last executing test programs:

10m15.376311683s ago: executing program 2 (id=685):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

10m12.040769281s ago: executing program 2 (id=689):
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
preadv(r1, &(0x7f0000000140)=[{0x0, 0x2000}, {&(0x7f0000000500)=""/84, 0x54}], 0x2, 0x4, 0x8008)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x5, 0x3})

10m11.614082741s ago: executing program 2 (id=693):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000140)={0x3, "b503a4"}, 0x4)

10m11.330250578s ago: executing program 2 (id=695):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

10m9.441392342s ago: executing program 2 (id=698):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
set_mempolicy(0x3, 0x0, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)
creat(&(0x7f0000000200)='./bus\x00', 0x84)

10m2.043754763s ago: executing program 2 (id=715):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)

9m45.263886373s ago: executing program 32 (id=715):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)

9m2.971575385s ago: executing program 1 (id=816):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
r4 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1)

9m1.319486644s ago: executing program 1 (id=818):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc0c00, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r3 = fsopen(&(0x7f0000000240)='sockfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='source\x81\xfc{\x00\xa8\xfe\xf8\x1b\x98\x12:Hr1\xf0\xd4\'h\x0fh1\xab\x9cV\xc1\xe8\xbe\\\x02s*\x8d\x1dNR1\xc4\xc0\xb9\xab\xcau\xf3\x02\xd5=\xd0\x01', &(0x7f0000000340)='\xa5\f\x00\x00\x00\x00\x00\x00\xf7\xec\x05\x00:\x02\x00\xd8L\xc0\x90\xe8\xc70\x00\x1f\xec\xffS\xe5\x03\xf8\xbe\xde\x0fE\xd0\xc4\xd6\x81b\xfc-\xa5\xe7\xc5>\xec\x0fy\xe4\xa5\x19a!\x99\x7f\xc2a\\l\xbe', 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0x3)
unshare(0x68040000)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x1000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

8m51.826752554s ago: executing program 1 (id=833):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
socket(0x10, 0x3, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
readv(r1, &(0x7f00000023c0)=[{0x0}], 0x1)

8m45.392194134s ago: executing program 1 (id=841):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600000000206010400000000000000000000000014000780080011400000000005001500030000000500010006000000050005000200000005000400000000000900020073797a300000000011000300686173683a69702c6d61726b00"], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x40)

8m45.003026743s ago: executing program 1 (id=842):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
r4 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1)

8m43.057147978s ago: executing program 1 (id=844):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x0)
close(0xffffffffffffffff)
userfaultfd(0x80800)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

8m26.16538665s ago: executing program 33 (id=844):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x0)
close(0xffffffffffffffff)
userfaultfd(0x80800)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

7m8.997285863s ago: executing program 4 (id=928):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)

7m6.476529821s ago: executing program 4 (id=929):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
r4 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1)

6m58.939160046s ago: executing program 5 (id=934):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

6m54.88586603s ago: executing program 4 (id=936):
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)

6m53.748604437s ago: executing program 4 (id=937):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0xabd)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, 0x0)
read$FUSE(r0, &(0x7f00000071c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0)
r3 = dup3(r2, r0, 0x80000)
pwritev(r3, &(0x7f0000001880)=[{&(0x7f0000000180)="f1e40ee27329", 0x6}, {&(0x7f0000000740)="e4", 0x1}], 0x2, 0x6, 0x6)
eventfd(0x5ef)

6m53.19926468s ago: executing program 4 (id=939):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

6m48.479797159s ago: executing program 4 (id=941):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
set_mempolicy(0x3, 0x0, 0x6)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)
creat(&(0x7f0000000200)='./bus\x00', 0x84)

6m48.379753861s ago: executing program 5 (id=942):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="00000000001800000000000000000000000000ffffffee0000000000", @ANYRES8=r0, @ANYRES32=r0, @ANYRES16], 0x50)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000007fc0)={0x2020}, 0x2020)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)

6m47.128419631s ago: executing program 5 (id=943):
mount(0x0, 0x0, 0x0, 0x10, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
fcntl$lock(r1, 0x26, &(0x7f00000002c0)={0x0, 0x4, 0x2, 0xd3, r2})
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000040)="0006aa6df274080de58c48", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
r5 = dup2(r4, r4)
ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0)
read$char_usb(r5, &(0x7f00000000c0)=""/192, 0xc0)
syz_clone3(&(0x7f0000000480)={0x104000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x37}, &(0x7f0000000180)=""/9, 0x9, &(0x7f0000000340)=""/193, &(0x7f0000000440)=[0x0], 0x1, {r5}}, 0x58)

6m45.774993082s ago: executing program 5 (id=944):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
r4 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
readv(r4, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1)

6m43.620858992s ago: executing program 5 (id=945):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
futex_waitv(&(0x7f0000000e40), 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019440)=""/102400, 0x19000)
syz_open_procfs(0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)="62fa", 0x2)
splice(r0, 0x0, r6, 0x0, 0x4ffe6, 0x0)

6m39.41646865s ago: executing program 5 (id=947):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$can_raw(0x1d, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

6m32.352914113s ago: executing program 34 (id=941):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
set_mempolicy(0x3, 0x0, 0x6)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)
creat(&(0x7f0000000200)='./bus\x00', 0x84)

6m23.301403814s ago: executing program 35 (id=947):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$can_raw(0x1d, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

52.545816282s ago: executing program 6 (id=1256):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'})
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x42, 0x0)
ioctl$COMEDI_BUFINFO(r3, 0xc02c640e, &(0x7f0000000000)={0x0, 0x200d, 0x6, 0x80000001, 0xffffffff, 0xfffffffa, 0x4})

51.607390164s ago: executing program 0 (id=1259):
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x5)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
inotify_init1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES64], 0x40}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010000000000000000000000000000000000000000000b00030064756d6d79300000130012800a00020064756d6d79000000"], 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'dummy0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=<r10=>r8, @ANYBLOB="000000000000000034001a800600000002000000280005802400018008000100010000000800020000000000080003000000000008000400", @ANYRES32=r9], 0x54}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYRESDEC, @ANYRESOCT=r10], 0x58}}, 0x0)

50.96662431s ago: executing program 6 (id=1261):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)

47.481910324s ago: executing program 0 (id=1262):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r5, 0x2007ffb)

44.365127629s ago: executing program 6 (id=1264):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

42.388555337s ago: executing program 6 (id=1266):
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x1a, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)

40.639281449s ago: executing program 6 (id=1269):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000180)={0x40, 0x8, 0x12, "82a95bb59694bf7cf6ce1d029587058afb61"}, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

38.208304228s ago: executing program 7 (id=1271):
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
msgget$private(0x0, 0x208)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1}, 0x4004045)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(r0, 0xd, &(0x7f0000000100)={0x3, 0x7}, &(0x7f0000000180))
bind$802154_dgram(r3, &(0x7f0000000140)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14)

38.081466381s ago: executing program 0 (id=1272):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000)

37.119609344s ago: executing program 0 (id=1273):
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd7000fbd8df25"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002b80)=""/4096, 0x1000}], 0x1, 0xaa, 0x2)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'syzkaller0\x00', {0x102}, 0xd})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x8)
pwrite64(r3, &(0x7f0000000140)="10", 0xda0443d9, 0xfff)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

36.004429971s ago: executing program 6 (id=1276):
dup(0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
creat(0x0, 0x109)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

34.81086843s ago: executing program 0 (id=1278):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000020000100fcffffff000000000200000000000000120000000c00144080000000000000010500"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0)

30.555519313s ago: executing program 0 (id=1280):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r5, 0x2007ffb)
sendfile(r5, r5, 0x0, 0x1000000201005)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0)
dup3(r7, r6, 0x0)

29.919874128s ago: executing program 7 (id=1281):
rmdir(0x0)
capset(&(0x7f0000019180)={0x19980330}, &(0x7f00000191c0)={0x5, 0x200003, 0x801, 0x4, 0x9})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
modify_ldt$read(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='nilfs2\x00', 0x0, &(0x7f0000000980)='norecovery')
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x4}]}, 0x34}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000190c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x8)
sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840)
socket(0x2, 0xa, 0x0)

27.908256657s ago: executing program 7 (id=1282):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000)

27.322817031s ago: executing program 7 (id=1284):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000540)={'binder0\x00'})

25.488823815s ago: executing program 7 (id=1286):
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x5)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
inotify_init1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd86)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000000f1410002bbd7000fddbdf2508004500636d610011004500692e0b6d756c74696361737400000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000804)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES64], 0x40}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010000000000000000000000000000000000000000000b00030064756d6d79300000130012800a00020064756d6d79000000"], 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'dummy0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=<r9=>r7, @ANYBLOB="000000000000000034001a800600000002000000280005802400018008000100010000000800020000000000080003000000000008000400", @ANYRES32=r8], 0x54}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r6, @ANYRES32, @ANYRESDEC, @ANYRESOCT=r9], 0x58}}, 0x0)

22.81165915s ago: executing program 7 (id=1287):
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write(r4, &(0x7f0000000340)="0200000000000038", 0x8)

19.981761668s ago: executing program 36 (id=1276):
dup(0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
creat(0x0, 0x109)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

13.442118466s ago: executing program 37 (id=1280):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r5, 0x2007ffb)
sendfile(r5, r5, 0x0, 0x1000000201005)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0)
dup3(r7, r6, 0x0)

10.456008908s ago: executing program 3 (id=1295):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r4, 0x0, 0x13)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000100)=""/18, &(0x7f0000000080)=0x12)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

7.453253121s ago: executing program 38 (id=1287):
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0)
write(r4, &(0x7f0000000340)="0200000000000038", 0x8)

6.536076403s ago: executing program 3 (id=1297):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000006900), 0x0, 0x24040000)
socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x880)
recvmmsg$unix(r3, 0x0, 0x0, 0x42, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x90)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040)

5.617131885s ago: executing program 3 (id=1298):
r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_wait(r1, &(0x7f0000000240)=[{}], 0x1, 0x404)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0)

1.319370678s ago: executing program 3 (id=1299):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

248.547145ms ago: executing program 3 (id=1300):
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x1a, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(0xffffffffffffffff)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)

0s ago: executing program 3 (id=1301):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x4, 0x0, 0x5, 0x0, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88691b9ae21b3e3b4523ae25c1e27d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4033d61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b2687a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348307774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d7788b8ebfdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec960400000085a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71829f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc4291507000000000000002195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15d34ca7a819c85e800555db64a717eb23a811356d00"})
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$midi(0x0, 0x38, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0x8, 0x30, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x1, [@ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0x8, 0x0, 0x200, 0x92, 0xde, 0x7, {0x4}}}]}}}}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

kernel console output (not intermixed with test programs):

