last executing test programs:

3m44.864724934s ago: executing program 3 (id=267):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c95239c, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x2, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffe, 0xa, 0xfffffff5, 0xffffcadb, 0x3, 0x0, 0x0, 0x4, 0x8000000, 0xdffffffa]})
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x9, 0x10}, 0xc)
r4 = syz_open_dev$mouse(&(0x7f0000000180), 0x2, 0x101000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) (async, rerun: 64)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async, rerun: 64)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4)

3m44.706794385s ago: executing program 3 (id=268):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0)
r1 = socket$inet(0x2, 0x4000000000000007, 0xfff)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)

3m44.641390082s ago: executing program 3 (id=269):
prlimit64(0x0, 0x9, 0x0, 0x0)
futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0xa, 0x4)
r1 = syz_open_dev$dri(0x0, 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x6e, &(0x7f0000000240)=""/110})
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4000000)
io_setup(0x6, 0x0)
io_getevents(0x0, 0x6, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3m44.637031745s ago: executing program 3 (id=270):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x35, &(0x7f0000000980)={0x0, 0x0}, 0x10)
ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x3)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
pidfd_send_signal(r7, 0x1, 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x3)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000000c0)={r7, 0x0, 0x5, 0x10001})
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x80, 0x702, 0x2, 0x4, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x26a, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}})
r9 = socket$packet(0x11, 0x3, 0x300)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r11=>0x0})
sendto$packet(r10, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0xff}, 0x14)
ioctl$TIOCEXCL(r8, 0x540c)
ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x1c, 0x2, 0x1c6, &(0x7f00000004c0)="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"})
r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed9bebbbd, 0xa0011, r12, 0x52fbb000)

3m44.493212971s ago: executing program 3 (id=273):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}]}, 0x3c}}, 0x0) (async)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000))

3m44.329255947s ago: executing program 3 (id=279):
r0 = socket(0xa, 0x2400000001, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x45, 0x0, &(0x7f00000000c0))
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0)

3m44.233057139s ago: executing program 32 (id=279):
r0 = socket(0xa, 0x2400000001, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x45, 0x0, &(0x7f00000000c0))
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0)

11.734827307s ago: executing program 4 (id=2469):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000)
mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x200008, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) (async)
mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x200008, 0x0) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100)) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) (async)

11.633156129s ago: executing program 4 (id=2471):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xd83b9000) (async)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="24d337cc5122c8085776a7c4548f4012fdeee2b35eda82b094cbdb41e39d7b99a8ee7310e3c642", @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, '.\x02\x00'}) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x40, 0x2e, 0x74, {0x74, 0x22, "ea932721dd1fc93c8806b3ab1d99b02c891d52b553a62b4debbfda0fe99443944138f86474f3fdfdbdc402c8ad4498c12ba338d3ffb3abfdb1641320c956c0b5e09eefe3709eb55b4c82478d831be2c07cb6b79186729af53f33b73031bad8b4cd979e5acd763cd33e5ce06ec724345672a6"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x40, 0x17, 0x25, "0524f827e9251c8f8a93904a564c9d8512c0e6ca30841b9257cff679318e8bc8ac3d298a82"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4e}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xb4}}) (async)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Di', 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)
mlock(&(0x7f00009b0000/0x4000)=nil, 0x4000)

8.24103563s ago: executing program 4 (id=2503):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x2)
write$FUSE_NOTIFY_STORE(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRESOCT=r2], 0x28)
r3 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r3})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8})
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xe8, 0xf00)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000100)={0x3, r3})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd})
timer_create(0x6, &(0x7f00000001c0)={0x0, 0x3f, 0x0, @thr={&(0x7f0000000240)="f2ecb5549d01567c1d061f23e327e4e0d00570aaa42353a26e23a1a667e3bf1b45013232915a9d21613b597e1e5aba94a59d299291abc071765d4dc7ebf93b1b374e53050bbd0163f529d3dca6c0f918b3a7b357e0194d9e6337169c095906afdc0c941dfe935b0c2bca94ad7ce41b9c95eaadf1c31799062245f6b19cb32968ea73ee59a9a3bb1adc8d648c77bd06619ac7d06bde04ea820efe73d7fe83dc44ce3696add1b66703a1e863dd299212c70adb0a79137ce122af70b5b04b0eb1e34eee01466734275c1252470a91f6d9854187017abb3b87b62173bc6f7f04a29a1f0950a37416934ad42a", &(0x7f0000000180)="8cefab3b2806ca526cc700dfe693e29ee957d234ac6df9575fec916fb0c04fc1c67d4189e5a654423f71fb486e33354f3cae"}}, &(0x7f0000000340))
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
listen(r8, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
accept4(r8, 0x0, 0x0, 0x400000000000000)
socket$vsock_stream(0x28, 0x1, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x10001}, 0x0, &(0x7f0000000180)={0x1ff, 0x1000000000, 0x8, 0x2a03, 0x4000400000000000, 0xfffffffffffffffc, 0x6a1}, 0x0, 0x0)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r9, 0x5708e000)

3.988207431s ago: executing program 4 (id=2529):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup2(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x800010, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001b80), 0x0, 0x0)
ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000001bc0))
fcntl$dupfd(r0, 0x0, r0) (async)
r2 = fcntl$dupfd(r0, 0x0, r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2208}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2208}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r4, @ANYBLOB="040229bd7000fbdbdf2507000000080001004e00000008000300", @ANYRES32, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4005000}, 0x40048c1)
chroot(&(0x7f0000000100)='./file0\x00') (async)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00')
fadvise64(r0, 0x7, 0x1ff, 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x11ff, 0x3331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "1a29b98c"}]}}, 0x0}, 0x0)
write$dsp(r7, &(0x7f00000001c0)='\\', 0x1) (async)
write$dsp(r7, &(0x7f00000001c0)='\\', 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x2}, @local, 0x7, 0xd, 0x4, 0x500, 0xc, 0x23, r11})
read$eventfd(r6, &(0x7f0000000340), 0x8)

3.97076208s ago: executing program 4 (id=2530):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='decodes i'], 0xf)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fadvise64(r1, 0x92, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r1, 0xa4717000)

3.697035983s ago: executing program 1 (id=2534):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x404080, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x4500)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x12, r0, 0xd6bb1000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)
mremap(&(0x7f000085f000/0x1000)=nil, 0x1000, 0x13000, 0x4, &(0x7f0000018000/0x13000)=nil) (async)
mremap(&(0x7f000085f000/0x1000)=nil, 0x1000, 0x13000, 0x4, &(0x7f0000018000/0x13000)=nil)

3.618523166s ago: executing program 1 (id=2535):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001a80)={'ip6gre0\x00', &(0x7f0000001880)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0xdf, 0x4, 0x24, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, 0x10, 0x8000, 0x3, 0xa}})
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0xa}, {0xe9, "541067d6d476c8b3"}}}}, 0xf)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363168a2559f334d436138406b699de69db13fd737428808940bcd0940dc930c81aaad8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987ebfdb041df6bbc2d10b61eb755df569c9cb7c4951ddb54505f67244cd16e376fbbdebc994d22a474b7bc494cafcac137748c8ebff7807053222d67c3ee79861e8cf4ff092236fccfbe08dcb5d7c2ba08b25883740695452a401800e631b0309b9a6963cc00e9e52df03723ce3", 0xcf}, {&(0x7f0000000f80)="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", 0x20a}], 0x2}, 0x0)
recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0)
close(r1)
r3 = socket$inet(0x2, 0x3, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de22000040"])
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10)
sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)='\b\x00', 0x2}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810)
lstat(0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)

3.613593371s ago: executing program 4 (id=2536):
r0 = syz_open_pts(0xffffffffffffffff, 0x800)
ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000))
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000040)={<r1=>0x0, 0x7, 0x0, [0x9, 0x9fd6, 0x101, 0xd3, 0xffffffffffffffff], [0xff, 0x9, 0x5f7, 0x7, 0x25f, 0x4, 0x7, 0x9, 0x7, 0x9, 0x800, 0x8, 0x6, 0x1, 0xfffffffffffff801, 0x8, 0xfffffffffffffffb, 0x2, 0x4, 0x400, 0x200, 0x6, 0x6, 0xfffffffffffffff0, 0x8, 0x9, 0x1, 0x3, 0x7, 0x10000, 0x0, 0xffffffffffffffff, 0x1000, 0x23, 0x100000001, 0x6, 0x7fffffff, 0x3, 0x2ce41d7b, 0xffffffffffffffff, 0x4, 0x100, 0x4ea7d492, 0xd, 0x7, 0x9, 0x1, 0x0, 0x4, 0x8, 0x0, 0x8, 0x1000, 0x28, 0x3, 0x0, 0x2, 0x9, 0x1, 0x9, 0xffffffffffffffff, 0x6, 0x3e3e, 0x8, 0x4, 0x2, 0x2, 0x4, 0x80000000, 0x7109, 0x1, 0x636, 0x1, 0x81, 0x400, 0x6, 0x8, 0x8, 0x8, 0x9, 0x8, 0x101, 0x10000, 0xc4, 0x6, 0x5658578a, 0x2, 0x7, 0x7, 0x7, 0x400, 0x63c, 0x2, 0xb27d, 0x0, 0x1, 0x9d26, 0x2, 0x6, 0xfffffffffffffffe, 0x1, 0x7, 0x8, 0x0, 0xe6, 0xfff, 0x2, 0x7ff, 0xffff, 0x1ff, 0x18, 0x6f00000, 0x1ff, 0x7, 0x2, 0x800, 0x2, 0x5, 0xa3d9, 0x1, 0x8]})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000480)={r1, 0x4, 0x6})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000880), 0x200, 0x0)
ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x400080, 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x410800, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000940)={0xff, 0x2})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x220203, 0x0)
r6 = socket$phonet(0x23, 0x2, 0x1)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x12, r6, 0x46be3000)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10)
io_setup(0x6, &(0x7f0000000a00)=<r7=>0x0)
io_submit(r7, 0x3, &(0x7f0000000c00)=[&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x5, 0x9d, 0xffffffffffffffff, &(0x7f0000000a40)="dc0b0e1a640be0787d38cff255f9f240ed6da6d2a669f6a679a4ff769f7b21b3ae7b2bff900644fbbebac33e7ab5dad05ca978497cfaa89329eca0d719f28752b099db506fa6fc0d0346810210ee71cf6fd900bec004459debe405fcdea83e0c6b", 0x61, 0x40, 0x0, 0x3, r3}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x6, 0x7f, r6, &(0x7f0000000b00)="ee2df0f7c4d2af57f18733e50f4ae14696ddd15cbf831b5e750b13a867b9b0abb2397072d189aef4d65649b618c4f9", 0x2f, 0x3, 0x0, 0x0, r3}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xf, r5, &(0x7f0000000b80), 0x0, 0x14ab}])
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r3)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'ip6tnl0\x00', <r10=>0x0, 0x2f, 0x3, 0x2, 0x7fff, 0x40, @empty, @empty, 0x700, 0x80, 0x3ff, 0x9}})
getsockname$packet(r2, &(0x7f0000000d80)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000dc0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000e80)={'syztnl2\x00', &(0x7f0000000e00)={'syztnl0\x00', <r12=>0x0, 0x29, 0x9, 0x9, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x8000, 0x5}})
sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f0000001080)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x164, r9, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x40800)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000010c0)={0x48, 0x2, 0x0, 0x0, 0x0, <r13=>0x0})
ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000001140)={0x8, r13})
write$binfmt_script(r3, &(0x7f0000001180)={'#! ', './file0', [{0x20, 'syztnl0\x00'}, {}, {0x20, 'syztnl0\x00'}, {0x20, '-.$)-'}, {0x20, '^'}, {}, {0x20, '{'}], 0xa, "84c9940252020df1be6dac02f42f304d54c86afb92972404656696c7afe98d1094bb776b256a2f59826b683543c77c8f19ae0d4829fd5d493062eb4e57d25efe45b2e9fcb1f0357589cc172d57fb2a5ceb94687cfdfcf6c5d341b02083025506c4c02c931bbbbfc46682443a00fb0951a22802ef794f91ea71d3658e318b383fd88aed029d85729d63ff992f230beceed1663ac025514ed9bf04c93bd524c6ab65572dd65b238197db05e1cfe648f1277b6c83"}, 0xdc)
r14 = accept4$phonet_pipe(r3, 0x0, &(0x7f0000001280), 0x800)
ioctl$EXT4_IOC_MOVE_EXT(r14, 0xc028660f, &(0x7f00000012c0)={0x0, r8, 0xb565, 0x2, 0x6, 0x100000000})
io_cancel(0x0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x8, 0x8000, r3, &(0x7f0000001300)="d8e4df13795e7be098a496adadc88722436ab7d467305f", 0x17, 0x9b, 0x0, 0x2, r3}, &(0x7f0000001380))
write$vhost_msg(r3, &(0x7f0000001580)={0x1, {&(0x7f00000013c0)=""/132, 0x84, &(0x7f0000001480)=""/223, 0x2, 0x4}}, 0x48)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000001600)={0xdf, 0x0, 0x3000})

3.513427038s ago: executing program 33 (id=2536):
r0 = syz_open_pts(0xffffffffffffffff, 0x800)
ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000))
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000040)={<r1=>0x0, 0x7, 0x0, [0x9, 0x9fd6, 0x101, 0xd3, 0xffffffffffffffff], [0xff, 0x9, 0x5f7, 0x7, 0x25f, 0x4, 0x7, 0x9, 0x7, 0x9, 0x800, 0x8, 0x6, 0x1, 0xfffffffffffff801, 0x8, 0xfffffffffffffffb, 0x2, 0x4, 0x400, 0x200, 0x6, 0x6, 0xfffffffffffffff0, 0x8, 0x9, 0x1, 0x3, 0x7, 0x10000, 0x0, 0xffffffffffffffff, 0x1000, 0x23, 0x100000001, 0x6, 0x7fffffff, 0x3, 0x2ce41d7b, 0xffffffffffffffff, 0x4, 0x100, 0x4ea7d492, 0xd, 0x7, 0x9, 0x1, 0x0, 0x4, 0x8, 0x0, 0x8, 0x1000, 0x28, 0x3, 0x0, 0x2, 0x9, 0x1, 0x9, 0xffffffffffffffff, 0x6, 0x3e3e, 0x8, 0x4, 0x2, 0x2, 0x4, 0x80000000, 0x7109, 0x1, 0x636, 0x1, 0x81, 0x400, 0x6, 0x8, 0x8, 0x8, 0x9, 0x8, 0x101, 0x10000, 0xc4, 0x6, 0x5658578a, 0x2, 0x7, 0x7, 0x7, 0x400, 0x63c, 0x2, 0xb27d, 0x0, 0x1, 0x9d26, 0x2, 0x6, 0xfffffffffffffffe, 0x1, 0x7, 0x8, 0x0, 0xe6, 0xfff, 0x2, 0x7ff, 0xffff, 0x1ff, 0x18, 0x6f00000, 0x1ff, 0x7, 0x2, 0x800, 0x2, 0x5, 0xa3d9, 0x1, 0x8]})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000480)={r1, 0x4, 0x6})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000880), 0x200, 0x0)
ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x400080, 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x410800, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000940)={0xff, 0x2})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x220203, 0x0)
r6 = socket$phonet(0x23, 0x2, 0x1)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x12, r6, 0x46be3000)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10)
io_setup(0x6, &(0x7f0000000a00)=<r7=>0x0)
io_submit(r7, 0x3, &(0x7f0000000c00)=[&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x5, 0x9d, 0xffffffffffffffff, &(0x7f0000000a40)="dc0b0e1a640be0787d38cff255f9f240ed6da6d2a669f6a679a4ff769f7b21b3ae7b2bff900644fbbebac33e7ab5dad05ca978497cfaa89329eca0d719f28752b099db506fa6fc0d0346810210ee71cf6fd900bec004459debe405fcdea83e0c6b", 0x61, 0x40, 0x0, 0x3, r3}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x6, 0x7f, r6, &(0x7f0000000b00)="ee2df0f7c4d2af57f18733e50f4ae14696ddd15cbf831b5e750b13a867b9b0abb2397072d189aef4d65649b618c4f9", 0x2f, 0x3, 0x0, 0x0, r3}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xf, r5, &(0x7f0000000b80), 0x0, 0x14ab}])
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r3)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'ip6tnl0\x00', <r10=>0x0, 0x2f, 0x3, 0x2, 0x7fff, 0x40, @empty, @empty, 0x700, 0x80, 0x3ff, 0x9}})
getsockname$packet(r2, &(0x7f0000000d80)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000dc0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000e80)={'syztnl2\x00', &(0x7f0000000e00)={'syztnl0\x00', <r12=>0x0, 0x29, 0x9, 0x9, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x8000, 0x5}})
sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f0000001080)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x164, r9, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x40800)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000010c0)={0x48, 0x2, 0x0, 0x0, 0x0, <r13=>0x0})
ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000001140)={0x8, r13})
write$binfmt_script(r3, &(0x7f0000001180)={'#! ', './file0', [{0x20, 'syztnl0\x00'}, {}, {0x20, 'syztnl0\x00'}, {0x20, '-.$)-'}, {0x20, '^'}, {}, {0x20, '{'}], 0xa, "84c9940252020df1be6dac02f42f304d54c86afb92972404656696c7afe98d1094bb776b256a2f59826b683543c77c8f19ae0d4829fd5d493062eb4e57d25efe45b2e9fcb1f0357589cc172d57fb2a5ceb94687cfdfcf6c5d341b02083025506c4c02c931bbbbfc46682443a00fb0951a22802ef794f91ea71d3658e318b383fd88aed029d85729d63ff992f230beceed1663ac025514ed9bf04c93bd524c6ab65572dd65b238197db05e1cfe648f1277b6c83"}, 0xdc)
r14 = accept4$phonet_pipe(r3, 0x0, &(0x7f0000001280), 0x800)
ioctl$EXT4_IOC_MOVE_EXT(r14, 0xc028660f, &(0x7f00000012c0)={0x0, r8, 0xb565, 0x2, 0x6, 0x100000000})
io_cancel(0x0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x8, 0x8000, r3, &(0x7f0000001300)="d8e4df13795e7be098a496adadc88722436ab7d467305f", 0x17, 0x9b, 0x0, 0x2, r3}, &(0x7f0000001380))
write$vhost_msg(r3, &(0x7f0000001580)={0x1, {&(0x7f00000013c0)=""/132, 0x84, &(0x7f0000001480)=""/223, 0x2, 0x4}}, 0x48)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000001600)={0xdf, 0x0, 0x3000})

