last executing test programs:

6m54.478490141s ago: executing program 1 (id=1640):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
getresuid(&(0x7f0000002340), &(0x7f0000002380), &(0x7f00000023c0)=<r1=>0x0)
getresgid(&(0x7f0000002400), &(0x7f0000002440), &(0x7f0000002480)=<r2=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002540)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000002640)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002680)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0xee01, <r5=>0xee01}}, './file0\x00'})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002880)={0x9, 0x5, {0xffffffffffffffff}, {<r6=>0x0}, 0x13fa, 0x2})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000028c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000002900)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002940)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000002a40)=0xe8)
lstat(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002b40)=<r10=>0x0)
fstat(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = geteuid()
stat(&(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
syz_fuse_handle_req(r0, &(0x7f0000000040)="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", 0x2000, &(0x7f0000003180)={&(0x7f0000002040)={0x50, 0x0, 0x8001, {0x7, 0x2b, 0x7, 0x0, 0x3, 0x6, 0xfffff5e5, 0x5, 0x0, 0x0, 0x2, 0x2}}, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, 0x7, {0x4}}, &(0x7f0000002100)={0x18, 0x0, 0x8af, {0x3}}, &(0x7f0000002140)={0x18, 0x0, 0x4e, {0x401}}, &(0x7f0000002180)={0x18, 0x0, 0x4, {0x5}}, &(0x7f00000021c0)={0x28, 0xffffffffffffffda, 0x8, {{0x7ff, 0x6, 0x1}}}, &(0x7f0000002200)={0x60, 0x0, 0x0, {{0x100000001, 0x7ff, 0x8, 0x5, 0x658f, 0xb, 0x6, 0x80000000}}}, &(0x7f0000002280)={0x18, 0xfffffffffffffff5, 0x6, {0x194e}}, &(0x7f00000022c0)={0x1f, 0x0, 0x8, {'&+$+[/*\'/^}{@)\x00'}}, &(0x7f0000002300)={0x20, 0x0, 0x7fff, {0x0, 0x1e}}, &(0x7f00000024c0)={0x78, 0x4649bc59ae6d35c4, 0x101, {0x4, 0x1, 0x0, {0x1, 0x100000001, 0x6, 0x3, 0xa, 0x9, 0x287, 0x2c8dc3fc, 0x500, 0xc000, 0xfffffffd, r1, r2, 0x5, 0x200}}}, &(0x7f00000026c0)={0x90, 0xfffffffffffffffe, 0x8, {0x3, 0x3, 0x98c, 0x8000800000, 0x5, 0x0, {0x0, 0x3, 0x8, 0x1, 0x8001, 0x8, 0xffff90fe, 0x80000001, 0x3, 0x6000, 0x1, r3, r5, 0x9, 0x4}}}, &(0x7f0000002780)={0xc8, 0x0, 0x80000000, [{0x5, 0x0, 0x0, 0x95}, {0x6, 0x2, 0x3, 0x7, ':&,'}, {0x2, 0x7, 0x1, 0xe7, '\''}, {0x6, 0x228, 0x3, 0x95, '}\')'}, {0x4, 0x2, 0x5, 0x10000, '+@*/@'}, {0x2, 0x100000001, 0x1, 0x7ff, '#'}]}, &(0x7f0000002b80)={0x1f8, 0x0, 0x7f3, [{{0x0, 0x2, 0xfffffffffffffffd, 0xfc4, 0x0, 0x7fffffff, {0x6, 0x2, 0x2879, 0x3, 0xb, 0x119d, 0x5, 0x8000, 0x8, 0x2000, 0x7, r6, r7, 0x1, 0x40}}, {0x0, 0x1, 0xc, 0x4, '\x89%\\$\\/^\x97^!}@'}}, {{0x1, 0x2, 0xedd6, 0x5, 0x81, 0x8621, {0x0, 0x7fff, 0xffffffffffffffe1, 0x1, 0x2, 0x1, 0x7, 0x1, 0x100, 0x8000, 0x3, r8, r9, 0x3, 0x8}}, {0x3, 0x218, 0x3, 0x5, '{(('}}, {{0x1, 0x1, 0x1, 0x7, 0x2, 0x7, {0x4, 0x7, 0x2, 0x8, 0x1, 0x7, 0x5, 0x8000, 0x1, 0x6000, 0x2, r10, 0xee01, 0x0, 0x3ff}}, {0x3, 0xffffffffffffff01, 0x4, 0xd58, '*({\''}}]}, &(0x7f0000002e80)={0xa0, 0xfffffffffffffffe, 0xa, {{0x1, 0x2, 0x9, 0x100000000, 0xd6a6, 0x0, {0x6, 0x1, 0x0, 0x2cfc, 0x2, 0x2, 0x8, 0x1000, 0x0, 0x1000, 0x46b, r11, r12, 0x7ff, 0x6}}, {0x0, 0x8}}}, &(0x7f0000002f40)={0x20, 0x0, 0x1, {0x9, 0x0, 0x7, 0xb13}}, &(0x7f0000003040)={0x130, 0xffffffffffffffda, 0x400, {0xc39, 0xe619b48, 0x0, '\x00', {0x40, 0xf15, 0x4, 0x9, r13, r14, 0xa000, '\x00', 0x9, 0x7fff, 0xffffffffffffff91, 0x3, {0x10001, 0x8}, {0x30c9}, {0x7, 0x3}, {0x9, 0x7ff}, 0x38, 0x7f, 0xfffffff9, 0x90}}}})
close(r0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000003240)={{0x2, 0x3fc8ce82f81cdd0f, 0x8, 0x1}})
syz_genetlink_get_family_id$devlink(&(0x7f0000003280), r4)
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000032c0)=""/43)
write$6lowpan_enable(r0, &(0x7f0000003300)='0', 0x1)
r15 = socket$inet6_tcp(0xa, 0x1, 0x0)
inotify_add_watch(r0, &(0x7f0000003340)='./file0\x00', 0x98fa1e743ddeb6b4)
r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000003380), 0xc8c40, 0x0)
ioctl$TUNSETGROUP(r16, 0x400454ce, r12)
read$msr(r4, &(0x7f00000033c0)=""/207, 0xcf)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000034c0), 0x0, 0x0)
readv(r4, &(0x7f0000005680)=[{&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/128, 0x80}, {&(0x7f0000004580)=""/208, 0xd0}, {&(0x7f0000004680)=""/4096, 0x1000}], 0x4)
lstat(&(0x7f00000056c0)='./file0\x00', &(0x7f0000005700))
r17 = accept$ax25(r15, &(0x7f0000005780)={{0x3, @null}, [@remote, @remote, @bcast, @bcast, @rose, @remote, @netrom, @netrom]}, &(0x7f0000005800)=0x48)
ioctl$SIOCAX25DELFWD(r17, 0x89eb, &(0x7f0000005840)={@null, @bcast})

6m54.460870384s ago: executing program 1 (id=1641):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x29, 0x21, 0x0, 0x0)
mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c0, 0x0)

6m54.384482801s ago: executing program 1 (id=1642):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x7, 0x18001)
pwrite64(r2, &(0x7f0000000180)="056cdd3e7efae57881a1a24f57e0dfd386429066ed75f8951e1e957c4ed35cbf71c3501e041ffc38f3d2817b64939486dfda54d3ef", 0x35, 0x7)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0})
syz_io_uring_setup(0x82e, &(0x7f00000004c0)={0x0, 0xb39d, 0x100, 0x1, 0x20005}, 0x0, 0x0)
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x70, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xf90, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000640)={"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"})
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)
mount$cgroup(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={[{@none}]})
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000240)={"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"})
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r8, 0x11, 0x2, 0x0, &(0x7f0000000080))
mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x8d000, 0x0)

6m54.027902741s ago: executing program 1 (id=1644):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x10010, r0, 0x8d1c3000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000000)='./file0/../file0/../file0/../file0\x00')
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async)
r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000001c0)={0x6, 0x3, "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"}) (async)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000140)={0x1, 0x1}) (async)
madvise(&(0x7f000044c000/0x1000)=nil, 0x1000, 0x16)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

6m53.891118568s ago: executing program 1 (id=1645):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
pipe2$watch_queue(&(0x7f00000035c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000180)=0xec91) (async)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x11) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000795d6c08450c01806dc4010203010902124d36000000000904"], 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x0) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001d002106000000000000000007d5"], 0x34}}, 0x0) (async)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x84, 0x5, "8a544c6ee52b14c648aceb8238118e04ee99f284e28c301f6e8faefe0048960c46aaeee940ab8b386aaa6cba45483a6afc5a6805829306e4acac86fedf9cee4aa6ec61a52592ff09a33d5c5e8b45e5e93208e4b2b3cf64e8481b06dec2ce7b0ae0e2e39e46a0578e0f05dee44b1682f81d3252a716f4dabde03158a426cf8502"}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x802}, 0x8010)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32)
r8 = accept4(r4, 0x0, 0x0, 0x800) (rerun: 32)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r10=>0x0}) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000009c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) (async)
r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r11, 0x26856000)

6m53.476345778s ago: executing program 1 (id=1648):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0))
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)

6m53.249334048s ago: executing program 32 (id=1648):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0))
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)

2m32.954026774s ago: executing program 2 (id=3282):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x8, 0x6})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c)

2m32.020697392s ago: executing program 2 (id=3285):
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'macvtap0\x00', &(0x7f0000000040)=@ethtool_ts_info={0x19}})

2m31.820681133s ago: executing program 2 (id=3287):
socket$kcm(0x10, 0x2, 0x0)
socket(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x82e, &(0x7f0000000400)={0x0, 0x80004, 0x10100}, &(0x7f0000000100), &(0x7f0000000080))
syz_usb_connect(0x0, 0x38, &(0x7f00000001c0)=ANY=[@ANYBLOB="120120021bd459088904b5e02aae0102030109022600010701e00509040000029722185c090507", @ANYRES64=r0], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})

2m31.480566901s ago: executing program 0 (id=3291):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000000)=""/174)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee000000000000000002000000", 0x57}], 0x1)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000001600)={0x0, [{0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x71, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x28, 0x0, &(0x7f0000001240)="e9de47d304"}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x10, &(0x7f0000001340)}, {0x1, 0x0, 0x8, &(0x7f00000013c0)}, {0x2, 0x0, 0x800, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x8000, 0x0}]})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20115a0000005a"], 0x0, 0x0, 0x0, 0x0}, 0x0)

2m31.162960669s ago: executing program 2 (id=3292):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0x202, 0x0)
fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0)
r3 = dup2(r2, r1)
read$FUSE(r3, &(0x7f0000001a40)={0x2020}, 0x2020)

2m31.014394653s ago: executing program 2 (id=3293):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc4, 0xe4, 0x7, 0x40, 0x14aa, 0x22b, 0x5619, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x0, 0xb1, 0x94, 0xd9}}]}}]}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e0, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)

2m30.405232197s ago: executing program 2 (id=3295):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
futex(0x0, 0x0, 0x10000004, 0x0, &(0x7f0000048000), 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

2m28.406256702s ago: executing program 0 (id=3297):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef)

2m28.160628299s ago: executing program 0 (id=3299):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(r1, &(0x7f0000000e40)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xfffffffc}, 0x1c)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20)

2m27.183244922s ago: executing program 0 (id=3302):
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x7f7f, 0x0, {0x9, 0x1}, {0x52, 0x2}, @period={0x58, 0x6, 0x2, 0x7f, 0xf800, {0x6, 0x93, 0xe, 0x2}, 0x0, 0x0}})
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8)
write$UHID_INPUT(r0, &(0x7f0000000040)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3731070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f14668407879f860d9ee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4ca8d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

2m26.762581084s ago: executing program 0 (id=3303):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x101101)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000000c0)={{0x2, 0x1}, {0xfb, 0x1}, 0x1, 0x0, 0xff})

2m26.636262195s ago: executing program 0 (id=3304):
r0 = gettid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0)
sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0)
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100)={0x1f})

2m15.311580329s ago: executing program 33 (id=3295):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
futex(0x0, 0x0, 0x10000004, 0x0, &(0x7f0000048000), 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

2m11.538799169s ago: executing program 34 (id=3304):
r0 = gettid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0)
sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0)
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100)={0x1f})

8.154371301s ago: executing program 5 (id=3956):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil)
shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r3, r3, 0x21)
wait4(r3, 0x0, 0x40000000, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)
shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000140)=""/83)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
r5 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r6, 0x0)
accept4(r6, 0x0, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000200)=0x6, 0x5)
write$binfmt_script(r1, &(0x7f0000000100), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)

7.676885103s ago: executing program 4 (id=3959):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000300)=0x9, 0x4)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x410000, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00')
read$FUSE(r3, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
setregid(r4, r4)
r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f0000000300)={0x0, 0x2, 0x5, {0x5, 0xa, '\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000300)=0x9, 0x4) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x410000, 0x0) (async)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') (async)
read$FUSE(r3, &(0x7f0000003980)={0x2020}, 0x2020) (async)
setregid(r4, r4) (async)
syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES8=r4], 0x0) (async)
syz_usb_control_io(r5, 0x0, 0x0) (async)
syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f0000000300)={0x0, 0x2, 0x5, {0x5, 0xa, '\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) (async)

7.272685543s ago: executing program 3 (id=3960):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000400000000500002e00000008000300", @ANYRES32=r1, @ANYBLOB="050034008b001100060049"], 0x2c}}, 0x0)

7.090558288s ago: executing program 5 (id=3961):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x50}}, 0x0) (async)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x50}}, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

7.083418282s ago: executing program 3 (id=3962):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c020000", @ANYRESHEX=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="7f003300802019000802110000010802110000000802110000004ffcff0f0000000000006400013000060202020202020301090602ff7f050302c9092503016c012a01043c040008a5052d1a080006000000000000000002000400060000000004060000000a72060303030303037107ffff010100266176061c084100090000"], 0x9c}, 0x1, 0x0, 0x0, 0x814}, 0x4000) (async, rerun: 64)
mlock(&(0x7f0000280000/0x3000)=nil, 0x3000) (rerun: 64)

6.871592671s ago: executing program 3 (id=3963):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x141342, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x80000000000008, &(0x7f0000000600)='u', 0x1) (async, rerun: 32)
getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, &(0x7f0000000180)) (rerun: 32)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x1, 0x4000000) (async, rerun: 32)
r2 = socket$kcm(0x21, 0x2, 0x2) (rerun: 32)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x110, 0xe, "8f85"}], 0x18}, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) (async)
r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=r7}, &(0x7f0000000000)=<r8=>0x0) (async, rerun: 64)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
timer_settime(r8, 0x1, &(0x7f0000000180), 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

6.762478156s ago: executing program 5 (id=3964):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x2000c0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc, <r2=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000180)={0xc, r2})
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x26}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}]}]}], {0x14}}, 0x64}}, 0x4048010)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x200, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="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", 0x252}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}], 0x1}, 0x0)
r5 = syz_clone(0x80000000, 0x0, 0x59, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000040)='stat\x00')
pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x500, 0x0)
read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x48111408, 0x0, 0x0, 0x379a, 0x1, 0x0, 0x0, 0x100}}, 0x50)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)

