last executing test programs:

13m28.546785953s ago: executing program 0 (id=288):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000004300)=""/102400, 0x19000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r1, &(0x7f0000000000)="fa", 0xfffffdef)

13m27.089743283s ago: executing program 0 (id=291):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c088d2cf26591b8f51aa3c11336cd0b5bcf18843d2932bc1fe1002e09867cd43c03c9774b488"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001340)=<r2=>0x0)
move_pages(r2, 0x0, &(0x7f0000001380), &(0x7f00000013c0)=[0x6], &(0x7f0000001400)=[0x0, 0x0], 0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000700)={0x5, 0x0, [{0xd8, 0x4, 0x0, 0x0, @adapter={0x9, 0x4, 0x6cf, 0x1ff, 0x9}}, {0x81, 0x5, 0x0, 0x0, @msi={0x7ff, 0x2, 0xf36, 0x20000}}, {0x8, 0x5, 0x1, 0x0, @irqchip={0x3, 0x200}}, {0x7fffffff, 0x4, 0x1, 0x0, @adapter={0x4, 0x7, 0x7ff, 0x3f9a, 0x6}}, {0x7, 0x3, 0x0, 0x0, @adapter={0xfffffffffffffffd, 0x9, 0x7, 0x7fffffff, 0x2}}]})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000005c0)={{0xa, 0x1, 0x8a9c, 0x3, 'syz0\x00', 0x3}, 0x3, 0x2, 0x3, r2, 0x1, 0x8, 'syz0\x00', &(0x7f0000000240)=['/dev/sequencer\x00'], 0xf})
r7 = socket$rds(0x15, 0x5, 0x0)
r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r9, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1})
keyctl$search(0xa, r8, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff)
bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)

13m26.062416144s ago: executing program 0 (id=294):
r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
socket(0x15, 0x5, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
listen(r1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
r5 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0x200cc75, 0x800, 0x200003, 0x26e}, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_setup(0x5f03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x8000002, 0x2f1}, &(0x7f00000001c0)=<r8=>0x0, &(0x7f0000000440))
socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000200)='syzkaller\x00'}, 0x94)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10)
mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000180)={'netdevsim0\x00', {0x2, 0x0, @private}})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYRESHEX=r10], 0x3c}, 0x1, 0x0, 0x0, 0x24044815}, 0x0)
r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r7, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, r4, 0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x200, 0x0, {0x0, r13}})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x6, 0x4}, {0x6, 0x5}}}}, 0x11)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="d0b030eef44b905e84ddfac9a6ecb72bff9bb1b9b9de3cb727bac1ed4e70246aabb4ddb77d48d87b684aa6c412a98fe23479270605c54dcc8dda8e4fe3fa318d24d889e1a2d743023a6dd2823aeb0aedece18c0af09c57ae91cf2e3c1518b660fccf248a5b51464ae13561a9eae2e996933033e0b5e160bd00000000000000"], 0x24}, 0x1, 0x8000000}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000005c0)={{0xc, 0x4, 0x80000000, 0x3}, 0x0, [0x3ff, 0x0, 0x3, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x403, 0x5, 0x1, 0xfffffffffffffffc, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x6, 0x100000000, 0x1000000000000, 0x0, 0x2, 0x0, 0x40000000000000, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x8000, 0x4, 0x7, 0x4, 0x3, 0x4, 0x2, 0x2, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x10000, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0xacb1, 0x100000001, 0xffeffdfffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x2, 0x2, 0x7b24, 0x0, 0x0, 0xb, 0xfffffffffffffffc, 0x0, 0x9, 0x1000001, 0x0, 0x4, 0x0, 0x4, 0x8000000, 0x9, 0x0, 0xfffffffffffffffc, 0x2, 0x20001, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfffffffa, 0x8000000000000, 0x0, 0xfffffffd, 0x8000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6e69, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x10000003, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0xfff, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x24, 0x0, 0x6, 0x10]})
ioctl$VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f00000008c0)={0x5, @vbi={0x9, 0x7, 0x0, 0x30364d54, [0x5, 0x3], [0x1, 0x9], 0x108}})

13m24.242819491s ago: executing program 1 (id=297):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000280), 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4)
syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)
bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24)
socket$nl_xfrm(0x10, 0x3, 0x6)

13m24.013505085s ago: executing program 3 (id=298):
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x38040)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$vsock(0xffffff9c, 0x0, 0x100080, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)

13m23.207914381s ago: executing program 3 (id=300):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff6}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000205000100070000000900020073797a31000000000c00078008001240000000090500050002000040050004000000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}, 0x1, 0x0, 0x0, 0x48840}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r5, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace(0x10, r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406010200000000000000000200000205000100070000003d20ac8d9e4e18e15711aea64e7f9ee6de8868aae8401e04d544f916b03ab6e68da15ef456"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
connect$802154_dgram(r5, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14)
r8 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=<r9=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r11 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r11, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0)
ioctl$UFFDIO_ZEROPAGE(r11, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}})
connect$netrom(r10, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
io_uring_enter(r8, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)

13m23.189554962s ago: executing program 0 (id=301):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x90132adf0ecb33e3}]}, 0x38}}, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)

13m22.250099831s ago: executing program 2 (id=302):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c088d2cf26591b8f51aa3c11336cd0b5bcf18843d2932bc1fe1002e09867cd43c03c9774b488"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001340)=<r2=>0x0)
move_pages(r2, 0x0, &(0x7f0000001380), &(0x7f00000013c0)=[0x6], &(0x7f0000001400)=[0x0, 0x0], 0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000700)={0x5, 0x0, [{0xd8, 0x4, 0x0, 0x0, @adapter={0x9, 0x4, 0x6cf, 0x1ff, 0x9}}, {0x81, 0x5, 0x0, 0x0, @msi={0x7ff, 0x2, 0xf36, 0x20000}}, {0x8, 0x5, 0x1, 0x0, @irqchip={0x3, 0x200}}, {0x7fffffff, 0x4, 0x1, 0x0, @adapter={0x4, 0x7, 0x7ff, 0x3f9a, 0x6}}, {0x7, 0x3, 0x0, 0x0, @adapter={0xfffffffffffffffd, 0x9, 0x7, 0x7fffffff, 0x2}}]})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000005c0)={{0xa, 0x1, 0x8a9c, 0x3, 'syz0\x00', 0x3}, 0x3, 0x2, 0x3, r2, 0x1, 0x8, 'syz0\x00', &(0x7f0000000240)=['/dev/sequencer\x00'], 0xf})
r7 = socket$rds(0x15, 0x5, 0x0)
r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r9, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1})
keyctl$search(0xa, r8, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff)
bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)

13m22.197848592s ago: executing program 1 (id=303):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

13m22.197278682s ago: executing program 3 (id=304):
syz_open_procfs(0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x300, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, r4})

13m22.196516241s ago: executing program 0 (id=305):
r0 = socket(0x25, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x401}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r4, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write(r5, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc)
socket(0x23, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000800)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x4, 0x101, 0xc3a5, 0x9, 0x1ff, 0x4, 0x2, 0xfffffff6, 0x7fb, 0x1, 0xc99d, 0x2, 0x9, 0x8d, 0x0, 0x2, 0xa98, 0x8, 0x6, 0x10000040, 0x3, 0xfd}})
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

13m21.3018074s ago: executing program 2 (id=306):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000b40)=""/263, 0x107, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0000ea0300", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49da, 0xffff, 0x0, 0xc003, 0x0, "fa3d76170000001b"})
write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e)

13m21.089547724s ago: executing program 1 (id=307):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000022c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58)
close(0x3)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x8, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xfa9, @mcast2, 0x9}], 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0xf)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x7ff)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000380)={0xf0f004, 0x2})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
fcntl$addseals(r4, 0x409, 0x9)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="3190ce2062828b8844c9859299e9cb1ee0ff2ddcbab529268a8832a5e049eb0ec811f16c6cac86b54096f6f8ebcee3aac3b1b5bfffd7eed06e021d72a7f5954021ef52cf160cf48a2ad371274010e93569c4ceda498177b3cfb700e69e33409185c0074c0013eb7a886b072e1dbeb886"], 0x50)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r7, 0x0, 0x0)

13m19.845233149s ago: executing program 2 (id=308):
openat$ttyprintk(0xffffff9c, &(0x7f0000000380), 0x20c00, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, 0x0)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x1fffffffffffffed, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff6000/0x4000)=nil)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={<r3=>0x0, @dev, @local}, &(0x7f0000000340)=0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000540)={'syztnl1\x00', r3, 0x7, 0x7, 0x10000, 0x317, {{0x1c, 0x4, 0x3, 0x8, 0x70, 0x66, 0x0, 0x8, 0x4, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0xd, "d14c095cfa9bbde56915b8"}]}, @timestamp_addr={0x44, 0x1c, 0xc9, 0x1, 0x8, [{@multicast2, 0x9}, {@broadcast, 0x6}, {@remote, 0x9}]}, @rr={0x7, 0x17, 0xcb, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @multicast1]}, @lsrr={0x83, 0xb, 0x54, [@local, @empty]}, @end, @generic={0x4, 0x9, "af9fe075c2ea28"}]}}}}})
socket$inet_udplite(0x2, 0x2, 0x88)
mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0)
r4 = getpid()
syz_open_procfs(r4, &(0x7f0000000080)='stat\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

13m19.606827163s ago: executing program 1 (id=309):
r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
socket(0x15, 0x5, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
listen(r1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0x200cc75, 0x800, 0x200003, 0x26e}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_setup(0x5f03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x8000002, 0x2f1}, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000440))
socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000200)='syzkaller\x00'}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000180)={'netdevsim0\x00', {0x2, 0x0, @private}})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYRESHEX=r8], 0x3c}, 0x1, 0x0, 0x0, 0x24044815}, 0x0)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x200, 0x0, {0x0, r11}})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x6, 0x4}, {0x6, 0x5}}}}, 0x11)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="d0b030eef44b905e84ddfac9a6ecb72bff9bb1b9b9de3cb727bac1ed4e70246aabb4ddb77d48d87b684aa6c412a98fe23479270605c54dcc8dda8e4fe3fa318d24d889e1a2d743023a6dd2823aeb0aedece18c0af09c57ae91cf2e3c1518b660fccf248a5b51464ae13561a9eae2e996933033e0b5e160bd00000000000000"], 0x24}, 0x1, 0x8000000}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000005c0)={{0xc, 0x4, 0x80000000, 0x3}, 0x0, [0x3ff, 0x0, 0x3, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x403, 0x5, 0x1, 0xfffffffffffffffc, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x6, 0x100000000, 0x1000000000000, 0x0, 0x2, 0x0, 0x40000000000000, 0x0, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x8000, 0x4, 0x7, 0x4, 0x3, 0x4, 0x2, 0x2, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x10000, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0xacb1, 0x100000001, 0xffeffdfffffffffe, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x2, 0x2, 0x7b24, 0x0, 0x0, 0xb, 0xfffffffffffffffc, 0x0, 0x9, 0x1000001, 0x0, 0x4, 0x0, 0x4, 0x8000000, 0x9, 0x0, 0xfffffffffffffffc, 0x2, 0x20001, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfffffffa, 0x8000000000000, 0x0, 0xfffffffd, 0x8000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6e69, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x10000003, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0xfff, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x24, 0x0, 0x6, 0x10]})
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000008c0)={0x5, @vbi={0x9, 0x7, 0x0, 0x30364d54, [0x5, 0x3], [0x1, 0x9], 0x108}})

13m18.512862636s ago: executing program 2 (id=310):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000004300)=""/102400, 0x19000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r1, &(0x7f0000000000)="fa", 0xfffffdef)

13m18.465791966s ago: executing program 3 (id=311):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000280), 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4)
syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)
bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24)
socket$nl_xfrm(0x10, 0x3, 0x6)

13m18.187285382s ago: executing program 0 (id=312):
r0 = socket(0x25, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x401}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

13m17.611244414s ago: executing program 2 (id=313):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff6}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000205000100070000000900020073797a31000000000c00078008001240000000090500050002000040050004000000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}, 0x1, 0x0, 0x0, 0x48840}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r5, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setsig(0x4203, r6, 0x1000, &(0x7f00000002c0)={0x400002d, 0xd5, 0xc08})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406010200000000000000000200000205000100070000003d20ac8d9e4e18e15711aea64e7f9ee6de8868aae8401e04d544f916b03ab6e68da15ef456"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
connect$802154_dgram(r5, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14)
r8 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=<r9=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r11 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r11, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000c57000), 0x0)
ioctl$UFFDIO_ZEROPAGE(r11, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}})
connect$netrom(r10, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
io_uring_enter(r8, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)

13m17.381050608s ago: executing program 1 (id=314):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4a176436b04edadcc2251d87dc01143f4b980c088d2cf26591b8f51aa3c11336cd0b5bcf18843d2932bc1fe1002e09867cd43c03c9774b488"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001340)=<r2=>0x0)
move_pages(r2, 0x0, &(0x7f0000001380), &(0x7f00000013c0)=[0x6], &(0x7f0000001400)=[0x0, 0x0], 0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000700)={0x5, 0x0, [{0xd8, 0x4, 0x0, 0x0, @adapter={0x9, 0x4, 0x6cf, 0x1ff, 0x9}}, {0x81, 0x5, 0x0, 0x0, @msi={0x7ff, 0x2, 0xf36, 0x20000}}, {0x8, 0x5, 0x1, 0x0, @irqchip={0x3, 0x200}}, {0x7fffffff, 0x4, 0x1, 0x0, @adapter={0x4, 0x7, 0x7ff, 0x3f9a, 0x6}}, {0x7, 0x3, 0x0, 0x0, @adapter={0xfffffffffffffffd, 0x9, 0x7, 0x7fffffff, 0x2}}]})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000005c0)={{0xa, 0x1, 0x8a9c, 0x3, 'syz0\x00', 0x3}, 0x3, 0x2, 0x3, r2, 0x1, 0x8, 'syz0\x00', &(0x7f0000000240)=['/dev/sequencer\x00'], 0xf})
r7 = socket$rds(0x15, 0x5, 0x0)
r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r9, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1})
keyctl$search(0xa, r8, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff)
bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)

13m17.239979971s ago: executing program 3 (id=315):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

13m15.937698717s ago: executing program 3 (id=316):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000005c0)={{0x3000, 0x4, 0x9, 0x7, 0xe, 0x40, 0x9, 0x80, 0x0, 0x4, 0xa8, 0x9}, {0x8080000, 0x4, 0x4, 0xeb, 0xed, 0x1, 0x1, 0x8, 0x2c, 0x5, 0x4, 0x8}, {0x1, 0x2, 0x4, 0xb, 0x7, 0x40, 0x1, 0x0, 0x9, 0x4, 0xc, 0xc1}, {0x100000, 0x2000, 0x1, 0x9, 0xb5, 0x8, 0x4, 0x6, 0xa6, 0x8, 0x8, 0xb}, {0x10000, 0xffff1000, 0xb, 0xc, 0xd0, 0xc, 0x2, 0xc, 0x84, 0x6, 0x10, 0x2b}, {0x0, 0x8000000, 0xd, 0x81, 0x6, 0xfb, 0x7, 0x5, 0x2, 0x67}, {0x8000000, 0x1000, 0x3, 0x8, 0x5, 0x43, 0x23, 0x0, 0xd, 0x8, 0x38}, {0xeeee8000, 0xeeee8000, 0x4, 0xc, 0x4, 0xb2, 0xbc, 0x80, 0x4, 0x9, 0x6, 0xb}, {0x102001, 0xa1b}, {0x6000, 0x7}, 0x0, 0x0, 0xeeee8000, 0x80, 0xc, 0x4000, 0x6000, [0x9, 0x81, 0x8, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13m15.930560477s ago: executing program 1 (id=317):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000022c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58)
close(0x3)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x8, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xfa9, @mcast2, 0x9}], 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0xf)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x7ff)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000380)={0xf0f004, 0x2})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
fcntl$addseals(r4, 0x409, 0x9)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="3190ce2062828b8844c9859299e9cb1ee0ff2ddcbab529268a8832a5e049eb0ec811f16c6cac86b54096f6f8ebcee3aac3b1b5bfffd7eed06e021d72a7f5954021ef52cf160cf48a2ad371274010e93569c4ceda498177b3cfb700e69e33409185c0074c0013eb7a886b072e1dbeb886"], 0x50)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r8, 0x0, 0x0)

13m15.826736669s ago: executing program 2 (id=318):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x90132adf0ecb33e3}]}, 0x38}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000140)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
ioprio_get$uid(0x3, 0x0)
ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0)
write$bt_hci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0128200702ffffffffffff1089a2ebc30b2850b4ae8c1ede6c3095c50167de2a395e7a8683366a2f68d49841c935bea4c878dd02aeb34678317dec7adb92a1952646cc639c0fa29be22c164682bed021c5fb4b44ef40c71028e98a585867287bb14d2c98adabceca7fc4aa39b273fb"], 0xb)
r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000100)=0x1)
syz_open_dev$tty1(0xc, 0x4, 0x2)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bind$packet(0xffffffffffffffff, 0x0, 0x0)