erate RBDS Instead of RDS: false
[  173.499931][ T6524] vivid-002: RDS Reception: true
[  173.504923][ T6524] vivid-002: RDS Program Type: 0 inactive
[  173.510840][ T6524] vivid-002: RDS PS Name:  inactive
[  173.516067][ T6524] vivid-002: RDS Radio Text:  inactive
[  173.521765][ T6524] vivid-002: RDS Traffic Announcement: false inactive
[  173.529017][ T6524] vivid-002: RDS Traffic Program: false inactive
[  173.535429][ T6524] vivid-002: RDS Music: false inactive
[  173.541184][ T6524] vivid-002: ==================  END STATUS  ==================
[  178.788885][ T6559] vivid-001: =================  START STATUS  =================
[  178.796838][ T6559] vivid-001: Radio HW Seek Mode: Bounded
[  178.803147][ T6559] vivid-001: Radio Programmable HW Seek: false
[  178.809832][ T6559] vivid-001: RDS Rx I/O Mode: Block I/O
[  178.815670][ T6559] vivid-001: Generate RBDS Instead of RDS: false
[  178.822455][ T6559] vivid-001: RDS Reception: true
[  178.827829][ T6559] vivid-001: RDS Program Type: 0 inactive
[  178.833993][ T6559] vivid-001: RDS PS Name:  inactive
[  178.839684][ T6559] vivid-001: RDS Radio Text:  inactive
[  178.845616][ T6559] vivid-001: RDS Traffic Announcement: false inactive
[  178.857003][ T6559] vivid-001: RDS Traffic Program: false inactive
[  178.863884][ T6559] vivid-001: RDS Music: false inactive
[  178.869882][ T6559] vivid-001: ==================  END STATUS  ==================
[  185.278536][ T6572] random: crng reseeded on system resumption
[  189.893422][ T6628] random: crng reseeded on system resumption
[  191.947790][ T6638] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  194.533612][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  194.547658][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  194.639220][ T6660] binder: BINDER_SET_CONTEXT_MGR already set
[  194.645535][ T6660] binder: 6659:6660 ioctl 4018620d 200000000040 returned -16
[  196.209198][ T6679] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  197.745734][ T6690] __nla_validate_parse: 2 callbacks suppressed
[  197.745772][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'.
[  198.342391][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'.
[  198.378855][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'.
[  198.439963][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'.
[  204.060618][ T6727] fuse: Bad value for 'fd'
[  206.350254][ T6749] binder: BINDER_SET_CONTEXT_MGR already set
[  206.356317][ T6749] binder: 6748:6749 ioctl 4018620d 200000000040 returned -16
[  207.382871][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'.
[  207.442062][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'.
[  207.498529][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'.
[  207.628884][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'.
[  208.668134][ T6773] fuse: Bad value for 'fd'
[  210.770121][   T27] audit: type=1800 audit(1786289086.122:11): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.266" name="idVendor" dev="configfs" ino=10794 res=0 errno=0
[  210.960029][ T6798] binder: BINDER_SET_CONTEXT_MGR already set
[  210.987456][ T6798] binder: 6797:6798 ioctl 4018620d 200000000040 returned -16
[  211.533392][ T6807] fuse: Unknown parameter '0x0000000000000004'
[  211.973437][ T6784] Bluetooth: hci1: command 0x0406 tx timeout
[  211.983227][ T6784] Bluetooth: hci3: command 0x0406 tx timeout
[  211.990310][ T6784] Bluetooth: hci0: command 0x0406 tx timeout
[  211.999351][ T6784] Bluetooth: hci2: command 0x0406 tx timeout
[  212.759397][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'.
[  212.782689][ T6819] bridge: RTM_NEWNEIGH with invalid ether address
[  212.828158][   T27] audit: type=1800 audit(1786289088.182:12): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.270" name="idVendor" dev="configfs" ino=11510 res=0 errno=0
[  214.501056][ T6838] fuse: Unknown parameter '0x0000000000000004'
[  214.593038][ T6840] binder: BINDER_SET_CONTEXT_MGR already set
[  214.606864][ T6840] binder: 6839:6840 ioctl 4018620d 200000000040 returned -16
[  214.829329][ T6844] fuse: Bad value for 'fd'
[  216.162152][   T27] audit: type=1800 audit(1786289091.512:13): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.281" name="idVendor" dev="configfs" ino=10946 res=0 errno=0
[  217.300623][ T6868] fuse: Unknown parameter '0x0000000000000004'
[  217.522553][ T6874] fuse: Bad value for 'fd'
[  218.503135][ T6883] binder: BINDER_SET_CONTEXT_MGR already set
[  218.525792][ T6883] binder: 6882:6883 ioctl 4018620d 200000000040 returned -16
[  219.901097][ T6894] vivid-001: =================  START STATUS  =================
[  219.909050][ T6894] vivid-001: Radio HW Seek Mode: Bounded
[  219.918402][ T6894] vivid-001: Radio Programmable HW Seek: false
[  219.924725][ T6894] vivid-001: RDS Rx I/O Mode: Block I/O
[  219.930665][ T6894] vivid-001: Generate RBDS Instead of RDS: false
[  219.937235][ T6894] vivid-001: RDS Reception: true
[  219.942467][ T6894] vivid-001: RDS Program Type: 0 inactive
[  219.948506][ T6894] vivid-001: RDS PS Name:  inactive
[  219.954018][ T6894] vivid-001: RDS Radio Text:  inactive
[  219.959861][ T6894] vivid-001: RDS Traffic Announcement: false inactive
[  219.966848][ T6894] vivid-001: RDS Traffic Program: false inactive
[  219.973484][ T6894] vivid-001: RDS Music: false inactive
[  219.979235][ T6894] vivid-001: ==================  END STATUS  ==================
[  221.853208][ T6899] fuse: Unknown parameter '0x0000000000000004'
[  224.000232][ T6919] vivid-002: =================  START STATUS  =================
[  224.011958][ T6919] vivid-002: Radio HW Seek Mode: Bounded
[  224.018031][ T6919] vivid-002: Radio Programmable HW Seek: false
[  224.024348][ T6919] vivid-002: RDS Rx I/O Mode: Block I/O
[  224.030289][ T6919] vivid-002: Generate RBDS Instead of RDS: false
[  224.036798][ T6919] vivid-002: RDS Reception: true
[  224.042190][ T6919] vivid-002: RDS Program Type: 0 inactive
[  224.049052][ T6919] vivid-002: RDS PS Name:  inactive
[  224.054575][ T6919] vivid-002: RDS Radio Text:  inactive
[  224.060678][ T6919] vivid-002: RDS Traffic Announcement: false inactive
[  224.067740][ T6919] vivid-002: RDS Traffic Program: false inactive
[  224.074310][ T6919] vivid-002: RDS Music: false inactive
[  224.080200][ T6919] vivid-002: ==================  END STATUS  ==================
[  226.148881][ T6928] fuse: Unknown parameter '0x0000000000000004'
[  227.719932][ T6947] vivid-001: =================  START STATUS  =================
[  227.728012][ T6947] vivid-001: Radio HW Seek Mode: Bounded
[  227.733837][ T6947] vivid-001: Radio Programmable HW Seek: false
[  227.740343][ T6947] vivid-001: RDS Rx I/O Mode: Block I/O
[  227.746157][ T6947] vivid-001: Generate RBDS Instead of RDS: false
[  227.752795][ T6947] vivid-001: RDS Reception: true
[  227.758237][ T6947] vivid-001: RDS Program Type: 0 inactive
[  227.764230][ T6947] vivid-001: RDS PS Name:  inactive
[  227.769862][ T6947] vivid-001: RDS Radio Text:  inactive
[  227.775561][ T6947] vivid-001: RDS Traffic Announcement: false inactive
[  227.782876][ T6947] vivid-001: RDS Traffic Program: false inactive
[  227.789748][ T6947] vivid-001: RDS Music: false inactive
[  227.795427][ T6947] vivid-001: ==================  END STATUS  ==================
[  229.509539][ T6952] binder: BINDER_SET_CONTEXT_MGR already set
[  229.525337][ T6952] binder: 6951:6952 ioctl 4018620d 200000000040 returned -16
[  230.810685][ T6958] fuse: Unknown parameter '0x0000000000000004'
[  231.352501][   T27] audit: type=1800 audit(1786289106.702:14): pid=6967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.320" name="idVendor" dev="configfs" ino=12392 res=0 errno=0
[  232.917411][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  233.330020][ T6988] vivid-002: =================  START STATUS  =================
[  233.338015][ T6988] vivid-002: Radio HW Seek Mode: Bounded
[  233.343860][ T6988] vivid-002: Radio Programmable HW Seek: false
[  233.350509][ T6988] vivid-002: RDS Rx I/O Mode: Block I/O
[  233.356242][ T6988] vivid-002: Generate RBDS Instead of RDS: false
[  233.362915][ T6988] vivid-002: RDS Reception: true
[  233.368161][ T6988] vivid-002: RDS Program Type: 0 inactive
[  233.374085][ T6988] vivid-002: RDS PS Name:  inactive
[  233.379884][ T6988] vivid-002: RDS Radio Text:  inactive
[  233.385562][ T6988] vivid-002: RDS Traffic Announcement: false inactive
[  233.392707][ T6988] vivid-002: RDS Traffic Program: false inactive
[  233.399369][ T6988] vivid-002: RDS Music: false inactive
[  233.405053][ T6988] vivid-002: ==================  END STATUS  ==================
[  235.268146][ T6991] fuse: Unknown parameter 'fd0x0000000000000004'
[  235.651008][ T6996] netlink: 'syz.3.329': attribute type 11 has an invalid length.
[  236.016366][   T27] audit: type=1800 audit(1786289111.362:15): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.331" name="idVendor" dev="configfs" ino=11996 res=0 errno=0
[  238.660262][ T7023] vivid-001: =================  START STATUS  =================
[  238.668293][ T7023] vivid-001: Radio HW Seek Mode: Bounded
[  238.674119][ T7023] vivid-001: Radio Programmable HW Seek: false
[  238.680576][ T7023] vivid-001: RDS Rx I/O Mode: Block I/O
[  238.686306][ T7023] vivid-001: Generate RBDS Instead of RDS: false
[  238.692943][ T7023] vivid-001: RDS Reception: true
[  238.698181][ T7023] vivid-001: RDS Program Type: 0 inactive
[  238.704115][ T7023] vivid-001: RDS PS Name:  inactive
[  238.709723][ T7023] vivid-001: RDS Radio Text:  inactive
[  238.715497][ T7023] vivid-001: RDS Traffic Announcement: false inactive
[  238.722741][ T7023] vivid-001: RDS Traffic Program: false inactive
[  238.729516][ T7023] vivid-001: RDS Music: false inactive
[  238.735222][ T7023] vivid-001: ==================  END STATUS  ==================
[  240.627606][ T5820] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  240.831147][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.861815][ T5820] usb 1-1: config 0 has no interfaces?
[  240.882323][ T5820] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  240.919226][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.952595][ T5820] usb 1-1: config 0 descriptor??
[  241.262850][ T5843] usb 1-1: USB disconnect, device number 3
[  241.385432][ T7037] fuse: Unknown parameter 'fd0x0000000000000004'
[  241.505623][ T5865] libceph: connect (1)[c::]:6789 error -101
[  241.516268][ T5865] libceph: mon0 (1)[c::]:6789 connect error
[  241.638845][ T7033] ceph: No mds server is up or the cluster is laggy
[  241.907698][   T27] audit: type=1800 audit(1786289117.252:16): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.341" name="idVendor" dev="configfs" ino=12473 res=0 errno=0
[  243.892855][ T7058] vivid-001: =================  START STATUS  =================
[  243.900965][ T7058] vivid-001: Radio HW Seek Mode: Bounded
[  243.906812][ T7058] vivid-001: Radio Programmable HW Seek: false
[  243.913510][ T7058] vivid-001: RDS Rx I/O Mode: Block I/O
[  243.919398][ T7058] vivid-001: Generate RBDS Instead of RDS: false
[  243.925933][ T7058] vivid-001: RDS Reception: true
[  243.931218][ T7058] vivid-001: RDS Program Type: 0 inactive
[  243.937112][ T7058] vivid-001: RDS PS Name:  inactive
[  243.942813][ T7058] vivid-001: RDS Radio Text:  inactive
[  243.948759][ T7058] vivid-001: RDS Traffic Announcement: false inactive
[  243.955774][ T7058] vivid-001: RDS Traffic Program: false inactive
[  243.962512][ T7058] vivid-001: RDS Music: false inactive
[  243.968542][ T7058] vivid-001: ==================  END STATUS  ==================
[  245.615507][ T7065] fuse: Unknown parameter 'fd0x0000000000000004'
[  246.983629][   T27] audit: type=1800 audit(1786289122.332:17): pid=7078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.352" name="idVendor" dev="configfs" ino=12509 res=0 errno=0
[  247.026491][ T7084] fuse: Bad value for 'fd'
[  247.542606][ T7088] vivid-000: =================  START STATUS  =================
[  247.550753][ T7088] vivid-000: Radio HW Seek Mode: Bounded
[  247.556799][ T7088] vivid-000: Radio Programmable HW Seek: false
[  247.567791][ T7088] vivid-000: RDS Rx I/O Mode: Block I/O
[  247.573772][ T7088] vivid-000: Generate RBDS Instead of RDS: false
[  247.580668][ T7088] vivid-000: RDS Reception: true
[  247.585967][ T7088] vivid-000: RDS Program Type: 0 inactive
[  247.592415][ T7088] vivid-000: RDS PS Name:  inactive
[  247.598266][ T7088] vivid-000: RDS Radio Text:  inactive
[  247.604214][ T7088] vivid-000: RDS Traffic Announcement: false inactive
[  247.611537][ T7088] vivid-000: RDS Traffic Program: false inactive
[  247.618503][ T7088] vivid-000: RDS Music: false inactive
[  247.624471][ T7088] vivid-000: ==================  END STATUS  ==================
[  251.348782][   T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  251.583249][   T23] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  251.609627][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.660655][   T23] usb 3-1: config 0 descriptor??
[  251.921994][   T23] ath6kl: Failed to submit usb control message: -71
[  251.928895][   T23] ath6kl: unable to send the bmi data to the device: -71
[  251.936839][   T23] ath6kl: Unable to send get target info: -71
[  251.950794][   T23] ath6kl: Failed to init ath6kl core: -71
[  251.987705][   T23] ath6kl_usb: probe of 3-1:0.0 failed with error -71
[  252.035696][   T23] usb 3-1: USB disconnect, device number 2
[  253.447962][ T7129] vivid-002: =================  START STATUS  =================
[  253.455688][ T7129] vivid-002: Radio HW Seek Mode: Bounded
[  253.461553][ T7129] vivid-002: Radio Programmable HW Seek: false
[  253.467823][ T7129] vivid-002: RDS Rx I/O Mode: Block I/O
[  253.473398][ T7129] vivid-002: Generate RBDS Instead of RDS: false
[  253.479820][ T7129] vivid-002: RDS Reception: true
[  253.484780][ T7129] vivid-002: RDS Program Type: 0 inactive
[  253.490630][ T7129] vivid-002: RDS PS Name:  inactive
[  253.495916][ T7129] vivid-002: RDS Radio Text:  inactive
[  253.501780][ T7129] vivid-002: RDS Traffic Announcement: false inactive
[  253.508752][ T7129] vivid-002: RDS Traffic Program: false inactive
[  253.515162][ T7129] vivid-002: RDS Music: false inactive
[  253.520929][ T7129] vivid-002: ==================  END STATUS  ==================
[  253.864385][   T27] audit: type=1800 audit(1786289129.212:18): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.364" name="idVendor" dev="configfs" ino=13477 res=0 errno=0
[  255.978614][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  255.986081][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  258.366011][ T7178] vivid-001: =================  START STATUS  =================
[  258.374159][ T7178] vivid-001: Radio HW Seek Mode: Bounded
[  258.380211][ T7178] vivid-001: Radio Programmable HW Seek: false
[  258.386397][ T7178] vivid-001: RDS Rx I/O Mode: Block I/O
[  258.392177][ T7178] vivid-001: Generate RBDS Instead of RDS: false
[  258.398605][ T7178] vivid-001: RDS Reception: true
[  258.403565][ T7178] vivid-001: RDS Program Type: 0 inactive
[  258.409400][ T7178] vivid-001: RDS PS Name:  inactive
[  258.415775][ T7178] vivid-001: RDS Radio Text:  inactive
[  258.421361][ T7178] vivid-001: RDS Traffic Announcement: false inactive
[  258.428318][ T7178] vivid-001: RDS Traffic Program: false inactive
[  258.434672][ T7178] vivid-001: RDS Music: false inactive
[  258.440301][ T7178] vivid-001: ==================  END STATUS  ==================
[  258.927943][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  259.337451][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  259.747440][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  263.570730][   T27] audit: type=1800 audit(1786289138.912:19): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.376" name="idVendor" dev="configfs" ino=13545 res=0 errno=0
[  265.247621][ T7212] vivid-000: =================  START STATUS  =================
[  265.259598][ T7212] vivid-000: Radio HW Seek Mode: Bounded
[  265.267400][ T7212] vivid-000: Radio Programmable HW Seek: false
[  265.287404][ T7212] vivid-000: RDS Rx I/O Mode: Block I/O
[  265.305000][ T7212] vivid-000: Generate RBDS Instead of RDS: false
[  265.314998][ T7212] vivid-000: RDS Reception: true
[  265.330342][ T7212] vivid-000: RDS Program Type: 0 inactive
[  265.342914][ T7212] vivid-000: RDS PS Name:  inactive
[  265.352788][ T7212] vivid-000: RDS Radio Text:  inactive
[  265.367441][ T7212] vivid-000: RDS Traffic Announcement: false inactive
[  265.389993][ T7212] vivid-000: RDS Traffic Program: false inactive
[  265.406989][ T7212] vivid-000: RDS Music: false inactive
[  265.418994][ T7212] vivid-000: ==================  END STATUS  ==================
[  266.247468][ T5820] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  266.447482][ T5820] usb 2-1: Using ep0 maxpacket: 32
[  266.462658][ T5820] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  266.471229][ T5820] usb 2-1: config 0 has no interface number 0
[  266.477555][ T5820] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  266.502223][ T5820] usb 2-1: config 0 interface 89 has no altsetting 0
[  266.525654][ T5820] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  266.535140][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.551110][ T5820] usb 2-1: Product: syz
[  266.565637][ T5820] usb 2-1: Manufacturer: syz
[  266.570748][ T5820] usb 2-1: SerialNumber: syz
[  266.599539][ T5820] usb 2-1: config 0 descriptor??
[  266.621829][ T5820] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  266.646178][ T5820] em28xx 2-1:0.89: Video interface 89 found:
[  267.790462][ T5820] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[  268.324568][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'.
[  268.377853][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'.
[  268.527401][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'.
[  268.554284][ T5820] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  268.580029][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'.
[  268.609151][ T5820] em28xx 2-1:0.89: board has no eeprom
[  268.697425][ T5820] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  268.704806][ T5820] em28xx 2-1:0.89: analog set to bulk mode.
[  268.729089][ T5843] em28xx 2-1:0.89: Registering V4L2 extension
[  268.852159][ T5820] usb 2-1: USB disconnect, device number 2
[  268.878686][ T5820] em28xx 2-1:0.89: Disconnecting em28xx
[  269.004370][ T5843] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[  269.032117][ T5843] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  269.068510][ T5843] em28xx 2-1:0.89: No AC97 audio processor
[  269.122106][ T5843] usb 2-1: Decoder not found
