last executing test programs:

1.103864009s ago: executing program 1 (id=320):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x49, 0x7f, 0xf260, 0x6, 0x5, 0x6})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgid(0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="8c45040000400100140012800900010076657468000000000400028008001300", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4015}, 0x0)
capset(&(0x7f0000000240)={0x20071026, r1}, &(0x7f00000002c0)={0x2, 0x6b, 0x3, 0x5, 0x4, 0x8})
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000480)={0x7, 0x2, 0x4517, 0x2, 0x1, "c071a419cd12f7594a9fd7400611d8742fb000", 0x7fffffff, 0xc3a5}) (async)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000480)={0x7, 0x2, 0x4517, 0x2, 0x1, "c071a419cd12f7594a9fd7400611d8742fb000", 0x7fffffff, 0xc3a5})
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) (async)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={0x811, r3}, 0x0)
getdents64(r3, 0x0, 0x0) (async)
getdents64(r3, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000300)) (async)
fcntl$getownex(r0, 0x10, &(0x7f0000000300))
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000000)=""/49, 0x31)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x25)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000000000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000000000/0x400000)=nil)
r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x15961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000340)=@IORING_OP_EPOLL_WAIT={0x3b, 0xa, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0xd8000004}], 0x1, 0x0, 0x1, {0x0, r9}})
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

1.10352089s ago: executing program 0 (id=321):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0)
mkdir(&(0x7f0000000180)='./sys\x00', 0x82)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x1}, 0x4)
close(r0)
read$midi(r0, 0x0, 0x3b)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0)
ioctl$SNDCTL_SEQ_RESET(r3, 0x5100)
ioctl$SNDCTL_SEQ_RESET(r3, 0x5100)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x111841, 0x0)

1.067472767s ago: executing program 1 (id=323):
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f00000000c0))
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081020100bfa30000000000000703000005feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030281020100001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48)
ppoll(&(0x7f00000002c0)=[{r0, 0xb159}], 0x1, 0x0, 0x0, 0x0)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x7, 0x3a, '-@--{\\', 0x3a, '4$%', 0x3a, './debug/file0', 0x3a, [0x44]}, 0x37)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x6)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FBIOBLANK(r2, 0x4611, 0x4)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0)

1.013185226s ago: executing program 0 (id=324):
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x208000, 0x0)
creat(&(0x7f0000000080)='./cgroup\x00', 0x20)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x40084)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f00000003c0)='./config\x00', 0x4)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c, 0x11800}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c, 0x11800}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x672024}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) (async)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) (async)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) (async)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) (async)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)
write(0xffffffffffffffff, &(0x7f00000002c0), 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00')
pread64(r5, 0x0, 0x0, 0x404) (async)
pread64(r5, 0x0, 0x0, 0x404)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00')
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000840))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000440)=0xff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)

955.809332ms ago: executing program 1 (id=325):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000001900), &(0x7f0000000140)=0x80)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
chdir(0x0)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x166}]}}}]}]}], {0x14}}, 0xd4}}, 0x0)
sendto$inet(r1, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000002540)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x8140)
setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0xed7, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x6, &(0x7f0000000100)=[{0x101, 0x0, 0x6b, 0x1b1}, {0xcf6, 0x6, 0xec}, {0x800, 0x8f, 0x1, 0x9}, {0xc, 0x0, 0x1, 0x401}, {0x1, 0x4, 0x7c, 0xffffff5f}, {0x4, 0x40, 0x5, 0x69}]})
setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000001280), 0x4)

704.983259ms ago: executing program 2 (id=327):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32, @ANYBLOB="05"], 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) (async)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async, rerun: 32)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) (async, rerun: 32)
r4 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x3}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) (async, rerun: 32)
r5 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r4, r5, r5}, &(0x7f0000000540)=""/192, 0xc0, &(0x7f00000000c0)={&(0x7f0000000340)={'wp384-generic\x00'}, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7", 0x1d})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1})
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/fillfile/file0\x00', 0x400000, 0x110)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r6, 0x40109441, &(0x7f0000000380)={0x100000001, 0x7, 0x7fffffff}) (async, rerun: 32)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff) (rerun: 32)
write(r7, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000240)={0x0, r2, r8, 0xa7, 0x101, 0x2, 0x1, 0x0, 0x2, 0x7, 0x8, 0x7f})

615.165765ms ago: executing program 2 (id=328):
r0 = getpgrp(0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(0xa000000, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r1, &(0x7f00000046c0)={0x2020}, 0x2071)
ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x9, 0x2001)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7d}, [@ldst={0x4, 0x0, 0x4, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x32)

611.70579ms ago: executing program 2 (id=329):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x2]}]}, 0x6c}}, 0x0) (async)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) (async)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
write$binfmt_format(r2, &(0x7f0000000180)='0\x00', 0x2)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r3=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0x4}, 0x80) (async)
r4 = fcntl$dupfd(r0, 0x406, r0) (async)
pipe2(&(0x7f00000017c0)={<r5=>0xffffffffffffffff}, 0x5080) (async)
r6 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x80)
ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000240)=""/207) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001880)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000001800), &(0x7f0000001840)}, 0x20)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000018c0)={0xffffffffffffffff, 0x3}, 0xc)
r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001900), 0x40000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x1c, 0x8, &(0x7f0000001600)=@raw=[@call={0x85, 0x0, 0x0, 0x17}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000001640)='GPL\x00', 0x81, 0xbf, &(0x7f0000001680)=""/191, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x7, r2, 0x8, &(0x7f0000001740)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001780)={0x2, 0xb, 0x5, 0xfffffffd}, 0x10, r3, r4, 0x2, &(0x7f0000001940)=[0xffffffffffffffff, r5, r7, 0x1, r0, r8, r9], &(0x7f0000001980)=[{0x0, 0x5, 0x5, 0x6}, {0x3, 0x5, 0x4, 0x9}], 0x10, 0x3}, 0x94) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3cb2d200000101010000000000000000020000020400164024000180140001800800feffdf0000010807000000000000000267"], 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) (async)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r11, 0x107, 0x7, &(0x7f0000000100)=0x5, 0x4) (async)
getsockopt$packet_buf(r11, 0x107, 0x6, 0x0, &(0x7f0000000400)) (async)
umount2(&(0x7f00000001c0)='./file0\x00', 0xa)

535.772017ms ago: executing program 2 (id=330):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x250381, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x4084)
sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb)
read(r4, &(0x7f0000000000)=""/41, 0x29)
sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, &(0x7f0000000040)="c4a2dd903c90b9fa0b00000f32660f388015087e0000470f01c266baa00066b8c40066ef66b817000f00d0262e66460f388126c483697fe16ec4a12cc6a100000000c52e660fe5ba522ccb38", 0x4c}], 0x1, 0x5f, 0x0, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x10, 0x1405, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x810}, 0x40)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

435.900844ms ago: executing program 0 (id=331):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/version\x00', 0x0, 0x0)
read(r0, &(0x7f0000000100)=""/1000, 0x3e8)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0x2}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

434.884969ms ago: executing program 0 (id=332):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0x1d6b\n', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
write(r0, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee266", 0x5d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r3, &(0x7f0000000380)='0123456789\n', 0xb)
write(0xffffffffffffffff, &(0x7f0000000400)='syzkaller\n', 0xa)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480)='HID Gadget\n', 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
write(r5, &(0x7f00000006c0)='1', 0x1)
write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2)
write(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0)
symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r6, &(0x7f0000000a40)='dummy_udc.0\n', 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0xb, 0x2172, 0xffffffffffffffff, 0x0)
r7 = io_uring_setup(0x1694, 0x0)
syz_io_uring_setup(0x48ce, &(0x7f0000000400)={0x0, 0xd353, 0x3221, 0x0, 0x19a, 0x0, r7}, 0x0, &(0x7f0000000900), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)

434.079029ms ago: executing program 2 (id=333):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f80), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x34, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3b}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040014}, 0x4004000)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x20000000)

336.107828ms ago: executing program 2 (id=334):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x400001, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8c00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x4, "abac0011119c871663376126aab5ab0006278ee051881700e4ffffffffffffff", <r6=>0xffffffffffffffff})
ppoll(&(0x7f0000000040)=[{r6, 0x400c}], 0x1, 0x0, 0x0, 0x0)
dup2(r5, r6)
ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f00000000c0)=0x5)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000480)=0x1)
getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000020000170ac95398272720027bd724ac44c04252c0d2040000000070800000014000200ff02000000000000000000000000000014000200fe800000000b5808ac"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write(r8, &(0x7f0000000200)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=t', 0x31)

335.873917ms ago: executing program 3 (id=335):
setresuid(0x0, 0xee00, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='netdevsim0\x00', &(0x7f0000000040)='\x00', 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x3c, r1, 0x401, 0x70bd2e, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x3c}}, 0x14008080)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)

335.150448ms ago: executing program 0 (id=336):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x4000001)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r3 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000010c0)='\x01\x00\x00\x00k*\x00}', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001040), 0x800, 0x0)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304)
r6 = inotify_init()
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r8=>0xffffffffffffffff}, 0x111, 0x3}}, 0x5c)
write$P9_RXATTRCREATE(r4, &(0x7f0000001100)={0x7, 0x21, 0x2}, 0x7)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r8, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e1c, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r8, 0x2000000a}}, 0x10)
close_range(r6, 0xffffffffffffffff, 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write$UHID_INPUT(r9, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

335.015675ms ago: executing program 3 (id=337):
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x4000005)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x80000001})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000040)={0x1, 0x4})
sendto$inet6(r2, &(0x7f00000000c0)="41b7895defdaa9e16719ab400708dc867ea17d7254ffd2d94b6fc5a56d781e5cb5a1325e0afaa1d26a949cf6043e786c2372646497eae78b00c6434e26f0146e81c9f82458a0139f0fe73dcc12da9c9c", 0x50, 0x41, 0x0, 0x0)

243.335375ms ago: executing program 3 (id=338):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs\x00', 0x0)
r0 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000440)='./my_debugfs\x00', &(0x7f0000000480)='debugfs\x00', 0x0, 0x0)
chdir(&(0x7f00000004c0)='./my_debugfs\x00')
chdir(&(0x7f0000000500)='./usb\x00')
chdir(&(0x7f0000000540)='./uhci\x00')
open(&(0x7f0000000000)='0000:00:1d.0\x00', 0x200, 0x50)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
openat$sysfs(0xffffffffffffff9c, 0x0, 0x10000, 0x98)
close_range(r1, 0xffffffffffffffff, 0x0)

242.787975ms ago: executing program 3 (id=339):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
sched_setattr(0x0, 0x0, 0x0) (async)
capset(0x0, 0x0) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x1, 0x0, 0x0, 0x200}, [@IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x403, 0x70bd25, 0xfffffffd, {0x0, 0x0, 0x74, 0x0, 0x1a318, 0x11203}, [@IFLA_LINK_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20040880) (async)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r6=>0x0})
bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) (async)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0xffff}, {0xfff2, 0xfff9}, {0x1, 0x9}}}, 0x24}}, 0x4000004)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) (async)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r8, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0xffff, 0x5}})

135.768908ms ago: executing program 0 (id=340):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2})
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x2c0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./cgrp\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp\x00', 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000500000001000000000000010400000020"], 0x0, 0x2d}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="2000000004000000040000000000000001000000", @ANYRES32=r3, @ANYRESOCT=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="0400000001000d7f22c218aec0a970ae541f9d0000000000000000007dbce222516ce9afc0a6458d95ea54"], 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge0\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10)
sendmsg$nl_route(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x0)
r9 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r9, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/175, 0x27}], 0x1, &(0x7f0000001fc0)=""/65, 0xffffffffffffff4b}, 0x40000001}], 0x1, 0x40002122, 0x0)
sendmsg$tipc(r9, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='J\x00', 0x2}], 0x1}, 0x2000c8c0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000002301000008000300", @ANYRES32=r12, @ANYBLOB="05001f0003"], 0x24}}, 0x0)
ioctl(r2, 0x80, &(0x7f0000001880)="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")
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000340)="03", &(0x7f0000000380), 0x20000}, 0x20)

75.631747ms ago: executing program 3 (id=341):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [{{0x254, 0x1, {{0x0, 0x9}, 0x9, 0x30, 0x2c4, 0x4, 0x24, 'syz1\x00', "93e3dd8d3cd76eb4e4b7b180b8a92a4844ae4094b40ff165e3ec913e240ed546", "9dcf1ae7453a99eea74e3e23d01f90f84d7b9e76b2ae5120fcf6da03fe106d0b", [{0x16b7, 0x7, {0x2, 0x8001}}, {0x1, 0x7, {0x2, 0x9}}, {0x8d, 0xa3f, {0x2, 0x2}}, {0x5, 0x8, {0x0, 0xcd}}, {0xef4, 0x5, {0x1, 0x7}}, {0x8000, 0xff, {0x2, 0x5}}, {0x2, 0x7, {0x3, 0x8}}, {0x10, 0x3, {0x1, 0x6}}, {0x5d1b, 0xfffd, {0x3, 0xf401}}, {0x75, 0x4, {0x3, 0x8000}}, {0x0, 0x2, {0x1}}, {0x2, 0x7, {0x0, 0xd6a4}}, {0x2, 0x9, {0x1}}, {0x7fff, 0x400, {0x0, 0x3}}, {0xfffc, 0x8001, {0x3, 0x6}}, {0x9, 0x7ff, {0x2, 0x30b5}}, {0x5, 0x8001, {0x3, 0x3}}, {0x400, 0x3, {0x3, 0xfffffffd}}, {0x8, 0x4, {0x2, 0x7c}}, {0xe, 0x8c, {0x1, 0x9}}, {0x4, 0x3, {0x3, 0x400000}}, {0x4, 0x7, {0x1, 0x9}}, {0x0, 0xff81, {0x1, 0x8001}}, {0x4bfd, 0x5, {0x0, 0xffffffff}}, {0x4, 0x7, {0x3, 0xff}}, {0x6, 0x1ff, {0x1, 0x4}}, {0x9, 0xeec, {0x1, 0x10001}}, {0x9, 0x5, {0x0, 0x5}}, {0x7, 0x200, {0x1, 0x10001}}, {0x101, 0xf, {0x1, 0x5e}}, {0x5, 0x0, {0x3, 0xea}}, {0x58f5, 0xff}, {0x3, 0x7, {0x1, 0x4}}, {0x3, 0x101, {0x1, 0x10000}}, {0x6, 0x0, {0x3, 0x9}}, {0x2, 0x1, {0x3, 0x6}}, {0x9, 0x1, {0x0, 0x200}}, {0x1000, 0x79, {0x1, 0x9}}, {0x3, 0x8, {0x3, 0x96}}, {0xfff, 0x200, {0x1, 0x3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0xc800}, 0x40080)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8a8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x440c0}, 0x87f3ac1894b8f345)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @local}}, 0x2}, 0x90)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, &(0x7f0000000580))
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan3\x00', <r2=>0x0})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x3}}, './file0\x00'})
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r3)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x822}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1ff}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200000d9}, 0x4)
write(r0, &(0x7f0000000840)="7b2c9d05e1a156795389e46338a6e9639a21cba54d68e7bd521a92570a78f80dbf070c6b534e8c61cec57e56d71a28009c9db28835e406a8cacf32717c", 0x3d)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000880)={<r5=>0x0, 0x0, 0xf, 0x40, 0x6, 0x9, 0x6, 0x101, {<r6=>0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x9, 0x9, 0x3, 0x8, 0xce1}}, &(0x7f0000000940)=0xb0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r6, 0xffffffff, 0x8}, 0xc)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0x10000, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000a00), 0x92400, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, &(0x7f0000000a40)="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")
setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000001a40)=0x1, 0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000001a80)={{0x1, 0x1, 0x18, <r8=>r3, {0xbda}}, './file0\x00'})
accept$phonet_pipe(r8, &(0x7f0000001ac0), &(0x7f0000001b00)=0x10)
r9 = accept4$tipc(0xffffffffffffffff, &(0x7f0000001b40), &(0x7f0000001b80)=0x10, 0x80000)
setsockopt$TIPC_MCAST_BROADCAST(r9, 0x10f, 0x85)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000001bc0)={0x7fff, 0x200, 0x7, 0x4dd92719, r5}, 0x10)
mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
openat(r3, &(0x7f0000001c00)='./file0\x00', 0x100, 0x42)
r11 = socket$inet6(0xa, 0x4, 0x9f)
readv(r11, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/213, 0xd5}, {&(0x7f0000001d40)=""/186, 0xba}], 0x2)
sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x48, 0x0, 0x234, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x80)