3.419683787s ago: executing program 1 (id=2540):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1ea)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x56})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x283340, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x90, 0x0, &(0x7f0000000440)=[@increfs_done={0x40106308, 0x3}, @acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x1}, @dead_binder_done, @release, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/219, 0xdb, 0x2, 0x17}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}, 0x1000}], 0x1b, 0x0, &(0x7f00000003c0)="466f33cab078ad65f2ab7014f12ae69b0bdbc6a05086b8e98d77e8"})
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000002340)={0x0, 0x0, @pic={0xa, 0xea, 0x5, 0x81, 0x40, 0xb, 0x7, 0x9, 0x5d, 0x1, 0x8, 0x40, 0x7, 0x0, 0x29, 0x4b}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040800)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000540)={0x1, 'veth1_macvtap\x00', 0x1}, 0x18)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0)

3.352770236s ago: executing program 1 (id=2542):
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x501041)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x101})
connect$802154_dgram(r0, &(0x7f00000000c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x509001, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000140)=0x7)
syz_usb_connect(0x5, 0x13a1, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xe, 0xa4, 0x7e, 0x8, 0x1453, 0x4026, 0xe9b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138f, 0x4, 0x2, 0x6, 0xa0, 0xf, [{{0x9, 0x4, 0x64, 0x76, 0xb, 0x8d, 0xbc, 0xf2, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x6}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x6, 0x7}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x5, 0x3, [0x1, 0x2, 0x6]}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0x40, "99d24beb"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x4, 0x40, "0da5"}]}], [{{0x9, 0x5, 0xd, 0x2, 0x8, 0xf6, 0x81, 0xb, [@generic={0x102, 0x30, "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"}, @generic={0xee, 0x4, "89ed36b8dccec74dd2f8a7fded0c917c456ce3905808c6b725e499bbfd085fd794be2222137aaf2cb590a4131131cf1011d74de380868d09c4d71f0f208e0698a65843183407b6252d00ae09009f4581605332bfc18b07b5d4e2100313f966db62ad6fe58f1769983d7e58422b62b3a378cf6b2e7565a44f08dbcfee665b00032b89aee4aadf04852ad1df4f795fe5b8130fc6e49bc021205ecde8a5c34ad1b9e5e4d478a29910008fcc95331124fc5200e1e54ce1e059a2b8031034a60172628f126bcb3e12d5c0d62a39337c2805363ce1ac5f1637dda926aa5d96492b3d5c908529df22c9264e9f1b0536"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x0, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9}]}}, {{0x9, 0x5, 0x0, 0x1b, 0x200, 0xf, 0xb, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x1}, @generic={0x81, 0x9, "2021286285d61551c79c7ad01b67f5ed06fdf82cce2289382f2002c498aaadfcbd3ddb211b2c844852d8c7df24648ea0c72b94ce1f5d7d1bbb74315ce4a85c8777ea5c8c88feb5b5b0bf60bd9c6dc830562b16c0bc82fef2e079724337fed943f1ca5572bf8bce91d1348f56db1f8fcdd5ac87ac22c26a8a165aa65edc2aee"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x1, 0x1, 0x5, [@generic={0xa8, 0x31, "c7b1e84d1f6910cbf4c0a658b0c7834c830730b69609a5ef770f3090dc57d51d8bb7e31cc0387104f705311923f6c6c931571356844bdd60a57633edae9c9343cc101028b814bd7bfbb18c6eeb4074c2b69961d1e465db1285d963a8bb3ba4c2b7da624b224eeca4f317df8f60fc777829ef1aabbbae0dc5a4d9a7af2618101a78a75983b22e4c4152d2d5a982fae03ec3692bdf03a3587366cd77cbbcd1b8fc334af34c5e2b"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x6, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x4c77}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x400}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x5, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x66, 0x80, 0x5, [@generic={0x7a, 0x3, "9e4cd6e99257a5b27189811b9e905f0bb29820a0e9b45cfa2b2a287cc9e77365cb8d5a63ea9ec2f20977f16ae23c4a6ecf9fa6e278fe741128dbe068186883697adb13c16d42ba4b5546fac95b856c5d37931cc758ffb477732b9e2b7cd0aa940268b4b2b0870bf61e7407bbfd859b7cb7a2bacb10ac749a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x5}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x7f, 0x92, 0x99, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x97, 0x6}, @generic={0x3e, 0x7, "9f4e0a5be168a3772542cf7e8f1c4d1502c925fa7e8689d77937515163ad372c8799bb8aab223223632d0ca886b10340c81a6e821c3291f72ae380f4"}]}}, {{0x9, 0x5, 0xd, 0xd, 0x40, 0xe, 0xc, 0x76, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x62, 0x81b}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x42, 0xfe}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x7f, 0x3, 0x4}}]}}, {{0x9, 0x4, 0xe4, 0xf9, 0xf, 0x3d, 0xee, 0x57, 0x6, [], [{{0x9, 0x5, 0x7, 0x10, 0x8, 0x7, 0x8, 0x4, [@generic={0x6, 0x2, "9c9042f8"}, @generic={0x92, 0x22, "3002beea15b34cb9c12e5b3bde09697daa5464fb45497ef37edcbfe3545c370131f2a993b6927e5112bfb15bf4bc67b02fefb4c154a7a0ceb07c6b87e37097e4e1e86dd26f5b32d2294426279740a885cd3ab0c62fbdf93079100a7c994f718626f347624d08a67353ab01f2c2835fa5aa40c01039373421352838cf80e4be803faf7d91119cf965e1531754100ccf0b"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x20, 0x34, 0xc, 0x3}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x10, 0x6, 0xbc, [@generic={0x79, 0x21, "7899bbe9c3c595ad6ae3087fafa8ee9ab43a20ba433f7acdc2a9499df2242961b10b3753742c7d4805dd345eed382a2feec10d4cb32e8611eea36869908dcfb239f86acc8a720e56eb6125af54f7b3c82cccaebc74f81b02b8c562cb35f873a8b04f57a058fa1000914f37003a777481a50a5b9288bcdd"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xffff}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x8, 0x4, 0x1c, [@generic={0xc7, 0x22, "2d531c50748cf2fb944bf510f5fed7abf60936a8781a330781e5f69bd01ece78794803ebd81bd69e3f3502be929fb0c68f8ccfeadfc1749b58fd0d46315e680011ceb4dd7c970595a1b390d8388950cdb952a1fe1cefeec7a74b4a7c81b65a982fe4a1c558ff929386c0ac9dfdd5d76e3a264985f8da4a0f97e6ae8c8b27b20544247fb88a8e08c393b8e5d2f0409cc75d18f3fc281bb9b4b0e08d8e3cb8e4a924d797990b358e9f670938277aeb4071a3211e0158e67f5b3b86bbb0ce2de1b0cbf8110d02"}]}}, {{0x9, 0x5, 0x7a3756122b6c00b, 0x0, 0x10, 0x5, 0x2, 0x0, [@generic={0xe7, 0x7, "947b1936de82c36b1dba5c7934de9f05ece41167e631739d29c58857d303eb661b39015cac5d811f8a04e41eb4368ce7586ddb6967bb5142c8281cd11da17750fde86eb74715b4940197de82f6e1525d5e41c9e5a1830a6405f35bc7814f524a846bb55c6836447b52949038e14e999cfcd7b51232c52cd29e6aa4e40d62adce270fe2fdd281e63ab5c123b17e2ad265f22445adf2804ad260296e22e896cad666e46e3e72fcb79b90891a51a98e49965a8b0021d29554ed74600e91eeea6043908260ba14e2aaa83eb521abaaa02311a5f078622d9ee6925df4bf214c10b9b593063a9e7a"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x0, 0xc5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x2590}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x722}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0xf, 0xf1, 0x8a, [@generic={0x1f, 0xf, "9444c6c05bbd2dab6a6af680ba5c5b2c56bd37e7f298e205c1e35531c3"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf0, 0x2}]}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0x41, 0x3, 0x8d, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x7}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xa, 0x5, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x5, 0x7, 0x8, [@generic={0xda, 0x8, "f7b7303af76751dcd166c4ef3ee68bcf72408d4b2dd5274110d0610d125789cf5e48d5fdbf2be74ee20f57ed9986112b90691b0700ce7d01956e0b8ca80ea5cfad744cc32e07a92df59e5da970351d4764cab8ea8e837b753a5e8483b5023e6ee2e7d6965c89021bb9067d9cc623761ae1191c936962d3bc59858254c61b7e4f9206d9b070e7d8dda803539ce7b0314d06c7612f047606feb91518dddeee3a4a451df9f7005ea5a2913481aa94c97c37a02307b951016079df7d6c48e12627c3e1bb2e5f1454fd2deacb19222688632f1fd5eb48e9e569b9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x800}]}}, {{0x9, 0x5, 0x4, 0x14, 0x8, 0x1, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x95, 0x3}, @generic={0x66, 0x31, "728c72408525b1844767796b8c2ac11680b1f33bf8f5026c50ca59cc4c0bd1b09506a46ba11320a604ee309c538b14e37ca966c010157352841a7e9c4970b6e0be79cc753fa1e5b9a0d2130bd093cd881843e763c01d4d569207da1ca97b1c180b1d9717"}]}}, {{0x9, 0x5, 0x6, 0x11, 0x40, 0x5, 0x0, 0x7, [@generic={0x5f, 0x11, "b10025520aa3330a27b5aa8f41dd9ea9bd5defdc496b80efd4465d923ccc320d107cac65941acd431f239ed2e1ebf1c1f472b4da2dc94b1ba5add528d5eb3d4ddaf6ba7ba571cf95e131f89abc6642bb6f4705af74c6495a825502696f"}, @generic={0xb7, 0x0, "eb695e8c7fcc8fe895c904a51c287631a61957b57ba8c59431d7ee5944e428291d9fc5ee0a9e371176bc7ea6be1c20ad2d10edc01935b20a35f56308fa93c3b35dad81fcca93a9879ef018457b7bc929b356f34c0a74d3679f42b1cdef7b5b745805c2ced0b90fc6b2104a0aed1a0c9e10cf1d864e740bcfc21d0307549d4ab025490eaa7b418745a298d9c0d3f6d1013fbf7825defbf7c786b7c7a2db38d6af4fd94e9312c6dcaae292ffc617591b63f80e6328b6"}]}}, {{0x9, 0x5, 0xc, 0x1f, 0x200, 0x9, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x1, 0x1, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x3}]}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x2, 0x80, 0x8, [@generic={0x6d, 0x6, "ae4b84cd24252c9883cb92350e56dfc04afa77c4757945cdb5918010c1466a0e3b13e75dd3a0a91c61ba4fb2161c54a8eba7860a5c2682e6e4bc68dfe5ee106a190bd2453e24a98c900d521b095267c164826513d2e8ece9eb11514b8c777c3b27bbe6ae0121d64a5dd3d7"}, @generic={0xe2, 0x22, "50d712015e3179bcc671aa6947f79323c8821005b367e712e9135331b194fe5b3bc1462c7d02bd298f16f1885299fefc46dfce0a5fe56d5e4e65a9da3b1932cc9c12412dfc0f1c72051bac03765fea03c0a1874972850a0f399f7e8a106ae5a29106568b28bf62eeec4a0fe1727cf1f4e42ade9ecf05a85c64ef94390243f3ee431af9b43286a6d9efb14f6bd8d2bee096699040a8afd1909b1f5a77335f9ca4c9b24c4e4a3748b99cd34567557cc8a136e0962672dda2519a4673509f039f1be2f1975307cae3b61a45bfa3f39804ec0286254f353cd7097353b956b0adcbd8"}]}}]}}, {{0x9, 0x4, 0x76, 0x1, 0x5, 0xff, 0xff, 0xff, 0xde, [@generic={0xe0, 0xe, "98463f592bc33a4c4cd1fb946c7e52ca0d29b3a54645cd47a913411daa9e9ac16971f0ffbe35fe0158c0558cb67b24aff0fd144494c57394dca9248c65e6e0ee05c2b1316de273a10d13d219d6dc32da22a16a1b5dc660da2734df5f5e4b582619bddb9486f3ed789559a3ef4407dbffd8f5db71dff4e898324ea61d445129ca0d6701d0191264ffae7aa1ac643abfe197729f9bd2f5b2c4b174b6d748a2625455ce6bead16bf52a01e7816ccdcb625107ef7098a3c9049a5e673f698eb29885ab06f207a58338d000270985e70f90d1df4817b40e0c80fe37b49b543bc8"}, @generic={0xb, 0x30, "061188bbca115c4d9e"}], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0x4, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x14}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x9}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x9, 0x1, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xb, 0xb1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x5}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x7d, 0x80, 0x3, [@generic={0xcf, 0x10, "166fd02cb2e14bfe250be18b0aa352267ab26a3b412e2a7ac60a619b1d0fa7af9652306a9ba2f86df8cd89a2a0a0fb4b4835386b6486c05b2fe10a552ab6815499f4e58adedfd460cd37caaa226e237a2e2efd33166dfe645412124d19472dd7c744ffcbcf06f9dd3ddf828156d493c40fbcab77a33e02a69d8f31841124fdd576e27e7e9fce7d720b9eaa9a15305268306672ecdd2443296f409fd45435e4f446851ca310f6b7e62674806073a5b650cebfd3d5770626dc0b2c45cf1ea03faf92d9e93bb64a26c16ddd04906e"}, @generic={0x35, 0x23, "eb3d8dc20a26eee997c8492f29d10de21da274d6cc3361b44adb0aa2d61862b193570643d6b789394a24cc02a9cca46bf38245"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x420, 0x1, 0x1, 0xff, [@generic={0x13, 0x31, "b07ed39c3867054974e83e224569a595aa"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xfa}]}}]}}, {{0x9, 0x4, 0xfa, 0x41, 0xf, 0x39, 0x77, 0xf5, 0xf7, [@hid_hid={0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0xc20}}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "d079b2"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x0, 0xf, 0xa2}, {0x6, 0x24, 0x1a, 0x3, 0x2b}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x800, 0x1, 0x8, 0x10, 0x5}, @dmm={0x7, 0x24, 0x14, 0x6, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mdlm_detail={0x7a, 0x24, 0x13, 0x6, "04c0da88eb97a364deae8637ce60915654ff5391b1fa30eb3e5c9c98691066bbfde794936af11f87438c0ae869237be4ce074a0986733b8bd2a19fd69dc2cc39ff95814624ea5f173fd2e6258c41945d7a3900bc31d716fa7413c7ac26b9b70e845c05c025ecaf4cbdec95b021a159220c5569d41c1e"}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x1, 0x4, 0x7f}, @country_functional={0x8, 0x24, 0x7, 0x2, 0x9, [0x7f]}]}], [{{0x9, 0x5, 0x8, 0x2, 0x40, 0x4, 0x8, 0x7}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x2, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x4}]}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0xa, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfe, 0x1}, @generic={0x60, 0x3, "c9799cfa7e48fcffe6da7191280bc5d14e140e580c13ac173773da9355592d46776c09fe7716140938585f879cf36f4515bcdc167adf81473ba988d6420a7cb91dd6131555ad6f0db996d1a27d9bede9832c5b9eff5978232e593d5ea2ef"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x40, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf7}, @generic={0x49, 0xa, "5b20cbd825ad3a8f7a6b4c2b359cd2cf906ddd212bcdc969c572aa3803ba3145213eed6c6e1ec7df9e324b9d1e6d10252841e5d29bbb8ec814fb77793ed3247c6927528fd61613"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x3, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0x8, 0xc}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x90, 0x7, 0x9, [@generic={0x71, 0x7, "dfd5d8eda3b9c18066195186e67ad1539503a12387f12ac028f7d2ec4fd683ce61c32cb4cc79e97590b1eec601e9d326acd620e24dc54464e39e908bc7f03de127c40116a03b871c67e44eb648e7864b26f262566d6ce5dcd7f2e37cab420922c8c4f5e8f6312ed3e924139be4c3ec"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0xe2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc7, 0x3}]}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x2, 0x7, 0x2c}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x2, 0x2, 0x8}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x3, 0x2, 0xb6, [@generic={0x8, 0x30, "52da5433d380"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x538d42ddf8d930ad, 0x2, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x18, 0x8}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x1, 0x6, 0x76}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x2, 0xfd, 0xd, [@generic={0xf6, 0x22, "9516264d3d9b07002829e6606ee209d3bdf341165c8c459bacb475cb95f8af14363ca46093f97343c80683cfc9ec4a9f50719b9a6b79ebd7e59b1bc44f94e37c94b7ff1189fa9879cbac91077716e5dbc5dec1c0ee3405d20f4e55921faa31805b57df9fe6d3e85497e30933085b9dece16d6b63aca8d4fd236ed29fccba70085e6f5609ddb73805a1ff321723843a0b057e07ea06b80ca4ddf4d7d7c2091f8255645aa927dd79da0d10ae9401501242ad63ac1d270ca2dc9df12af9fb030f2423ab30ca98476e159e79fd4572abeaac300eb2f1dada641908318717d47f2429de99cbd8e57dafdc84a39c62267ba54decdf6720"}]}}, {{0x9, 0x5, 0xf8b40eada6ce3d20, 0x0, 0x200, 0x4, 0x5, 0x3, [@generic={0xcf, 0xd, "61d87fcbed02065a5fdbf2df54a7e7a4a5c4e7cc748d34b0b96d135b325aa49cf04562adaf28066ccfdd6ce3476b55a5314b506e1608317a48fdef6a2876a76fe3ee50f3cfbf3d52e57d0a6f5869901502cfaf75259df6e1d315198d8688a03bf4bd8bcaaf25c722e1ec1d467380606a11b06af3afc06ad8ad333b97a562ef6db743bdd175e62df7bea2c8de31a4c73ed7d7ffee98c5c43e5fb0ef1e2dcb9bb650225e16790fe32096532a667681e3ddb1168d07a06b44a6d70eb9bf21133da7d6798bcaffce5f957c79f30c7f"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x2, 0x9, 0x1, [@generic={0xa7, 0x31, "796d3da4d50bd2977fc1316541b7156ed56a5f5154b47d6b90c7fcca5512ad910d8aa52eb5a332c37627c78dfdd98d910ba94112b29ab5ccd3d65b6d209b22b06e93b2072937d58c8a0c674bb893b8b2113c63b14b92b1f25a85804fc4e50aeaef781cb61fab35ef50c7639a7feca2476a5c299a698bd9822a50ca2be83434680054d033f4900e2c8c6db80f1acce4fd874f8eca85ba6c91afd04ea574796750bc887e06ed"}]}}]}}]}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x200, 0x9, 0x1, 0x3b, 0x10, 0x7}, 0xb, &(0x7f0000001580)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x3409}}]})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001680)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
shmget$private(0x0, 0x4000, 0x201, &(0x7f0000ff9000/0x4000)=nil)
r4 = getuid()
quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, r4, &(0x7f00000016c0)={0xe, 0x6, 0x1, 0x7})
ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000001700))
r5 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCFLSH(r5, 0x540b, 0x0)
r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f0000001780)={0x3, 0x6})
setfsuid(r4)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000001bc0)={0x2, 0x0, 0x8, 0x1c, 0x1b1, &(0x7f00000017c0)="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"})
renameat2(r0, &(0x7f0000001c00)='./file0\x00', r0, &(0x7f0000001c40)='./file0\x00', 0x7)
getpeername$packet(r0, &(0x7f0000001c80)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001cc0)=0x14)
stat(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001dc0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x4e21, 0x3, 0x4e21, 0x9, 0x2, 0xa0, 0x0, 0x3b, r7, r8}, {0x200, 0x8000000000000000, 0xe0, 0x24, 0x5, 0x9, 0x1, 0x3}, {0xc, 0x0, 0x1, 0x6}, 0x7f, 0x6e6bc0, 0x1, 0x1, 0x3, 0x3}, {{@in=@multicast2, 0x4d2, 0x32}, 0x2, @in6=@local, 0x3507, 0x4, 0x0, 0x9d, 0xe, 0x8, 0x4}}, 0xe8)
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000001ec0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000022c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002140)={0x128, 0x1403, 0x100, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x128}}, 0x800)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000002300)='net/connector\x00')
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000002340))
syz_usb_connect$cdc_ecm(0x0, 0x96, &(0x7f0000002540)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x1, 0x1, 0x3, 0x20, 0x89, [{{0x9, 0x4, 0x0, 0x1b, 0x2, 0x2, 0x6, 0x0, 0x3, {{0xb, 0x24, 0x6, 0x0, 0x0, "43e0ad32457d"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0xc, 0x914, 0x7}, [@mdlm_detail={0xc, 0x24, 0x13, 0x1, "b01dfc0b6e8c1a30"}, @mdlm={0x15, 0x24, 0x12, 0x8000}, @mbim={0xc, 0x24, 0x1b, 0x10, 0x3, 0x5a, 0x40, 0x0, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x9, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff, 0x7, 0xb}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0xfe, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x7, 0x6}}}}}]}}]}}, &(0x7f0000002680)={0xa, &(0x7f0000002600)={0xa, 0x6, 0x250, 0xff, 0xf5, 0x3, 0x40, 0x5}, 0x5, &(0x7f0000002640)={0x5, 0xf, 0x5}})
ioctl$KVM_RUN(r0, 0xae80, 0x0)