6.358916699s ago: executing program 3 (id=3965):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x282000)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x4, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0xffffffffffff2994, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x3e]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffd2a}, 0x1, 0x0, 0x0, 0x4008005}, 0x4048080)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave'])
chdir(&(0x7f0000000240)='./file0\x00')
r5 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
ftruncate(r5, 0x2007ffc)
sendfile(r5, r5, 0x0, 0x800000009)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000020100000000d273c652780f09433cd29d1dc454e491c61c95a96b52daa0ddcb8ccaf32f53d843e593b5d123bb04dc5b6f414ff63f1a2808e4016823ceaa1179d3b2d491cd58fabf80daf2fe912dee82b7ac3f82ce944ca0559bc1968f5d5f23a898e800"/116], 0x8)
ioctl(r6, 0x8b28, &(0x7f0000000040))
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r8, 0x5608, &(0x7f0000000000))
mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r4, 0x6f000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000025c0)={<r9=>0xffffffffffffffff})
bind$unix(r9, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
listen(r9, 0x8)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r4, 0x4112, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f00000000c0)={0x9})
r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x115a01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc0189379, 0x0)

5.698728041s ago: executing program 5 (id=3966):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8040)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000400000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="050034008b001100060049"], 0x2c}, 0x1, 0x0, 0x0, 0x80800}, 0x0)

5.554504381s ago: executing program 3 (id=3967):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000340)={0x3, 'vlan1\x00', {0x44}, 0xf0a9})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0xf}}, './file0\x00'})
r2 = socket$inet6(0xa, 0x805, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x200001c0)
getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0x2})
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt(r3, 0x7, 0xfffffff8, &(0x7f0000000180)="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", 0x1000)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$TUNSETTXFILTER(r5, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x22052, r4, 0x13771000)

5.311746506s ago: executing program 5 (id=3968):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0xffffffffffffffff})
ioctl$BLKRRPART(r0, 0x125f, 0x0)

4.478755906s ago: executing program 4 (id=3970):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000400000050000002e00000008000300", @ANYRES32=r1, @ANYBLOB="050034008b001100060049"], 0x2c}}, 0x0)

4.463183625s ago: executing program 5 (id=3971):
unshare(0x6a040000) (async)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) (async)
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0)

4.349706374s ago: executing program 3 (id=3973):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000280)={0x10007, 0x2, 0x0, "8eb8a828e53b07f1dd00d87a41bfeae7800400b159fb933948000026098d68d9"}) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x601, 0x0)
pwritev(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="14", 0x1}], 0x1, 0xfffffffd, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x4e1ee79f, 0x0, 0xf0}) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) (async, rerun: 32)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32)
socket(0x2, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0)
read$FUSE(r2, &(0x7f0000001480)={0x2020}, 0x2020) (async)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5) (async)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000140))
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x74, 0x141341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (async)
syz_open_dev$ndb(&(0x7f0000000580), 0x0, 0x42000) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="1400000601010000000000000080010000080000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000800) (async)
r8 = accept4$ax25(r0, 0x0, &(0x7f0000000080), 0x81000)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f00000000c0)={0x0, 'team0\x00', {}, 0x7}) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

3.499093802s ago: executing program 35 (id=3973):
r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000280)={0x10007, 0x2, 0x0, "8eb8a828e53b07f1dd00d87a41bfeae7800400b159fb933948000026098d68d9"}) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x601, 0x0)
pwritev(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="14", 0x1}], 0x1, 0xfffffffd, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x4e1ee79f, 0x0, 0xf0}) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) (async, rerun: 32)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32)
socket(0x2, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0)
read$FUSE(r2, &(0x7f0000001480)={0x2020}, 0x2020) (async)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r5 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5) (async)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000140))
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x74, 0x141341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (async)
syz_open_dev$ndb(&(0x7f0000000580), 0x0, 0x42000) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="1400000601010000000000000080010000080000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000800) (async)
r8 = accept4$ax25(r0, 0x0, &(0x7f0000000080), 0x81000)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f00000000c0)={0x0, 'team0\x00', {}, 0x7}) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

3.482544829s ago: executing program 4 (id=3976):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000005c00), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000005c40)={'batadv0\x00', <r4=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000005cc0)={&(0x7f0000005c80)={0x1c, r3, 0x711, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0xf0ffff, 0x0, 0x4000084}, 0x4000810)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0))
io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x2}])
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6}}, 0x0, 0x0, 0x2}})
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000740)={'wpan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x3c, r9, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c045}, 0x4804)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000400000000000002e00000008000300", @ANYRES32=r10, @ANYBLOB="050034008b001100060049"], 0x2c}}, 0x0)

2.910733094s ago: executing program 4 (id=3978):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000500)={0x7, @win={{0x93, 0x5, 0x8, 0x5}, 0x5, 0xffffffff, 0x0, 0x8, 0x0, 0x4}})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xf6489000)
socket(0x3, 0xa, 0x40000014)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x4000)
read$FUSE(r3, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
wait4(r4, 0x0, 0x2, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000021c0)=@gcm_128={{0x281}, "7702803c5a7c09c1", "517f11179ae199427484ff45696166c9", "092f7fdc", "9affdeb476a36fc4"}, 0x28)
r6 = syz_open_procfs(r4, &(0x7f0000000080)='net/wireless\x00')
exit(0x1ff)
ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x1b)
write$UHID_INPUT(r6, 0x0, 0x0)
connect$bt_rfcomm(r2, &(0x7f0000000180)={0x1f, @none, 0x15}, 0xa)
getdents64(r6, &(0x7f0000002100)=""/171, 0xab)

1.920519748s ago: executing program 4 (id=3979):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000200)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) (async)
poll(&(0x7f0000000140)=[{r0, 0xa042}], 0x1, 0x3) (async)
creat(&(0x7f0000001380)='./file0\x00', 0x4)

1.659819871s ago: executing program 6 (id=3980):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x1fd)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FIBMAP(r2, 0x1, 0xffffffffffffffff)
rt_sigprocmask(0x3, &(0x7f0000000040)={[0x4]}, &(0x7f00000000c0), 0x8)
fcntl$getflags(r1, 0x401)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.534795023s ago: executing program 4 (id=3981):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fadvise64(r1, 0x92, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x14, r3, 0xe985e4df3848afb5}, 0x14}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r1, 0xa4717000)

1.144333526s ago: executing program 6 (id=3982):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x2)
connect(r1, &(0x7f00000002c0)=@nfc_llcp={0x25, 0x0, 0x1, 0x0, 0x8, 0x1, "aeadc233a20573f54110b96dc87683a424a5e4d81b7da7682cd74ab71687086a5f45f7c0511960fdce705f69ab3351a1f1dc10c10d8360ec7ad46a07bc3319", 0x25}, 0x80) (async)
connect(r1, &(0x7f00000002c0)=@nfc_llcp={0x25, 0x0, 0x1, 0x0, 0x8, 0x1, "aeadc233a20573f54110b96dc87683a424a5e4d81b7da7682cd74ab71687086a5f45f7c0511960fdce705f69ab3351a1f1dc10c10d8360ec7ad46a07bc3319", 0x25}, 0x80)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000040))

900.360691ms ago: executing program 6 (id=3983):
r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6)
fallocate(r0, 0x0, 0x0, 0x400001)
fcntl$addseals(r0, 0x409, 0xc) (async)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0)

642.704161ms ago: executing program 6 (id=3984):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000400000000005002e00000008000300", @ANYRES32=r1, @ANYBLOB="050034008b001100060049"], 0x2c}}, 0x0)

300.253673ms ago: executing program 6 (id=3985):
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x200000, 0x0)

0s ago: executing program 6 (id=3986):
syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x12, r0, 0x910d0000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x0, 0x331, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="47632abd7000fbdbdf251c0000000c00060001"], 0x20}}, 0x40040)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan4\x00'})

kernel console output (not intermixed with test programs):