12m33.758315995s ago: executing program 32 (id=312):
r0 = socket(0x25, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x401}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

12m33.692844846s ago: executing program 33 (id=317):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000022c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58)
close(0x3)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x8, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xfa9, @mcast2, 0x9}], 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0xf)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x7ff)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000380)={0xf0f004, 0x2})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
fcntl$addseals(r4, 0x409, 0x9)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="3190ce2062828b8844c9859299e9cb1ee0ff2ddcbab529268a8832a5e049eb0ec811f16c6cac86b54096f6f8ebcee3aac3b1b5bfffd7eed06e021d72a7f5954021ef52cf160cf48a2ad371274010e93569c4ceda498177b3cfb700e69e33409185c0074c0013eb7a886b072e1dbeb886"], 0x50)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r8, 0x0, 0x0)

12m33.610062418s ago: executing program 34 (id=318):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x90132adf0ecb33e3}]}, 0x38}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000140)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
ioprio_get$uid(0x3, 0x0)
ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0)
write$bt_hci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0128200702ffffffffffff1089a2ebc30b2850b4ae8c1ede6c3095c50167de2a395e7a8683366a2f68d49841c935bea4c878dd02aeb34678317dec7adb92a1952646cc639c0fa29be22c164682bed021c5fb4b44ef40c71028e98a585867287bb14d2c98adabceca7fc4aa39b273fb"], 0xb)
r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000100)=0x1)
syz_open_dev$tty1(0xc, 0x4, 0x2)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bind$packet(0xffffffffffffffff, 0x0, 0x0)

12m33.48693225s ago: executing program 35 (id=316):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000005c0)={{0x3000, 0x4, 0x9, 0x7, 0xe, 0x40, 0x9, 0x80, 0x0, 0x4, 0xa8, 0x9}, {0x8080000, 0x4, 0x4, 0xeb, 0xed, 0x1, 0x1, 0x8, 0x2c, 0x5, 0x4, 0x8}, {0x1, 0x2, 0x4, 0xb, 0x7, 0x40, 0x1, 0x0, 0x9, 0x4, 0xc, 0xc1}, {0x100000, 0x2000, 0x1, 0x9, 0xb5, 0x8, 0x4, 0x6, 0xa6, 0x8, 0x8, 0xb}, {0x10000, 0xffff1000, 0xb, 0xc, 0xd0, 0xc, 0x2, 0xc, 0x84, 0x6, 0x10, 0x2b}, {0x0, 0x8000000, 0xd, 0x81, 0x6, 0xfb, 0x7, 0x5, 0x2, 0x67}, {0x8000000, 0x1000, 0x3, 0x8, 0x5, 0x43, 0x23, 0x0, 0xd, 0x8, 0x38}, {0xeeee8000, 0xeeee8000, 0x4, 0xc, 0x4, 0xb2, 0xbc, 0x80, 0x4, 0x9, 0x6, 0xb}, {0x102001, 0xa1b}, {0x6000, 0x7}, 0x0, 0x0, 0xeeee8000, 0x80, 0xc, 0x4000, 0x6000, [0x9, 0x81, 0x8, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8.828865347s ago: executing program 5 (id=1993):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080))

8.365764117s ago: executing program 5 (id=1994):
openat$ttyprintk(0xffffff9c, 0x0, 0x20c00, 0x0)
ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0)
shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff6000/0x4000)=nil)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @local}, &(0x7f0000000340)=0xc)
socket$inet_udplite(0x2, 0x2, 0x88)

7.610545601s ago: executing program 5 (id=1995):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x15)
writev(r3, &(0x7f0000000280), 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe3e64c6be2492c0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)
bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24)
move_mount(0xffffffffffffffff, &(0x7f0000002500)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x154)
socket$nl_xfrm(0x10, 0x3, 0x6)

7.028274693s ago: executing program 7 (id=1999):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80a02, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)

6.925653175s ago: executing program 7 (id=2000):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x4, 0x5, 0x10007ff}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0)
io_setup(0x226, &(0x7f0000000000)=<r4=>0x0)
io_setup(0x4fd, &(0x7f0000000040))
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f0000000140)={0x0, 0x5, 0x0, 0xc})
io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x2, r3, &(0x7f0000000a00)="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", 0x200, 0x200}])
syz_usbip_server_init(0x6)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
socket$netlink(0x10, 0x3, 0x15)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)

5.09022168s ago: executing program 5 (id=2005):
socket$pppoe(0x18, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000002000)=ANY=[@ANYBLOB="0008edffba4f5bbabbbb2e9e217d437d8df2"])
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000080)={{}, "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"})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
r3 = socket$inet6(0xa, 0x3, 0x6)
write(r1, 0x0, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x800008d, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="0a00000004000000cc0000000c00000000000000", @ANYRES32, @ANYBLOB="0100f0d27d9243216a5038cce206c92d140000238461", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14)

4.549848851s ago: executing program 4 (id=2007):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062)

4.464051263s ago: executing program 4 (id=2008):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80a02, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)

4.329754576s ago: executing program 4 (id=2009):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000002b000000ac1e01010000000000000000000000000000000000000000000000000000000002000000000000000400000000000000000000100000000000000000000000000000000000000000400000000000000000000002020000000000200000000000070000000000000000000000000000000c00000000000000e50a000004000000feffffff0a0002006100000014000e0000000000000000000000ffff000000"], 0x108}, 0x1, 0x0, 0x0, 0x4000009}, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)={0x1, 0x0, [{0x5000, 0x1002, &(0x7f0000002740)=""/4098}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10)

4.193866199s ago: executing program 7 (id=2010):
gettid()
timer_create(0x7, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000380)="f6f4", 0x0, 0x5e4, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x4c)

3.56178637s ago: executing program 6 (id=2012):
openat$ttyprintk(0xffffff9c, 0x0, 0x20c00, 0x0)
ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0)
shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff6000/0x4000)=nil)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @local}, &(0x7f0000000340)=0xc)
socket$inet_udplite(0x2, 0x2, 0x88)

2.946145783s ago: executing program 7 (id=2013):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x15)
writev(r3, &(0x7f0000000280), 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe3e64c6be2492c0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)
bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24)
move_mount(0xffffffffffffffff, &(0x7f0000002500)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x154)
socket$nl_xfrm(0x10, 0x3, 0x6)

2.922821463s ago: executing program 4 (id=2014):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080))

2.867331404s ago: executing program 6 (id=2015):
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x101, 0x0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0xfffffffffffffe4b, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xa}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2000005a}, 0xc000)

2.685829228s ago: executing program 4 (id=2016):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062)

2.597792239s ago: executing program 6 (id=2017):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80a02, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)

2.539786441s ago: executing program 4 (id=2018):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x4, 0x5, 0x10007ff}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0)
io_setup(0x226, &(0x7f0000000000)=<r4=>0x0)
io_setup(0x4fd, &(0x7f0000000040))
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000)
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x40890)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f0000000140)={0x0, 0x5, 0x0, 0xc})
io_submit(r4, 0x1, &(0x7f0000000240)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x2, r3, &(0x7f0000000a00)="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", 0x200, 0x200}])
syz_usbip_server_init(0x6)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
socket$netlink(0x10, 0x3, 0x15)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)

2.236418386s ago: executing program 6 (id=2019):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x5e00, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x4, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000000000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000001000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000a0010000100"/120], 0xc4}}, 0x4c050)
syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)

1.5279341s ago: executing program 6 (id=2020):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80a02, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
readv(r5, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1)

1.297782975s ago: executing program 6 (id=2021):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000600)=<r5=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x2083, 0x1, {0x1}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2020, 0x0)
ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1)
r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_KVMCLOCK_CTRL(r8, 0xaead)

1.257037656s ago: executing program 5 (id=2022):
r0 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000380)="f6f4", 0x0, 0x5e4, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x4c)

1.07377468s ago: executing program 7 (id=2023):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
bpf$PROG_LOAD(0x4, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x21, 0x2, 0xa)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
setrlimit(0x6, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x20}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f0000000980), 0xe)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), 0x4)
sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x5}}, 0x10, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x800}, 0x4000840)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/zoneinfo\x00', 0x0, 0x0)
ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000040)={'gretap0\x00', 0x200})
lseek(r5, 0xfffffffffffffff7, 0x2)
socket(0x1d, 0x2, 0x6)
syz_open_dev$tty1(0xc, 0x4, 0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)

85.395909ms ago: executing program 5 (id=2024):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x482, &(0x7f0000000800)=ANY=[], 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x2, 0x5, 0x3831354f, 0x0, 0x5, [{0xfffffff2, 0x22}, {0xcbd, 0x10010000}, {0x10, 0x6}, {0x40000001, 0x4}, {0x9, 0xd1}, {0x2, 0x4}, {0x0, 0x9}, {0x1, 0x8}], 0x6, 0x8, 0x3, 0x2}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x4, 0x64f, 0x44, @mcast1, @empty, 0x8, 0x10, 0x81, 0xffffffff}})
r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2)

0s ago: executing program 7 (id=2025):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}})
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000180)={0x1, @pix_mp={0xfffffff8, 0x5, 0x34325241, 0x9, 0x4, [{0x9, 0x3}, {0x3, 0x1000}, {0x1, 0x451}, {0xffffff16, 0x4}, {0x6, 0x4}, {0xfffffff8, 0x3d}, {0x4, 0x5}, {0x5, 0xfffffbff}], 0x1, 0x3, 0x0, 0x0, 0x6}})
sendmsg$alg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
read(r3, &(0x7f00000009c0)=""/4096, 0x1000)

kernel console output (not intermixed with test programs):