72.716865ms ago: executing program 1 (id=342):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
setns(0xc9, 0x0) (async)
r1 = socket(0x8, 0x5, 0x5)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x42000004, 0x0, 0x0) (async)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}]}, 0x44}, 0x1, 0xa7, 0x0, 0x400c085}, 0x0)

15.731334ms ago: executing program 1 (id=343):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000008c}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
syz_emit_ethernet(0x42, &(0x7f00000003c0)={@remote, @random="8e11b2a42b37", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mcast2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}}}}, &(0x7f0000000440)={0x0, 0x1, [0x41b, 0xd8e, 0x201, 0x759]})
fcntl$setlease(r2, 0x400, 0x1)
fcntl$setlease(r2, 0x400, 0x1)
r3 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='minorve\xf1sion\x00\xb0\xdfd\x95\xb6\xaa\x83\x1e\xb8\v\xa3lB\xe2\xc1\xbbb\xb3\x9bi\x03\x80\x85\"\x1c\xef\x1f\xd1\xd1\xec\xaeB\x12\x9cq\x90\xf5H\xc3:\xabk\x9d[\x10\xe6\xf4\xcf\x86E\x14\x84\x00o\xa3|t\x00\xdb\xe0R+\n\x8c\xaf\xa0$', &(0x7f0000000280)='5\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x9c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x106f}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x75a9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x9c}}, 0x8008006)
r5 = dup(r1)
write$UHID_INPUT(r5, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006)

1.121536ms ago: executing program 3 (id=344):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x8)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
write(r1, 0x0, 0xa00)

0s ago: executing program 1 (id=345):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fdffffff0c10000007000000080009000200000008000b"], 0x2c}}, 0x890)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000825bd7000000008000a000100000006001c00010000005ed271832fa788cba77560133639a805001300040000000600010007000000050004000000000005000d0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x8810)
bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001500010000000000000000000a000000080001000000000008000200010000000800030001000000a9060000000000000023"], 0x2c}}, 0x0)

kernel console output (not intermixed with test programs):

