
[  258.958714][ T8719]  __x64_sys_setsockopt+0xbd/0x160
[  258.958738][ T8719]  ? do_syscall_64+0x91/0x4c0
[  258.958765][ T8719]  ? lockdep_hardirqs_on+0x7c/0x110
[  258.958791][ T8719]  do_syscall_64+0xcd/0x4c0
[  258.958821][ T8719]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.958839][ T8719] RIP: 0033:0x7fc5cc58e929
[  258.958855][ T8719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.958873][ T8719] RSP: 002b:00007fc5cd3e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  258.958891][ T8719] RAX: ffffffffffffffda RBX: 00007fc5cc7b5fa0 RCX: 00007fc5cc58e929
[  258.958902][ T8719] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  258.958913][ T8719] RBP: 00007fc5cc610b39 R08: 0000000000000004 R09: 0000000000000000
[  258.958924][ T8719] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  258.958934][ T8719] R13: 0000000000000000 R14: 00007fc5cc7b5fa0 R15: 00007ffeafb6b968
[  258.958959][ T8719]  </TASK>
[  258.958987][ T8719] Mem-Info:
[  259.226716][ T8719] active_anon:11829 inactive_anon:0 isolated_anon:0
[  259.226716][ T8719]  active_file:15145 inactive_file:40641 isolated_file:0
[  259.226716][ T8719]  unevictable:768 dirty:281 writeback:6
[  259.226716][ T8719]  slab_reclaimable:11953 slab_unreclaimable:100302
[  259.226716][ T8719]  mapped:33442 shmem:4256 pagetables:1291
[  259.226716][ T8719]  sec_pagetables:0 bounce:0
[  259.226716][ T8719]  kernel_misc_reclaimable:0
[  259.226716][ T8719]  free:1284102 free_pcp:22857 free_cma:0
[  259.274835][ T8719] Node 0 active_anon:47316kB inactive_anon:0kB active_file:60500kB inactive_file:162360kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133688kB dirty:1120kB writeback:24kB shmem:15488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12108kB pagetables:5044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  259.310584][ T8719] Node 1 active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  259.370720][ T8681] infiniband syz1: Couldn't open port 1
[  259.378681][ T8719] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  259.493095][ T8681] RDS/IB: syz1: added
[  259.506807][ T8681] smc: adding ib device syz1 with port count 1
[  259.513798][ T8719] lowmem_reserve[]: 0 2481 2482 2482 2482
[  259.520654][ T8681] smc:    ib device syz1 port 1 has pnetid 
[  259.528663][ T8719] Node 0 DMA32 free:1238692kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47292kB inactive_anon:0kB active_file:60500kB inactive_file:161044kB unevictable:1536kB writepending:1092kB present:3129332kB managed:2540624kB mlocked:0kB bounce:0kB free_pcp:56180kB local_pcp:27360kB free_cma:0kB
[  259.995945][   T30] audit: type=1400 audit(1749921381.495:323): avc:  denied  { create } for  pid=8705 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  260.015454][ T8719] lowmem_reserve[]: 0 0 1 1 1
[  260.030524][ T8719] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB
[  260.060677][ T5901] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  260.075973][ T5880] syzkaller0 speed is unknown, defaulting to 1000
[  260.088347][ T8624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.098464][ T8681] syzkaller0 speed is unknown, defaulting to 1000
[  260.134615][ T8719] lowmem_reserve[]: 0 0 0 0 0
[  260.140706][ T8722] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  260.140867][ T8719] Node 1 Normal free:3885496kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:30404kB local_pcp:13056kB free_cma:0kB
[  260.183604][ T8624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.210327][ T5901] usb 4-1: Using ep0 maxpacket: 8
[  260.220670][ T5901] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  260.239040][ T5866] syzkaller0 speed is unknown, defaulting to 1000
[  260.251537][ T8719] lowmem_reserve[]: 0 0 0 0 0
[  260.258229][ T5820] Bluetooth: hci3: command tx timeout
[  260.279072][ T8719] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  260.292333][ T5901] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  260.301550][ T5901] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  260.309619][ T5901] usb 4-1: Product: syz
[  260.320491][ T5901] usb 4-1: Manufacturer: syz
[  260.327994][ T5901] usb 4-1: SerialNumber: syz
[  260.336804][ T8624] team0: Port device team_slave_0 added
[  260.375121][ T8624] team0: Port device team_slave_1 added
[  260.390578][ T8719] Node 0 DMA32: 59*4kB (ME) 24*8kB (M) 210*16kB (M) 183*32kB (UME) 364*64kB (UM) 105*128kB (UME) 70*256kB (UM) 35*512kB (UM) 11*1024kB (UME) 5*2048kB (UME) 277*4096kB (M) = 1238316kB
[  260.410820][ T8719] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  260.425993][ T8719] Node 1 Normal: 103*4kB (UME) 4*8kB (UE) 11*16kB (UE) 30*32kB (UME) 9*64kB (UME) 3*128kB (UE) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (UM) = 3885548kB
[  260.444630][ T8719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  260.460368][ T8719] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  260.469874][ T8719] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  260.513385][ T8719] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  260.533633][ T8719] 57928 total pagecache pages
[  260.538957][ T8719] 0 pages in swap cache
[  260.573358][ T8624] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.581289][ T8719] Free swap  = 124996kB
[  260.680171][ T5901] usb 4-1: palm_os_3_probe - error -110 getting connection information
[  260.688867][ T8624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.719317][ T8719] Total swap = 124996kB