2.062933634s ago: executing program 2 (id=2548):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x22d4, 0x1503, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x2602, 0xc4, 0x1a}, 0x18)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
gettid()
r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3)
mkdirat(r4, &(0x7f0000000100)='./file0\x00', 0x1)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10082, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x1})
ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil})
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r8 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xc0, 0x2, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0x1, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xf8, 0x0, 0x3}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x2, 0x9, 0xd, 0xf7, 0x1b}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0x57, &(0x7f0000000840)=@string={0x57, 0x3, "d58520aaabf615443b50651107cb36a4440f60aa572d26647b3fbba783190b0c05f86a88be82d4cdcf002d3f94403e4220c4e35c099b154d6e4d2aaeff7e40ec4facb377e2cee3c71b6e6f4bdf4653d76c770ef299"}}, {0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="b743c21a50c3e241f14d3b5201fc0000e80805fb32292abde535818b4cda0d18cac3b912e9d3"]}]})
syz_usb_control_io$printer(r8, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0x2, 0x90, {0x90, 0x0, "0b4f3336cc08872633adb23ab35380929133397273ab96bb4c2a3f91738ff52d2c508e224584facd457e27147ffd88c57ff6bda90c3dc1c2a348461509088677b146108066aa1a60a998ca414beab79a297031bf19a9bf6ecdc9d07502ad6734a33357b5d312b9313a6cf6a0f5545e18cb44a8efcb79f2fba08c627b615f0464c0fc2d57982f183eab234c11c743"}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="00090000000000000004053bdb72edddd0eb085294bf3c3af21335a9ea278e0f516050825774064e3ea33298fabed7fd8decd33069504fe7ba6a6ceaadb3cb0a54e7299ea3e5a9758712a3e399f714fdc68e23250b54a8450d5ee4bf6d425a81642583afe840944f3ee1c8f362e24bfad846c16a4cf801bc410299c273f3d13ee780dae4b1b59b5ae17dcaad848e6959d8c92c3ed22187e4f6f7de65a243db"]}, &(0x7f00000007c0)={0x34, &(0x7f0000000440)={0x20, 0x9, 0xfb, "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"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000640)=ANY=[@ANYBLOB="2000bf00000000bd2cccd68ac1eaf2c172720dffe434a16a46d13b1b7eee56a809ffee7bf306538d3c38d366afe4781b7fddaa57e0507371f439307a300886b480cea36d3da825d55a4173144955acb1667f9863fe29ee0b567e8d40575dd90c11acfec773a356988f0985c8037ac024a1f0daee036df5a09f2c828e250d29ea76b764399523119c7a5bfd31ef15d8fff65bb32d4e4978fae5e58560a9b6ee9b199eeb7c9d6ff2cb7860e5ffe043cfdad22bb6d30000b84a2b00"/197], &(0x7f0000000740)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x2}})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x8000000000)
dup(r10)
socket$kcm(0x10, 0x2, 0x0)

1.129596897s ago: executing program 2 (id=2551):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000200)={0x2, 0x0, [{0x0, 0x0, 0x8}, {0x73, 0x0, 0x8}]})
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1)

1.021557024s ago: executing program 2 (id=2552):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0xffffe000)
socket$inet6(0xa, 0x80000, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x181, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0)
io_setup(0x4, &(0x7f00000014c0)=<r3=>0x0)
io_getevents(r3, 0x3, 0x3, &(0x7f0000000300)=[{}, {}, {}], 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f00000012c0)={0x1, 0x0, 0x1d, 0x16, 0x400084, &(0x7f0000000ec0)})

855.113483ms ago: executing program 2 (id=2553):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x5, 0x4)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
fadvise64(r1, 0x7, 0x1ff, 0x1)
sendfile(r1, r1, &(0x7f0000001000)=0x7fffffff, 0x7ffff000)

836.03803ms ago: executing program 0 (id=2554):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000)
userfaultfd(0x801) (async)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) (async)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24)
ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000980)={0x80, 0x0, 0x5})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYRESDEC=r3, @ANYRES8=r0, @ANYRESOCT=0x0], 0x1cdc}, 0x1, 0x0, 0x0, 0x20000084}, 0x8010)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4810) (async)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4810)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x100})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f0000000880))

794.938566ms ago: executing program 2 (id=2555):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r1=>0x0})
r2 = socket$caif_seqpacket(0x25, 0x5, 0x5)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000340)={'netpci0\x00', {0x2, 0x0, @empty}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40083, 0x0)
pipe(&(0x7f0000000000)) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x7000000) (async)
fcntl$setpipe(r3, 0x407, 0x7000000)
r4 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt(r4, 0xff, 0xf, 0x0, &(0x7f0000000000))
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x100000000000) (async)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x100000000000)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r5, 0x4068aea3, &(0x7f0000001840)={0xed, 0x0, 0x3e1871b1}) (async)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r5, 0x4068aea3, &(0x7f0000001840)={0xed, 0x0, 0x3e1871b1})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6) (async)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6)
sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000007bc0)={0x0, 0x0, &(0x7f0000007b80)={&(0x7f0000007b00)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000125bd7000fddbdf254400000008000300", @ANYRES32=r1, @ANYBLOB="08000c00640000000400cc002400158006000400f400000005000e000300000008000b00380000000800140096ffffff0a0018000303030303030000"], 0x58}, 0x1, 0x0, 0x0, 0xc804}, 0x4002010)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket(0x10, 0x2, 0x0)
socket(0x9, 0x5, 0x424) (async)
socket(0x9, 0x5, 0x424)
r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[<r11=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r10, 0xc06864a2, &(0x7f0000000300)={0x0, 0x3, r11, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0e19cd27afbd5acaa3431c1d8bdffb38a310364ef87b48499c76277e5c2e3653"}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x3, 0x9, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, 0x7800, 0x700, 0x80000000, 0x285}})
sendmsg$nl_xfrm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000018001001dbd7000fbdbdf2512390000"], 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000) (async)
sendmsg$nl_xfrm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000018001001dbd7000fbdbdf2512390000"], 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000)
mount(&(0x7f0000000300)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x1001000, 0x0)
lremovexattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="753365720e2f00"])

669.161211ms ago: executing program 2 (id=2556):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x42, 0x40)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000100)=0x22000, 0x4) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000100)=0x22000, 0x4)
ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f00000000c0)={0x1, 0x100, 0xc28}) (async)
ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f00000000c0)={0x1, 0x100, 0xc28})

580.162028ms ago: executing program 0 (id=2557):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000002740)={'mpc624\x00', [0x4f27, 0x207, 0x2, 0x3, 0x5, 0xcc5, 0xf, 0x6, 0xa, 0xe8aa, 0x200, 0x1, 0xffffc001, 0x1, 0x0, 0x0, 0x0, 0x1a449, 0x2800, 0x40000003, 0x3803, 0xcaa7, 0x0, 0x2, 0x7, 0xe6b, 0x3c, 0xd0, 0x2, 0x1, 0xfce]})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2}})
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0)
write$sndseq(r1, &(0x7f0000000140)=[{0x8, 0x0, 0x7, 0x8, @time={0x0, 0x1}, {0x3, 0x8}, {0x4, 0xdf}, @connect={{0x1, 0xb}, {0x9, 0x4}}}, {0x2, 0x1, 0xfe, 0x9, @time={0x2, 0x2}, {0x1, 0x5}, {0x6, 0x6}, @quote={{0x1, 0x7}, 0x1000, &(0x7f0000000100)={0x6, 0x4, 0x0, 0x7, @tick, {0x6, 0x3}, {0x6, 0x5}, @queue={0xa8, {0x7, 0x9}}}}}], 0x38)
socket(0xb, 0x802, 0xfffffffd)

521.803554ms ago: executing program 0 (id=2558):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5381})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x1, 0xcc01, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x266, 0x0, 0x6, 0x29, 0x0, @multicast1, @broadcast}}}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000001280)=@attr_pmu_filter={0x0, 0x1, 0x1, 0x0})

317.609254ms ago: executing program 0 (id=2559):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x34}}, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendfile(r1, r0, 0x0, 0xfffffffffffffffc)

311.637213ms ago: executing program 0 (id=2560):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xac)
mkdirat(r0, &(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x31)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="040100001000"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0)
mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0)

197.096474ms ago: executing program 0 (id=2561):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
listen(r3, 0x0) (async)
listen(r3, 0x50d)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x60000000, 0xef, {<r4=>0xffffffffffffffff}, {r1}, 0x4f, 0x8})
getpgid(r4) (async)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) (async)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmmsg(r5, &(0x7f0000002a40)=[{{}, 0x9}], 0x1, 0x40002000, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10)
recvmmsg(r5, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0) (async)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x560f, 0x0) (async)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000280)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES32=r1, @ANYBLOB="0000000000ff045ac2cc34b1578584ed420afeb078bb87e1c6d1dcac447256f0876811165e318641b4e7a91ee8ef0cff40fd2bd7aa958929f74d482bdbc2bc9a4c417aef49b2"], 0x0) (async)
ioctl$EVIOCGREP(r8, 0x80084503, &(0x7f0000000040)=""/14) (async)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000440)={{@my=0x1, 0x7f}, 0x1, 0x2, 0x4}) (async)
setreuid(0x0, r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, 0xffffffffffffffff, 0x2000)

96.974339ms ago: executing program 1 (id=2562):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), 0xc, r3, 0xeeeeeeee})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a80)={&(0x7f0000000080)=[0x0, <r4=>0x0], &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0], 0x9, 0x5, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000c00)={&(0x7f0000000b00)=[0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0], 0x2, 0x7, 0x7, 0x3})
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000c80)={0x2, 0x0, &(0x7f0000000c40)=[<r6=>0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000ec0)={&(0x7f0000000d40)=[0x0, 0x0], &(0x7f0000000d80)=[{}, {}], &(0x7f0000000e40)=[<r7=>0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x2})
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[<r11=>0x0], &(0x7f0000000280), 0x1, r10})
ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r10], &(0x7f00000003c0)=[0x7], &(0x7f0000000300)=[r11], 0x0})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000001000)={0x300, 0x7, &(0x7f0000000cc0)=[0x0, 0x0, r3, r4, r5, 0x0, r6], &(0x7f0000000d00)=[0x85, 0x5, 0x5, 0xe75b], &(0x7f0000000f40)=[r7, r11], &(0x7f0000000f80)=[0x4, 0x7, 0x5617, 0x0, 0x101, 0xeca, 0x6f7e, 0x7fffffffffffffff, 0x5], 0x0, 0x8c})
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
readv(r12, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/169, 0xa9}, {&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000000600)=""/24, 0x18}, {&(0x7f0000001180)=""/4092, 0xffc}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000000640)=""/65, 0x41}], 0xb)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sendfile(r12, r12, 0x0, 0x7ffff000)

92.181815ms ago: executing program 5 (id=2538):
r0 = socket$key(0xf, 0x3, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000))
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003d80)=ANY=[@ANYBLOB="4c000000140003042cbd7000ffdbdf251eda05074e214e220010000005000000000000020600000082210000f4ffffffff0300008f120000", @ANYRES32=0x0, @ANYBLOB="fbffffffe32cbd9f0800000000020000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r2 = accept4(r0, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x80, 0x80000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x81, 0x16}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x8c1)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r5 = socket(0x18, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x104, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0xe0, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1d6dad3d}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x800}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x18c00000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffa}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x835}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7b}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff7fff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe5b4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x42}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5b}, @void, @val={0xc, 0x99, {0x3, 0x18}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7)
openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r8, &(0x7f00000005c0)="01", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0xfffe, 0x6}, 0x8)
sendfile(r4, r7, &(0x7f0000000000)=0xb, 0x10)

1.313196ms ago: executing program 5 (id=2563):
pipe2(&(0x7f0000000200)={<r0=>0x0, 0x0}, 0x0)
r1 = fanotify_init(0x10, 0x800)
fanotify_mark(r1, 0x1, 0x8001001, r0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000020301019fe899030000000005000003080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040000)
ioctl$CEC_ADAP_G_CAPS(r0, 0xc04c6100, &(0x7f0000000100))
r3 = socket$netlink(0x10, 0x3, 0x2)
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f0000000000)=""/139, &(0x7f00000000c0)=0x8b)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}})
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0)

0s ago: executing program 1 (id=2565):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)=')\x00', 0x2)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6bb3000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)

kernel console output (not intermixed with test programs):