are name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  694.176140][T17541] Call Trace:
[  694.176149][T17541]  <TASK>
[  694.176160][T17541]  dump_stack_lvl+0x189/0x250
[  694.176195][T17541]  ? __pfx____ratelimit+0x10/0x10
[  694.176227][T17541]  ? __pfx_dump_stack_lvl+0x10/0x10
[  694.176257][T17541]  ? __pfx__printk+0x10/0x10
[  694.176286][T17541]  ? __might_fault+0xb0/0x130
[  694.176320][T17541]  should_fail_ex+0x414/0x560
[  694.176353][T17541]  _copy_from_iter+0x1db/0x16f0
[  694.176388][T17541]  ? __pfx__copy_from_iter+0x10/0x10
[  694.176420][T17541]  ? sock_alloc_send_pskb+0x875/0x990
[  694.176453][T17541]  ? __pfx__copy_from_iter+0x10/0x10
[  694.176489][T17541]  ? page_copy_sane+0x16a/0x280
[  694.176512][T17541]  copy_page_from_iter+0xdd/0x170
[  694.176539][T17541]  skb_copy_datagram_from_iter+0x306/0x720
[  694.176580][T17541]  tun_get_user+0x1691/0x3e20
[  694.176621][T17541]  ? aa_file_perm+0x13e/0x11b0
[  694.176644][T17541]  ? aa_file_perm+0x3ed/0x11b0
[  694.176664][T17541]  ? __pfx_tun_get_user+0x10/0x10
[  694.176686][T17541]  ? _parse_integer_limit+0x1ae/0x1f0
[  694.176727][T17541]  ? __lock_acquire+0xab9/0xd20
[  694.176758][T17541]  ? ref_tracker_alloc+0x318/0x460
[  694.176785][T17541]  ? __lock_acquire+0xab9/0xd20
[  694.176811][T17541]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  694.176847][T17541]  ? tun_get+0x1c/0x2f0
[  694.176875][T17541]  ? tun_get+0x1c/0x2f0
[  694.176897][T17541]  ? tun_get+0x1c/0x2f0
[  694.176924][T17541]  tun_chr_write_iter+0x113/0x200
[  694.176951][T17541]  vfs_write+0x54b/0xa90
[  694.176984][T17541]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  694.177007][T17541]  ? __pfx_vfs_write+0x10/0x10
[  694.177045][T17541]  ? __fget_files+0x2a/0x420
[  694.177098][T17541]  ksys_write+0x145/0x250
[  694.177128][T17541]  ? __pfx_ksys_write+0x10/0x10
[  694.177154][T17541]  ? rcu_is_watching+0x15/0xb0
[  694.177187][T17541]  ? do_syscall_64+0xbe/0x3b0
[  694.177223][T17541]  do_syscall_64+0xfa/0x3b0
[  694.177253][T17541]  ? lockdep_hardirqs_on+0x9c/0x150
[  694.177282][T17541]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.177305][T17541]  ? clear_bhb_loop+0x60/0xb0
[  694.177331][T17541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.177351][T17541] RIP: 0033:0x7fb3adf8e9a9
[  694.177370][T17541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  694.177389][T17541] RSP: 002b:00007fb3aee9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  694.177411][T17541] RAX: ffffffffffffffda RBX: 00007fb3ae1b5fa0 RCX: 00007fb3adf8e9a9
[  694.177429][T17541] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000003
[  694.177443][T17541] RBP: 00007fb3aee9a090 R08: 0000000000000000 R09: 0000000000000000
[  694.177456][T17541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  694.177468][T17541] R13: 0000000000000000 R14: 00007fb3ae1b5fa0 R15: 00007fffe798a698
[  694.177501][T17541]  </TASK>
[  694.291761][  T980] m920x_read = error: -19
[  694.292703][    C1] vkms_vblank_simulate: vblank timer overrun
[  694.298001][  T980] dvb-usb: error while querying for an remote control event.
[  694.576788][    T9] steelseries 0003:1038:12B6.0029: unknown main item tag 0x3
[  694.610310][    T9] steelseries 0003:1038:12B6.0029: item fetching failed at offset 6/7
[  694.619483][    T9] steelseries 0003:1038:12B6.0029: probe with driver steelseries failed with error -22
[  694.840117][ T5849] usb 7-1: USB disconnect, device number 9
[  694.947655][T17546] comedi comedi3: 8255: I/O port conflict (0x4f27,4)
[  694.970249][T17546] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  694.987272][T17546] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  695.022030][T17546] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  695.024821][T17547] /dev/rnullb0: Can't open blockdev
[  695.040134][  T980] m920x_read = error: -19
[  695.044949][  T980] dvb-usb: error while querying for an remote control event.
[  695.045160][T17546] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  695.086316][T17546] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  695.116834][T17546] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  695.130292][T17546] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  695.141334][T17546] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  695.161087][T17546] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  695.173852][  T980] m920x_read = error: -19
[  695.188357][  T980] dvb-usb: error while querying for an remote control event.
[  695.203352][T17546] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  695.225184][T17546] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  695.245313][T17546] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  695.266568][T17546] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  695.288905][T17546] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  695.330252][  T980] m920x_read = error: -19
[  695.337013][  T980] dvb-usb: error while querying for an remote control event.
[  695.450089][ T5849] m920x_read = error: -19
[  695.454645][ T5849] dvb-usb: error while querying for an remote control event.
[  695.572534][ T5849] m920x_read = error: -19
[  695.589021][ T5849] dvb-usb: error while querying for an remote control event.
[  695.740364][  T980] m920x_read = error: -19
[  695.744790][  T980] dvb-usb: error while querying for an remote control event.
[  695.807568][T17555] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  695.846277][T17555] /dev/rnullb0: Can't open blockdev
[  695.880417][  T980] m920x_read = error: -19
[  695.884842][  T980] dvb-usb: error while querying for an remote control event.
[  695.997475][T17559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3626'.
[  696.029780][  T980] m920x_read = error: -19
[  696.032014][T17561] /dev/rnullb0: Can't open blockdev
[  696.042233][  T980] dvb-usb: error while querying for an remote control event.
[  696.060525][T17561] /dev/rnullb0: Can't open blockdev
[  696.076386][T17561] /dev/rnullb0: Can't open blockdev
[  696.091830][T17561] /dev/rnullb0: Can't open blockdev
[  696.116370][T17561] /dev/rnullb0: Can't open blockdev
[  696.182054][  T980] m920x_read = error: -19
[  696.193236][  T980] dvb-usb: error while querying for an remote control event.
[  696.320225][  T980] m920x_read = error: -19
[  696.325888][  T980] dvb-usb: error while querying for an remote control event.
[  696.463494][T17573] /dev/rnullb0: Can't open blockdev
[  696.472035][  T980] m920x_read = error: -19
[  696.481045][  T980] dvb-usb: error while querying for an remote control event.
[  696.620215][  T980] m920x_read = error: -19
[  696.631225][  T980] dvb-usb: error while querying for an remote control event.
[  696.770351][ T5849] m920x_read = error: -19
[  696.790093][ T5849] dvb-usb: error while querying for an remote control event.
[  696.901033][ T5849] m920x_read = error: -19
[  696.905580][ T5849] dvb-usb: error while querying for an remote control event.
[  697.055665][ T5849] m920x_read = error: -19
[  697.078615][ T5849] dvb-usb: error while querying for an remote control event.
[  697.165799][T17580] syz.5.3633: attempt to access beyond end of device
[  697.165799][T17580] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0
[  697.220287][T17580] XFS (nbd5): SB validate failed with error -5.
[  697.240389][ T5849] m920x_read = error: -19
[  697.267564][ T5849] dvb-usb: error while querying for an remote control event.
[  697.443235][ T5849] m920x_read = error: -19
[  697.459426][ T5849] dvb-usb: error while querying for an remote control event.
[  697.559119][T17601] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3636'.
[  697.611405][ T5849] m920x_read = error: -19
[  697.615835][ T5849] dvb-usb: error while querying for an remote control event.
[  697.753085][T17605] /dev/rnullb0: Can't open blockdev
[  697.753289][ T5849] m920x_read = error: -19
[  697.809939][ T5849] dvb-usb: error while querying for an remote control event.
[  697.864796][T17607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  697.907314][T17607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  697.940218][ T5917] m920x_read = error: -19
[  697.944648][ T5917] dvb-usb: error while querying for an remote control event.
[  697.958721][T17609] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  698.021497][T17609] overlayfs: failed to set xattr on upper
[  698.027311][T17609] overlayfs: ...falling back to redirect_dir=nofollow.
[  698.053663][T17614] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4184261582 (133896370624 ns) > initial count (23809231392 ns). Using initial count to start timer.
[  698.110956][T17609] overlayfs: ...falling back to uuid=null.
[  698.122400][ T5917] m920x_read = error: -19
[  698.126833][ T5917] dvb-usb: error while querying for an remote control event.
[  698.290569][ T5917] m920x_read = error: -19
[  698.295010][ T5917] dvb-usb: error while querying for an remote control event.
[  698.339321][T17619] /dev/rnullb0: Can't open blockdev
[  698.433914][ T5917] m920x_read = error: -19
[  698.476183][ T5917] dvb-usb: error while querying for an remote control event.
[  698.607391][ T5917] m920x_read = error: -19
[  698.643328][ T5917] dvb-usb: error while querying for an remote control event.
[  698.780893][ T5917] m920x_read = error: -19
[  698.785311][ T5917] dvb-usb: error while querying for an remote control event.
[  698.944715][ T5917] m920x_read = error: -19
[  698.977558][ T5917] dvb-usb: error while querying for an remote control event.
[  699.090173][ T5854] Bluetooth: hci5: command 0x206a tx timeout
[  699.096524][ T5859] Bluetooth: hci5: Opcode 0x206a failed: -110
[  699.140388][ T5917] m920x_read = error: -19
[  699.144813][ T5917] dvb-usb: error while querying for an remote control event.
[  699.295884][T17634] FAULT_INJECTION: forcing a failure.
[  699.295884][T17634] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  699.320177][ T5917] m920x_read = error: -19
[  699.347385][ T5917] dvb-usb: error while querying for an remote control event.
[  699.359148][T17634] CPU: 1 UID: 0 PID: 17634 Comm: syz.5.3649 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  699.359179][T17634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  699.359193][T17634] Call Trace:
[  699.359201][T17634]  <TASK>
[  699.359210][T17634]  dump_stack_lvl+0x189/0x250
[  699.359244][T17634]  ? __pfx____ratelimit+0x10/0x10
[  699.359275][T17634]  ? __pfx_dump_stack_lvl+0x10/0x10
[  699.359303][T17634]  ? __pfx__printk+0x10/0x10
[  699.359333][T17634]  ? __might_fault+0xb0/0x130
[  699.359369][T17634]  should_fail_ex+0x414/0x560
[  699.359400][T17634]  _copy_from_iter+0x1db/0x16f0
[  699.359432][T17634]  ? __pfx__copy_from_iter+0x10/0x10
[  699.359464][T17634]  ? sock_alloc_send_pskb+0x875/0x990
[  699.359515][T17634]  ? __pfx__copy_from_iter+0x10/0x10
[  699.359549][T17634]  ? page_copy_sane+0x16a/0x280
[  699.359569][T17634]  copy_page_from_iter+0xdd/0x170
[  699.359593][T17634]  skb_copy_datagram_from_iter+0x306/0x720
[  699.359629][T17634]  tun_get_user+0x1691/0x3e20
[  699.359671][T17634]  ? aa_file_perm+0x13e/0x11b0
[  699.359692][T17634]  ? aa_file_perm+0x3ed/0x11b0
[  699.359711][T17634]  ? __pfx_tun_get_user+0x10/0x10
[  699.359732][T17634]  ? _parse_integer_limit+0x1ae/0x1f0
[  699.359770][T17634]  ? __lock_acquire+0xab9/0xd20
[  699.359806][T17634]  ? ref_tracker_alloc+0x318/0x460
[  699.359832][T17634]  ? __lock_acquire+0xab9/0xd20
[  699.359857][T17634]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  699.359891][T17634]  ? tun_get+0x1c/0x2f0
[  699.359918][T17634]  ? tun_get+0x1c/0x2f0
[  699.359943][T17634]  ? tun_get+0x1c/0x2f0
[  699.359968][T17634]  tun_chr_write_iter+0x113/0x200
[  699.359992][T17634]  vfs_write+0x54b/0xa90
[  699.360023][T17634]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  699.360046][T17634]  ? __pfx_vfs_write+0x10/0x10
[  699.360084][T17634]  ? __fget_files+0x2a/0x420
[  699.360124][T17634]  ksys_write+0x145/0x250
[  699.360153][T17634]  ? __pfx_ksys_write+0x10/0x10
[  699.360178][T17634]  ? rcu_is_watching+0x15/0xb0
[  699.360212][T17634]  ? do_syscall_64+0xbe/0x3b0
[  699.360247][T17634]  do_syscall_64+0xfa/0x3b0
[  699.360277][T17634]  ? lockdep_hardirqs_on+0x9c/0x150
[  699.360306][T17634]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.360327][T17634]  ? clear_bhb_loop+0x60/0xb0
[  699.360353][T17634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.360373][T17634] RIP: 0033:0x7f93aa38e9a9
[  699.360392][T17634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  699.360409][T17634] RSP: 002b:00007f93ab26e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  699.360432][T17634] RAX: ffffffffffffffda RBX: 00007f93aa5b5fa0 RCX: 00007f93aa38e9a9
[  699.360448][T17634] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000003
[  699.360462][T17634] RBP: 00007f93ab26e090 R08: 0000000000000000 R09: 0000000000000000
[  699.360476][T17634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  699.360488][T17634] R13: 0000000000000000 R14: 00007f93aa5b5fa0 R15: 00007ffe0b13e108
[  699.360521][T17634]  </TASK>
[  699.470868][ T5917] m920x_read = error: -19
[  699.473170][    C1] vkms_vblank_simulate: vblank timer overrun
[  699.478628][ T5917] dvb-usb: error while querying for an remote control event.
[  700.320405][ T5917] m920x_read = error: -19
[  700.324940][ T5917] dvb-usb: error while querying for an remote control event.
[  700.350146][ T5924] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  700.453499][ T5917] m920x_read = error: -19
[  700.478277][ T5917] dvb-usb: error while querying for an remote control event.
[  700.520378][ T5924] usb 6-1: Using ep0 maxpacket: 16
[  700.528258][ T5924] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  700.560089][ T5924] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  700.606173][ T5924] usb 6-1: config 0 has no interface number 0
[  700.622687][ T5849] m920x_read = error: -19
[  700.627282][ T5849] dvb-usb: error while querying for an remote control event.
[  700.635874][ T5924] usb 6-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  700.655698][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.680067][ T5924] usb 6-1: Product: syz
[  700.684306][ T5924] usb 6-1: Manufacturer: syz
[  700.700468][ T5924] usb 6-1: SerialNumber: syz
[  700.730959][ T5924] usb 6-1: config 0 descriptor??
[  700.740555][ T5849] m920x_read = error: -19
[  700.744976][ T5849] dvb-usb: error while querying for an remote control event.
[  700.758473][ T5924] usb 6-1: Found UVC 0.00 device syz (046c:14e8)
[  700.785357][ T5924] usb 6-1: No valid video chain found.
[  700.826000][T17658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  700.865951][T17658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  700.925215][ T5917] m920x_read = error: -19
[  700.929687][ T5917] dvb-usb: error while querying for an remote control event.
[  700.993199][T17652] /dev/rnullb0: Can't open blockdev
[  701.050353][  T980] m920x_read = error: -19
[  701.054799][  T980] dvb-usb: error while querying for an remote control event.
[  701.133012][ T5849] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  701.172226][  T980] m920x_read = error: -19
[  701.176670][  T980] dvb-usb: error while querying for an remote control event.
[  701.300345][  T980] m920x_read = error: -19
[  701.304789][  T980] dvb-usb: error while querying for an remote control event.
[  701.314281][ T5849] usb 7-1: Using ep0 maxpacket: 32
[  701.325013][ T5849] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  701.340049][ T5849] usb 7-1: config 0 has no interface number 0
[  701.361295][ T5849] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  701.371870][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.379927][ T5849] usb 7-1: Product: syz
[  701.396077][ T5849] usb 7-1: Manufacturer: syz
[  701.410084][ T5849] usb 7-1: SerialNumber: syz
[  701.421130][ T5849] usb 7-1: config 0 descriptor??
[  701.430111][  T980] m920x_read = error: -19
[  701.435254][  T980] dvb-usb: error while querying for an remote control event.
[  701.455327][ T5849] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  701.586827][  T980] m920x_read = error: -19
[  701.604922][  T980] dvb-usb: error while querying for an remote control event.
[  701.668920][ T5849] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  701.719498][ T5849] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  701.740465][  T980] m920x_read = error: -19
[  701.744917][  T980] dvb-usb: error while querying for an remote control event.
[  701.890427][  T980] m920x_read = error: -19
[  701.894915][  T980] dvb-usb: error while querying for an remote control event.
[  702.040520][  T980] m920x_read = error: -19
[  702.045069][  T980] dvb-usb: error while querying for an remote control event.
[  702.200208][ T5849] m920x_read = error: -19
[  702.204657][ T5849] dvb-usb: error while querying for an remote control event.