[  260.719341][ T5901] visor 4-1:1.0: probe with driver visor failed with error -110
[  260.772263][ T8624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.813138][ T8719] 2097051 pages RAM
[  260.817001][ T8719] 0 pages HighMem/MovableOnly
[  260.878865][ T8719] 429917 pages reserved
[  261.037031][ T8719] 0 pages cma reserved
[  261.069107][ T8624] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.224326][ T8624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.474457][ T8624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.527237][ T8681] syzkaller0 speed is unknown, defaulting to 1000
[  261.690074][ T8624] hsr_slave_0: entered promiscuous mode
[  261.789566][ T8624] hsr_slave_1: entered promiscuous mode
[  261.819916][ T8624] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  261.828190][ T8624] Cannot create hsr debugfs directory
[  262.331590][ T8681] syzkaller0 speed is unknown, defaulting to 1000
[  263.097565][   T30] audit: type=1400 audit(1749921384.655:324): avc:  denied  { create } for  pid=8762 comm="syz.1.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  263.145285][ T8681] syzkaller0 speed is unknown, defaulting to 1000
[  263.200320][   T30] audit: type=1400 audit(1749921384.685:325): avc:  denied  { connect } for  pid=8762 comm="syz.1.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  263.865115][ T8681] syzkaller0 speed is unknown, defaulting to 1000
[  264.563386][ T8734] siw: device registration error -23
[  264.730509][   T43] usb 4-1: USB disconnect, device number 18
[  266.323021][ T8823] ceph: No mds server is up or the cluster is laggy
[  266.343635][ T5893] libceph: connect (1)[c::]:6789 error -101
[  266.347088][ T5893] libceph: mon0 (1)[c::]:6789 connect error
[  266.410543][   T30] audit: type=1804 audit(1749921387.795:326): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.577" name="/newroot/154/bus/bus" dev="overlay" ino=827 res=1 errno=0
[  266.639735][   T30] audit: type=1804 audit(1749921388.195:327): pid=8812 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.577" name="/newroot/154/bus/bus" dev="overlay" ino=827 res=1 errno=0
[  267.184087][   T30] audit: type=1400 audit(1749921388.745:328): avc:  denied  { ioctl } for  pid=8834 comm="syz.3.583" path="socket:[25375]" dev="sockfs" ino=25375 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  267.464470][ T8624] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  267.499742][ T8624] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  267.556892][ T8624] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  267.604516][ T8624] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  267.853437][ T8624] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.861437][ T5901] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  267.895968][ T8624] 8021q: adding VLAN 0 to HW filter on device team0
[  267.931309][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.938411][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.979169][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.986311][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.040203][ T5901] usb 1-1: Using ep0 maxpacket: 8
[  268.066960][ T5901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  268.111334][ T5901] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  268.122744][ T5901] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  268.146817][ T5901] usb 1-1: Product: syz
[  268.156042][ T5901] usb 1-1: Manufacturer: syz
[  268.165786][ T5901] usb 1-1: SerialNumber: syz
[  268.491370][ T5901] usb 1-1: palm_os_3_probe - error -110 getting connection information
[  268.593372][ T5901] visor 1-1:1.0: probe with driver visor failed with error -110
[  268.832086][ T8624] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.983532][ T8624] veth0_vlan: entered promiscuous mode
[  269.021750][ T8624] veth1_vlan: entered promiscuous mode
[  269.107605][ T8624] veth0_macvtap: entered promiscuous mode
[  269.146256][ T8624] veth1_macvtap: entered promiscuous mode
[  269.219348][ T8624] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.268460][ T8624] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.321895][ T8624] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.358101][ T8624] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.384657][ T8624] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.411223][ T8624] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.664791][ T8884] kAFS: No cell specified
[  269.730811][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.738637][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.887248][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.928804][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.279549][ T6646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.434085][ T6646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.481036][ T5893] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  271.661323][ T5928] usb 1-1: USB disconnect, device number 16
[  271.694201][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  271.710359][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  271.736146][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  271.756866][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  271.788552][ T5893] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  271.798844][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.813007][ T5893] usb 4-1: config 0 descriptor??