[  263.420479][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  263.440206][   T10] dvb-usb: error while querying for an remote control event.
[  263.450467][T13219] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2110'.
[  263.614143][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  263.620175][   T10] dvb-usb: error while querying for an remote control event.
[  263.794251][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  263.800081][   T10] dvb-usb: error while querying for an remote control event.
[  263.823285][T13235] rdma_rxe: rxe_newlink: failed to add wlan1
[  263.832327][T13237] /dev/rnullb0: Can't open blockdev
[  263.878856][T13240] /dev/rnullb0: Can't open blockdev
[  263.976243][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  263.982342][   T10] dvb-usb: error while querying for an remote control event.
[  264.157900][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  264.173337][   T10] dvb-usb: error while querying for an remote control event.
[  264.194291][T13254] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2118'.
[  264.206173][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2118'.
[  264.326956][T13259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.335694][T13259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.353306][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  264.361236][   T10] dvb-usb: error while querying for an remote control event.
[  264.478013][T13262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.491801][T13262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.533105][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  264.539125][   T10] dvb-usb: error while querying for an remote control event.
[  264.624304][T13267] netlink: 'syz.2.2121': attribute type 4 has an invalid length.
[  264.634527][T13267] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2121'.
[  264.715807][T13271] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000
[  264.724538][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  264.730872][    T9] dvb-usb: error while querying for an remote control event.
[  264.828397][T13280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2125'.
[  264.917271][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  264.923070][    T9] dvb-usb: error while querying for an remote control event.
[  264.945004][T13284] loop6: detected capacity change from 0 to 7
[  264.951472][T13282] batadv_slave_0: entered promiscuous mode
[  264.954132][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.966430][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  264.974412][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.983604][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  264.993646][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.002827][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  265.011055][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.020233][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  265.031700][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.040895][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  265.049527][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.058704][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  265.067339][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.076496][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  265.088341][ T5854] ldm_validate_partition_table(): Disk read failed.
[  265.097188][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.106384][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  265.114573][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.123746][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  265.131819][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.132717][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  265.140959][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  265.154951][ T5854] Dev loop6: unable to read RDB block 0
[  265.159396][   T10] dvb-usb: error while querying for an remote control event.
[  265.172303][ T5854]  loop6: unable to read partition table
[  265.187699][ T5854] loop6: partition table beyond EOD, truncated
[  265.212012][T13282] batadv_slave_0: left promiscuous mode
[  265.220453][T13284] ldm_validate_partition_table(): Disk read failed.
[  265.246657][T13284] Dev loop6: unable to read RDB block 0
[  265.294624][T13284]  loop6: unable to read partition table
[  265.330201][T13284] loop6: partition table beyond EOD, truncated
[  265.359640][T13284] loop_reread_partitions: partition scan of loop6 (ţ被xü—źŃŕ–() failed (rc=-5)
[  265.376789][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  265.385469][   T10] dvb-usb: error while querying for an remote control event.
[  265.547540][ T5873] Bluetooth: hci1: command tx timeout
[  265.604141][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  265.610099][   T10] dvb-usb: error while querying for an remote control event.
[  265.654527][ T5908] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  265.814818][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  265.823505][ T6129] dvb-usb: error while querying for an remote control event.
[  265.837101][ T5908] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  265.848286][ T5908] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  265.865493][ T5908] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  265.889439][T13310] syzkaller1: entered promiscuous mode
[  265.895459][T13310] syzkaller1: entered allmulticast mode
[  265.900269][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0
[  265.908742][ T5908] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  265.924864][ T5908] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  265.953789][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0
[  265.961406][ T5908] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  265.970726][ T5908] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  265.981787][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0
[  265.989495][ T5908] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  265.999698][ T5908] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  266.013525][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0
[  266.022577][ T5908] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  266.028790][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  266.031591][ T5908] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  266.039806][ T6129] dvb-usb: error while querying for an remote control event.
[  266.071420][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0
[  266.080174][ T5908] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  266.091061][ T5908] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  266.106576][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0
[  266.114408][ T5908] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  266.124077][ T5908] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  266.171262][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0
[  266.192823][ T5908] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  266.202149][ T5908] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  266.221782][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0
[  266.247384][ T5908] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  266.258104][ T5908] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  266.264215][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  266.274754][   T10] dvb-usb: error while querying for an remote control event.
[  266.303297][ T5908] usb 2-1: Product: syz
[  266.313537][ T5908] usb 2-1: Manufacturer: syz
[  266.322673][T13327] dvmrp0: entered allmulticast mode
[  266.329270][ T5908] usb 2-1: SerialNumber: syz
[  266.337266][ T5908] usb 2-1: config 0 descriptor??
[  266.345965][T13327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.363049][ T5908] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  266.373954][T13327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.445506][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  266.451336][   T10] dvb-usb: error while querying for an remote control event.
[  266.577796][T13331] /dev/rnullb0: Can't open blockdev
[  266.590560][T13298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.601410][T13298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.602576][T13331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.618163][T13331] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.621924][T13298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.637313][T13298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.653895][T13298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.663934][T13298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.674815][T13298] /dev/rnullb0: Can't open blockdev
[  266.680835][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  266.686599][ T6129] dvb-usb: error while querying for an remote control event.
[  266.700849][ T5908] usb 2-1: USB disconnect, device number 55
[  266.708686][ T5908] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  266.873163][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  266.878928][ T6129] dvb-usb: error while querying for an remote control event.
[  267.054890][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  267.065994][ T6129] dvb-usb: error while querying for an remote control event.
[  267.242694][T13345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.251611][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  267.257358][ T6129] dvb-usb: error while querying for an remote control event.
[  267.290026][T13345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.470941][T13353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.491058][T13353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.612720][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  267.618545][ T6129] dvb-usb: error while querying for an remote control event.
[  267.813997][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  267.819776][   T10] dvb-usb: error while querying for an remote control event.
[  268.006375][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  268.012144][ T6129] dvb-usb: error while querying for an remote control event.
[  268.196781][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  268.202874][ T6129] dvb-usb: error while querying for an remote control event.
[  268.255902][T13388] /dev/rnullb0: Can't open blockdev
[  268.287314][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  268.294109][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  268.367909][T13393] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2158'.
[  268.382499][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  268.388258][   T10] dvb-usb: error while querying for an remote control event.
[  268.552806][T13397] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2159'.
[  268.565080][T13397] overlay: filesystem on ./bus not supported as upperdir
[  268.594355][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  268.611336][   T10] dvb-usb: error while querying for an remote control event.
[  268.648062][ T6129] usb 2-1: new full-speed USB device number 56 using dummy_hcd
[  268.795118][ T6129] usb 2-1: device descriptor read/64, error -71
[  268.811082][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  268.816835][   T10] dvb-usb: error while querying for an remote control event.
[  268.900914][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  268.908777][T13418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.919837][T13418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.927488][T13416] /dev/rnullb0: Can't open blockdev
[  268.933603][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  268.965333][T13416] /dev/rnullb0: Can't open blockdev
[  268.973058][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  268.985306][T13416] /dev/rnullb0: Can't open blockdev
[  268.991081][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  268.998106][T13416] /dev/rnullb0: Can't open blockdev
[  269.006881][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.014095][T13416] /dev/rnullb0: Can't open blockdev
[  269.020186][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.022004][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  269.028833][T13416] /dev/rnullb0: Can't open blockdev
[  269.038453][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.043414][   T10] dvb-usb: error while querying for an remote control event.
[  269.048131][T13416] /dev/rnullb0: Can't open blockdev
[  269.061194][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.069745][T13416] /dev/rnullb0: Can't open blockdev
[  269.075398][ T6129] usb 2-1: new full-speed USB device number 57 using dummy_hcd
[  269.075680][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.091344][T13416] /dev/rnullb0: Can't open blockdev
[  269.097194][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.104187][T13416] /dev/rnullb0: Can't open blockdev
[  269.111463][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.119304][T13416] /dev/rnullb0: Can't open blockdev
[  269.124856][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.133927][T13416] /dev/rnullb0: Can't open blockdev
[  269.141241][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.148237][T13416] /dev/rnullb0: Can't open blockdev
[  269.155605][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.163871][T13416] /dev/rnullb0: Can't open blockdev
[  269.169395][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.180073][T13416] /dev/rnullb0: Can't open blockdev
[  269.185854][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.192842][T13416] /dev/rnullb0: Can't open blockdev
[  269.200043][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.207199][T13416] /dev/rnullb0: Can't open blockdev
[  269.212745][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.221378][T13416] /dev/rnullb0: Can't open blockdev
[  269.225027][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  269.227489][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.232357][   T10] dvb-usb: error while querying for an remote control event.
[  269.247133][ T6129] usb 2-1: device descriptor read/64, error -71
[  269.254063][T13416] /dev/rnullb0: Can't open blockdev
[  269.260304][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.267311][T13416] /dev/rnullb0: Can't open blockdev
[  269.274161][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.282753][T13416] /dev/rnullb0: Can't open blockdev
[  269.288406][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.298911][T13416] /dev/rnullb0: Can't open blockdev
[  269.305028][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.313316][T13416] /dev/rnullb0: Can't open blockdev
[  269.318924][T13416] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  269.326678][T13416] /dev/rnullb0: Can't open blockdev
[  269.364445][ T6129] usb usb2-port1: attempt power cycle
[  269.428591][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  269.434352][   T10] dvb-usb: error while querying for an remote control event.
[  269.609904][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  269.615670][   T10] dvb-usb: error while querying for an remote control event.
[  269.727750][ T6129] usb 2-1: new full-speed USB device number 58 using dummy_hcd
[  269.760042][ T6129] usb 2-1: device descriptor read/8, error -71
[  269.802504][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  269.808263][    T9] dvb-usb: error while querying for an remote control event.
[  269.994837][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  270.000610][   T10] dvb-usb: error while querying for an remote control event.
[  270.021569][ T6129] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  270.059928][ T6129] usb 2-1: device descriptor read/8, error -71
[  270.195152][T13439] block nbd0: Attempted send on invalid socket
[  270.204821][T13439] block nbd0: Attempted send on invalid socket
[  270.209033][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  270.212452][T13439] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  270.217056][ T6129] usb usb2-port1: unable to enumerate USB device
[  270.227089][T13439] block nbd0: Attempted send on invalid socket
[  270.233037][   T10] dvb-usb: error while querying for an remote control event.
[  270.253277][T13439] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  270.264251][T13439] block nbd0: Attempted send on invalid socket
[  270.271249][T13439] block nbd0: Attempted send on invalid socket
[  270.283664][T13439] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  270.301297][T13439] block nbd0: Attempted send on invalid socket
[  270.311192][T13439] blk_print_req_error: 30 callbacks suppressed
[  270.311209][T13439] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  270.338342][T13439] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  270.349272][T13439] block nbd0: Attempted send on invalid socket
[  270.371129][T13439] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  270.382841][T13439] block nbd0: Attempted send on invalid socket
[  270.400115][T13439] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  270.410429][T13439] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  270.433095][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  270.442404][ T6129] dvb-usb: error while querying for an remote control event.
[  270.452979][T13439] block nbd0: Attempted send on invalid socket
[  270.459283][T13439] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  270.486704][T13439] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  270.507455][T13439] block nbd0: Attempted send on invalid socket
[  270.514288][T13439] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  270.534522][T13439] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  270.555036][T13439] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  270.582864][T13439] I/O error, dev nbd0, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  270.603108][T13439] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  270.615574][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  270.623968][ T6129] dvb-usb: error while querying for an remote control event.
[  270.634250][T13439] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[  270.807327][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  270.813100][ T6129] dvb-usb: error while querying for an remote control event.
[  270.989184][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  270.995696][   T10] dvb-usb: error while querying for an remote control event.
[  271.190240][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  271.210660][   T10] dvb-usb: error while querying for an remote control event.
[  271.230449][T13467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.242798][T13467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.397351][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  271.403153][   T10] dvb-usb: error while querying for an remote control event.
[  271.477713][T13474] /dev/rnullb0: Can't open blockdev
[  271.600055][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  271.605956][   T10] dvb-usb: error while querying for an remote control event.
[  271.791057][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  271.801459][   T10] dvb-usb: error while querying for an remote control event.
[  271.993953][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  271.999892][   T10] dvb-usb: error while querying for an remote control event.
[  272.199707][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  272.205454][   T10] dvb-usb: error while querying for an remote control event.
[  272.259081][ T5873] Bluetooth: hci1: hardware error 0x00
[  272.389880][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  272.400452][   T10] dvb-usb: error while querying for an remote control event.
[  272.467347][T13513] binder: BINDER_SET_CONTEXT_MGR already set
[  272.473376][T13513] binder: 13512:13513 ioctl 4018620d 200000000040 returned -16
[  272.520847][T13518] /dev/rnullb0: Can't open blockdev
[  272.581899][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  272.587671][   T10] dvb-usb: error while querying for an remote control event.
[  272.774325][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  272.790899][   T10] dvb-usb: error while querying for an remote control event.
[  272.820591][T13527] vivid-000: disconnect
[  272.838366][T13527] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2202'.
[  272.851327][T13527] /dev/rnullb0: Can't open blockdev
[  272.858381][T13526] vivid-000: reconnect
[  272.988584][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  272.997048][ T6912] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  273.016056][   T10] dvb-usb: error while querying for an remote control event.
[  273.017869][T13534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2205'.
[  273.045131][ T6912] CPU: 0 UID: 0 PID: 6912 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  273.045156][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  273.045189][ T6912] Call Trace:
[  273.045196][ T6912]  <TASK>
[  273.045203][ T6912]  dump_stack_lvl+0x189/0x250
[  273.045233][ T6912]  ? __pfx_dump_stack_lvl+0x10/0x10
[  273.045255][ T6912]  ? __pfx__printk+0x10/0x10
[  273.045278][ T6912]  ? rcu_is_watching+0x15/0xb0
[  273.045299][ T6912]  dump_header+0xd3/0x480
[  273.045316][ T6912]  oom_kill_process+0x387/0x920
[  273.045336][ T6912]  out_of_memory+0xf09/0x12a0
[  273.045356][ T6912]  ? mem_cgroup_iter+0x3b/0x460
[  273.045374][ T6912]  ? __pfx_out_of_memory+0x10/0x10
[  273.045395][ T6912]  mem_cgroup_out_of_memory+0x145/0x240
[  273.045413][ T6912]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  273.045434][ T6912]  ? _raw_spin_unlock+0x28/0x50
[  273.045452][ T6912]  ? memcg1_oom_prepare+0x37f/0x450
[  273.045472][ T6912]  try_charge_memcg+0xdff/0x1290
[  273.045493][ T6912]  ? rcu_is_watching+0x15/0xb0
[  273.045516][ T6912]  ? __pfx_try_charge_memcg+0x10/0x10
[  273.045537][ T6912]  ? rcu_irq_exit_check_preempt+0x201/0x210
[  273.045554][ T6912]  ? xa_load+0x60/0x210
[  273.045574][ T6912]  ? rcu_is_watching+0x15/0xb0
[  273.045591][ T6912]  ? rcu_is_watching+0x15/0xb0
[  273.045607][ T6912]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  273.045631][ T6912]  charge_memcg+0x9f/0x180
[  273.045652][ T6912]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  273.045673][ T6912]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  273.045697][ T6912]  __read_swap_cache_async+0x28c/0x510
[  273.045719][ T6912]  swap_cluster_readahead+0x305/0x5f0
[  273.045739][ T6912]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  273.045760][ T6912]  ? rcu_is_watching+0x15/0xb0
[  273.045775][ T6912]  ? filemap_get_entry+0xad/0x2f0
[  273.045793][ T6912]  ? get_vma_policy+0x27c/0x3c0
[  273.045815][ T6912]  swapin_readahead+0x17d/0xb50
[  273.045833][ T6912]  ? __pfx_filemap_get_entry+0x10/0x10
[  273.045852][ T6912]  ? get_swap_device_info+0x1c/0x2b0
[  273.045870][ T6912]  ? rcu_is_watching+0x15/0xb0
[  273.045886][ T6912]  ? __pfx_swapin_readahead+0x10/0x10
[  273.045906][ T6912]  ? __filemap_get_folio+0x9a6/0xaf0
[  273.045926][ T6912]  ? swap_cache_get_folio+0xae/0x3b0
[  273.045945][ T6912]  do_swap_page+0x525/0x5ac0
[  273.045965][ T6912]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  273.045987][ T6912]  ? ___pte_offset_map+0x29/0x250
[  273.046007][ T6912]  ? lock_acquire+0x5f/0x360
[  273.046022][ T6912]  ? do_swap_page+0x184/0x5ac0
[  273.046041][ T6912]  ? __pfx_do_swap_page+0x10/0x10
[  273.046060][ T6912]  ? __pfx_default_wake_function+0x10/0x10
[  273.046076][ T6912]  ? ___pte_offset_map+0x45/0x250
[  273.046095][ T6912]  ? ___pte_offset_map+0x1cf/0x250
[  273.046116][ T6912]  ? pte_offset_map_rw_nolock+0xea/0x160
[  273.046136][ T6912]  __handle_mm_fault+0xe55/0x5400
[  273.046168][ T6912]  ? __pfx___handle_mm_fault+0x10/0x10
[  273.046188][ T6912]  ? rcu_is_watching+0x15/0xb0
[  273.046206][ T6912]  ? lock_vma_under_rcu+0x3cb/0x450
[  273.046223][ T6912]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  273.046239][ T6912]  handle_mm_fault+0x40a/0x8e0
[  273.046263][ T6912]  do_user_addr_fault+0xa81/0x1390
[  273.046282][ T6912]  ? rcu_is_watching+0x15/0xb0
[  273.046299][ T6912]  ? trace_page_fault_user+0x84/0x1e0
[  273.046316][ T6912]  exc_page_fault+0x82/0x100
[  273.046336][ T6912]  asm_exc_page_fault+0x26/0x30
[  273.046352][ T6912] RIP: 0033:0x7f04eafc14a8
[  273.046367][ T6912] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  273.046382][ T6912] RSP: 002b:00007ffd5b246090 EFLAGS: 00010293
[  273.046397][ T6912] RAX: 0000000000000000 RBX: 00000000000003ef RCX: 00007f04eafc14a5