[  702.364550][ T5849] m920x_read = error: -19
[  702.376019][ T5849] dvb-usb: error while querying for an remote control event.
[  702.520493][ T5849] m920x_read = error: -19
[  702.524998][ T5849] dvb-usb: error while querying for an remote control event.
[  702.681790][ T5849] m920x_read = error: -19
[  702.700461][ T5849] dvb-usb: error while querying for an remote control event.
[  702.840452][ T5849] m920x_read = error: -19
[  702.845092][ T5849] dvb-usb: error while querying for an remote control event.
[  702.990685][ T5849] m920x_read = error: -19
[  703.011203][ T5849] dvb-usb: error while querying for an remote control event.
[  703.160125][ T5849] m920x_read = error: -19
[  703.165901][ T5849] dvb-usb: error while querying for an remote control event.
[  703.310229][ T5849] m920x_read = error: -19
[  703.317689][ T5849] dvb-usb: error while querying for an remote control event.
[  703.450224][ T5849] m920x_read = error: -19
[  703.454787][ T5849] dvb-usb: error while querying for an remote control event.
[  703.580523][ T5849] m920x_read = error: -19
[  703.589781][ T5849] dvb-usb: error while querying for an remote control event.
[  703.711118][ T5917] m920x_read = error: -19
[  703.715579][ T5917] dvb-usb: error while querying for an remote control event.
[  703.840599][ T5917] m920x_read = error: -19
[  703.860288][ T5917] dvb-usb: error while querying for an remote control event.
[  703.932811][    C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  703.933320][ T5924] usb 7-1: USB disconnect, device number 10
[  703.991251][ T5924] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  703.991585][T17676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  704.020148][ T5917] m920x_read = error: -19
[  704.035017][ T5917] dvb-usb: error while querying for an remote control event.
[  704.067929][ T5924] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  704.101077][T17676] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  704.141136][ T5924] quatech2 7-1:0.51: device disconnected
[  704.170433][ T5917] m920x_read = error: -19
[  704.174893][ T5917] dvb-usb: error while querying for an remote control event.
[  704.312294][ T5917] m920x_read = error: -19
[  704.327031][ T5917] dvb-usb: error while querying for an remote control event.
[  704.460106][ T5917] m920x_read = error: -19
[  704.469178][ T5917] dvb-usb: error while querying for an remote control event.
[  704.610958][ T5917] m920x_read = error: -19
[  704.615386][ T5917] dvb-usb: error while querying for an remote control event.
[  704.780552][ T5917] m920x_read = error: -19
[  704.800158][ T5917] dvb-usb: error while querying for an remote control event.
[  704.918694][T17692] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  704.931599][ T5917] m920x_read = error: -19
[  704.936026][ T5917] dvb-usb: error while querying for an remote control event.
[  704.969856][T17692] /dev/rnullb0: Can't open blockdev
[  705.076536][ T5849] m920x_read = error: -19
[  705.082022][ T5849] dvb-usb: error while querying for an remote control event.
[  705.210528][  T980] m920x_read = error: -19
[  705.214968][  T980] dvb-usb: error while querying for an remote control event.
[  705.246114][T17699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  705.280388][ T5917] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  705.310569][T17699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  705.361496][T17698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  705.370889][  T980] m920x_read = error: -19
[  705.375289][  T980] dvb-usb: error while querying for an remote control event.
[  705.393678][T17698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  705.480432][ T5917] usb 7-1: Using ep0 maxpacket: 8
[  705.507092][ T5917] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  705.544486][ T5917] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  705.567877][  T980] m920x_read = error: -19
[  705.595856][  T980] dvb-usb: error while querying for an remote control event.
[  705.611369][ T5917] usb 7-1: config 0 interface 0 has no altsetting 0
[  705.630063][ T5917] usb 7-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  705.656029][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.686100][ T5917] usb 7-1: config 0 descriptor??
[  705.740457][  T980] m920x_read = error: -19
[  705.744975][  T980] dvb-usb: error while querying for an remote control event.
[  705.870192][  T980] m920x_read = error: -19
[  705.882559][  T980] dvb-usb: error while querying for an remote control event.
[  706.020362][ T5849] m920x_read = error: -19
[  706.024866][ T5849] dvb-usb: error while querying for an remote control event.
[  706.150195][ T5917] usbhid 7-1:0.0: can't add hid device: -71
[  706.156423][ T5849] m920x_read = error: -19
[  706.166484][ T5849] dvb-usb: error while querying for an remote control event.
[  706.176734][ T5917] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  706.206101][ T5917] usb 7-1: USB disconnect, device number 11
[  706.300146][  T980] m920x_read = error: -19
[  706.314837][  T980] dvb-usb: error while querying for an remote control event.
[  706.352379][T17715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  706.389476][T17715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  706.451874][ T5917] m920x_read = error: -19
[  706.456427][ T5917] dvb-usb: error while querying for an remote control event.
[  706.591598][ T5917] m920x_read = error: -19
[  706.612776][ T5917] dvb-usb: error while querying for an remote control event.
[  706.692592][T17722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  706.740740][T17722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  706.760583][ T5917] m920x_read = error: -19
[  706.767419][ T5917] dvb-usb: error while querying for an remote control event.
[  706.826188][T17722] /dev/rnullb0: Can't open blockdev
[  706.910180][ T5917] m920x_read = error: -19
[  706.914598][ T5917] dvb-usb: error while querying for an remote control event.
[  707.050100][ T5917] m920x_read = error: -19
[  707.054681][ T5917] dvb-usb: error while querying for an remote control event.
[  707.190446][ T5917] m920x_read = error: -19
[  707.197562][ T5917] dvb-usb: error while querying for an remote control event.
[  707.247329][T17730] /dev/rnullb0: Can't open blockdev
[  707.330257][ T5917] m920x_read = error: -19
[  707.345245][ T5917] dvb-usb: error while querying for an remote control event.
[  707.484357][ T5917] m920x_read = error: -19
[  707.513391][ T5917] dvb-usb: error while querying for an remote control event.
[  707.561616][T17741] netlink: 'syz.3.3685': attribute type 3 has an invalid length.
[  707.569430][T17741] netlink: 'syz.3.3685': attribute type 1 has an invalid length.
[  707.629549][T17741] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3685'.
[  707.640441][ T5917] m920x_read = error: -19
[  707.644846][ T5917] dvb-usb: error while querying for an remote control event.
[  707.684930][T17743] /dev/rnullb0: Can't open blockdev
[  707.800584][ T5917] m920x_read = error: -19
[  707.805013][ T5917] dvb-usb: error while querying for an remote control event.
[  707.950556][ T5917] m920x_read = error: -19
[  707.960134][ T5917] dvb-usb: error while querying for an remote control event.
[  707.979668][T17750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  708.017884][T17750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  708.110493][ T5917] m920x_read = error: -19
[  708.123685][ T5917] dvb-usb: error while querying for an remote control event.
[  708.261153][ T5917] m920x_read = error: -19
[  708.275915][ T5917] dvb-usb: error while querying for an remote control event.
[  708.400437][ T5917] m920x_read = error: -19
[  708.404939][ T5917] dvb-usb: error while querying for an remote control event.
[  708.532712][ T5917] m920x_read = error: -19
[  708.549150][ T5917] dvb-usb: error while querying for an remote control event.
[  708.600051][   T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  708.680892][ T5917] m920x_read = error: -19
[  708.695928][ T5917] dvb-usb: error while querying for an remote control event.
[  708.783939][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  708.812005][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  708.840121][ T5917] m920x_read = error: -19
[  708.848804][   T24] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  708.868963][ T5917] dvb-usb: error while querying for an remote control event.
[  708.877862][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.913564][   T24] usb 7-1: config 0 descriptor??
[  708.991513][ T5917] m920x_read = error: -19
[  709.004581][ T5917] dvb-usb: error while querying for an remote control event.
[  709.138160][ T5917] m920x_read = error: -19
[  709.145992][ T5917] dvb-usb: error while querying for an remote control event.
[  709.184973][T17764] fuse: Bad value for 'group_id'
[  709.210424][T17764] fuse: Bad value for 'group_id'
[  709.280226][ T5917] m920x_read = error: -19
[  709.295186][ T5917] dvb-usb: error while querying for an remote control event.
[  709.345462][   T24] steelseries 0003:1038:12B6.002A: unknown main item tag 0x0
[  709.371239][   T24] steelseries 0003:1038:12B6.002A: unknown main item tag 0x0
[  709.393379][   T24] steelseries 0003:1038:12B6.002A: unknown main item tag 0x0
[  709.420216][ T5849] m920x_read = error: -19
[  709.426975][ T5849] dvb-usb: error while querying for an remote control event.
[  709.441792][   T24] steelseries 0003:1038:12B6.002A: unknown main item tag 0x0
[  709.480995][   T24] steelseries 0003:1038:12B6.002A: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.6-1/input0
[  709.551851][ T5849] m920x_read = error: -19
[  709.556285][ T5849] dvb-usb: error while querying for an remote control event.
[  709.640276][   T24] steelseries 0003:1038:12B6.002A: hid_hw_raw_request() failed with -71
[  709.677836][   T24] usb 7-1: USB disconnect, device number 12
[  709.730179][ T5849] m920x_read = error: -19
[  709.734601][ T5849] dvb-usb: error while querying for an remote control event.
[  709.762364][T17777] /dev/rnullb0: Can't open blockdev
[  709.795969][T17773] fido_id[17773]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  709.890247][ T5849] m920x_read = error: -19
[  709.894666][ T5849] dvb-usb: error while querying for an remote control event.
[  709.972613][T17781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  710.024759][T17781] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  710.040221][ T5849] m920x_read = error: -19
[  710.044639][ T5849] dvb-usb: error while querying for an remote control event.
[  710.210133][ T5849] m920x_read = error: -19
[  710.214553][ T5849] dvb-usb: error while querying for an remote control event.
[  710.340139][ T5849] m920x_read = error: -19
[  710.344549][ T5849] dvb-usb: error while querying for an remote control event.
[  710.480211][ T5849] m920x_read = error: -19
[  710.485447][ T5849] dvb-usb: error while querying for an remote control event.
[  710.594579][T17793] fuse: Bad value for 'group_id'
[  710.620588][ T5849] m920x_read = error: -19
[  710.625027][ T5849] dvb-usb: error while querying for an remote control event.
[  710.640573][T17793] fuse: Bad value for 'group_id'
[  710.760193][ T5849] m920x_read = error: -19
[  710.764645][ T5849] dvb-usb: error while querying for an remote control event.
[  710.942548][ T5849] m920x_read = error: -19
[  710.980049][ T5849] dvb-usb: error while querying for an remote control event.
[  711.150360][ T5849] m920x_read = error: -19
[  711.154800][ T5849] dvb-usb: error while querying for an remote control event.
[  711.310154][ T5849] m920x_read = error: -19
[  711.314788][ T5849] dvb-usb: error while querying for an remote control event.
[  711.440171][  T980] m920x_read = error: -19
[  711.444600][  T980] dvb-usb: error while querying for an remote control event.
[  711.462045][T17809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  711.509058][T17807] /dev/rnullb0: Can't open blockdev
[  711.527325][T17809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  711.590229][ T5849] m920x_read = error: -19
[  711.594718][ T5849] dvb-usb: error while querying for an remote control event.
[  711.735314][ T5849] m920x_read = error: -19
[  711.739753][ T5849] dvb-usb: error while querying for an remote control event.
[  711.870999][ T5849] m920x_read = error: -19
[  711.875433][ T5849] dvb-usb: error while querying for an remote control event.
[  711.928102][T17815] fuse: Bad value for 'group_id'
[  711.952453][T17815] fuse: Bad value for 'group_id'
[  712.020156][ T5849] m920x_read = error: -19
[  712.030216][ T5849] dvb-usb: error while querying for an remote control event.
[  712.140262][ T5935] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  712.160491][ T5849] m920x_read = error: -19
[  712.164920][ T5849] dvb-usb: error while querying for an remote control event.
[  712.310085][ T5935] usb 7-1: Using ep0 maxpacket: 8
[  712.319043][ T5935] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  712.333876][ T5849] m920x_read = error: -19
[  712.338302][ T5849] dvb-usb: error while querying for an remote control event.
[  712.368658][ T5935] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  712.426401][ T5935] usb 7-1: config 0 interface 0 has no altsetting 0
[  712.445287][ T5935] usb 7-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  712.460614][ T5849] m920x_read = error: -19
[  712.465127][ T5849] dvb-usb: error while querying for an remote control event.
[  712.470274][ T5935] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.483987][T17819] syz.5.3716: attempt to access beyond end of device
[  712.483987][T17819] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[  712.512681][ T5935] usb 7-1: config 0 descriptor??
[  712.584629][T17824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  712.610599][  T980] m920x_read = error: -19
[  712.615162][  T980] dvb-usb: error while querying for an remote control event.
[  712.640658][T17824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  712.780126][  T980] m920x_read = error: -19
[  712.784544][  T980] dvb-usb: error while querying for an remote control event.
[  712.910364][  T980] m920x_read = error: -19
[  712.916713][  T980] dvb-usb: error while querying for an remote control event.
[  712.952959][ T5935] usbhid 7-1:0.0: can't add hid device: -71
[  712.975221][ T5935] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  713.005093][ T5935] usb 7-1: USB disconnect, device number 13
[  713.050282][  T980] m920x_read = error: -19
[  713.059698][  T980] dvb-usb: error while querying for an remote control event.
[  713.180656][  T980] m920x_read = error: -19
[  713.185081][  T980] dvb-usb: error while querying for an remote control event.
[  713.262457][T17831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.302367][T17831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.321794][  T980] m920x_read = error: -19
[  713.326247][  T980] dvb-usb: error while querying for an remote control event.
[  713.470127][  T980] m920x_read = error: -19
[  713.474559][  T980] dvb-usb: error while querying for an remote control event.
[  713.613703][  T980] m920x_read = error: -19
[  713.618136][  T980] dvb-usb: error while querying for an remote control event.
[  713.635359][T17837] /dev/rnullb0: Can't open blockdev
[  713.659156][T17837] /dev/rnullb0: Can't open blockdev
[  713.750204][  T980] m920x_read = error: -19
[  713.754637][  T980] dvb-usb: error while querying for an remote control event.
[  713.817803][T17839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.844412][T17839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.900166][  T980] m920x_read = error: -19
[  713.904728][  T980] dvb-usb: error while querying for an remote control event.
[  714.030508][  T980] m920x_read = error: -19
[  714.034935][  T980] dvb-usb: error while querying for an remote control event.
[  714.170151][  T980] m920x_read = error: -19
[  714.174672][  T980] dvb-usb: error while querying for an remote control event.
[  714.310237][  T980] m920x_read = error: -19
[  714.314662][  T980] dvb-usb: error while querying for an remote control event.
[  714.450376][  T980] m920x_read = error: -19
[  714.463482][  T980] dvb-usb: error while querying for an remote control event.
[  714.611568][  T980] m920x_read = error: -19
[  714.615999][  T980] dvb-usb: error while querying for an remote control event.
[  714.676708][T17856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  714.744516][T17856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  714.766976][  T980] m920x_read = error: -19
[  714.775591][  T980] dvb-usb: error while querying for an remote control event.
[  714.797667][T17858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  714.835587][T17858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  714.867004][T17858] /dev/rnullb0: Can't open blockdev