[  269.138325][ T5843] em28xx 2-1:0.89: failed to create media graph
[  269.192127][ T5843] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  269.224414][ T5843] em28xx 2-1:0.89: Registering snapshot button...
[  269.294276][ T5843] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input7
[  269.364828][ T5843] em28xx 2-1:0.89: Remote control support is not available for this card.
[  269.448304][ T5820] em28xx 2-1:0.89: Closing input extension
[  269.479117][ T5820] em28xx 2-1:0.89: Deregistering snapshot button
[  269.642146][   T27] audit: type=1800 audit(1786289144.982:20): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.391" name="idVendor" dev="configfs" ino=13676 res=0 errno=0
[  269.745669][ T6730] udevd[6730]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory
[  269.802877][ T6730] udevd[6730]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  270.525131][ T5820] em28xx 2-1:0.89: Freeing device
[  272.252287][ T7265] vivid-004: =================  START STATUS  =================
[  272.260367][ T7265] vivid-004: Radio HW Seek Mode: Bounded
[  272.266449][ T7265] vivid-004: Radio Programmable HW Seek: false
[  272.273001][ T7265] vivid-004: RDS Rx I/O Mode: Block I/O
[  272.279013][ T7265] vivid-004: Generate RBDS Instead of RDS: false
[  272.285774][ T7265] vivid-004: RDS Reception: true
[  272.291183][ T7265] vivid-004: RDS Program Type: 0 inactive
[  272.297413][ T7265] vivid-004: RDS PS Name:  inactive
[  273.887610][ T7265] vivid-004: RDS Radio Text:  inactive
[  273.893159][ T7265] vivid-004: RDS Traffic Announcement: false inactive
[  273.966321][ T7265] vivid-004: RDS Traffic Program: false inactive
[  273.999043][ T7265] vivid-004: RDS Music: false inactive
[  274.025097][ T7265] vivid-004: ==================  END STATUS  ==================
[  274.227548][ T5865] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  274.427861][ T5865] usb 4-1: Using ep0 maxpacket: 32
[  274.489864][ T5865] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  274.515842][ T5865] usb 4-1: config 0 has no interface number 0
[  274.538486][ T5865] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  274.561536][ T5865] usb 4-1: config 0 interface 89 has no altsetting 0
[  274.595888][ T5865] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  274.637837][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.677696][ T5865] usb 4-1: Product: syz
[  274.706009][ T5865] usb 4-1: Manufacturer: syz
[  274.734454][ T5865] usb 4-1: SerialNumber: syz
[  274.753701][ T5865] usb 4-1: config 0 descriptor??
[  274.769607][ T5865] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  274.791216][ T5865] em28xx 4-1:0.89: Video interface 89 found:
[  275.082549][   T27] audit: type=1800 audit(1786289150.432:21): pid=7287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.404" name="idVendor" dev="configfs" ino=12951 res=0 errno=0
[  275.627414][ T5865] em28xx 4-1:0.89: unknown em28xx chip ID (0)
[  276.267646][ T5865] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  276.297487][ T5865] em28xx 4-1:0.89: board has no eeprom
[  276.377549][ T5865] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67)
[  276.408594][ T5865] em28xx 4-1:0.89: analog set to bulk mode.
[  276.415587][ T5821] em28xx 4-1:0.89: Registering V4L2 extension
[  276.459208][ T5865] usb 4-1: USB disconnect, device number 3
[  276.466162][ T5865] em28xx 4-1:0.89: Disconnecting em28xx
[  276.590107][ T5821] em28xx 4-1:0.89: Config register raw data: 0xffffffed
[  276.597452][ T5821] em28xx 4-1:0.89: AC97 chip type couldn't be determined
[  276.612221][ T5821] em28xx 4-1:0.89: No AC97 audio processor
[  276.669681][ T5821] usb 4-1: Decoder not found
[  276.689082][ T5821] em28xx 4-1:0.89: failed to create media graph
[  276.718103][ T5821] em28xx 4-1:0.89: V4L2 device video103 deregistered
[  276.762197][ T5821] em28xx 4-1:0.89: Registering snapshot button...
[  276.795369][ T5821] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input8
[  276.841317][ T5821] em28xx 4-1:0.89: Remote control support is not available for this card.
[  276.857575][ T5865] em28xx 4-1:0.89: Closing input extension
[  276.878219][ T5865] em28xx 4-1:0.89: Deregistering snapshot button
[  277.203986][ T5865] em28xx 4-1:0.89: Freeing device
[  280.227322][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  280.674926][ T7312] vivid-000: =================  START STATUS  =================
[  280.682708][ T7312] vivid-000: Radio HW Seek Mode: Bounded
[  280.688512][ T7312] vivid-000: Radio Programmable HW Seek: false
[  280.694725][ T7312] vivid-000: RDS Rx I/O Mode: Block I/O
[  280.700383][ T7312] vivid-000: Generate RBDS Instead of RDS: false
[  280.706730][ T7312] vivid-000: RDS Reception: true
[  280.711764][ T7312] vivid-000: RDS Program Type: 0 inactive
[  280.717604][ T7312] vivid-000: RDS PS Name:  inactive
[  280.722832][ T7312] vivid-000: RDS Radio Text:  inactive
[  280.728376][ T7312] vivid-000: RDS Traffic Announcement: false inactive
[  280.735173][ T7312] vivid-000: RDS Traffic Program: false inactive
[  280.742627][ T7312] vivid-000: RDS Music: false inactive
[  280.748184][ T7312] vivid-000: ==================  END STATUS  ==================
[  281.558252][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  282.331315][   T27] audit: type=1800 audit(1786289157.682:22): pid=7316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.416" name="idVendor" dev="configfs" ino=13042 res=0 errno=0
[  283.184356][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'.
[  283.313048][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'.
[  283.329607][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'.
[  283.369640][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'.
[  285.167922][ T5843] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  285.372743][ T7336] binder: BINDER_SET_CONTEXT_MGR already set
[  285.379158][ T7336] binder: 7335:7336 ioctl 4018620d 200000000040 returned -16
[  285.413235][ T5843] usb 3-1: Using ep0 maxpacket: 32
[  285.435262][ T5843] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[  285.471781][ T5843] usb 3-1: config 0 has no interface number 0
[  285.782300][ T5843] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  286.036345][ T5843] usb 3-1: config 0 interface 89 has no altsetting 0
[  286.083341][ T5843] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  286.116211][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.147479][ T5843] usb 3-1: Product: syz
[  286.152500][ T5843] usb 3-1: Manufacturer: syz
[  286.157178][ T5843] usb 3-1: SerialNumber: syz
[  286.190785][ T5843] usb 3-1: config 0 descriptor??
[  286.250082][ T5843] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  286.272047][ T5843] em28xx 3-1:0.89: Video interface 89 found:
[  287.777602][ T7345] vivid-001: =================  START STATUS  =================
[  287.785287][ T7345] vivid-001: Radio HW Seek Mode: Bounded
[  287.791118][ T7345] vivid-001: Radio Programmable HW Seek: false
[  287.797434][ T7345] vivid-001: RDS Rx I/O Mode: Block I/O
[  287.803026][ T7345] vivid-001: Generate RBDS Instead of RDS: false
[  287.807671][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  287.810320][ T7345] vivid-001: RDS Reception: true
[  287.822638][ T7345] vivid-001: RDS Program Type: 0 inactive
[  287.828470][ T7345] vivid-001: RDS PS Name:  inactive
[  287.833693][ T7345] vivid-001: RDS Radio Text:  inactive
[  287.839246][ T7345] vivid-001: RDS Traffic Announcement: false inactive
[  287.846038][ T7345] vivid-001: RDS Traffic Program: false inactive
[  287.852566][ T7345] vivid-001: RDS Music: false inactive
[  287.858162][ T7345] vivid-001: ==================  END STATUS  ==================
[  289.566705][ T5843] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[  289.690821][ T5843] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  289.824597][ T5843] em28xx 3-1:0.89: board has no eeprom
[  289.976076][ T5843] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[  290.024308][ T5843] em28xx 3-1:0.89: analog set to bulk mode.
[  290.102171][    T8] em28xx 3-1:0.89: Registering V4L2 extension
[  290.345969][ T5843] usb 3-1: USB disconnect, device number 3
[  290.383475][ T5843] em28xx 3-1:0.89: Disconnecting em28xx
[  290.447602][    T8] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[  290.482475][    T8] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[  290.537461][    T8] em28xx 3-1:0.89: No AC97 audio processor
[  290.557774][    T8] usb 3-1: Decoder not found
[  290.562462][    T8] em28xx 3-1:0.89: failed to create media graph
[  290.615202][    T8] em28xx 3-1:0.89: V4L2 device video103 deregistered
[  290.637455][    T8] em28xx 3-1:0.89: Registering snapshot button...
[  290.669607][    T8] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input9
[  290.728836][    T8] em28xx 3-1:0.89: Remote control support is not available for this card.
[  290.777988][ T5843] em28xx 3-1:0.89: Closing input extension
[  290.787341][ T5843] em28xx 3-1:0.89: Deregistering snapshot button
[  290.939857][ T5843] em28xx 3-1:0.89: Freeing device
[  291.765154][ T7375] binder: BINDER_SET_CONTEXT_MGR already set
[  291.816621][ T7375] binder: 7374:7375 ioctl 4018620d 200000000040 returned -16
[  293.697589][ T7379] vivid-002: =================  START STATUS  =================
[  293.705265][ T7379] vivid-002: Radio HW Seek Mode: Bounded
[  293.711094][ T7379] vivid-002: Radio Programmable HW Seek: false
[  293.717436][ T7379] vivid-002: RDS Rx I/O Mode: Block I/O
[  293.723016][ T7379] vivid-002: Generate RBDS Instead of RDS: false
[  293.729491][ T7379] vivid-002: RDS Reception: true
[  293.734456][ T7379] vivid-002: RDS Program Type: 0 inactive
[  293.740309][ T7379] vivid-002: RDS PS Name:  inactive
[  293.745849][ T7379] vivid-002: RDS Radio Text:  inactive
[  293.751770][ T7379] vivid-002: RDS Traffic Announcement: false inactive
[  293.758678][ T7379] vivid-002: RDS Traffic Program: false inactive
[  293.765032][ T7379] vivid-002: RDS Music: false inactive
[  293.770678][ T7379] vivid-002: ==================  END STATUS  ==================
[  294.358247][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  296.388483][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'.
[  296.425644][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'.
[  296.442737][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'.
[  296.503446][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'.
[  299.567590][ T7411] vivid-002: =================  START STATUS  =================
[  299.575275][ T7411] vivid-002: Radio HW Seek Mode: Bounded
[  299.581348][ T7411] vivid-002: Radio Programmable HW Seek: false
[  299.587745][ T7411] vivid-002: RDS Rx I/O Mode: Block I/O
[  299.593326][ T7411] vivid-002: Generate RBDS Instead of RDS: false
[  299.599758][ T7411] vivid-002: RDS Reception: true
[  299.604799][ T7411] vivid-002: RDS Program Type: 0 inactive
[  299.610665][ T7411] vivid-002: RDS PS Name:  inactive
[  299.615920][ T7411] vivid-002: RDS Radio Text:  inactive
[  299.621579][ T7411] vivid-002: RDS Traffic Announcement: false inactive
[  299.628478][ T7411] vivid-002: RDS Traffic Program: false inactive
[  299.634850][ T7411] vivid-002: RDS Music: false inactive
[  299.640412][ T7411] vivid-002: ==================  END STATUS  ==================
[  304.343733][ T7447] vivid-000: =================  START STATUS  =================
[  304.351902][ T7447] vivid-000: Radio HW Seek Mode: Bounded
[  304.358100][ T7447] vivid-000: Radio Programmable HW Seek: false
[  304.364570][ T7447] vivid-000: RDS Rx I/O Mode: Block I/O
[  304.370553][ T7447] vivid-000: Generate RBDS Instead of RDS: false
[  304.377149][ T7447] vivid-000: RDS Reception: true
[  304.382506][ T7447] vivid-000: RDS Program Type: 0 inactive
[  304.388798][ T7447] vivid-000: RDS PS Name:  inactive
[  304.397899][ T7447] vivid-000: RDS Radio Text:  inactive
[  304.404071][ T7447] vivid-000: RDS Traffic Announcement: false inactive
[  304.411486][ T7447] vivid-000: RDS Traffic Program: false inactive
[  304.418317][ T7447] vivid-000: RDS Music: false inactive
[  304.424217][ T7447] vivid-000: ==================  END STATUS  ==================
[  306.887537][  T173] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  307.363699][ T7458] binder: BINDER_SET_CONTEXT_MGR already set
[  307.387889][ T7458] binder: 7457:7458 ioctl 4018620d 200000000040 returned -16
[  310.188112][ T7477] vivid-001: =================  START STATUS  =================
[  310.196049][ T7477] vivid-001: Radio HW Seek Mode: Bounded
[  310.202102][ T7477] vivid-001: Radio Programmable HW Seek: false
[  310.208833][ T7477] vivid-001: RDS Rx I/O Mode: Block I/O
[  310.214763][ T7477] vivid-001: Generate RBDS Instead of RDS: false
[  310.221488][ T7477] vivid-001: RDS Reception: true
[  310.226702][ T7477] vivid-001: RDS Program Type: 0 inactive
[  310.236893][ T7477] vivid-001: RDS PS Name:  inactive
[  310.242620][ T7477] vivid-001: RDS Radio Text:  inactive
[  310.248572][ T7477] vivid-001: RDS Traffic Announcement: false inactive
[  310.255718][ T7477] vivid-001: RDS Traffic Program: false inactive
[  310.262587][ T7477] vivid-001: RDS Music: false inactive
[  310.268476][ T7477] vivid-001: ==================  END STATUS  ==================
[  313.263760][ T7495] binder: BINDER_SET_CONTEXT_MGR already set
[  313.270449][ T7495] binder: 7494:7495 ioctl 4018620d 200000000040 returned -16
[  313.337472][ T5843] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  313.665659][ T5843] usb 2-1: Using ep0 maxpacket: 32
[  313.852810][ T5843] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  313.949044][ T5843] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  313.958723][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  313.977160][ T5843] usb 2-1: Product: syz
[  313.997216][ T5843] usb 2-1: Manufacturer: syz
[  314.010379][ T5843] usb 2-1: SerialNumber: syz
[  314.025170][ T5843] usb 2-1: config 0 descriptor??
[  314.049708][ T7489] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  314.150351][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'.
[  314.175631][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'.
[  314.186721][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'.
[  314.203818][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'.
[  316.208235][ T7512] vivid-001: =================  START STATUS  =================
[  316.216158][ T7512] vivid-001: Radio HW Seek Mode: Bounded
[  316.222274][ T7512] vivid-001: Radio Programmable HW Seek: false
[  316.228830][ T7512] vivid-001: RDS Rx I/O Mode: Block I/O
[  316.234694][ T7512] vivid-001: Generate RBDS Instead of RDS: false
[  316.241426][ T7512] vivid-001: RDS Reception: true
[  316.246666][ T7512] vivid-001: RDS Program Type: 0 inactive
[  316.252943][ T7512] vivid-001: RDS PS Name:  inactive
[  316.258623][ T7512] vivid-001: RDS Radio Text:  inactive
[  316.264445][ T7512] vivid-001: RDS Traffic Announcement: false inactive
[  316.275597][ T7512] vivid-001: RDS Traffic Program: false inactive
[  316.282453][ T7512] vivid-001: RDS Music: false inactive
[  316.288507][ T7512] vivid-001: ==================  END STATUS  ==================
[  318.457219][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  318.463809][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  319.185980][ T5843] usb 2-1: USB disconnect, device number 3
[  320.885321][ T7537] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  323.437385][ T5843] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  323.546920][ T7567] binder: BINDER_SET_CONTEXT_MGR already set
[  323.554427][ T7567] binder: 7566:7567 ioctl 4018620d 200000000040 returned -16
[  323.740899][ T5843] usb 3-1: Using ep0 maxpacket: 32
[  323.977556][ T5843] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  324.206558][ T5843] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  324.220590][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  324.231812][ T5843] usb 3-1: Product: syz
[  324.236041][ T5843] usb 3-1: Manufacturer: syz
[  324.243354][ T5843] usb 3-1: SerialNumber: syz
[  324.251164][ T5843] usb 3-1: config 0 descriptor??
[  324.281973][ T7554] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  324.723305][  T173] usb 3-1: USB disconnect, device number 4
[  328.269606][ T7609] vivid-000: =================  START STATUS  =================
[  328.277590][ T7609] vivid-000: Radio HW Seek Mode: Bounded
[  328.283688][ T7609] vivid-000: Radio Programmable HW Seek: false
[  328.290470][ T7609] vivid-000: RDS Rx I/O Mode: Block I/O
[  328.296446][ T7609] vivid-000: Generate RBDS Instead of RDS: false
[  328.303267][ T7609] vivid-000: RDS Reception: true
[  328.308616][ T7609] vivid-000: RDS Program Type: 0 inactive
[  328.314814][ T7609] vivid-000: RDS PS Name:  inactive
[  328.320532][ T7609] vivid-000: RDS Radio Text:  inactive
[  328.326345][ T7609] vivid-000: RDS Traffic Announcement: false inactive
[  328.333649][ T7609] vivid-000: RDS Traffic Program: false inactive
[  328.340455][ T7609] vivid-000: RDS Music: false inactive
[  328.346385][ T7609] vivid-000: ==================  END STATUS  ==================
[  329.922881][ T7627] syz.3.511: attempt to access beyond end of device
[  329.922881][ T7627] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0
[  330.557025][ T7635] syz.0.508 uses obsolete (PF_INET,SOCK_PACKET)
[  331.877718][   T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  331.887793][ T5782] Bluetooth: hci3: command 0x0406 tx timeout
[  332.183432][ T7650] vivid-004: =================  START STATUS  =================
[  332.191178][ T7650] vivid-004: Radio HW Seek Mode: Bounded
[  332.196890][ T7650] vivid-004: Radio Programmable HW Seek: false
[  332.203169][ T7650] vivid-004: RDS Rx I/O Mode: Block I/O
[  332.209011][ T7650] vivid-004: Generate RBDS Instead of RDS: false
[  332.215445][ T7650] vivid-004: RDS Reception: true
[  332.220491][ T7650] vivid-004: RDS Program Type: 0 inactive
[  332.226244][ T7650] vivid-004: RDS PS Name:  inactive
[  332.231581][ T7650] vivid-004: RDS Radio Text:  inactive
[  332.237063][ T7650] vivid-004: RDS Traffic Announcement: false inactive
[  332.243934][ T7650] vivid-004: RDS Traffic Program: false inactive
[  332.251324][ T7650] vivid-004: RDS Music: false inactive
[  332.256846][ T7650] vivid-004: ==================  END STATUS  ==================
[  334.557489][   T23] usb 1-1: Using ep0 maxpacket: 32
[  334.579789][   T23] usb 1-1: device descriptor read/all, error -71
[  336.687864][ T7666] binder: BINDER_SET_CONTEXT_MGR already set
[  336.693929][ T7666] binder: 7665:7666 ioctl 4018620d 200000000040 returned -16
[  336.793763][ T7668] syz.0.522: attempt to access beyond end of device