: Display Present: true inactive
[  355.315845][ T8284] vivid-007: Hotplug Present: 0x00000001
[  355.327143][ T8284] vivid-007: RxSense Present: 0x00000001
[  355.332936][ T8284] vivid-007: EDID Present: 0x00000001
[  355.338577][ T8284] vivid-007: ==================  END STATUS  ==================
[  355.407630][    T8] usb 8-1: USB disconnect, device number 2
[  355.885846][    T8] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  356.445444][ T8283] ubi: mtd0 is already attached to ubi31
[  356.627491][ T8283] kAFS: unparsable volume name
[  359.028206][   T27] audit: type=1804 audit(1756851000.669:7): pid=8305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.479" name="/newroot/41/bus/bus" dev="overlay" ino=244 res=1 errno=0
[  359.254606][   T27] audit: type=1804 audit(1756851000.889:8): pid=8305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.479" name="/newroot/41/bus/bus" dev="overlay" ino=244 res=1 errno=0
[  359.915905][ T8325] fuse: Bad value for 'fd'
[  363.995759][ T8398] ptrace attach of "./syz-executor exec"[7240] was attempted by "                                                                ��\x0c��H;�'���Sde/Ȑ|�zP��иW��\x0b�P�<�I7�{���Wr�עӇam�L5��{�޶-ڨ���ظ�����E�f�YS�7�?�V�s��\x0b�M�������`���g��ر/◒��U�C�ΐ�OG�Dn��\x07��w��m}O��q�����p�]��K|I(����9�/�k��Y_�֤vqy����rƲ�.+/�n�y�]�6�B\x5c
*���Lo��� �\x0a��B�\x0d��An���\x0bptQU�olL��obB��M�����ȹ.��T3#(D�\x1b�����?-�M��M�\x0d�{�X���Lhl1G�J(��\x0a����\x07�b\x0cf��\x5c�L�e#�y�w�O%�0��,��zǂ�r�\x5cH�\x22�@)E�lĪo��=��0}�|�����m ��~�M��UK\x0b�QoDU1h$�t�Qf�\x0b�;\x0bvN�T/��rP��x0m�؇dG>�t5Q�I����0k��p��;����t�>?7~��՞��8�)>�\x0a.F�v\x5c0CP�{�\x07ԭ4OT)���%��DkfCkF 籥�;��m\x0c�v�\x0cTʪz5��m֢����v����ī'c���^ت�g_\x0bƍ��8�)c,�(q��e�B���㑻SPt4�o� 
�I�HwL#��@mU�p�E�^a��gh~d�_��9\x07r|��GJj+&ҽk(�\x07���rn�E�4�(����#ë�\x0b Y�βB��\x0aЦ&��R��`�?��L1t����իw��.M�=3�|G����s�m�g�4`|\x22{б�춋���1�[{��ȯw/B�_g�6-�qyk*�o��\x0d\x5cc8����\x5
[  364.077422][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.487'.
[  364.378222][ T8400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  366.407556][ T8413] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[  366.414127][ T8413] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  366.438985][ T8413] vhci_hcd vhci_hcd.0: Device attached
[  366.571182][ T8421] vhci_hcd: connection closed
[  366.586272][ T2943] vhci_hcd: stop threads
[  366.611613][ T2943] vhci_hcd: release socket
[  366.619791][ T2943] vhci_hcd: disconnect device
[  367.880841][ T8443] fuse: Bad value for 'fd'
[  367.922261][ T8454] ubi: mtd0 is already attached to ubi31
[  367.929162][ T8454] kAFS: unparsable volume name
[  372.782048][ T8504] netlink: 256 bytes leftover after parsing attributes in process `syz.4.506'.
[  373.652454][ T8515] ubi: mtd0 is already attached to ubi31
[  373.676339][ T8515] kAFS: unparsable volume name
[  373.803993][ T8519] vivid-007: =================  START STATUS  =================
[  373.812216][ T8519] vivid-007: Enable Output Cropping: true
[  373.818301][ T8519] vivid-007: Enable Output Composing: true
[  373.824170][ T8519] vivid-007: Enable Output Scaler: true
[  373.829863][ T8519] vivid-007: Tx RGB Quantization Range: Automatic
[  373.836709][ T8519] vivid-007: Transmit Mode: HDMI
[  373.841987][ T8519] vivid-007: Display Present: true inactive
[  373.848449][ T8519] vivid-007: Hotplug Present: 0x00000001
[  373.890351][ T8519] vivid-007: RxSense Present: 0x00000001
[  373.896327][ T8519] vivid-007: EDID Present: 0x00000001
[  373.901832][ T8519] vivid-007: ==================  END STATUS  ==================
[  378.999751][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  379.006325][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  380.686649][ T8596] vivid-007: =================  START STATUS  =================
[  380.694608][ T8596] vivid-007: Enable Output Cropping: true
[  380.700384][ T8596] vivid-007: Enable Output Composing: true
[  380.706298][ T8596] vivid-007: Enable Output Scaler: true
[  380.711942][ T8596] vivid-007: Tx RGB Quantization Range: Automatic
[  380.718502][ T8596] vivid-007: Transmit Mode: HDMI
[  380.723451][ T8596] vivid-007: Display Present: true inactive
[  380.729473][ T8596] vivid-007: Hotplug Present: 0x00000001
[  380.735273][ T8596] vivid-007: RxSense Present: 0x00000001
[  380.740967][ T8596] vivid-007: EDID Present: 0x00000001
[  380.746395][ T8596] vivid-007: ==================  END STATUS  ==================
[  383.725846][ T8622] netlink: 36 bytes leftover after parsing attributes in process `syz.5.526'.
[  385.040688][ T8634] team0: Mode changed to "loadbalance"
[  385.063229][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.526'.
[  385.271691][ T8649] vivid-007: =================  START STATUS  =================
[  385.279894][ T8649] vivid-007: Enable Output Cropping: true
[  385.285904][ T8649] vivid-007: Enable Output Composing: true
[  385.291859][ T8649] vivid-007: Enable Output Scaler: true
[  385.297782][ T8649] vivid-007: Tx RGB Quantization Range: Automatic
[  385.304341][ T8649] vivid-007: Transmit Mode: HDMI
[  385.309582][ T8649] vivid-007: Display Present: true inactive
[  385.315831][ T8649] vivid-007: Hotplug Present: 0x00000001
[  385.321634][ T8649] vivid-007: RxSense Present: 0x00000001
[  385.327506][ T8649] vivid-007: EDID Present: 0x00000001
[  385.332969][ T8649] vivid-007: ==================  END STATUS  ==================
[  386.901124][ T8628] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.937952][ T8628] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.311964][ T8628] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.702181][ T8628] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.928234][ T8628] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.981137][ T8628] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.049779][ T8628] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.092596][ T8628] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.381218][ T8695] netlink: 256 bytes leftover after parsing attributes in process `syz.6.541'.
[  393.775870][ T8703] vivid-007: =================  START STATUS  =================
[  393.783900][ T8703] vivid-007: Enable Output Cropping: true
[  393.790129][ T8703] vivid-007: Enable Output Composing: true
[  393.796387][ T8703] vivid-007: Enable Output Scaler: true
[  393.802306][ T8703] vivid-007: Tx RGB Quantization Range: Automatic
[  393.809588][ T8703] vivid-007: Transmit Mode: HDMI
[  393.814838][ T8703] vivid-007: Display Present: true inactive
[  393.821044][ T8703] vivid-007: Hotplug Present: 0x00000001
[  393.827272][ T8703] vivid-007: RxSense Present: 0x00000001
[  393.833327][ T8703] vivid-007: EDID Present: 0x00000001
[  393.839368][ T8703] vivid-007: ==================  END STATUS  ==================
[  394.534843][ T8719] fuse: Unknown parameter 'fd0x0000000000000004'
[  398.338954][ T8789] vivid-007: =================  START STATUS  =================
[  398.346938][ T8789] vivid-007: Enable Output Cropping: true
[  398.353660][ T8789] vivid-007: Enable Output Composing: true
[  398.360368][ T8789] vivid-007: Enable Output Scaler: true
[  398.366294][ T8789] vivid-007: Tx RGB Quantization Range: Automatic
[  398.372828][ T8789] vivid-007: Transmit Mode: HDMI
[  398.378078][ T8789] vivid-007: Display Present: true inactive
[  398.384131][ T8789] vivid-007: Hotplug Present: 0x00000001
[  398.396292][ T8789] vivid-007: RxSense Present: 0x00000001
[  398.402105][ T8789] vivid-007: EDID Present: 0x00000001
[  398.411263][ T8789] vivid-007: ==================  END STATUS  ==================
[  399.202854][ T8795] fuse: Unknown parameter 'fd0x0000000000000004'
[  399.444730][ T8796] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8)
[  399.451303][ T8796] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  399.494173][ T8796] vhci_hcd vhci_hcd.0: Device attached
[  399.694791][ T5852] vhci_hcd: vhci_device speed not set
[  399.774708][ T5852] usb 47-1: new full-speed USB device number 4 using vhci_hcd
[  400.784581][ T8801] vhci_hcd: connection reset by peer
[  400.794234][   T42] vhci_hcd: stop threads
[  400.805939][   T42] vhci_hcd: release socket
[  400.850635][   T42] vhci_hcd: disconnect device
[  402.023315][   T27] audit: type=1804 audit(1756851043.649:9): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.561" name="/newroot/58/bus/bus" dev="overlay" ino=350 res=1 errno=0
[  402.108837][   T27] audit: type=1804 audit(1756851043.739:10): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.561" name="/newroot/58/bus/bus" dev="overlay" ino=350 res=1 errno=0
[  403.310460][ T8857] vivid-007: =================  START STATUS  =================
[  403.318726][ T8857] vivid-007: Enable Output Cropping: true
[  403.325515][ T8857] vivid-007: Enable Output Composing: true
[  403.331413][ T8857] vivid-007: Enable Output Scaler: true
[  403.337475][ T8857] vivid-007: Tx RGB Quantization Range: Automatic
[  403.344085][ T8857] vivid-007: Transmit Mode: HDMI
[  403.349239][ T8857] vivid-007: Display Present: true inactive
[  403.355237][ T8857] vivid-007: Hotplug Present: 0x00000001
[  403.360925][ T8857] vivid-007: RxSense Present: 0x00000001
[  403.366610][ T8857] vivid-007: EDID Present: 0x00000001
[  403.372442][ T8857] vivid-007: ==================  END STATUS  ==================
[  405.074868][ T5852] vhci_hcd: vhci_device speed not set
[  408.879477][ T8916] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  408.886063][ T8916] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  408.894078][ T8929] vhci_hcd: connection closed
[  408.896154][ T8916] vhci_hcd vhci_hcd.0: Device attached
[  408.906769][ T2927] vhci_hcd: stop threads
[  408.911033][ T2927] vhci_hcd: release socket
[  408.953956][ T2927] vhci_hcd: disconnect device
[  409.492131][ T8947] vivid-007: =================  START STATUS  =================
[  409.500312][ T8947] vivid-007: Enable Output Cropping: true
[  409.506189][ T8947] vivid-007: Enable Output Composing: true
[  409.512103][ T8947] vivid-007: Enable Output Scaler: true
[  409.517816][ T8947] vivid-007: Tx RGB Quantization Range: Automatic
[  409.524507][ T8947] vivid-007: Transmit Mode: HDMI
[  409.529578][ T8947] vivid-007: Display Present: true inactive
[  409.535671][ T8947] vivid-007: Hotplug Present: 0x00000001
[  409.541426][ T8947] vivid-007: RxSense Present: 0x00000001
[  409.570856][ T8947] vivid-007: EDID Present: 0x00000001
[  409.576593][ T8947] vivid-007: ==================  END STATUS  ==================
[  410.099642][ T8949] ubi: mtd0 is already attached to ubi31
[  410.137149][ T8949] kAFS: unparsable volume name
[  410.805393][ T8962] overlayfs: failed to resolve './file0': -2
[  413.576233][ T9011] vivid-007: =================  START STATUS  =================
[  413.584107][ T9011] vivid-007: Enable Output Cropping: true
[  413.590042][ T9011] vivid-007: Enable Output Composing: true
[  413.596073][ T9011] vivid-007: Enable Output Scaler: true
[  413.601763][ T9011] vivid-007: Tx RGB Quantization Range: Automatic
[  413.608563][ T9011] vivid-007: Transmit Mode: HDMI
[  413.613607][ T9011] vivid-007: Display Present: true inactive
[  413.619670][ T9011] vivid-007: Hotplug Present: 0x00000001
[  413.625601][ T9011] vivid-007: RxSense Present: 0x00000001
[  413.636951][ T9011] vivid-007: EDID Present: 0x00000001
[  413.642547][ T9011] vivid-007: ==================  END STATUS  ==================
[  414.721998][ T9028] netlink: 256 bytes leftover after parsing attributes in process `syz.7.589'.
[  415.403528][ T9034] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  415.410100][ T9034] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  415.422156][ T9034] vhci_hcd vhci_hcd.0: Device attached
[  415.614903][    T8] vhci_hcd: vhci_device speed not set
[  415.695244][    T8] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  416.142981][ T9036] vhci_hcd: connection reset by peer
[  416.219507][ T2927] vhci_hcd: stop threads
[  416.223863][ T2927] vhci_hcd: release socket
[  416.229810][ T2927] vhci_hcd: disconnect device
[  416.923683][ T9045] overlayfs: failed to resolve './file0': -2
[  418.262563][ T9087] vivid-007: =================  START STATUS  =================
[  418.270385][ T9087] vivid-007: Enable Output Cropping: true
[  418.276429][ T9087] vivid-007: Enable Output Composing: true
[  418.282985][ T9087] vivid-007: Enable Output Scaler: true
[  418.288982][ T9087] vivid-007: Tx RGB Quantization Range: Automatic
[  418.295689][ T9087] vivid-007: Transmit Mode: HDMI
[  418.300799][ T9087] vivid-007: Display Present: true inactive
[  418.306954][ T9087] vivid-007: Hotplug Present: 0x00000001
[  418.318594][ T9087] vivid-007: RxSense Present: 0x00000001
[  418.324471][ T9087] vivid-007: EDID Present: 0x00000001
[  418.329974][ T9087] vivid-007: ==================  END STATUS  ==================
[  421.024528][    T8] vhci_hcd: vhci_device speed not set
[  421.737702][ T9120] overlayfs: failed to resolve './file0': -2
[  422.363589][ T9131] netlink: 256 bytes leftover after parsing attributes in process `syz.5.606'.
[  425.554764][ T9186] overlayfs: failed to resolve './file1': -2
[  427.413793][ T9206] kAFS: unparsable volume name
[  427.546291][ T9215] netlink: 256 bytes leftover after parsing attributes in process `syz.7.622'.
[  430.560226][ T9258] overlayfs: failed to resolve './file1': -2
[  432.798223][ T9267] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.816864][ T9267] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.942026][ T9269] netlink: 'syz.4.629': attribute type 16 has an invalid length.
[  432.966538][ T9269] netlink: 'syz.4.629': attribute type 17 has an invalid length.
[  433.055108][ T9273] netlink: 256 bytes leftover after parsing attributes in process `syz.6.632'.
[  433.077958][ T9269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  435.355790][ T9302] input: syz0 as /devices/virtual/input/input6
[  438.076132][ T9318] overlayfs: failed to resolve './file1': -2
[  440.450526][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  440.463421][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  440.613724][ T9376] netlink: 256 bytes leftover after parsing attributes in process `syz.4.649'.
[  445.274824][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.658'.
[  446.998761][ T9447] vivid-007: =================  START STATUS  =================
[  447.006680][ T9447] vivid-007: Enable Output Cropping: true
[  447.012562][ T9447] vivid-007: Enable Output Composing: true
[  447.018557][ T9447] vivid-007: Enable Output Scaler: true
[  447.025256][ T9447] vivid-007: Tx RGB Quantization Range: Automatic
[  447.031813][ T9447] vivid-007: Transmit Mode: HDMI
[  447.036960][ T9447] vivid-007: Display Present: true inactive
[  447.042930][ T9447] vivid-007: Hotplug Present: 0x00000001
[  447.055010][ T9447] vivid-007: RxSense Present: 0x00000001
[  447.060964][ T9447] vivid-007: EDID Present: 0x00000001
[  447.066440][ T9447] vivid-007: ==================  END STATUS  ==================
[  451.490031][ T9484] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[  451.496617][ T9484] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  451.605581][ T9484] vhci_hcd vhci_hcd.0: Device attached
[  451.804494][ T5882] vhci_hcd: vhci_device speed not set
[  451.888274][ T5882] usb 45-1: new full-speed USB device number 2 using vhci_hcd
[  451.927718][ T9487] vhci_hcd: connection closed
[  451.934862][   T11] vhci_hcd: stop threads
[  451.960016][   T11] vhci_hcd: release socket
[  451.978931][   T11] vhci_hcd: disconnect device
[  454.445745][ T9551] netlink: 16 bytes leftover after parsing attributes in process `syz.6.674'.
[  455.362226][ T9571] netlink: 256 bytes leftover after parsing attributes in process `syz.7.679'.
[  456.378771][ T9588] virtio-fs: tag </dev/md0> not found
[  457.171046][ T9584] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9)
[  457.177617][ T9584] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  457.186200][ T5882] vhci_hcd: vhci_device speed not set
[  457.212883][ T9584] vhci_hcd vhci_hcd.0: Device attached
[  457.234670][ T9593] vhci_hcd: connection closed
[  457.240633][ T2927] vhci_hcd: stop threads
[  457.279453][ T2927] vhci_hcd: release socket
[  457.284118][ T2927] vhci_hcd: disconnect device
[  459.426197][ T9609] vivid-007: =================  START STATUS  =================
[  459.434075][ T9609] vivid-007: Enable Output Cropping: true
[  459.440076][ T9609] vivid-007: Enable Output Composing: true
[  459.446137][ T9609] vivid-007: Enable Output Scaler: true
[  459.452096][ T9609] vivid-007: Tx RGB Quantization Range: Automatic
[  459.458693][ T9609] vivid-007: Transmit Mode: HDMI
[  459.463903][ T9609] vivid-007: Display Present: true inactive
[  459.470049][ T9609] vivid-007: Hotplug Present: 0x00000001
[  459.475883][ T9609] vivid-007: RxSense Present: 0x00000001
[  459.488646][ T9609] vivid-007: EDID Present: 0x00000001
[  459.494110][ T9609] vivid-007: ==================  END STATUS  ==================
[  466.959828][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'.
[  467.521581][   T27] audit: type=1804 audit(1756851109.159:11): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.694" name="/newroot/92/bus/bus" dev="overlay" ino=548 res=1 errno=0
[  467.718340][   T27] audit: type=1804 audit(1756851109.219:12): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.694" name="/newroot/92/bus/bus" dev="overlay" ino=548 res=1 errno=0
[  467.941358][ T9688] ubi: mtd0 is already attached to ubi31
[  468.077274][ T9688] kAFS: unparsable volume name
[  473.894118][ T9799] ubi: mtd0 is already attached to ubi31
[  473.919240][ T9799] kAFS: unparsable volume name
[  475.391574][ T9816] program syz.5.714 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  475.977168][ T9827] 9pnet_fd: Insufficient options for proto=fd
[  477.055504][ T9848] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  477.062165][ T9848] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  477.078218][ T9848] vhci_hcd vhci_hcd.0: Device attached
[  477.274485][ T5852] vhci_hcd: vhci_device speed not set
[  477.364613][ T5852] usb 43-1: new full-speed USB device number 3 using vhci_hcd
[  477.717819][ T9853] vhci_hcd: connection reset by peer
[  477.739832][ T2943] vhci_hcd: stop threads
[  477.751225][ T2943] vhci_hcd: release socket
[  477.764247][ T2943] vhci_hcd: disconnect device
[  479.286767][ T9912] ubi: mtd0 is already attached to ubi31
[  479.318233][ T9912] kAFS: unparsable volume name
[  482.204691][ T9963] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[  482.211274][ T9963] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  482.325700][ T9963] vhci_hcd vhci_hcd.0: Device attached
[  482.595718][  T787] vhci_hcd: vhci_device speed not set
[  482.633383][ T9975] vhci_hcd: connection closed
[  482.645284][   T12] vhci_hcd: stop threads
[  482.685659][ T5852] vhci_hcd: vhci_device speed not set
[  482.744486][  T787] usb 45-1: new full-speed USB device number 3 using vhci_hcd
[  482.808555][   T12] vhci_hcd: release socket
[  482.885880][   T12] vhci_hcd: disconnect device
[  488.706152][  T787] vhci_hcd: vhci_device speed not set
[  491.240961][T10069] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  491.247976][T10069] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  491.976626][T10069] vhci_hcd vhci_hcd.0: Device attached
[  492.151853][T10078] vhci_hcd: connection closed
[  492.153879][ T2965] vhci_hcd: stop threads
[  492.188969][ T2965] vhci_hcd: release socket
[  492.218574][ T2965] vhci_hcd: disconnect device
[  492.264624][ T5851] vhci_hcd: vhci_device speed not set
[  494.211787][T10111] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  494.367393][T10111] CIFS: Unable to determine destination address
[  496.600299][T10136] netlink: 256 bytes leftover after parsing attributes in process `syz.7.769'.