ve_1: entered promiscuous mode
[  375.034800][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.045852][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.045950][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.046235][ T5794] bridge_slave_1: entered allmulticast mode
[  375.047606][ T5794] bridge_slave_1: entered promiscuous mode
[  375.062689][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.062770][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.063282][ T5793] bridge_slave_0: entered allmulticast mode
[  375.064851][ T5793] bridge_slave_0: entered promiscuous mode
[  375.068500][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.068653][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.068728][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.068826][ T5793] bridge_slave_1: entered allmulticast mode
[  375.070333][ T5793] bridge_slave_1: entered promiscuous mode
[  375.073804][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.075504][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.121615][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.145582][ T5785] team0: Port device team_slave_0 added
[  375.158663][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.161249][ T5786] team0: Port device team_slave_0 added
[  375.162413][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.164036][ T5786] team0: Port device team_slave_1 added
[  375.165715][ T5785] team0: Port device team_slave_1 added
[  375.177511][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.194838][ T5794] team0: Port device team_slave_0 added
[  375.218076][ T5794] team0: Port device team_slave_1 added
[  375.230255][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.230267][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  375.230279][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.237526][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.237541][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  375.237560][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.248118][ T5793] team0: Port device team_slave_0 added
[  375.248637][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.248649][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  375.248670][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.250672][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.250683][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  375.250703][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.251567][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.251577][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  375.251593][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.252409][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.252419][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  375.252439][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.260116][ T5793] team0: Port device team_slave_1 added
[  375.320211][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.320226][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  375.320244][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.324344][ T5786] hsr_slave_0: entered promiscuous mode
[  375.324843][ T5786] hsr_slave_1: entered promiscuous mode
[  375.335918][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.335928][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  375.335940][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.339999][ T5785] hsr_slave_0: entered promiscuous mode
[  375.340860][ T5785] hsr_slave_1: entered promiscuous mode
[  375.341173][ T5785] debugfs: 'hsr0' already exists in 'hsr'
[  375.341251][ T5785] Cannot create hsr debugfs directory
[  375.397298][ T5794] hsr_slave_0: entered promiscuous mode
[  375.397865][ T5794] hsr_slave_1: entered promiscuous mode
[  375.398204][ T5794] debugfs: 'hsr0' already exists in 'hsr'
[  375.398216][ T5794] Cannot create hsr debugfs directory
[  375.452052][ T5793] hsr_slave_0: entered promiscuous mode
[  375.452933][ T5793] hsr_slave_1: entered promiscuous mode
[  375.453452][ T5793] debugfs: 'hsr0' already exists in 'hsr'
[  375.453467][ T5793] Cannot create hsr debugfs directory
[  375.743155][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  375.751357][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  375.752523][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  375.756853][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  375.757373][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  375.760033][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  375.761630][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  375.764880][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  375.809855][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  375.814113][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  375.816685][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  375.821726][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  375.823750][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  375.828895][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  375.832380][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  375.835169][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  375.895307][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  375.897535][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  375.897960][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  375.900136][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  375.900576][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  375.902632][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  375.905159][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  375.908905][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  375.974293][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  375.976951][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  375.977610][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  375.979390][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  375.979909][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  375.981740][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  375.988713][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  375.991186][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  375.996964][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.042573][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[  376.063250][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.063319][ T5804] bridge0: port 1(bridge_slave_0) entered forwarding state
[  376.082531][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.082675][ T5804] bridge0: port 2(bridge_slave_1) entered forwarding state
[  376.105099][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.132380][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.142256][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[  376.157936][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.157983][ T5804] bridge0: port 1(bridge_slave_0) entered forwarding state
[  376.174257][ T5794] 8021q: adding VLAN 0 to HW filter on device team0
[  376.185309][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.187147][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.187227][ T5804] bridge0: port 1(bridge_slave_0) entered forwarding state
[  376.188795][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.188870][ T5804] bridge0: port 2(bridge_slave_1) entered forwarding state
[  376.202234][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.202314][ T5804] bridge0: port 2(bridge_slave_1) entered forwarding state
[  376.226175][ T5800] Bluetooth: hci1: command tx timeout
[  376.226808][ T5799] Bluetooth: hci3: command tx timeout
[  376.226981][ T5800] Bluetooth: hci0: command tx timeout
[  376.227248][ T5792] Bluetooth: hci2: command tx timeout
[  376.253825][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[  376.274998][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.275081][ T5804] bridge0: port 1(bridge_slave_0) entered forwarding state
[  376.288322][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.288407][ T5804] bridge0: port 2(bridge_slave_1) entered forwarding state
[  376.513848][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.567571][ T5786] veth0_vlan: entered promiscuous mode
[  376.570141][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.581419][ T5786] veth1_vlan: entered promiscuous mode
[  376.607037][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.633033][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.648214][ T5793] veth0_vlan: entered promiscuous mode
[  376.662773][ T5786] veth0_macvtap: entered promiscuous mode
[  376.666499][ T5793] veth1_vlan: entered promiscuous mode
[  376.676320][ T5786] veth1_macvtap: entered promiscuous mode
[  376.709776][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.724954][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.734717][ T5793] veth0_macvtap: entered promiscuous mode
[  376.745835][ T5785] veth0_vlan: entered promiscuous mode
[  376.746222][ T5794] veth0_vlan: entered promiscuous mode
[  376.752115][ T5793] veth1_macvtap: entered promiscuous mode
[  376.771909][ T5794] veth1_vlan: entered promiscuous mode
[  376.781032][ T5785] veth1_vlan: entered promiscuous mode
[  376.802747][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.827238][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.834908][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.861481][ T5794] veth0_macvtap: entered promiscuous mode
[  376.875301][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.875319][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  376.879685][ T5785] veth0_macvtap: entered promiscuous mode
[  376.892856][ T5794] veth1_macvtap: entered promiscuous mode
[  376.908764][ T5785] veth1_macvtap: entered promiscuous mode
[  376.921150][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.923953][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.925096][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.925113][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  376.974111][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.974528][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.974555][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.974573][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.974591][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.974608][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.974626][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.974643][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.974660][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.974678][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.974695][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.974712][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.987184][ T5804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.987203][ T5804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.000665][ T5786] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  377.006929][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[  377.058755][ T5804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.058767][ T5804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.096446][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.096466][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.115250][ T5865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  377.115326][ T5865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  377.115485][ T5865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  377.115650][ T5865] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.146458][ T5815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.146470][ T5815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.186177][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.186193][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.232005][ T5815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.232024][ T5815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.492500][ T5965] bond1 (unregistering): Released all slaves
[  377.603012][ T5973] =======================================================
[  377.603012][ T5973] WARNING: The mand mount option has been deprecated and
[  377.603012][ T5973]          and is ignored by this kernel. Remove the mand
[  377.603012][ T5973]          option from the mount to silence this warning.
[  377.603012][ T5973] =======================================================
[  377.605361][ T5975] overlay: filesystem on ./file0 is read-only
[  377.779045][ T5984] tipc: Started in network mode
[  377.779068][ T5984] tipc: Node identity e0000001, cluster identity 4711
[  377.779105][ T5984] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  377.839186][ T5996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18'.
[  377.890126][ T6000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'.
[  377.996129][ T6002] netlink: 'syz.3.21': attribute type 1 has an invalid length.
[  378.008281][ T6002] gretap1: entered promiscuous mode
[  378.076449][ T6006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22'.
[  378.176124][ T6019] netlink: 56 bytes leftover after parsing attributes in process `syz.1.24'.
[  378.227853][ T6022] netlink: 72 bytes leftover after parsing attributes in process `syz.0.27'.
[  378.228171][ T6024] xt_policy: output policy not valid in PREROUTING and INPUT
[  378.304909][ T5800] Bluetooth: hci0: command tx timeout
[  378.315430][ T5800] Bluetooth: hci2: command tx timeout
[  378.315452][ T5800] Bluetooth: hci3: command tx timeout
[  378.347409][ T6039] No such timeout policy "syz1"
[  378.359136][ T6011] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5
[  378.416710][ T6045] --map-set only usable from mangle table
[  378.537424][ T6063] syzkaller0: entered promiscuous mode
[  378.537446][ T6063] syzkaller0: entered allmulticast mode
[  378.555980][ T1441] ieee802154 phy0 wpan0: encryption failed: -22
[  378.556011][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[  378.654053][ T6072] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  378.654065][ T6072] overlayfs: missing 'lowerdir'
[  378.694291][  T912] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  378.781476][ T6075] Bluetooth: MGMT ver 1.23
[  378.854525][  T912] usb 7-1: Using ep0 maxpacket: 32
[  378.859560][  T912] usb 7-1: unable to get BOS descriptor or descriptor too short
[  378.859599][  T912] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  378.874089][  T912] usb 7-1: string descriptor 0 read error: -22
[  378.875933][  T912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.914592][  T912] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  378.914613][  T912] dw2102: su3000_power_ctrl: 1, initialized 0
[  378.914783][  T912] dvb-usb: bulk message failed: -22 (2/0)
[  378.923355][  T912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  378.925900][  T912] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  378.925941][  T912] usb 7-1: media controller created
[  378.926314][  T912] dvb-usb: bulk message failed: -22 (6/0)
[  378.926327][  T912] dw2102: i2c transfer failed.
[  378.926353][  T912] dvb-usb: bulk message failed: -22 (6/0)
[  378.926365][  T912] dw2102: i2c transfer failed.
[  378.926375][  T912] dvb-usb: bulk message failed: -22 (6/0)
[  378.926385][  T912] dw2102: i2c transfer failed.
[  378.926393][  T912] dvb-usb: bulk message failed: -22 (6/0)
[  378.926404][  T912] dw2102: i2c transfer failed.
[  378.926412][  T912] dvb-usb: bulk message failed: -22 (6/0)
[  378.926421][  T912] dw2102: i2c transfer failed.
[  378.926430][  T912] dvb-usb: bulk message failed: -22 (6/0)
[  378.926445][  T912] dw2102: i2c transfer failed.
[  378.926452][  T912] dvb-usb: MAC address: 02:02:02:02:02:02
[  378.937469][  T912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  378.955234][ T6077] capability: warning: `syz.3.40' uses 32-bit capabilities (legacy support in use)
[  378.955490][  T912] dvb-usb: bulk message failed: -22 (3/0)
[  378.955505][  T912] dw2102: command 0x0e transfer failed.
[  378.955509][  T912] dvb-usb: bulk message failed: -22 (3/0)
[  378.955515][  T912] dw2102: command 0x0e transfer failed.
[  378.994385][   T43] kauditd_printk_skb: 115 callbacks suppressed
[  378.994396][   T43] audit: type=1400 audit(1790250136.583:285): avc:  denied  { read write } for  pid=6079 comm="syz.3.41" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  378.994579][   T43] audit: type=1400 audit(1790250136.593:286): avc:  denied  { open } for  pid=6079 comm="syz.3.41" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  378.996352][   T43] audit: type=1400 audit(1790250136.593:287): avc:  denied  { ioctl } for  pid=6079 comm="syz.3.41" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  379.018982][   T43] audit: type=1400 audit(1790250136.613:288): avc:  denied  { read write } for  pid=6084 comm="syz.1.42" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  379.019206][   T43] audit: type=1400 audit(1790250136.613:289): avc:  denied  { open } for  pid=6084 comm="syz.1.42" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  379.021344][   T43] audit: type=1400 audit(1790250136.613:290): avc:  denied  { ioctl } for  pid=6084 comm="syz.1.42" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x2288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  379.051995][   T43] audit: type=1400 audit(1790250136.643:291): avc:  denied  { setopt } for  pid=6089 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  379.053232][   T43] audit: type=1400 audit(1790250136.643:292): avc:  denied  { getopt } for  pid=6089 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  379.075758][   T43] audit: type=1400 audit(1790250136.673:293): avc:  denied  { create } for  pid=6088 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  379.076233][   T43] audit: type=1400 audit(1790250136.673:294): avc:  denied  { bind } for  pid=6088 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  379.170312][ T6105] netlink: 'syz.1.46': attribute type 1 has an invalid length.
[  379.170325][ T6105] netlink: 'syz.1.46': attribute type 2 has an invalid length.
[  379.239603][ T6110] FAULT_INJECTION: forcing a failure.
[  379.239603][ T6110] name failslab, interval 1, probability 0, space 0, times 0
[  379.239624][ T6110] CPU: 1 UID: 0 PID: 6110 Comm: syz.1.50 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  379.239639][ T6110] Tainted: [L]=SOFTLOCKUP
[  379.239642][ T6110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  379.239648][ T6110] Call Trace:
[  379.239652][ T6110]  <TASK>
[  379.239656][ T6110]  dump_stack_lvl+0x100/0x190
[  379.239676][ T6110]  should_fail_ex.cold+0x5/0xa
[  379.239692][ T6110]  should_failslab+0xc2/0x120
[  379.239707][ T6110]  kmem_cache_alloc_noprof+0x92/0x6a0
[  379.239720][ T6110]  ? vm_area_dup+0x27/0x9d0
[  379.239737][ T6110]  vm_area_dup+0x27/0x9d0
[  379.239753][ T6110]  __split_vma+0x19c/0x1de0
[  379.239771][ T6110]  ? find_held_lock+0x2b/0x80
[  379.239787][ T6110]  ? __pfx___split_vma+0x10/0x10
[  379.239802][ T6110]  ? process_measurement+0x4c8/0x2350
[  379.239822][ T6110]  vma_modify+0x1ef4/0x29b0
[  379.239840][ T6110]  ? __lock_acquire+0x560/0x1f40
[  379.239855][ T6110]  ? __pfx_vma_modify+0x10/0x10
[  379.239872][ T6110]  ? lock_acquire+0x1d1/0x380
[  379.239883][ T6110]  ? finish_task_switch.isra.0+0x149/0x10d0
[  379.239897][ T6110]  ? finish_task_switch.isra.0+0x2bd/0x10d0
[  379.239915][ T6110]  vma_modify_flags+0x2c3/0x460
[  379.239933][ T6110]  ? __pfx_vma_modify_flags+0x10/0x10
[  379.239961][ T6110]  mlock_fixup+0x4a8/0xc60
[  379.239979][ T6110]  ? __pfx_mlock_fixup+0x10/0x10
[  379.240002][ T6110]  apply_vma_lock_flags+0x390/0x500
[  379.240021][ T6110]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[  379.240043][ T6110]  ? futex_wait+0x11e/0x370
[  379.240055][ T6110]  ? down_write_killable+0x152/0x240
[  379.240068][ T6110]  ? rcu_read_lock_any_held+0x6a/0x90
[  379.240086][ T6110]  do_mlock+0x261/0x800
[  379.240104][ T6110]  ? do_futex+0x190/0x440
[  379.240139][ T6110]  ? __pfx_do_mlock+0x10/0x10
[  379.240155][ T6110]  ? __pfx_do_futex+0x10/0x10
[  379.240171][ T6110]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  379.240190][ T6110]  ? __x64_sys_futex+0x34f/0x4d0