[  272.171665][ T6646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.240675][ T5893] usbhid 4-1:0.0: can't add hid device: -71
[  272.256965][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  272.283540][ T5893] usb 4-1: USB disconnect, device number 19
[  272.761662][ T6646] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.883292][ T8929] syz.0.599: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  272.936626][ T8929] CPU: 1 UID: 0 PID: 8929 Comm: syz.0.599 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[  272.936656][ T8929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  272.936668][ T8929] Call Trace:
[  272.936674][ T8929]  <TASK>
[  272.936683][ T8929]  dump_stack_lvl+0x16c/0x1f0
[  272.936715][ T8929]  warn_alloc+0x248/0x3a0
[  272.936742][ T8929]  ? __pfx_warn_alloc+0x10/0x10
[  272.936764][ T8929]  ? __pfx_stack_trace_save+0x10/0x10
[  272.936790][ T8929]  ? stack_depot_save_flags+0x28/0xa40
[  272.936822][ T8929]  ? kasan_save_stack+0x42/0x60
[  272.936843][ T8929]  ? kasan_save_stack+0x33/0x60
[  272.936865][ T8929]  ? kasan_save_track+0x14/0x30
[  272.936889][ T8929]  ? xskq_create+0x52/0x1d0
[  272.936910][ T8929]  ? xsk_setsockopt+0x640/0x840
[  272.936929][ T8929]  ? do_sock_setsockopt+0x224/0x470
[  272.936949][ T8929]  ? xskq_create+0xfb/0x1d0
[  272.936972][ T8929]  __vmalloc_node_range_noprof+0xff5/0x14b0
[  272.937002][ T8929]  ? xskq_create+0xfb/0x1d0
[  272.937031][ T8929]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  272.937059][ T8929]  ? xskq_create+0xfb/0x1d0
[  272.937083][ T8929]  vmalloc_user_noprof+0x9e/0xe0
[  272.937101][ T8929]  ? xskq_create+0xfb/0x1d0
[  272.937123][ T8929]  xskq_create+0xfb/0x1d0
[  272.937155][ T8929]  xsk_setsockopt+0x640/0x840
[  272.937178][ T8929]  ? __pfx_xsk_setsockopt+0x10/0x10
[  272.937198][ T8929]  ? __lock_acquire+0x622/0x1c90
[  272.937232][ T8929]  ? selinux_socket_setsockopt+0x6a/0x80
[  272.937259][ T8929]  ? __pfx_xsk_setsockopt+0x10/0x10
[  272.937282][ T8929]  do_sock_setsockopt+0x224/0x470
[  272.937300][ T8929]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  272.937336][ T8929]  __sys_setsockopt+0x1a0/0x230
[  272.937367][ T8929]  __x64_sys_setsockopt+0xbd/0x160
[  272.937390][ T8929]  ? do_syscall_64+0x91/0x4c0
[  272.937415][ T8929]  ? lockdep_hardirqs_on+0x7c/0x110
[  272.937441][ T8929]  do_syscall_64+0xcd/0x4c0
[  272.937470][ T8929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.937488][ T8929] RIP: 0033:0x7f065618e929
[  272.937504][ T8929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.937522][ T8929] RSP: 002b:00007f0656f2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  272.937540][ T8929] RAX: ffffffffffffffda RBX: 00007f06563b5fa0 RCX: 00007f065618e929
[  272.937552][ T8929] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  272.937562][ T8929] RBP: 00007f0656210b39 R08: 0000000000000004 R09: 0000000000000000
[  272.937572][ T8929] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.937583][ T8929] R13: 0000000000000000 R14: 00007f06563b5fa0 R15: 00007fff78d5d638
[  272.937605][ T8929]  </TASK>
[  272.937611][ T8929] Mem-Info:
[  273.108006][ T5141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  273.115338][ T8929] active_anon:8831 inactive_anon:0 isolated_anon:0
[  273.115338][ T8929]  active_file:15145 inactive_file:40632 isolated_file:0
[  273.115338][ T8929]  unevictable:768 dirty:376 writeback:0
[  273.115338][ T8929]  slab_reclaimable:11859 slab_unreclaimable:103633
[  273.115338][ T8929]  mapped:30189 shmem:1361 pagetables:1164
[  273.115338][ T8929]  sec_pagetables:0 bounce:0
[  273.115338][ T8929]  kernel_misc_reclaimable:0
[  273.115338][ T8929]  free:1285850 free_pcp:21652 free_cma:0
[  273.122520][ T5141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  273.123407][ T5141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  273.129497][ T8929] Node 0 active_anon:35324kB inactive_anon:0kB active_file:60500kB inactive_file:162324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120712kB dirty:1504kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12268kB pagetables:4536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  273.137917][ T5141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  273.269112][ T8929] Node 1 active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  273.277121][ T5141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  273.348841][ T8929] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  273.464506][ T8929] lowmem_reserve[]: 0 2481 2482 2482 2482