[  499.168096][T10154] Bluetooth: MGMT ver 1.22
[  499.188163][T10152] netlink: 'syz.6.770': attribute type 1 has an invalid length.
[  499.456309][T10139] bond1: (slave bridge1): making interface the new active one
[  499.479774][T10139] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  499.784643][T10174] input: syz1 as /devices/virtual/input/input7
[  499.817728][T10167] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  499.824375][T10167] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  499.834117][T10167] vhci_hcd vhci_hcd.0: Device attached
[  500.024504][ T5851] vhci_hcd: vhci_device speed not set
[  500.094652][ T5851] usb 43-1: new full-speed USB device number 4 using vhci_hcd
[  500.371326][T10176] vhci_hcd: connection reset by peer
[  500.422806][   T12] vhci_hcd: stop threads
[  500.427898][   T12] vhci_hcd: release socket
[  500.432795][   T12] vhci_hcd: disconnect device
[  501.231310][T10196] netlink: 256 bytes leftover after parsing attributes in process `syz.7.780'.
[  501.888972][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  501.926579][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  502.456786][   T27] audit: type=1804 audit(1756851144.099:13): pid=10216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.782" name="/newroot/117/bus/bus" dev="overlay" ino=658 res=1 errno=0
[  502.541151][T10222] comedi comedi3: pcl730: I/O port conflict (0x40000101,4)
[  502.575034][T10219] virtio-fs: tag </dev/md0> not found
[  502.580495][   T27] audit: type=1804 audit(1756851144.139:14): pid=10216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.782" name="/newroot/117/bus/bus" dev="overlay" ino=658 res=1 errno=0
[  503.262562][  T787] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  503.526488][  T787] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  503.686872][  T787] usb 7-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  503.744695][  T787] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  504.317080][  T787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.519144][T10259] netlink: 256 bytes leftover after parsing attributes in process `syz.5.790'.
[  505.234968][ T5851] vhci_hcd: vhci_device speed not set
[  505.500249][T10274] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  505.506827][T10274] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  505.544903][T10274] vhci_hcd vhci_hcd.0: Device attached
[  505.765464][ T5851] vhci_hcd: vhci_device speed not set
[  505.938151][ T5851] usb 43-1: device descriptor read/64, error -110
[  506.172644][T10276] vhci_hcd: connection closed
[  506.181829][   T12] vhci_hcd: stop threads
[  506.304205][ T5851] vhci_hcd: vhci_device speed not set
[  506.304408][   T12] vhci_hcd: release socket
[  506.377299][ T5851] usb 43-1: new full-speed USB device number 5 using vhci_hcd
[  506.424467][   T12] vhci_hcd: disconnect device
[  506.680218][ T5882] usb 7-1: USB disconnect, device number 2
[  507.585401][T10310] virtio-fs: tag </dev/md0> not found
[  509.052111][T10331] netlink: 256 bytes leftover after parsing attributes in process `syz.7.800'.
[  509.106921][T10332] binder: 10330:10332 ioctl c0306201 2000000002c0 returned -14
[  510.489294][T10342] tipc: Started in network mode
[  510.494251][T10342] tipc: Node identity e60b5442c7b8, cluster identity 4711
[  510.502346][T10342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  510.519971][T10342] tipc: Resetting bearer <eth:syzkaller0>
[  511.242908][T10359] CIFS: Unable to determine destination address
[  511.541150][ T5882] tipc: Node number set to 565400642
[  511.571870][T10338] tipc: Disabling bearer <eth:syzkaller0>
[  511.644520][ T5851] vhci_hcd: vhci_device speed not set
[  514.167287][T10370] virtio-fs: tag </dev/md0> not found
[  515.965843][T10386] netlink: 256 bytes leftover after parsing attributes in process `syz.5.816'.
[  516.684111][T10392] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10)
[  516.690763][T10392] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  516.707820][T10392] vhci_hcd vhci_hcd.0: Device attached
[  516.993517][ T5882] vhci_hcd: vhci_device speed not set
[  517.094488][ T5882] usb 45-1: new full-speed USB device number 4 using vhci_hcd
[  517.386827][T10398] vhci_hcd: connection reset by peer
[  517.421372][ T2927] vhci_hcd: stop threads
[  517.425806][ T2927] vhci_hcd: release socket
[  517.444866][ T2927] vhci_hcd: disconnect device
[  518.743833][T10416] binder: 10415:10416 ioctl c0306201 200000000240 returned -11
[  518.788154][T10416] binder: 10415:10416 ioctl c0306201 2000000002c0 returned -14
[  520.528867][T10430] virtio-fs: tag </dev/md0> not found
[  520.564541][T10433] 9pnet_virtio: no channels available for device syz
[  522.341388][T10454] tipc: Started in network mode
[  522.355378][T10454] tipc: Node identity 46400511effc, cluster identity 4711
[  522.384490][ T5882] vhci_hcd: vhci_device speed not set
[  522.409959][T10454] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  522.539502][T10454] tipc: Resetting bearer <eth:syzkaller0>
[  522.649069][T10460] binder: 10458:10460 ioctl c0306201 200000000240 returned -11
[  522.658631][T10460] binder: 10458:10460 ioctl c0306201 2000000002c0 returned -14
[  522.702298][T10449] tipc: Disabling bearer <eth:syzkaller0>
[  522.938191][T10465] netlink: 24 bytes leftover after parsing attributes in process `syz.6.835'.
[  523.155927][T10467] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[  523.162600][T10467] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  523.206546][T10467] vhci_hcd vhci_hcd.0: Device attached
[  523.404557][ T5851] vhci_hcd: vhci_device speed not set
[  524.184433][ T5851] usb 43-1: new full-speed USB device number 6 using vhci_hcd
[  524.293774][T10472] vhci_hcd: connection reset by peer
[  524.324482][   T11] vhci_hcd: stop threads
[  524.334867][   T11] vhci_hcd: release socket
[  524.350964][   T11] vhci_hcd: disconnect device
[  525.188016][T10490] virtio-fs: tag </dev/md0> not found
[  528.581035][T10503] netlink: 16 bytes leftover after parsing attributes in process `syz.7.846'.
[  529.366837][ T5851] vhci_hcd: vhci_device speed not set
[  531.888906][T10536] netlink: 16 bytes leftover after parsing attributes in process `syz.6.859'.
[  533.657876][T10568] netlink: 256 bytes leftover after parsing attributes in process `syz.4.871'.
[  533.675554][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.7.872'.
[  534.348289][T10574] vivid-007: =================  START STATUS  =================
[  534.356238][T10574] vivid-007: Enable Output Cropping: true
[  534.361960][T10574] vivid-007: Enable Output Composing: true
[  534.367903][T10574] vivid-007: Enable Output Scaler: true
[  534.373462][T10574] vivid-007: Tx RGB Quantization Range: Automatic
[  534.380016][T10574] vivid-007: Transmit Mode: HDMI
[  534.384973][T10574] vivid-007: Display Present: true inactive
[  534.390862][T10574] vivid-007: Hotplug Present: 0x00000001
[  534.396573][T10574] vivid-007: RxSense Present: 0x00000001
[  534.402225][T10574] vivid-007: EDID Present: 0x00000001
[  534.407714][T10574] vivid-007: ==================  END STATUS  ==================
[  536.016014][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.882'.
[  536.119277][T10601] netlink: 256 bytes leftover after parsing attributes in process `syz.7.883'.
[  536.713764][T10609] vivid-007: =================  START STATUS  =================
[  536.721703][T10609] vivid-007: Enable Output Cropping: true
[  536.727800][T10609] vivid-007: Enable Output Composing: true
[  536.733667][T10609] vivid-007: Enable Output Scaler: true
[  536.739314][T10609] vivid-007: Tx RGB Quantization Range: Automatic
[  536.745780][T10609] vivid-007: Transmit Mode: HDMI
[  536.750996][T10609] vivid-007: Display Present: true inactive
[  536.757147][T10609] vivid-007: Hotplug Present: 0x00000001
[  536.762887][T10609] vivid-007: RxSense Present: 0x00000001
[  536.768810][T10609] vivid-007: EDID Present: 0x00000001
[  536.774409][T10609] vivid-007: ==================  END STATUS  ==================
[  537.233974][T10621] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.890'.
[  537.370640][T10623] CIFS: Unable to determine destination address
[  539.219544][T10639] netlink: 256 bytes leftover after parsing attributes in process `syz.6.895'.
[  539.436051][T10641] vivid-007: =================  START STATUS  =================
[  539.443854][T10641] vivid-007: Enable Output Cropping: true
[  539.449822][T10641] vivid-007: Enable Output Composing: true
[  539.455715][T10641] vivid-007: Enable Output Scaler: true
[  539.461368][T10641] vivid-007: Tx RGB Quantization Range: Automatic
[  539.467828][T10641] vivid-007: Transmit Mode: HDMI
[  539.472758][T10641] vivid-007: Display Present: true inactive
[  539.478837][T10641] vivid-007: Hotplug Present: 0x00000001
[  539.484550][T10641] vivid-007: RxSense Present: 0x00000001
[  539.490202][T10641] vivid-007: EDID Present: 0x00000001
[  539.495666][T10641] vivid-007: ==================  END STATUS  ==================
[  540.006561][T10651] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.899'.
[  540.390209][T10664] netlink: 256 bytes leftover after parsing attributes in process `syz.5.903'.
[  540.763575][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.7.897'.
[  541.016780][T10668] netlink: 'syz.7.897': attribute type 5 has an invalid length.
[  541.169986][T10668] netlink: 20 bytes leftover after parsing attributes in process `syz.7.897'.
[  541.215762][T10668] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  541.229073][T10668] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  541.713155][T10683] netlink: 256 bytes leftover after parsing attributes in process `syz.6.906'.
[  542.044927][T10668] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  542.054831][T10668] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  542.074646][T10668] geneve2: entered promiscuous mode
[  542.080192][T10668] geneve2: entered allmulticast mode
[  543.301060][T10694] vivid-007: =================  START STATUS  =================
[  543.309349][T10694] vivid-007: Enable Output Cropping: true
[  543.315328][T10694] vivid-007: Enable Output Composing: true
[  543.321242][T10694] vivid-007: Enable Output Scaler: true
[  543.326842][T10694] vivid-007: Tx RGB Quantization Range: Automatic
[  543.333257][T10694] vivid-007: Transmit Mode: HDMI
[  543.338247][T10694] vivid-007: Display Present: true inactive
[  543.344140][T10694] vivid-007: Hotplug Present: 0x00000001
[  543.349866][T10694] vivid-007: RxSense Present: 0x00000001
[  543.355586][T10694] vivid-007: EDID Present: 0x00000001
[  543.361054][T10694] vivid-007: ==================  END STATUS  ==================
[  543.414493][T10697] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.909'.
[  544.855594][T10712] netlink: 256 bytes leftover after parsing attributes in process `syz.4.913'.
[  544.936197][T10714] CIFS: Unable to determine destination address
[  546.275863][T10723] netlink: 256 bytes leftover after parsing attributes in process `syz.7.917'.
[  547.481663][T10731] vivid-007: =================  START STATUS  =================
[  547.489397][T10731] vivid-007: Enable Output Cropping: true
[  547.495188][T10731] vivid-007: Enable Output Composing: true
[  547.500995][T10731] vivid-007: Enable Output Scaler: true
[  547.506599][T10731] vivid-007: Tx RGB Quantization Range: Automatic
[  547.513011][T10731] vivid-007: Transmit Mode: HDMI
[  547.518003][T10731] vivid-007: Display Present: true inactive
[  547.523898][T10731] vivid-007: Hotplug Present: 0x00000001
[  547.529584][T10731] vivid-007: RxSense Present: 0x00000001
[  547.535319][T10731] vivid-007: EDID Present: 0x00000001
[  547.540719][T10731] vivid-007: ==================  END STATUS  ==================
[  550.010954][T10758] netlink: 256 bytes leftover after parsing attributes in process `syz.6.926'.
[  551.804621][T10773] vivid-007: =================  START STATUS  =================
[  551.812342][T10773] vivid-007: Enable Output Cropping: true
[  551.818160][T10773] vivid-007: Enable Output Composing: true
[  551.823969][T10773] vivid-007: Enable Output Scaler: true
[  551.829604][T10773] vivid-007: Tx RGB Quantization Range: Automatic
[  551.836162][T10773] vivid-007: Transmit Mode: HDMI
[  551.841111][T10773] vivid-007: Display Present: true inactive
[  551.847091][T10773] vivid-007: Hotplug Present: 0x00000001
[  551.852739][T10773] vivid-007: RxSense Present: 0x00000001
[  551.858665][T10773] vivid-007: EDID Present: 0x00000001
[  551.864043][T10773] vivid-007: ==================  END STATUS  ==================
[  553.471918][T10788] fuse: Bad value for 'fd'
[  553.727351][T10790] netlink: 256 bytes leftover after parsing attributes in process `syz.6.937'.
[  555.398833][T10802] vivid-007: =================  START STATUS  =================
[  555.406927][T10802] vivid-007: Enable Output Cropping: true
[  555.412712][T10802] vivid-007: Enable Output Composing: true
[  555.418930][T10802] vivid-007: Enable Output Scaler: true
[  555.424694][T10802] vivid-007: Tx RGB Quantization Range: Automatic
[  555.431202][T10802] vivid-007: Transmit Mode: HDMI
[  555.436258][T10802] vivid-007: Display Present: true inactive
[  555.442221][T10802] vivid-007: Hotplug Present: 0x00000001
[  555.447991][T10802] vivid-007: RxSense Present: 0x00000001
[  555.453700][T10802] vivid-007: EDID Present: 0x00000001
[  555.459187][T10802] vivid-007: ==================  END STATUS  ==================
[  555.522065][T10804] virtio-fs: tag </dev/md0> not found
[  556.609619][T10814] fuse: Bad value for 'fd'
[  557.539466][   T27] audit: type=1804 audit(1756851199.169:15): pid=10815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.944" name="/newroot/150/bus/bus" dev="overlay" ino=857 res=1 errno=0
[  557.667514][   T27] audit: type=1804 audit(1756851199.219:16): pid=10820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.944" name="/newroot/150/bus/bus" dev="overlay" ino=857 res=1 errno=0
[  559.668572][T10830] CIFS: Unable to determine destination address
[  560.107543][T10837] netlink: 256 bytes leftover after parsing attributes in process `syz.6.951'.
[  560.807591][T10841] virtio-fs: tag </dev/md0> not found
[  563.362932][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  563.371840][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  563.991921][T10856] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.958'.
[  565.612470][T10876] virtio-fs: tag </dev/md0> not found
[  567.999916][T10886] netlink: 256 bytes leftover after parsing attributes in process `syz.7.964'.
[  568.086165][   T27] audit: type=1804 audit(1756851209.709:17): pid=10885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.965" name="/newroot/154/bus/bus" dev="overlay" ino=888 res=1 errno=0
[  568.555547][   T27] audit: type=1804 audit(1756851210.199:18): pid=10885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.965" name="/newroot/154/bus/bus" dev="overlay" ino=888 res=1 errno=0
[  568.788148][T10894] vivid-007: =================  START STATUS  =================
[  568.796076][T10894] vivid-007: Enable Output Cropping: true
[  568.801840][T10894] vivid-007: Enable Output Composing: true
[  568.807834][T10894] vivid-007: Enable Output Scaler: true
[  568.813399][T10894] vivid-007: Tx RGB Quantization Range: Automatic
[  568.819963][T10894] vivid-007: Transmit Mode: HDMI
[  568.824924][T10894] vivid-007: Display Present: true inactive
[  568.830851][T10894] vivid-007: Hotplug Present: 0x00000001
[  568.836599][T10894] vivid-007: RxSense Present: 0x00000001
[  568.842437][T10894] vivid-007: EDID Present: 0x00000001
[  568.847920][T10894] vivid-007: ==================  END STATUS  ==================
[  569.197819][T10899] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.969'.
[  570.486986][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.970'.
[  570.496231][T10909] netlink: 'syz.6.970': attribute type 5 has an invalid length.
[  570.504021][T10909] netlink: 20 bytes leftover after parsing attributes in process `syz.6.970'.
[  570.622504][T10909] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  570.645531][T10909] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  570.654918][T10909] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  570.663645][T10909] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  570.691944][T10909] geneve2: entered promiscuous mode
[  570.718597][T10909] geneve2: entered allmulticast mode
[  570.734768][T10910] virtio-fs: tag </dev/md0> not found
[  570.831812][T10905] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  570.838377][T10905] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  570.878153][T10905] vhci_hcd vhci_hcd.0: Device attached
[  570.908350][T10913] vhci_hcd: connection closed
[  570.940999][ T2953] vhci_hcd: stop threads
[  570.951054][ T2953] vhci_hcd: release socket
[  570.977482][ T2953] vhci_hcd: disconnect device
[  574.001125][T10931] CIFS: Unable to determine destination address
[  574.307179][T10929] vivid-007: =================  START STATUS  =================
[  574.315088][T10929] vivid-007: Enable Output Cropping: true
[  574.320821][T10929] vivid-007: Enable Output Composing: true
[  574.326694][T10929] vivid-007: Enable Output Scaler: true
[  574.332259][T10929] vivid-007: Tx RGB Quantization Range: Automatic
[  574.338783][T10929] vivid-007: Transmit Mode: HDMI
[  574.343716][T10929] vivid-007: Display Present: true inactive
[  574.349640][T10929] vivid-007: Hotplug Present: 0x00000001
[  574.355345][T10929] vivid-007: RxSense Present: 0x00000001
[  574.361096][T10929] vivid-007: EDID Present: 0x00000001
[  574.366607][T10929] vivid-007: ==================  END STATUS  ==================
[  575.761586][T10947] netlink: 256 bytes leftover after parsing attributes in process `syz.5.982'.
[  576.058251][T10953] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9)
[  576.064840][T10953] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  577.006742][T10953] vhci_hcd vhci_hcd.0: Device attached
[  577.204444][ T5882] vhci_hcd: vhci_device speed not set
[  577.903957][T10957] vhci_hcd: connection closed
[  577.944669][ T5882] usb 47-1: new full-speed USB device number 5 using vhci_hcd
[  577.967769][T10958] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  577.995932][   T42] vhci_hcd: stop threads
[  578.006932][   T42] vhci_hcd: release socket
[  578.021218][   T42] vhci_hcd: disconnect device
[  578.411306][   T27] audit: type=1804 audit(1756851220.049:19): pid=10970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.987" name="/newroot/163/bus/bus" dev="overlay" ino=906 res=1 errno=0
[  578.504403][   T27] audit: type=1804 audit(1756851220.139:20): pid=10970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.987" name="/newroot/163/bus/bus" dev="overlay" ino=906 res=1 errno=0
[  578.672175][T10975] vivid-007: =================  START STATUS  =================
[  578.680193][T10975] vivid-007: Enable Output Cropping: true
[  578.686025][T10975] vivid-007: Enable Output Composing: true
[  578.691876][T10975] vivid-007: Enable Output Scaler: true
[  578.697490][T10975] vivid-007: Tx RGB Quantization Range: Automatic
[  578.703972][T10975] vivid-007: Transmit Mode: HDMI
[  578.709090][T10975] vivid-007: Display Present: true inactive
[  578.715055][T10975] vivid-007: Hotplug Present: 0x00000001
[  578.720706][T10975] vivid-007: RxSense Present: 0x00000001
[  578.726384][T10975] vivid-007: EDID Present: 0x00000001
[  578.731760][T10975] vivid-007: ==================  END STATUS  ==================
[  583.485383][ T5882] vhci_hcd: vhci_device speed not set
[  588.699916][T11040] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[  588.706496][T11040] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  588.720240][T11044] vhci_hcd: connection closed