[  379.240204][ T6110]  ? __x64_sys_futex+0x358/0x4d0
[  379.240221][ T6110]  __x64_sys_mlock+0xce/0x120
[  379.240232][ T6110]  ? __pfx___x64_sys_mlock+0x10/0x10
[  379.240246][ T6110]  do_syscall_64+0x123/0x790
[  379.240263][ T6110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.240274][ T6110] RIP: 0033:0x7f0f1cf9e159
[  379.240283][ T6110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.240293][ T6110] RSP: 002b:00007f0f1de9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  379.240304][ T6110] RAX: ffffffffffffffda RBX: 00007f0f1d225fa0 RCX: 00007f0f1cf9e159
[  379.240311][ T6110] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000
[  379.240317][ T6110] RBP: 00007f0f1d03506b R08: 0000000000000000 R09: 0000000000000000
[  379.240324][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  379.240330][ T6110] R13: 00007f0f1d226038 R14: 00007f0f1d225fa0 R15: 00007ffe615fd0f8
[  379.240343][ T6110]  </TASK>
[  379.275223][  T912] dvb-usb: bulk message failed: -22 (3/0)
[  379.275236][  T912] dw2102: command 0x0e transfer failed.
[  379.275240][  T912] dvb-usb: bulk message failed: -22 (3/0)
[  379.275246][  T912] dw2102: command 0x0e transfer failed.
[  379.275250][  T912] dvb-usb: bulk message failed: -22 (1/0)
[  379.275255][  T912] dw2102: command 0x51 transfer failed.
[  379.299809][  T912] DVB: Unable to find symbol ds3000_attach()
[  379.299819][  T912] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  379.302006][ T6119] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  379.364326][  T912] rc_core: IR keymap rc-su3000 not found
[  379.364336][  T912] Registered IR keymap rc-empty
[  379.369164][  T912] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0
[  379.370607][  T912] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input6
[  379.379577][  T912] dvb-usb: schedule remote query interval to 150 msecs.
[  379.379589][  T912] dw2102: su3000_power_ctrl: 0, initialized 1
[  379.379596][  T912] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  379.386100][  T912] usb 7-1: USB disconnect, device number 2
[  379.477943][  T912] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  379.791645][ T6140] mmap: syz.2.59 (6140) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  379.792050][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'.
[  379.792067][ T6140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.59'.
[  379.870207][ T5792] Bluetooth: hci0: failed to read key size for handle 200
[  380.236839][ T5792] Bluetooth: hci1: command tx timeout
[  380.384889][ T5792] Bluetooth: hci3: command tx timeout
[  380.384922][ T5792] Bluetooth: hci2: command tx timeout
[  380.446397][ T6164] Driver unsupported XDP return value 0 on prog  (id 5) dev N/A, expect packet loss!
[  380.595793][ T6170] Zero length message leads to an empty skb
[  380.734378][  T912] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  380.762765][ T6184] warning: `syz.0.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  380.775301][ T1356] usb 8-1: new low-speed USB device number 2 using dummy_hcd
[  380.874670][ T6194] capability: warning: `syz.0.70' uses deprecated v2 capabilities in a way that may be insecure
[  380.875011][ T6194] netlink: 'syz.0.70': attribute type 2 has an invalid length.
[  380.896985][  T912] usb 7-1: Using ep0 maxpacket: 32
[  380.899033][  T912] usb 7-1: unable to get BOS descriptor or descriptor too short
[  380.899069][  T912] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  380.903379][  T912] usb 7-1: string descriptor 0 read error: -22
[  380.903459][  T912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.918323][  T912] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  380.918351][  T912] dw2102: su3000_power_ctrl: 1, initialized 0
[  380.918362][  T912] dvb-usb: bulk message failed: -22 (2/0)
[  380.920661][  T912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  380.921086][  T912] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  380.921111][  T912] usb 7-1: media controller created
[  380.921123][  T912] dvb-usb: bulk message failed: -22 (6/0)
[  380.921130][  T912] dw2102: i2c transfer failed.
[  380.921136][  T912] dvb-usb: bulk message failed: -22 (6/0)
[  380.921142][  T912] dw2102: i2c transfer failed.
[  380.921147][  T912] dvb-usb: bulk message failed: -22 (6/0)
[  380.921153][  T912] dw2102: i2c transfer failed.
[  380.921159][  T912] dvb-usb: bulk message failed: -22 (6/0)
[  380.921164][  T912] dw2102: i2c transfer failed.
[  380.921170][  T912] dvb-usb: bulk message failed: -22 (6/0)
[  380.921176][  T912] dw2102: i2c transfer failed.
[  380.921181][  T912] dvb-usb: bulk message failed: -22 (6/0)
[  380.921187][  T912] dw2102: i2c transfer failed.
[  380.921190][  T912] dvb-usb: MAC address: 02:02:02:02:02:02
[  380.923077][ T6199] xt_NFQUEUE: number of total queues is 0
[  380.929329][ T6200] ip_tables: iptables: counters copy to user failed while replacing table
[  380.929507][ T6200] ip_tables: iptables: counters copy to user failed while replacing table
[  380.929648][ T6200] ip_tables: iptables: counters copy to user failed while replacing table
[  380.930260][ T6200] ip_tables: iptables: counters copy to user failed while replacing table
[  380.930355][  T912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  380.930406][ T6200] ip_tables: iptables: counters copy to user failed while replacing table
[  380.930555][ T6200] ip_tables: iptables: counters copy to user failed while replacing table
[  380.930727][ T6200] ip_tables: iptables: counters copy to user failed while replacing table
[  380.930861][ T6200] ip_tables: iptables: counters copy to user failed while replacing table
[  380.931005][ T6200] ip_tables: iptables: counters copy to user failed while replacing table
[  380.931192][ T6200] ip_tables: iptables: counters copy to user failed while replacing table
[  380.934979][ T1356] usb 8-1: Invalid ep0 maxpacket: 16
[  380.949881][  T912] dvb-usb: bulk message failed: -22 (3/0)
[  380.949895][  T912] dw2102: command 0x0e transfer failed.
[  380.949901][  T912] dvb-usb: bulk message failed: -22 (3/0)
[  380.949909][  T912] dw2102: command 0x0e transfer failed.
[  381.037350][ T6211] veth1_macvtap: left promiscuous mode
[  381.037390][ T6211] macsec0: entered promiscuous mode
[  381.037398][ T6211] macsec0: entered allmulticast mode
[  381.064745][ T1356] usb 8-1: new low-speed USB device number 3 using dummy_hcd
[  381.244257][ T1356] usb 8-1: Invalid ep0 maxpacket: 16
[  381.245840][ T1356] usb usb8-port1: attempt power cycle
[  381.254598][  T912] dvb-usb: bulk message failed: -22 (3/0)
[  381.254614][  T912] dw2102: command 0x0e transfer failed.
[  381.254622][  T912] dvb-usb: bulk message failed: -22 (3/0)
[  381.254632][  T912] dw2102: command 0x0e transfer failed.
[  381.254639][  T912] dvb-usb: bulk message failed: -22 (1/0)
[  381.254649][  T912] dw2102: command 0x51 transfer failed.
[  381.255418][ T6167] dvb-usb: bulk message failed: -22 (3/0)
[  381.255434][ T6167] dw2102: i2c transfer failed.
[  381.278707][  T912] DVB: Unable to find symbol ds3000_attach()
[  381.278716][  T912] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  381.335998][  T912] rc_core: IR keymap rc-su3000 not found
[  381.336010][  T912] Registered IR keymap rc-empty
[  381.339288][  T912] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0
[  381.341186][  T912] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input7
[  381.342476][  T912] dvb-usb: schedule remote query interval to 150 msecs.
[  381.342489][  T912] dw2102: su3000_power_ctrl: 0, initialized 1
[  381.342496][  T912] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  381.343887][  T912] usb 7-1: USB disconnect, device number 3
[  381.379811][  T912] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  381.595083][ T1356] usb 8-1: new low-speed USB device number 4 using dummy_hcd
[  381.616270][ T1356] usb 8-1: Invalid ep0 maxpacket: 16
[  381.754980][ T1356] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[  381.776888][ T1356] usb 8-1: Invalid ep0 maxpacket: 16
[  381.777059][ T1356] usb usb8-port1: unable to enumerate USB device
[  381.809663][ T1356] wiimote 0005:057E:0330.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0
[  381.810151][ T1356] wiimote 0005:057E:0330.0002: New device registered
[  381.937197][ T6249] could not allocate digest TFM handle sha224-ssse3
[  381.950884][ T6250] could not allocate digest TFM handle sha224-ssse3
[  382.030602][ T6245] wiimote 0005:057E:0330.0002: Device removed
[  382.085672][ T6274] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock
[  382.130452][ T6277] overlayfs: missing 'lowerdir'
[  382.304631][ T1348] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  382.304664][ T5800] Bluetooth: hci1: command tx timeout
[  382.411229][ T6284] 9pnet_fd: p9_fd_create_unix (6284): problem connecting socket: dev: -111
[  382.451817][ T6284] MTD: Couldn't look up './dev/mtdblock0': -2
[  382.454283][ T1348] usb 5-1: Using ep0 maxpacket: 32
[  382.456350][ T1348] usb 5-1: unable to get BOS descriptor or descriptor too short
[  382.456382][ T1348] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  382.461122][ T1348] usb 5-1: string descriptor 0 read error: -22
[  382.461213][ T1348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.466462][ T5800] Bluetooth: hci2: command tx timeout
[  382.470080][ T1348] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  382.470109][ T1348] dw2102: su3000_power_ctrl: 1, initialized 0
[  382.470121][ T1348] dvb-usb: bulk message failed: -22 (2/0)
[  382.472169][ T1348] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  382.472797][ T1348] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  382.472831][ T1348] usb 5-1: media controller created
[  382.472848][ T1348] dvb-usb: bulk message failed: -22 (6/0)
[  382.472858][ T1348] dw2102: i2c transfer failed.
[  382.472868][ T1348] dvb-usb: bulk message failed: -22 (6/0)
[  382.472877][ T1348] dw2102: i2c transfer failed.
[  382.472885][ T1348] dvb-usb: bulk message failed: -22 (6/0)
[  382.472894][ T1348] dw2102: i2c transfer failed.
[  382.472902][ T1348] dvb-usb: bulk message failed: -22 (6/0)
[  382.472911][ T1348] dw2102: i2c transfer failed.
[  382.472919][ T1348] dvb-usb: bulk message failed: -22 (6/0)
[  382.472928][ T1348] dw2102: i2c transfer failed.
[  382.472936][ T1348] dvb-usb: bulk message failed: -22 (6/0)
[  382.472945][ T1348] dw2102: i2c transfer failed.
[  382.472951][ T1348] dvb-usb: MAC address: 02:02:02:02:02:02
[  382.483453][ T1348] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  382.492909][ T1348] dvb-usb: bulk message failed: -22 (3/0)
[  382.492924][ T1348] dw2102: command 0x0e transfer failed.
[  382.492931][ T1348] dvb-usb: bulk message failed: -22 (3/0)
[  382.492940][ T1348] dw2102: command 0x0e transfer failed.
[  382.794298][ T1348] dvb-usb: bulk message failed: -22 (3/0)
[  382.794319][ T1348] dw2102: command 0x0e transfer failed.
[  382.794325][ T1348] dvb-usb: bulk message failed: -22 (3/0)
[  382.794337][ T1348] dw2102: command 0x0e transfer failed.
[  382.794343][ T1348] dvb-usb: bulk message failed: -22 (1/0)
[  382.794351][ T1348] dw2102: command 0x51 transfer failed.
[  382.794706][ T6273] dvb-usb: bulk message failed: -22 (3/0)
[  382.794718][ T6273] dw2102: i2c transfer failed.
[  382.811491][ T1348] DVB: Unable to find symbol ds3000_attach()
[  382.811500][ T1348] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  382.864259][ T1348] rc_core: IR keymap rc-su3000 not found
[  382.864272][ T1348] Registered IR keymap rc-empty
[  382.865217][ T1348] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0
[  382.865783][ T1356] wiimote 0005:057E:0330.0002: detected device: Nintendo Wii Remote Plus (Gen 2)
[  382.866690][ T1348] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input8
[  382.868691][ T1348] dvb-usb: schedule remote query interval to 150 msecs.
[  382.868701][ T1348] dw2102: su3000_power_ctrl: 0, initialized 1
[  382.868708][ T1348] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  382.872340][ T1348] usb 5-1: USB disconnect, device number 2
[  382.911576][ T1356] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input10
[  382.927285][ T1356] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input11
[  382.941837][ T1348] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  382.955052][ T1356] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input9
[  383.404303][  T912] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  383.544658][  T912] usb 7-1: device descriptor read/64, error -71
[  383.699268][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699276][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.699317][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699321][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.699361][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699365][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.699403][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699407][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.699445][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699449][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.699487][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699491][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.699534][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699538][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.699576][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699580][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.699617][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699621][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.699658][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699662][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.699701][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699704][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.699742][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699746][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.699824][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699829][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.699870][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699873][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.699917][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699921][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.699959][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.699963][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700000][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700003][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700046][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700050][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700089][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700093][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700131][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700135][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700173][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700176][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700214][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700218][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700256][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700260][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700298][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700301][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700339][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700343][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700390][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700396][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700461][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700467][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700526][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700532][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700622][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700629][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700692][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700698][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700741][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700745][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700783][ T6334] binder: BINDER_SET_CONTEXT_MGR already set
[  383.700786][ T6334] binder: 6314:6334 ioctl 4018620d 200000004a80 returned -16
[  383.700973][ T6342] ubi0: attaching mtd0
[  383.706619][ T6342] ubi0: scanning is finished
[  383.706635][ T6342] ubi0: empty MTD device detected
[  383.771115][ T6316] cgroup: fork rejected by pids controller in /syz3
[  383.804977][  T912] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  383.954226][  T912] usb 7-1: device descriptor read/64, error -71
[  384.003903][ T6342] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  384.003927][ T6342] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  384.003942][ T6342] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  384.003955][ T6342] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  384.003969][ T6342] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  384.003982][ T6342] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  384.003994][ T6342] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1104604913
[  384.004011][ T6342] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  384.005888][ T6365] ubi0: background thread "ubi_bgt0d" started, PID 6365
[  384.064674][  T912] usb usb7-port1: attempt power cycle
[  384.141650][ T6371] netlink: 'syz.3.106': attribute type 1 has an invalid length.
[  384.141664][ T6371] netlink: 'syz.3.106': attribute type 4 has an invalid length.
[  384.141670][ T6371] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.106'.
[  384.142487][   T43] kauditd_printk_skb: 71 callbacks suppressed
[  384.142498][   T43] audit: type=1400 audit(1790250141.733:366): avc:  denied  { mounton } for  pid=6366 comm="syz.3.106" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  384.144063][ T6371] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  384.147608][ T6371] exFAT-fs (nullb0): invalid boot record signature
[  384.147620][ T6371] exFAT-fs (nullb0): failed to read boot sector
[  384.147628][ T6371] exFAT-fs (nullb0): failed to recognize exfat type
[  384.148338][ T6372] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  384.148912][ T6372] exFAT-fs (nullb0): invalid boot record signature
[  384.148922][ T6372] exFAT-fs (nullb0): failed to read boot sector
[  384.148929][ T6372] exFAT-fs (nullb0): failed to recognize exfat type
[  384.415055][  T912] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  384.435823][  T912] usb 7-1: device descriptor read/8, error -71
[  384.674373][  T912] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  384.695112][  T912] usb 7-1: device descriptor read/8, error -71
[  384.807297][  T912] usb usb7-port1: unable to enumerate USB device
[  384.974274][ T5894] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  385.067368][   T43] audit: type=1400 audit(1790250142.663:367): avc:  denied  { map_create } for  pid=6381 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  385.067687][   T43] audit: type=1400 audit(1790250142.663:368): avc:  denied  { map_read map_write } for  pid=6381 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  385.069709][ T6382] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  385.069901][ T6382] exFAT-fs (nullb0): invalid boot record signature
[  385.069910][ T6382] exFAT-fs (nullb0): failed to read boot sector
[  385.069917][ T6382] exFAT-fs (nullb0): failed to recognize exfat type
[  385.073480][   T43] audit: type=1400 audit(1790250142.663:369): avc:  denied  { setopt } for  pid=6381 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  385.124361][ T5894] usb 6-1: Using ep0 maxpacket: 32
[  385.127510][ T5894] usb 6-1: unable to get BOS descriptor or descriptor too short
[  385.127535][ T5894] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  385.133762][ T5894] usb 6-1: string descriptor 0 read error: -22
[  385.133821][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.143848][ T5894] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  385.143877][ T5894] dw2102: su3000_power_ctrl: 1, initialized 0