[  336.793763][ T7668] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0
[  338.609788][ T7688] vivid-000: =================  START STATUS  =================
[  338.617683][ T7688] vivid-000: Radio HW Seek Mode: Bounded
[  338.623556][ T7688] vivid-000: Radio Programmable HW Seek: false
[  338.630061][ T7688] vivid-000: RDS Rx I/O Mode: Block I/O
[  338.635832][ T7688] vivid-000: Generate RBDS Instead of RDS: false
[  338.642463][ T7688] vivid-000: RDS Reception: true
[  338.647725][ T7688] vivid-000: RDS Program Type: 0 inactive
[  338.653811][ T7688] vivid-000: RDS PS Name:  inactive
[  338.659345][ T7688] vivid-000: RDS Radio Text:  inactive
[  338.665129][ T7688] vivid-000: RDS Traffic Announcement: false inactive
[  338.672249][ T7688] vivid-000: RDS Traffic Program: false inactive
[  338.678863][ T7688] vivid-000: RDS Music: false inactive
[  338.684602][ T7688] vivid-000: ==================  END STATUS  ==================
[  341.265925][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  344.097806][ T7722] binder: BINDER_SET_CONTEXT_MGR already set
[  344.103832][ T7722] binder: 7721:7722 ioctl 4018620d 200000000040 returned -16
[  345.067111][ T7731] vivid-002: =================  START STATUS  =================
[  345.074909][ T7731] vivid-002: Radio HW Seek Mode: Bounded
[  345.080837][ T7731] vivid-002: Radio Programmable HW Seek: false
[  345.087061][ T7731] vivid-002: RDS Rx I/O Mode: Block I/O
[  345.092714][ T7731] vivid-002: Generate RBDS Instead of RDS: false
[  345.099129][ T7731] vivid-002: RDS Reception: true
[  345.104092][ T7731] vivid-002: RDS Program Type: 0 inactive
[  345.109923][ T7731] vivid-002: RDS PS Name:  inactive
[  345.115247][ T7731] vivid-002: RDS Radio Text:  inactive
[  345.120795][ T7731] vivid-002: RDS Traffic Announcement: false inactive
[  345.127677][ T7731] vivid-002: RDS Traffic Program: false inactive
[  345.134042][ T7731] vivid-002: RDS Music: false inactive
[  345.139646][ T7731] vivid-002: ==================  END STATUS  ==================
[  350.344756][ T7763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.543'.
[  350.637636][ T7769] binder: BINDER_SET_CONTEXT_MGR already set
[  350.643710][ T7769] binder: 7767:7769 ioctl 4018620d 200000000040 returned -16
[  351.590529][ T7775] vivid-000: =================  START STATUS  =================
[  351.598369][ T7775] vivid-000: Radio HW Seek Mode: Bounded
[  351.604986][ T7775] vivid-000: Radio Programmable HW Seek: false
[  351.611377][ T7775] vivid-000: RDS Rx I/O Mode: Block I/O
[  351.616968][ T7775] vivid-000: Generate RBDS Instead of RDS: false
[  351.623377][ T7775] vivid-000: RDS Reception: true
[  351.628404][ T7775] vivid-000: RDS Program Type: 0 inactive
[  351.634151][ T7775] vivid-000: RDS PS Name:  inactive
[  351.639438][ T7775] vivid-000: RDS Radio Text:  inactive
[  351.644920][ T7775] vivid-000: RDS Traffic Announcement: false inactive
[  351.651829][ T7775] vivid-000: RDS Traffic Program: false inactive
[  351.658236][ T7775] vivid-000: RDS Music: false inactive
[  351.663737][ T7775] vivid-000: ==================  END STATUS  ==================
[  356.910589][ T7806] binder: BINDER_SET_CONTEXT_MGR already set
[  356.920430][ T7806] binder: 7805:7806 ioctl 4018620d 200000000040 returned -16
[  357.211992][ T7808] vivid-000: =================  START STATUS  =================
[  357.219849][ T7808] vivid-000: Radio HW Seek Mode: Bounded
[  357.225509][ T7808] vivid-000: Radio Programmable HW Seek: false
[  357.232814][ T7808] vivid-000: RDS Rx I/O Mode: Block I/O
[  357.238492][ T7808] vivid-000: Generate RBDS Instead of RDS: false
[  357.244843][ T7808] vivid-000: RDS Reception: true
[  357.249904][ T7808] vivid-000: RDS Program Type: 0 inactive
[  357.255716][ T7808] vivid-000: RDS PS Name:  inactive
[  357.261011][ T7808] vivid-000: RDS Radio Text:  inactive
[  357.266512][ T7808] vivid-000: RDS Traffic Announcement: false inactive
[  357.273427][ T7808] vivid-000: RDS Traffic Program: false inactive
[  357.279895][ T7808] vivid-000: RDS Music: false inactive
[  357.285425][ T7808] vivid-000: ==================  END STATUS  ==================
[  360.979875][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'.
[  360.993325][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'.
[  361.004467][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'.
[  361.016795][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'.
[  361.584505][ T7837] binder: BINDER_SET_CONTEXT_MGR already set
[  361.591584][ T7837] binder: 7836:7837 ioctl 4018620d 200000000040 returned -16
[  363.920527][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'.
[  363.932513][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'.
[  363.952926][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'.
[  363.980645][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'.
[  364.071445][ T7864] binder: BINDER_SET_CONTEXT_MGR already set
[  364.081983][ T7864] binder: 7863:7864 ioctl 4018620d 200000000040 returned -16
[  365.762073][ T7886] netlink: 68 bytes leftover after parsing attributes in process `syz.2.582'.
[  365.899375][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'.
[  367.230061][ T7910] binder: BINDER_SET_CONTEXT_MGR already set
[  367.236232][ T7910] binder: 7908:7910 ioctl 4018620d 200000000040 returned -16
[  367.990107][ T7913] __nla_validate_parse: 3 callbacks suppressed
[  367.990119][ T7913] netlink: 68 bytes leftover after parsing attributes in process `syz.2.591'.
[  368.176293][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'.
[  368.210693][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'.
[  368.222424][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'.
[  368.232063][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'.
[  368.375393][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'.
[  368.386295][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'.
[  368.399823][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'.
[  368.409231][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'.
[  370.206479][ T7952] binder: BINDER_SET_CONTEXT_MGR already set
[  370.213107][ T7952] binder: 7950:7952 ioctl 4018620d 200000000040 returned -16
[  371.371071][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'.
[  373.971663][ T8000] binder: BINDER_SET_CONTEXT_MGR already set
[  373.980859][ T8000] binder: 7998:8000 ioctl 4018620d 200000000040 returned -16
[  373.995635][ T8003] __nla_validate_parse: 3 callbacks suppressed
[  373.995660][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'.
[  374.548137][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'.
[  374.667876][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'.
[  374.731234][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'.
[  377.011341][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'.
[  377.040474][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'.
[  377.063615][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'.
[  377.092643][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'.
[  378.517535][ T5843] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  378.750553][ T5843] usb 2-1: config index 0 descriptor too short (expected 65183, got 72)
[  378.767026][ T5843] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  378.777542][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.785845][ T5843] usb 2-1: Product: syz
[  378.790419][ T5843] usb 2-1: Manufacturer: syz
[  378.795233][ T5843] usb 2-1: SerialNumber: syz
[  378.856655][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  378.863623][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  379.459414][ T5781] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  379.705952][ T8059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.721126][ T8059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.747820][ T8059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.778367][ T8059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.801872][ T8059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.825551][ T8059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.947750][ T5843] usb 2-1: USB disconnect, device number 4
[  380.537493][ T5781] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  380.647180][ T5781] ath9k_htc: Failed to initialize the device
[  380.798320][ T5843] usb 2-1: ath9k_htc: USB layer deinitialized
[  381.556895][ T8092] vivid-000: =================  START STATUS  =================
[  381.565053][ T8092] vivid-000: Radio HW Seek Mode: Bounded
[  381.571243][ T8092] vivid-000: Radio Programmable HW Seek: false
[  381.577851][ T8092] vivid-000: RDS Rx I/O Mode: Block I/O
[  381.583692][ T8092] vivid-000: Generate RBDS Instead of RDS: false
[  381.590473][ T8092] vivid-000: RDS Reception: true
[  381.595715][ T8092] vivid-000: RDS Program Type: 0 inactive
[  381.605796][ T8092] vivid-000: RDS PS Name:  inactive
[  381.611614][ T8092] vivid-000: RDS Radio Text:  inactive
[  381.617663][ T8092] vivid-000: RDS Traffic Announcement: false inactive
[  381.624934][ T8092] vivid-000: RDS Traffic Program: false inactive
[  381.631784][ T8092] vivid-000: RDS Music: false inactive
[  381.637773][ T8092] vivid-000: ==================  END STATUS  ==================
[  382.808788][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'.
[  382.846597][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'.
[  382.977491][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'.
[  383.503250][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'.
[  386.947804][ T8138] random: crng reseeded on system resumption
[  388.089696][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'.
[  388.119694][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'.
[  388.151470][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'.
[  388.185023][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'.
[  392.600019][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'.
[  392.650983][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'.
[  392.669197][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'.
[  392.681708][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'.
[  400.216851][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'.
[  400.326079][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'.
[  400.404137][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'.
[  400.446817][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'.
[  411.967480][ T5781] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  412.179691][ T5781] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  412.194996][ T5781] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  412.241400][ T5781] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  412.262302][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.284654][ T5781] usb 4-1: Product: syz
[  412.296217][ T5781] usb 4-1: Manufacturer: syz
[  412.309038][ T5781] usb 4-1: SerialNumber: syz
[  412.944661][ T5781] usb 4-1: failed to send ARPC request 1: -71
[  412.962903][ T5781] usb 4-1: failed to execute ARPC: -71
[  412.985356][ T5781] usb 4-1: failed to set connected state for cport 0: -71
[  413.024403][ T5781] greybus greybus1: 0/0:0: failed to set connected state: -71
[  413.049185][ T5781] usb 4-1: failed to send ARPC request 3: -71
[  413.056498][ T5781] usb 4-1: failed to execute ARPC: -71
[  413.071790][ T5781] usb 4-1: failed to clear cport 0: -71
[  413.078224][ T5781] greybus greybus1: 0/0:0: failed to clear host cport: -71
[  413.160795][ T5781] es2_ap_driver: probe of 4-1:1.0 failed with error -71
[  413.183864][ T5781] usb 4-1: USB disconnect, device number 5
[  414.573304][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'.
[  415.358577][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'.
[  415.381561][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'.
[  417.037532][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'.
[  419.951874][ T8381] binder: BINDER_SET_CONTEXT_MGR already set
[  419.967119][ T8381] binder: 8380:8381 ioctl 4018620d 200000000040 returned -16
[  421.287593][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'.
[  421.299528][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'.
[  421.309595][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'.
[  421.379311][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'.
[  424.420815][ T8415] binder: BINDER_SET_CONTEXT_MGR already set
[  424.426886][ T8415] binder: 8414:8415 ioctl 4018620d 200000000040 returned -16
[  425.321259][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  425.332446][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  425.341127][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  425.351683][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  425.360800][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  425.370464][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  427.407604][ T5782] Bluetooth: hci4: command tx timeout
[  427.475160][ T8420] chnl_net:caif_netlink_parms(): no params data found
[  429.497421][ T5782] Bluetooth: hci4: command tx timeout
[  429.714913][  T170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.780089][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'.
[  429.988370][  T170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.034057][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.049478][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.063845][ T8420] bridge_slave_0: entered allmulticast mode
[  430.094712][ T8420] bridge_slave_0: entered promiscuous mode
[  430.184967][  T170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.226755][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.256503][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.281153][ T8420] bridge_slave_1: entered allmulticast mode
[  430.329104][ T8420] bridge_slave_1: entered promiscuous mode
[  430.488743][  T170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.571535][ T8420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.623223][ T8420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.699320][ T8456] binder: BINDER_SET_CONTEXT_MGR already set
[  430.712002][ T8456] binder: 8455:8456 ioctl 4018620d 200000000040 returned -16
[  430.760205][ T8420] team0: Port device team_slave_0 added
[  431.495706][ T8420] team0: Port device team_slave_1 added
[  431.577656][ T5782] Bluetooth: hci4: command tx timeout
[  431.748994][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.768768][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.800989][ T8420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.842685][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.854933][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.914244][ T8420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.540020][ T8420] hsr_slave_0: entered promiscuous mode
[  433.588598][ T8420] hsr_slave_1: entered promiscuous mode
[  433.612818][ T8420] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  433.635611][ T8420] Cannot create hsr debugfs directory
[  433.648053][ T5782] Bluetooth: hci4: command tx timeout
[  434.133984][ T8486] fuse: Bad value for 'fd'
[  434.314960][ T8489] binder: BINDER_SET_CONTEXT_MGR already set
[  434.331042][ T8489] binder: 8488:8489 ioctl 4018620d 200000000040 returned -16
[  435.032614][ T8420] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  435.488686][ T8420] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  435.598973][ T8420] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  435.649074][ T8420] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  435.753580][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'.
[  437.755538][ T8420] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.891669][  T170] hsr_slave_0: left promiscuous mode
[  437.962714][  T170] hsr_slave_1: left promiscuous mode
[  437.998856][  T170] bridge_slave_1: left allmulticast mode
[  438.015433][  T170] bridge_slave_1: left promiscuous mode
[  438.044228][  T170] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.085557][  T170] bridge_slave_0: left allmulticast mode
[  438.108018][  T170] bridge_slave_0: left promiscuous mode
[  438.134628][  T170] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.266667][  T170] veth1_macvtap: left promiscuous mode
[  438.273068][  T170] veth0_macvtap: left promiscuous mode
[  438.282020][  T170] veth1_vlan: left promiscuous mode
[  438.288026][  T170] veth0_vlan: left promiscuous mode
[  439.235039][ T8535] fuse: Bad value for 'fd'
[  440.998621][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  441.019059][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  442.677968][  T170] team0 (unregistering): Port device team_slave_1 removed
[  442.780331][  T170] team0 (unregistering): Port device team_slave_0 removed
[  442.939798][  T170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  443.042619][  T170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.099094][  T170] bond0 (unregistering): Released all slaves
[  444.503480][ T8420] 8021q: adding VLAN 0 to HW filter on device team0
[  444.573585][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.580876][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state
[  444.673816][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.681137][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.889388][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'.
[  444.937052][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'.
[  445.033932][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'.
[  445.098745][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'.
[  446.180457][ T8420] 8021q: adding VLAN 0 to HW filter on device batadv0
[  447.358039][ T8590] vivid-002: =================  START STATUS  =================
[  447.365961][ T8590] vivid-002: Radio HW Seek Mode: Bounded
[  447.372058][ T8590] vivid-002: Radio Programmable HW Seek: false
[  447.378697][ T8590] vivid-002: RDS Rx I/O Mode: Block I/O
[  447.384530][ T8590] vivid-002: Generate RBDS Instead of RDS: false
[  447.391279][ T8590] vivid-002: RDS Reception: true
[  447.396519][ T8590] vivid-002: RDS Program Type: 0 inactive
[  447.402752][ T8590] vivid-002: RDS PS Name:  inactive
[  447.408688][ T8590] vivid-002: RDS Radio Text:  inactive
[  447.414494][ T8590] vivid-002: RDS Traffic Announcement: false inactive
[  447.421580][ T8590] vivid-002: RDS Traffic Program: false inactive
[  447.428455][ T8590] vivid-002: RDS Music: false inactive
[  447.434276][ T8590] vivid-002: ==================  END STATUS  ==================
[  450.804318][ T8420] veth0_vlan: entered promiscuous mode
[  450.816668][ T8604] fuse: Bad value for 'fd'
[  450.842926][ T8420] veth1_vlan: entered promiscuous mode