[  273.500725][ T8929] Node 0 DMA32 free:1241412kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35596kB inactive_anon:0kB active_file:60500kB inactive_file:161008kB unevictable:1572kB writepending:1528kB present:3129332kB managed:2540624kB mlocked:36kB bounce:0kB free_pcp:56548kB local_pcp:31068kB free_cma:0kB
[  273.523876][   T30] audit: type=1400 audit(1749921395.085:329): avc:  denied  { write } for  pid=8944 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  273.587883][ T8936] lo speed is unknown, defaulting to 1000
[  273.630796][ T8936] syzkaller0 speed is unknown, defaulting to 1000
[  273.638275][ T8929] lowmem_reserve[]: 0 0 1 1 1
[  273.650544][ T6646] bridge_slave_1: left allmulticast mode
[  273.690452][ T6646] bridge_slave_1: left promiscuous mode
[  273.702768][ T8929] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB
[  273.732370][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.750290][ T8929] lowmem_reserve[]: 0 0 0 0 0
[  273.755043][ T8929] Node 1 Normal free:3886304kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:29648kB local_pcp:16592kB free_cma:0kB
[  274.202733][ T8930] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  274.272114][ T6646] bridge_slave_0: left allmulticast mode
[  274.277880][ T6646] bridge_slave_0: left promiscuous mode
[  274.292908][ T8929] lowmem_reserve[]: 0 0 0 0 0
[  274.309795][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.317449][ T8929] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  274.406048][ T8929] Node 0 DMA32: 8*4kB (ME) 3*8kB (UE) 3*16kB (E) 52*32kB (UME) 409*64kB (UM) 86*128kB (UME) 70*256kB (UM) 32*512kB (UM) 11*1024kB (UME) 6*2048kB (UME) 277*4096kB (M) = 1231400kB
[  274.430571][ T8929] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  274.468808][ T8929] Node 1 Normal: 192*4kB (UME) 50*8kB (UE) 13*16kB (UE) 30*32kB (UME) 9*64kB (UME) 3*128kB (UE) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (UM) = 3886304kB
[  274.547223][ T8929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  274.577699][ T8929] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  274.609158][ T8929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  274.631646][ T8929] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  274.714020][ T8929] 64310 total pagecache pages
[  274.718729][ T8929] 0 pages in swap cache
[  274.730303][ T8929] Free swap  = 124996kB
[  274.734764][ T8929] Total swap = 124996kB
[  274.758448][ T8929] 2097051 pages RAM
[  274.771274][ T8965] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  274.777820][ T8965] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  274.785314][ T8929] 0 pages HighMem/MovableOnly
[  274.790607][ T8929] 429917 pages reserved
[  274.794777][ T8929] 0 pages cma reserved
[  274.809291][ T8965] vhci_hcd vhci_hcd.0: Device attached
[  275.130901][   T24] vhci_hcd: vhci_device speed not set
[  275.194283][ T5928] libceph: connect (1)[c::]:6789 error -101
[  275.200487][   T24] usb 35-1: new full-speed USB device number 3 using vhci_hcd
[  275.221331][ T5928] libceph: mon0 (1)[c::]:6789 connect error
[  275.332663][   T30] audit: type=1800 audit(1749921396.895:330): pid=8976 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.606" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0
[  275.371207][ T5141] Bluetooth: hci3: command tx timeout
[  275.386083][ T8968] vhci_hcd: connection reset by peer
[  275.392499][   T13] vhci_hcd: stop threads
[  275.397612][   T13] vhci_hcd: release socket
[  275.408606][   T13] vhci_hcd: disconnect device
[  275.416332][ T8971] ceph: No mds server is up or the cluster is laggy
[  275.494248][ T6646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  275.512934][ T6646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  275.548271][ T6646] bond0 (unregistering): Released all slaves
[  275.710398][ T5866] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  275.749322][ T8955] : entered promiscuous mode
[  276.570972][ T5866] usb 1-1: Using ep0 maxpacket: 8
[  276.582036][ T5866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  276.593856][ T5866] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  276.609213][ T5866] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  276.710668][ T5866] usb 1-1: Product: syz
[  276.717208][ T5866] usb 1-1: Manufacturer: syz
[  276.740661][ T5866] usb 1-1: SerialNumber: syz
[  277.258926][ T5866] usb 1-1: palm_os_3_probe - error -110 getting connection information
[  277.274041][ T5866] visor 1-1:1.0: probe with driver visor failed with error -110
[  277.450461][ T5141] Bluetooth: hci3: command tx timeout
[  277.975760][ T6646] hsr_slave_0: left promiscuous mode