[  385.143889][ T5894] dvb-usb: bulk message failed: -22 (2/0)
[  385.156354][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  385.158331][ T5894] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  385.158372][ T5894] usb 6-1: media controller created
[  385.158397][ T5894] dvb-usb: bulk message failed: -22 (6/0)
[  385.158408][ T5894] dw2102: i2c transfer failed.
[  385.158419][ T5894] dvb-usb: bulk message failed: -22 (6/0)
[  385.158429][ T5894] dw2102: i2c transfer failed.
[  385.158438][ T5894] dvb-usb: bulk message failed: -22 (6/0)
[  385.158447][ T5894] dw2102: i2c transfer failed.
[  385.158456][ T5894] dvb-usb: bulk message failed: -22 (6/0)
[  385.158467][ T5894] dw2102: i2c transfer failed.
[  385.158477][ T5894] dvb-usb: bulk message failed: -22 (6/0)
[  385.158487][ T5894] dw2102: i2c transfer failed.
[  385.158496][ T5894] dvb-usb: bulk message failed: -22 (6/0)
[  385.158506][ T5894] dw2102: i2c transfer failed.
[  385.158512][ T5894] dvb-usb: MAC address: 02:02:02:02:02:02
[  385.175486][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  385.189810][ T5894] dvb-usb: bulk message failed: -22 (3/0)
[  385.189824][ T5894] dw2102: command 0x0e transfer failed.
[  385.189857][ T5894] dvb-usb: bulk message failed: -22 (3/0)
[  385.189867][ T5894] dw2102: command 0x0e transfer failed.
[  385.431232][   T43] audit: type=1400 audit(1790250143.023:370): avc:  denied  { mount } for  pid=6393 comm="syz.3.113" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  385.449081][   T43] audit: type=1400 audit(1790250143.043:371): avc:  denied  { unmount } for  pid=5786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  385.475397][ T6396] netlink: 'syz.3.114': attribute type 3 has an invalid length.
[  385.475411][ T6396] netlink: 'syz.3.114': attribute type 2 has an invalid length.
[  385.494240][ T5894] dvb-usb: bulk message failed: -22 (3/0)
[  385.494253][ T5894] dw2102: command 0x0e transfer failed.
[  385.494257][ T5894] dvb-usb: bulk message failed: -22 (3/0)
[  385.494263][ T5894] dw2102: command 0x0e transfer failed.
[  385.494267][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  385.494273][ T5894] dw2102: command 0x51 transfer failed.
[  385.494300][ T6377] dvb-usb: bulk message failed: -22 (3/0)
[  385.494308][ T6377] dw2102: i2c transfer failed.
[  385.528761][ T5894] DVB: Unable to find symbol ds3000_attach()
[  385.528770][ T5894] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  385.586109][ T5894] rc_core: IR keymap rc-su3000 not found
[  385.586144][ T5894] Registered IR keymap rc-empty
[  385.586872][ T5894] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0
[  385.587963][ T5894] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input12
[  385.590131][ T5894] dvb-usb: schedule remote query interval to 150 msecs.
[  385.590142][ T5894] dw2102: su3000_power_ctrl: 0, initialized 1
[  385.590148][ T5894] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  385.591783][ T5894] usb 6-1: USB disconnect, device number 2
[  385.629134][ T5894] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  385.645879][   T43] audit: type=1400 audit(1790250143.243:372): avc:  denied  { prog_load } for  pid=6405 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  385.647548][   T43] audit: type=1400 audit(1790250143.243:373): avc:  denied  { ioctl } for  pid=6405 comm="syz.3.117" path="socket:[9174]" dev="sockfs" ino=9174 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  385.685287][   T43] audit: type=1400 audit(1790250143.283:374): avc:  denied  { write } for  pid=6405 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  385.691794][ T6406] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=43 sclass=netlink_xfrm_socket pid=6406 comm=syz.3.117
[  385.693001][   T43] audit: type=1400 audit(1790250143.283:375): avc:  denied  { unmount } for  pid=6405 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  386.046751][ T6428] net_ratelimit: 19 callbacks suppressed
[  386.046764][ T6428] ip_tables: iptables: counters copy to user failed while replacing table
[  386.103506][ T6432] input: syz0 as /devices/virtual/input/input13
[  386.149262][ T6432] lo speed is unknown, defaulting to 1000
[  386.149297][ T6432] lo speed is unknown, defaulting to 1000
[  386.150562][ T6432] lo speed is unknown, defaulting to 1000
[  386.156426][ T6432] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  386.156449][ T6432] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  386.156471][ T6432] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  386.157878][ T6432] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  386.170843][ T6432] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  386.193350][ T6432] lo speed is unknown, defaulting to 1000
[  386.200830][ T6438] netlink: 'syz.1.126': attribute type 4 has an invalid length.
[  386.211798][ T6432] lo speed is unknown, defaulting to 1000
[  386.212343][   T42] lo speed is unknown, defaulting to 1000
[  386.212359][   T42] syz0: Port: 1 Link DOWN
[  386.216422][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'.
[  386.217083][ T6432] lo speed is unknown, defaulting to 1000
[  386.218284][ T6432] lo speed is unknown, defaulting to 1000
[  386.294873][ T6446] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7)
[  386.341969][ T6453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35864 sclass=netlink_route_socket pid=6453 comm=syz.1.131
[  386.475230][ T6463] syz.3.133 uses obsolete (PF_INET,SOCK_PACKET)
[  386.684319][ T5752] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  386.854400][ T5752] usb 6-1: Using ep0 maxpacket: 32
[  386.855778][ T6504] lo speed is unknown, defaulting to 1000
[  386.857199][ T5752] usb 6-1: unable to get BOS descriptor or descriptor too short
[  386.857221][ T5752] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  386.863908][ T5752] usb 6-1: string descriptor 0 read error: -22
[  386.863963][ T5752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.885730][ T5752] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  386.885750][ T5752] dw2102: su3000_power_ctrl: 1, initialized 0
[  386.885759][ T5752] dvb-usb: bulk message failed: -22 (2/0)
[  386.890744][ T5752] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  386.891192][ T5752] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  386.891216][ T5752] usb 6-1: media controller created
[  386.891228][ T5752] dvb-usb: bulk message failed: -22 (6/0)
[  386.891235][ T5752] dw2102: i2c transfer failed.
[  386.891241][ T5752] dvb-usb: bulk message failed: -22 (6/0)
[  386.891247][ T5752] dw2102: i2c transfer failed.
[  386.891253][ T5752] dvb-usb: bulk message failed: -22 (6/0)
[  386.891259][ T5752] dw2102: i2c transfer failed.
[  386.891264][ T5752] dvb-usb: bulk message failed: -22 (6/0)
[  386.891270][ T5752] dw2102: i2c transfer failed.
[  386.891275][ T5752] dvb-usb: bulk message failed: -22 (6/0)
[  386.891281][ T5752] dw2102: i2c transfer failed.
[  386.891286][ T5752] dvb-usb: bulk message failed: -22 (6/0)
[  386.891292][ T5752] dw2102: i2c transfer failed.
[  386.891296][ T5752] dvb-usb: MAC address: 02:02:02:02:02:02
[  386.907754][ T5752] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  386.931759][ T5752] dvb-usb: bulk message failed: -22 (3/0)
[  386.931774][ T5752] dw2102: command 0x0e transfer failed.
[  386.931780][ T5752] dvb-usb: bulk message failed: -22 (3/0)
[  386.931789][ T5752] dw2102: command 0x0e transfer failed.
[  386.982715][ T6514] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  387.180289][ T6529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.145'.
[  387.244721][ T5752] dvb-usb: bulk message failed: -22 (3/0)
[  387.244735][ T5752] dw2102: command 0x0e transfer failed.
[  387.244739][ T5752] dvb-usb: bulk message failed: -22 (3/0)
[  387.244745][ T5752] dw2102: command 0x0e transfer failed.
[  387.244749][ T5752] dvb-usb: bulk message failed: -22 (1/0)
[  387.244755][ T5752] dw2102: command 0x51 transfer failed.
[  387.271677][ T5752] DVB: Unable to find symbol ds3000_attach()
[  387.271687][ T5752] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  387.278118][ T6533] block nbd0: server does not support multiple connections per device.
[  387.280047][ T6533] block nbd0: shutting down sockets
[  387.334235][ T5752] rc_core: IR keymap rc-su3000 not found
[  387.334247][ T5752] Registered IR keymap rc-empty
[  387.335619][ T5752] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0
[  387.337189][ T5752] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input14
[  387.341202][ T5752] dvb-usb: schedule remote query interval to 150 msecs.
[  387.341214][ T5752] dw2102: su3000_power_ctrl: 0, initialized 1
[  387.341220][ T5752] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  387.348072][ T5752] usb 6-1: USB disconnect, device number 3
[  387.405480][ T5752] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  387.456038][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'.
[  387.459844][ T6550] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  387.461975][ T6550] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  387.509915][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'.
[  387.513685][ T6551] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  387.517245][ T6551] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  387.887893][ T6564] ICMPv6: NDISC: Failed to initialize the control socket (err -2)
[  387.933861][ T5800] Bluetooth: hci1: unexpected cc 0x0c22 length: 4 > 1
[  388.224396][ T5894] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  388.224420][ T5894] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  388.238489][ T5800] Bluetooth: hci0: command 0x0c1a tx timeout
[  388.340962][ T6583] netlink: 'syz.1.159': attribute type 3 has an invalid length.
[  388.340975][ T6583] netlink: 'syz.1.159': attribute type 6 has an invalid length.
[  388.340981][ T6583] netlink: 52 bytes leftover after parsing attributes in process `syz.1.159'.
[  388.777523][ T6620] nvme nvme0: failed to connect socket: -111
[  388.854271][ T1356] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  389.004382][ T1356] usb 6-1: Using ep0 maxpacket: 32
[  389.010318][ T1356] usb 6-1: unable to get BOS descriptor or descriptor too short
[  389.010351][ T1356] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  389.015159][ T1356] usb 6-1: string descriptor 0 read error: -22
[  389.015215][ T1356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.024707][ T1356] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  389.024727][ T1356] dw2102: su3000_power_ctrl: 1, initialized 0
[  389.024736][ T1356] dvb-usb: bulk message failed: -22 (2/0)
[  389.034831][ T1356] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  389.035405][ T1356] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  389.035428][ T1356] usb 6-1: media controller created
[  389.035441][ T1356] dvb-usb: bulk message failed: -22 (6/0)
[  389.035448][ T1356] dw2102: i2c transfer failed.
[  389.035454][ T1356] dvb-usb: bulk message failed: -22 (6/0)
[  389.035460][ T1356] dw2102: i2c transfer failed.
[  389.035465][ T1356] dvb-usb: bulk message failed: -22 (6/0)
[  389.035471][ T1356] dw2102: i2c transfer failed.
[  389.035477][ T1356] dvb-usb: bulk message failed: -22 (6/0)
[  389.035482][ T1356] dw2102: i2c transfer failed.
[  389.035488][ T1356] dvb-usb: bulk message failed: -22 (6/0)
[  389.035494][ T1356] dw2102: i2c transfer failed.
[  389.035499][ T1356] dvb-usb: bulk message failed: -22 (6/0)
[  389.035505][ T1356] dw2102: i2c transfer failed.
[  389.035508][ T1356] dvb-usb: MAC address: 02:02:02:02:02:02
[  389.041676][ T1356] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  389.051544][ T1356] dvb-usb: bulk message failed: -22 (3/0)
[  389.051554][ T1356] dw2102: command 0x0e transfer failed.
[  389.051558][ T1356] dvb-usb: bulk message failed: -22 (3/0)
[  389.051564][ T1356] dw2102: command 0x0e transfer failed.
[  389.087159][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'.
[  389.094408][ T2322] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  389.245586][ T2322] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  389.246446][ T2322] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  389.246471][ T2322] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  389.246487][ T2322] usb 5-1: config 0 interface 0 has no altsetting 0
[  389.247948][ T2322] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  389.247960][ T2322] usb 5-1: Product: syz
[  389.247967][ T2322] usb 5-1: Manufacturer: syz
[  389.247974][ T2322] usb 5-1: SerialNumber: syz
[  389.249656][ T2322] usb 5-1: config 0 descriptor??
[  389.252051][ T2322] hub 5-1:0.0: bad descriptor, ignoring hub
[  389.252113][ T2322] hub 5-1:0.0: probe with driver hub failed with error -5
[  389.257310][ T2322] usb 5-1: selecting invalid altsetting 0
[  389.354254][ T1356] dvb-usb: bulk message failed: -22 (3/0)
[  389.354268][ T1356] dw2102: command 0x0e transfer failed.
[  389.354272][ T1356] dvb-usb: bulk message failed: -22 (3/0)
[  389.354278][ T1356] dw2102: command 0x0e transfer failed.
[  389.354282][ T1356] dvb-usb: bulk message failed: -22 (1/0)
[  389.354288][ T1356] dw2102: command 0x51 transfer failed.
[  389.373555][ T1356] DVB: Unable to find symbol ds3000_attach()
[  389.373565][ T1356] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  389.414502][ T1356] rc_core: IR keymap rc-su3000 not found
[  389.414516][ T1356] Registered IR keymap rc-empty
[  389.416965][ T1356] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0
[  389.417901][ T1356] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input15
[  389.420911][ T1356] dvb-usb: schedule remote query interval to 150 msecs.
[  389.420922][ T1356] dw2102: su3000_power_ctrl: 0, initialized 1
[  389.420928][ T1356] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  389.429548][ T1356] usb 6-1: USB disconnect, device number 4
[  389.453880][ T1356] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  389.500301][ T6637] bond0: entered promiscuous mode
[  389.500317][ T6637] bond_slave_0: entered promiscuous mode
[  389.500418][ T6637] bond_slave_1: entered promiscuous mode
[  389.685924][   T43] kauditd_printk_skb: 35 callbacks suppressed
[  389.685937][   T43] audit: type=1400 audit(1790250147.283:411): avc:  denied  { execute } for  pid=6639 comm="syz.3.173" name="file1" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  389.876974][ T6624] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[  390.030433][ T6624] usb 5-1: device firmware changed
[  390.033277][ T1348] usb 5-1: USB disconnect, device number 3
[  390.069975][ T6651] netlink: 104 bytes leftover after parsing attributes in process `syz.2.175'.
[  390.084229][ T5874] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  390.214265][ T1348] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  390.254645][ T5874] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  390.256364][ T5874] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  390.256381][ T5874] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4
[  390.256394][ T5874] usb 6-1: config 0 interface 0 has no altsetting 0
[  390.257989][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  390.258002][ T5874] usb 6-1: Product: syz
[  390.258009][ T5874] usb 6-1: Manufacturer: syz
[  390.258016][ T5874] usb 6-1: SerialNumber: syz
[  390.259229][ T5874] usb 6-1: config 0 descriptor??
[  390.268287][ T5874] usb 6-1: selecting invalid altsetting 0
[  390.314274][ T5800] Bluetooth: hci1: command 0x0c1a tx timeout
[  390.314352][ T5894] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  390.314361][ T5894] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  390.365011][ T1348] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  390.367042][ T1348] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  390.367079][ T1348] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  390.367093][ T1348] usb 5-1: config 0 interface 0 has no altsetting 0
[  390.369710][ T1348] usb 5-1: string descriptor 0 read error: -22
[  390.369829][ T1348] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  390.373239][ T1348] usb 5-1: config 0 descriptor??
[  390.378670][ T1348] hub 5-1:0.0: bad descriptor, ignoring hub
[  390.378684][ T1348] hub 5-1:0.0: probe with driver hub failed with error -5
[  390.380497][ T1348] usb 5-1: selecting invalid altsetting 0
[  390.409961][ T6656] FAULT_INJECTION: forcing a failure.
[  390.409961][ T6656] name failslab, interval 1, probability 0, space 0, times 0
[  390.409989][ T6656] CPU: 0 UID: 0 PID: 6656 Comm: syz.2.177 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  390.410011][ T6656] Tainted: [L]=SOFTLOCKUP
[  390.410017][ T6656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  390.410026][ T6656] Call Trace:
[  390.410031][ T6656]  <TASK>
[  390.410038][ T6656]  dump_stack_lvl+0x100/0x190
[  390.410088][ T6656]  should_fail_ex.cold+0x5/0xa
[  390.410112][ T6656]  should_failslab+0xc2/0x120
[  390.410133][ T6656]  __kmalloc_noprof+0xfc/0x840
[  390.410150][ T6656]  ? rcu_is_watching+0x13/0xc0
[  390.410171][ T6656]  ? tomoyo_realpath_from_path+0xb6/0x690
[  390.410197][ T6656]  tomoyo_realpath_from_path+0xb6/0x690
[  390.410222][ T6656]  tomoyo_path_number_perm+0x23c/0x580
[  390.410239][ T6656]  ? tomoyo_path_number_perm+0x22e/0x580
[  390.410257][ T6656]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  390.410282][ T6656]  ? __lock_acquire+0x5c0/0x1f40
[  390.410310][ T6656]  ? __fget_files+0x34/0x3d0
[  390.410330][ T6656]  ? find_held_lock+0x2b/0x80
[  390.410353][ T6656]  ? hook_file_ioctl_common+0x140/0x440
[  390.410376][ T6656]  ? __fget_files+0x21f/0x3d0
[  390.410392][ T6656]  security_file_ioctl+0xd3/0x230
[  390.410406][ T6656]  __x64_sys_ioctl+0xb7/0x210
[  390.410419][ T6656]  do_syscall_64+0x123/0x790
[  390.410437][ T6656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.410448][ T6656] RIP: 0033:0x7f797519e159
[  390.410458][ T6656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  390.410467][ T6656] RSP: 002b:00007f7976041028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  390.410478][ T6656] RAX: ffffffffffffffda RBX: 00007f7975425fa0 RCX: 00007f797519e159
[  390.410485][ T6656] RDX: 0000200000044b40 RSI: 0000000080306403 RDI: 0000000000000003
[  390.410491][ T6656] RBP: 00007f7976041090 R08: 0000000000000000 R09: 0000000000000000
[  390.410497][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  390.410504][ T6656] R13: 00007f7975426038 R14: 00007f7975425fa0 R15: 00007ffc62a097d8
[  390.410517][ T6656]  </TASK>
[  390.410587][ T6656] ERROR: Out of memory at tomoyo_realpath_from_path.
[  390.446631][ T6661] ipt_ECN: cannot use operation on non-tcp rule
[  390.469451][   T43] audit: type=1400 audit(1790250148.053:412): avc:  denied  { getopt } for  pid=6647 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  390.478411][ T2322] usb 6-1: USB disconnect, device number 5
[  390.664811][   T43] audit: type=1400 audit(1790250148.263:413): avc:  denied  { setopt } for  pid=6673 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  390.695229][ T5760] usb 5-1: USB disconnect, device number 4
[  390.954418][ T2322] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  391.017824][ T6680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  391.114849][ T2322] usb 7-1: Using ep0 maxpacket: 32
[  391.117125][   T43] audit: type=1326 audit(1790250148.713:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.185" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d1f59e159 code=0x0
[  391.117226][ T2322] usb 7-1: unable to get BOS descriptor or descriptor too short
[  391.117259][ T2322] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  391.117605][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'.
[  391.117624][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'.
[  391.118463][   T43] audit: type=1400 audit(1790250148.713:415): avc:  denied  { read write } for  pid=6684 comm="syz.1.184" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  391.118695][   T43] audit: type=1400 audit(1790250148.713:416): avc:  denied  { open } for  pid=6684 comm="syz.1.184" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1