[  450.943191][ T8420] veth0_macvtap: entered promiscuous mode
[  450.994243][ T8420] veth1_macvtap: entered promiscuous mode
[  452.180609][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.221192][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.249200][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_0
[  452.292121][ T8420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.317570][ T8420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.351205][ T8420] batman_adv: batadv0: Interface activated: batadv_slave_1
[  452.375958][ T8420] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.409644][ T8420] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.430160][ T8420] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.449482][ T8420] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.709767][  T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.760561][  T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.814721][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.826653][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.789411][ T8642] vivid-002: =================  START STATUS  =================
[  454.797316][ T8642] vivid-002: Radio HW Seek Mode: Bounded
[  454.803286][ T8642] vivid-002: Radio Programmable HW Seek: false
[  454.809934][ T8642] vivid-002: RDS Rx I/O Mode: Block I/O
[  454.815806][ T8642] vivid-002: Generate RBDS Instead of RDS: false
[  454.826595][ T8642] vivid-002: RDS Reception: true
[  454.832081][ T8642] vivid-002: RDS Program Type: 0 inactive
[  454.838326][ T8642] vivid-002: RDS PS Name:  inactive
[  454.844012][ T8642] vivid-002: RDS Radio Text:  inactive
[  454.850029][ T8642] vivid-002: RDS Traffic Announcement: false inactive
[  454.857381][ T8642] vivid-002: RDS Traffic Program: false inactive
[  454.863935][ T8642] vivid-002: RDS Music: false inactive
[  454.869945][ T8642] vivid-002: ==================  END STATUS  ==================
[  467.985926][ T8765] syzkaller0: entered promiscuous mode
[  467.994203][ T8765] syzkaller0: entered allmulticast mode
[  469.089155][ T8781] configfs-gadget.g1 gadget.0: HOST MAC 6a:b1:70:8f:01:62
[  469.096698][ T8781] configfs-gadget.g1 gadget.0: MAC da:72:a4:51:89:52
[  470.597531][ T5781] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  470.827723][ T5781] usb 1-1: Dual-Role OTG device on HNP port
[  470.847407][ T5781] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06
[  470.856518][ T5781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.850733][ T5781] cdc_eem 1-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, 96:40:d2:11:36:9a
[  471.863433][ T5781] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  476.319720][ T8822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.830'.
[  480.291144][ T8842] Rounding down aligned max_sectors from 4294967295 to 4294967288
[  486.542584][ T8905] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20002
[  491.069974][ T8939] fuse: Bad value for 'fd'
[  492.605986][ T8958] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20002
[  493.795886][ T8967] program syz.4.859 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  493.807604][ T8967] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  502.471025][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  502.477580][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  502.488466][ T8994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.855'.
[  504.178607][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  504.197625][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  504.206686][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  504.227585][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  504.235976][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  504.244197][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  507.805226][ T5785] Bluetooth: hci2: command tx timeout
[  508.187929][ T9003] chnl_net:caif_netlink_parms(): no params data found
[  508.981781][ T9034] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20002
[  509.889391][ T5785] Bluetooth: hci2: command tx timeout
[  510.457427][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.464697][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.478009][ T9003] bridge_slave_0: entered allmulticast mode
[  510.501828][ T9003] bridge_slave_0: entered promiscuous mode
[  510.616143][   T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.698007][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.705456][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.758828][ T9003] bridge_slave_1: entered allmulticast mode
[  510.815039][ T9003] bridge_slave_1: entered promiscuous mode
[  511.041874][   T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  511.333473][ T9003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  511.431073][ T9003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  511.968603][ T5785] Bluetooth: hci2: command tx timeout
[  514.767381][ T5785] Bluetooth: hci2: command tx timeout
[  517.892487][   T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.283423][   T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.405957][ T9003] team0: Port device team_slave_0 added
[  518.470147][ T9003] team0: Port device team_slave_1 added
[  518.525375][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_0
[  518.537341][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.569784][ T9003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  518.588139][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_1
[  518.595316][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.626636][ T9003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  518.695365][ T9003] hsr_slave_0: entered promiscuous mode
[  518.709874][ T9003] hsr_slave_1: entered promiscuous mode
[  519.642269][   T34] tipc: Disabling bearer <udp:syz2>
[  519.720930][   T34] tipc: Left network mode
[  523.314363][ T9095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.876'.
[  526.517932][ T9003] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  526.718175][ T9003] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  526.768451][ T9003] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  528.779629][ T9003] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  529.845062][   T34] hsr_slave_0: left promiscuous mode
[  529.858351][   T34] hsr_slave_1: left promiscuous mode
[  529.918682][   T34] bridge_slave_1: left allmulticast mode
[  529.924421][   T34] bridge_slave_1: left promiscuous mode
[  529.957811][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.038438][   T34] bridge_slave_0: left allmulticast mode
[  530.044177][   T34] bridge_slave_0: left promiscuous mode
[  530.087868][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.477682][   T34] veth1_macvtap: left promiscuous mode
[  530.483465][   T34] veth0_macvtap: left promiscuous mode
[  530.507548][   T34] veth1_vlan: left promiscuous mode
[  530.512962][   T34] veth0_vlan: left promiscuous mode
[  534.176236][   T34] team0 (unregistering): Port device team_slave_1 removed
[  534.238235][   T34] team0 (unregistering): Port device team_slave_0 removed
[  534.295366][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  534.361280][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  534.788189][   T34] bond0 (unregistering): Released all slaves
[  534.948081][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0
[  534.978892][ T9003] 8021q: adding VLAN 0 to HW filter on device team0
[  535.044951][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.052723][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.162071][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.169469][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.756854][ T9003] 8021q: adding VLAN 0 to HW filter on device batadv0
[  536.245389][ T9003] veth0_vlan: entered promiscuous mode
[  536.268012][ T9003] veth1_vlan: entered promiscuous mode
[  536.349700][ T9003] veth0_macvtap: entered promiscuous mode
[  536.366289][ T9003] veth1_macvtap: entered promiscuous mode
[  536.398893][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  536.410563][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.420559][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  536.432101][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.444350][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_0
[  536.484971][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.495788][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.506761][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.521401][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.537659][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_1
[  536.566582][ T9003] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.576752][ T9003] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.589524][ T9003] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  536.598436][ T9003] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.755018][ T3429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.775908][ T3429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.827094][ T5955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.844351][ T5955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.628603][ T9203] netlink: 28 bytes leftover after parsing attributes in process `syz.5.888'.
[  545.677869][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'.
[  545.761482][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'.
[  545.775503][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'.
[  545.788299][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'.
[  551.871849][ T9250] Bluetooth: hci4: command 0x0406 tx timeout
[  551.978554][  T173] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  563.267571][ T9317] vivid-000: =================  START STATUS  =================
[  563.275528][ T9317] vivid-000: Radio HW Seek Mode: Bounded
[  563.281440][ T9317] vivid-000: Radio Programmable HW Seek: false
[  563.287813][ T9317] vivid-000: RDS Rx I/O Mode: Block I/O
[  563.293515][ T9317] vivid-000: Generate RBDS Instead of RDS: false
[  563.299957][ T9317] vivid-000: RDS Reception: true
[  563.304916][ T9317] vivid-000: RDS Program Type: 0 inactive
[  563.310819][ T9317] vivid-000: RDS PS Name:  inactive
[  563.316101][ T9317] vivid-000: RDS Radio Text:  inactive
[  563.321744][ T9317] vivid-000: RDS Traffic Announcement: false inactive
[  563.328833][ T9317] vivid-000: RDS Traffic Program: false inactive
[  563.335240][ T9317] vivid-000: RDS Music: false inactive
[  563.340914][ T9317] vivid-000: ==================  END STATUS  ==================
[  565.997918][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  566.004307][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  572.287872][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'.
[  574.588114][ T9373] vivid-000: =================  START STATUS  =================
[  574.596404][ T9373] vivid-000: Radio HW Seek Mode: Bounded
[  574.602650][ T9373] vivid-000: Radio Programmable HW Seek: false
[  574.609359][ T9373] vivid-000: RDS Rx I/O Mode: Block I/O
[  574.615565][ T9373] vivid-000: Generate RBDS Instead of RDS: false
[  574.622564][ T9373] vivid-000: RDS Reception: true
[  574.631619][ T9373] vivid-000: RDS Program Type: 0 inactive
[  574.638098][ T9373] vivid-000: RDS PS Name:  inactive
[  574.644037][ T9373] vivid-000: RDS Radio Text:  inactive
[  574.650220][ T9373] vivid-000: RDS Traffic Announcement: false inactive
[  574.657695][ T9373] vivid-000: RDS Traffic Program: false inactive
[  574.664568][ T9373] vivid-000: RDS Music: false inactive
[  574.777352][ T9373] vivid-000: ==================  END STATUS  ==================
[  577.127586][ T9381] vivid-000: =================  START STATUS  =================
[  577.135298][ T9381] vivid-000: Radio HW Seek Mode: Bounded
[  577.141193][ T9381] vivid-000: Radio Programmable HW Seek: false
[  577.147575][ T9381] vivid-000: RDS Rx I/O Mode: Block I/O
[  577.153240][ T9381] vivid-000: Generate RBDS Instead of RDS: false
[  577.159773][ T9381] vivid-000: RDS Reception: true
[  577.164786][ T9381] vivid-000: RDS Program Type: 0 inactive
[  577.171051][ T9381] vivid-000: RDS PS Name:  inactive
[  577.176327][ T9381] vivid-000: RDS Radio Text:  inactive
[  577.182024][ T9381] vivid-000: RDS Traffic Announcement: false inactive
[  577.189502][ T9381] vivid-000: RDS Traffic Program: false inactive
[  577.195957][ T9381] vivid-000: RDS Music: false inactive
[  577.201645][ T9381] vivid-000: ==================  END STATUS  ==================
[  584.192680][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'.
[  584.242256][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'.
[  584.272986][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'.
[  584.297984][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'.
[  591.088124][ T9429] vivid-001: =================  START STATUS  =================
[  591.096250][ T9429] vivid-001: Radio HW Seek Mode: Bounded
[  591.102737][ T9429] vivid-001: Radio Programmable HW Seek: false
[  591.109630][ T9429] vivid-001: RDS Rx I/O Mode: Block I/O
[  591.119614][ T9429] vivid-001: Generate RBDS Instead of RDS: false
[  591.126616][ T9429] vivid-001: RDS Reception: true
[  591.132252][ T9429] vivid-001: RDS Program Type: 0 inactive
[  591.138533][ T9429] vivid-001: RDS PS Name:  inactive
[  591.144316][ T9429] vivid-001: RDS Radio Text:  inactive
[  591.150503][ T9429] vivid-001: RDS Traffic Announcement: false inactive
[  591.158083][ T9429] vivid-001: RDS Traffic Program: false inactive
[  591.165002][ T9429] vivid-001: RDS Music: false inactive
[  591.277431][ T9429] vivid-001: ==================  END STATUS  ==================
[  596.557757][ T9456] vivid-001: =================  START STATUS  =================
[  596.565516][ T9456] vivid-001: Radio HW Seek Mode: Bounded
[  596.571433][ T9456] vivid-001: Radio Programmable HW Seek: false
[  596.577773][ T9456] vivid-001: RDS Rx I/O Mode: Block I/O
[  596.583403][ T9456] vivid-001: Generate RBDS Instead of RDS: false
[  596.589910][ T9456] vivid-001: RDS Reception: true
[  596.594972][ T9456] vivid-001: RDS Program Type: 0 inactive
[  596.600943][ T9456] vivid-001: RDS PS Name:  inactive
[  596.606255][ T9456] vivid-001: RDS Radio Text:  inactive
[  596.611970][ T9456] vivid-001: RDS Traffic Announcement: false inactive
[  596.618908][ T9456] vivid-001: RDS Traffic Program: false inactive
[  596.625326][ T9456] vivid-001: RDS Music: false inactive
[  596.631150][ T9456] vivid-001: ==================  END STATUS  ==================
[  601.951636][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'.
[  602.045989][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'.
[  602.446321][ T9489] vivid-000: =================  START STATUS  =================
[  602.455324][ T9489] vivid-000: Radio HW Seek Mode: Bounded
[  602.461581][ T9489] vivid-000: Radio Programmable HW Seek: false
[  602.468280][ T9489] vivid-000: RDS Rx I/O Mode: Block I/O
[  602.474258][ T9489] vivid-000: Generate RBDS Instead of RDS: false
[  602.484553][ T9489] vivid-000: RDS Reception: true
[  602.490115][ T9489] vivid-000: RDS Program Type: 0 inactive
[  602.496377][ T9489] vivid-000: RDS PS Name:  inactive
[  602.502427][ T9489] vivid-000: RDS Radio Text:  inactive
[  602.508289][ T9489] vivid-000: RDS Traffic Announcement: false inactive
[  602.515653][ T9489] vivid-000: RDS Traffic Program: false inactive
[  602.522623][ T9489] vivid-000: RDS Music: false inactive
[  602.528879][ T9489] vivid-000: ==================  END STATUS  ==================
[  603.312211][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'.
[  603.340098][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'.
[  610.978707][ T9515] vivid-000: =================  START STATUS  =================
[  610.986420][ T9515] vivid-000: Radio HW Seek Mode: Bounded
[  610.992350][ T9515] vivid-000: Radio Programmable HW Seek: false
[  610.998692][ T9515] vivid-000: RDS Rx I/O Mode: Block I/O
[  611.004309][ T9515] vivid-000: Generate RBDS Instead of RDS: false
[  611.010837][ T9515] vivid-000: RDS Reception: true
[  611.015955][ T9515] vivid-000: RDS Program Type: 0 inactive
[  611.021816][ T9515] vivid-000: RDS PS Name:  inactive
[  611.027068][ T9515] vivid-000: RDS Radio Text:  inactive
[  611.032770][ T9515] vivid-000: RDS Traffic Announcement: false inactive
[  611.039707][ T9515] vivid-000: RDS Traffic Program: false inactive
[  611.046182][ T9515] vivid-000: RDS Music: false inactive
[  611.051822][ T9515] vivid-000: ==================  END STATUS  ==================
[  618.279038][ T9250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  618.293402][ T9250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  618.302173][ T9250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  618.372991][ T9250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  618.381368][ T9250] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  618.391449][ T9250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  621.154334][ T9250] Bluetooth: hci3: command tx timeout
[  622.116628][   T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.810005][ T9554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.952'.
[  622.880089][ T9554] bond0: entered promiscuous mode
[  622.885295][ T9554] bond_slave_0: entered promiscuous mode
[  622.891480][ T9554] bond_slave_1: entered promiscuous mode
[  622.967423][ T9554] bond0: left promiscuous mode
[  622.972412][ T9554] bond_slave_0: left promiscuous mode
[  622.978243][ T9554] bond_slave_1: left promiscuous mode
[  623.177472][ T9250] Bluetooth: hci3: command tx timeout
[  623.725252][   T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.628288][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  624.634790][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  625.002655][   T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.257343][ T5785] Bluetooth: hci3: command tx timeout
[  625.290745][   T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  626.171282][ T9535] chnl_net:caif_netlink_parms(): no params data found
[  627.037669][ T9582] vivid-001: =================  START STATUS  =================
[  627.045384][ T9582] vivid-001: Radio HW Seek Mode: Bounded
[  627.051299][ T9582] vivid-001: Radio Programmable HW Seek: false
[  627.058044][ T9582] vivid-001: RDS Rx I/O Mode: Block I/O
[  627.063656][ T9582] vivid-001: Generate RBDS Instead of RDS: false
[  627.070206][ T9582] vivid-001: RDS Reception: true
[  627.075223][ T9582] vivid-001: RDS Program Type: 0 inactive
[  627.081103][ T9582] vivid-001: RDS PS Name:  inactive
[  627.086387][ T9582] vivid-001: RDS Radio Text:  inactive