[  714.903699][  T980] m920x_read = error: -19
[  714.908122][  T980] dvb-usb: error while querying for an remote control event.
[  715.062254][  T980] m920x_read = error: -19
[  715.066695][  T980] dvb-usb: error while querying for an remote control event.
[  715.221486][  T980] m920x_read = error: -19
[  715.225925][  T980] dvb-usb: error while querying for an remote control event.
[  715.370523][  T980] m920x_read = error: -19
[  715.374959][  T980] dvb-usb: error while querying for an remote control event.
[  715.522128][  T980] m920x_read = error: -19
[  715.526565][  T980] dvb-usb: error while querying for an remote control event.
[  715.608868][T17875] overlay: ./file0 is not a directory
[  715.620065][ T5924] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  715.671491][  T980] m920x_read = error: -19
[  715.676598][  T980] dvb-usb: error while querying for an remote control event.
[  715.725920][T17875] overlayfs: failed lookup in lower (424/bus, name='file1', err=-40): overlapping layers
[  715.801721][T17875] /dev/rnullb0: Can't open blockdev
[  715.811566][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  715.835402][  T980] m920x_read = error: -19
[  715.839834][  T980] dvb-usb: error while querying for an remote control event.
[  715.850177][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  715.895012][ T5924] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  715.914843][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.957352][ T5924] usb 7-1: config 0 descriptor??
[  715.981809][ T5849] m920x_read = error: -19
[  715.986224][ T5849] dvb-usb: error while querying for an remote control event.
[  716.140083][  T980] m920x_read = error: -19
[  716.144517][  T980] dvb-usb: error while querying for an remote control event.
[  716.290154][  T980] m920x_read = error: -19
[  716.294589][  T980] dvb-usb: error while querying for an remote control event.
[  716.372559][T17891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  716.388130][ T5924] steelseries 0003:1038:12B6.002B: unknown main item tag 0x3
[  716.410622][T17891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  716.439066][ T5924] steelseries 0003:1038:12B6.002B: unknown main item tag 0x0
[  716.456628][  T980] m920x_read = error: -19
[  716.465173][  T980] dvb-usb: error while querying for an remote control event.
[  716.499773][ T5924] steelseries 0003:1038:12B6.002B: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.6-1/input0
[  716.557305][T17897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3748'.
[  716.600476][  T980] m920x_read = error: -19
[  716.607292][  T980] dvb-usb: error while querying for an remote control event.
[  716.628374][ T5924] steelseries 0003:1038:12B6.002B: hid_hw_raw_request() failed with -71
[  716.691614][ T5924] usb 7-1: USB disconnect, device number 14
[  716.750487][ T5917] m920x_read = error: -19
[  716.759705][ T5917] dvb-usb: error while querying for an remote control event.
[  716.774657][T17896] fido_id[17896]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  716.910434][  T980] m920x_read = error: -19
[  716.921521][  T980] dvb-usb: error while querying for an remote control event.
[  716.993846][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.011153][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.050609][  T980] m920x_read = error: -19
[  717.060121][  T980] dvb-usb: error while querying for an remote control event.
[  717.072916][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.079791][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.134017][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.177134][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.202404][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.210186][  T980] m920x_read = error: -19
[  717.220116][  T980] dvb-usb: error while querying for an remote control event.
[  717.234043][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.286864][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.318526][T17905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  717.340612][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.350932][T17905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  717.379413][ T5917] m920x_read = error: -19
[  717.413595][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.420112][ T5917] dvb-usb: error while querying for an remote control event.
[  717.453942][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.461939][T17905] /dev/rnullb0: Can't open blockdev
[  717.501122][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.507951][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.540560][ T5917] m920x_read = error: -19
[  717.545142][ T5917] dvb-usb: error while querying for an remote control event.
[  717.560301][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.593578][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.604275][T17919] /dev/rnullb0: Can't open blockdev
[  717.614288][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.640686][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.647500][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.670283][  T980] m920x_read = error: -19
[  717.674708][  T980] dvb-usb: error while querying for an remote control event.
[  717.716483][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.759873][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.781911][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.810432][ T5917] m920x_read = error: -19
[  717.820129][ T5917] dvb-usb: error while querying for an remote control event.
[  717.820458][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.869378][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.910219][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.917026][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  717.930305][ T5917] m920x_read = error: -19
[  717.934895][ T5917] dvb-usb: error while querying for an remote control event.
[  717.973302][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  718.000246][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  718.028164][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  718.045348][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  718.080560][ T5917] m920x_read = error: -19
[  718.084987][ T5917] dvb-usb: error while querying for an remote control event.
[  718.093147][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  718.150061][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  718.156886][T17901] fuse: Unknown parameter 'fd)0x0000000000000007'
[  718.242239][T17930] /dev/rnullb0: Can't open blockdev
[  718.250243][ T5917] m920x_read = error: -19
[  718.254671][ T5917] dvb-usb: error while querying for an remote control event.
[  718.267185][T17930] /dev/rnullb0: Can't open blockdev
[  718.295066][T17932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.360849][T17932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.390168][ T5917] m920x_read = error: -19
[  718.394672][ T5917] dvb-usb: error while querying for an remote control event.
[  718.540253][ T5917] m920x_read = error: -19
[  718.555059][ T5917] dvb-usb: error while querying for an remote control event.
[  718.671366][T17939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.680446][ T5924] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  718.681056][ T5917] m920x_read = error: -19
[  718.703383][T17939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.711292][ T5917] dvb-usb: error while querying for an remote control event.
[  718.830157][ T5917] m920x_read = error: -19
[  718.834809][ T5917] dvb-usb: error while querying for an remote control event.
[  718.864667][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  718.896648][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  718.927242][ T5924] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  718.959819][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.970183][ T5917] m920x_read = error: -19
[  718.974592][ T5917] dvb-usb: error while querying for an remote control event.
[  718.991579][ T5924] usb 7-1: config 0 descriptor??
[  719.123671][ T5917] m920x_read = error: -19
[  719.128177][ T5917] dvb-usb: error while querying for an remote control event.
[  719.270241][ T5917] m920x_read = error: -19
[  719.274670][ T5917] dvb-usb: error while querying for an remote control event.
[  719.423430][ T5924] steelseries 0003:1038:12B6.002C: unknown main item tag 0x3
[  719.440959][ T5924] steelseries 0003:1038:12B6.002C: unknown main item tag 0x0
[  719.445310][ T5917] m920x_read = error: -19
[  719.481327][ T5917] dvb-usb: error while querying for an remote control event.
[  719.487822][ T5924] steelseries 0003:1038:12B6.002C: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.6-1/input0
[  719.591308][T17948] /dev/rnullb0: Can't open blockdev
[  719.599814][ T5917] m920x_read = error: -19
[  719.623847][ T5917] dvb-usb: error while querying for an remote control event.
[  719.641630][ T5924] steelseries 0003:1038:12B6.002C: hid_hw_raw_request() failed with -71
[  719.690837][ T5924] usb 7-1: USB disconnect, device number 15
[  719.760349][ T5849] m920x_read = error: -19
[  719.764901][ T5849] dvb-usb: error while querying for an remote control event.
[  719.767558][T17944] fido_id[17944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  719.784903][T17952] bpf: Bad value for 'gid'
[  719.826963][T17952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  719.840798][T17948] can: request_module (can-proto-0) failed.
[  719.857553][T17952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  719.915063][ T5849] m920x_read = error: -19
[  719.935801][ T5849] dvb-usb: error while querying for an remote control event.
[  720.077162][T17954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.093863][ T5849] m920x_read = error: -19
[  720.102970][T17954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.121939][ T5849] dvb-usb: error while querying for an remote control event.
[  720.164536][T17954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.228148][T17954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.237329][ T5849] m920x_read = error: -19
[  720.250987][ T5849] dvb-usb: error while querying for an remote control event.
[  720.259015][T17954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.282216][T17954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.296333][T17960] /dev/rnullb0: Can't open blockdev
[  720.366844][T17956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3771'.
[  720.380510][ T5849] m920x_read = error: -19
[  720.387751][ T5849] dvb-usb: error while querying for an remote control event.
[  720.540383][ T5917] m920x_read = error: -19
[  720.544986][ T5917] dvb-usb: error while querying for an remote control event.
[  720.691331][ T5849] m920x_read = error: -19
[  720.695927][ T5849] dvb-usb: error while querying for an remote control event.
[  720.791346][   T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  720.820092][  T980] m920x_read = error: -19
[  720.825624][  T980] dvb-usb: error while querying for an remote control event.
[  720.970135][   T24] usb 7-1: Using ep0 maxpacket: 8
[  720.976372][  T980] m920x_read = error: -19
[  720.984309][   T24] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  720.990027][  T980] dvb-usb: error while querying for an remote control event.
[  721.005764][   T24] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  721.060088][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  721.082080][   T24] usb 7-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  721.102935][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.129441][   T24] usb 7-1: config 0 descriptor??
[  721.142121][  T980] m920x_read = error: -19
[  721.162122][  T980] dvb-usb: error while querying for an remote control event.
[  721.310181][ T5917] m920x_read = error: -19
[  721.319100][ T5917] dvb-usb: error while querying for an remote control event.
[  721.450314][ T5917] m920x_read = error: -19
[  721.454743][ T5917] dvb-usb: error while querying for an remote control event.
[  721.590617][ T5917] m920x_read = error: -19
[  721.595039][ T5917] dvb-usb: error while querying for an remote control event.
[  721.611337][T17986] /dev/rnullb0: Can't open blockdev
[  721.730243][ T5917] m920x_read = error: -19
[  721.734736][ T5917] dvb-usb: error while querying for an remote control event.
[  721.771263][   T24] usbhid 7-1:0.0: can't add hid device: -71
[  721.777357][   T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  721.841653][   T24] usb 7-1: USB disconnect, device number 16
[  721.862578][T17990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3781'.
[  721.910119][  T980] m920x_read = error: -19
[  721.924192][  T980] dvb-usb: error while querying for an remote control event.
[  722.003948][T17996] kvm: apic: phys broadcast and lowest prio
[  722.061713][  T980] m920x_read = error: -19
[  722.079328][  T980] dvb-usb: error while querying for an remote control event.
[  722.220283][  T980] m920x_read = error: -19
[  722.228514][  T980] dvb-usb: error while querying for an remote control event.
[  722.291648][T18004] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  722.350476][  T980] m920x_read = error: -19
[  722.350526][  T980] dvb-usb: error while querying for an remote control event.
[  722.353210][T18007] /dev/rnullb0: Can't open blockdev
[  722.467692][  T980] m920x_read = error: -19
[  722.472295][  T980] dvb-usb: error while querying for an remote control event.
[  722.580088][  T980] m920x_read = error: -19
[  722.584558][  T980] dvb-usb: error while querying for an remote control event.
[  722.740145][  T980] m920x_read = error: -19
[  722.744570][  T980] dvb-usb: error while querying for an remote control event.
[  722.863785][   T30] audit: type=1326 audit(722.417:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18022 comm="syz.4.3792" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3aa7f8e9a9 code=0x0
[  722.910345][ T5849] m920x_read = error: -19
[  722.914859][ T5849] dvb-usb: error while querying for an remote control event.
[  722.981270][T18024] /dev/rnullb0: Can't open blockdev
[  723.045684][  T980] m920x_read = error: -19
[  723.054801][  T980] dvb-usb: error while querying for an remote control event.
[  723.202171][  T980] m920x_read = error: -19
[  723.227104][  T980] dvb-usb: error while querying for an remote control event.
[  723.360242][  T980] m920x_read = error: -19
[  723.368524][T18031] /dev/rnullb0: Can't open blockdev
[  723.371814][  T980] dvb-usb: error while querying for an remote control event.
[  723.520561][ T5849] m920x_read = error: -19
[  723.532910][ T5849] dvb-usb: error while querying for an remote control event.
[  723.625984][T18036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  723.651632][T18036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  723.690276][ T5849] m920x_read = error: -19
[  723.695406][ T5849] dvb-usb: error while querying for an remote control event.
[  723.840395][ T5849] m920x_read = error: -19
[  723.844826][ T5849] dvb-usb: error while querying for an remote control event.
[  723.980289][ T5849] m920x_read = error: -19
[  723.984908][ T5849] dvb-usb: error while querying for an remote control event.
[  724.130650][ T5849] m920x_read = error: -19
[  724.135117][ T5849] dvb-usb: error while querying for an remote control event.
[  724.282687][ T5849] m920x_read = error: -19
[  724.287166][ T5849] dvb-usb: error while querying for an remote control event.
[  724.422697][T18044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  724.442885][ T5849] m920x_read = error: -19
[  724.455860][ T5849] dvb-usb: error while querying for an remote control event.
[  724.476507][T18044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  724.515030][T18046] FAULT_INJECTION: forcing a failure.
[  724.515030][T18046] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  724.560399][T18046] CPU: 0 UID: 0 PID: 18046 Comm: syz.6.3801 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  724.560433][T18046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  724.560448][T18046] Call Trace:
[  724.560457][T18046]  <TASK>
[  724.560467][T18046]  dump_stack_lvl+0x189/0x250
[  724.560512][T18046]  ? __pfx____ratelimit+0x10/0x10
[  724.560545][T18046]  ? __pfx_dump_stack_lvl+0x10/0x10
[  724.560575][T18046]  ? __pfx__printk+0x10/0x10
[  724.560606][T18046]  ? __might_fault+0xb0/0x130
[  724.560642][T18046]  should_fail_ex+0x414/0x560
[  724.560677][T18046]  _copy_from_user+0x2d/0xb0
[  724.560703][T18046]  ___sys_sendmsg+0x158/0x2a0
[  724.560731][T18046]  ? __pfx____sys_sendmsg+0x10/0x10
[  724.560795][T18046]  ? __fget_files+0x2a/0x420
[  724.560827][T18046]  ? __fget_files+0x3a0/0x420
[  724.560871][T18046]  __x64_sys_sendmsg+0x19b/0x260