[  391.126046][ T2322] usb 7-1: string descriptor 0 read error: -22
[  391.126100][ T2322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.130471][ T2322] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  391.130952][ T2322] dw2102: su3000_power_ctrl: 1, initialized 0
[  391.130969][ T2322] dvb-usb: bulk message failed: -22 (2/0)
[  391.133821][ T2322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  391.137184][ T2322] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  391.137207][ T2322] usb 7-1: media controller created
[  391.137219][ T2322] dvb-usb: bulk message failed: -22 (6/0)
[  391.137226][ T2322] dw2102: i2c transfer failed.
[  391.137232][ T2322] dvb-usb: bulk message failed: -22 (6/0)
[  391.137238][ T2322] dw2102: i2c transfer failed.
[  391.137243][ T2322] dvb-usb: bulk message failed: -22 (6/0)
[  391.137250][ T2322] dw2102: i2c transfer failed.
[  391.137255][ T2322] dvb-usb: bulk message failed: -22 (6/0)
[  391.137261][ T2322] dw2102: i2c transfer failed.
[  391.137266][ T2322] dvb-usb: bulk message failed: -22 (6/0)
[  391.137272][ T2322] dw2102: i2c transfer failed.
[  391.137277][ T2322] dvb-usb: bulk message failed: -22 (6/0)
[  391.137283][ T2322] dw2102: i2c transfer failed.
[  391.137286][ T2322] dvb-usb: MAC address: 02:02:02:02:02:02
[  391.145628][ T2322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  391.155343][ T2322] dvb-usb: bulk message failed: -22 (3/0)
[  391.155354][ T2322] dw2102: command 0x0e transfer failed.
[  391.155358][ T2322] dvb-usb: bulk message failed: -22 (3/0)
[  391.155365][ T2322] dw2102: command 0x0e transfer failed.
[  391.170628][   T43] audit: type=1326 audit(1790250148.763:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6682 comm="syz.0.185" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d1f59e159 code=0x0
[  391.374268][ T5760] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  391.382991][   T43] audit: type=1400 audit(1790250148.973:418): avc:  denied  { ioctl } for  pid=6673 comm="syz.2.181" path="socket:[11890]" dev="sockfs" ino=11890 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  391.474464][ T2322] dvb-usb: bulk message failed: -22 (3/0)
[  391.474486][ T2322] dw2102: command 0x0e transfer failed.
[  391.474493][ T2322] dvb-usb: bulk message failed: -22 (3/0)
[  391.474503][ T2322] dw2102: command 0x0e transfer failed.
[  391.474510][ T2322] dvb-usb: bulk message failed: -22 (1/0)
[  391.474520][ T2322] dw2102: command 0x51 transfer failed.
[  391.474913][ T6674] dvb-usb: bulk message failed: -22 (37/0)
[  391.474929][ T6674] dw2102: i2c transfer failed.
[  391.474941][ T6674] i2c i2c-2: Invalid block size returned: 33
[  391.504680][ T5760] usb 6-1: device descriptor read/64, error -71
[  391.508426][   T43] audit: type=1400 audit(1790250149.103:419): avc:  denied  { write } for  pid=6701 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  391.508499][ T2322] DVB: Unable to find symbol ds3000_attach()
[  391.508510][ T2322] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  391.512594][   T43] audit: type=1400 audit(1790250149.103:420): avc:  denied  { ioctl } for  pid=6701 comm="syz.3.188" path="socket:[11897]" dev="sockfs" ino=11897 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  391.564329][ T2322] rc_core: IR keymap rc-su3000 not found
[  391.564344][ T2322] Registered IR keymap rc-empty
[  391.566615][ T2322] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0
[  391.569896][ T2322] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input16
[  391.573205][ T2322] dvb-usb: schedule remote query interval to 150 msecs.
[  391.573221][ T2322] dw2102: su3000_power_ctrl: 0, initialized 1
[  391.573231][ T2322] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  391.577605][ T2322] usb 7-1: USB disconnect, device number 8
[  391.619725][ T2322] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  391.724418][ T6712] batman_adv: batadv0: Adding interface: dummy0
[  391.724430][ T6712] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  391.724445][ T6712] batman_adv: batadv0: Interface activated: dummy0
[  391.731501][ T6712] batadv0: mtu less than device minimum
[  391.732390][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  391.732895][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  391.733793][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  391.734525][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  391.735058][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  391.735592][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  391.736141][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  391.736734][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  391.737242][ T6712] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  391.765032][ T5760] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  391.894292][ T5760] usb 6-1: device descriptor read/64, error -71
[  392.004775][ T5760] usb usb6-port1: attempt power cycle
[  392.035603][ T6726] batadv_slave_1: entered promiscuous mode
[  392.086117][ T6725] batadv_slave_1: left promiscuous mode
[  392.114433][ T6731] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size.
[  392.116975][ T6730] process 'syz.2.197' launched './file2' with NULL argv: empty string added
[  392.376421][ T5760] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  392.384391][ T5800] Bluetooth: hci2: command 0x0c1a tx timeout
[  392.385951][ T5894] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  392.385963][ T5894] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  392.386394][ T6759] netlink: 'syz.2.204': attribute type 1 has an invalid length.
[  392.407210][ T5760] usb 6-1: device descriptor read/8, error -71
[  392.409649][ T6759] 8021q: adding VLAN 0 to HW filter on device bond1
[  392.423472][ T6759] macvtap1: entered allmulticast mode
[  392.429434][ T6759] bond1: (slave geneve2): making interface the new active one
[  392.431227][ T6759] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  392.612770][ T6793] netlink: 'syz.3.212': attribute type 2 has an invalid length.
[  392.612790][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'.
[  392.619413][ T6793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.212'.
[  392.664246][ T5760] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  392.667802][ T6793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6793 comm=syz.3.212
[  392.681527][ T6793] netlink: 'syz.3.212': attribute type 10 has an invalid length.
[  392.684679][ T6793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.685295][ T6793] batadv0: entered promiscuous mode
[  392.685769][ T6793] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  392.695335][ T5760] usb 6-1: device descriptor read/8, error -71
[  392.724946][ T6800] netlink: 48 bytes leftover after parsing attributes in process `syz.3.215'.
[  392.804798][ T5760] usb usb6-port1: unable to enumerate USB device
[  392.852035][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'.
[  392.884267][ T6389] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  393.044245][ T6389] usb 7-1: Using ep0 maxpacket: 32
[  393.045897][ T6389] usb 7-1: unable to get BOS descriptor or descriptor too short
[  393.045928][ T6389] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  393.049118][ T6389] usb 7-1: string descriptor 0 read error: -22
[  393.049190][ T6389] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.052516][ T6389] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  393.052534][ T6389] dw2102: su3000_power_ctrl: 1, initialized 0
[  393.052542][ T6389] dvb-usb: bulk message failed: -22 (2/0)
[  393.053903][ T6389] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  393.054528][ T6389] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  393.054563][ T6389] usb 7-1: media controller created
[  393.054581][ T6389] dvb-usb: bulk message failed: -22 (6/0)
[  393.054591][ T6389] dw2102: i2c transfer failed.
[  393.054600][ T6389] dvb-usb: bulk message failed: -22 (6/0)
[  393.054610][ T6389] dw2102: i2c transfer failed.
[  393.054619][ T6389] dvb-usb: bulk message failed: -22 (6/0)
[  393.054628][ T6389] dw2102: i2c transfer failed.
[  393.054637][ T6389] dvb-usb: bulk message failed: -22 (6/0)
[  393.054646][ T6389] dw2102: i2c transfer failed.
[  393.054654][ T6389] dvb-usb: bulk message failed: -22 (6/0)
[  393.054663][ T6389] dw2102: i2c transfer failed.
[  393.054672][ T6389] dvb-usb: bulk message failed: -22 (6/0)
[  393.054681][ T6389] dw2102: i2c transfer failed.
[  393.054687][ T6389] dvb-usb: MAC address: 02:02:02:02:02:02
[  393.063542][ T6389] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  393.071822][ T6389] dvb-usb: bulk message failed: -22 (3/0)
[  393.071832][ T6389] dw2102: command 0x0e transfer failed.
[  393.071836][ T6389] dvb-usb: bulk message failed: -22 (3/0)
[  393.071842][ T6389] dw2102: command 0x0e transfer failed.
[  393.144307][ T5887] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  393.266174][ T5760] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  393.269777][ T5760] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  393.314283][ T5887] usb 5-1: Using ep0 maxpacket: 8
[  393.315030][ T5887] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  393.318207][ T5887] usb 5-1: config 0 has an invalid interface number: 186 but max is 0
[  393.318229][ T5887] usb 5-1: config 0 has no interface number 0
[  393.318259][ T5887] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  393.318276][ T5887] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8
[  393.318296][ T5887] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  393.318314][ T5887] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  393.318333][ T5887] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  393.318349][ T5887] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  393.320959][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.320979][ T5887] usb 5-1: Product: syz
[  393.320991][ T5887] usb 5-1: Manufacturer: syz
[  393.321003][ T5887] usb 5-1: SerialNumber: syz
[  393.323532][ T5887] usb 5-1: config 0 descriptor??
[  393.374322][ T6389] dvb-usb: bulk message failed: -22 (3/0)
[  393.374343][ T6389] dw2102: command 0x0e transfer failed.
[  393.374349][ T6389] dvb-usb: bulk message failed: -22 (3/0)
[  393.374356][ T6389] dw2102: command 0x0e transfer failed.
[  393.374359][ T6389] dvb-usb: bulk message failed: -22 (1/0)
[  393.374365][ T6389] dw2102: command 0x51 transfer failed.
[  393.397478][ T6389] DVB: Unable to find symbol ds3000_attach()
[  393.397491][ T6389] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  393.454267][ T6389] rc_core: IR keymap rc-su3000 not found
[  393.454285][ T6389] Registered IR keymap rc-empty
[  393.456724][ T6389] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0
[  393.458586][ T6389] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input17
[  393.461073][ T6389] dvb-usb: schedule remote query interval to 150 msecs.
[  393.461091][ T6389] dw2102: su3000_power_ctrl: 0, initialized 1
[  393.461103][ T6389] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  393.465063][ T6389] usb 7-1: USB disconnect, device number 9
[  393.515610][ T6389] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  393.526419][ T5760] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  393.533537][ T5887] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  393.730852][ T6811] iowarrior 5-1:0.186: Error -90 while submitting URB
[  393.994745][ T5867] usb 5-1: USB disconnect, device number 5
[  394.038281][ T5760] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  394.068187][ T6829] tmpfs: Unknown parameter 'h�Se'
[  394.086266][ T6813] ceph: No mds server is up or the cluster is laggy
[  394.155256][ T6834] mac80211_hwsim hwsim2 
c
@0�: renamed from wlan0 (while UP)
[  394.156293][ T6833] netlink: 700 bytes leftover after parsing attributes in process `syz.3.226'.
[  394.160742][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'.
[  394.228993][ T6844] netlink: 'syz.1.229': attribute type 11 has an invalid length.
[  394.229012][ T6844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.229'.
[  394.464397][ T5800] Bluetooth: hci3: command 0x0c1a tx timeout
[  394.465655][ T5894] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  394.465675][ T5894] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  394.564386][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  394.593705][ T6857] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes�G
[  394.593732][ T6857] Error validating options; rc = [-22]
[  394.698099][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.699345][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.714300][   T10] usb 6-1: Using ep0 maxpacket: 16
[  394.716024][   T10] usb 6-1: New USB device found, idVendor=1e2d, idProduct=0083, bcdDevice=d7.14
[  394.716848][   T10] usb 6-1: config 2 has an invalid interface number: 158 but max is 3
[  394.716865][   T10] usb 6-1: config 2 has an invalid interface number: 147 but max is 3
[  394.716880][   T10] usb 6-1: config 2 has an invalid interface number: 184 but max is 3
[  394.716895][   T10] usb 6-1: config 2 contains an unexpected descriptor of type 0x2, skipping
[  394.716909][   T10] usb 6-1: config 2 has an invalid interface number: 55 but max is 3
[  394.716924][   T10] usb 6-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  394.716937][   T10] usb 6-1: config 2 has an invalid interface number: 211 but max is 3
[  394.716953][   T10] usb 6-1: config 2 has 5 interfaces, different from the descriptor's value: 4
[  394.716969][   T10] usb 6-1: config 2 has no interface number 0
[  394.716981][   T10] usb 6-1: config 2 has no interface number 1
[  394.716993][   T10] usb 6-1: config 2 has no interface number 2
[  394.717005][   T10] usb 6-1: config 2 has no interface number 3
[  394.717016][   T10] usb 6-1: config 2 has no interface number 4
[  394.717074][   T10] usb 6-1: config 2 interface 158 altsetting 191 endpoint 0x7 has invalid maxpacket 1007, setting to 64
[  394.717097][   T10] usb 6-1: config 2 interface 158 altsetting 191 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  394.717128][   T10] usb 6-1: config 2 interface 147 altsetting 5 endpoint 0x2 has invalid maxpacket 1439, setting to 1024
[  394.717148][   T10] usb 6-1: config 2 interface 147 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 1024
[  394.717166][   T10] usb 6-1: config 2 interface 147 altsetting 5 has a duplicate endpoint with address 0x2, skipping
[  394.717183][   T10] usb 6-1: config 2 interface 147 altsetting 5 has a duplicate endpoint with address 0x2, skipping
[  394.717208][   T10] usb 6-1: config 2 interface 184 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  394.717225][   T10] usb 6-1: config 2 interface 184 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  394.717242][   T10] usb 6-1: config 2 interface 184 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  394.717263][   T10] usb 6-1: too many endpoints for config 2 interface 55 altsetting 122: 158, using maximum allowed: 30
[  394.717291][   T10] usb 6-1: config 2 interface 55 altsetting 122 has a duplicate endpoint with address 0xC, skipping
[  394.717320][   T10] usb 6-1: config 2 interface 55 altsetting 122 has a duplicate endpoint with address 0x2, skipping
[  394.717335][   T10] usb 6-1: config 2 interface 55 altsetting 122 has 3 endpoint descriptors, different from the interface descriptor's value: 158
[  394.717364][   T10] usb 6-1: config 2 interface 211 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[  394.717381][   T10] usb 6-1: config 2 interface 211 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  394.717401][   T10] usb 6-1: config 2 interface 211 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  394.717421][   T10] usb 6-1: config 2 interface 211 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  394.717438][   T10] usb 6-1: config 2 interface 211 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[  394.717455][   T10] usb 6-1: config 2 interface 211 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  394.717472][   T10] usb 6-1: config 2 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  394.717488][   T10] usb 6-1: config 2 interface 158 has no altsetting 0
[  394.717503][   T10] usb 6-1: config 2 interface 147 has no altsetting 0
[  394.717522][   T10] usb 6-1: config 2 interface 55 has no altsetting 0
[  394.719335][   T10] usb 6-1: Dual-Role OTG device on HNP port
[  394.719542][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.719554][   T10] usb 6-1: Product: ᡡ
[  394.719561][   T10] usb 6-1: Manufacturer: 큿濜鷴욀谴坐伿䄋欐ᬧ錪ꎰ⭚耦껭୏땢茴㳣梖作榤饩佴䳽྇ꕖ䴸暴Ԑ㘙쥇찮⿷蹥߱愝휆
[  394.719572][   T10] usb 6-1: SerialNumber: Ћ
[  394.838919][   T43] kauditd_printk_skb: 9 callbacks suppressed
[  394.839033][   T43] audit: type=1400 audit(1790250152.433:430): avc:  denied  { bind } for  pid=6866 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  394.841755][   T43] audit: type=1400 audit(1790250152.433:431): avc:  denied  { ioctl } for  pid=6866 comm="syz.3.235" path="socket:[12874]" dev="sockfs" ino=12874 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  394.935873][   T10] option 6-1:2.158: GSM modem (1-port) converter detected
[  394.944013][   T10] option 6-1:2.184: GSM modem (1-port) converter detected
[  394.945034][ T5887] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  394.960195][   T10] usb 6-1: USB disconnect, device number 10
[  394.963008][   T10] option 6-1:2.158: device disconnected
[  394.968451][   T10] option 6-1:2.184: device disconnected
[  394.987837][   T43] audit: type=1400 audit(1790250152.583:432): avc:  denied  { getopt } for  pid=6882 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  395.105020][ T5887] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  395.108024][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.108039][ T5887] usb 5-1: Product: syz
[  395.108046][ T5887] usb 5-1: Manufacturer: syz
[  395.108053][ T5887] usb 5-1: SerialNumber: syz
[  395.108338][   T43] audit: type=1400 audit(1790250152.703:433): avc:  denied  { mount } for  pid=6887 comm="syz.2.239" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  395.110451][   T43] audit: type=1400 audit(1790250152.703:434): avc:  denied  { mount } for  pid=6887 comm="syz.2.239" name="/" dev="autofs" ino=14437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  395.121303][   T43] audit: type=1400 audit(1790250152.713:435): avc:  denied  { unmount } for  pid=5793 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1
[  395.127609][   T43] audit: type=1400 audit(1790250152.723:436): avc:  denied  { unmount } for  pid=5793 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1
[  395.167221][   T43] audit: type=1400 audit(1790250152.763:437): avc:  denied  { map } for  pid=6889 comm="syz.2.240" path="/dev/usbmon2" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  395.173862][ T6890] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  395.173888][ T6890] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  395.175698][ T6890] vhci_hcd vhci_hcd.0: Device attached
[  395.313334][ T5887] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  395.313351][ T5887] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  395.321448][ T5887] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  395.327390][ T5887] usb 5-1: USB disconnect, device number 6
[  395.474442][ T1348] usb 42-1: SetAddress Request (2) to port 0
[  395.474475][ T1348] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  395.525780][   T58] logitech-hidpp-device 0003:046D:C082.0003: item fetching failed at offset 0/2
[  395.526212][   T58] logitech-hidpp-device 0003:046D:C082.0003: hidpp_probe:parse failed
[  395.526261][   T58] logitech-hidpp-device 0003:046D:C082.0003: probe with driver logitech-hidpp-device failed with error -22
[  395.529124][   T43] audit: type=1400 audit(1790250153.123:438): avc:  denied  { mount } for  pid=6897 comm="syz.1.241" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  395.654295][   T13] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.857506][ T6902] __nla_validate_parse: 2 callbacks suppressed
[  395.857525][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'.
[  395.918264][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'.