[  588.721343][T11040] vhci_hcd vhci_hcd.0: Device attached
[  588.737856][T11032] vhci_hcd: stop threads
[  588.742271][T11032] vhci_hcd: release socket
[  588.748234][T11032] vhci_hcd: disconnect device
[  589.188454][T11054] CIFS: Unable to determine destination address
[  590.540393][T11059] binder: 11058:11059 ioctl c0306201 2000000002c0 returned -14
[  591.669913][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1013'.
[  592.739201][T11067] netlink: 'syz.5.1013': attribute type 5 has an invalid length.
[  592.873195][T11067] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1013'.
[  592.963110][T11067] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  592.992188][T11067] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  593.044607][T11067] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  593.070291][T11067] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  593.121512][T11067] geneve2: entered promiscuous mode
[  593.146784][T11067] geneve2: entered allmulticast mode
[  593.942112][T11095] binder: 11094:11095 ioctl c0306201 2000000002c0 returned -14
[  594.918605][T11101] vivid-007: =================  START STATUS  =================
[  594.926662][T11101] vivid-007: Enable Output Cropping: true
[  594.932497][T11101] vivid-007: Enable Output Composing: true
[  594.938402][T11101] vivid-007: Enable Output Scaler: true
[  594.944116][T11101] vivid-007: Tx RGB Quantization Range: Automatic
[  594.950715][T11101] vivid-007: Transmit Mode: HDMI
[  594.955718][T11101] vivid-007: Display Present: true inactive
[  594.961628][T11101] vivid-007: Hotplug Present: 0x00000001
[  594.967327][T11101] vivid-007: RxSense Present: 0x00000001
[  594.973062][T11101] vivid-007: EDID Present: 0x00000001
[  594.978584][T11101] vivid-007: ==================  END STATUS  ==================
[  597.511128][T11130] binder: 11129:11130 ioctl c0306201 200000000240 returned -11
[  597.530555][T11130] binder: 11129:11130 ioctl c0306201 2000000002c0 returned -14
[  597.865449][T11140] virtio-fs: tag </dev/md0> not found
[  601.925220][T11122] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  602.492445][T11170] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  603.457474][T11180] virtio-fs: tag </dev/md0> not found
[  604.008125][T11189] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  604.014707][T11189] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  604.068428][T11189] vhci_hcd vhci_hcd.0: Device attached
[  604.304423][ T5852] vhci_hcd: vhci_device speed not set
[  604.451301][T11195] vhci_hcd: connection closed
[  604.464515][   T11] vhci_hcd: stop threads
[  604.519704][   T11] vhci_hcd: release socket
[  604.526377][ T5852] usb 43-1: new full-speed USB device number 7 using vhci_hcd
[  604.534604][   T11] vhci_hcd: disconnect device
[  604.564536][ T5852] usb 43-1: enqueue for inactive port 0
[  604.654435][ T5852] vhci_hcd: vhci_device speed not set
[  606.805747][T11222] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1053'.
[  607.872730][T11235] 9pnet_virtio: no channels available for device syz
[  607.994822][T11239] virtio-fs: tag </dev/md0> not found
[  609.408279][T11250] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  610.045053][T11255] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  610.051635][T11255] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  610.060791][T11255] vhci_hcd vhci_hcd.0: Device attached
[  610.143175][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1062'.
[  610.152887][T11262] netlink: 'syz.6.1062': attribute type 5 has an invalid length.
[  610.173658][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1062'.
[  610.264634][  T787] vhci_hcd: vhci_device speed not set
[  610.350220][  T787] usb 41-1: new full-speed USB device number 4 using vhci_hcd
[  610.450331][T11260] vhci_hcd: connection closed
[  610.450861][ T1070] vhci_hcd: stop threads
[  610.462153][ T1070] vhci_hcd: release socket
[  610.479853][ T1070] vhci_hcd: disconnect device
[  614.983703][T11292] virtio-fs: tag </dev/md0> not found
[  615.684927][  T787] vhci_hcd: vhci_device speed not set
[  615.998620][   T27] audit: type=1804 audit(1756851257.629:21): pid=11300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1071" name="/newroot/179/bus/bus" dev="overlay" ino=996 res=1 errno=0
[  616.048635][   T27] audit: type=1804 audit(1756851257.689:22): pid=11300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1071" name="/newroot/179/bus/bus" dev="overlay" ino=996 res=1 errno=0
[  619.838464][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1078'.
[  619.862001][T11331] netlink: 'syz.7.1078': attribute type 5 has an invalid length.
[  619.961472][T11331] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1078'.
[  621.242019][T11348] virtio-fs: tag </dev/md0> not found
[  622.380826][T11366] bridge0: port 1(bridge_slave_0) entered disabled state
[  622.399836][T11366] bridge0: port 2(bridge_slave_1) entered disabled state
[  622.483965][T11368] netlink: 'syz.7.1086': attribute type 16 has an invalid length.
[  622.551706][T11368] netlink: 'syz.7.1086': attribute type 17 has an invalid length.
[  622.582847][   T27] audit: type=1804 audit(1756851264.219:23): pid=11372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1088" name="/newroot/182/bus/bus" dev="overlay" ino=1021 res=1 errno=0
[  622.604031][    C0] vkms_vblank_simulate: vblank timer overrun
[  622.677589][T11368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  622.703854][   T27] audit: type=1804 audit(1756851264.339:24): pid=11375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1088" name="/newroot/182/bus/bus" dev="overlay" ino=1021 res=1 errno=0
[  624.847417][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  624.853718][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  625.071315][T11394] virtio-fs: tag </dev/md0> not found
[  625.516321][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1095'.
[  625.526859][T11401] netlink: 'syz.6.1095': attribute type 5 has an invalid length.
[  625.691252][T11401] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1095'.
[  626.270229][T11406] random: crng reseeded on system resumption
[  626.456408][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1097'.
[  626.473517][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'.
[  627.077539][ T5851] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  627.413607][T11424] vivid-000: disconnect
[  627.414700][ T5851] usb 5-1: Using ep0 maxpacket: 16
[  627.427104][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  627.447788][ T5851] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  627.507863][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.602984][ T5851] usb 5-1: Product: syz
[  627.701128][ T5851] usb 5-1: Manufacturer: syz
[  627.728429][ T5851] usb 5-1: SerialNumber: syz
[  627.750624][ T5851] usb 5-1: config 0 descriptor??
[  627.758444][ T5851] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  627.783887][ T5851] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  627.837912][T11422] vivid-000: reconnect
[  628.224638][ T5851] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  629.013959][T11410] bridge_slave_0: left allmulticast mode
[  629.051774][ T5851] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  629.070185][T11410] bridge_slave_0: left promiscuous mode
[  629.080341][ T5851] em28xx 5-1:0.0: board has no eeprom
[  629.097242][T11410] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.185546][ T5851] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  629.193398][ T5851] em28xx 5-1:0.0: dvb set to bulk mode.
[  629.220521][ T5882] em28xx 5-1:0.0: Binding DVB extension
[  629.285796][ T5851] usb 5-1: USB disconnect, device number 2
[  629.358781][ T5851] em28xx 5-1:0.0: Disconnecting em28xx
[  629.441623][ T5882] em28xx 5-1:0.0: Registering input extension
[  629.584616][ T5851] em28xx 5-1:0.0: Closing input extension
[  629.652731][T11440] vivid-007: =================  START STATUS  =================
[  629.660898][T11440] vivid-007: Enable Output Cropping: true
[  629.667195][T11440] vivid-007: Enable Output Composing: true
[  629.673150][T11440] vivid-007: Enable Output Scaler: true
[  629.678882][T11440] vivid-007: Tx RGB Quantization Range: Automatic
[  629.685521][T11440] vivid-007: Transmit Mode: HDMI
[  629.690620][T11440] vivid-007: Display Present: true inactive
[  629.696748][T11440] vivid-007: Hotplug Present: 0x00000001
[  629.702959][T11440] vivid-007: RxSense Present: 0x00000001
[  629.708958][T11440] vivid-007: EDID Present: 0x00000001
[  629.714545][T11440] vivid-007: ==================  END STATUS  ==================
[  631.156859][ T5851] em28xx 5-1:0.0: Freeing device
[  631.840849][T11410] bridge_slave_1: left allmulticast mode
[  631.934503][T11410] bridge_slave_1: left promiscuous mode
[  631.952191][T11410] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.969653][T11410] bond0: (slave bond_slave_0): Releasing backup interface
[  631.990842][T11410] bond0: (slave bond_slave_1): Releasing backup interface
[  632.011690][T11445] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1105'.
[  632.126123][T11410] team0: Port device team_slave_0 removed
[  632.132256][T11446] virtio-fs: tag </dev/md0> not found
[  632.159879][T11410] team0: Port device team_slave_1 removed
[  632.166780][T11410] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  632.183782][T11410] batman_adv: batadv0: Removing interface: batadv_slave_0
[  632.220287][T11410] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  632.241009][T11410] batman_adv: batadv0: Removing interface: batadv_slave_1
[  632.544777][T11453] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1107'.
[  633.265178][   T27] audit: type=1804 audit(1756851274.899:25): pid=11454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1106" name="/newroot/200/bus/bus" dev="overlay" ino=1095 res=1 errno=0
[  634.985074][   T27] audit: type=1804 audit(1756851274.899:26): pid=11454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1106" name="/newroot/200/bus/bus" dev="overlay" ino=1095 res=1 errno=0
[  636.634780][T11478] vivid-007: =================  START STATUS  =================
[  636.642563][T11478] vivid-007: Enable Output Cropping: true
[  636.648886][T11478] vivid-007: Enable Output Composing: true
[  636.654862][T11478] vivid-007: Enable Output Scaler: true
[  636.660508][T11478] vivid-007: Tx RGB Quantization Range: Automatic
[  636.667347][T11478] vivid-007: Transmit Mode: HDMI
[  636.672383][T11478] vivid-007: Display Present: true inactive
[  636.678506][T11478] vivid-007: Hotplug Present: 0x00000001
[  636.684421][T11478] vivid-007: RxSense Present: 0x00000001
[  636.690138][T11478] vivid-007: EDID Present: 0x00000001
[  636.695737][T11478] vivid-007: ==================  END STATUS  ==================
[  638.664770][T11490] virtio-fs: tag </dev/md0> not found
[  641.339620][T11507] vivid-000: disconnect
[  641.448399][T11502] vivid-000: reconnect
[  641.527233][T11512] netlink: 'syz.6.1121': attribute type 16 has an invalid length.
[  641.598602][T11512] netlink: 'syz.6.1121': attribute type 17 has an invalid length.
[  641.777899][T11512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  641.870277][T11520] vivid-007: =================  START STATUS  =================
[  641.878255][T11520] vivid-007: Enable Output Cropping: true
[  641.884157][T11520] vivid-007: Enable Output Composing: true
[  641.890201][T11520] vivid-007: Enable Output Scaler: true
[  641.896000][T11520] vivid-007: Tx RGB Quantization Range: Automatic
[  641.902588][T11520] vivid-007: Transmit Mode: HDMI
[  641.907704][T11520] vivid-007: Display Present: true inactive
[  641.914359][T11520] vivid-007: Hotplug Present: 0x00000001
[  641.954061][T11508] bridge0: port 1(bridge_slave_0) entered disabled state
[  641.964587][T11520] vivid-007: RxSense Present: 0x00000001
[  641.970548][T11520] vivid-007: EDID Present: 0x00000001
[  641.976429][T11520] vivid-007: ==================  END STATUS  ==================
[  642.050450][T11508] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.481488][T11539] virtio-fs: tag </dev/md0> not found
[  645.851353][T11551] vivid-004: disconnect
[  645.958625][T11548] vivid-004: reconnect
[  646.369083][T11565] vivid-007: =================  START STATUS  =================
[  646.377074][T11565] vivid-007: Enable Output Cropping: true
[  646.383339][T11565] vivid-007: Enable Output Composing: true
[  646.389783][T11565] vivid-007: Enable Output Scaler: true
[  646.395646][T11565] vivid-007: Tx RGB Quantization Range: Automatic
[  646.402668][T11565] vivid-007: Transmit Mode: HDMI
[  646.407798][T11565] vivid-007: Display Present: true inactive
[  646.413826][T11565] vivid-007: Hotplug Present: 0x00000001
[  646.426504][T11565] vivid-007: RxSense Present: 0x00000001
[  646.432415][T11565] vivid-007: EDID Present: 0x00000001
[  646.437920][T11565] vivid-007: ==================  END STATUS  ==================
[  647.537458][T11584] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1141'.
[  647.946486][T11589] virtio-fs: tag </dev/md0> not found
[  649.066712][T11600] vivid-000: disconnect
[  649.576888][T11598] vivid-000: reconnect
[  650.986344][T11607] vivid-007: =================  START STATUS  =================
[  650.994198][T11607] vivid-007: Enable Output Cropping: true
[  651.000490][T11607] vivid-007: Enable Output Composing: true
[  651.006634][T11607] vivid-007: Enable Output Scaler: true
[  651.012537][T11607] vivid-007: Tx RGB Quantization Range: Automatic
[  651.019386][T11607] vivid-007: Transmit Mode: HDMI
[  651.024731][T11607] vivid-007: Display Present: true inactive
[  651.031069][T11607] vivid-007: Hotplug Present: 0x00000001
[  651.037178][T11607] vivid-007: RxSense Present: 0x00000001
[  651.043095][T11607] vivid-007: EDID Present: 0x00000001
[  651.048794][T11607] vivid-007: ==================  END STATUS  ==================
[  651.983694][T11623] virtio-fs: tag </dev/md0> not found
[  652.124393][   T23] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  652.304396][   T23] usb 8-1: Using ep0 maxpacket: 32
[  652.312403][   T23] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  652.327991][   T23] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  652.348786][   T23] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  652.360619][   T23] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  652.374735][   T23] usb 8-1: config 0 interface 0 has no altsetting 0
[  652.384548][   T23] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  652.394658][   T23] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  652.403561][   T23] usb 8-1: Product: syz
[  652.408642][   T23] usb 8-1: Manufacturer: syz
[  652.413539][   T23] usb 8-1: SerialNumber: syz
[  652.421856][   T23] usb 8-1: config 0 descriptor??
[  652.429582][   T23] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  652.440307][   T23] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  655.579380][T11648] vivid-007: =================  START STATUS  =================
[  655.587428][T11648] vivid-007: Enable Output Cropping: true
[  655.593502][T11648] vivid-007: Enable Output Composing: true
[  655.599980][T11648] vivid-007: Enable Output Scaler: true
[  655.606110][T11648] vivid-007: Tx RGB Quantization Range: Automatic
[  655.612934][T11648] vivid-007: Transmit Mode: HDMI
[  655.618486][T11648] vivid-007: Display Present: true inactive
[  655.625548][T11648] vivid-007: Hotplug Present: 0x00000001
[  655.631362][T11648] vivid-007: RxSense Present: 0x00000001
[  655.637493][T11648] vivid-007: EDID Present: 0x00000001
[  655.643050][T11648] vivid-007: ==================  END STATUS  ==================
[  655.865402][T11649] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1160'.
[  656.782908][T11655] virtio-fs: tag </dev/md0> not found
[  657.670369][T11667] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  657.677028][T11667] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  657.698184][T11667] vhci_hcd vhci_hcd.0: Device attached
[  657.718274][T11616] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110
[  657.807829][ T5882] usb 8-1: USB disconnect, device number 3
[  657.919787][ T5882] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  657.924635][  T787] vhci_hcd: vhci_device speed not set
[  658.345384][  T787] usb 43-1: new full-speed USB device number 8 using vhci_hcd
[  658.918961][T11669] vhci_hcd: connection reset by peer
[  658.948448][ T2927] vhci_hcd: stop threads
[  658.952768][ T2927] vhci_hcd: release socket
[  658.980244][T11684] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1167'.
[  659.012541][ T2927] vhci_hcd: disconnect device
[  660.001928][T11692] vivid-007: =================  START STATUS  =================
[  660.009919][T11692] vivid-007: Enable Output Cropping: true
[  660.015886][T11692] vivid-007: Enable Output Composing: true
[  660.021857][T11692] vivid-007: Enable Output Scaler: true
[  660.027624][T11692] vivid-007: Tx RGB Quantization Range: Automatic
[  660.034162][T11692] vivid-007: Transmit Mode: HDMI
[  660.039481][T11692] vivid-007: Display Present: true inactive
[  660.045695][T11692] vivid-007: Hotplug Present: 0x00000001
[  660.051459][T11692] vivid-007: RxSense Present: 0x00000001
[  660.062895][T11692] vivid-007: EDID Present: 0x00000001
[  660.068556][T11692] vivid-007: ==================  END STATUS  ==================
[  661.662063][T11702] virtio-fs: tag </dev/md0> not found
[  662.875787][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1176'.
[  662.894826][T11716] netlink: 'syz.7.1176': attribute type 5 has an invalid length.
[  662.904021][T11716] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1176'.
[  663.672998][T11726] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1179'.
[  664.022909][  T787] vhci_hcd: vhci_device speed not set
[  664.628446][T11731] vivid-007: =================  START STATUS  =================
[  664.636327][T11731] vivid-007: Enable Output Cropping: true
[  664.642214][T11731] vivid-007: Enable Output Composing: true
[  664.648238][T11731] vivid-007: Enable Output Scaler: true
[  664.653934][T11731] vivid-007: Tx RGB Quantization Range: Automatic
[  664.660617][T11731] vivid-007: Transmit Mode: HDMI
[  664.665998][T11731] vivid-007: Display Present: true inactive
[  664.672055][T11731] vivid-007: Hotplug Present: 0x00000001
[  664.677995][T11731] vivid-007: RxSense Present: 0x00000001
[  664.683783][T11731] vivid-007: EDID Present: 0x00000001
[  664.689504][T11731] vivid-007: ==================  END STATUS  ==================
[  665.873675][T11741] virtio-fs: tag </dev/md0> not found
[  666.563383][T11746] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1184'.
[  667.343057][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1186'.
[  668.447516][T11771] vivid-007: =================  START STATUS  =================
[  668.455332][T11771] vivid-007: Enable Output Cropping: true
[  668.461893][T11771] vivid-007: Enable Output Composing: true
[  668.467981][T11771] vivid-007: Enable Output Scaler: true
[  668.473788][T11771] vivid-007: Tx RGB Quantization Range: Automatic
[  668.480478][T11771] vivid-007: Transmit Mode: HDMI
[  668.485805][T11771] vivid-007: Display Present: true inactive
[  668.491890][T11771] vivid-007: Hotplug Present: 0x00000001
[  668.504110][T11771] vivid-007: RxSense Present: 0x00000001
[  668.510183][T11771] vivid-007: EDID Present: 0x00000001
[  668.515742][T11771] vivid-007: ==================  END STATUS  ==================
[  670.541583][T11788] virtio-fs: tag </dev/md0> not found
[  675.563440][T11831] syz.4.1199 (11831) used greatest stack depth: 20232 bytes left
[  676.070651][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1203'.
[  676.085206][T11846] netlink: 'syz.6.1203': attribute type 5 has an invalid length.