[  278.026135][ T6646] hsr_slave_1: left promiscuous mode
[  278.072731][ T6646] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  278.152228][ T6646] batman_adv: batadv0: Removing interface: batadv_slave_0
[  278.215722][ T6646] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  278.262122][ T6646] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.356020][ T6646] veth1_macvtap: left promiscuous mode
[  278.392820][ T6646] veth0_macvtap: left promiscuous mode
[  278.420842][ T6646] veth1_vlan: left promiscuous mode
[  278.433234][ T6646] veth0_vlan: left promiscuous mode
[  279.305853][ T6646] team0 (unregistering): Port device team_slave_1 removed
[  279.353426][   T30] audit: type=1800 audit(1749921400.905:331): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.617" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0
[  279.395019][ T6646] team0 (unregistering): Port device team_slave_0 removed
[  279.541423][ T5141] Bluetooth: hci3: command tx timeout
[  280.401527][   T24] vhci_hcd: vhci_device speed not set
[  280.957973][   T30] audit: type=1400 audit(1749921402.515:332): avc:  denied  { bind } for  pid=9043 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  280.997000][   T30] audit: type=1400 audit(1749921402.515:333): avc:  denied  { listen } for  pid=9043 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  281.020154][   T30] audit: type=1400 audit(1749921402.515:334): avc:  denied  { accept } for  pid=9043 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  281.126190][ T3078] usb 1-1: USB disconnect, device number 17
[  281.197933][ T8936] chnl_net:caif_netlink_parms(): no params data found
[  281.210351][ T5928] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  281.386349][ T5928] usb 5-1: Using ep0 maxpacket: 8
[  281.408241][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  281.426023][ T5928] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  281.435409][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.452872][ T5928] usb 5-1: config 0 descriptor??
[  281.519525][ T8936] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.530579][ T8936] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.538580][ T8936] bridge_slave_0: entered allmulticast mode
[  281.551326][ T8936] bridge_slave_0: entered promiscuous mode
[  281.585019][ T8936] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.592992][ T8936] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.601485][ T8936] bridge_slave_1: entered allmulticast mode
[  281.609907][ T8936] bridge_slave_1: entered promiscuous mode
[  281.616421][ T5141] Bluetooth: hci3: command tx timeout
[  281.683243][ T5928] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  281.743062][ T8936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.781785][ T8936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.911168][ T8936] team0: Port device team_slave_0 added
[  281.918881][ T8936] team0: Port device team_slave_1 added
[  281.939224][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.950458][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.022950][ T8936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.074803][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.089317][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.117538][ T5928] usb 5-1: USB disconnect, device number 7
[  282.117549][    C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  282.402701][ T8936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.556265][ T8936] hsr_slave_0: entered promiscuous mode
[  282.581927][ T8936] hsr_slave_1: entered promiscuous mode
[  282.597735][ T8936] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  282.613854][ T8936] Cannot create hsr debugfs directory
[  283.682390][   T30] audit: type=1400 audit(1749921405.235:335): avc:  denied  { read write } for  pid=9082 comm="syz.4.631" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  283.713744][ T9083] 
[  283.713875][ T9083] 
[  283.795622][   T30] audit: type=1400 audit(1749921405.235:336): avc:  denied  { open } for  pid=9082 comm="syz.4.631" path="/171/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  284.524714][ T8936] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  284.574419][ T8936] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  284.641411][ T8936] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  284.983878][ T8936] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  285.407061][ T8936] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.453368][   T30] audit: type=1400 audit(1749921407.015:337): avc:  denied  { bind } for  pid=9120 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  285.526639][ T9133] syz.4.640: attempt to access beyond end of device