[  395.918406][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'.
[  396.076094][ T6917] 9pnet_fd: Insufficient options for proto=fd
[  396.116251][ T6919] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  396.116268][ T6919] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  396.116382][ T6919] vhci_hcd vhci_hcd.0: Device attached
[  396.123600][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'.
[  396.123757][ T6919] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6)
[  396.123774][ T6919] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  396.124262][ T6919] vhci_hcd vhci_hcd.0: Device attached
[  396.125054][ T6922] vhci_hcd vhci_hcd.0: port 0 already used
[  396.129299][ T6919] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11)
[  396.129321][ T6919] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  396.129355][ T6919] vhci_hcd vhci_hcd.0: Device attached
[  396.130142][ T6922] vhci_hcd vhci_hcd.0: port 1 already used
[  396.136883][ T6919] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13)
[  396.136902][ T6919] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  396.136932][ T6919] vhci_hcd vhci_hcd.0: Device attached
[  396.136932][ T6922] vhci_hcd vhci_hcd.0: port 2 already used
[  396.140895][ T6922] vhci_hcd vhci_hcd.0: port 3 already used
[  396.146414][ T6919] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(17)
[  396.146435][ T6919] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  396.146471][ T6919] vhci_hcd vhci_hcd.0: Device attached
[  396.158752][ T6919] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(22)
[  396.158771][ T6919] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  396.158818][ T6919] vhci_hcd vhci_hcd.0: Device attached
[  396.164651][ T6922] vhci_hcd vhci_hcd.0: port 4 already used
[  396.164767][ T6919] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(27)
[  396.164788][ T6919] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  396.164824][ T6919] vhci_hcd vhci_hcd.0: Device attached
[  396.171540][ T6922] vhci_hcd vhci_hcd.0: port 5 already used
[  396.171758][ T6919] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(29)
[  396.171778][ T6919] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  396.171812][ T6919] vhci_hcd vhci_hcd.0: Device attached
[  396.187552][ T6922] vhci_hcd vhci_hcd.0: port 6 already used
[  396.188249][ T6919] vhci_hcd vhci_hcd.0: port 0 already used
[  396.191239][ T6922] vhci_hcd vhci_hcd.0: port 7 already used
[  396.198018][ T6922] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(39)
[  396.198032][ T6922] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  396.198977][ T6922] vhci_hcd vhci_hcd.0: Device attached
[  396.245597][   T43] audit: type=1326 audit(1790250153.843:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.3.251" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc2359e159 code=0x0
[  396.348968][ T6971] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  396.384806][   T10] usb 38-1: SetAddress Request (2) to port 0
[  396.384854][   T10] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[  396.481464][ T6978] CIFS: VFS: UNC: path must begin with // or \\
[  396.481481][ T6978] Malformed UNC in devname
[  396.481481][ T6978] 
[  396.481606][ T6978] CIFS: VFS: Malformed UNC in devname
[  396.481758][ T6946] vhci_hcd: connection closed
[  396.482362][ T6929] vhci_hcd: connection closed
[  396.483587][ T6951] vhci_hcd: connection closed
[  396.483855][ T6932] vhci_hcd: connection closed
[  396.484705][ T6966] usb 40-1: SetAddress Request (2) to port 0
[  396.484738][ T6966] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[  396.485269][ T6941] vhci_hcd: connection closed
[  396.485408][ T6926] vhci_hcd: connection reset by peer
[  396.485541][ T6937] vhci_hcd: connection closed
[  396.486171][ T6978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.255'.
[  396.486202][ T6978] netlink: 9 bytes leftover after parsing attributes in process `syz.1.255'.
[  396.488516][ T5865] vhci_hcd vhci_hcd.0: stop threads
[  396.488914][ T5865] vhci_hcd vhci_hcd.0: release socket
[  396.489366][ T5865] vhci_hcd vhci_hcd.0: disconnect device
[  396.489658][ T5865] vhci_hcd vhci_hcd.0: stop threads
[  396.489668][ T5865] vhci_hcd vhci_hcd.0: release socket
[  396.489709][ T5865] vhci_hcd vhci_hcd.0: disconnect device
[  396.489852][ T5865] vhci_hcd vhci_hcd.0: stop threads
[  396.489860][ T5865] vhci_hcd vhci_hcd.0: release socket
[  396.490213][ T5865] vhci_hcd vhci_hcd.0: disconnect device
[  396.490928][ T5865] vhci_hcd vhci_hcd.0: stop threads
[  396.490938][ T5865] vhci_hcd vhci_hcd.0: release socket
[  396.491017][ T5865] vhci_hcd vhci_hcd.0: disconnect device
[  396.491183][ T5865] vhci_hcd vhci_hcd.0: stop threads
[  396.491191][ T5865] vhci_hcd vhci_hcd.0: release socket
[  396.491240][ T5865] vhci_hcd vhci_hcd.0: disconnect device
[  396.492093][ T5865] vhci_hcd vhci_hcd.0: stop threads
[  396.492105][ T5865] vhci_hcd vhci_hcd.0: release socket
[  396.492167][ T5865] vhci_hcd vhci_hcd.0: disconnect device
[  396.492327][ T5865] vhci_hcd vhci_hcd.0: stop threads
[  396.492340][ T5865] vhci_hcd vhci_hcd.0: release socket
[  396.492396][ T5865] vhci_hcd vhci_hcd.0: disconnect device
[  396.595866][ T6986] netlink: 44 bytes leftover after parsing attributes in process `syz.2.257'.
[  396.619241][ T5766] libceph: connect (1)0.0.0.0:6789 error -22
[  396.619340][ T5766] libceph: mon0 (1)0.0.0.0:6789 connect error
[  396.696387][ T7000] netlink: 'syz.2.260': attribute type 3 has an invalid length.
[  396.696408][ T7000] netlink: 'syz.2.260': attribute type 3 has an invalid length.
[  396.874470][ T5766] libceph: connect (1)0.0.0.0:6789 error -22
[  396.874630][ T5766] libceph: mon0 (1)0.0.0.0:6789 connect error
[  397.111933][ T6954] vhci_hcd: connection closed
[  397.112122][ T6963] vhci_hcd: connection reset by peer
[  397.115558][ T5865] vhci_hcd vhci_hcd.0: stop threads
[  397.115579][ T5865] vhci_hcd vhci_hcd.0: release socket
[  397.115613][ T5865] vhci_hcd vhci_hcd.0: disconnect device
[  397.115786][ T5865] vhci_hcd vhci_hcd.1: stop threads
[  397.115797][ T5865] vhci_hcd vhci_hcd.1: release socket
[  397.115823][ T5865] vhci_hcd vhci_hcd.1: disconnect device
[  397.253693][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  397.253716][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  397.253731][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xd641 instead
[  397.253746][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x4126 instead
[  397.253760][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  397.253774][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  397.253812][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  397.253830][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  397.253857][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  397.253883][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  397.253897][ T7019] jffs2: Further such events for this erase block will not be printed
[  397.258664][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  397.258686][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  397.258701][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xd641 instead
[  397.258717][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x4126 instead
[  397.258731][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  397.258744][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  397.258758][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  397.258775][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  397.258801][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  397.258829][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  397.258842][ T7019] jffs2: Further such events for this erase block will not be printed
[  397.259247][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead
[  397.259263][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead
[  397.259277][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xd641 instead
[  397.259293][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x4126 instead
[  397.259335][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead
[  397.259348][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead
[  397.259362][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xd641 instead
[  397.259376][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x4126 instead
[  397.259416][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead
[  397.259434][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead
[  397.259448][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xd641 instead
[  397.259463][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x4126 instead
[  397.259502][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead
[  397.259516][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead
[  397.259529][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xd641 instead
[  397.259544][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x4126 instead
[  397.259582][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead
[  397.259595][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead
[  397.259609][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xd641 instead
[  397.259623][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x4126 instead
[  397.262705][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead
[  397.262725][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead
[  397.262740][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd641 instead
[  397.262756][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x4126 instead
[  397.262828][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead
[  397.262843][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead
[  397.262857][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xd641 instead
[  397.262874][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x4126 instead
[  397.262916][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead
[  397.262929][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead
[  397.262944][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd641 instead
[  397.262960][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x4126 instead
[  397.263002][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead
[  397.263015][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead
[  397.263030][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xd641 instead
[  397.263045][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x4126 instead
[  397.263086][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead
[  397.263100][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead
[  397.263115][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xd641 instead
[  397.263131][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x4126 instead
[  397.263167][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead
[  397.263180][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead
[  397.263193][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xd641 instead
[  397.263208][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x4126 instead
[  397.263245][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead
[  397.263258][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead
[  397.263271][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd641 instead
[  397.263284][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x4126 instead
[  397.263324][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead
[  397.263337][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead
[  397.263351][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd641 instead
[  397.263367][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x4126 instead
[  397.263408][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead
[  397.263426][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead
[  397.263440][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xd641 instead
[  397.263456][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x4126 instead
[  397.263495][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead
[  397.263509][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead
[  397.263524][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd641 instead
[  397.263540][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x4126 instead
[  397.263581][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead
[  397.263595][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead
[  397.263609][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xd641 instead
[  397.263625][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x4126 instead
[  397.263667][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead
[  397.263681][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead
[  397.263697][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xd641 instead
[  397.263712][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x4126 instead
[  397.263752][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead
[  397.263767][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead
[  397.263780][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xd641 instead
[  397.263796][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x4126 instead
[  397.263836][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead
[  397.263849][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead
[  397.263864][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xd641 instead
[  397.263878][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x4126 instead
[  397.263918][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead
[  397.263931][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead
[  397.263945][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xd641 instead
[  397.263959][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x4126 instead
[  397.263998][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead
[  397.264012][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead
[  397.264026][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xd641 instead
[  397.264043][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x4126 instead
[  397.264084][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead
[  397.264097][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead
[  397.264111][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xd641 instead
[  397.264127][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x4126 instead
[  397.268527][ T7016] bond1: entered allmulticast mode
[  397.268682][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead
[  397.268694][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead
[  397.268703][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xd641 instead
[  397.268713][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x4126 instead
[  397.268736][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead
[  397.268744][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead
[  397.268753][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xd641 instead
[  397.268762][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x4126 instead
[  397.268785][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead
[  397.268794][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead
[  397.268802][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xd641 instead
[  397.268812][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x4126 instead
[  397.268835][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead
[  397.268843][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead
[  397.268852][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xd641 instead
[  397.268861][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x4126 instead
[  397.268907][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead
[  397.268919][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead
[  397.268932][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xd641 instead
[  397.268947][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x4126 instead
[  397.269413][ T7016] 8021q: adding VLAN 0 to HW filter on device bond1
[  397.270005][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead
[  397.270017][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead
[  397.270026][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xd641 instead
[  397.270035][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x4126 instead
[  397.270058][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead
[  397.270066][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead
[  397.270075][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xd641 instead
[  397.270084][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x4126 instead
[  397.270106][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead
[  397.270115][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead
[  397.270124][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xd641 instead
[  397.270133][ T7019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x4126 instead
[  397.270151][ T7019] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  397.270155][ T7019] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  397.384399][ T5766] libceph: connect (1)0.0.0.0:6789 error -22
[  397.384546][ T5766] libceph: mon0 (1)0.0.0.0:6789 connect error
[  397.438418][ T7028] i2c i2c-0: delete_device: Can't parse I2C address
[  397.440976][ T6992] ceph: No mds server is up or the cluster is laggy
[  397.451119][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'.
[  397.584320][ T7031] bond3: entered promiscuous mode
[  397.584340][ T7031] bond3: entered allmulticast mode
[  397.973902][ T7058] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  397.980008][ T7058] bond1: (slave lo): Enslaving as an active interface with an up link
[  397.981321][ T7058] net_ratelimit: 20 callbacks suppressed
[  397.981332][ T7058] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  397.986249][ T6389] lo speed is unknown, defaulting to 1000
[  397.986923][ T6389] syz0: Port: 1 Link ACTIVE
[  397.996862][ T5867] lo speed is unknown, defaulting to 1000
[  398.065828][ T6891] vhci_hcd: connection reset by peer
[  398.066553][ T5865] vhci_hcd vhci_hcd.2: stop threads
[  398.066568][ T5865] vhci_hcd vhci_hcd.2: release socket
[  398.066622][ T5865] vhci_hcd vhci_hcd.2: disconnect device
[  398.224495][    T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  398.284307][ T6389] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  398.375092][    T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  398.376321][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  398.376337][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  398.376348][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  398.376367][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.378141][    T9] usb 7-1: config 0 descriptor??
[  398.434906][ T6389] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  398.435847][ T6389] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  398.435871][ T6389] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  398.435884][ T6389] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  398.435896][ T6389] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  398.435915][ T6389] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.437999][ T7068] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  398.438073][ T7068] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  398.446340][ T6389] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected
[  398.447808][ T6389] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84
[  398.447861][ T6389] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2
[  398.456467][ T6389] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  398.457648][ T6389] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88
[  398.457683][ T6389] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6
[  398.459686][ T6389] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  398.774581][ T5894] usb 6-1: USB disconnect, device number 11
[  398.785095][    T9] usbhid 7-1:0.0: can't add hid device: -71