[  676.093200][T11846] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1203'.
[  676.268237][T11852] virtio-fs: tag </dev/md0> not found
[  677.249058][T11865] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1207'.
[  679.670596][T11890] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1212'.
[  681.519227][T11911] virtio-fs: tag </dev/md0> not found
[  684.727682][T11933] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1222'.
[  686.197989][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  686.791980][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  687.260968][T11952] overlayfs: missing 'lowerdir'
[  688.957808][T11970] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1234'.
[  689.472981][T11971] virtio-fs: tag </dev/md0> not found
[  692.385546][T11979] syz.7.1236 (11979) used greatest stack depth: 20104 bytes left
[  693.586704][T12004] overlayfs: missing 'lowerdir'
[  695.698387][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1245'.
[  695.955323][T12022] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  695.961894][T12022] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  695.972138][T12022] vhci_hcd vhci_hcd.0: Device attached
[  695.987211][T12026] virtio-fs: tag </dev/md0> not found
[  696.164394][ T5882] vhci_hcd: vhci_device speed not set
[  696.234472][ T5882] usb 43-1: new full-speed USB device number 9 using vhci_hcd
[  697.204495][T12024] vhci_hcd: connection reset by peer
[  697.211853][ T2965] vhci_hcd: stop threads
[  697.218770][ T2965] vhci_hcd: release socket
[  697.223649][ T2965] vhci_hcd: disconnect device
[  700.092476][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1259'.
[  700.125797][T12062] overlayfs: missing 'lowerdir'
[  701.404764][ T5882] vhci_hcd: vhci_device speed not set
[  701.615949][T12099] virtio-fs: tag </dev/md0> not found
[  702.214825][T12104] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  702.221394][T12104] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  702.233586][T12104] vhci_hcd vhci_hcd.0: Device attached
[  702.574700][ T5882] vhci_hcd: vhci_device speed not set
[  703.450898][T12107] vhci_hcd: connection closed
[  703.494786][ T2927] vhci_hcd: stop threads
[  703.496467][ T5882] usb 43-1: new full-speed USB device number 10 using vhci_hcd
[  703.714743][ T2927] vhci_hcd: release socket
[  703.771610][ T2927] vhci_hcd: disconnect device
[  703.888619][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1269'.
[  704.170504][T12128] overlayfs: missing 'lowerdir'
[  704.255777][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1268'.
[  704.295008][T12130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  708.395542][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1281'.
[  708.587818][T12170] overlayfs: missing 'lowerdir'
[  708.706276][ T5882] vhci_hcd: vhci_device speed not set
[  713.773984][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1286'.
[  715.759801][T12215] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1291'.
[  715.790201][T12201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  716.218433][T12219] overlayfs: missing 'lowerdir'
[  716.599292][  T787] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  716.794319][  T787] usb 5-1: Using ep0 maxpacket: 8
[  716.813901][  T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  716.848186][  T787] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  716.879733][  T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.911789][  T787] usb 5-1: config 0 descriptor??
[  717.212304][  T787] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  718.206883][T12223] Unsupported ieee802154 address type: 0
[  719.196829][   T23] usb 5-1: USB disconnect, device number 3
[  722.464325][T12269] overlayfs: missing 'workdir'
[  722.657380][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1304'.
[  723.386556][T12285] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1308'.
[  726.418768][T12312] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config
[  726.726510][T12315] overlayfs: missing 'workdir'
[  727.647010][T12325] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1321'.
[  730.058597][T12344] binder: 12343:12344 ioctl c0306201 2000000002c0 returned -14
[  730.435709][T12365] overlayfs: missing 'workdir'
[  731.794820][  T787] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  732.607560][  T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  732.814372][  T787] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  732.864395][  T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.926517][  T787] usb 6-1: config 0 descriptor??
[  733.287701][  T787] usbhid 6-1:0.0: can't add hid device: -71
[  733.297246][  T787] usbhid: probe of 6-1:0.0 failed with error -71
[  733.313647][  T787] usb 6-1: USB disconnect, device number 3
[  733.917683][T12399] binder: 12398:12399 ioctl c0306201 2000000002c0 returned -14
[  734.184536][ T5851] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  734.374322][ T5851] usb 6-1: Using ep0 maxpacket: 32
[  734.399705][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  734.421517][ T5851] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  734.456135][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.498171][ T5851] usb 6-1: config 0 descriptor??
[  734.533023][ T5851] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  734.547203][T12405] hub 1-0:1.0: USB hub found
[  734.567001][T12405] hub 1-0:1.0: 1 port detected
[  734.584713][ T5851] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  734.839978][T12411] overlayfs: missing 'lowerdir'
[  734.932995][T12418] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1343'.
[  735.044999][T12420] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  735.057509][ T5882] usb 6-1: USB disconnect, device number 4
[  735.069130][   T27] audit: type=1326 audit(1756851376.709:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12416 comm="syz.6.1343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22a2f8ebe9 code=0x0
[  735.090784][    C0] vkms_vblank_simulate: vblank timer overrun
[  735.100519][ T5882] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  735.852741][T12428] No source specified
[  735.924569][T12434] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1347'.
[  736.020758][T12437] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  739.703969][T12468] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1356'.
[  739.733580][T12469] overlayfs: missing 'lowerdir'
[  740.247645][T12467] hub 1-0:1.0: USB hub found
[  740.262734][T12467] hub 1-0:1.0: 1 port detected
[  741.855859][T12494] syz.7.1360[12494]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[  745.114897][T12525] overlayfs: missing 'lowerdir'
[  745.727611][T12533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1369'.
[  746.875339][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1372'.
[  746.916620][T12547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  747.670067][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  747.684719][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  748.635352][T12568] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  748.651784][T12568] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  749.892172][T12577] input: syz1 as /devices/virtual/input/input9
[  751.497586][T12586] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1383'.
[  753.114023][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1387'.
[  753.252950][T12607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  753.355677][T12611] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  753.370961][T12611] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  755.597535][T12633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1394'.
[  757.729512][T12657] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  757.760651][T12657] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  763.577473][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1424'.
[  763.599335][T12737] netlink: 'syz.7.1424': attribute type 5 has an invalid length.
[  763.618907][T12737] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1424'.
[  764.143975][T12747] vivid-007: =================  START STATUS  =================
[  764.177001][T12747] vivid-007: Enable Output Cropping: true
[  764.182842][T12747] vivid-007: Enable Output Composing: true
[  764.189451][T12747] vivid-007: Enable Output Scaler: true
[  764.195161][T12747] vivid-007: Tx RGB Quantization Range: Automatic
[  764.201822][T12747] vivid-007: Transmit Mode: HDMI
[  764.206880][T12747] vivid-007: Display Present: true inactive
[  764.212938][T12747] vivid-007: Hotplug Present: 0x00000001
[  764.226473][T12747] vivid-007: RxSense Present: 0x00000001
[  764.232581][T12747] vivid-007: EDID Present: 0x00000001
[  764.238383][T12747] vivid-007: ==================  END STATUS  ==================
[  764.990840][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1426'.
[  767.474986][ T5882] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  767.574353][   T28] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  767.744329][   T28] usb 7-1: device descriptor read/64, error -71
[  767.806560][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  768.044593][   T28] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  768.246858][   T28] usb 7-1: device descriptor read/64, error -71
[  768.490517][   T28] usb usb7-port1: attempt power cycle
[  768.540757][ T5882] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  768.550406][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  768.566984][ T5882] usb 5-1: config 0 descriptor??
[  768.810948][ T5882] usbhid 5-1:0.0: can't add hid device: -71
[  768.821494][ T5882] usbhid: probe of 5-1:0.0 failed with error -71
[  768.954126][ T5882] usb 5-1: USB disconnect, device number 4
[  769.074620][   T28] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  769.152674][   T28] usb 7-1: device descriptor read/8, error -71
[  769.213541][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1439'.
[  769.235355][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1438'.
[  769.251838][T12796] netlink: 'syz.5.1439': attribute type 5 has an invalid length.
[  769.260937][T12796] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1439'.
[  769.464357][   T28] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  769.474479][ T5882] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  769.517164][   T28] usb 7-1: device descriptor read/8, error -71
[  769.650963][   T28] usb usb7-port1: unable to enumerate USB device
[  769.664333][ T5882] usb 5-1: Using ep0 maxpacket: 32
[  769.716490][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  769.740911][ T5882] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  769.771332][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  769.804766][ T5882] usb 5-1: config 0 descriptor??
[  769.836280][ T5882] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  769.874503][ T5882] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  771.076559][ T5882] usb 5-1: USB disconnect, device number 5
[  771.099955][ T5882] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  771.588215][T12825] vivid-007: =================  START STATUS  =================
[  771.596026][T12825] vivid-007: Enable Output Cropping: true
[  771.601963][T12825] vivid-007: Enable Output Composing: true
[  771.608165][T12825] vivid-007: Enable Output Scaler: true
[  771.613796][T12825] vivid-007: Tx RGB Quantization Range: Automatic
[  771.620390][T12825] vivid-007: Transmit Mode: HDMI
[  771.625529][T12825] vivid-007: Display Present: true inactive
[  771.631616][T12825] vivid-007: Hotplug Present: 0x00000001
[  771.637469][T12825] vivid-007: RxSense Present: 0x00000001
[  771.650448][T12825] vivid-007: EDID Present: 0x00000001
[  771.656150][T12825] vivid-007: ==================  END STATUS  ==================
[  773.291825][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1449'.
[  773.301312][T12835] netlink: 'syz.6.1449': attribute type 5 has an invalid length.
[  773.334264][T12835] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1449'.
[  775.144870][T12386] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  775.336945][T12386] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  775.368531][T12386] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  775.378091][T12386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.398069][T12386] usb 6-1: config 0 descriptor??
[  775.490007][T12870] vivid-007: =================  START STATUS  =================
[  775.497897][T12870] vivid-007: Enable Output Cropping: true
[  775.504770][T12870] vivid-007: Enable Output Composing: true
[  775.510757][T12870] vivid-007: Enable Output Scaler: true
[  775.517088][T12870] vivid-007: Tx RGB Quantization Range: Automatic
[  775.523680][T12870] vivid-007: Transmit Mode: HDMI
[  775.529381][T12870] vivid-007: Display Present: true inactive
[  775.537001][T12870] vivid-007: Hotplug Present: 0x00000001
[  775.549483][T12870] vivid-007: RxSense Present: 0x00000001
[  775.555694][T12870] vivid-007: EDID Present: 0x00000001
[  775.561524][T12870] vivid-007: ==================  END STATUS  ==================
[  776.106895][T12386] usbhid 6-1:0.0: can't add hid device: -71
[  776.184379][T12386] usbhid: probe of 6-1:0.0 failed with error -71
[  776.194744][T12386] usb 6-1: USB disconnect, device number 5
[  776.674394][T12386] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  776.894344][T12386] usb 6-1: Using ep0 maxpacket: 32
[  776.901403][T12386] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  776.917246][T12386] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  776.947806][T12386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.006768][T12386] usb 6-1: config 0 descriptor??
[  777.028635][T12386] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  777.116715][T12386] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  778.462374][ T5882] usb 6-1: USB disconnect, device number 6
[  778.487238][ T5882] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  778.701182][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1464'.
[  778.787253][T12902] vivid-007: =================  START STATUS  =================
[  778.795461][T12902] vivid-007: Enable Output Cropping: true
[  778.801758][T12902] vivid-007: Enable Output Composing: true
[  778.807986][T12902] vivid-007: Enable Output Scaler: true
[  778.813644][T12902] vivid-007: Tx RGB Quantization Range: Automatic
[  778.820117][T12902] vivid-007: Transmit Mode: HDMI
[  778.825156][T12902] vivid-007: Display Present: true inactive
[  778.831191][T12902] vivid-007: Hotplug Present: 0x00000001
[  778.837048][T12902] vivid-007: RxSense Present: 0x00000001
[  778.842772][T12902] vivid-007: EDID Present: 0x00000001
[  778.848313][T12902] vivid-007: ==================  END STATUS  ==================
[  778.856223][ T5852] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  779.105133][ T5852] usb 7-1: Using ep0 maxpacket: 32
[  779.200873][ T5852] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  779.220928][ T5852] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  779.250586][ T5852] usb 7-1: config 0 has no interfaces?
[  779.280744][T12909] 9pnet_virtio: no channels available for device syz
[  779.288196][ T5852] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  779.302876][ T5852] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  779.311524][ T5852] usb 7-1: Product: syz
[  779.316146][ T5852] usb 7-1: Manufacturer: syz
[  779.320816][ T5852] usb 7-1: SerialNumber: syz
[  779.336471][ T5852] usb 7-1: config 0 descriptor??
[  781.204822][T12941] vivid-007: =================  START STATUS  =================
[  781.212647][T12941] vivid-007: Enable Output Cropping: true
[  781.219313][T12941] vivid-007: Enable Output Composing: true
[  781.226453][T12941] vivid-007: Enable Output Scaler: true
[  781.232216][T12941] vivid-007: Tx RGB Quantization Range: Automatic
[  781.239188][T12941] vivid-007: Transmit Mode: HDMI
[  781.244312][T12941] vivid-007: Display Present: true inactive
[  781.250359][T12941] vivid-007: Hotplug Present: 0x00000001
[  781.256350][T12941] vivid-007: RxSense Present: 0x00000001
[  781.262187][T12941] vivid-007: EDID Present: 0x00000001
[  781.267865][T12941] vivid-007: ==================  END STATUS  ==================
[  782.123488][   T28] usb 7-1: USB disconnect, device number 7
[  782.528936][T12949] 9pnet_virtio: no channels available for device syz
[  783.198297][T12969] vivid-007: =================  START STATUS  =================
[  783.206485][T12969] vivid-007: Enable Output Cropping: true
[  783.212369][T12969] vivid-007: Enable Output Composing: true
[  783.219518][T12969] vivid-007: Enable Output Scaler: true
[  783.226711][T12969] vivid-007: Tx RGB Quantization Range: Automatic
[  783.233753][T12969] vivid-007: Transmit Mode: HDMI
[  783.239486][T12969] vivid-007: Display Present: true inactive
[  783.246143][T12969] vivid-007: Hotplug Present: 0x00000001
[  783.260740][T12969] vivid-007: RxSense Present: 0x00000001
[  783.266806][T12969] vivid-007: EDID Present: 0x00000001
[  783.272445][T12969] vivid-007: ==================  END STATUS  ==================
[  784.434402][   T28] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  784.716334][   T28] usb 8-1: Using ep0 maxpacket: 32
[  784.760399][   T28] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  784.772493][   T28] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  784.790554][   T28] usb 8-1: config 0 has no interfaces?
[  784.806970][   T28] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  784.821383][   T28] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  784.846574][   T28] usb 8-1: Product: syz
[  784.855115][   T28] usb 8-1: Manufacturer: syz
[  784.863524][   T28] usb 8-1: SerialNumber: syz
[  784.878350][   T28] usb 8-1: config 0 descriptor??
[  787.807759][   T28] usb 8-1: USB disconnect, device number 4
[  788.069872][T12998] vivid-007: =================  START STATUS  =================
[  788.077784][T12998] vivid-007: Enable Output Cropping: true
[  788.083662][T12998] vivid-007: Enable Output Composing: true
[  788.089915][T12998] vivid-007: Enable Output Scaler: true
[  788.095655][T12998] vivid-007: Tx RGB Quantization Range: Automatic
[  788.102277][T12998] vivid-007: Transmit Mode: HDMI
[  788.107539][T12998] vivid-007: Display Present: true inactive
[  788.113568][T12998] vivid-007: Hotplug Present: 0x00000001
[  788.119403][T12998] vivid-007: RxSense Present: 0x00000001
[  788.128189][T12998] vivid-007: EDID Present: 0x00000001
[  788.133656][T12998] vivid-007: ==================  END STATUS  ==================
[  788.973793][T13005] 9pnet_virtio: no channels available for device syz
[  791.125872][ T5851] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  791.367262][ T5851] usb 8-1: Using ep0 maxpacket: 32
[  791.406999][ T5851] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  791.467613][ T5851] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  791.619669][ T5851] usb 8-1: config 0 has no interfaces?
[  791.806530][ T5851] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  791.884598][ T5851] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  794.804955][ T5851] usb 8-1: Product: syz
[  795.577567][ T5851] usb 8-1: Manufacturer: syz
[  795.582336][ T5851] usb 8-1: SerialNumber: syz
[  795.648239][ T5851] usb 8-1: config 0 descriptor??
[  795.711516][ T5851] usb 8-1: can't set config #0, error -71
[  795.772164][T13048] vivid-007: =================  START STATUS  =================
[  795.780334][T13048] vivid-007: Enable Output Cropping: true
[  795.786627][T13048] vivid-007: Enable Output Composing: true
[  795.792747][T13048] vivid-007: Enable Output Scaler: true