[  285.526639][ T9133] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0
[  285.541103][ T9133] gfs2: error -5 reading superblock
[  285.563716][ T8936] 8021q: adding VLAN 0 to HW filter on device team0
[  285.599039][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.606155][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.639814][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.646905][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.397237][ T8936] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.535843][ T8936] veth0_vlan: entered promiscuous mode
[  287.597992][ T8936] veth1_vlan: entered promiscuous mode
[  287.683749][ T8936] veth0_macvtap: entered promiscuous mode
[  287.698392][ T8936] veth1_macvtap: entered promiscuous mode
[  287.743304][ T8936] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.764040][ T8936] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.209616][ T8936] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.218929][ T8936] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.240604][ T8936] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.260450][ T8936] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.374982][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.389189][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.450710][ T9182] random: crng reseeded on system resumption
[  288.809716][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.833545][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.082434][ T9194] netlink: 136 bytes leftover after parsing attributes in process `syz.4.647'.
[  289.098392][ T9194] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  289.252323][ T9204] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  289.259858][ T9204] UDF-fs: Scanning with blocksize 512 failed
[  289.267873][ T9204] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  289.275454][ T9204] UDF-fs: Scanning with blocksize 1024 failed
[  289.284282][ T9204] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  289.292437][ T9204] UDF-fs: Scanning with blocksize 2048 failed
[  289.313394][ T9204] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  289.321299][ T9204] UDF-fs: Scanning with blocksize 4096 failed
[  290.289213][ T9207] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in;
[  290.289213][ T9207]    program syz.0.650 not setting count and/or reply_len properly
[  290.402250][   T30] audit: type=1800 audit(1749921411.825:338): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.648" name="/" dev="fuse" ino=0 res=0 errno=0
[  290.563011][   T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.837870][ T9216] loop6: detected capacity change from 0 to 524287999
[  291.267384][ T9219] input: syz1 as /devices/virtual/input/input14
[  291.289093][   T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.402288][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.650'.
[  291.418520][ T9216]  loop6: unable to read partition table
[  291.424403][ T9216] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  291.596699][   T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.767294][   T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.158988][   T59] bridge_slave_1: left allmulticast mode
[  292.180292][   T59] bridge_slave_1: left promiscuous mode
[  292.186070][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.236606][   T59] bridge_slave_0: left allmulticast mode
[  292.260124][   T59] bridge_slave_0: left promiscuous mode
[  292.291611][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.811272][ T9242] ALSA: mixer_oss: invalid OSS volume 'MON'
[  292.819576][ T9242] overlayfs: failed to resolve './file1': -2
[  293.979430][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  293.990706][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  293.999762][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  294.010094][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  294.017693][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  294.115894][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  294.132655][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  294.140717][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  294.148387][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  294.156752][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  294.294329][ T9258] Bluetooth: MGMT ver 1.23