[  627.092342][ T9582] vivid-001: RDS Traffic Announcement: false inactive
[  627.099342][ T9582] vivid-001: RDS Traffic Program: false inactive
[  627.105761][ T9582] vivid-001: RDS Music: false inactive
[  627.111440][ T9582] vivid-001: ==================  END STATUS  ==================
[  629.864338][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  629.870855][ T5785] Bluetooth: hci3: command tx timeout
[  630.358457][ T9591] fuse: Bad value for 'group_id'
[  633.507033][ T9586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  633.518050][ T9586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  633.528457][ T9586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  633.537604][ T9586] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  633.545450][ T9586] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  633.553262][ T9586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  633.837895][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.845467][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.874318][ T9535] bridge_slave_0: entered allmulticast mode
[  633.898470][ T9535] bridge_slave_0: entered promiscuous mode
[  633.934788][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.977583][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.985220][ T9535] bridge_slave_1: entered allmulticast mode
[  634.042701][ T9535] bridge_slave_1: entered promiscuous mode
[  634.515898][ T9535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  634.576539][ T9535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  634.893836][ T9535] team0: Port device team_slave_0 added
[  637.465148][ T9250] Bluetooth: hci2: command tx timeout
[  637.588089][ T9535] team0: Port device team_slave_1 added
[  637.978674][   T34] hsr_slave_0: left promiscuous mode
[  638.037501][   T34] hsr_slave_1: left promiscuous mode
[  638.060418][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  638.069660][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  638.088479][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  638.095938][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  638.108686][   T34] bridge_slave_1: left allmulticast mode
[  638.115916][   T34] bridge_slave_1: left promiscuous mode
[  638.127308][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.150755][   T34] bridge_slave_0: left allmulticast mode
[  638.156466][   T34] bridge_slave_0: left promiscuous mode
[  638.169175][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.212890][   T34] veth1_macvtap: left promiscuous mode
[  638.219447][   T34] veth0_macvtap: left promiscuous mode
[  638.225153][   T34] veth1_vlan: left promiscuous mode
[  638.236657][   T34] veth0_vlan: left promiscuous mode
[  639.341675][   T34] team0 (unregistering): Port device team_slave_1 removed
[  639.430673][   T34] team0 (unregistering): Port device team_slave_0 removed
[  639.496311][ T9586] Bluetooth: hci2: command tx timeout
[  639.614075][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  639.694374][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  640.171497][   T34] bond0 (unregistering): Released all slaves
[  640.302367][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  640.312996][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  640.339733][ T9535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  640.357803][ T9631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.962'.
[  640.382845][ T9631] bond0: entered promiscuous mode
[  640.388008][ T9631] bond_slave_0: entered promiscuous mode
[  640.393852][ T9631] bond_slave_1: entered promiscuous mode
[  640.406849][ T9631] bond0: left promiscuous mode
[  640.411821][ T9631] bond_slave_0: left promiscuous mode
[  640.417643][ T9631] bond_slave_1: left promiscuous mode
[  640.446518][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  640.454439][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  640.481400][ T9535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  640.568139][ T9535] hsr_slave_0: entered promiscuous mode
[  640.576894][ T9535] hsr_slave_1: entered promiscuous mode
[  640.584346][ T9535] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  640.592118][ T9535] Cannot create hsr debugfs directory
[  644.877559][ T9586] Bluetooth: hci2: command tx timeout
[  645.394218][ T9601] chnl_net:caif_netlink_parms(): no params data found
[  645.529339][ T9647] fuse: Bad value for 'group_id'
[  645.651488][ T9535] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  645.722888][ T9535] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  645.795220][ T9535] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  645.957856][ T9535] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  648.642938][ T9250] Bluetooth: hci2: command tx timeout
[  649.137499][ T9601] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.144703][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.218778][ T9601] bridge_slave_0: entered allmulticast mode
[  649.226325][ T9601] bridge_slave_0: entered promiscuous mode
[  649.272675][ T9601] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.297433][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.305042][ T9601] bridge_slave_1: entered allmulticast mode
[  649.363302][ T9601] bridge_slave_1: entered promiscuous mode
[  649.792907][ T9601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  649.833545][ T9601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  652.431629][   T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.739199][   T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.863724][ T9601] team0: Port device team_slave_0 added
[  652.916932][ T9601] team0: Port device team_slave_1 added
[  653.023303][   T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  653.173864][ T9535] 8021q: adding VLAN 0 to HW filter on device bond0
[  653.240892][   T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  653.289943][ T9601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  653.297104][ T9601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  653.397422][ T9601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  653.429901][ T9601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  653.436917][ T9601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  653.475524][ T9601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  653.660769][ T9535] 8021q: adding VLAN 0 to HW filter on device team0
[  653.696946][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state
[  653.704206][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state
[  656.182615][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.189952][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state
[  656.230043][ T9601] hsr_slave_0: entered promiscuous mode
[  656.252315][ T9601] hsr_slave_1: entered promiscuous mode
[  656.272808][ T9601] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  656.293098][ T9601] Cannot create hsr debugfs directory
[  660.608045][ T9601] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  660.624370][ T9601] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  663.126290][ T9601] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  663.158419][ T9601] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  663.292876][ T9535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  663.746062][   T34] hsr_slave_0: left promiscuous mode
[  663.773558][   T34] hsr_slave_1: left promiscuous mode
[  663.783997][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  663.817906][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  663.847085][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  668.077418][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  668.158093][   T34] bridge_slave_1: left allmulticast mode
[  668.163822][   T34] bridge_slave_1: left promiscuous mode
[  668.207417][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.248193][   T34] bridge_slave_0: left allmulticast mode
[  668.253917][   T34] bridge_slave_0: left promiscuous mode
[  668.277601][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.392010][   T34] veth1_macvtap: left promiscuous mode
[  668.418844][   T34] veth0_macvtap: left promiscuous mode
[  668.424614][   T34] veth1_vlan: left promiscuous mode
[  668.452041][   T34] veth0_vlan: left promiscuous mode
[  669.940260][   T34] team0 (unregistering): Port device team_slave_1 removed
[  670.005564][   T34] team0 (unregistering): Port device team_slave_0 removed
[  670.059225][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  670.119445][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  670.580152][   T34] bond0 (unregistering): Released all slaves
[  670.935519][ T9601] 8021q: adding VLAN 0 to HW filter on device bond0
[  671.046242][ T9601] 8021q: adding VLAN 0 to HW filter on device team0
[  671.089249][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.096563][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state
[  671.173067][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.180468][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state
[  671.491104][ T9535] veth0_vlan: entered promiscuous mode
[  671.514683][ T9535] veth1_vlan: entered promiscuous mode
[  671.602178][ T9535] veth0_macvtap: entered promiscuous mode
[  671.630317][ T9535] veth1_macvtap: entered promiscuous mode
[  671.694742][ T9535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.705962][ T9535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.730466][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  671.765304][ T9535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.781736][ T9535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.796851][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  671.841777][ T9535] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  671.851159][ T9535] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  671.860261][ T9535] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  671.870749][ T9535] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  671.911745][ T9601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  672.066826][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  672.095873][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  672.142919][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  672.164819][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  676.008534][ T9787] fuse: Bad value for 'group_id'
[  676.124827][ T9601] veth0_vlan: entered promiscuous mode
[  676.210087][ T9601] veth1_vlan: entered promiscuous mode
[  676.375404][ T9601] veth0_macvtap: entered promiscuous mode
[  678.731992][ T9601] veth1_macvtap: entered promiscuous mode
[  678.880435][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.937269][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.977304][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.027275][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.059735][ T9601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  679.151271][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.195891][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.223124][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.267266][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.300381][ T9601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  679.364272][ T9601] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  679.423748][ T9601] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  679.447266][ T9601] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  679.456050][ T9601] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  679.782096][ T5947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  679.814678][ T5947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  679.946302][ T5952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  679.971044][ T5952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  685.183205][ T9840] xt_hashlimit: size too large, truncated to 1048576
[  685.992471][ T9844] vivid-002: =================  START STATUS  =================
[  686.059345][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  686.066234][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  686.552638][ T9844] vivid-002: Radio HW Seek Mode: Bounded
[  686.581429][ T9844] vivid-002: Radio Programmable HW Seek: false
[  686.626110][ T9844] vivid-002: RDS Rx I/O Mode: Block I/O
[  686.642250][ T9844] vivid-002: Generate RBDS Instead of RDS: false
[  686.683089][ T9844] vivid-002: RDS Reception: true
[  686.742816][ T9844] vivid-002: RDS Program Type: 0 inactive
[  686.756510][ T9844] vivid-002: RDS PS Name:  inactive
[  686.789394][ T9844] vivid-002: RDS Radio Text:  inactive
[  686.795229][ T9844] vivid-002: RDS Traffic Announcement: false inactive
[  686.802417][ T9844] vivid-002: RDS Traffic Program: false inactive
[  686.808992][ T9844] vivid-002: RDS Music: false inactive
[  686.814672][ T9844] vivid-002: ==================  END STATUS  ==================
[  700.327607][ T9891] netlink: 28 bytes leftover after parsing attributes in process `syz.7.987'.
[  703.327769][ T9905] vivid-000: =================  START STATUS  =================
[  703.341229][ T9905] vivid-000: Radio HW Seek Mode: Bounded
[  703.367618][ T9905] vivid-000: Radio Programmable HW Seek: false
[  703.412731][ T9905] vivid-000: RDS Rx I/O Mode: Block I/O
[  703.422034][ T9905] vivid-000: Generate RBDS Instead of RDS: false
[  703.434047][ T9905] vivid-000: RDS Reception: true
[  703.442754][ T9905] vivid-000: RDS Program Type: 0 inactive
[  704.601437][ T9913] vivid-002: =================  START STATUS  =================
[  704.611458][ T9913] vivid-002: Radio HW Seek Mode: Bounded
[  704.618492][ T9913] vivid-002: Radio Programmable HW Seek: false
[  704.625977][ T9913] vivid-002: RDS Rx I/O Mode: Block I/O
[  704.632901][ T9913] vivid-002: Generate RBDS Instead of RDS: false
[  704.640351][ T9913] vivid-002: RDS Reception: true
[  704.646140][ T9913] vivid-002: RDS Program Type: 0 inactive
[  704.653149][ T9913] vivid-002: RDS PS Name:  inactive
[  704.659313][ T9913] vivid-002: RDS Radio Text:  inactive
[  704.665720][ T9913] vivid-002: RDS Traffic Announcement: false inactive
[  704.675177][ T9913] vivid-002: RDS Traffic Program: false inactive
[  704.682497][ T9913] vivid-002: RDS Music: false inactive
[  704.689289][ T9913] vivid-002: ==================  END STATUS  ==================
[  706.783264][ T9905] vivid-000: RDS PS Name:  inactive
[  706.817256][ T9905] vivid-000: RDS Radio Text:  inactive
[  706.826635][ T9905] vivid-000: RDS Traffic Announcement: false inactive
[  707.107526][ T9905] vivid-000: RDS Traffic Program: false inactive
[  707.114021][ T9905] vivid-000: RDS Music: false inactive
[  708.599559][ T9918] xt_TPROXY: Can be used only with -p tcp or -p udp
[  708.647293][ T9905] vivid-000: ==================  END STATUS  ==================
[  723.043186][ T9977] vivid-004: =================  START STATUS  =================
[  723.051795][ T9977] vivid-004: Radio HW Seek Mode: Bounded
[  723.058659][ T9977] vivid-004: Radio Programmable HW Seek: false
[  723.065973][ T9977] vivid-004: RDS Rx I/O Mode: Block I/O
[  723.072603][ T9977] vivid-004: Generate RBDS Instead of RDS: false
[  723.079935][ T9977] vivid-004: RDS Reception: true
[  723.085851][ T9977] vivid-004: RDS Program Type: 0 inactive
[  723.092808][ T9977] vivid-004: RDS PS Name:  inactive
[  723.099106][ T9977] vivid-004: RDS Radio Text:  inactive
[  723.105590][ T9977] vivid-004: RDS Traffic Announcement: false inactive
[  723.115278][ T9977] vivid-004: RDS Traffic Program: false inactive
[  723.122899][ T9977] vivid-004: RDS Music: false inactive
[  723.129268][ T9977] vivid-004: ==================  END STATUS  ==================
[  730.737493][T10002] vivid-004: =================  START STATUS  =================
[  730.745208][T10002] vivid-004: Radio HW Seek Mode: Bounded
[  730.751070][T10002] vivid-004: Radio Programmable HW Seek: false
[  730.757423][T10002] vivid-004: RDS Rx I/O Mode: Block I/O
[  730.763033][T10002] vivid-004: Generate RBDS Instead of RDS: false
[  730.769547][T10002] vivid-004: RDS Reception: true
[  730.774552][T10002] vivid-004: RDS Program Type: 0 inactive
[  730.780453][T10002] vivid-004: RDS PS Name:  inactive
[  730.786298][T10002] vivid-004: RDS Radio Text:  inactive
[  730.791876][T10002] vivid-004: RDS Traffic Announcement: false inactive
[  730.798820][T10002] vivid-004: RDS Traffic Program: false inactive
[  730.805216][T10002] vivid-004: RDS Music: false inactive
[  730.810872][T10002] vivid-004: ==================  END STATUS  ==================
[  736.274580][   T27] audit: type=1800 audit(1786289611.622:23): pid=10021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1011" name="/" dev="fuse" ino=1 res=0 errno=0
[  746.243444][ T9250] Bluetooth: hci3: command 0x0406 tx timeout
[  747.117525][   T27] audit: type=1800 audit(1786289622.352:24): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1018" name="/" dev="fuse" ino=4 res=0 errno=0
[  748.927680][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  748.934161][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  759.827270][ T9586] Bluetooth: hci2: command 0x0406 tx timeout
[  763.915112][T10142] program syz.0.1032 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  763.925013][T10142] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  765.787658][ T5729] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  766.014854][ T5729] usb 8-1: Using ep0 maxpacket: 16
[  766.042167][ T5729] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  766.083225][ T5729] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  766.106151][ T5729] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.145943][ T5729] usb 8-1: Product: syz
[  766.176595][ T5729] usb 8-1: Manufacturer: syz
[  766.190604][ T5729] usb 8-1: SerialNumber: syz
[  766.221191][ T5729] usb 8-1: config 0 descriptor??
[  766.252267][ T5729] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  766.285748][ T5729] em28xx 8-1:0.0: DVB interface 0 found: bulk
[  767.398651][ T5729] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[  769.967355][ T5729] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  769.975516][ T5729] em28xx 8-1:0.0: board has no eeprom
[  770.177555][ T5729] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  770.185471][ T5729] em28xx 8-1:0.0: dvb set to bulk mode.
[  770.246205][   T23] em28xx 8-1:0.0: Binding DVB extension
[  770.294324][ T5729] usb 8-1: USB disconnect, device number 2
[  772.152055][ T5729] em28xx 8-1:0.0: Disconnecting em28xx
[  772.260632][   T23] em28xx 8-1:0.0: Registering input extension
[  772.321398][ T5729] em28xx 8-1:0.0: Closing input extension