[  795.799087][T13048] vivid-007: Tx RGB Quantization Range: Automatic
[  795.805847][T13048] vivid-007: Transmit Mode: HDMI
[  795.811088][T13048] vivid-007: Display Present: true inactive
[  795.817607][T13048] vivid-007: Hotplug Present: 0x00000001
[  795.828992][T13048] vivid-007: RxSense Present: 0x00000001
[  795.834987][T13048] vivid-007: EDID Present: 0x00000001
[  795.841204][T13048] vivid-007: ==================  END STATUS  ==================
[  796.634601][ T5851] usb 8-1: USB disconnect, device number 5
[  799.184310][   T28] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  800.715672][   T28] usb 6-1: Using ep0 maxpacket: 32
[  806.970259][   T28] usb 6-1: unable to read config index 0 descriptor/start: -110
[  806.978049][   T28] usb 6-1: can't read configurations, error -110
[  807.175244][   T28] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  809.242948][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  809.250301][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  809.330107][T13097] vivid-007: =================  START STATUS  =================
[  809.337959][T13097] vivid-007: Enable Output Cropping: true
[  809.343964][T13097] vivid-007: Enable Output Composing: true
[  809.350087][T13097] vivid-007: Enable Output Scaler: true
[  809.355905][T13097] vivid-007: Tx RGB Quantization Range: Automatic
[  809.362554][T13097] vivid-007: Transmit Mode: HDMI
[  809.367885][T13097] vivid-007: Display Present: true inactive
[  809.373928][T13097] vivid-007: Hotplug Present: 0x00000001
[  809.386996][T13097] vivid-007: RxSense Present: 0x00000001
[  809.393339][T13097] vivid-007: EDID Present: 0x00000001
[  809.399019][T13097] vivid-007: ==================  END STATUS  ==================
[  810.689097][T13113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'.
[  810.857022][T13121] hub 1-0:1.0: USB hub found
[  810.896604][T13121] hub 1-0:1.0: 1 port detected
[  812.441173][T13132] vivid-007: =================  START STATUS  =================
[  812.449498][T13132] vivid-007: Enable Output Cropping: true
[  812.455870][T13132] vivid-007: Enable Output Composing: true
[  812.461818][T13132] vivid-007: Enable Output Scaler: true
[  812.467564][T13132] vivid-007: Tx RGB Quantization Range: Automatic
[  812.474123][T13132] vivid-007: Transmit Mode: HDMI
[  812.479207][T13132] vivid-007: Display Present: true inactive
[  812.485330][T13132] vivid-007: Hotplug Present: 0x00000001
[  812.491048][T13132] vivid-007: RxSense Present: 0x00000001
[  812.496929][T13132] vivid-007: EDID Present: 0x00000001
[  812.502452][T13132] vivid-007: ==================  END STATUS  ==================
[  813.204358][ T5851] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  813.514272][ T5851] usb 6-1: Using ep0 maxpacket: 32
[  814.205964][ T5851] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  814.214590][ T5851] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  814.225893][ T5851] usb 6-1: config 0 interface 0 has no altsetting 0
[  814.236627][ T5851] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  814.250739][ T5851] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  814.260325][ T5851] usb 6-1: Product: syz
[  814.264622][ T5851] usb 6-1: Manufacturer: syz
[  814.270334][ T5851] usb 6-1: SerialNumber: syz
[  814.327463][ T5851] usb 6-1: config 0 descriptor??
[  814.337401][ T5851] ldusb 6-1:0.0: Interrupt in endpoint not found
[  816.538495][ T5851] usb 6-1: USB disconnect, device number 9
[  816.839876][T13150] input: syz1 as /devices/virtual/input/input10
[  820.010781][T12386] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  820.294696][T12386] usb 8-1: Using ep0 maxpacket: 32
[  820.324475][T12386] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  820.353428][T12386] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  820.378927][T12386] usb 8-1: config 0 interface 0 has no altsetting 0
[  820.395757][T12386] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  820.408930][T12386] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  820.424301][T12386] usb 8-1: Product: syz
[  820.431977][T12386] usb 8-1: Manufacturer: syz
[  820.443274][T12386] usb 8-1: SerialNumber: syz
[  820.457644][T12386] usb 8-1: config 0 descriptor??
[  820.508509][T12386] ldusb 8-1:0.0: Interrupt in endpoint not found
[  822.970576][T12386] usb 8-1: USB disconnect, device number 6
[  823.305833][T13196] 9pnet_virtio: no channels available for device syz
[  825.624331][   T23] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  827.095607][   T23] usb 8-1: Using ep0 maxpacket: 32
[  827.115355][   T23] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  827.144275][   T23] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  827.194311][   T23] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  827.224831][   T23] usb 8-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144
[  827.258411][   T23] usb 8-1: config 0 interface 0 has no altsetting 0
[  827.281567][   T23] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  827.347841][T13237] vivid-007: =================  START STATUS  =================
[  827.356440][T13237] vivid-007: Enable Output Cropping: true
[  827.362439][T13237] vivid-007: Enable Output Composing: true
[  827.368601][T13237] vivid-007: Enable Output Scaler: true
[  827.374418][T13237] vivid-007: Tx RGB Quantization Range: Automatic
[  827.381141][T13237] vivid-007: Transmit Mode: HDMI
[  827.386302][T13237] vivid-007: Display Present: true inactive
[  827.392305][T13237] vivid-007: Hotplug Present: 0x00000001
[  827.406733][T13237] vivid-007: RxSense Present: 0x00000001
[  827.412601][T13237] vivid-007: EDID Present: 0x00000001
[  827.418423][T13237] vivid-007: ==================  END STATUS  ==================
[  828.120256][   T23] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  828.130158][   T23] usb 8-1: Product: syz
[  828.134416][   T23] usb 8-1: Manufacturer: syz
[  828.139019][   T23] usb 8-1: SerialNumber: syz
[  828.252760][   T23] usb 8-1: config 0 descriptor??
[  828.275942][   T23] ldusb 8-1:0.0: Interrupt in endpoint not found
[  828.534580][ T5831] usb 8-1: USB disconnect, device number 7
[  828.882807][T13257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1559'.
[  828.896217][T13257] netlink: 'syz.6.1559': attribute type 5 has an invalid length.
[  828.904609][T13257] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1559'.
[  829.684547][T13261] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1562'.
[  829.789367][T13259] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1561'.
[  830.243659][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1562'.
[  830.340814][T13263] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  830.386345][T13263] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  832.545227][T13263] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  832.560569][T13263] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  832.623356][T13263] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  832.633526][T13263] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  832.893720][T13263] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  833.776571][T13263] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  834.198720][T13263] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  834.246735][T13263] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  834.270869][T13263] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  834.279421][T13263] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  834.365159][T13285] vivid-007: =================  START STATUS  =================
[  834.372949][T13285] vivid-007: Enable Output Cropping: true
[  834.378996][T13285] vivid-007: Enable Output Composing: true
[  834.384956][T13285] vivid-007: Enable Output Scaler: true
[  834.390609][T13285] vivid-007: Tx RGB Quantization Range: Automatic
[  834.397212][T13285] vivid-007: Transmit Mode: HDMI
[  834.402414][T13285] vivid-007: Display Present: true inactive
[  834.408705][T13285] vivid-007: Hotplug Present: 0x00000001
[  834.414505][T13285] vivid-007: RxSense Present: 0x00000001
[  834.428668][T13285] vivid-007: EDID Present: 0x00000001
[  834.434379][T13285] vivid-007: ==================  END STATUS  ==================
[  835.137845][T13263] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  835.149424][T13263] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  835.173395][T13263] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  835.192571][T13263] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  836.144398][    T8] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  836.364300][    T8] usb 8-1: Using ep0 maxpacket: 32
[  836.371572][    T8] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  836.380264][    T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  836.417945][    T8] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  836.430577][    T8] usb 8-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144
[  836.444690][    T8] usb 8-1: config 0 interface 0 has no altsetting 0
[  836.464379][    T8] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  836.476967][    T8] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  836.508475][    T8] usb 8-1: Product: syz
[  836.648204][    T8] usb 8-1: Manufacturer: syz
[  837.204321][    T8] usb 8-1: SerialNumber: syz
[  837.251835][    T8] usb 8-1: config 0 descriptor??
[  837.282406][    T8] ldusb 8-1:0.0: Interrupt in endpoint not found
[  839.495165][T13317] binder: 13316:13317 ioctl c0306201 200000000080 returned -14
[  839.546486][   T28] usb 8-1: USB disconnect, device number 8
[  839.793589][T13328] vivid-007: =================  START STATUS  =================
[  839.803852][T13328] vivid-007: Enable Output Cropping: true
[  839.809833][T13328] vivid-007: Enable Output Composing: true
[  839.815932][T13328] vivid-007: Enable Output Scaler: true
[  839.821624][T13328] vivid-007: Tx RGB Quantization Range: Automatic
[  839.828620][T13328] vivid-007: Transmit Mode: HDMI
[  839.834310][T13328] vivid-007: Display Present: true inactive
[  839.840592][T13328] vivid-007: Hotplug Present: 0x00000001
[  839.853158][T13328] vivid-007: RxSense Present: 0x00000001
[  839.874785][T13328] vivid-007: EDID Present: 0x00000001
[  839.880489][T13328] vivid-007: ==================  END STATUS  ==================
[  840.720402][T13329] hub 1-0:1.0: USB hub found
[  840.794721][T13329] hub 1-0:1.0: 1 port detected
[  845.244344][   T23] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  846.103907][   T23] usb 7-1: Using ep0 maxpacket: 32
[  846.132844][   T23] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  846.208648][   T23] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  846.234030][   T23] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  846.246259][   T23] usb 7-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144
[  846.267886][   T23] usb 7-1: config 0 interface 0 has no altsetting 0
[  846.338333][   T23] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  846.382873][   T23] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  846.423715][   T23] usb 7-1: Product: syz
[  846.444297][   T23] usb 7-1: Manufacturer: syz
[  846.448962][   T23] usb 7-1: SerialNumber: syz
[  846.536859][   T23] usb 7-1: config 0 descriptor??
[  846.571092][   T23] ldusb 7-1:0.0: Interrupt in endpoint not found
[  849.274279][   T23] usb 7-1: USB disconnect, device number 8
[  853.667091][T13402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1598'.
[  855.034500][ T5831] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  856.194368][ T5831] usb 8-1: Using ep0 maxpacket: 32
[  856.215848][ T5831] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  856.375597][ T5831] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  856.393670][ T5831] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  856.431053][ T5831] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  856.538453][ T5831] usb 8-1: config 0 interface 0 has no altsetting 0
[  856.565507][ T5831] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  856.586092][ T5831] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  856.598030][ T5831] usb 8-1: Product: syz
[  857.419104][ T5831] usb 8-1: Manufacturer: syz
[  857.471693][ T5831] usb 8-1: SerialNumber: syz
[  857.477915][ T5831] usb 8-1: config 0 descriptor??
[  857.491127][ T5831] ldusb 8-1:0.0: Interrupt in endpoint not found
[  859.160549][ T5851] usb 8-1: USB disconnect, device number 9
[  861.199025][T13460] netlink: 'syz.5.1612': attribute type 4 has an invalid length.
[  861.518437][T13462] netlink: 'syz.5.1612': attribute type 4 has an invalid length.
[  861.906018][T13466] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  865.497815][ T5851] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  866.004647][ T5851] usb 6-1: Using ep0 maxpacket: 32
[  866.071051][ T5851] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  866.892779][ T5851] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  866.911488][ T5851] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  866.922099][ T5851] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  866.936203][ T5851] usb 6-1: config 0 interface 0 has no altsetting 0
[  866.953195][ T5851] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  866.976468][ T5851] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  867.003312][ T5851] usb 6-1: Product: syz
[  867.026003][ T5851] usb 6-1: Manufacturer: syz
[  867.099483][ T5851] usb 6-1: SerialNumber: syz
[  867.169682][ T5851] usb 6-1: config 0 descriptor??
[  867.178132][ T5851] ldusb 6-1:0.0: Interrupt in endpoint not found
[  868.534322][ T5838] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  869.336517][T12386] usb 6-1: USB disconnect, device number 10
[  869.486733][ T5838] usb 5-1: Using ep0 maxpacket: 8
[  871.344611][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  871.357549][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  871.395087][ T5838] usb 5-1: unable to read config index 0 descriptor/all
[  871.423874][ T5838] usb 5-1: can't read configurations, error -61
[  871.606691][ T5838] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  873.124402][ T5838] usb 5-1: device descriptor read/64, error -71
[  873.285627][ T5838] usb usb5-port1: attempt power cycle
[  874.996894][ T5831] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  875.086159][T13548] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  875.224430][ T5831] usb 7-1: Using ep0 maxpacket: 32
[  875.241987][ T5831] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  875.281855][ T5831] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  875.404909][ T5831] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  875.467802][ T5831] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  875.498870][ T5831] usb 7-1: config 0 interface 0 has no altsetting 0
[  875.540543][ T5831] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  875.554446][ T5831] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  875.564510][ T5831] usb 7-1: Product: syz
[  875.568911][ T5831] usb 7-1: Manufacturer: syz
[  875.574118][ T5831] usb 7-1: SerialNumber: syz
[  875.589973][ T5831] usb 7-1: config 0 descriptor??
[  875.621846][ T5831] ldusb 7-1:0.0: Interrupt in endpoint not found
[  878.488769][ T5831] usb 7-1: USB disconnect, device number 9
[  880.414499][ T5831] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  880.701479][ T5831] usb 6-1: Using ep0 maxpacket: 32
[  880.727497][ T5831] usb 6-1: no configurations
[  880.860576][ T5831] usb 6-1: can't read configurations, error -22
[  881.014240][ T5838] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  881.044367][ T5831] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  881.934306][ T5831] usb 6-1: Using ep0 maxpacket: 32
[  881.940546][ T5831] usb 6-1: no configurations
[  881.945730][ T5831] usb 6-1: can't read configurations, error -22
[  881.984713][ T5831] usb usb6-port1: attempt power cycle
[  882.074455][ T5838] usb 7-1: Using ep0 maxpacket: 32
[  882.242997][ T5838] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  882.252367][ T5838] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  882.264106][ T5838] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  882.506484][ T5838] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  882.516909][ T5838] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  882.530591][ T5838] usb 7-1: config 0 interface 0 has no altsetting 0
[  882.541893][ T5838] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  882.554221][ T5838] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  882.562986][ T5838] usb 7-1: Product: syz
[  882.567551][ T5838] usb 7-1: Manufacturer: syz
[  882.632186][ T5838] usb 7-1: SerialNumber: syz
[  882.656275][ T5838] usb 7-1: config 0 descriptor??
[  882.667594][ T5838] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  882.684433][ T5838] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  882.884969][T13581] ldusb 7-1:0.0: Couldn't submit interrupt_in_urb -90
[  882.904921][ T5831] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  883.154594][ T5831] usb 6-1: device not accepting address 13, error -71
[  883.749064][T13602] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  884.034124][ T5851] usb 7-1: USB disconnect, device number 10
[  884.041749][ T5851] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  889.065428][T13628] hub 1-0:1.0: USB hub found
[  889.071316][T13628] hub 1-0:1.0: 1 port detected
[  889.334357][   T28] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  889.554750][   T28] usb 6-1: Using ep0 maxpacket: 32
[  889.576447][   T28] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  889.589162][   T28] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  889.600820][   T28] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  889.612242][   T28] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  889.622488][   T28] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  889.645633][   T28] usb 6-1: config 0 interface 0 has no altsetting 0
[  889.664600][   T28] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  889.674362][   T28] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  889.682965][   T28] usb 6-1: Product: syz
[  889.692726][   T28] usb 6-1: Manufacturer: syz
[  889.703554][   T28] usb 6-1: SerialNumber: syz
[  889.719223][   T28] usb 6-1: config 0 descriptor??
[  889.733311][   T28] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  889.748863][   T28] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  889.965608][T13632] ldusb 6-1:0.0: Couldn't submit interrupt_in_urb -90
[  892.796851][   T28] usb 6-1: USB disconnect, device number 15
[  892.817974][T13655] overlayfs: failed to resolve './file1': -2
[  892.860387][   T28] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  896.300242][T13685] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  896.400379][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'.
[  896.411121][T13687] netlink: 'syz.4.1667': attribute type 5 has an invalid length.
[  896.464414][T13687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1667'.
[  896.596130][T13687] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  896.645591][T13687] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  896.655097][T13687] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  896.712529][T13687] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  896.773663][T13687] geneve2: entered promiscuous mode
[  896.814809][T13687] geneve2: entered allmulticast mode
[  898.317137][T13702] overlayfs: failed to resolve './file1': -2
[  901.505129][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1685'.
[  901.514067][T13739] netlink: 'syz.5.1685': attribute type 5 has an invalid length.