[  294.886469][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  294.934151][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  294.996166][   T59] bond0 (unregistering): Released all slaves
[  296.090608][ T5820] Bluetooth: hci3: command tx timeout
[  296.253744][ T5820] Bluetooth: hci5: command tx timeout
[  296.310442][ T9262] lo speed is unknown, defaulting to 1000
[  296.321586][ T9262] syzkaller0 speed is unknown, defaulting to 1000
[  296.356619][ T9265] lo speed is unknown, defaulting to 1000
[  296.520360][ T5880] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  296.683079][ T9265] syzkaller0 speed is unknown, defaulting to 1000
[  296.690432][ T5880] usb 4-1: Using ep0 maxpacket: 16
[  296.779472][ T9308] loop6: detected capacity change from 0 to 524287999
[  296.817751][ T5880] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  297.197164][ T5880] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  297.220285][ T5880] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  297.280369][ T5880] usb 4-1: config 1 interface 0 has no altsetting 0
[  297.289351][ T5880] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  297.316259][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.339243][ T5880] usb 4-1: Product: syz
[  297.345182][ T5880] usb 4-1: Manufacturer: syz
[  297.349802][ T5880] usb 4-1: SerialNumber: syz
[  298.131004][ T5880] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  298.170341][ T5820] Bluetooth: hci3: command tx timeout
[  298.330344][ T5820] Bluetooth: hci5: command tx timeout
[  298.446817][ T9262] chnl_net:caif_netlink_parms(): no params data found
[  298.822953][   T59] hsr_slave_0: left promiscuous mode
[  298.858652][   T59] hsr_slave_1: left promiscuous mode
[  298.875142][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  298.904120][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  298.928423][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  298.949132][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  298.983357][   T59] veth1_macvtap: left promiscuous mode
[  299.004132][   T59] veth0_macvtap: left promiscuous mode
[  299.015906][   T59] veth1_vlan: left promiscuous mode
[  299.038618][   T59] veth0_vlan: left promiscuous mode
[  299.342892][ T5880] usb 4-1: USB disconnect, device number 20
[  299.391811][ T5880] usblp0: removed
[  300.260357][ T5820] Bluetooth: hci3: command tx timeout
[  300.392108][   T59] team0 (unregistering): Port device team_slave_1 removed
[  300.410752][ T5820] Bluetooth: hci5: command tx timeout
[  300.589420][   T30] audit: type=1400 audit(1749921422.145:339): avc:  denied  { listen } for  pid=9352 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  300.633564][   T59] team0 (unregistering): Port device team_slave_0 removed
[  300.661583][   T30] audit: type=1400 audit(1749921422.175:340): avc:  denied  { accept } for  pid=9352 comm="syz.3.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  301.001911][   T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  302.330356][ T5820] Bluetooth: hci3: command tx timeout
[  302.471398][ T9376] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] SMP KASAN NOPTI
[  302.483485][ T9376] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f]
[  302.493003][ T9376] CPU: 0 UID: 0 PID: 9376 Comm: syz.4.679 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[  302.504871][ T9376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  302.514906][ T9376] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x24f0
[  302.521567][ T9376] Code: 4c 8b b3 60 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 68 3d 8d f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b
[  302.541160][ T9376] RSP: 0018:ffffc900040cf1e8 EFLAGS: 00010206
[  302.547204][ T9376] RAX: dffffc0000000000 RBX: ffff88802c710000 RCX: ffffc9000dede000
[  302.555156][ T9376] RDX: 00000000000a2403 RSI: ffffffff8b2ede88 RDI: 0000000000512018
[  302.563107][ T9376] RBP: ffff88802af60000 R08: 0000000000000005 R09: 0000000000000000
[  302.571059][ T9376] R10: 0000000080000001 R11: 0000000000000001 R12: ffff88805593f5e8
[  302.579007][ T9376] R13: ffff888056418640 R14: 0000000000512000 R15: ffff88802c710560
[  302.586955][ T9376] FS:  00007f13027d56c0(0000) GS:ffff888124754000(0000) knlGS:0000000000000000
[  302.595864][ T9376] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  302.602426][ T9376] CR2: 000020000000e000 CR3: 000000004ad14000 CR4: 00000000003526f0
[  302.610375][ T9376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  302.618322][ T9376] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  302.626278][ T9376] Call Trace:
[  302.629550][ T9376]  <TASK>
[  302.632470][ T9376]  ? __pfx___smc_diag_dump.constprop.0+0x10/0x10
[  302.638819][ T9376]  ? trace_sched_exit_tp+0xde/0x130
[  302.644004][ T9376]  ? __schedule+0x1181/0x5de0
[  302.648662][ T9376]  ? find_held_lock+0x2b/0x80
[  302.653321][ T9376]  ? __lock_acquire+0xb8a/0x1c90
[  302.658244][ T9376]  ? lock_acquire+0x179/0x350
[  302.662909][ T9376]  ? smc_diag_dump_proto+0x2ce/0x420
[  302.668172][ T9376]  smc_diag_dump_proto+0x26d/0x420
[  302.673279][ T9376]  smc_diag_dump+0x84/0x90
[  302.677667][ T9376]  netlink_dump+0x51e/0xce0
[  302.682157][ T9376]  ? __pfx_netlink_dump+0x10/0x10
[  302.687159][ T9376]  __netlink_dump_start+0x6d6/0x990
[  302.692334][ T9376]  smc_diag_handler_dump+0x1f9/0x240
[  302.697594][ T9376]  ? __pfx_smc_diag_handler_dump+0x10/0x10
[  302.703373][ T9376]  ? __pfx_smc_diag_dump+0x10/0x10
[  302.708457][ T9376]  ? sock_diag_lock_handler+0x10f/0x2e0
[  302.713986][ T9376]  sock_diag_rcv_msg+0x438/0x790
[  302.718910][ T9376]  netlink_rcv_skb+0x158/0x420
[  302.723651][ T9376]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  302.729087][ T9376]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  302.734347][ T9376]  ? rcu_is_watching+0x12/0xc0
[  302.739090][ T9376]  netlink_unicast+0x53a/0x7f0
[  302.743840][ T9376]  ? __pfx_netlink_unicast+0x10/0x10
[  302.749098][ T9376]  ? __build_skb_around+0x278/0x3b0
[  302.754276][ T9376]  netlink_sendmsg+0x8d1/0xdd0
[  302.759021][ T9376]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.764282][ T9376]  ____sys_sendmsg+0xa98/0xc70
[  302.769021][ T9376]  ? copy_msghdr_from_user+0x10a/0x160
[  302.774460][ T9376]  ? __pfx_____sys_sendmsg+0x10/0x10
[  302.779719][ T9376]  ? preempt_schedule_thunk+0x16/0x30
[  302.785085][ T9376]  ? try_to_wake_up+0xa2f/0x1680
[  302.790017][ T9376]  ___sys_sendmsg+0x134/0x1d0
[  302.794678][ T9376]  ? __pfx____sys_sendmsg+0x10/0x10
[  302.799854][ T9376]  ? __lock_acquire+0x622/0x1c90
[  302.804789][ T9376]  __sys_sendmsg+0x16d/0x220
[  302.809357][ T9376]  ? __pfx___sys_sendmsg+0x10/0x10
[  302.814466][ T9376]  ? __x64_sys_futex+0x1e0/0x4c0
[  302.819386][ T9376]  do_syscall_64+0xcd/0x4c0
[  302.823871][ T9376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.829738][ T9376] RIP: 0033:0x7f130498e929
[  302.834130][ T9376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.853714][ T9376] RSP: 002b:00007f13027d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  302.862101][ T9376] RAX: ffffffffffffffda RBX: 00007f1304bb6160 RCX: 00007f130498e929
[  302.870061][ T9376] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000005
[  302.878017][ T9376] RBP: 00007f1304a10b39 R08: 0000000000000000 R09: 0000000000000000
[  302.885972][ T9376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  302.893925][ T9376] R13: 0000000000000000 R14: 00007f1304bb6160 R15: 00007ffece7b9728
[  302.894990][ T5820] Bluetooth: hci5: command tx timeout
[  302.901876][ T9376]  </TASK>
[  302.901885][ T9376] Modules linked in:
[  302.903555][ T9376] ---[ end trace 0000000000000000 ]---
[  302.919810][ T9376] RIP: 0010:__smc_diag_dump.constprop.0+0x3cd/0x24f0
[  302.926628][ T9376] Code: 4c 8b b3 60 05 00 00 4d 85 f6 0f 84 f6 02 00 00 e8 68 3d 8d f6 49 8d 7e 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 c7 1e 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b
[  302.931180][   T30] audit: type=1400 audit(1749921424.485:341): avc:  denied  { read } for  pid=5172 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  302.946486][ T9376] RSP: 0018:ffffc900040cf1e8 EFLAGS: 00010206
[  302.974593][ T9376] RAX: dffffc0000000000 RBX: ffff88802c710000 RCX: ffffc9000dede000
[  302.982637][ T9376] RDX: 00000000000a2403 RSI: ffffffff8b2ede88 RDI: 0000000000512018
[  302.990673][ T9376] RBP: ffff88802af60000 R08: 0000000000000005 R09: 0000000000000000
[  302.998733][ T9376] R10: 0000000080000001 R11: 0000000000000001 R12: ffff88805593f5e8
[  303.006895][ T9376] R13: ffff888056418640 R14: 0000000000512000 R15: ffff88802c710560
[  303.014955][ T9376] FS:  00007f13027d56c0(0000) GS:ffff888124754000(0000) knlGS:0000000000000000
[  303.024072][ T9376] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  303.030794][ T9376] CR2: 000020000000e000 CR3: 000000004ad14000 CR4: 00000000003526f0
[  303.038921][ T9376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  303.047075][ T9376] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  303.055412][ T9376] Kernel panic - not syncing: Fatal exception
[  303.061582][ T9376] Kernel Offset: disabled
[  303.065888][ T9376] Rebooting in 86400 seconds..