[  273.046409][ T6912] RDX: 00007ffd5b2460d0 RSI: 0000000000000000 RDI: 0000000000000000
[  273.046419][ T6912] RBP: 00007ffd5b24613c R08: 0000000000000000 R09: 0000000000000000
[  273.046430][ T6912] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  273.046441][ T6912] R13: 00000000000927c0 R14: 000000000003ee70 R15: 00007ffd5b246190
[  273.046459][ T6912]  </TASK>
[  273.046519][ T6912] memory: usage 307200kB, limit 307200kB, failcnt 53363
[  273.254621][T13541] /dev/rnullb0: Can't open blockdev
[  273.256120][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  273.310385][T13543] /dev/rnullb0: Can't open blockdev
[  273.314675][   T10] dvb-usb: error while querying for an remote control event.
[  273.397546][ T6912] memory+swap: usage 308096kB, limit 9007199254740988kB, failcnt 0
[  273.507340][ T6912] kmem: usage 3552kB, limit 9007199254740988kB, failcnt 0
[  273.514838][ T6912] Memory cgroup stats for /syz4:
[  273.514967][ T6912] cache 310194176
[  273.563551][ T6912] rss 147456
[  273.567142][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  273.572876][   T10] dvb-usb: error while querying for an remote control event.
[  273.585465][T13555] /dev/rnullb0: Can't open blockdev
[  273.592678][ T6912] rss_huge 0
[  273.601123][ T6912] shmem 310194176
[  273.608322][ T6912] mapped_file 0
[  273.616326][ T6912] dirty 0
[  273.628011][ T6912] writeback 0
[  273.631822][ T6912] workingset_refault_anon 1463
[  273.636638][ T6912] workingset_refault_file 2952
[  273.642380][ T6912] swap 745472
[  273.645736][ T6912] swapcached 159744
[  273.649963][ T6912] pgpgin 647873
[  273.653804][ T6912] pgpgout 575682
[  273.654714][T13557] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  273.657390][ T6912] pgfault 209722
[  273.670572][ T6912] pgmajfault 14328
[  273.670653][T13557] XFS (nbd0): SB validate failed with error -5.
[  273.675107][ T6912] inactive_anon 310194176
[  273.686440][ T6912] active_anon 192512
[  273.690429][ T6912] inactive_file 0
[  273.694409][ T6912] active_file 0
[  273.698010][ T6912] unevictable 0
[  273.701536][ T6912] hierarchical_memory_limit 314572800
[  273.708860][ T6912] hierarchical_memsw_limit 9223372036854771712
[  273.715465][ T6912] total_cache 310194176
[  273.719725][ T6912] total_rss 147456
[  273.723486][ T6912] total_rss_huge 0
[  273.729079][ T6912] total_shmem 310194176
[  273.744146][ T6912] total_mapped_file 0
[  273.748946][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  273.754814][    T9] dvb-usb: error while querying for an remote control event.
[  273.766128][ T6912] total_dirty 0
[  273.769770][ T6912] total_writeback 0
[  273.773611][ T6912] total_workingset_refault_anon 1463
[  273.779040][ T6912] total_workingset_refault_file 2952
[  273.785768][ T6912] total_swap 745472
[  273.789814][ T6912] total_swapcached 159744
[  273.794685][ T6912] total_pgpgin 647873
[  273.821728][T13572] veth1_macvtap: left promiscuous mode
[  273.853231][ T6912] total_pgpgout 575682
[  273.854544][T13572] macsec0: entered allmulticast mode
[  273.888003][ T6912] total_pgfault 209722
[  273.892185][ T6912] total_pgmajfault 14328
[  273.926344][ T6912] total_inactive_anon 310194176
[  273.934024][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  273.942591][    T9] dvb-usb: error while querying for an remote control event.
[  273.960967][ T6912] total_active_anon 192512
[  273.991885][ T6912] total_inactive_file 0
[  274.001899][ T6912] total_active_file 0
[  274.023583][ T6912] total_unevictable 0
[  274.032711][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2218'.
[  274.083852][ T6912] anon_cost 0
[  274.087165][ T6912] file_cost 0
[  274.090808][ T6912] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2174,pid=13450,uid=0
[  274.108209][ T6912] Memory cgroup out of memory: Killed process 13450 (syz.4.2174) total-vm:102156kB, anon-rss:10332kB, file-rss:23208kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000
[  274.125638][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  274.131371][ T6129] dvb-usb: error while querying for an remote control event.
[  274.272296][T13599] /dev/rnullb0: Can't open blockdev
[  274.309365][T13601] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  274.317855][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  274.323592][    T9] dvb-usb: error while querying for an remote control event.
[  274.442897][ T5873] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  274.516902][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  274.522674][    T9] dvb-usb: error while querying for an remote control event.
[  274.613202][ T5908] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  274.710659][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  274.716420][    T9] dvb-usb: error while querying for an remote control event.
[  274.787889][ T5908] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  274.799180][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.808690][ T5908] usb 2-1: Product: syz
[  274.812990][ T5908] usb 2-1: Manufacturer: syz
[  274.820352][ T5908] usb 2-1: SerialNumber: syz
[  274.832037][ T5908] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  274.853399][ T2152] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  274.891241][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  274.897002][    T9] dvb-usb: error while querying for an remote control event.
[  275.082727][T13603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.094280][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  275.100330][T13603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.116347][    T9] dvb-usb: error while querying for an remote control event.
[  275.189986][T13615] syzkaller1: entered promiscuous mode
[  275.215405][T13615] syzkaller1: entered allmulticast mode
[  275.264810][T13623] netlink: 'syz.2.2228': attribute type 10 has an invalid length.
[  275.288373][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  275.294511][ T6129] dvb-usb: error while querying for an remote control event.
[  275.337885][T13622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.349257][T13622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.468566][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  275.476146][ T6129] dvb-usb: error while querying for an remote control event.
[  275.590367][ T5908] usb 2-1: USB disconnect, device number 60
[  275.661369][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  275.667132][ T6129] dvb-usb: error while querying for an remote control event.
[  275.853676][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  275.859431][ T6129] dvb-usb: error while querying for an remote control event.
[  276.035370][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  276.041131][ T6129] dvb-usb: error while querying for an remote control event.
[  276.217012][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  276.222919][ T6129] dvb-usb: error while querying for an remote control event.
[  276.238140][ T2152] usb 2-1: Service connection timeout for: 256
[  276.244727][ T2152] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  276.252987][ T2152] ath9k_htc: Failed to initialize the device
[  276.259261][ T5908] usb 2-1: ath9k_htc: USB layer deinitialized
[  276.400866][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  276.406631][ T6129] dvb-usb: error while querying for an remote control event.
[  276.580298][ T5908] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  276.592090][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  276.597882][   T10] dvb-usb: error while querying for an remote control event.
[  276.687110][    T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  276.730189][ T5908] usb 2-1: device descriptor read/64, error -71
[  276.772699][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  276.782124][   T10] dvb-usb: error while querying for an remote control event.
[  276.851889][    T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  276.868150][    T9] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  276.882427][    T9] usb 5-1: Product: syz
[  276.886815][    T9] usb 5-1: SerialNumber: syz
[  276.895582][ T5859] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  276.907251][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  276.907273][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  276.907283][ T5859] Call Trace:
[  276.907289][ T5859]  <TASK>
[  276.907294][ T5859]  dump_stack_lvl+0x189/0x250
[  276.907321][ T5859]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.907342][ T5859]  ? __pfx__printk+0x10/0x10
[  276.907366][ T5859]  ? rcu_is_watching+0x15/0xb0
[  276.907386][ T5859]  dump_header+0xd3/0x480
[  276.907400][ T5859]  oom_kill_process+0x387/0x920
[  276.907419][ T5859]  out_of_memory+0xf09/0x12a0
[  276.907438][ T5859]  ? rcu_is_watching+0x15/0xb0
[  276.907455][ T5859]  ? __pfx_out_of_memory+0x10/0x10
[  276.907470][ T5859]  ? percpu_ref_put+0x19/0x180
[  276.907485][ T5859]  ? lock_release+0x4b/0x3e0
[  276.907500][ T5859]  mem_cgroup_out_of_memory+0x145/0x240
[  276.907515][ T5859]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  276.907532][ T5859]  ? _raw_spin_unlock+0x28/0x50
[  276.907549][ T5859]  ? memcg1_oom_prepare+0x37f/0x450
[  276.907568][ T5859]  try_charge_memcg+0xdff/0x1290
[  276.907592][ T5859]  ? rcu_is_watching+0x15/0xb0
[  276.907613][ T5859]  ? __pfx_try_charge_memcg+0x10/0x10
[  276.907632][ T5859]  ? rcu_irq_exit_check_preempt+0x201/0x210
[  276.907648][ T5859]  ? xa_load+0x60/0x210
[  276.907666][ T5859]  ? rcu_is_watching+0x15/0xb0
[  276.907682][ T5859]  ? rcu_is_watching+0x15/0xb0
[  276.907696][ T5859]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  276.907717][ T5859]  charge_memcg+0x9f/0x180
[  276.907736][ T5859]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  276.907755][ T5859]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  276.907776][ T5859]  __read_swap_cache_async+0x28c/0x510
[  276.907797][ T5859]  swap_cluster_readahead+0x305/0x5f0
[  276.907826][ T5859]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  276.907846][ T5859]  ? rcu_is_watching+0x15/0xb0
[  276.907862][ T5859]  ? filemap_get_entry+0xad/0x2f0
[  276.907879][ T5859]  ? get_vma_policy+0x27c/0x3c0
[  276.907899][ T5859]  swapin_readahead+0x17d/0xb50
[  276.907915][ T5859]  ? __pfx_filemap_get_entry+0x10/0x10
[  276.907933][ T5859]  ? get_swap_device_info+0x1c/0x2b0
[  276.907949][ T5859]  ? rcu_is_watching+0x15/0xb0
[  276.907963][ T5859]  ? __pfx_swapin_readahead+0x10/0x10
[  276.907979][ T5859]  ? __filemap_get_folio+0x9a6/0xaf0
[  276.907998][ T5859]  ? swap_cache_get_folio+0xae/0x3b0
[  276.908014][ T5859]  do_swap_page+0x525/0x5ac0
[  276.908031][ T5859]  ? filemap_map_pages+0x1374/0x1740
[  276.908053][ T5859]  ? ___pte_offset_map+0x29/0x250
[  276.908072][ T5859]  ? lock_acquire+0x5f/0x360
[  276.908085][ T5859]  ? do_swap_page+0x184/0x5ac0
[  276.908102][ T5859]  ? __pfx_do_swap_page+0x10/0x10
[  276.908120][ T5859]  ? __pfx_filemap_map_pages+0x10/0x10
[  276.908136][ T5859]  ? rcu_is_watching+0x15/0xb0
[  276.908152][ T5859]  ? __pfx_default_wake_function+0x10/0x10
[  276.908168][ T5859]  ? ___pte_offset_map+0x45/0x250
[  276.908184][ T5859]  ? ___pte_offset_map+0x1cf/0x250
[  276.908204][ T5859]  ? pte_offset_map_rw_nolock+0xea/0x160
[  276.908226][ T5859]  __handle_mm_fault+0xe55/0x5400
[  276.908252][ T5859]  ? __pfx___handle_mm_fault+0x10/0x10
[  276.908270][ T5859]  ? rcu_is_watching+0x15/0xb0
[  276.908288][ T5859]  ? lock_vma_under_rcu+0x3cb/0x450
[  276.908301][ T5859]  ? __pfx___might_resched+0x10/0x10
[  276.908315][ T5859]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  276.908329][ T5859]  handle_mm_fault+0x40a/0x8e0
[  276.908352][ T5859]  do_user_addr_fault+0xa81/0x1390
[  276.908369][ T5859]  ? rcu_is_watching+0x15/0xb0
[  276.908383][ T5859]  ? trace_page_fault_user+0x84/0x1e0
[  276.908397][ T5859]  exc_page_fault+0x82/0x100
[  276.908414][ T5859]  asm_exc_page_fault+0x26/0x30
[  276.908427][ T5859] RIP: 0033:0x7f6a67a65bf7
[  276.908443][ T5859] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 a8 fb e8 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d b9 fa e8 00 48 01 d1 39 7c 24
[  276.908456][ T5859] RSP: 002b:00007ffd2b37a8f0 EFLAGS: 00010202
[  276.908469][ T5859] RAX: 0000001b32b24000 RBX: 0000000000000600 RCX: 0000000000040358
[  276.908479][ T5859] RDX: 0000000009a68af7 RSI: 00007ffd2b37a980 RDI: 0000000000000018
[  276.908489][ T5859] RBP: 00007ffd2b37a92c R08: 0000000024d05f7f R09: 7fffffffffffffff
[  276.908498][ T5859] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000001388
[  276.908508][ T5859] R13: 00000000000927c0 R14: 00000000000401a5 R15: 00007ffd2b37a980
[  276.908523][ T5859]  </TASK>
[  276.908539][ T5859] memory: usage 307200kB, limit 307200kB, failcnt 52853
[  276.913179][    T9] usb 5-1: config 0 descriptor??
[  276.918076][ T5859] memory+swap: usage 308612kB, limit 9007199254740988kB, failcnt 0
[  276.965844][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  276.968835][ T5859] kmem: usage 4008kB, limit 9007199254740988kB, failcnt 0
[  276.972426][ T6553] dvb-usb: error while querying for an remote control event.
[  276.977536][ T5859] Memory cgroup stats for /syz0:
[  276.977640][ T5859] cache 306237440
[  276.977674][ T5859] rss 4177920
[  276.977680][ T5859] rss_huge 0
[  276.977687][ T5859] shmem 306237440
[  276.977694][ T5859] mapped_file 0
[  276.977700][ T5859] dirty 0
[  276.977706][ T5859] writeback 0
[  276.977713][ T5859] workingset_refault_anon 3153
[  276.977719][ T5859] workingset_refault_file 12455
[  276.977727][ T5859] swap 1445888
[  276.977733][ T5859] swapcached 36864
[  276.977740][ T5859] pgpgin 1112727
[  276.977746][ T5859] pgpgout 1039494
[  276.977753][ T5859] pgfault 266323
[  276.977758][ T5859] pgmajfault 7865
[  276.977765][ T5859] inactive_anon 2134016
[  276.977772][ T5859] active_anon 0
[  276.977778][ T5859] inactive_file 0
[  276.977785][ T5859] active_file 0
[  276.977791][ T5859] unevictable 306237440
[  276.977804][ T5859] hierarchical_memory_limit 314572800
[  276.977812][ T5859] hierarchical_memsw_limit 9223372036854771712
[  276.977820][ T5859] total_cache 306237440
[  276.977826][ T5859] total_rss 4177920
[  276.977832][ T5859] total_rss_huge 0
[  276.977838][ T5859] total_shmem 306237440
[  277.168509][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  277.169966][ T5908] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  277.182071][   T10] dvb-usb: error while querying for an remote control event.
[  277.187711][ T5859] total_mapped_file 0
[  277.192068][    T9] usb 5-1: USB disconnect, device number 68
[  277.196560][ T5859] total_dirty 0
[  277.382422][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  277.384177][ T5859] total_writeback 0
[  277.386890][   T10] dvb-usb: error while querying for an remote control event.
[  277.390512][ T5859] total_workingset_refault_anon 3153
[  277.390521][ T5859] total_workingset_refault_file 12455
[  277.390528][ T5859] total_swap 1445888
[  277.390534][ T5859] total_swapcached 36864
[  277.390540][ T5859] total_pgpgin 1112727
[  277.390547][ T5859] total_pgpgout 1039494
[  277.556825][ T5908] usb 2-1: device descriptor read/64, error -71
[  277.563289][ T5859] total_pgfault 266323
[  277.567429][ T5859] total_pgmajfault 7865
[  277.571591][ T5859] total_inactive_anon 2134016
[  277.576306][ T5859] total_active_anon 0
[  277.577417][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  277.580276][ T5859] total_inactive_file 0
[  277.590213][ T5859] total_active_file 0
[  277.594199][ T5859] total_unevictable 306237440
[  277.598901][ T5859] anon_cost 0
[  277.599288][   T10] dvb-usb: error while querying for an remote control event.
[  277.602177][ T5859] file_cost 0
[  277.613334][ T5859] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2229,pid=13621,uid=0
[  277.628307][ T5859] Memory cgroup out of memory: Killed process 13621 (syz.0.2229) total-vm:102020kB, anon-rss:5108kB, file-rss:23336kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000
[  277.670801][ T5908] usb usb2-port1: attempt power cycle
[  277.777932][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  277.788965][   T10] dvb-usb: error while querying for an remote control event.
[  277.808714][T13651] /dev/rnullb0: Can't open blockdev
[  277.969971][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  277.976857][    T9] dvb-usb: error while querying for an remote control event.
[  278.034175][ T5908] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  278.056188][ T5908] usb 2-1: device descriptor read/8, error -71
[  278.151817][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  278.157578][ T6553] dvb-usb: error while querying for an remote control event.
[  278.165056][   T10] usb 5-1: new full-speed USB device number 69 using dummy_hcd
[  278.322836][ T5908] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  278.344175][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  278.345272][ T5908] usb 2-1: device descriptor read/8, error -71
[  278.349932][ T6553] dvb-usb: error while querying for an remote control event.
[  278.365097][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  278.373507][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[  278.382926][   T10] usb 5-1: config 8 has an invalid interface number: 139 but max is 0
[  278.391232][   T10] usb 5-1: config 8 has no interface number 0
[  278.397400][   T10] usb 5-1: config 8 interface 139 has no altsetting 0
[  278.407084][   T10] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02
[  278.416341][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.424883][   T10] usb 5-1: Product: syz
[  278.429111][   T10] usb 5-1: Manufacturer: syz
[  278.434953][   T10] usb 5-1: SerialNumber: syz
[  278.473552][ T5908] usb usb2-port1: unable to enumerate USB device
[  278.525912][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  278.531968][ T6553] dvb-usb: error while querying for an remote control event.
[  278.614243][T13660] ./cgroup: Can't lookup blockdev
[  278.667883][   T10] go7007 5-1:8.139: probe with driver go7007 failed with error -12
[  278.683930][   T10] usb 5-1: USB disconnect, device number 69
[  278.710152][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  278.722860][ T6553] dvb-usb: error while querying for an remote control event.
[  278.742843][ T7398] Bluetooth: hci2: Frame reassembly failed (-84)
[  278.813842][T13679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.823209][T13679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.833738][T13679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.843796][T13679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.900895][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  278.906644][   T10] dvb-usb: error while querying for an remote control event.
[  279.082268][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  279.088085][   T10] dvb-usb: error while querying for an remote control event.
[  279.265053][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  279.270965][   T10] dvb-usb: error while querying for an remote control event.
[  279.333543][T13684] /dev/rnullb0: Can't open blockdev
[  279.340268][T13684] fuse: Unknown parameter 'ĂNe‚hŤłčIŽřyeN5s@$G�ăqYÖKç>”"ľ
Iüw‰äľę@™íëßdÖ¶ż‚Ô/gZ¤cĺ`7A$ď�wµŕ­EAiXŠľcI$ęZśy#GąmÉmŇ®¤
[  279.340268][T13684]  ŢS4“ĎG—�»óĂܤ¶˝ĺŽÓ˙{0x0000000000000006'
[  279.445960][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  279.452609][    T9] dvb-usb: error while querying for an remote control event.
[  279.475452][T13692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.489960][T13694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.499035][T13692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.507004][T13694] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.532027][T13697] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2254'.
[  279.543855][T13697] netlink: 'syz.1.2254': attribute type 3 has an invalid length.
[  279.553116][T13697] /dev/rnullb0: Can't open blockdev
[  279.612346][T13706] syz_tun: entered allmulticast mode
[  279.637732][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  279.645044][ T6553] dvb-usb: error while querying for an remote control event.
[  279.672685][   T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  279.822579][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  279.828749][ T6553] dvb-usb: error while querying for an remote control event.
[  279.851642][   T10] usb 5-1: Using ep0 maxpacket: 32
[  279.858462][   T10] usb 5-1: config index 0 descriptor too short (expected 259, got 41)
[  279.867139][   T10] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  279.890718][   T10] usb 5-1: can't read configurations, error -22
[  279.934786][T13736] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2265'.
[  279.960653][T13742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.970146][T13742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.012006][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  280.017775][ T6553] dvb-usb: error while querying for an remote control event.
[  280.033435][   T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  280.193771][ T2152] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  280.193798][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  280.214963][ T6553] dvb-usb: error while querying for an remote control event.
[  280.226493][   T10] usb 5-1: Using ep0 maxpacket: 32
[  280.233080][   T10] usb 5-1: config index 0 descriptor too short (expected 259, got 41)
[  280.241693][   T10] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  280.257805][   T10] usb 5-1: can't read configurations, error -22
[  280.265549][   T10] usb usb5-port1: attempt power cycle
[  280.367407][ T2152] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  280.386042][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  280.386251][ T2152] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  280.392044][ T6553] dvb-usb: error while querying for an remote control event.
[  280.408595][ T2152] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  280.417645][ T2152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  280.434942][ T2152] usb 2-1: SerialNumber: syz
[  280.589210][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  280.594991][ T6553] dvb-usb: error while querying for an remote control event.
[  280.632220][   T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  280.661839][ T2152] usb 2-1: skipping empty audio interface (v1)
[  280.675269][   T10] usb 5-1: Using ep0 maxpacket: 32
[  280.681922][   T10] usb 5-1: config index 0 descriptor too short (expected 259, got 41)
[  280.695295][   T10] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  280.697829][ T2152] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  280.705348][   T10] usb 5-1: can't read configurations, error -22
[  280.755145][ T2152] usb 2-1: USB disconnect, device number 65
[  280.770994][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  280.777069][ T6553] dvb-usb: error while querying for an remote control event.
[  280.783182][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  280.834562][T13759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.844057][T13759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.857694][   T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  280.889993][   T10] usb 5-1: Using ep0 maxpacket: 32
[  280.897032][   T10] usb 5-1: config index 0 descriptor too short (expected 259, got 41)
[  280.905981][   T10] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  280.908464][T13759] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (3800 ns). Using initial count to start timer.
[  280.915596][   T10] usb 5-1: can't read configurations, error -22
[  280.937044][T13759] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  280.938374][   T10] usb usb5-port1: unable to enumerate USB device
[  280.946850][ T5873] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  280.953298][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  280.962220][T13759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2268'.
[  280.979774][ T6553] dvb-usb: error while querying for an remote control event.
[  280.999435][T13759] /dev/rnullb0: Can't open blockdev
[  281.071437][T13766] /dev/rnullb0: Can't open blockdev
[  281.159026][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  281.164876][ T6553] dvb-usb: error while querying for an remote control event.
[  281.180288][T13776] overlayfs: failed to resolve '/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  281.337509][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  281.471691][   T10] dvb-usb: error while querying for an remote control event.