[  398.785146][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  398.794544][ T5894] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  398.802616][    T9] usb 7-1: USB disconnect, device number 10
[  398.827586][ T5894] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  398.828249][ T5894] keyspan 6-1:1.0: device disconnected
[  398.956599][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'.
[  398.956613][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'.
[  398.984668][ T5865] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  398.984721][ T5865] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  398.984747][ T5865] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  398.984764][ T5865] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  399.391115][ T7168] netlink: 'syz.2.298': attribute type 10 has an invalid length.
[  399.400169][ T7168] dummy0: entered promiscuous mode
[  399.401244][ T7168] bridge0: port 3(dummy0) entered blocking state
[  399.401321][ T7168] bridge0: port 3(dummy0) entered disabled state
[  399.401470][ T7168] dummy0: entered allmulticast mode
[  399.405328][ T7168] bridge0: port 3(dummy0) entered blocking state
[  399.405448][ T7168] bridge0: port 3(dummy0) entered forwarding state
[  399.483097][ T7179] input: syz1 as /devices/virtual/input/input18
[  399.873416][ T7204] netlink: 'syz.1.310': attribute type 1 has an invalid length.
[  399.929950][   T43] kauditd_printk_skb: 110 callbacks suppressed
[  399.929964][   T43] audit: type=1400 audit(1790250157.523:550): avc:  denied  { accept } for  pid=7203 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  399.933676][   T43] audit: type=1400 audit(1790250157.523:551): avc:  denied  { create } for  pid=7203 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  399.952803][   T43] audit: type=1400 audit(1790250157.543:552): avc:  denied  { mount } for  pid=7203 comm="syz.1.310" name="/" dev="configfs" ino=2120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  399.953550][   T43] audit: type=1400 audit(1790250157.543:553): avc:  denied  { search } for  pid=7203 comm="syz.1.310" name="/" dev="configfs" ino=2120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  400.124387][   T43] audit: type=1400 audit(1790250157.713:554): avc:  denied  { setopt } for  pid=7221 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  400.205541][   T43] audit: type=1400 audit(1790250157.793:555): avc:  denied  { ioctl } for  pid=7229 comm="syz.3.318" path="socket:[15086]" dev="sockfs" ino=15086 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  400.257851][ T7233] ovs-dp0: entered promiscuous mode
[  400.299828][   T43] audit: type=1400 audit(1790250157.893:556): avc:  denied  { override_creds } for  pid=7240 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  400.362165][   T43] audit: type=1400 audit(1790250157.953:557): avc:  denied  { read } for  pid=7251 comm="syz.1.323" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  400.362620][   T43] audit: type=1400 audit(1790250157.953:558): avc:  denied  { open } for  pid=7251 comm="syz.1.323" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  400.366201][   T43] audit: type=1400 audit(1790250157.953:559): avc:  denied  { ioctl } for  pid=7251 comm="syz.1.323" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  400.544430][ T1348] usb 42-1: device descriptor read/8, error -110
[  400.936495][ T1348] usb usb42-port1: attempt power cycle
[  401.043421][ T7291] FAULT_INJECTION: forcing a failure.
[  401.043421][ T7291] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  401.043455][ T7291] CPU: 0 UID: 0 PID: 7291 Comm: syz.2.334 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  401.043481][ T7291] Tainted: [L]=SOFTLOCKUP
[  401.043487][ T7291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  401.043496][ T7291] Call Trace:
[  401.043503][ T7291]  <TASK>
[  401.043509][ T7291]  dump_stack_lvl+0x100/0x190
[  401.043562][ T7291]  should_fail_ex.cold+0x5/0xa
[  401.043591][ T7291]  _copy_from_user+0x2e/0xd0
[  401.043628][ T7291]  sw_sync_ioctl+0x1b1/0x13f0
[  401.043664][ T7291]  ? __fget_files+0x34/0x3d0
[  401.043691][ T7291]  ? __pfx_sw_sync_ioctl+0x10/0x10
[  401.043722][ T7291]  ? selinux_file_ioctl+0x13b/0x290
[  401.043742][ T7291]  ? selinux_file_ioctl+0xb6/0x290
[  401.043763][ T7291]  ? __pfx_sw_sync_ioctl+0x10/0x10
[  401.043788][ T7291]  __x64_sys_ioctl+0x18e/0x210
[  401.043807][ T7291]  do_syscall_64+0x123/0x790
[  401.043848][ T7291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.043867][ T7291] RIP: 0033:0x7f797519e159
[  401.043882][ T7291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  401.043900][ T7291] RSP: 002b:00007f7976041028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  401.043916][ T7291] RAX: ffffffffffffffda RBX: 00007f7975425fa0 RCX: 00007f797519e159
[  401.043928][ T7291] RDX: 0000200000000000 RSI: 00000000c0285700 RDI: 0000000000000007
[  401.043937][ T7291] RBP: 00007f797523506b R08: 0000000000000000 R09: 0000000000000000
[  401.043946][ T7291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  401.043956][ T7291] R13: 00007f7975426038 R14: 00007f7975425fa0 R15: 00007ffc62a097d8
[  401.043986][ T7291]  </TASK>
[  401.093137][ T7296] __nla_validate_parse: 4 callbacks suppressed
[  401.093154][ T7296] netlink: 44 bytes leftover after parsing attributes in process `syz.3.337'.
[  401.093167][ T7296] netlink: 43 bytes leftover after parsing attributes in process `syz.3.337'.
[  401.093177][ T7296] netlink: 'syz.3.337': attribute type 6 has an invalid length.
[  401.093187][ T7296] netlink: 'syz.3.337': attribute type 5 has an invalid length.
[  401.093195][ T7296] netlink: 43 bytes leftover after parsing attributes in process `syz.3.337'.
[  401.172219][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'.
[  401.255133][ T7312] input: syz0 as /devices/virtual/input/input19
[  401.255409][ T7297] nvme nvme0: failed to connect socket: -111
[  401.268218][ T1356] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  401.302743][ T7312] netlink: 'syz.0.340': attribute type 8 has an invalid length.
[  401.336687][ T7320] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0
[  401.393526][ T7327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58274 sclass=netlink_route_socket pid=7327 comm=syz.1.343
[  401.416010][ T1356] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 7.03
[  401.416504][ T1356] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  401.417524][ T1356] usb 5-1: Dual-Role OTG device on HNP port
[  401.417802][ T13
** replaying previous printk message **
[  401.417802][ T1356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.417813][ T1356] usb 5-1: Product: HID Gadget
[  401.417821][ T1356] usb 5-1: SerialNumber: 0123456789
[  401.424425][   T10] usb 38-1: device descriptor read/8, error -110
[  401.432632][    C3] ------------[ cut here ]------------
[  401.432642][    C3] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
[  401.432651][    C3] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#3: syz-executor/5785
[  401.449229][    C3] Modules linked in:
[  401.450775][    C3] CPU: 3 UID: 0 PID: 5785 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  401.454247][    C3] Tainted: [L]=SOFTLOCKUP
[  401.455656][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  401.459014][    C3] RIP: 0010:usb_ep_enable+0x3f8/0x490
[  401.460786][    C3] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 2a 07 74 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 12 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 05 da 8c
[  401.467002][    C3] RSP: 0018:ffffc90000708a00 EFLAGS: 00010046
[  401.468954][    C3] RAX: dffffc0000000000 RBX: ffff88802a1c40e0 RCX: ffffffff8cda4960
[  401.471440][    C3] RDX: 0000000000000081 RSI: ffffffff8cda12c0 RDI: ffffffff9152a610
[  401.473932][    C3] RBP: 0000000000000081 R08: ffffffff8cda05a0 R09: 0000000000000000
[  401.476378][    C3] R10: 0000000000000000 R11: 0000000000000003 R12: ffffffff8cda05a0
[  401.478918][    C3] R13: 0000000000000000 R14: ffff88802a1c40e0 R15: ffff88805c609b18
[  401.481259][    C3] FS:  000055555f98f500(0000) GS:ffff8880d5e53000(0000) knlGS:0000000000000000
[  401.483883][    C3] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  401.485854][    C3] CR2: 00007f0f1dd556c8 CR3: 0000000035602000 CR4: 0000000000352ef0
[  401.488187][    C3] Call Trace:
[  401.489196][    C3]  <IRQ>
[  401.490081][    C3]  hidg_set_alt+0x190/0xa10
[  401.491455][    C3]  ? do_raw_spin_unlock+0x145/0x1e0
[  401.492967][    C3]  ? rcu_is_watching+0x13/0xc0
[  401.494459][    C3]  composite_setup+0x2ccf/0x9290
[  401.495953][    C3]  ? __lock_acquire+0x5c0/0x1f40
[  401.497498][    C3]  ? __pfx_composite_setup+0x10/0x10
[  401.499095][    C3]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  401.501112][    C3]  ? do_raw_spin_lock+0x128/0x260
[  401.503132][    C3]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  401.504919][    C3]  ? configfs_composite_setup+0xfb/0x130
[  401.507065][    C3]  configfs_composite_setup+0xfb/0x130
[  401.508857][    C3]  dummy_timer+0x2039/0x3700
[  401.510603][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  401.512539][    C3]  ? debug_object_deactivate+0x2e4/0x3b0
[  401.514249][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  401.515770][    C3]  ? mark_held_locks+0x40/0x70
[  401.517323][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  401.519105][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  401.520660][    C3]  __hrtimer_run_queues+0x462/0x9c0
[  401.522258][    C3]  hrtimer_run_softirq+0x1ca/0x360
[  401.524122][    C3]  handle_softirqs+0x1e6/0x9d0
[  401.526015][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[  401.528198][    C3]  ? _raw_spin_unlock+0x28/0x50
[  401.530273][    C3]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  401.532577][    C3]  __irq_exit_rcu+0x16a/0x210
[  401.534537][    C3]  irq_exit_rcu+0x9/0x30
[  401.536256][    C3]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  401.538573][    C3]  </IRQ>
[  401.539794][    C3]  <TASK>
[  401.540982][    C3]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  401.543387][    C3] RIP: 0010:vm_normal_page+0x13e/0x380
[  401.545584][    C3] Code: 45 31 ed 45 31 e4 e8 71 a8 a9 ff 48 c7 c0 f8 a2 65 8e 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 f1 01 00 00 <4c> 8b 35 b3 28 03 0c 4c 89 e7 4c 89 f6 e8 20 a2 a9 ff 4d 39 f4 0f
[  401.553173][    C3] RSP: 0018:ffffc90004217440 EFLAGS: 00000246
[  401.555584][    C3] RAX: 1ffffffff1ccb45f RBX: 0008000000050382 RCX: 0000000000000002
[  401.558519][    C3] RDX: dffffc0000000000 RSI: ffffffff82627a1f RDI: ffff8880295a0000
[  401.561027][    C3] RBP: 1ffff92000842e88 R08: 0000000000000006 R09: 0000000000050382
[  401.563609][    C3] R10: 000000000017ffff R11: 0000000000000001 R12: 0000000000050382
[  401.566004][    C3] R13: 000000000140e080 R14: 00007f0f1c17b000 R15: 0008000000050382
[  401.568406][    C3]  ? vm_normal_page+0x11f/0x380
[  401.569959][    C3]  ? __pfx_vm_normal_page+0x10/0x10
[  401.571715][    C3]  ? __pfx___page_table_check_ptes_set+0x10/0x10
[  401.573632][    C3]  copy_page_range+0x11b1/0x57c0
[  401.575088][    C3]  ? __pfx_copy_page_range+0x10/0x10
[  401.576724][    C3]  ? mas_wr_store_entry+0xa4/0x1d50
[  401.578328][    C3]  ? lock_acquire+0x1d1/0x380
[  401.579770][    C3]  ? dup_mmap+0xd0a/0x2370
[  401.581163][    C3]  ? find_held_lock+0x2b/0x80
[  401.582584][    C3]  ? dup_mmap+0xe66/0x2370
[  401.583924][    C3]  ? dup_mmap+0xe66/0x2370
[  401.585294][    C3]  ? down_write+0x146/0x1f0
[  401.586704][    C3]  ? up_write+0x2dc/0x5b0
[  401.587995][    C3]  dup_mmap+0x1230/0x2370
[  401.589339][    C3]  ? __pfx_dup_mmap+0x10/0x10
[  401.591162][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  401.593409][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  401.595561][    C3]  ? __lock_acquire+0x5c0/0x1f40
[  401.597011][    C3]  ? lock_acquire+0x1d1/0x380
[  401.598433][    C3]  ? copy_process+0x4806/0x8370
[  401.599899][    C3]  copy_process+0x4811/0x8370
[  401.601616][    C3]  ? __pfx_copy_process+0x10/0x10
[  401.603521][    C3]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  401.605487][    C3]  kernel_clone+0x176/0x9d0
[  401.606910][    C3]  ? __pfx_kernel_clone+0x10/0x10
[  401.608474][    C3]  ? __might_fault+0xc5/0x140
[  401.610003][    C3]  ? find_held_lock+0x2b/0x80
[  401.611436][    C3]  ? __might_fault+0xc5/0x140
[  401.612879][    C3]  __do_sys_clone+0xd9/0x120
[  401.614312][    C3]  ? __pfx___do_sys_clone+0x10/0x10
[  401.615885][    C3]  do_syscall_64+0x123/0x790
[  401.617351][    C3]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.619158][    C3] RIP: 0033:0x7f0f1cfc6bd2
[  401.620680][    C3] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  401.626624][    C3] RSP: 002b:00007ffe615fd310 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  401.629153][    C3] RAX: ffffffffffffffda RBX: 00007ffe615fd310 RCX: 00007f0f1cfc6bd2
[  401.631579][    C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  401.633940][    C3] RBP: 00007ffe615fd49c R08: 0000000000000000 R09: 0000000000000001
[  401.636354][    C3] R10: 000055555f98f7d0 R11: 0000000000000246 R12: 0000000000000001
[  401.638763][    C3] R13: 00000000000927c0 R14: 0000000000061f92 R15: 00007ffe615fd4f0
[  401.641282][    C3]  </TASK>
[  401.642242][    C3] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  401.644531][    C3] CPU: 3 UID: 0 PID: 5785 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  401.647791][    C3] Tainted: [L]=SOFTLOCKUP
[  401.649181][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  401.652391][    C3] Call Trace:
[  401.653419][    C3]  <IRQ>
[  401.654370][    C3]  dump_stack_lvl+0x100/0x190
[  401.655888][    C3]  vpanic+0x553/0x970
[  401.657133][    C3]  ? __pfx_vpanic+0x10/0x10
[  401.658580][    C3]  panic+0xd1/0xe0
[  401.659816][    C3]  ? __pfx_panic+0x10/0x10
[  401.661263][    C3]  check_panic_on_warn.cold+0x19/0x34
[  401.662937][    C3]  ? usb_ep_enable+0x3e6/0x490
[  401.664412][    C3]  __warn.cold+0x191/0x318
[  401.665778][    C3]  __report_bug+0x30f/0x440
[  401.667200][    C3]  ? usb_ep_enable+0x3e6/0x490
[  401.668653][    C3]  ? __pfx___report_bug+0x10/0x10
[  401.670261][    C3]  ? try_to_wake_up+0x158/0x1c90
[  401.671865][    C3]  report_bug_entry+0xe2/0x290
[  401.673371][    C3]  ? usb_ep_enable+0x3f8/0x490
[  401.674836][    C3]  handle_bug+0x1cd/0x2a0
[  401.676189][    C3]  exc_invalid_op+0x17/0x50
[  401.677628][    C3]  asm_exc_invalid_op+0x1a/0x20
[  401.679185][    C3] RIP: 0010:usb_ep_enable+0x3f8/0x490
[  401.680970][    C3] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d 2a 07 74 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 12 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 05 da 8c
[  401.687196][    C3] RSP: 0018:ffffc90000708a00 EFLAGS: 00010046
[  401.689064][    C3] RAX: dffffc0000000000 RBX: ffff88802a1c40e0 RCX: ffffffff8cda4960
[  401.691450][    C3] RDX: 0000000000000081 RSI: ffffffff8cda12c0 RDI: ffffffff9152a610
[  401.693791][    C3] RBP: 0000000000000081 R08: ffffffff8cda05a0 R09: 0000000000000000
[  401.696117][    C3] R10: 0000000000000000 R11: 0000000000000003 R12: ffffffff8cda05a0
[  401.698530][    C3] R13: 0000000000000000 R14: ffff88802a1c40e0 R15: ffff88805c609b18
[  401.701143][    C3]  hidg_set_alt+0x190/0xa10
[  401.702527][    C3]  ? do_raw_spin_unlock+0x145/0x1e0
[  401.704045][    C3]  ? rcu_is_watching+0x13/0xc0
[  401.705522][    C3]  composite_setup+0x2ccf/0x9290
[  401.707036][    C3]  ? __lock_acquire+0x5c0/0x1f40
[  401.708548][    C3]  ? __pfx_composite_setup+0x10/0x10
[  401.710184][    C3]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  401.711871][    C3]  ? do_raw_spin_lock+0x128/0x260
[  401.713359][    C3]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  401.714996][    C3]  ? configfs_composite_setup+0xfb/0x130
[  401.716635][    C3]  configfs_composite_setup+0xfb/0x130
[  401.718240][    C3]  dummy_timer+0x2039/0x3700
[  401.719630][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  401.721621][    C3]  ? debug_object_deactivate+0x2e4/0x3b0
[  401.723373][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  401.724985][    C3]  ? mark_held_locks+0x40/0x70
[  401.726520][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  401.728348][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  401.729904][    C3]  __hrtimer_run_queues+0x462/0x9c0
[  401.731733][    C3]  hrtimer_run_softirq+0x1ca/0x360
[  401.733370][    C3]  handle_softirqs+0x1e6/0x9d0
[  401.734886][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[  401.736551][    C3]  ? _raw_spin_unlock+0x28/0x50
[  401.738056][    C3]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  401.739786][    C3]  __irq_exit_rcu+0x16a/0x210
[  401.741441][    C3]  irq_exit_rcu+0x9/0x30
[  401.742892][    C3]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  401.744660][    C3]  </IRQ>
[  401.745586][    C3]  <TASK>
[  401.746607][    C3]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  401.748454][    C3] RIP: 0010:vm_normal_page+0x13e/0x380
[  401.750114][    C3] Code: 45 31 ed 45 31 e4 e8 71 a8 a9 ff 48 c7 c0 f8 a2 65 8e 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 f1 01 00 00 <4c> 8b 35 b3 28 03 0c 4c 89 e7 4c 89 f6 e8 20 a2 a9 ff 4d 39 f4 0f
[  401.755954][    C3] RSP: 0018:ffffc90004217440 EFLAGS: 00000246
[  401.757847][    C3] RAX: 1ffffffff1ccb45f RBX: 0008000000050382 RCX: 0000000000000002
[  401.760373][    C3] RDX: dffffc0000000000 RSI: ffffffff82627a1f RDI: ffff8880295a0000
[  401.762868][    C3] RBP: 1ffff92000842e88 R08: 0000000000000006 R09: 0000000000050382
[  401.765312][    C3] R10: 000000000017ffff R11: 0000000000000001 R12: 0000000000050382
[  401.767701][    C3] R13: 000000000140e080 R14: 00007f0f1c17b000 R15: 0008000000050382
[  401.770190][    C3]  ? vm_normal_page+0x11f/0x380
[  401.771720][    C3]  ? __pfx_vm_normal_page+0x10/0x10
[  401.773389][    C3]  ? __pfx___page_table_check_ptes_set+0x10/0x10
[  401.775630][    C3]  copy_page_range+0x11b1/0x57c0
[  401.777160][    C3]  ? __pfx_copy_page_range+0x10/0x10
[  401.778801][    C3]  ? mas_wr_store_entry+0xa4/0x1d50
[  401.780393][    C3]  ? lock_acquire+0x1d1/0x380
[  401.781809][    C3]  ? dup_mmap+0xd0a/0x2370
[  401.783184][    C3]  ? find_held_lock+0x2b/0x80
[  401.784689][    C3]  ? dup_mmap+0xe66/0x2370
[  401.786057][    C3]  ? dup_mmap+0xe66/0x2370
[  401.787412][    C3]  ? down_write+0x146/0x1f0
[  401.788762][    C3]  ? up_write+0x2dc/0x5b0
[  401.790109][    C3]  dup_mmap+0x1230/0x2370
[  401.791433][    C3]  ? __pfx_dup_mmap+0x10/0x10
[  401.792831][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  401.794629][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  401.796626][    C3]  ? __lock_acquire+0x5c0/0x1f40
[  401.798153][    C3]  ? lock_acquire+0x1d1/0x380
[  401.799591][    C3]  ? copy_process+0x4806/0x8370
[  401.801054][    C3]  copy_process+0x4811/0x8370
[  401.802472][    C3]  ? __pfx_copy_process+0x10/0x10
[  401.803980][    C3]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  401.805609][    C3]  kernel_clone+0x176/0x9d0
[  401.806981][    C3]  ? __pfx_kernel_clone+0x10/0x10
[  401.808491][    C3]  ? __might_fault+0xc5/0x140
[  401.809941][    C3]  ? find_held_lock+0x2b/0x80
[  401.811349][    C3]  ? __might_fault+0xc5/0x140
[  401.812755][    C3]  __do_sys_clone+0xd9/0x120
[  401.814178][    C3]  ? __pfx___do_sys_clone+0x10/0x10
[  401.815940][    C3]  do_syscall_64+0x123/0x790
[  401.817328][    C3]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.819070][    C3] RIP: 0033:0x7f0f1cfc6bd2
[  401.820382][    C3] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00
[  401.826848][    C3] RSP: 002b:00007ffe615fd310 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  401.829981][    C3] RAX: ffffffffffffffda RBX: 00007ffe615fd310 RCX: 00007f0f1cfc6bd2
[  401.832944][    C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  401.836003][    C3] RBP: 00007ffe615fd49c R08: 0000000000000000 R09: 0000000000000001
[  401.839050][    C3] R10: 000055555f98f7d0 R11: 0000000000000246 R12: 0000000000000001
[  401.842102][    C3] R13: 00000000000927c0 R14: 0000000000061f92 R15: 00007ffe615fd4f0
[  401.845202][    C3]  </TASK>
[  401.847234][    C3] Kernel Offset: disabled
[  401.848965][    C3] Rebooting in 86400 seconds..