[  901.522671][T13739] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1685'.
[  901.861630][T13748] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  901.952969][T13746] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9)
[  901.959812][T13746] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  902.315405][T13746] vhci_hcd vhci_hcd.0: Device attached
[  902.514306][ T5838] vhci_hcd: vhci_device speed not set
[  902.570362][T13749] vhci_hcd: connection closed
[  902.580493][ T1070] vhci_hcd: stop threads
[  902.611271][ T1070] vhci_hcd: release socket
[  902.627106][ T1070] vhci_hcd: disconnect device
[  902.664378][ T5838] usb 47-1: new full-speed USB device number 6 using vhci_hcd
[  902.671934][ T5838] usb 47-1: enqueue for inactive port 0
[  902.768686][ T5838] vhci_hcd: vhci_device speed not set
[  904.726816][T13774] hub 1-0:1.0: USB hub found
[  904.741974][T13774] hub 1-0:1.0: 1 port detected
[  904.870784][T13781] tipc: Can't bind to reserved service type 0
[  906.144558][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1699'.
[  906.153549][T13788] netlink: 'syz.6.1699': attribute type 5 has an invalid length.
[  906.161809][T13788] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1699'.
[  906.188040][T13790] virtio-fs: tag </dev/md0> not found
[  907.637176][T13801] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9)
[  907.643761][T13801] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  907.688054][T13801] vhci_hcd vhci_hcd.0: Device attached
[  907.944421][    T9] vhci_hcd: vhci_device speed not set
[  908.014538][    T9] usb 47-1: new full-speed USB device number 7 using vhci_hcd
[  908.288726][T13812] fuse: Bad value for 'fd'
[  908.328223][T13813] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  908.348479][T13804] vhci_hcd: connection reset by peer
[  908.364533][T11032] vhci_hcd: stop threads
[  908.377821][T11032] vhci_hcd: release socket
[  908.398911][T11032] vhci_hcd: disconnect device
[  911.344572][T13836] virtio-fs: tag </dev/md0> not found
[  911.559516][T13847] fuse: Bad value for 'fd'
[  911.722925][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1714'.
[  911.761658][T13849] netlink: 'syz.5.1714': attribute type 5 has an invalid length.
[  911.861488][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1714'.
[  913.154431][    T9] vhci_hcd: vhci_device speed not set
[  914.415895][T13882] fuse: Bad value for 'fd'
[  915.554085][T13891] virtio-fs: tag </dev/md0> not found
[  915.563666][T13892] 9pnet_virtio: no channels available for device syz
[  916.378171][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1729'.
[  916.387230][T13902] netlink: 'syz.4.1729': attribute type 5 has an invalid length.
[  916.395112][T13902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1729'.
[  922.940996][T13954] virtio-fs: tag </dev/md0> not found
[  923.191418][T13958] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1744'.
[  929.875218][T14008] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1754'.
[  932.078787][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  932.096222][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  932.301501][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1757'.
[  935.638106][T14053] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1765'.
[  935.670628][   T27] audit: type=1804 audit(1756851577.269:28): pid=14042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1763" name="/newroot/365/bus/bus" dev="overlay" ino=1981 res=1 errno=0
[  935.692165][   T27] audit: type=1804 audit(1756851577.269:29): pid=14042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1763" name="/newroot/365/bus/bus" dev="overlay" ino=1981 res=1 errno=0
[  940.124750][   T27] audit: type=1804 audit(1756851581.759:30): pid=14097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1776" name="/newroot/359/bus/bus" dev="overlay" ino=1956 res=1 errno=0
[  940.193741][   T27] audit: type=1804 audit(1756851581.799:31): pid=14097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1776" name="/newroot/359/bus/bus" dev="overlay" ino=1956 res=1 errno=0
[  942.680387][T14139] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0)
[  943.841433][T14155] binder: 14152:14155 ioctl c0306201 0 returned -14
[  943.911593][T14155] binder: 14152:14155 ioctl c0306201 200000000240 returned -11
[  944.004963][T14157] binder: 14152:14157 ioctl c0306201 2000000002c0 returned -14
[  948.351783][T14197] binder: 14195:14197 ioctl c0306201 200000000240 returned -11
[  948.374104][T14197] binder: 14195:14197 ioctl c0306201 2000000002c0 returned -14
[  948.605067][T14200] fuse: Bad value for 'fd'
[  950.007719][T14224] 9pnet_virtio: no channels available for device syz
[  950.417658][T14224] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  950.436072][T14224] overlayfs: missing 'lowerdir'
[  950.604949][T14235] binder: 14234:14235 ioctl c0306201 200000000240 returned -11
[  950.613051][T14235] binder: 14234:14235 ioctl c0306201 2000000002c0 returned -14
[  950.811492][T14244] 9pnet_virtio: no channels available for device syz
[  950.947494][T14241] syz.6.1811: attempt to access beyond end of device
[  950.947494][T14241] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  952.581033][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1817'.
[  952.631164][T14270] netlink: 'syz.7.1817': attribute type 5 has an invalid length.
[  952.639132][T14270] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1817'.
[  954.890354][T14289] binder: 14288:14289 ioctl c0306201 200000000240 returned -11
[  954.904700][T14289] binder: 14288:14289 ioctl c0306201 2000000002c0 returned -14
[  954.984287][T14294] 9pnet_virtio: no channels available for device syz
[  957.702826][T14328] netlink: 'syz.5.1829': attribute type 10 has an invalid length.
[  958.691041][T14328] macvlan1: entered allmulticast mode
[  960.012038][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1832'.
[  960.022764][T14348] netlink: 'syz.4.1832': attribute type 5 has an invalid length.
[  960.031333][T14348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1832'.
[  960.071208][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.080734][T14346] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1833'.
[  960.097763][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.197230][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.223324][T14346] batadv1: entered allmulticast mode
[  960.231134][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.250932][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.267820][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.289370][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.323675][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.358998][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.372044][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.389119][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.407411][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.441641][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.467966][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.493253][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.531499][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.545991][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.555755][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.565949][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.576086][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.585689][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.597418][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.636165][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.644104][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.722559][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.772268][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.805991][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.815295][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.823041][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.837387][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.846704][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.869174][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  960.893109][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  961.688535][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  961.716575][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  961.744203][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  961.764210][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  961.835617][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  961.854259][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  961.874201][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  961.892259][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  961.914242][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  961.939335][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  961.964234][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  961.977693][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  961.990043][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  961.998151][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  962.010327][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  962.018484][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  962.026704][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  962.034865][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  962.042711][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  962.071474][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  962.144783][ T5851] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  964.361735][T14358] fido_id[14358]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  967.843717][T14401] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1850'.
[  969.698549][T14423] overlayfs: missing 'lowerdir'
[  969.794934][T14426] input: syz1 as /devices/virtual/input/input13
[  973.150882][T14464] overlayfs: missing 'lowerdir'
[  973.711501][T14481] input: syz1 as /devices/virtual/input/input14
[  976.948950][T14499] virtio-fs: tag </dev/md0> not found
[  978.209411][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1882'.
[  982.592772][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1886'.
[  982.644391][T14533] netlink: 'syz.6.1886': attribute type 5 has an invalid length.
[  982.652986][T14533] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1886'.
[  982.877354][T14549] virtio-fs: tag </dev/md0> not found
[  983.179261][T14552] binder: 14551:14552 ioctl c0306201 200000000240 returned -11
[  983.261339][T14556] binder: 14551:14556 ioctl c0306201 2000000002c0 returned -14
[  983.636694][T14563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1895'.
[  984.010276][T14568] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  984.122569][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'.
[  984.158228][T14569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  987.034042][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1902'.
[  987.057378][T14582] netlink: 'syz.7.1902': attribute type 5 has an invalid length.
[  987.069394][T14582] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1902'.
[  987.239068][T14590] binder: 14589:14590 ioctl c0306201 200000000240 returned -11
[  987.251417][T14590] binder: 14589:14590 ioctl c0306201 2000000002c0 returned -14
[  987.490698][T14595] virtio-fs: tag </dev/md0> not found
[  987.686706][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1907'.
[  989.696255][T14623] binder: 14622:14623 ioctl c0306201 200000000240 returned -11
[  989.713937][T14623] binder: 14622:14623 ioctl c0306201 2000000002c0 returned -14
[  991.057539][T14650] hub 1-0:1.0: USB hub found
[  991.124226][T14650] hub 1-0:1.0: 1 port detected
[  992.181596][T14660] syz.6.1924: attempt to access beyond end of device
[  992.181596][T14660] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  992.405593][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1925'.
[  993.414651][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  993.421132][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  996.820068][T14701] binder: 14699:14701 ioctl c0306201 200000000240 returned -11
[  996.831809][T14701] binder: 14699:14701 ioctl c0306201 2000000002c0 returned -14
[  996.913628][T14703] syz.6.1937: attempt to access beyond end of device
[  996.913628][T14703] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1000.197773][T14731] binder: 14730:14731 ioctl c0306201 200000000240 returned -11
[ 1000.206043][T14731] binder: 14730:14731 ioctl c0306201 2000000002c0 returned -14
[ 1001.169027][T14729] syz.5.1946 (14729) used greatest stack depth: 19848 bytes left
[ 1001.854328][T12386] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1002.116374][T12386] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1002.171901][T12386] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1002.218555][T12386] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1002.292265][T14763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1956'.
[ 1002.314408][T12386] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1002.761740][T14749] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1002.782439][T12386] usb 8-1: Quirk or no altest; falling back to MIDI 1.0
[ 1002.867946][T14763] netlink: 'syz.4.1956': attribute type 5 has an invalid length.
[ 1002.882833][T14763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1956'.
[ 1003.039762][T14782] binder: BINDER_SET_CONTEXT_MGR already set
[ 1003.046445][T14782] binder: 14781:14782 ioctl 4018620d 200000000040 returned -16
[ 1003.056899][T14782] binder: 14781:14782 ioctl c0306201 0 returned -14
[ 1003.063907][T14782] binder: 14781:14782 ioctl c0306201 2000000002c0 returned -14
[ 1003.231928][ T5831] usb 8-1: USB disconnect, device number 10
[ 1003.889679][T14789] virtio-fs: tag </dev/md0> not found
[ 1004.507729][T14803] hub 1-0:1.0: USB hub found
[ 1004.553857][T14803] hub 1-0:1.0: 1 port detected
[ 1005.687133][T14815] binder: 14814:14815 ioctl c0306201 0 returned -14
[ 1005.739944][T14815] binder: 14814:14815 ioctl c0306201 2000000002c0 returned -14
[ 1005.799576][T14817] fuse: Bad value for 'group_id'
[ 1006.234898][T12386] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1006.446017][T12386] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1006.456268][T12386] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1006.471946][T12386] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1006.487914][T12386] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1006.508695][T12386] usb 7-1: config 0 descriptor??
[ 1006.519874][T12386] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1006.734742][T12386] usb 7-1: USB disconnect, device number 11
[ 1007.376368][T12386] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1007.514755][T14839] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9)
[ 1007.521297][T14839] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1007.546161][T14839] vhci_hcd vhci_hcd.0: Device attached
[ 1007.724218][T12386] usb 7-1: Using ep0 maxpacket: 32
[ 1007.764559][ T5882] vhci_hcd: vhci_device speed not set
[ 1007.782144][T12386] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1007.812464][T14846] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1976'.
[ 1007.822098][T12386] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1007.835399][T12386] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[ 1007.850419][T12386] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1007.851038][ T5882] usb 47-1: new full-speed USB device number 8 using vhci_hcd
[ 1007.875613][T12386] usb 7-1: config 0 descriptor??
[ 1007.911422][T12386] ldusb 7-1:0.0: Interrupt in endpoint not found
[ 1007.956074][T12386] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1007.963471][T14843] vhci_hcd: connection reset by peer
[ 1007.979247][ T2927] vhci_hcd: stop threads
[ 1007.983604][ T2927] vhci_hcd: release socket
[ 1007.993041][ T2927] vhci_hcd: disconnect device
[ 1008.117994][T12386] usb 7-1: USB disconnect, device number 12
[ 1008.876828][T14857] syz.6.1980: attempt to access beyond end of device
[ 1008.876828][T14857] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1009.965301][T14868] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[ 1010.985097][T14882] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1987'.
[ 1012.878257][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1991'.
[ 1012.925814][T14899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1013.026583][ T5882] vhci_hcd: vhci_device speed not set
[ 1014.427315][T14915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1995'.
[ 1014.444619][T14915] netlink: 'syz.5.1995': attribute type 5 has an invalid length.
[ 1014.452821][T14915] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1995'.
[ 1015.044337][T14927] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[ 1016.344713][T14937] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2004'.
[ 1019.152530][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2013'.
[ 1019.164795][T14974] netlink: 'syz.7.2013': attribute type 5 has an invalid length.
[ 1019.172673][T14974] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2013'.
[ 1019.697786][T14981] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[ 1019.751798][T14984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2019'.
[ 1021.667918][T14999] hub 1-0:1.0: USB hub found
[ 1021.674483][T14999] hub 1-0:1.0: 1 port detected
[ 1021.868965][T15007] loop7: detected capacity change from 0 to 7
[ 1021.913891][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1021.923424][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1021.933164][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1021.942427][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1021.951067][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1021.960399][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1021.968988][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1021.978226][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1021.988594][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1021.998337][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1022.015574][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1022.024877][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1022.034043][T15008] 
[ 1022.036378][T15008] ================================================
[ 1022.042890][T15008] WARNING: lock held when returning to user space!
[ 1022.049407][T15008] syzkaller #0 Not tainted
[ 1022.053803][T15008] ------------------------------------------------
[ 1022.060292][T15008] syz.7.2025/15008 is leaving the kernel with locks still held!
[ 1022.067915][T15008] 1 lock held by syz.7.2025/15008:
[ 1022.073040][T15008]  #0: ffff888021bbab60 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_block_size+0x7c/0x480
[ 1022.084759][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1022.093992][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1022.139287][T15007] ldm_validate_partition_table(): Disk read failed.
[ 1022.163984][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1022.175785][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1022.187252][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1022.197002][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1022.213985][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1022.224660][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1022.236937][T15007] Dev loop7: unable to read RDB block 0
[ 1022.246172][T15007]  loop7: unable to read partition table
[ 1022.273108][T15007] loop7: partition table beyond EOD, truncated
[ 1022.294191][T15007] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)