[  281.647844][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  281.654957][   T10] dvb-usb: error while querying for an remote control event.
[  281.685825][T13797] /dev/rnullb0: Can't open blockdev
[  281.700179][T13799] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  281.709391][T13799] /dev/rnullb0: Can't open blockdev
[  281.745203][T13801] /dev/rnullb0: Can't open blockdev
[  281.752631][T13801] /dev/rnullb0: Can't open blockdev
[  281.793657][T13805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.804705][T13805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.829616][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  281.835454][   T10] dvb-usb: error while querying for an remote control event.
[  282.011031][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  282.016786][   T10] dvb-usb: error while querying for an remote control event.
[  282.194564][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  282.200578][   T10] dvb-usb: error while querying for an remote control event.
[  282.374699][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  282.389354][   T10] dvb-usb: error while querying for an remote control event.
[  282.467867][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  282.471702][   T30] kauditd_printk_skb: 57 callbacks suppressed
[  282.471718][   T30] audit: type=1326 audit(2000000061.109:26992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13795 comm="syz.0.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a67b8ebe9 code=0x7fc00000
[  282.570715][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  282.586533][   T10] dvb-usb: error while querying for an remote control event.
[  282.723546][   T30] audit: type=1800 audit(2000000061.343:26993): pid=13811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2284" name="bus" dev="ramfs" ino=46352 res=0 errno=0
[  282.802283][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  282.814078][ T6553] dvb-usb: error while querying for an remote control event.
[  282.994649][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  283.004761][ T6553] dvb-usb: error while querying for an remote control event.
[  283.031501][T13819] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  283.054107][T13819] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  283.186986][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  283.193995][   T10] dvb-usb: error while querying for an remote control event.
[  283.386722][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  283.392897][ T6553] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  283.402242][   T10] dvb-usb: error while querying for an remote control event.
[  283.414792][T13825] /dev/rnullb0: Can't open blockdev
[  283.561746][ T6553] usb 5-1: Using ep0 maxpacket: 16
[  283.577406][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  283.583978][   T10] dvb-usb: error while querying for an remote control event.
[  283.594582][ T6553] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[  283.602933][ T6553] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  283.614511][ T6553] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  283.623287][ T6553] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  283.631790][ T6553] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  283.640975][ T6553] usb 5-1: config 0 has no interface number 0
[  283.647380][ T6553] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  283.658821][ T6553] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  283.668881][ T6553] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  283.688160][ T6553] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  283.724963][ T6553] usb 5-1: config 0 interface 125 has no altsetting 0
[  283.731768][ T6553] usb 5-1: config 0 interface 125 has no altsetting 2
[  283.740850][ T6553] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  283.750294][ T6553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.758506][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  283.770601][   T10] dvb-usb: error while querying for an remote control event.
[  283.780382][ T6553] usb 5-1: Product: syz
[  283.785096][ T6553] usb 5-1: Manufacturer: syz
[  283.789985][ T6553] usb 5-1: SerialNumber: syz
[  283.796748][ T6553] usb 5-1: config 0 descriptor??
[  283.804069][ T6553] usb 5-1: selecting invalid altsetting 2
[  283.948213][T13842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.967772][T13842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.968397][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  283.989418][   T10] dvb-usb: error while querying for an remote control event.
[  284.181348][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  284.187147][   T10] dvb-usb: error while querying for an remote control event.
[  284.230300][T13073] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  284.235109][    C0] usb 5-1: async_complete: urb error -71
[  284.247342][    C0] usb 5-1: async_complete: urb error -71
[  284.253056][    C0] usb 5-1: async_complete: urb error -71
[  284.260066][ T6553] get_1284_register: usb error -71
[  284.265263][ T6553] uss720 5-1:0.125: probe with driver uss720 failed with error -71
[  284.288497][T13073] CPU: 1 UID: 0 PID: 13073 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  284.288524][T13073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  284.288534][T13073] Call Trace:
[  284.288541][T13073]  <TASK>
[  284.288548][T13073]  dump_stack_lvl+0x189/0x250
[  284.288576][T13073]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.288599][T13073]  ? __pfx__printk+0x10/0x10
[  284.288622][T13073]  ? rcu_is_watching+0x15/0xb0
[  284.288642][T13073]  dump_header+0xd3/0x480
[  284.288657][T13073]  oom_kill_process+0x387/0x920
[  284.288678][T13073]  out_of_memory+0xf09/0x12a0
[  284.288697][T13073]  ? rcu_is_watching+0x15/0xb0
[  284.288715][T13073]  ? __pfx_out_of_memory+0x10/0x10
[  284.288730][T13073]  ? percpu_ref_put+0x19/0x180
[  284.288746][T13073]  ? lock_release+0x4b/0x3e0
[  284.288764][T13073]  mem_cgroup_out_of_memory+0x145/0x240
[  284.288782][T13073]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  284.288803][T13073]  ? _raw_spin_unlock+0x28/0x50
[  284.288821][T13073]  ? memcg1_oom_prepare+0x37f/0x450
[  284.288843][T13073]  try_charge_memcg+0xdff/0x1290
[  284.288864][T13073]  ? rcu_is_watching+0x15/0xb0
[  284.288886][T13073]  ? __pfx_try_charge_memcg+0x10/0x10
[  284.288907][T13073]  ? rcu_irq_exit_check_preempt+0x201/0x210
[  284.288923][T13073]  ? xa_load+0x60/0x210
[  284.288943][T13073]  ? rcu_is_watching+0x15/0xb0
[  284.288961][T13073]  ? rcu_is_watching+0x15/0xb0
[  284.288985][T13073]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  284.289007][T13073]  charge_memcg+0x9f/0x180
[  284.289027][T13073]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  284.289048][T13073]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  284.289072][T13073]  __read_swap_cache_async+0x28c/0x510
[  284.289095][T13073]  swap_cluster_readahead+0x4cf/0x5f0
[  284.289116][T13073]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  284.289137][T13073]  ? rcu_is_watching+0x15/0xb0
[  284.289152][T13073]  ? filemap_get_entry+0xad/0x2f0
[  284.289170][T13073]  ? get_vma_policy+0x27c/0x3c0
[  284.289193][T13073]  swapin_readahead+0x17d/0xb50
[  284.289211][T13073]  ? __pfx_filemap_get_entry+0x10/0x10
[  284.289230][T13073]  ? get_swap_device_info+0x1c/0x2b0
[  284.289248][T13073]  ? rcu_is_watching+0x15/0xb0
[  284.289264][T13073]  ? __pfx_swapin_readahead+0x10/0x10
[  284.289283][T13073]  ? __filemap_get_folio+0x9a6/0xaf0
[  284.289303][T13073]  ? swap_cache_get_folio+0xae/0x3b0
[  284.289322][T13073]  do_swap_page+0x525/0x5ac0
[  284.289343][T13073]  ? rcu_is_watching+0x15/0xb0
[  284.289361][T13073]  ? finish_task_switch+0x266/0x950
[  284.289384][T13073]  ? ___pte_offset_map+0x29/0x250
[  284.289406][T13073]  ? lock_acquire+0x5f/0x360
[  284.289421][T13073]  ? do_swap_page+0x184/0x5ac0
[  284.289440][T13073]  ? __pfx_do_swap_page+0x10/0x10
[  284.289460][T13073]  ? __pfx_default_wake_function+0x10/0x10
[  284.289477][T13073]  ? ___pte_offset_map+0x45/0x250
[  284.289496][T13073]  ? ___pte_offset_map+0x1cf/0x250
[  284.289519][T13073]  ? pte_offset_map_rw_nolock+0xea/0x160
[  284.289541][T13073]  __handle_mm_fault+0xe55/0x5400
[  284.289568][T13073]  ? __pfx___handle_mm_fault+0x10/0x10
[  284.289589][T13073]  ? rcu_is_watching+0x15/0xb0
[  284.289610][T13073]  ? lock_vma_under_rcu+0x3cb/0x450
[  284.289626][T13073]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  284.289644][T13073]  handle_mm_fault+0x40a/0x8e0
[  284.289669][T13073]  do_user_addr_fault+0xa81/0x1390
[  284.289689][T13073]  ? rcu_is_watching+0x15/0xb0
[  284.289706][T13073]  ? trace_page_fault_user+0x84/0x1e0
[  284.289723][T13073]  exc_page_fault+0x82/0x100
[  284.289745][T13073]  asm_exc_page_fault+0x26/0x30
[  284.289760][T13073] RIP: 0033:0x7f5f0c5c14a8
[  284.289775][T13073] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  284.289789][T13073] RSP: 002b:00007ffd21c5ce60 EFLAGS: 00010293
[  284.289805][T13073] RAX: 0000000000000000 RBX: 000000000000008f RCX: 00007f5f0c5c14a5
[  284.289816][T13073] RDX: 00007ffd21c5cea0 RSI: 0000000000000000 RDI: 0000000000000000
[  284.289827][T13073] RBP: 00007ffd21c5cf0c R08: 0000000000000000 R09: 0000000000000000
[  284.289838][T13073] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  284.289849][T13073] R13: 00000000000927c0 R14: 00000000000418f4 R15: 00007ffd21c5cf60
[  284.289868][T13073]  </TASK>
[  284.289952][T13073] memory: usage 307200kB, limit 307200kB, failcnt 7525
[  284.305014][ T6553] usb 5-1: USB disconnect, device number 74
[  284.645173][T13844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.653278][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  284.653306][   T10] dvb-usb: error while querying for an remote control event.
[  284.701678][T13844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.702902][T13073] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0
[  284.771336][T13073] kmem: usage 2004kB, limit 9007199254740988kB, failcnt 0
[  284.800175][T13073] Memory cgroup stats for /syz1:
[  284.800589][T13073] cache 312520704
[  284.832349][T13073] rss 0
[  284.843142][T13073] rss_huge 0
[  284.846666][T13073] shmem 312520704
[  284.850292][T13073] mapped_file 0
[  284.853745][T13073] dirty 0
[  284.865428][T13073] writeback 0
[  284.876440][T13073] workingset_refault_anon 1398
[  284.881359][T13073] workingset_refault_file 3533
[  284.886119][T13073] swap 454656
[  284.892998][T13073] swapcached 0
[  284.902596][T13073] pgpgin 571629
[  284.906886][T13073] pgpgout 499573
[  284.910792][T13073] pgfault 322721
[  284.914602][T13073] pgmajfault 17961
[  284.918323][T13073] inactive_anon 0
[  284.922116][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  284.927853][    T9] dvb-usb: error while querying for an remote control event.
[  284.979206][T13073] active_anon 214335488
[  284.995423][T13073] inactive_file 0
[  284.999082][T13073] active_file 0
[  285.002995][T13073] unevictable 98185216
[  285.068506][T13073] hierarchical_memory_limit 314572800
[  285.073902][T13073] hierarchical_memsw_limit 9223372036854771712
[  285.104065][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  285.110313][ T6553] dvb-usb: error while querying for an remote control event.
[  285.117866][T13073] total_cache 312520704
[  285.134743][T13073] total_rss 0
[  285.138051][T13073] total_rss_huge 0
[  285.141763][T13073] total_shmem 312520704
[  285.194745][T13073] total_mapped_file 0
[  285.204680][T13073] total_dirty 0
[  285.227879][T13073] total_writeback 0
[  285.250934][T13073] total_workingset_refault_anon 1398
[  285.268254][T13073] total_workingset_refault_file 3533
[  285.282536][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  285.284503][T13073] total_swap 454656
[  285.289546][ T6553] dvb-usb: error while querying for an remote control event.
[  285.300658][T13073] total_swapcached 0
[  285.308391][T13073] total_pgpgin 571629
[  285.349650][T13073] total_pgpgout 499573
[  285.356375][T13073] total_pgfault 322721
[  285.367161][T13073] total_pgmajfault 17961
[  285.372031][T13073] total_inactive_anon 0
[  285.376241][T13073] total_active_anon 214335488
[  285.382406][T13073] total_inactive_file 0
[  285.386760][T13073] total_active_file 0
[  285.394090][T13073] total_unevictable 98185216
[  285.398939][T13073] anon_cost 0
[  285.404633][T13073] file_cost 0
[  285.407971][T13073] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2282,pid=13806,uid=0
[  285.445185][T13073] Memory cgroup out of memory: Killed process 13806 (syz.1.2282) total-vm:102024kB, anon-rss:9852kB, file-rss:23336kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000
[  285.486011][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  285.504791][ T6553] dvb-usb: error while querying for an remote control event.
[  285.690147][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  285.696050][ T6553] dvb-usb: error while querying for an remote control event.
[  285.871756][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  285.880046][ T6553] dvb-usb: error while querying for an remote control event.
[  286.063079][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  286.069022][ T6553] dvb-usb: error while querying for an remote control event.
[  286.142080][T13881] bpf: Bad value for 'gid'
[  286.245064][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  286.251468][ T6553] dvb-usb: error while querying for an remote control event.
[  286.426327][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  286.432088][   T10] dvb-usb: error while querying for an remote control event.
[  286.484697][T13892] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2309'.
[  286.545252][T13897] /dev/rnullb0: Can't open blockdev
[  286.560381][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2311'.
[  286.607988][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  286.613746][   T10] dvb-usb: error while querying for an remote control event.
[  286.789964][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  286.795811][   T10] dvb-usb: error while querying for an remote control event.
[  286.823316][   T30] audit: type=1326 audit(2000000065.188:26994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13913 comm="syz.2.2316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5671b8ebe9 code=0x0
[  286.855030][ T5958] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  286.972284][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  286.978081][   T10] dvb-usb: error while querying for an remote control event.
[  286.992946][ T5958] usb 2-1: device descriptor read/64, error -71
[  287.153211][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  287.158989][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805a1df800: rx timeout, send abort
[  287.162633][T13917] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  287.167647][    C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805a1df800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session.
[  287.206755][   T10] dvb-usb: error while querying for an remote control event.
[  287.249534][ T5958] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  287.284008][T13920] /dev/rnullb0: Can't open blockdev
[  287.377807][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  287.383573][   T10] dvb-usb: error while querying for an remote control event.
[  287.388413][ T5958] usb 2-1: device descriptor read/64, error -71
[  287.431176][ T2152] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  287.506480][ T5958] usb usb2-port1: attempt power cycle
[  287.559545][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  287.565288][   T10] dvb-usb: error while querying for an remote control event.
[  287.604531][ T2152] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  287.615397][ T2152] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  287.625770][ T2152] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  287.635117][ T2152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  287.643110][ T2152] usb 5-1: SerialNumber: syz
[  287.742613][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  287.748524][   T10] dvb-usb: error while querying for an remote control event.
[  287.873274][ T2152] usb 5-1: 0:2 : does not exist
[  287.878211][ T5958] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  287.887218][ T2152] usb 5-1: unit 5: unexpected type 0x0c
[  287.902074][ T2152] usb 5-1: USB disconnect, device number 75
[  287.912671][ T5958] usb 2-1: device descriptor read/8, error -71
[  287.923307][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  287.926503][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  287.932025][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'.
[  287.953934][   T10] dvb-usb: error while querying for an remote control event.
[  288.141924][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  288.156205][   T10] dvb-usb: error while querying for an remote control event.
[  288.200928][ T5958] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  288.244563][ T5958] usb 2-1: device descriptor read/8, error -71
[  288.341927][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  288.347806][   T10] dvb-usb: error while querying for an remote control event.
[  288.362208][ T5958] usb usb2-port1: unable to enumerate USB device
[  288.432480][T13960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.446533][T13963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.455423][T13960] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.471731][T13967] /dev/rnullb0: Can't open blockdev
[  288.478317][T13964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.480541][T13963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.489304][T13964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.522472][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  288.528320][    T9] dvb-usb: error while querying for an remote control event.
[  288.735752][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  288.741534][    T9] dvb-usb: error while querying for an remote control event.
[  288.890130][T13979] fuse: Unknown parameter 'user‚id'
[  288.911397][T13979] netlink: 'syz.0.2336': attribute type 12 has an invalid length.
[  288.929321][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  288.935269][    T9] dvb-usb: error while querying for an remote control event.
[  288.986796][T13982] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2336'.
[  289.120372][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  289.126261][    T9] dvb-usb: error while querying for an remote control event.
[  289.312962][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  289.318723][    T9] dvb-usb: error while querying for an remote control event.
[  289.505203][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  289.515856][    T9] dvb-usb: error while querying for an remote control event.
[  289.726863][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  289.744698][    T9] dvb-usb: error while querying for an remote control event.
[  289.932781][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  289.946657][    T9] dvb-usb: error while querying for an remote control event.
[  289.957483][T13990] /dev/rnullb0: Can't open blockdev
[  290.091562][T13998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2341'.
[  290.135925][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  290.141688][   T10] dvb-usb: error while querying for an remote control event.
[  290.146718][T13999] /dev/rnullb0: Can't open blockdev
[  290.339587][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  290.349898][   T10] dvb-usb: error while querying for an remote control event.
[  290.531530][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  290.542121][   T10] dvb-usb: error while querying for an remote control event.
[  290.679865][T14016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.691314][T14015] binder: 14014:14015 ioctl c0306201 200000000080 returned -14
[  290.696168][T14016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.723722][T14015] syzkaller1: entered promiscuous mode
[  290.729577][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  290.736791][    T9] dvb-usb: error while querying for an remote control event.
[  290.755229][T14015] syzkaller1: entered allmulticast mode
[  290.898703][T14018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.908718][T14018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.916287][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  290.925155][    T9] dvb-usb: error while querying for an remote control event.
[  291.098091][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  291.103852][    T9] dvb-usb: error while querying for an remote control event.
[  291.280185][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  291.285946][    T9] dvb-usb: error while querying for an remote control event.
[  291.466106][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  291.485796][    T9] dvb-usb: error while querying for an remote control event.
[  291.511222][T14025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.527918][T14025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.544558][T14025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.555391][T14025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.572805][T14025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.582837][T14025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.686155][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  291.702055][    T9] dvb-usb: error while querying for an remote control event.
[  291.889605][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  291.895407][ T6553] dvb-usb: error while querying for an remote control event.
[  292.081566][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  292.348828][ T6553] dvb-usb: error while querying for an remote control event.
[  292.419217][T14052] /dev/rnullb0: Can't open blockdev
[  292.519903][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  292.525667][ T6553] dvb-usb: error while querying for an remote control event.
[  292.572666][T14054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.581303][T14054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.590343][T14054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.594936][ T5958] usb 5-1: new full-speed USB device number 76 using dummy_hcd
[  292.601648][T14054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.701709][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  292.707476][ T6553] dvb-usb: error while querying for an remote control event.
[  292.722468][T14056] /dev/rnullb0: Can't open blockdev
[  292.746764][T14058] /dev/rnullb0: Can't open blockdev
[  292.769313][ T5958] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  292.778250][ T5958] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  292.790683][ T5958] usb 5-1: config 0 has no interface number 0
[  292.797179][ T5958] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  292.809832][ T5958] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  292.822063][ T5958] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  292.832096][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.834932][T14064] netlink: 'syz.1.2366': attribute type 1 has an invalid length.
[  292.840270][ T5958] usb 5-1: Product: syz
[  292.850320][T14064] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2366'.
[  292.853744][ T5958] usb 5-1: Manufacturer: syz
[  292.866053][ T5958] usb 5-1: SerialNumber: syz
[  292.874275][ T5958] usb 5-1: config 0 descriptor??
[  292.879762][T14051] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  292.889344][ T5958] vmk80xx 5-1:0.6: driver 'vmk80xx' failed to auto-configure device.
[  292.894145][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  292.903149][   T10] dvb-usb: error while querying for an remote control event.
[  292.909000][ T5958] vmk80xx 5-1:0.6: probe with driver vmk80xx failed with error -22
[  293.075813][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  293.081645][   T10] dvb-usb: error while querying for an remote control event.
[  293.111258][   T10] usb 5-1: USB disconnect, device number 76
[  293.119913][ T6553] usb 2-1: new full-speed USB device number 70 using dummy_hcd
[  293.190137][T14066] syzkaller1: entered promiscuous mode
[  293.196260][T14066] syzkaller1: entered allmulticast mode
[  293.207530][T14066] xt_time: unknown flags 0xf4
[  293.222225][T14068] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  293.257667][ T6553] usb 2-1: device descriptor read/64, error -71
[  293.263974][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  293.273883][ T6129] dvb-usb: error while querying for an remote control event.