[  724.560899][T18046]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  724.560934][T18046]  ? __pfx_ksys_write+0x10/0x10
[  724.560960][T18046]  ? rcu_is_watching+0x15/0xb0
[  724.560995][T18046]  ? do_syscall_64+0xbe/0x3b0
[  724.561032][T18046]  do_syscall_64+0xfa/0x3b0
[  724.561063][T18046]  ? lockdep_hardirqs_on+0x9c/0x150
[  724.561093][T18046]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  724.561115][T18046]  ? clear_bhb_loop+0x60/0xb0
[  724.561141][T18046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  724.561162][T18046] RIP: 0033:0x7f678538e9a9
[  724.561183][T18046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  724.561202][T18046] RSP: 002b:00007f67862a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  724.561227][T18046] RAX: ffffffffffffffda RBX: 00007f67855b5fa0 RCX: 00007f678538e9a9
[  724.561242][T18046] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  724.561257][T18046] RBP: 00007f67862a4090 R08: 0000000000000000 R09: 0000000000000000
[  724.561271][T18046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  724.561285][T18046] R13: 0000000000000000 R14: 00007f67855b5fa0 R15: 00007ffcec26a6b8
[  724.561319][T18046]  </TASK>
[  724.776810][    C0] vkms_vblank_simulate: vblank timer overrun
[  725.050211][ T5849] m920x_read = error: -19
[  725.054681][ T5849] dvb-usb: error while querying for an remote control event.
[  725.230180][  T980] m920x_read = error: -19
[  725.244962][  T980] dvb-usb: error while querying for an remote control event.
[  725.382271][  T980] m920x_read = error: -19
[  725.386697][  T980] dvb-usb: error while querying for an remote control event.
[  725.476307][T18055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  725.536416][  T980] m920x_read = error: -19
[  725.547669][  T980] dvb-usb: error while querying for an remote control event.
[  725.608292][T18057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  725.618944][T18057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  725.690143][  T980] m920x_read = error: -19
[  725.694572][  T980] dvb-usb: error while querying for an remote control event.
[  725.840169][ T5917] m920x_read = error: -19
[  725.845314][ T5917] dvb-usb: error while querying for an remote control event.
[  725.960645][ T5917] m920x_read = error: -19
[  725.965087][ T5917] dvb-usb: error while querying for an remote control event.
[  726.050147][  T980] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  726.090181][ T5917] m920x_read = error: -19
[  726.094702][ T5917] dvb-usb: error while querying for an remote control event.
[  726.204186][  T980] usb 7-1: config 7 has an invalid interface number: 74 but max is 0
[  726.221002][  T980] usb 7-1: config 7 has no interface number 0
[  726.236558][T18064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  726.245360][  T980] usb 7-1: config 7 interface 74 has no altsetting 0
[  726.254495][ T5917] m920x_read = error: -19
[  726.261765][ T5917] dvb-usb: error while querying for an remote control event.
[  726.292230][T18064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  726.300765][  T980] usb 7-1: New USB device found, idVendor=3568, idProduct=2d59, bcdDevice=ad.48
[  726.309870][  T980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.370135][  T980] usb 7-1: Product: syz
[  726.374379][  T980] usb 7-1: Manufacturer: syz
[  726.379010][  T980] usb 7-1: SerialNumber: syz
[  726.400186][ T5917] m920x_read = error: -19
[  726.410111][ T5917] dvb-usb: error while querying for an remote control event.
[  726.488874][T18068] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3810'.
[  726.540195][    T9] m920x_read = error: -19
[  726.549452][    T9] dvb-usb: error while querying for an remote control event.
[  726.682303][    T9] m920x_read = error: -19
[  726.701361][    T9] dvb-usb: error while querying for an remote control event.
[  726.850271][    T9] m920x_read = error: -19
[  726.866918][    T9] dvb-usb: error while querying for an remote control event.
[  727.011170][    T9] m920x_read = error: -19
[  727.042510][    T9] dvb-usb: error while querying for an remote control event.
[  727.181967][    T9] m920x_read = error: -19
[  727.205014][    T9] dvb-usb: error while querying for an remote control event.
[  727.309517][  T980] usb 7-1: USB disconnect, device number 17
[  727.364443][    T9] m920x_read = error: -19
[  727.377833][    T9] dvb-usb: error while querying for an remote control event.
[  727.418823][T18081] FAULT_INJECTION: forcing a failure.
[  727.418823][T18081] name failslab, interval 1, probability 0, space 0, times 0
[  727.473006][T18081] CPU: 0 UID: 0 PID: 18081 Comm: syz.3.3814 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  727.473037][T18081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  727.473050][T18081] Call Trace:
[  727.473060][T18081]  <TASK>
[  727.473069][T18081]  dump_stack_lvl+0x189/0x250
[  727.473104][T18081]  ? __pfx____ratelimit+0x10/0x10
[  727.473134][T18081]  ? __pfx_dump_stack_lvl+0x10/0x10
[  727.473163][T18081]  ? __pfx__printk+0x10/0x10
[  727.473198][T18081]  ? __pfx___might_resched+0x10/0x10
[  727.473229][T18081]  should_fail_ex+0x414/0x560
[  727.473268][T18081]  should_failslab+0xa8/0x100
[  727.473295][T18081]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  727.473320][T18081]  ? __alloc_skb+0x112/0x2d0
[  727.473345][T18081]  __alloc_skb+0x112/0x2d0
[  727.473369][T18081]  netlink_sendmsg+0x5c6/0xb30
[  727.473411][T18081]  ? __pfx_netlink_sendmsg+0x10/0x10
[  727.473445][T18081]  ? aa_sock_msg_perm+0xf1/0x1d0
[  727.473478][T18081]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  727.473508][T18081]  ? __pfx_netlink_sendmsg+0x10/0x10
[  727.473540][T18081]  __sock_sendmsg+0x219/0x270
[  727.473571][T18081]  ____sys_sendmsg+0x505/0x830
[  727.473599][T18081]  ? __pfx_____sys_sendmsg+0x10/0x10
[  727.473632][T18081]  ? import_iovec+0x74/0xa0
[  727.473658][T18081]  ___sys_sendmsg+0x21f/0x2a0
[  727.473684][T18081]  ? __pfx____sys_sendmsg+0x10/0x10
[  727.473743][T18081]  ? __fget_files+0x2a/0x420
[  727.473773][T18081]  ? __fget_files+0x3a0/0x420
[  727.473818][T18081]  __x64_sys_sendmsg+0x19b/0x260
[  727.473844][T18081]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  727.473876][T18081]  ? __pfx_ksys_write+0x10/0x10
[  727.473900][T18081]  ? rcu_is_watching+0x15/0xb0
[  727.473932][T18081]  ? do_syscall_64+0xbe/0x3b0
[  727.473966][T18081]  do_syscall_64+0xfa/0x3b0
[  727.473995][T18081]  ? lockdep_hardirqs_on+0x9c/0x150
[  727.474024][T18081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.474050][T18081]  ? clear_bhb_loop+0x60/0xb0
[  727.474075][T18081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.474094][T18081] RIP: 0033:0x7fb3adf8e9a9
[  727.474113][T18081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  727.474130][T18081] RSP: 002b:00007fb3aee9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  727.474152][T18081] RAX: ffffffffffffffda RBX: 00007fb3ae1b5fa0 RCX: 00007fb3adf8e9a9
[  727.474169][T18081] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  727.474181][T18081] RBP: 00007fb3aee9a090 R08: 0000000000000000 R09: 0000000000000000
[  727.474194][T18081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  727.474207][T18081] R13: 0000000000000000 R14: 00007fb3ae1b5fa0 R15: 00007fffe798a698
[  727.474238][T18081]  </TASK>
[  727.752234][    T9] m920x_read = error: -19
[  727.756662][    T9] dvb-usb: error while querying for an remote control event.
[  727.870174][  T980] m920x_read = error: -19
[  727.874640][  T980] dvb-usb: error while querying for an remote control event.
[  728.000134][  T980] m920x_read = error: -19
[  728.004600][  T980] dvb-usb: error while querying for an remote control event.
[  728.120116][ T5849] m920x_read = error: -19
[  728.124562][ T5849] dvb-usb: error while querying for an remote control event.
[  728.246613][  T980] m920x_read = error: -19
[  728.251208][  T980] dvb-usb: error while querying for an remote control event.
[  728.383992][  T980] m920x_read = error: -19
[  728.403961][  T980] dvb-usb: error while querying for an remote control event.
[  728.553478][  T980] m920x_read = error: -19
[  728.568130][  T980] dvb-usb: error while querying for an remote control event.
[  728.710232][  T980] m920x_read = error: -19
[  728.714873][  T980] dvb-usb: error while querying for an remote control event.
[  728.830156][  T980] m920x_read = error: -19
[  728.840678][T18098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  728.869689][  T980] dvb-usb: error while querying for an remote control event.
[  728.870767][T18098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  728.980401][  T980] m920x_read = error: -19
[  728.990474][  T980] dvb-usb: error while querying for an remote control event.
[  729.149757][    T9] m920x_read = error: -19
[  729.154895][    T9] dvb-usb: error while querying for an remote control event.
[  729.179028][T18100] /dev/rnullb0: Can't open blockdev
[  729.272662][  T980] m920x_read = error: -19
[  729.277099][  T980] dvb-usb: error while querying for an remote control event.
[  729.425249][  T980] m920x_read = error: -19
[  729.454868][  T980] dvb-usb: error while querying for an remote control event.
[  729.498709][T18104] /dev/rnullb0: Can't open blockdev
[  729.600214][    T9] m920x_read = error: -19
[  729.604646][    T9] dvb-usb: error while querying for an remote control event.
[  729.754247][    T9] m920x_read = error: -19
[  729.758736][    T9] dvb-usb: error while querying for an remote control event.
[  729.917422][    T9] m920x_read = error: -19
[  729.922038][    T9] dvb-usb: error while querying for an remote control event.
[  730.030150][  T980] m920x_read = error: -19
[  730.039282][  T980] dvb-usb: error while querying for an remote control event.
[  730.179140][T18127] kvm: pic: non byte write
[  730.188962][T18127] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  730.197882][    T9] m920x_read = error: -19
[  730.207471][    T9] dvb-usb: error while querying for an remote control event.
[  730.370850][    T9] m920x_read = error: -19
[  730.375462][    T9] dvb-usb: error while querying for an remote control event.
[  730.530454][    T9] m920x_read = error: -19
[  730.535018][    T9] dvb-usb: error while querying for an remote control event.
[  730.690429][    T9] m920x_read = error: -19
[  730.705050][    T9] dvb-usb: error while querying for an remote control event.
[  730.830682][  T980] m920x_read = error: -19
[  730.835129][  T980] dvb-usb: error while querying for an remote control event.
[  730.960180][  T980] m920x_read = error: -19
[  730.974694][    T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  730.982470][  T980] dvb-usb: error while querying for an remote control event.
[  731.071388][T18147] FAULT_INJECTION: forcing a failure.
[  731.071388][T18147] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  731.090712][  T980] m920x_read = error: -19
[  731.095142][  T980] dvb-usb: error while querying for an remote control event.
[  731.131338][T18147] CPU: 0 UID: 0 PID: 18147 Comm: syz.3.3837 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  731.131378][T18147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  731.131392][T18147] Call Trace:
[  731.131402][T18147]  <TASK>
[  731.131411][T18147]  dump_stack_lvl+0x189/0x250
[  731.131446][T18147]  ? __pfx____ratelimit+0x10/0x10
[  731.131477][T18147]  ? __pfx_dump_stack_lvl+0x10/0x10
[  731.131507][T18147]  ? __pfx__printk+0x10/0x10
[  731.131538][T18147]  ? __might_fault+0xb0/0x130
[  731.131573][T18147]  should_fail_ex+0x414/0x560
[  731.131603][T18147]  _copy_from_iter+0x1db/0x16f0
[  731.131629][T18147]  ? rcu_is_watching+0x15/0xb0
[  731.131659][T18147]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  731.131685][T18147]  ? __pfx__copy_from_iter+0x10/0x10
[  731.131721][T18147]  ? __build_skb_around+0x257/0x3e0
[  731.131747][T18147]  ? netlink_sendmsg+0x642/0xb30
[  731.131777][T18147]  ? skb_put+0x11b/0x210
[  731.131802][T18147]  netlink_sendmsg+0x6b2/0xb30
[  731.131844][T18147]  ? __pfx_netlink_sendmsg+0x10/0x10
[  731.131880][T18147]  ? aa_sock_msg_perm+0xf1/0x1d0
[  731.131913][T18147]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  731.131943][T18147]  ? __pfx_netlink_sendmsg+0x10/0x10
[  731.131985][T18147]  __sock_sendmsg+0x219/0x270
[  731.132016][T18147]  ____sys_sendmsg+0x505/0x830
[  731.132046][T18147]  ? __pfx_____sys_sendmsg+0x10/0x10
[  731.132079][T18147]  ? import_iovec+0x74/0xa0
[  731.132106][T18147]  ___sys_sendmsg+0x21f/0x2a0
[  731.132132][T18147]  ? __pfx____sys_sendmsg+0x10/0x10
[  731.132194][T18147]  ? __fget_files+0x2a/0x420
[  731.132224][T18147]  ? __fget_files+0x3a0/0x420
[  731.132266][T18147]  __x64_sys_sendmsg+0x19b/0x260
[  731.132294][T18147]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  731.132332][T18147]  ? __pfx_ksys_write+0x10/0x10
[  731.132358][T18147]  ? rcu_is_watching+0x15/0xb0
[  731.132390][T18147]  ? do_syscall_64+0xbe/0x3b0
[  731.132427][T18147]  do_syscall_64+0xfa/0x3b0
[  731.132456][T18147]  ? lockdep_hardirqs_on+0x9c/0x150
[  731.132485][T18147]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  731.132507][T18147]  ? clear_bhb_loop+0x60/0xb0
[  731.132532][T18147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  731.132553][T18147] RIP: 0033:0x7fb3adf8e9a9
[  731.132572][T18147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  731.132590][T18147] RSP: 002b:00007fb3aee9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  731.132613][T18147] RAX: ffffffffffffffda RBX: 00007fb3ae1b5fa0 RCX: 00007fb3adf8e9a9
[  731.132629][T18147] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  731.132643][T18147] RBP: 00007fb3aee9a090 R08: 0000000000000000 R09: 0000000000000000
[  731.132657][T18147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  731.132669][T18147] R13: 0000000000000000 R14: 00007fb3ae1b5fa0 R15: 00007fffe798a698
[  731.132702][T18147]  </TASK>
[  731.154911][T18149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  731.200105][    T9] usb 7-1: Using ep0 maxpacket: 8
[  731.229668][T18149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  731.273382][  T980] m920x_read = error: -19
[  731.495948][    T9] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  731.512457][T18151] /dev/rnullb0: Can't open blockdev
[  731.520080][    T9] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  731.590990][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  731.597690][    T9] usb 7-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  731.635238][  T980] dvb-usb: error while querying for an remote control event.
[  731.650646][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.704034][    T9] usb 7-1: config 0 descriptor??
[  731.780387][  T980] m920x_read = error: -19
[  731.785629][  T980] dvb-usb: error while querying for an remote control event.
[  731.834468][T18156] /dev/rnullb0: Can't open blockdev
[  731.922491][ T5849] m920x_read = error: -19
[  731.926971][ T5849] dvb-usb: error while querying for an remote control event.
[  732.060221][ T5849] m920x_read = error: -19
[  732.064687][ T5849] dvb-usb: error while querying for an remote control event.
[  732.102369][T18158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  732.124993][    T9] sony 0003:054C:0268.002D: unknown main item tag 0x0
[  732.150236][    T9] sony 0003:054C:0268.002D: unknown main item tag 0x0
[  732.152943][T18158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  732.170638][    T9] sony 0003:054C:0268.002D: unknown main item tag 0x0
[  732.187786][    T9] sony 0003:054C:0268.002D: unknown main item tag 0x0
[  732.208167][    T9] sony 0003:054C:0268.002D: unknown main item tag 0x0
[  732.217833][ T5849] m920x_read = error: -19
[  732.243005][ T5849] dvb-usb: error while querying for an remote control event.
[  732.273627][    T9] sony 0003:054C:0268.002D: hiddev0,hidraw0: USB HID v80.03 Device [HID 054c:0268] on usb-dummy_hcd.6-1/input0
[  732.273668][    T9] sony 0003:054C:0268.002D: failed to claim input
[  732.326736][    T9] usb 7-1: USB disconnect, device number 18
[  732.361413][T18161] /dev/rnullb0: Can't open blockdev
[  732.371936][ T5849] m920x_read = error: -19
[  732.371969][ T5849] dvb-usb: error while querying for an remote control event.
[  732.490392][  T980] m920x_read = error: -19
[  732.490426][  T980] dvb-usb: error while querying for an remote control event.
[  732.521944][T18162] fido_id[18162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  732.600940][    T9] m920x_read = error: -19
[  732.600973][    T9] dvb-usb: error while querying for an remote control event.
[  732.710377][  T980] m920x_read = error: -19
[  732.710411][  T980] dvb-usb: error while querying for an remote control event.
[  732.820588][  T980] m920x_read = error: -19
[  732.825411][  T980] dvb-usb: error while querying for an remote control event.
[  732.953889][T18169] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3846'.