[  772.457432][ T5729] em28xx 8-1:0.0: Freeing device
[  773.293459][T10193] Bluetooth: MGMT ver 1.22
[  775.209423][   T27] audit: type=1800 audit(1786289650.562:25): pid=10202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1046" name="/" dev="fuse" ino=4 res=0 errno=0
[  781.168085][T10214] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1038'.
[  786.331022][T10241] program syz.6.1049 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  786.340889][T10241] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  791.443345][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1053'.
[  791.454722][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1053'.
[  791.464312][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1053'.
[  793.314818][   T27] audit: type=1800 audit(1786289668.662:26): pid=10271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1056" name="/" dev="fuse" ino=4 res=0 errno=0
[  798.073198][   T27] audit: type=1800 audit(1786289673.422:27): pid=10316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1062" name="/" dev="fuse" ino=1 res=0 errno=0
[  801.275876][T10332] program syz.7.1064 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  801.285763][T10332] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  808.197535][   T27] audit: type=1800 audit(1786289683.542:28): pid=10384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1071" name="/" dev="fuse" ino=1 res=0 errno=0
[  808.947836][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  808.954224][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  809.020577][T10408] fuse: Bad value for 'fd'
[  810.880286][ T5100] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  810.927450][T10422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1079'.
[  811.240755][ T5100] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  811.257190][ T5100] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  811.807785][ T5100] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  811.951913][ T5100] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.962092][ T5100] usb 8-1: Product: syz
[  811.966426][ T5100] usb 8-1: Manufacturer: syz
[  811.971763][ T5100] usb 8-1: SerialNumber: syz
[  812.202207][ T5100] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  812.281034][ T5100] usb 8-1: USB disconnect, device number 3
[  812.339917][ T5100] usblp0: removed
[  813.024239][   T27] audit: type=1800 audit(1786289688.372:29): pid=10432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1082" name="/" dev="fuse" ino=1 res=0 errno=0
[  816.707485][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1089'.
[  816.716923][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1089'.
[  816.726165][T10470] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1089'.
[  817.297299][T10471] overlayfs: overlapping lowerdir path
[  824.317461][T10521] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1095'.
[  827.181996][T10535] fuse: Bad value for 'fd'
[  827.687919][T10542] NILFS (nbd3): device size too small
[  829.170418][T10549] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1102'.
[  830.067328][ T5781] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  832.898039][ T5781] usb 4-1: Using ep0 maxpacket: 32
[  833.282108][ T5781] usb 4-1: device descriptor read/all, error -71
[  836.898107][T10577] fuse: Bad value for 'fd'
[  840.338794][T10592] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1111'.
[  843.804004][T10626] fuse: Bad value for 'fd'
[  846.023359][T10639] overlayfs: overlapping lowerdir path
[  848.539704][T10652] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1120'.
[  849.930537][T10661] vivid-001: =================  START STATUS  =================
[  849.939116][T10661] vivid-001: Radio HW Seek Mode: Bounded
[  849.945868][T10661] vivid-001: Radio Programmable HW Seek: false
[  849.953250][T10661] vivid-001: RDS Rx I/O Mode: Block I/O
[  849.959996][T10661] vivid-001: Generate RBDS Instead of RDS: false
[  849.967611][T10661] vivid-001: RDS Reception: true
[  849.973864][T10661] vivid-001: RDS Program Type: 0 inactive
[  849.983423][T10661] vivid-001: RDS PS Name:  inactive
[  849.990423][T10661] vivid-001: RDS Radio Text:  inactive
[  849.997498][T10661] vivid-001: RDS Traffic Announcement: false inactive
[  850.005736][T10661] vivid-001: RDS Traffic Program: false inactive
[  850.014970][T10661] vivid-001: RDS Music: false inactive
[  850.021752][T10661] vivid-001: ==================  END STATUS  ==================
[  853.898577][T10674] fuse: Bad value for 'fd'
[  855.068814][   T23] libceph: connect (1)[c::]:6789 error -101
[  855.075034][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  855.229984][T10692] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1130'.
[  855.244280][T10682] ceph: No mds server is up or the cluster is laggy
[  855.349301][ T5821] libceph: connect (1)[c::]:6789 error -101
[  855.376432][ T5821] libceph: mon0 (1)[c::]:6789 connect error
[  855.729528][T10698] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1132'.
[  859.217168][T10714] fuse: Bad value for 'fd'
[  859.568136][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'.
[  860.208788][   T12] kworker/dying (12) used greatest stack depth: 20584 bytes left
[  861.973998][T10731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1139'.
[  863.286843][T10744] NILFS (nbd0): device size too small
[  863.520301][T10746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  863.530459][T10746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  865.932811][T10763] fuse: Invalid rootmode
[  867.069932][T10772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1149'.
[  870.126829][T10791] vivid-004: =================  START STATUS  =================
[  870.135440][T10791] vivid-004: Radio HW Seek Mode: Bounded
[  870.142231][T10791] vivid-004: Radio Programmable HW Seek: false
[  870.149145][T10791] vivid-004: RDS Rx I/O Mode: Block I/O
[  870.157780][T10791] vivid-004: Generate RBDS Instead of RDS: false
[  870.165065][T10791] vivid-004: RDS Reception: true
[  870.171060][T10791] vivid-004: RDS Program Type: 0 inactive
[  870.178072][T10791] vivid-004: RDS PS Name:  inactive
[  870.184491][T10791] vivid-004: RDS Radio Text:  inactive
[  870.191226][T10791] vivid-004: RDS Traffic Announcement: false inactive
[  870.199345][T10791] vivid-004: RDS Traffic Program: false inactive
[  870.206670][T10791] vivid-004: RDS Music: false inactive
[  870.213323][T10791] vivid-004: ==================  END STATUS  ==================
[  871.918679][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  871.925143][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  874.187641][T10797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1155'.
[  875.621786][T10807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  875.697547][T10807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  876.050421][T10807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  876.107679][T10807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  879.644987][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1162'.
[  880.035419][T10835] fuse: Invalid rootmode
[  883.907693][T10852] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1167'.
[  886.847514][ T5821] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  887.068471][ T5821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  887.089044][ T5821] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  887.115656][ T5821] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  887.157162][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  889.325165][   T23] usb 4-1: USB disconnect, device number 8
[  889.364196][T10890] fuse: Invalid rootmode
[  890.157978][T10903] fuse: Bad value for 'rootmode'
[  890.429255][T10907] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20000
[  890.492836][T10907] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1176'.
[  890.973316][T10916] CIFS: Attempting to mount //127.0.0.1/share
[  891.045844][T10922] lo: entered allmulticast mode
[  891.071039][T10923] CIFS: VFS: Invalid response size 0 for command 0
[  891.119093][T10923] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1
[  892.121556][T10914] lo: left allmulticast mode
[  892.196458][T10916] CIFS: VFS: cifs_mount failed w/return code = -112
[  894.749032][ T9250] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  897.695016][T10952] fuse: Bad value for 'rootmode'
[  904.489213][T11016] fuse: Bad value for 'rootmode'
[  907.917690][T11030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1201'.
[  911.168152][T11056] fuse: Unknown parameter 'use00000000000000000000'
[  920.580451][T11105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  920.658144][T11105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  922.838457][T11105] Bluetooth: MGMT ver 1.22
[  922.928904][T11113] fuse: Unknown parameter 'use00000000000000000000'
[  929.639724][T11160] fuse: Unknown parameter 'use00000000000000000000'
[  930.517238][ T5729] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  930.737286][ T5729] usb 4-1: Using ep0 maxpacket: 32
[  930.799592][ T5729] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  930.841128][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.910346][ T5729] usb 4-1: config 0 descriptor??
[  931.197324][ T5729] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  931.226089][ T5729] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  934.057770][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  934.064277][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  934.573830][ T5729] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  934.607594][ T5729] usb 4-1: media controller created
[  934.672992][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  934.881160][ T5729] az6027: usb out operation failed. (-71)
[  934.937238][ T5729] az6027: usb out operation failed. (-71)
[  934.943095][ T5729] stb0899_attach: Driver disabled by Kconfig
[  937.062915][ T5729] az6027: no front-end attached
[  937.062915][ T5729] 
[  937.073425][ T5729] az6027: usb out operation failed. (-71)
[  937.147216][ T5729] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  937.156876][ T5729] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12
[  937.307775][ T5729] dvb-usb: schedule remote query interval to 400 msecs.
[  937.314809][ T5729] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  937.404694][ T5729] usb 4-1: USB disconnect, device number 9
[  937.915752][ T5729] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  940.615459][T11209] fuse: Unknown parameter 'user_i00000000000000000000'
[  950.519233][T11261] fuse: Unknown parameter 'user_i00000000000000000000'
[  956.309175][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'.
[  957.304695][T11315] fuse: Unknown parameter 'user_i00000000000000000000'
[  959.897428][T11322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1259'.
[  968.478986][T11374] fuse: Unknown parameter 'user_id00000000000000000000'
[  968.529388][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1267'.
[  969.887151][ T5821] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  970.164289][ T5821] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  970.176340][ T5821] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  970.189853][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  970.231166][ T5821] as10x_usb: device has been detected
[  970.253212][ T5821] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  970.311081][ T5821] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  970.421121][ T5821] as10x_usb: error during firmware upload part1
[  970.433870][ T5821] Registered device Abilis Systems DVB-Titan
[  972.949204][ T8494] usb 7-1: USB disconnect, device number 2
[  973.168952][ T8494] Unregistered device Abilis Systems DVB-Titan
[  973.187835][ T8494] as10x_usb: device has been disconnected
[  979.501879][T11445] NILFS (nbd7): device size too small
[  984.537910][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1286'.
[  991.795523][T11495] NILFS (nbd3): device size too small
[  994.697361][  T173] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  994.942582][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  994.949163][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  995.467606][  T173] usb 4-1: Using ep0 maxpacket: 32
[  995.997397][  T173] usb 4-1: device descriptor read/all, error -71
[  997.663837][T11514] Bluetooth: hci0: Zero size dump init pkt
[  997.930905][T11514] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  997.943337][T11514] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  997.953614][T11514] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  997.964040][T11514] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  997.973319][T11514] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  997.981428][T11514] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  998.280409][ T9586] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  998.291472][ T9586] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  998.301291][ T9586] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  998.606440][ T9586] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  998.624925][ T9586] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  998.638909][ T9586] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1001.257241][T11514] Bluetooth: hci4: command tx timeout
[ 1001.263594][T11514] Bluetooth: hci5: command tx timeout
[ 1003.348845][T11514] Bluetooth: hci4: command tx timeout
[ 1003.354389][ T9586] Bluetooth: hci5: command tx timeout
[ 1004.454915][T10887] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1004.525022][T11514] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1004.558276][T11514] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1004.587360][T11514] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1004.611332][T11514] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1004.624211][T11514] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1004.632110][T11514] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1005.220981][T10887] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.323535][T11521] chnl_net:caif_netlink_parms(): no params data found
[ 1005.410538][T11514] Bluetooth: hci4: command tx timeout
[ 1005.410706][ T9586] Bluetooth: hci5: command tx timeout
[ 1005.643603][T10887] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1006.054046][T10887] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1006.115965][T11511] chnl_net:caif_netlink_parms(): no params data found
[ 1006.700703][T11521] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1006.723243][T11521] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1006.752601][T11521] bridge_slave_0: entered allmulticast mode
[ 1006.767618][ T9586] Bluetooth: hci3: command tx timeout
[ 1006.783802][T11521] bridge_slave_0: entered promiscuous mode
[ 1006.803506][T11521] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1006.811158][T11521] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1006.818705][T11521] bridge_slave_1: entered allmulticast mode
[ 1006.827298][T11521] bridge_slave_1: entered promiscuous mode
[ 1007.010100][T11511] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1007.037652][T11511] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1007.044976][T11511] bridge_slave_0: entered allmulticast mode
[ 1007.078646][T11511] bridge_slave_0: entered promiscuous mode
[ 1007.187751][T11511] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1007.195315][T11511] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1007.216022][T11511] bridge_slave_1: entered allmulticast mode
[ 1007.231152][T11511] bridge_slave_1: entered promiscuous mode
[ 1007.326091][T11521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1007.377497][T11521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1007.487465][ T9586] Bluetooth: hci4: command tx timeout
[ 1007.493042][ T9586] Bluetooth: hci5: command tx timeout
[ 1007.832273][T11521] team0: Port device team_slave_0 added
[ 1007.881427][T11521] team0: Port device team_slave_1 added
[ 1007.931039][T11511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1008.038368][T11511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1008.330768][T11511] team0: Port device team_slave_0 added
[ 1008.426807][T11547] chnl_net:caif_netlink_parms(): no params data found
[ 1008.450381][T11511] team0: Port device team_slave_1 added
[ 1008.458156][T11521] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1008.465559][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1008.498900][T11521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1008.514530][T11521] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1008.521851][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1008.552892][T11521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1008.857572][ T9586] Bluetooth: hci3: command tx timeout
[ 1008.863711][T11511] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1008.894659][T11597] fuse: Bad value for 'fd'
[ 1008.897752][T11511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1008.978302][T11511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1009.103926][T11521] hsr_slave_0: entered promiscuous mode
[ 1009.114373][T11521] hsr_slave_1: entered promiscuous mode
[ 1009.136312][T11511] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1009.143969][T11511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1009.171493][T11511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1009.317337][ T5781] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1009.478065][T11511] hsr_slave_0: entered promiscuous mode
[ 1009.494614][T11511] hsr_slave_1: entered promiscuous mode
[ 1009.504329][T11511] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1009.514464][T11511] Cannot create hsr debugfs directory
[ 1009.531583][ T5781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1009.542927][ T5781] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1009.552471][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.569942][ T5781] usb 4-1: config 0 descriptor??
[ 1009.746083][T11547] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1009.762866][T11547] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1009.775394][T11547] bridge_slave_0: entered allmulticast mode
[ 1009.795785][T11547] bridge_slave_0: entered promiscuous mode
[ 1009.807724][ T5781] usbhid 4-1:0.0: can't add hid device: -71
[ 1009.813995][ T5781] usbhid: probe of 4-1:0.0 failed with error -71
[ 1009.828304][T11547] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1009.835644][T11547] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1009.858060][ T5781] usb 4-1: USB disconnect, device number 12