[  293.294598][T14070] /dev/rnullb0: Can't open blockdev
[  293.388377][T14071] /dev/rnullb0: Can't open blockdev
[  293.452997][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  293.458969][   T10] dvb-usb: error while querying for an remote control event.
[  293.525046][ T6553] usb 2-1: new full-speed USB device number 71 using dummy_hcd
[  293.633081][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  293.639031][   T10] dvb-usb: error while querying for an remote control event.
[  293.674669][ T6553] usb 2-1: device descriptor read/64, error -71
[  293.801044][T14102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2376'.
[  293.815014][ T6553] usb usb2-port1: attempt power cycle
[  293.825873][T14102] /dev/rnullb0: Can't open blockdev
[  293.856461][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  293.870003][   T10] dvb-usb: error while querying for an remote control event.
[  293.930872][T14106] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  293.938400][T14106] /dev/rnullb0: Can't open blockdev
[  294.072784][T14112] ./file0: Can't lookup blockdev
[  294.081941][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  294.090656][ T6129] dvb-usb: error while querying for an remote control event.
[  294.149249][T14114] /dev/rnullb0: Can't open blockdev
[  294.199054][ T6553] usb 2-1: new full-speed USB device number 72 using dummy_hcd
[  294.203932][T14118] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  294.213595][T14118] /dev/rnullb0: Can't open blockdev
[  294.231204][ T6553] usb 2-1: device descriptor read/8, error -71
[  294.273328][   T10] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  294.281450][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  294.289023][ T6129] dvb-usb: error while querying for an remote control event.
[  294.308465][T14127] /dev/rnullb0: Can't open blockdev
[  294.337146][T14122] /dev/rnullb0: Can't open blockdev
[  294.375043][T14133] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  294.382717][T14133] overlayfs: failed to set xattr on upper
[  294.388590][T14133] overlayfs: ...falling back to index=off.
[  294.394778][T14133] overlayfs: ...falling back to uuid=null.
[  294.458265][   T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  294.467573][   T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  294.477873][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  294.483909][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  294.493006][ T6553] usb 2-1: new full-speed USB device number 73 using dummy_hcd
[  294.501529][ T6129] dvb-usb: error while querying for an remote control event.
[  294.510074][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  294.521717][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  294.534007][ T6553] usb 2-1: device descriptor read/8, error -71
[  294.542330][   T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  294.554664][   T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  294.571008][   T10] usb 5-1: Product: syz
[  294.576847][   T10] usb 5-1: Manufacturer: syz
[  294.597973][   T10] cdc_wdm 5-1:1.0: skipping garbage
[  294.606744][   T10] cdc_wdm 5-1:1.0: skipping garbage
[  294.613144][   T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  294.619985][   T10] cdc_wdm 5-1:1.0: Unknown control protocol
[  294.652204][ T6553] usb usb2-port1: unable to enumerate USB device
[  294.670711][T14152] /dev/rnullb0: Can't open blockdev
[  294.691707][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  294.700973][ T6553] dvb-usb: error while querying for an remote control event.
[  294.800139][T14163] netlink: 'syz.0.2397': attribute type 5 has an invalid length.
[  294.811681][T14109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.813302][T14163] /dev/rnullb0: Can't open blockdev
[  294.825569][T14109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.881253][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  294.887883][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  294.889565][T14170] /dev/rnullb0: Can't open blockdev
[  294.894457][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  294.906010][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  294.912644][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  294.919236][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  294.926042][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  294.931776][ T6553] dvb-usb: error while querying for an remote control event.
[  294.939245][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  294.939270][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  294.946097][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  294.946117][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  294.952446][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  294.952469][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  294.953105][ T5901] usb 5-1: USB disconnect, device number 77
[  294.959432][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  294.959450][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  294.959464][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  295.084500][T14174] input: syz1 as /devices/virtual/input/input36
[  295.128412][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  295.134198][ T6553] dvb-usb: error while querying for an remote control event.
[  295.182283][T14109] /dev/rnullb0: Can't open blockdev
[  295.310190][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  295.315986][ T6553] dvb-usb: error while querying for an remote control event.
[  295.445484][T14179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.454817][T14179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.465639][   T30] audit: type=1326 audit(2000000073.269:26995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14178 comm="syz.2.2402" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5671b8ebe9 code=0x0
[  295.492159][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  295.498022][ T6553] dvb-usb: error while querying for an remote control event.
[  295.519999][T14180] PKCS7: Unknown OID: [4] 5.25.373.87(bad)
[  295.526140][T14180] PKCS7: Only support pkcs7_signedData type
[  295.554564][T14182] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2403'.
[  295.675555][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  295.681343][ T6553] dvb-usb: error while querying for an remote control event.
[  295.793653][T14203] /dev/rnullb0: Can't open blockdev
[  295.847251][T14205] MTD: Couldn't look up './cgroup': -15
[  295.852930][T14205] ./cgroup: Can't lookup blockdev
[  295.871965][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  295.878045][ T6553] dvb-usb: error while querying for an remote control event.
[  296.052863][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  296.063732][ T6553] dvb-usb: error while querying for an remote control event.
[  296.164097][T14213] netlink: 624 bytes leftover after parsing attributes in process `syz.1.2413'.
[  296.250990][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  296.256759][ T6553] dvb-usb: error while querying for an remote control event.
[  296.288396][T14220] /dev/rnullb0: Can't open blockdev
[  296.475444][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  296.481446][    T9] dvb-usb: error while querying for an remote control event.
[  296.667914][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  296.673689][ T6553] dvb-usb: error while querying for an remote control event.
[  296.743839][T14242] /dev/rnullb0: Can't open blockdev
[  296.813840][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.826519][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.834279][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.842090][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.850197][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.858057][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.868053][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.872820][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  296.875800][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.889455][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.897210][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.905105][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.907989][   T10] dvb-usb: error while querying for an remote control event.
[  296.912789][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.928585][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.936975][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.944737][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.952843][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.960825][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.968547][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.976229][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.983964][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.991707][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  296.999508][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  297.007197][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  297.014941][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  297.022672][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  297.030580][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  297.038475][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  297.046414][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  297.054179][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  297.061853][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  297.069582][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  297.074103][ T6553] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  297.077305][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  297.092940][ T5188] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  297.117710][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  297.146762][    T9] dvb-usb: error while querying for an remote control event.
[  297.258556][ T6553] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  297.306852][ T6553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  297.307286][T14261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.326488][T14261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.345025][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  297.362133][    T9] dvb-usb: error while querying for an remote control event.
[  297.373778][ T6553] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  297.394035][ T6553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.438329][ T6553] usb 5-1: config 0 descriptor??
[  297.444412][T14247] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  297.470249][ T6553] hub 5-1:0.0: USB hub found
[  297.615680][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  297.628017][   T10] dvb-usb: error while querying for an remote control event.
[  297.683620][ T6553] hub 5-1:0.0: 2 ports detected
[  297.812838][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  297.818625][   T10] dvb-usb: error while querying for an remote control event.
[  297.919968][ T6553] hub 5-1:0.0: set hub depth failed
[  297.937002][ T6553] usb 5-1: USB disconnect, device number 78
[  298.019054][T14276] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  298.068427][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  298.074189][   T10] dvb-usb: error while querying for an remote control event.
[  298.161647][T14282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.189926][T14282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.224266][T14282] dibusb: i2c wr: len=114 is too big!
[  298.224266][T14282] 
[  298.237007][T14282] /dev/rnullb0: Can't open blockdev
[  298.250150][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  298.255977][ T6553] dvb-usb: error while querying for an remote control event.
[  298.278072][T14286] /dev/rnullb0: Can't open blockdev
[  298.677932][ T5901] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  298.731671][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  298.737547][ T6553] dvb-usb: error while querying for an remote control event.
[  298.827540][ T5901] usb 5-1: device descriptor read/64, error -71
[  298.844640][T14296] program syz.2.2438 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  298.878886][T14297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.905491][T14297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.913532][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  298.921732][ T6553] dvb-usb: error while querying for an remote control event.
[  298.987436][T14302] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  298.994904][T14302] /dev/rnullb0: Can't open blockdev
[  299.083956][ T5901] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  299.095285][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  299.101043][    T9] dvb-usb: error while querying for an remote control event.
[  299.132201][T14307] /dev/rnullb0: Can't open blockdev
[  299.151313][T14309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.161197][T14309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.209793][T14309] input: syz1 as /devices/virtual/input/input37
[  299.228184][ T5901] usb 5-1: device descriptor read/64, error -71
[  299.276483][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  299.282335][ T6553] dvb-usb: error while querying for an remote control event.
[  299.352060][ T5901] usb usb5-port1: attempt power cycle
[  299.404742][    T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  299.459227][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  299.464966][ T6553] dvb-usb: error while querying for an remote control event.
[  299.571734][ T5188] Bluetooth: hci4: unexpected event for opcode 0x1804
[  299.578779][    T9] usb 2-1: Using ep0 maxpacket: 32
[  299.585538][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  299.596819][    T9] usb 2-1: config 128 has an invalid interface number: 127 but max is 3
[  299.605226][    T9] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  299.615656][    T9] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4
[  299.624737][    T9] usb 2-1: config 128 has no interface number 0
[  299.631066][    T9] usb 2-1: config 128 interface 127 altsetting 14 has an endpoint descriptor with address 0x37, changing to 0x7
[  299.642955][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  299.648671][ T6553] dvb-usb: error while querying for an remote control event.
[  299.656372][    T9] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  299.667648][    T9] usb 2-1: config 128 interface 127 has no altsetting 0
[  299.678004][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  299.687437][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.695676][    T9] usb 2-1: Product: syz
[  299.699894][    T9] usb 2-1: Manufacturer: syz
[  299.704564][    T9] usb 2-1: SerialNumber: syz
[  299.708037][T14321] /dev/rnullb0: Can't open blockdev
[  299.720384][ T5901] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  299.720810][T14321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.737343][T14321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.747539][ T5901] usb 5-1: device descriptor read/8, error -71
[  299.843004][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  299.848826][ T6553] dvb-usb: error while querying for an remote control event.
[  299.926218][T14325] : entered promiscuous mode
[  299.951743][    T9] usb 2-1: USB disconnect, device number 74
[  299.974227][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  300.004090][ T5901] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  300.024718][T14332] /dev/rnullb0: Can't open blockdev
[  300.025144][ T5901] usb 5-1: device descriptor read/8, error -71
[  300.036152][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  300.036180][ T6553] dvb-usb: error while querying for an remote control event.
[  300.037301][T14332] /dev/rnullb0: Can't open blockdev
[  300.087766][T14336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.096643][T14336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.161598][T14337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.170345][ T5901] usb usb5-port1: unable to enumerate USB device
[  300.171850][T14337] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.206987][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  300.212765][    T9] dvb-usb: error while querying for an remote control event.
[  300.330164][T14344] /dev/rnullb0: Can't open blockdev
[  300.398902][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  300.404769][    T9] dvb-usb: error while querying for an remote control event.
[  300.435006][T14347] /dev/rnullb0: Can't open blockdev
[  300.471247][T14356] /dev/rnullb0: Can't open blockdev
[  300.580632][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  300.592605][    T9] dvb-usb: error while querying for an remote control event.
[  300.629759][T14358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  300.687184][T14375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.696836][T14375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.761882][T14377] overlay: Unknown parameter 'smackfsfloor'
[  300.784028][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  300.790347][    T9] dvb-usb: error while querying for an remote control event.
[  300.874913][T14380] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  300.884696][T14380] XFS (loop1): SB validate failed with error -5.
[  300.965623][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  300.971563][    T9] dvb-usb: error while querying for an remote control event.
[  301.147355][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  301.153108][    T9] dvb-usb: error while querying for an remote control event.
[  301.329164][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  301.338282][    T9] dvb-usb: error while querying for an remote control event.
[  301.495492][T14408] trusted_key: encrypted_key: insufficient parameters specified
[  301.504294][T14408] trusted_key: encrypted_key: insufficient parameters specified
[  301.521472][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  301.527430][    T9] dvb-usb: error while querying for an remote control event.
[  301.539954][T14410] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  301.547768][T14410] /dev/rnullb0: Can't open blockdev
[  301.704393][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  301.726593][   T10] dvb-usb: error while querying for an remote control event.
[  301.785240][T14431] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2473'.
[  301.832367][T14433] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  301.841853][T14433] SQUASHFS error: Failed to read block 0x0: -5
[  301.848528][T14433] unable to read squashfs_super_block
[  301.862547][T14435] /dev/rnullb0: Can't open blockdev
[  301.873116][T14435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.881786][T14435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.916995][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  301.922760][   T10] dvb-usb: error while querying for an remote control event.
[  302.098756][    T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  302.106456][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  302.112382][   T10] dvb-usb: error while querying for an remote control event.
[  302.280432][    T9] usb 5-1: device descriptor read/64, error -71
[  302.286845][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  302.292834][   T10] dvb-usb: error while querying for an remote control event.
[  302.462185][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  302.467939][ T6553] dvb-usb: error while querying for an remote control event.
[  302.547686][    T9] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  302.654589][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  302.660362][ T6553] dvb-usb: error while querying for an remote control event.
[  302.697466][    T9] usb 5-1: device descriptor read/64, error -71
[  302.745950][T14451] /dev/rnullb0: Can't open blockdev
[  302.812086][   T30] audit: type=1326 audit(2000000080.135:26996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14455 comm="syz.2.2480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5671b8ebe9 code=0x0
[  302.840615][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  302.850218][ T6553] dvb-usb: error while querying for an remote control event.
[  302.858327][    T9] usb usb5-port1: attempt power cycle
[  303.028765][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  303.034552][ T6553] dvb-usb: error while querying for an remote control event.
[  303.212419][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  303.218186][ T6553] dvb-usb: error while querying for an remote control event.
[  303.231986][    T9] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  303.253683][    T9] usb 5-1: device descriptor read/8, error -71
[  303.392278][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  303.399031][ T6553] dvb-usb: error while querying for an remote control event.
[  303.509901][    T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  303.531666][    T9] usb 5-1: device descriptor read/8, error -71
[  303.574104][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  303.579859][ T6553] dvb-usb: error while querying for an remote control event.
[  303.632904][T14484] /dev/rnullb0: Can't open blockdev
[  303.661387][    T9] usb usb5-port1: unable to enumerate USB device
[  303.717880][T14493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.726921][T14493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.737261][T14493] /dev/rnullb0: Can't open blockdev
[  303.755994][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  303.761764][    T9] dvb-usb: error while querying for an remote control event.
[  303.916235][ T6553] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[  303.937886][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  303.943937][    T9] dvb-usb: error while querying for an remote control event.
[  304.099524][ T6553] usb 2-1: unable to get BOS descriptor or descriptor too short
[  304.107618][ T6553] usb 2-1: not running at top speed; connect to a high speed hub
[  304.116303][ T6553] usb 2-1: config 8 has an invalid interface number: 185 but max is 1
[  304.124520][ T6553] usb 2-1: config 8 has an invalid interface number: 135 but max is 1
[  304.132740][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  304.138485][    T9] dvb-usb: error while querying for an remote control event.
[  304.146040][ T6553] usb 2-1: config 8 has an invalid descriptor of length 125, skipping remainder of the config
[  304.156430][ T6553] usb 2-1: config 8 has no interface number 0
[  304.163020][ T6553] usb 2-1: config 8 has no interface number 1
[  304.169496][ T6553] usb 2-1: config 8 interface 135 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  304.182651][ T6553] usb 2-1: config 8 interface 185 has no altsetting 0
[  304.189447][ T6553] usb 2-1: config 8 interface 135 has no altsetting 0
[  304.198087][ T6553] usb 2-1: New USB device found, idVendor=2040, idProduct=7270, bcdDevice=ae.97
[  304.207242][ T6553] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.215225][ T6553] usb 2-1: Product: syz
[  304.219709][ T6553] usb 2-1: Manufacturer: syz
[  304.224294][ T6553] usb 2-1: SerialNumber: syz
[  304.333018][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  304.338860][   T10] dvb-usb: error while querying for an remote control event.
[  304.422516][ T5188] Bluetooth: hci4: unexpected event for opcode 0xab19
[  304.446456][T14489] nbd_handle_cmd: 3 callbacks suppressed
[  304.446477][T14489] block nbd1: Attempted send on invalid socket
[  304.461088][T14489] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  304.471211][T14489] block nbd1: Attempted send on invalid socket
[  304.479280][T14489] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  304.490035][T14489] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  304.501679][T14489] block nbd1: Attempted send on invalid socket
[  304.509995][T14489] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  304.514807][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  304.529767][T14509] binder: BINDER_SET_CONTEXT_MGR already set
[  304.530340][   T10] dvb-usb: error while querying for an remote control event.
[  304.535802][T14509] binder: 14508:14509 ioctl 40046207 0 returned -16
[  304.552103][T14489] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  304.561820][T14489] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[  304.570342][T14489] UDF-fs: Scanning with blocksize 512 failed
[  304.577039][T14489] block nbd1: Attempted send on invalid socket