[  732.970906][  T980] m920x_read = error: -19
[  732.978803][T18171] FAULT_INJECTION: forcing a failure.
[  732.978803][T18171] name failslab, interval 1, probability 0, space 0, times 0
[  732.994593][  T980] dvb-usb: error while querying for an remote control event.
[  733.007628][T18171] CPU: 0 UID: 0 PID: 18171 Comm: syz.6.3847 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  733.007658][T18171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  733.007671][T18171] Call Trace:
[  733.007681][T18171]  <TASK>
[  733.007691][T18171]  dump_stack_lvl+0x189/0x250
[  733.007735][T18171]  ? __pfx____ratelimit+0x10/0x10
[  733.007768][T18171]  ? __pfx_dump_stack_lvl+0x10/0x10
[  733.007798][T18171]  ? __pfx__printk+0x10/0x10
[  733.007836][T18171]  ? ref_tracker_alloc+0x318/0x460
[  733.007869][T18171]  should_fail_ex+0x414/0x560
[  733.007901][T18171]  should_failslab+0xa8/0x100
[  733.007929][T18171]  kmem_cache_alloc_noprof+0x73/0x3c0
[  733.007953][T18171]  ? skb_clone+0x212/0x3a0
[  733.007984][T18171]  skb_clone+0x212/0x3a0
[  733.008014][T18171]  __netlink_deliver_tap+0x404/0x850
[  733.008062][T18171]  ? netlink_deliver_tap+0x2e/0x1b0
[  733.008097][T18171]  netlink_deliver_tap+0x19c/0x1b0
[  733.008131][T18171]  netlink_unicast+0x730/0x8e0
[  733.008187][T18171]  netlink_sendmsg+0x805/0xb30
[  733.008228][T18171]  ? __pfx_netlink_sendmsg+0x10/0x10
[  733.008264][T18171]  ? aa_sock_msg_perm+0xf1/0x1d0
[  733.008297][T18171]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  733.008327][T18171]  ? __pfx_netlink_sendmsg+0x10/0x10
[  733.008362][T18171]  __sock_sendmsg+0x219/0x270
[  733.008394][T18171]  ____sys_sendmsg+0x505/0x830
[  733.008424][T18171]  ? __pfx_____sys_sendmsg+0x10/0x10
[  733.008459][T18171]  ? import_iovec+0x74/0xa0
[  733.008486][T18171]  ___sys_sendmsg+0x21f/0x2a0
[  733.008512][T18171]  ? __pfx____sys_sendmsg+0x10/0x10
[  733.008575][T18171]  ? __fget_files+0x2a/0x420
[  733.008606][T18171]  ? __fget_files+0x3a0/0x420
[  733.008647][T18171]  __x64_sys_sendmsg+0x19b/0x260
[  733.008674][T18171]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  733.008716][T18171]  ? __pfx_ksys_write+0x10/0x10
[  733.008741][T18171]  ? rcu_is_watching+0x15/0xb0
[  733.008773][T18171]  ? do_syscall_64+0xbe/0x3b0
[  733.008807][T18171]  do_syscall_64+0xfa/0x3b0
[  733.008836][T18171]  ? lockdep_hardirqs_on+0x9c/0x150
[  733.008865][T18171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.008886][T18171]  ? clear_bhb_loop+0x60/0xb0
[  733.008913][T18171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.008933][T18171] RIP: 0033:0x7f678538e9a9
[  733.008953][T18171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  733.008972][T18171] RSP: 002b:00007f67862a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  733.008994][T18171] RAX: ffffffffffffffda RBX: 00007f67855b5fa0 RCX: 00007f678538e9a9
[  733.009010][T18171] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  733.009023][T18171] RBP: 00007f67862a4090 R08: 0000000000000000 R09: 0000000000000000
[  733.009034][T18171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  733.009047][T18171] R13: 0000000000000000 R14: 00007f67855b5fa0 R15: 00007ffcec26a6b8
[  733.009079][T18171]  </TASK>
[  733.296538][    C0] vkms_vblank_simulate: vblank timer overrun
[  733.589273][T18174] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  733.610111][  T980] m920x_read = error: -19
[  733.614534][  T980] dvb-usb: error while querying for an remote control event.
[  733.647988][T18174] /dev/rnullb0: Can't open blockdev
[  733.750183][  T980] m920x_read = error: -19
[  733.754649][  T980] dvb-usb: error while querying for an remote control event.
[  733.898036][T18180] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3850'.
[  733.911454][T18179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  733.920030][ T5849] m920x_read = error: -19
[  733.924410][ T5849] dvb-usb: error while querying for an remote control event.
[  733.960572][T18179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  733.990863][T18179] /dev/rnullb0: Can't open blockdev
[  734.050237][ T5849] m920x_read = error: -19
[  734.054722][ T5849] dvb-usb: error while querying for an remote control event.
[  734.190508][ T5849] m920x_read = error: -19
[  734.194947][ T5849] dvb-usb: error while querying for an remote control event.
[  734.200467][ T5924] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  734.320972][ T5849] m920x_read = error: -19
[  734.322289][T18184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3853'.
[  734.325399][ T5849] dvb-usb: error while querying for an remote control event.
[  734.383207][ T5924] usb 7-1: Using ep0 maxpacket: 16
[  734.397041][ T5924] usb 7-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  734.419030][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.447118][ T5924] usb 7-1: Product: syz
[  734.460228][ T5924] usb 7-1: Manufacturer: syz
[  734.464970][ T5924] usb 7-1: SerialNumber: syz
[  734.470106][ T5849] m920x_read = error: -19
[  734.491472][ T5924] usb 7-1: config 0 descriptor??
[  734.493747][ T5849] dvb-usb: error while querying for an remote control event.
[  734.505584][ T5924] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  734.670139][ T5849] m920x_read = error: -19
[  734.680153][ T5849] dvb-usb: error while querying for an remote control event.
[  734.701892][ T5924] gp8psk: usb in 128 operation failed.
[  734.721874][ T5924] gp8psk: usb in 137 operation failed.
[  734.738836][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  734.763708][T18188] syz.3.3854: attempt to access beyond end of device
[  734.763708][T18188] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0
[  734.770817][ T5924] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  734.802401][T18188] XFS (loop3): SB validate failed with error -5.
[  734.803433][ T5924] usb 7-1: media controller created
[  734.819343][ T5849] m920x_read = error: -19
[  734.830287][ T5849] dvb-usb: error while querying for an remote control event.
[  734.899401][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  734.949819][ T5849] m920x_read = error: -19
[  734.969078][ T5849] dvb-usb: error while querying for an remote control event.
[  734.980744][ T5924] gp8psk_fe: Frontend revision 1 attached
[  734.986594][ T5924] usb 7-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)...
[  735.032775][ T5924] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  735.095639][T18196] netlink: 'syz.3.3855': attribute type 3 has an invalid length.
[  735.110536][T18196] netlink: 'syz.3.3855': attribute type 1 has an invalid length.
[  735.128719][T18196] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3855'.
[  735.130232][ T5849] m920x_read = error: -19
[  735.173675][ T5849] dvb-usb: error while querying for an remote control event.
[  735.176860][T18196] NCSI netlink: No device for ifindex 0
[  735.304251][T18201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  735.314020][ T5849] m920x_read = error: -19
[  735.318419][ T5849] dvb-usb: error while querying for an remote control event.
[  735.383278][T18201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  735.445617][T18204] FAULT_INJECTION: forcing a failure.
[  735.445617][T18204] name failslab, interval 1, probability 0, space 0, times 0
[  735.460111][T18204] CPU: 1 UID: 0 PID: 18204 Comm: syz.5.3857 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  735.460145][T18204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  735.460159][T18204] Call Trace:
[  735.460168][T18204]  <TASK>
[  735.460177][T18204]  dump_stack_lvl+0x189/0x250
[  735.460213][T18204]  ? __pfx____ratelimit+0x10/0x10
[  735.460243][T18204]  ? __pfx_dump_stack_lvl+0x10/0x10
[  735.460280][T18204]  ? __pfx__printk+0x10/0x10
[  735.460313][T18204]  ? __pfx___might_resched+0x10/0x10
[  735.460340][T18204]  ? fs_reclaim_acquire+0x7d/0x100
[  735.460373][T18204]  should_fail_ex+0x414/0x560
[  735.460405][T18204]  should_failslab+0xa8/0x100
[  735.460432][T18204]  __kmalloc_noprof+0xcb/0x4f0
[  735.460454][T18204]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  735.460478][T18204]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  735.460511][T18204]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  735.460545][T18204]  genl_family_rcv_msg_doit+0xb8/0x300
[  735.460579][T18204]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  735.460607][T18204]  ? rcu_is_watching+0x15/0xb0
[  735.460638][T18204]  ? apparmor_capable+0x137/0x1b0
[  735.460663][T18204]  ? bpf_lsm_capable+0x9/0x20
[  735.460686][T18204]  ? security_capable+0x7e/0x2e0
[  735.460723][T18204]  genl_rcv_msg+0x60e/0x790
[  735.460755][T18204]  ? __pfx_genl_rcv_msg+0x10/0x10
[  735.460777][T18204]  ? ref_tracker_free+0x63a/0x7d0
[  735.460803][T18204]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  735.460826][T18204]  ? __pfx_nl80211_connect+0x10/0x10
[  735.460854][T18204]  ? __pfx_nl80211_post_doit+0x10/0x10
[  735.460879][T18204]  ? __pfx_ref_tracker_free+0x10/0x10
[  735.460919][T18204]  netlink_rcv_skb+0x205/0x470
[  735.460951][T18204]  ? __pfx_genl_rcv_msg+0x10/0x10
[  735.460977][T18204]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  735.461027][T18204]  ? down_read+0x1ad/0x2e0
[  735.461051][T18204]  genl_rcv+0x28/0x40
[  735.461072][T18204]  netlink_unicast+0x759/0x8e0
[  735.461113][T18204]  netlink_sendmsg+0x805/0xb30
[  735.461156][T18204]  ? __pfx_netlink_sendmsg+0x10/0x10
[  735.461192][T18204]  ? aa_sock_msg_perm+0xf1/0x1d0
[  735.461225][T18204]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  735.461255][T18204]  ? __pfx_netlink_sendmsg+0x10/0x10
[  735.461294][T18204]  __sock_sendmsg+0x219/0x270
[  735.461327][T18204]  ____sys_sendmsg+0x505/0x830
[  735.461356][T18204]  ? __pfx_____sys_sendmsg+0x10/0x10
[  735.461390][T18204]  ? import_iovec+0x74/0xa0
[  735.461418][T18204]  ___sys_sendmsg+0x21f/0x2a0
[  735.461444][T18204]  ? __pfx____sys_sendmsg+0x10/0x10
[  735.461508][T18204]  ? __fget_files+0x2a/0x420
[  735.461538][T18204]  ? __fget_files+0x3a0/0x420
[  735.461580][T18204]  __x64_sys_sendmsg+0x19b/0x260
[  735.461607][T18204]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  735.461641][T18204]  ? __pfx_ksys_write+0x10/0x10
[  735.461665][T18204]  ? rcu_is_watching+0x15/0xb0
[  735.461697][T18204]  ? do_syscall_64+0xbe/0x3b0
[  735.461732][T18204]  do_syscall_64+0xfa/0x3b0
[  735.461761][T18204]  ? lockdep_hardirqs_on+0x9c/0x150
[  735.461790][T18204]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.461810][T18204]  ? clear_bhb_loop+0x60/0xb0
[  735.461836][T18204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.461856][T18204] RIP: 0033:0x7f93aa38e9a9
[  735.461875][T18204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  735.461892][T18204] RSP: 002b:00007f93ab26e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  735.461915][T18204] RAX: ffffffffffffffda RBX: 00007f93aa5b5fa0 RCX: 00007f93aa38e9a9
[  735.461930][T18204] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  735.461944][T18204] RBP: 00007f93ab26e090 R08: 0000000000000000 R09: 0000000000000000
[  735.461957][T18204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  735.461970][T18204] R13: 0000000000000000 R14: 00007f93aa5b5fa0 R15: 00007ffe0b13e108
[  735.462003][T18204]  </TASK>
[  735.472621][ T5849] m920x_read = error: -19
[  735.492459][ T5924] gp8psk: usb in 137 operation failed.
[  735.556483][ T5849] dvb-usb: error while querying for an remote control event.
[  735.707909][ T5924] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  735.856902][T18207] netlink: 'syz.5.3858': attribute type 11 has an invalid length.
[  735.921685][T18207] netlink: 'syz.5.3858': attribute type 11 has an invalid length.
[  735.929573][T18207] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.3858'.
[  735.949835][T18206] overlayfs: missing 'lowerdir'
[  736.127794][T18212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3860'.
[  736.137747][ T5924] gp8psk: found Genpix USB device pID = 201 (hex)
[  736.150448][ T5849] m920x_read = error: -19
[  736.154986][ T5849] dvb-usb: error while querying for an remote control event.
[  736.192535][ T5924] usb 7-1: USB disconnect, device number 19
[  736.302776][ T5849] m920x_read = error: -19
[  736.341996][ T5849] dvb-usb: error while querying for an remote control event.
[  736.490188][ T5849] m920x_read = error: -19
[  736.501735][ T5849] dvb-usb: error while querying for an remote control event.
[  736.601160][ T5924] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  736.660152][ T5849] m920x_read = error: -19
[  736.668057][ T5849] dvb-usb: error while querying for an remote control event.
[  736.684077][T18220] /dev/rnullb0: Can't open blockdev
[  736.840501][ T5849] m920x_read = error: -19
[  736.844929][ T5849] dvb-usb: error while querying for an remote control event.
[  736.971258][T18224] syz.6.3865: attempt to access beyond end of device
[  736.971258][T18224] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0
[  737.002556][T18225] FAULT_INJECTION: forcing a failure.
[  737.002556][T18225] name failslab, interval 1, probability 0, space 0, times 0
[  737.016055][  T980] m920x_read = error: -19
[  737.022679][  T980] dvb-usb: error while querying for an remote control event.
[  737.030227][T18224] FAT-fs (nbd6): unable to read boot sector
[  737.064556][T18227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  737.071770][T18225] CPU: 0 UID: 0 PID: 18225 Comm: syz.4.3866 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  737.071807][T18225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  737.071821][T18225] Call Trace:
[  737.071832][T18225]  <TASK>
[  737.071842][T18225]  dump_stack_lvl+0x189/0x250
[  737.071885][T18225]  ? __pfx____ratelimit+0x10/0x10
[  737.071918][T18225]  ? __pfx_dump_stack_lvl+0x10/0x10
[  737.071952][T18225]  ? __pfx__printk+0x10/0x10
[  737.071992][T18225]  ? __pfx___might_resched+0x10/0x10
[  737.072021][T18225]  ? fs_reclaim_acquire+0x7d/0x100
[  737.072057][T18225]  should_fail_ex+0x414/0x560
[  737.072089][T18225]  should_failslab+0xa8/0x100
[  737.072112][T18225]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  737.072133][T18225]  ? __alloc_skb+0x112/0x2d0
[  737.072159][T18225]  __alloc_skb+0x112/0x2d0
[  737.072187][T18225]  netlink_ack+0x146/0xa50
[  737.072218][T18225]  ? __pfx_genl_rcv_msg+0x10/0x10
[  737.072244][T18225]  ? ref_tracker_free+0x63a/0x7d0
[  737.072273][T18225]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  737.072300][T18225]  ? __pfx_nl80211_post_doit+0x10/0x10
[  737.072326][T18225]  ? __pfx_ref_tracker_free+0x10/0x10
[  737.072392][T18225]  netlink_rcv_skb+0x28c/0x470
[  737.072428][T18225]  ? __pfx_genl_rcv_msg+0x10/0x10
[  737.072457][T18225]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  737.072515][T18225]  ? down_read+0x1ad/0x2e0
[  737.072540][T18225]  genl_rcv+0x28/0x40
[  737.072565][T18225]  netlink_unicast+0x759/0x8e0
[  737.072612][T18225]  netlink_sendmsg+0x805/0xb30
[  737.072661][T18225]  ? __pfx_netlink_sendmsg+0x10/0x10
[  737.072701][T18225]  ? aa_sock_msg_perm+0xf1/0x1d0
[  737.072739][T18225]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  737.072773][T18225]  ? __pfx_netlink_sendmsg+0x10/0x10
[  737.072810][T18225]  __sock_sendmsg+0x219/0x270
[  737.072846][T18225]  ____sys_sendmsg+0x505/0x830
[  737.072880][T18225]  ? __pfx_____sys_sendmsg+0x10/0x10
[  737.072918][T18225]  ? import_iovec+0x74/0xa0
[  737.072945][T18225]  ___sys_sendmsg+0x21f/0x2a0
[  737.072969][T18225]  ? __pfx____sys_sendmsg+0x10/0x10
[  737.073027][T18225]  ? __fget_files+0x2a/0x420
[  737.073057][T18225]  ? __fget_files+0x3a0/0x420
[  737.073103][T18225]  __x64_sys_sendmsg+0x19b/0x260
[  737.073134][T18225]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  737.073174][T18225]  ? __pfx_ksys_write+0x10/0x10
[  737.073204][T18225]  ? rcu_is_watching+0x15/0xb0
[  737.073241][T18225]  ? do_syscall_64+0xbe/0x3b0
[  737.073280][T18225]  do_syscall_64+0xfa/0x3b0
[  737.073314][T18225]  ? lockdep_hardirqs_on+0x9c/0x150
[  737.073354][T18225]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  737.073378][T18225]  ? clear_bhb_loop+0x60/0xb0
[  737.073407][T18225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  737.073431][T18225] RIP: 0033:0x7f3aa7f8e9a9
[  737.073452][T18225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  737.073472][T18225] RSP: 002b:00007f3aa8dd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  737.073498][T18225] RAX: ffffffffffffffda RBX: 00007f3aa81b5fa0 RCX: 00007f3aa7f8e9a9
[  737.073516][T18225] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  737.073532][T18225] RBP: 00007f3aa8dd2090 R08: 0000000000000000 R09: 0000000000000000
[  737.073546][T18225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  737.073561][T18225] R13: 0000000000000000 R14: 00007f3aa81b5fa0 R15: 00007fff4a2ceda8