[ 1009.873365][T11547] bridge_slave_1: entered allmulticast mode
[ 1009.904917][T11547] bridge_slave_1: entered promiscuous mode
[ 1010.136390][T11547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1010.153036][T11547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1010.417341][ T5781] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1010.451176][T11547] team0: Port device team_slave_0 added
[ 1010.545806][T11547] team0: Port device team_slave_1 added
[ 1010.618190][ T5781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1010.629401][ T5781] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 1010.639574][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1010.660522][ T5781] usb 4-1: config 0 descriptor??
[ 1010.666585][T11547] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1010.680704][T11547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1010.716753][T11547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1010.805183][T11547] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1010.812934][T11547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1010.842005][T11547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1010.904197][T10887] hsr_slave_0: left promiscuous mode
[ 1010.912079][T10887] hsr_slave_1: left promiscuous mode
[ 1010.919239][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1010.927468][ T9586] Bluetooth: hci3: command tx timeout
[ 1010.937279][T10887] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1010.957832][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1010.965325][T10887] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1010.981207][T10887] bridge_slave_1: left allmulticast mode
[ 1010.987422][T10887] bridge_slave_1: left promiscuous mode
[ 1010.993757][T10887] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1011.006090][T10887] bridge_slave_0: left allmulticast mode
[ 1011.012227][T10887] bridge_slave_0: left promiscuous mode
[ 1011.018690][T10887] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1011.053342][T10887] veth1_macvtap: left promiscuous mode
[ 1011.059829][T10887] veth0_macvtap: left promiscuous mode
[ 1011.065533][T10887] veth1_vlan: left promiscuous mode
[ 1011.072981][T10887] veth0_vlan: left promiscuous mode
[ 1011.336359][T11600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1011.347841][T11600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1011.534666][ T5781] aiptek 4-1:0.0: Aiptek using 400 ms programming speed
[ 1011.583875][ T5781] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13
[ 1011.616427][    C0] ================================================================================
[ 1011.625816][    C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31
[ 1011.634478][    C0] index 19545 is out of range for type 'const int[34]'
[ 1011.641392][    C0] CPU: 0 PID: 5781 Comm: kworker/0:3 Not tainted syzkaller #0
[ 1011.648904][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1011.659018][    C0] Workqueue: usb_hub_wq hub_event
[ 1011.664145][    C0] Call Trace:
[ 1011.667464][    C0]  <IRQ>
[ 1011.670338][    C0]  dump_stack_lvl+0x18c/0x250
[ 1011.675060][    C0]  ? show_regs_print_info+0x20/0x20
[ 1011.680289][    C0]  ? load_image+0x420/0x420
[ 1011.684848][    C0]  ubsan_epilogue+0xa/0x30
[ 1011.689420][    C0]  __ubsan_handle_out_of_bounds+0xe3/0xf0
[ 1011.695201][    C0]  aiptek_irq+0x1eb8/0x2920
[ 1011.699771][    C0]  ? kcov_remote_start+0x8a/0x7e0
[ 1011.704879][    C0]  ? usb_anchor_suspend_wakeups+0x36/0x40
[ 1011.710647][    C0]  __usb_hcd_giveback_urb+0x35d/0x520
[ 1011.716061][    C0]  dummy_timer+0xa58/0x34e0
[ 1011.720638][    C0]  ? dummy_free_streams+0x520/0x520
[ 1011.725897][    C0]  ? dummy_free_streams+0x520/0x520
[ 1011.731122][    C0]  __hrtimer_run_queues+0x525/0xc10
[ 1011.736371][    C0]  ? hrtimer_interrupt+0x980/0x980
[ 1011.741509][    C0]  ? read_tsc+0x9/0x20
[ 1011.745617][    C0]  hrtimer_run_softirq+0x177/0x290
[ 1011.750785][    C0]  handle_softirqs+0x27d/0x820
[ 1011.755583][    C0]  ? trace_event_buffer_commit+0x258/0x7c0
[ 1011.761445][    C0]  ? __irq_exit_rcu+0xd3/0x190
[ 1011.766269][    C0]  ? do_softirq+0x1a0/0x1a0
[ 1011.770827][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 1011.776090][    C0]  __irq_exit_rcu+0xd3/0x190
[ 1011.780724][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1011.785269][    C0]  ? __probestub_vector_free_moved+0x10/0x10
[ 1011.791313][    C0]  irq_exit_rcu+0x9/0x20
[ 1011.795589][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1011.801271][    C0]  </IRQ>
[ 1011.804226][    C0]  <TASK>
[ 1011.807189][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1011.813223][    C0] RIP: 0010:unwind_next_frame+0x1c8a/0x2990
[ 1011.819147][    C0] Code: f5 0f 85 9e 00 00 00 48 8b 44 24 68 42 80 3c 38 00 74 08 48 89 df e8 a5 33 a4 00 4d 8b 75 38 49 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 8a 33 a4 00 49 8b 5d 08 4d 8d 7d 10 4c 89
[ 1011.838777][    C0] RSP: 0018:ffffc900047be598 EFLAGS: 00000a02
[ 1011.844881][    C0] RAX: 1ffff920008f7cce RBX: ffffc900047be6a0 RCX: 0000000000000002
[ 1011.852881][    C0] RDX: ffff888030a95a00 RSI: 0000000000000001 RDI: ffffc900047be670
[ 1011.860877][    C0] RBP: 0000000000000001 R08: ffff888030a95a00 R09: 0000000000000003
[ 1011.868877][    C0] R10: 0000000000000004 R11: 0000000000000002 R12: ffffc900047bec90
[ 1011.876875][    C0] R13: ffffc900047be668 R14: ffffc900047becc0 R15: dffffc0000000000
[ 1011.884925][    C0]  ? unwind_next_frame+0x1c5e/0x2990
[ 1011.890257][    C0]  ? sysfs_do_create_link_sd+0x83/0x110
[ 1011.895845][    C0]  ? sysfs_do_create_link_sd+0x83/0x110
[ 1011.901434][    C0]  ? stack_trace_save+0x100/0x100
[ 1011.906494][    C0]  arch_stack_walk+0x144/0x190
[ 1011.911288][    C0]  ? device_add_class_symlinks+0x133/0x240
[ 1011.917140][    C0]  stack_trace_save+0xaa/0x100
[ 1011.921949][    C0]  ? stack_trace_snprint+0xf0/0xf0
[ 1011.927136][    C0]  ? mark_lock+0x94/0x320
[ 1011.931510][    C0]  kasan_set_track+0x4e/0x70
[ 1011.936127][    C0]  ? kasan_set_track+0x4e/0x70
[ 1011.940918][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[ 1011.945972][    C0]  ? slab_post_alloc_hook+0x6a/0x4d0
[ 1011.951330][    C0]  ? kmem_cache_alloc+0x17e/0x2c0
[ 1011.956425][    C0]  ? __kernfs_new_node+0xe5/0x7f0
[ 1011.961504][    C0]  ? kernfs_new_node+0x14c/0x260
[ 1011.966489][    C0]  ? kernfs_create_link+0xa7/0x200
[ 1011.971640][    C0]  ? sysfs_do_create_link_sd+0x83/0x110
[ 1011.977276][    C0]  __kasan_slab_alloc+0x6c/0x80
[ 1011.982175][    C0]  slab_post_alloc_hook+0x6a/0x4d0
[ 1011.987336][    C0]  kmem_cache_alloc+0x17e/0x2c0
[ 1011.992224][    C0]  ? __kernfs_new_node+0xe5/0x7f0
[ 1011.997302][    C0]  __kernfs_new_node+0xe5/0x7f0
[ 1012.002191][    C0]  ? kernfs_new_node+0x260/0x260
[ 1012.007186][    C0]  ? sysfs_do_create_link_sd+0x75/0x110
[ 1012.012776][    C0]  kernfs_new_node+0x14c/0x260
[ 1012.017593][    C0]  kernfs_create_link+0xa7/0x200
[ 1012.022561][    C0]  sysfs_do_create_link_sd+0x83/0x110
[ 1012.027965][    C0]  device_add_class_symlinks+0x133/0x240
[ 1012.033637][    C0]  device_add+0x4f9/0xc40
[ 1012.038091][    C0]  cdev_device_add+0x1c6/0x380
[ 1012.042890][    C0]  mousedev_create+0x56a/0x690
[ 1012.047707][    C0]  mousedev_connect+0x26/0x3a0
[ 1012.052504][    C0]  input_register_device+0xcb0/0x1050
[ 1012.057916][    C0]  aiptek_probe+0x1534/0x1c50
[ 1012.062653][    C0]  ? usb_acecad_irq+0x590/0x590
[ 1012.067550][    C0]  usb_probe_interface+0x5c2/0xaf0
[ 1012.072718][    C0]  ? usb_register_driver+0x3c0/0x3c0
[ 1012.078053][    C0]  really_probe+0x247/0xae0
[ 1012.082590][    C0]  ? pm_runtime_barrier+0x14b/0x1c0
[ 1012.087843][    C0]  __driver_probe_device+0x1f5/0x390
[ 1012.093175][    C0]  driver_probe_device+0x4f/0x420
[ 1012.098241][    C0]  __device_attach_driver+0x2ca/0x510
[ 1012.103654][    C0]  bus_for_each_drv+0x252/0x2e0
[ 1012.108548][    C0]  ? coredump_store+0x90/0x90
[ 1012.113263][    C0]  ? bus_find_device+0x300/0x300
[ 1012.118247][    C0]  __device_attach+0x2c1/0x420
[ 1012.123049][    C0]  ? device_attach+0x20/0x20
[ 1012.127696][    C0]  ? do_raw_spin_unlock+0x121/0x230
[ 1012.132969][    C0]  bus_probe_device+0x180/0x260
[ 1012.137860][    C0]  device_add+0x87c/0xc40
[ 1012.142235][    C0]  usb_set_configuration+0x1ad0/0x2150
[ 1012.147757][    C0]  usb_generic_driver_probe+0x8d/0x150
[ 1012.153293][    C0]  usb_probe_device+0x12a/0x260
[ 1012.158189][    C0]  ? usb_register_device_driver+0x230/0x230
[ 1012.164120][    C0]  really_probe+0x247/0xae0
[ 1012.168653][    C0]  ? pm_runtime_barrier+0x14b/0x1c0
[ 1012.173896][    C0]  __driver_probe_device+0x1f5/0x390
[ 1012.179218][    C0]  driver_probe_device+0x4f/0x420
[ 1012.184296][    C0]  __device_attach_driver+0x2ca/0x510
[ 1012.189711][    C0]  bus_for_each_drv+0x252/0x2e0
[ 1012.194613][    C0]  ? coredump_store+0x90/0x90
[ 1012.199328][    C0]  ? bus_find_device+0x300/0x300
[ 1012.204340][    C0]  __device_attach+0x2c1/0x420
[ 1012.209165][    C0]  ? device_attach+0x20/0x20
[ 1012.213797][    C0]  ? __kmem_cache_free+0xba/0x1f0
[ 1012.218863][    C0]  ? do_raw_spin_unlock+0x121/0x230
[ 1012.224099][    C0]  bus_probe_device+0x180/0x260
[ 1012.228989][    C0]  device_add+0x87c/0xc40
[ 1012.233357][    C0]  usb_new_device+0x995/0x1550
[ 1012.238163][    C0]  ? lock_chain_count+0x20/0x20
[ 1012.243041][    C0]  ? usb_disconnect+0x8a0/0x8a0
[ 1012.247917][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1012.253170][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 1012.258406][    C0]  hub_event+0x29d5/0x4a80
[ 1012.262889][    C0]  ? hub_post_resume+0x120/0x120
[ 1012.267854][    C0]  ? read_lock_is_recursive+0x20/0x20
[ 1012.273261][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1012.278495][    C0]  ? process_scheduled_works+0x975/0x1600
[ 1012.284252][    C0]  ? process_scheduled_works+0x975/0x1600
[ 1012.290013][    C0]  process_scheduled_works+0xa60/0x1600
[ 1012.295616][    C0]  ? worker_attach_to_pool+0x370/0x370
[ 1012.301130][    C0]  ? assign_work+0x3cc/0x5d0
[ 1012.305754][    C0]  worker_thread+0xa5e/0xfe0
[ 1012.310401][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1012.315287][    C0]  ? __kthread_parkme+0x71/0x1c0
[ 1012.320300][    C0]  kthread+0x2fa/0x390
[ 1012.324396][    C0]  ? pr_cont_work+0x550/0x550
[ 1012.329108][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1012.333729][    C0]  ret_from_fork+0x48/0x80
[ 1012.338183][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1012.342813][    C0]  ret_from_fork_asm+0x11/0x20
[ 1012.347642][    C0]  </TASK>
[ 1012.350714][    C0] ================================================================================
[ 1012.360048][    C0] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 1012.367272][    C0] CPU: 0 PID: 5781 Comm: kworker/0:3 Not tainted syzkaller #0
[ 1012.374758][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1012.384860][    C0] Workqueue: usb_hub_wq hub_event
[ 1012.389934][    C0] Call Trace:
[ 1012.393252][    C0]  <IRQ>
[ 1012.396138][    C0]  dump_stack_lvl+0x18c/0x250
[ 1012.400849][    C0]  ? show_regs_print_info+0x20/0x20
[ 1012.406074][    C0]  ? load_image+0x420/0x420
[ 1012.410625][    C0]  panic+0x2ca/0x720
[ 1012.414571][    C0]  ? bpf_jit_dump+0xd0/0xd0
[ 1012.419122][    C0]  check_panic_on_warn+0x84/0xa0
[ 1012.424092][    C0]  __ubsan_handle_out_of_bounds+0xe3/0xf0
[ 1012.429851][    C0]  aiptek_irq+0x1eb8/0x2920
[ 1012.434391][    C0]  ? kcov_remote_start+0x8a/0x7e0
[ 1012.439447][    C0]  ? usb_anchor_suspend_wakeups+0x36/0x40
[ 1012.445200][    C0]  __usb_hcd_giveback_urb+0x35d/0x520
[ 1012.450605][    C0]  dummy_timer+0xa58/0x34e0
[ 1012.455186][    C0]  ? dummy_free_streams+0x520/0x520
[ 1012.460413][    C0]  ? dummy_free_streams+0x520/0x520
[ 1012.465646][    C0]  __hrtimer_run_queues+0x525/0xc10
[ 1012.470893][    C0]  ? hrtimer_interrupt+0x980/0x980
[ 1012.476050][    C0]  ? read_tsc+0x9/0x20
[ 1012.480165][    C0]  hrtimer_run_softirq+0x177/0x290
[ 1012.485308][    C0]  handle_softirqs+0x27d/0x820
[ 1012.490106][    C0]  ? trace_event_buffer_commit+0x258/0x7c0
[ 1012.495961][    C0]  ? __irq_exit_rcu+0xd3/0x190
[ 1012.500768][    C0]  ? do_softirq+0x1a0/0x1a0
[ 1012.505304][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 1012.510544][    C0]  __irq_exit_rcu+0xd3/0x190
[ 1012.515176][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1012.519705][    C0]  ? __probestub_vector_free_moved+0x10/0x10
[ 1012.525721][    C0]  irq_exit_rcu+0x9/0x20
[ 1012.529994][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1012.535679][    C0]  </IRQ>
[ 1012.538650][    C0]  <TASK>
[ 1012.541628][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1012.547646][    C0] RIP: 0010:unwind_next_frame+0x1c8a/0x2990
[ 1012.553593][    C0] Code: f5 0f 85 9e 00 00 00 48 8b 44 24 68 42 80 3c 38 00 74 08 48 89 df e8 a5 33 a4 00 4d 8b 75 38 49 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 8a 33 a4 00 49 8b 5d 08 4d 8d 7d 10 4c 89
[ 1012.573325][    C0] RSP: 0018:ffffc900047be598 EFLAGS: 00000a02
[ 1012.579431][    C0] RAX: 1ffff920008f7cce RBX: ffffc900047be6a0 RCX: 0000000000000002
[ 1012.587433][    C0] RDX: ffff888030a95a00 RSI: 0000000000000001 RDI: ffffc900047be670
[ 1012.595435][    C0] RBP: 0000000000000001 R08: ffff888030a95a00 R09: 0000000000000003
[ 1012.603431][    C0] R10: 0000000000000004 R11: 0000000000000002 R12: ffffc900047bec90
[ 1012.611439][    C0] R13: ffffc900047be668 R14: ffffc900047becc0 R15: dffffc0000000000
[ 1012.619460][    C0]  ? unwind_next_frame+0x1c5e/0x2990
[ 1012.624786][    C0]  ? sysfs_do_create_link_sd+0x83/0x110
[ 1012.630362][    C0]  ? sysfs_do_create_link_sd+0x83/0x110
[ 1012.635932][    C0]  ? stack_trace_save+0x100/0x100
[ 1012.641001][    C0]  arch_stack_walk+0x144/0x190
[ 1012.645795][    C0]  ? device_add_class_symlinks+0x133/0x240
[ 1012.651637][    C0]  stack_trace_save+0xaa/0x100
[ 1012.656453][    C0]  ? stack_trace_snprint+0xf0/0xf0
[ 1012.661599][    C0]  ? mark_lock+0x94/0x320
[ 1012.665997][    C0]  kasan_set_track+0x4e/0x70
[ 1012.670615][    C0]  ? kasan_set_track+0x4e/0x70
[ 1012.675403][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[ 1012.680450][    C0]  ? slab_post_alloc_hook+0x6a/0x4d0
[ 1012.685772][    C0]  ? kmem_cache_alloc+0x17e/0x2c0
[ 1012.690835][    C0]  ? __kernfs_new_node+0xe5/0x7f0
[ 1012.695896][    C0]  ? kernfs_new_node+0x14c/0x260
[ 1012.700869][    C0]  ? kernfs_create_link+0xa7/0x200
[ 1012.706008][    C0]  ? sysfs_do_create_link_sd+0x83/0x110
[ 1012.711614][    C0]  __kasan_slab_alloc+0x6c/0x80
[ 1012.716492][    C0]  slab_post_alloc_hook+0x6a/0x4d0
[ 1012.721643][    C0]  kmem_cache_alloc+0x17e/0x2c0
[ 1012.726570][    C0]  ? __kernfs_new_node+0xe5/0x7f0
[ 1012.731636][    C0]  __kernfs_new_node+0xe5/0x7f0
[ 1012.736523][    C0]  ? kernfs_new_node+0x260/0x260
[ 1012.741507][    C0]  ? sysfs_do_create_link_sd+0x75/0x110
[ 1012.747098][    C0]  kernfs_new_node+0x14c/0x260
[ 1012.751917][    C0]  kernfs_create_link+0xa7/0x200
[ 1012.756985][    C0]  sysfs_do_create_link_sd+0x83/0x110
[ 1012.762402][    C0]  device_add_class_symlinks+0x133/0x240
[ 1012.768082][    C0]  device_add+0x4f9/0xc40
[ 1012.772473][    C0]  cdev_device_add+0x1c6/0x380
[ 1012.777275][    C0]  mousedev_create+0x56a/0x690
[ 1012.782080][    C0]  mousedev_connect+0x26/0x3a0
[ 1012.786876][    C0]  input_register_device+0xcb0/0x1050
[ 1012.792292][    C0]  aiptek_probe+0x1534/0x1c50
[ 1012.797034][    C0]  ? usb_acecad_irq+0x590/0x590
[ 1012.801955][    C0]  usb_probe_interface+0x5c2/0xaf0
[ 1012.807124][    C0]  ? usb_register_driver+0x3c0/0x3c0
[ 1012.812460][    C0]  really_probe+0x247/0xae0
[ 1012.816996][    C0]  ? pm_runtime_barrier+0x14b/0x1c0
[ 1012.822241][    C0]  __driver_probe_device+0x1f5/0x390
[ 1012.827578][    C0]  driver_probe_device+0x4f/0x420
[ 1012.832734][    C0]  __device_attach_driver+0x2ca/0x510
[ 1012.838147][    C0]  bus_for_each_drv+0x252/0x2e0
[ 1012.843060][    C0]  ? coredump_store+0x90/0x90
[ 1012.847807][    C0]  ? bus_find_device+0x300/0x300
[ 1012.852783][    C0]  __device_attach+0x2c1/0x420
[ 1012.857594][    C0]  ? device_attach+0x20/0x20
[ 1012.862237][    C0]  ? do_raw_spin_unlock+0x121/0x230
[ 1012.867478][    C0]  bus_probe_device+0x180/0x260
[ 1012.872366][    C0]  device_add+0x87c/0xc40
[ 1012.876744][    C0]  usb_set_configuration+0x1ad0/0x2150
[ 1012.882255][    C0]  usb_generic_driver_probe+0x8d/0x150
[ 1012.887751][    C0]  usb_probe_device+0x12a/0x260
[ 1012.892637][    C0]  ? usb_register_device_driver+0x230/0x230
[ 1012.898566][    C0]  really_probe+0x247/0xae0
[ 1012.903127][    C0]  ? pm_runtime_barrier+0x14b/0x1c0
[ 1012.908363][    C0]  __driver_probe_device+0x1f5/0x390
[ 1012.913723][    C0]  driver_probe_device+0x4f/0x420
[ 1012.918811][    C0]  __device_attach_driver+0x2ca/0x510
[ 1012.924238][    C0]  bus_for_each_drv+0x252/0x2e0
[ 1012.929176][    C0]  ? coredump_store+0x90/0x90
[ 1012.933901][    C0]  ? bus_find_device+0x300/0x300
[ 1012.938884][    C0]  __device_attach+0x2c1/0x420
[ 1012.943720][    C0]  ? device_attach+0x20/0x20
[ 1012.948347][    C0]  ? __kmem_cache_free+0xba/0x1f0
[ 1012.953409][    C0]  ? do_raw_spin_unlock+0x121/0x230
[ 1012.958650][    C0]  bus_probe_device+0x180/0x260
[ 1012.963558][    C0]  device_add+0x87c/0xc40
[ 1012.967927][    C0]  usb_new_device+0x995/0x1550
[ 1012.972725][    C0]  ? lock_chain_count+0x20/0x20
[ 1012.977632][    C0]  ? usb_disconnect+0x8a0/0x8a0
[ 1012.982731][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1012.987993][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 1012.993240][    C0]  hub_event+0x29d5/0x4a80
[ 1012.997737][    C0]  ? hub_post_resume+0x120/0x120
[ 1013.002709][    C0]  ? read_lock_is_recursive+0x20/0x20
[ 1013.008127][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1013.013369][    C0]  ? process_scheduled_works+0x975/0x1600
[ 1013.019145][    C0]  ? process_scheduled_works+0x975/0x1600
[ 1013.024900][    C0]  process_scheduled_works+0xa60/0x1600
[ 1013.030504][    C0]  ? worker_attach_to_pool+0x370/0x370
[ 1013.036002][    C0]  ? assign_work+0x3cc/0x5d0
[ 1013.040633][    C0]  worker_thread+0xa5e/0xfe0
[ 1013.045310][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1013.050224][    C0]  ? __kthread_parkme+0x71/0x1c0
[ 1013.055196][    C0]  kthread+0x2fa/0x390
[ 1013.059300][    C0]  ? pr_cont_work+0x550/0x550
[ 1013.064007][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1013.068632][    C0]  ret_from_fork+0x48/0x80
[ 1013.073087][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1013.077712][    C0]  ret_from_fork_asm+0x11/0x20
[ 1013.082533][    C0]  </TASK>
[ 1013.086128][    C0] Kernel Offset: disabled
[ 1013.090483][    C0] Rebooting in 86400 seconds..