[  304.583776][T14489] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  304.594534][T14489] block nbd1: Attempted send on invalid socket
[  304.601328][T14489] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  304.610658][T14489] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  304.621103][T14489] block nbd1: Attempted send on invalid socket
[  304.627720][T14489] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  304.639462][T14489] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  304.650490][T14489] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[  304.658694][T14489] UDF-fs: Scanning with blocksize 1024 failed
[  304.667240][T14489] block nbd1: Attempted send on invalid socket
[  304.673836][T14489] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  304.683636][T14489] block nbd1: Attempted send on invalid socket
[  304.691034][T14489] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  304.702086][T14489] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  304.712594][T14489] block nbd1: Attempted send on invalid socket
[  304.720535][T14489] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  304.728926][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  304.730571][T14489] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[  304.743442][    T9] dvb-usb: error while querying for an remote control event.
[  304.744741][T14489] UDF-fs: Scanning with blocksize 2048 failed
[  304.766907][T14489] block nbd1: Attempted send on invalid socket
[  304.776913][T14489] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[  304.787103][T14489] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[  304.799085][T14489] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[  304.808140][T14489] UDF-fs: Scanning with blocksize 4096 failed
[  304.816000][T14489] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[  304.880328][ T6553] usb 2-1: unknown interface protocol 0x4f, assuming v1
[  304.887305][ T6553] usb 2-1: 135:2 : does not exist
[  304.933456][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  304.939306][    T9] dvb-usb: error while querying for an remote control event.
[  304.961820][ T6553] usb 2-1: USB disconnect, device number 75
[  304.973882][T14527] netlink: 'syz.1.2501': attribute type 4 has an invalid length.
[  305.006714][T14527] netlink: 'syz.1.2501': attribute type 2 has an invalid length.
[  305.080565][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.135/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  305.113442][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  305.119208][    T9] dvb-usb: error while querying for an remote control event.
[  305.295214][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  305.301078][ T6553] dvb-usb: error while querying for an remote control event.
[  305.498280][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  305.504046][    T9] dvb-usb: error while querying for an remote control event.
[  305.712111][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  305.733517][    T9] dvb-usb: error while querying for an remote control event.
[  305.862161][T14551] syzkaller1: entered promiscuous mode
[  305.867661][T14551] syzkaller1: entered allmulticast mode
[  305.900974][T14551] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 44
[  305.926068][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  305.931963][    T9] dvb-usb: error while querying for an remote control event.
[  306.017237][T14552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.055725][T14552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.141014][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  306.146813][    T9] dvb-usb: error while querying for an remote control event.
[  306.174734][T14556] /dev/rnullb0: Can't open blockdev
[  306.332291][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  306.345280][    T9] dvb-usb: error while querying for an remote control event.
[  306.524760][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  306.532071][    T9] dvb-usb: error while querying for an remote control event.
[  306.612212][T14565] netlink: 'syz.1.2511': attribute type 21 has an invalid length.
[  306.623639][T14565] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  306.706330][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  306.717028][    T9] dvb-usb: error while querying for an remote control event.
[  306.824116][T14568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.882150][T14569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.883521][T14568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.898789][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  306.904533][    T9] dvb-usb: error while querying for an remote control event.
[  306.931079][T14569] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.020146][   T30] audit: type=1326 audit(2000000084.064:26997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14571 comm="syz.1.2513" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f0c58ebe9 code=0x0
[  307.075453][T14573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.086163][T14573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.124034][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  307.131023][   T10] dvb-usb: error while querying for an remote control event.
[  307.261115][T14576] ./cgroup: Can't lookup blockdev
[  307.305010][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  307.310764][ T6553] dvb-usb: error while querying for an remote control event.
[  307.337358][    T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  307.490948][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  307.496771][   T10] dvb-usb: error while querying for an remote control event.
[  307.560222][    T9] usb 2-1: Using ep0 maxpacket: 32
[  307.615943][    T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.c6
[  307.625874][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.633874][    T9] usb 2-1: Product: syz
[  307.647234][    T9] usb 2-1: Manufacturer: syz
[  307.651907][    T9] usb 2-1: SerialNumber: syz
[  307.663321][    T9] usb 2-1: config 0 descriptor??
[  307.777015][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  307.782779][    T9] dvb-usb: error while querying for an remote control event.
[  307.863049][T14601] netlink: 'syz.2.2521': attribute type 41 has an invalid length.
[  307.978313][ T5901] usb 2-1: USB disconnect, device number 76
[  307.978629][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  307.994540][ T6553] dvb-usb: error while querying for an remote control event.
[  308.170976][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  308.176740][ T6553] dvb-usb: error while querying for an remote control event.
[  308.213414][T14618] sctp: [Deprecated]: syz.2.2526 (pid 14618) Use of int in maxseg socket option.
[  308.213414][T14618] Use struct sctp_assoc_value instead
[  308.270636][T14616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.289590][T14616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.363597][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  308.369838][ T6553] dvb-usb: error while querying for an remote control event.
[  308.545469][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  308.551332][ T6553] dvb-usb: error while querying for an remote control event.
[  308.727191][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  308.733010][ T6553] dvb-usb: error while querying for an remote control event.
[  308.908765][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  308.918332][ T6553] dvb-usb: error while querying for an remote control event.
[  308.941968][T14623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.950571][T14623] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.102688][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  309.108562][   T10] dvb-usb: error while querying for an remote control event.
[  309.283194][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  309.289198][   T10] dvb-usb: error while querying for an remote control event.
[  309.360198][   T30] audit: type=1326 audit(2000000086.271:26998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14626 comm="syz.4.2529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04eaf8ebe9 code=0x0
[  309.382373][   T30] audit: type=1326 audit(2000000086.271:26999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14626 comm="syz.4.2529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04eaf8ebe9 code=0x0
[  309.466247][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  309.478198][   T10] dvb-usb: error while querying for an remote control event.
[  309.667790][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  309.685557][   T10] dvb-usb: error while querying for an remote control event.
[  309.759341][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.773705][T14645] /dev/rnullb0: Can't open blockdev
[  309.823480][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.860079][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  309.865840][ T6553] dvb-usb: error while querying for an remote control event.
[  309.869257][T14643] /dev/rnullb0: Can't open blockdev
[  309.907529][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.997929][T14651] /dev/rnullb0: Can't open blockdev
[  310.008254][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.052513][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  310.058364][ T6553] dvb-usb: error while querying for an remote control event.
[  310.149351][   T12] bridge_slave_1: left allmulticast mode
[  310.155241][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  310.160035][   T12] bridge_slave_1: left promiscuous mode
[  310.167954][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  310.175091][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.183147][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  310.183486][   T12] bridge_slave_0: left allmulticast mode
[  310.201079][   T12] bridge_slave_0: left promiscuous mode
[  310.209547][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  310.217045][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.224482][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  310.244960][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  310.250807][ T6129] dvb-usb: error while querying for an remote control event.
[  310.330440][ T5958] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  310.382022][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  310.394040][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.404421][   T12] bond0 (unregistering): Released all slaves
[  310.436205][T14667] sp0: Synchronizing with TNC
[  310.441197][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  310.446933][ T6129] dvb-usb: error while querying for an remote control event.
[  310.468654][T14659] wlan1 speed is unknown, defaulting to 1000
[  310.476472][   T12] tipc: Disabling bearer <udp:syz0>
[  310.482112][T14671] sp0: Found TNC
[  310.486284][T14666] [U] č`
[  310.490979][   T12] tipc: Left network mode
[  310.492138][ T5958] usb 2-1: Using ep0 maxpacket: 8
[  310.515173][ T5958] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  310.525743][ T5958] usb 2-1: can't read configurations, error -22
[  310.640642][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  310.648139][   T10] dvb-usb: error while querying for an remote control event.
[  310.684607][ T5958] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  310.820979][   T12] hsr_slave_0: left promiscuous mode
[  310.828798][   T12] hsr_slave_1: left promiscuous mode
[  310.835436][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.842913][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.851855][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.856756][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  310.859640][ T5958] usb 2-1: Using ep0 maxpacket: 8
[  310.870087][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.876486][ T6129] dvb-usb: error while querying for an remote control event.
[  310.880314][ T5958] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  310.896098][   T12] veth1_macvtap: left promiscuous mode
[  310.901824][ T5958] usb 2-1: can't read configurations, error -22
[  310.908319][   T12] veth1_vlan: left promiscuous mode
[  310.913598][   T12] veth0_vlan: left promiscuous mode
[  310.919405][ T5958] usb usb2-port1: attempt power cycle
[  311.049966][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  311.070362][ T6129] dvb-usb: error while querying for an remote control event.
[  311.095740][   T12] team0 (unregistering): Port device team_slave_1 removed
[  311.119791][   T12] team0 (unregistering): Port device team_slave_0 removed
[  311.236122][T14703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.246487][T14703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.258203][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  311.264245][ T6553] dvb-usb: error while querying for an remote control event.
[  311.285691][ T5958] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  311.346580][ T5958] usb 2-1: Using ep0 maxpacket: 8
[  311.354387][ T5958] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  311.372570][T14659] chnl_net:caif_netlink_parms(): no params data found
[  311.374537][ T5958] usb 2-1: can't read configurations, error -22
[  311.392107][T14708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.401044][T14708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.442285][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  311.455531][ T6553] dvb-usb: error while querying for an remote control event.
[  311.477542][T14659] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.484757][T14659] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.495580][T14659] bridge_slave_0: entered allmulticast mode
[  311.502901][T14659] bridge_slave_0: entered promiscuous mode
[  311.516920][T14659] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.524275][T14659] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.531865][T14659] bridge_slave_1: entered allmulticast mode
[  311.538560][ T5958] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  311.539410][T14659] bridge_slave_1: entered promiscuous mode
[  311.574376][ T5958] usb 2-1: Using ep0 maxpacket: 8
[  311.582267][ T5958] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  311.596187][ T5958] usb 2-1: can't read configurations, error -22
[  311.604187][T14659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.618227][ T5958] usb usb2-port1: unable to enumerate USB device
[  311.626964][T14708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.638859][T14659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.640668][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  311.658363][T14708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.666029][ T6553] dvb-usb: error while querying for an remote control event.
[  311.692122][T14659] team0: Port device team_slave_0 added
[  311.703294][T14659] team0: Port device team_slave_1 added
[  311.727620][T14659] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.734742][T14659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.760787][T14659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.773194][T14659] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.781522][T14659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.808405][T14659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.840395][T14659] hsr_slave_0: entered promiscuous mode
[  311.846670][T14659] hsr_slave_1: entered promiscuous mode
[  311.859368][ T6553] dvb-usb: bulk message failed: -22 (1/0)
[  311.865242][ T6553] dvb-usb: error while querying for an remote control event.
[  311.882389][T14725] fuse: Unknown parameter ''
[  311.939606][T14728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.952405][T14728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.003408][T14659] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  312.013415][T14659] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  312.024658][T14659] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  312.035879][T14659] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  312.052068][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  312.066600][ T6129] dvb-usb: error while querying for an remote control event.
[  312.075735][T14659] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.082827][T14659] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.090203][T14659] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.097361][T14659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.153951][T14659] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.168452][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.183180][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.199708][T14659] 8021q: adding VLAN 0 to HW filter on device team0
[  312.211291][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.218454][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.231130][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.238232][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.246056][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  312.251800][    T9] dvb-usb: error while querying for an remote control event.
[  312.415214][ T5873] Bluetooth: hci2: command tx timeout
[  312.426172][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  312.431940][ T6129] dvb-usb: error while querying for an remote control event.
[  312.528954][T14659] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.597802][T14767] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  312.614684][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  312.624247][ T6129] dvb-usb: error while querying for an remote control event.
[  312.646344][T14767] overlayfs: overlapping lowerdir path
[  312.652922][T14768] /dev/rnullb0: Can't open blockdev
[  312.812349][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  312.818137][ T6129] dvb-usb: error while querying for an remote control event.
[  312.848728][T14788] /dev/rnullb0: Can't open blockdev
[  312.901490][T14659] veth0_vlan: entered promiscuous mode
[  312.923163][T14659] veth1_vlan: entered promiscuous mode
[  312.965149][T14659] veth0_macvtap: entered promiscuous mode
[  312.974516][T14659] veth1_macvtap: entered promiscuous mode
[  312.990972][T14659] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.003612][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  313.013974][ T6129] dvb-usb: error while querying for an remote control event.
[  313.016013][T14659] batman_adv: batadv0: Interface activated: batadv_slave_1
[  313.046021][ T7403] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.073559][ T7403] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.089940][ T7403] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.105512][ T7403] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.119804][T14796] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2560'.
[  313.163702][T14796] /dev/rnullb0: Can't open blockdev
[  313.176058][ T7403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.199642][ T7403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.199695][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  313.213062][ T6129] dvb-usb: error while querying for an remote control event.
[  313.238650][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.246891][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.260864][T14798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.282326][T14798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.399738][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  313.409388][ T6129] dvb-usb: error while querying for an remote control event.
[  313.455671][T14809] ------------[ cut here ]------------
[  313.461162][T14809] UBSAN: shift-out-of-bounds in fs/9p/vfs_super.c:57:22
[  313.468922][T14809] shift exponent 32 is too large for 32-bit type 'int'
[  313.488506][T14809] CPU: 1 UID: 0 PID: 14809 Comm: syz.5.2563 Not tainted syzkaller #0 PREEMPT(full) 
[  313.488531][T14809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  313.488544][T14809] Call Trace:
[  313.488552][T14809]  <TASK>
[  313.488560][T14809]  dump_stack_lvl+0x189/0x250
[  313.488591][T14809]  ? __pfx_dump_stack_lvl+0x10/0x10
[  313.488615][T14809]  ? __pfx__printk+0x10/0x10
[  313.488641][T14809]  ubsan_epilogue+0xa/0x40
[  313.488660][T14809]  __ubsan_handle_shift_out_of_bounds+0x386/0x410
[  313.488686][T14809]  ? __pfx_v9fs_set_super+0x10/0x10
[  313.488707][T14809]  v9fs_get_tree+0x957/0xa90
[  313.488729][T14809]  ? __pfx_v9fs_get_tree+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  313.488751][T14809]  vfs_get_tree+0x8f/0x2b0
[  313.488770][T14809]  do_new_mount+0x2a2/0xa30
[  313.488789][T14809]  ? ns_capable+0x8a/0xf0
[  313.488807][T14809]  ? __pfx_do_new_mount+0x10/0x10
[  313.488825][T14809]  ? path_mount+0x61c/0xfe0
[  313.488840][T14809]  ? user_path_at+0x44/0x60
[  313.488866][T14809]  __se_sys_mount+0x317/0x410
[  313.488888][T14809]  ? __pfx___se_sys_mount+0x10/0x10
[  313.488908][T14809]  ? rcu_is_watching+0x15/0xb0
[  313.488926][T14809]  ? __x64_sys_mount+0x20/0xc0
[  313.488944][T14809]  do_syscall_64+0xfa/0xfa0
[  313.488966][T14809]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.489040][T14809]  ? clear_bhb_loop+0x60/0xb0
[  313.489059][T14809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.489077][T14809] RIP: 0033:0x7fac5dd8ebe9
[  313.489093][T14809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  313.489110][T14809] RSP: 002b:00007fac5eb48038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  313.489129][T14809] RAX: ffffffffffffffda RBX: 00007fac5dfc5fa0 RCX: 00007fac5dd8ebe9
[  313.489142][T14809] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000
[  313.489155][T14809] RBP: 00007fac5de11e19 R08: 0000200000000000 R09: 0000000000000000
[  313.489168][T14809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  313.489179][T14809] R13: 00007fac5dfc6038 R14: 00007fac5dfc5fa0 R15: 00007ffcd9bc1bc8
[  313.489201][T14809]  </TASK>
[  313.489207][T14809] ---[ end trace ]---
[  313.623636][ T6129] dvb-usb: bulk message failed: -22 (1/0)
[  313.667063][T14812] /dev/rnullb0: Can't open blockdev
[  313.783934][T14809] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  313.791169][T14809] CPU: 1 UID: 0 PID: 14809 Comm: syz.5.2563 Not tainted syzkaller #0 PREEMPT(full) 
[  313.800530][T14809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  313.810575][T14809] Call Trace:
[  313.813845][T14809]  <TASK>
[  313.816763][T14809]  dump_stack_lvl+0x99/0x250
[  313.821346][T14809]  ? __asan_memcpy+0x40/0x70
[  313.825920][T14809]  ? __pfx_dump_stack_lvl+0x10/0x10
[  313.831103][T14809]  ? __pfx__printk+0x10/0x10
[  313.835681][T14809]  vpanic+0x281/0x750
[  313.839650][T14809]  ? __pfx_vpanic+0x10/0x10
[  313.844145][T14809]  panic+0xb9/0xc0
[  313.847854][T14809]  ? __pfx_panic+0x10/0x10
[  313.852257][T14809]  ? __pfx__printk+0x10/0x10
[  313.856836][T14809]  check_panic_on_warn+0x89/0xb0
[  313.861761][T14809]  __ubsan_handle_shift_out_of_bounds+0x386/0x410
[  313.868167][T14809]  ? __pfx_v9fs_set_super+0x10/0x10
[  313.873350][T14809]  v9fs_get_tree+0x957/0xa90
[  313.877925][T14809]  ? __pfx_v9fs_get_tree+0x10/0x10
[  313.883022][T14809]  vfs_get_tree+0x8f/0x2b0
[  313.887422][T14809]  do_new_mount+0x2a2/0xa30
[  313.891917][T14809]  ? ns_capable+0x8a/0xf0
[  313.896235][T14809]  ? __pfx_do_new_mount+0x10/0x10
[  313.901246][T14809]  ? path_mount+0x61c/0xfe0
[  313.905734][T14809]  ? user_path_at+0x44/0x60
[  313.910227][T14809]  __se_sys_mount+0x317/0x410
[  313.914891][T14809]  ? __pfx___se_sys_mount+0x10/0x10
[  313.920084][T14809]  ? rcu_is_watching+0x15/0xb0
[  313.924828][T14809]  ? __x64_sys_mount+0x20/0xc0
[  313.929577][T14809]  do_syscall_64+0xfa/0xfa0
[  313.934098][T14809]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.940147][T14809]  ? clear_bhb_loop+0x60/0xb0
[  313.944807][T14809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.950696][T14809] RIP: 0033:0x7fac5dd8ebe9
[  313.955095][T14809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  313.974683][T14809] RSP: 002b:00007fac5eb48038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  313.983081][T14809] RAX: ffffffffffffffda RBX: 00007fac5dfc5fa0 RCX: 00007fac5dd8ebe9
[  313.991038][T14809] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000
[  313.998992][T14809] RBP: 00007fac5de11e19 R08: 0000200000000000 R09: 0000000000000000
[  314.006943][T14809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.014902][T14809] R13: 00007fac5dfc6038 R14: 00007fac5dfc5fa0 R15: 00007ffcd9bc1bc8
[  314.022865][T14809]  </TASK>
[  314.026142][T14809] Kernel Offset: disabled
[  314.030452][T14809] Rebooting in 86400 seconds..