[  737.073598][T18225]  </TASK>
[  737.171350][  T980] m920x_read = error: -19
[  737.220572][T18227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  737.523146][  T980] dvb-usb: error while querying for an remote control event.
[  737.660235][  T980] m920x_read = error: -19
[  737.664678][  T980] dvb-usb: error while querying for an remote control event.
[  737.821349][ T5849] m920x_read = error: -19
[  737.840108][ T5849] dvb-usb: error while querying for an remote control event.
[  737.980130][ T5849] m920x_read = error: -19
[  737.984562][ T5849] dvb-usb: error while querying for an remote control event.
[  738.052687][T18227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  738.061683][T18227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  738.120141][  T980] m920x_read = error: -19
[  738.124570][  T980] dvb-usb: error while querying for an remote control event.
[  738.152857][ T5924] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  738.260108][  T980] m920x_read = error: -19
[  738.264529][  T980] dvb-usb: error while querying for an remote control event.
[  738.330873][ T5924] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  738.361595][ T5924] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  738.380046][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  738.401293][  T980] m920x_read = error: -19
[  738.407466][  T980] dvb-usb: error while querying for an remote control event.
[  738.414941][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  738.414974][ T5924] usb 7-1: config 0 interface 0 has no altsetting 0
[  738.416520][ T5924] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  738.480265][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  738.507645][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  738.536673][ T5924] usb 7-1: config 0 interface 0 has no altsetting 0
[  738.581706][ T5924] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  738.600353][  T980] m920x_read = error: -19
[  738.609232][  T980] dvb-usb: error while querying for an remote control event.
[  738.610448][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  738.680172][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  738.712459][ T5924] usb 7-1: config 0 interface 0 has no altsetting 0
[  738.730877][ T5924] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  738.750424][ T5849] m920x_read = error: -19
[  738.754841][ T5849] dvb-usb: error while querying for an remote control event.
[  738.760432][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  738.804100][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  738.838929][ T5924] usb 7-1: config 0 interface 0 has no altsetting 0
[  738.867552][ T5924] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  738.890045][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  738.894598][ T5849] m920x_read = error: -19
[  738.928381][ T5849] dvb-usb: error while querying for an remote control event.
[  738.932192][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  738.986713][ T5924] usb 7-1: config 0 interface 0 has no altsetting 0
[  739.010816][ T5924] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  739.022175][T18242] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3873'.
[  739.030167][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  739.049470][T18241] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3873'.
[  739.061088][ T5849] m920x_read = error: -19
[  739.065495][ T5849] dvb-usb: error while querying for an remote control event.
[  739.070094][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  739.120015][ T5924] usb 7-1: config 0 interface 0 has no altsetting 0
[  739.136637][ T5924] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  739.166887][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  739.207654][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  739.220648][ T5849] m920x_read = error: -19
[  739.225210][ T5849] dvb-usb: error while querying for an remote control event.
[  739.237764][ T5924] usb 7-1: config 0 interface 0 has no altsetting 0
[  739.258279][ T5924] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  739.277687][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  739.306989][ T5924] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  739.350137][ T5849] m920x_read = error: -19
[  739.354563][ T5849] dvb-usb: error while querying for an remote control event.
[  739.356118][ T5924] usb 7-1: config 0 interface 0 has no altsetting 0
[  739.405395][ T5924] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  739.426752][ T5924] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  739.454773][T18245] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  739.470142][ T5924] usb 7-1: Product: syz
[  739.474394][ T5924] usb 7-1: Manufacturer: syz
[  739.499449][ T5924] usb 7-1: SerialNumber: syz
[  739.517926][ T5849] m920x_read = error: -19
[  739.525724][ T5924] usb 7-1: config 0 descriptor??
[  739.525847][ T5849] dvb-usb: error while querying for an remote control event.
[  739.543348][ T5924] yurex 7-1:0.0: Could not submitting URB
[  739.570682][ T5924] yurex 7-1:0.0: probe with driver yurex failed with error -5
[  739.672508][ T5849] m920x_read = error: -19
[  739.676938][ T5849] dvb-usb: error while querying for an remote control event.
[  739.772466][T18237] /dev/rnullb0: Can't open blockdev
[  739.795348][  T980] usb 7-1: USB disconnect, device number 20
[  739.831964][ T5849] m920x_read = error: -19
[  739.836389][ T5849] dvb-usb: error while querying for an remote control event.
[  739.971586][    T9] m920x_read = error: -19
[  739.976761][    T9] dvb-usb: error while querying for an remote control event.
[  740.110184][  T980] m920x_read = error: -19
[  740.114719][  T980] dvb-usb: error while querying for an remote control event.
[  740.243407][  T980] m920x_read = error: -19
[  740.256713][  T980] dvb-usb: error while querying for an remote control event.
[  740.380332][  T980] m920x_read = error: -19
[  740.395264][  T980] dvb-usb: error while querying for an remote control event.
[  740.511970][T18252] /dev/rnullb0: Can't open blockdev
[  740.531183][  T980] m920x_read = error: -19
[  740.545703][  T980] dvb-usb: error while querying for an remote control event.
[  740.685467][  T980] m920x_read = error: -19
[  740.705272][  T980] dvb-usb: error while querying for an remote control event.
[  740.860095][  T980] m920x_read = error: -19
[  740.864519][  T980] dvb-usb: error while querying for an remote control event.
[  740.881752][T18263] /dev/rnullb0: Can't open blockdev
[  740.953296][T18264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  740.970577][T18264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  740.980894][  T980] m920x_read = error: -19
[  740.985374][  T980] dvb-usb: error while querying for an remote control event.
[  741.120131][  T980] m920x_read = error: -19
[  741.124560][  T980] dvb-usb: error while querying for an remote control event.
[  741.206100][T18267] /dev/rnullb0: Can't open blockdev
[  741.287340][  T980] m920x_read = error: -19
[  741.300041][  T980] dvb-usb: error while querying for an remote control event.
[  741.420148][ T5849] m920x_read = error: -19
[  741.424668][ T5849] dvb-usb: error while querying for an remote control event.
[  741.570116][ T5849] m920x_read = error: -19
[  741.574669][ T5849] dvb-usb: error while querying for an remote control event.
[  741.710182][  T980] m920x_read = error: -19
[  741.715219][  T980] dvb-usb: error while querying for an remote control event.
[  741.864282][ T5849] m920x_read = error: -19
[  741.874037][ T5849] dvb-usb: error while querying for an remote control event.
[  742.043593][ T5849] m920x_read = error: -19
[  742.065338][ T5849] dvb-usb: error while querying for an remote control event.
[  742.150639][ T1222] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  742.200721][ T5849] m920x_read = error: -19
[  742.218207][ T5849] dvb-usb: error while querying for an remote control event.
[  742.342720][ T1222] usb 7-1: Using ep0 maxpacket: 16
[  742.360591][ T5849] m920x_read = error: -19
[  742.365024][ T5849] dvb-usb: error while querying for an remote control event.
[  742.374198][ T1222] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  742.403563][ T1222] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  742.448983][ T1222] usb 7-1: config 0 has no interface number 0
[  742.471588][ T1222] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  742.505920][ T1222] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.520311][ T5849] m920x_read = error: -19
[  742.524733][ T5849] dvb-usb: error while querying for an remote control event.
[  742.537474][ T1222] usb 7-1: Product: syz
[  742.550746][ T1222] usb 7-1: Manufacturer: syz
[  742.566965][ T1222] usb 7-1: SerialNumber: syz
[  742.622234][ T1222] usb 7-1: config 0 descriptor??
[  742.658923][T18292] FAULT_INJECTION: forcing a failure.
[  742.658923][T18292] name failslab, interval 1, probability 0, space 0, times 0
[  742.674563][ T1222] usb 7-1: Found UVC 0.00 device syz (046d:08f3)
[  742.690326][ T5849] m920x_read = error: -19
[  742.690741][ T1222] usb 7-1: No valid video chain found.
[  742.697262][ T5849] dvb-usb: error while querying for an remote control event.
[  742.700482][T18292] CPU: 1 UID: 0 PID: 18292 Comm: syz.5.3888 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  742.700511][T18292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  742.700526][T18292] Call Trace:
[  742.700538][T18292]  <TASK>
[  742.700549][T18292]  dump_stack_lvl+0x189/0x250
[  742.700592][T18292]  ? __pfx____ratelimit+0x10/0x10
[  742.700640][T18292]  ? __pfx_dump_stack_lvl+0x10/0x10
[  742.700674][T18292]  ? __pfx__printk+0x10/0x10
[  742.700726][T18292]  should_fail_ex+0x414/0x560
[  742.700764][T18292]  should_failslab+0xa8/0x100
[  742.700793][T18292]  kmem_cache_alloc_noprof+0x73/0x3c0
[  742.700819][T18292]  ? skb_clone+0x212/0x3a0
[  742.700853][T18292]  skb_clone+0x212/0x3a0
[  742.700885][T18292]  __netlink_deliver_tap+0x404/0x850
[  742.700936][T18292]  ? netlink_deliver_tap+0x2e/0x1b0
[  742.700973][T18292]  netlink_deliver_tap+0x19c/0x1b0
[  742.701010][T18292]  netlink_sendskb+0x68/0x140
[  742.701046][T18292]  netlink_rcv_skb+0x28c/0x470
[  742.701082][T18292]  ? __pfx_genl_rcv_msg+0x10/0x10
[  742.701113][T18292]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  742.701169][T18292]  ? down_read+0x1ad/0x2e0
[  742.701196][T18292]  genl_rcv+0x28/0x40
[  742.701220][T18292]  netlink_unicast+0x759/0x8e0
[  742.701268][T18292]  netlink_sendmsg+0x805/0xb30
[  742.701316][T18292]  ? __pfx_netlink_sendmsg+0x10/0x10
[  742.701355][T18292]  ? aa_sock_msg_perm+0xf1/0x1d0
[  742.701395][T18292]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  742.701428][T18292]  ? __pfx_netlink_sendmsg+0x10/0x10
[  742.701465][T18292]  __sock_sendmsg+0x219/0x270
[  742.701507][T18292]  ____sys_sendmsg+0x505/0x830
[  742.701542][T18292]  ? __pfx_____sys_sendmsg+0x10/0x10
[  742.701581][T18292]  ? import_iovec+0x74/0xa0
[  742.701619][T18292]  ___sys_sendmsg+0x21f/0x2a0
[  742.701649][T18292]  ? __pfx____sys_sendmsg+0x10/0x10
[  742.701722][T18292]  ? __fget_files+0x2a/0x420
[  742.701757][T18292]  ? __fget_files+0x3a0/0x420
[  742.701804][T18292]  __x64_sys_sendmsg+0x19b/0x260
[  742.701835][T18292]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  742.701872][T18292]  ? __pfx_ksys_write+0x10/0x10
[  742.701900][T18292]  ? rcu_is_watching+0x15/0xb0
[  742.701938][T18292]  ? do_syscall_64+0xbe/0x3b0
[  742.701980][T18292]  do_syscall_64+0xfa/0x3b0
[  742.702014][T18292]  ? lockdep_hardirqs_on+0x9c/0x150
[  742.702047][T18292]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.702072][T18292]  ? clear_bhb_loop+0x60/0xb0
[  742.702101][T18292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.702125][T18292] RIP: 0033:0x7f93aa38e9a9
[  742.702148][T18292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  742.702169][T18292] RSP: 002b:00007f93ab26e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  742.702195][T18292] RAX: ffffffffffffffda RBX: 00007f93aa5b5fa0 RCX: 00007f93aa38e9a9
[  742.702213][T18292] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  742.702228][T18292] RBP: 00007f93ab26e090 R08: 0000000000000000 R09: 0000000000000000
[  742.702248][T18292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  742.702268][T18292] R13: 0000000000000000 R14: 00007f93aa5b5fa0 R15: 00007ffe0b13e108
[  742.702306][T18292]  </TASK>
[  743.007667][T18293] /dev/rnullb0: Can't open blockdev
[  743.315882][T18300] /dev/rnullb0: Can't open blockdev
[  743.490633][ T5849] m920x_read = error: -19
[  743.495069][ T5849] dvb-usb: error while querying for an remote control event.
[  743.630284][ T5849] m920x_read = error: -19
[  743.634808][ T5849] dvb-usb: error while querying for an remote control event.
[  743.656995][T18304] /dev/rnullb0: Can't open blockdev
[  743.760125][ T5849] m920x_read = error: -19
[  743.767654][ T5849] dvb-usb: error while querying for an remote control event.
[  743.890311][ T5849] m920x_read = error: -19
[  743.899272][ T5849] dvb-usb: error while querying for an remote control event.
[  744.020108][ T5849] m920x_read = error: -19
[  744.024765][ T5849] dvb-usb: error while querying for an remote control event.
[  744.140174][ T5849] m920x_read = error: -19
[  744.144892][ T5849] dvb-usb: error while querying for an remote control event.
[  744.176140][   T30] audit: type=1326 audit(743.727:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18306 comm="syz.5.3892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93aa38e9a9 code=0x0
[  744.260171][ T5849] m920x_read = error: -19
[  744.267354][ T5849] dvb-usb: error while querying for an remote control event.
[  744.400154][ T5849] m920x_read = error: -19
[  744.404588][ T5849] dvb-usb: error while querying for an remote control event.
[  744.540130][ T5849] m920x_read = error: -19
[  744.540416][T18310] /dev/rnullb0: Can't open blockdev
[  744.550026][ T5849] dvb-usb: error while querying for an remote control event.
[  744.696288][ T5849] m920x_read = error: -19
[  744.700935][ T5849] dvb-usb: error while querying for an remote control event.
[  744.737168][T18312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  744.765996][T18312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  744.810102][ T5849] m920x_read = error: -19
[  744.814669][ T5849] dvb-usb: error while querying for an remote control event.
[  744.827134][  T980] usb 7-1: USB disconnect, device number 21
[  744.980295][ T5849] m920x_read = error: -19
[  744.990239][ T5849] dvb-usb: error while querying for an remote control event.
[  745.137921][T18316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  745.157769][ T5849] m920x_read = error: -19
[  745.167208][T18316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  745.175942][ T5849] dvb-usb: error while querying for an remote control event.
[  745.283353][T18318] FAULT_INJECTION: forcing a failure.
[  745.283353][T18318] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  745.310793][T18318] CPU: 0 UID: 0 PID: 18318 Comm: syz.6.3897 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  745.310825][T18318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  745.310839][T18318] Call Trace:
[  745.310848][T18318]  <TASK>
[  745.310857][T18318]  dump_stack_lvl+0x189/0x250
[  745.310894][T18318]  ? __pfx____ratelimit+0x10/0x10
[  745.310925][T18318]  ? __pfx_dump_stack_lvl+0x10/0x10
[  745.310955][T18318]  ? __pfx__printk+0x10/0x10
[  745.310998][T18318]  should_fail_ex+0x414/0x560
[  745.311031][T18318]  _copy_to_user+0x31/0xb0
[  745.311057][T18318]  simple_read_from_buffer+0xe1/0x170
[  745.311093][T18318]  proc_fail_nth_read+0x1b3/0x220
[  745.311121][T18318]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  745.311147][T18318]  ? rw_verify_area+0x2a6/0x4d0
[  745.311173][T18318]  ? __lock_acquire+0xab9/0xd20
[  745.311195][T18318]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  745.311220][T18318]  vfs_read+0x1fd/0x980
[  745.311246][T18318]  ? fdget_pos+0x247/0x320
[  745.311270][T18318]  ? __pfx___mutex_lock+0x10/0x10
[  745.311302][T18318]  ? __pfx_vfs_read+0x10/0x10
[  745.311331][T18318]  ? __fget_files+0x2a/0x420
[  745.311367][T18318]  ? __fget_files+0x3a0/0x420
[  745.311397][T18318]  ? __fget_files+0x2a/0x420
[  745.311437][T18318]  ksys_read+0x145/0x250
[  745.311464][T18318]  ? __pfx_ksys_read+0x10/0x10
[  745.311488][T18318]  ? rcu_is_watching+0x15/0xb0
[  745.311534][T18318]  ? do_syscall_64+0xbe/0x3b0
[  745.311570][T18318]  do_syscall_64+0xfa/0x3b0
[  745.311599][T18318]  ? lockdep_hardirqs_on+0x9c/0x150
[  745.311637][T18318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  745.311659][T18318]  ? clear_bhb_loop+0x60/0xb0
[  745.311686][T18318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  745.311706][T18318] RIP: 0033:0x7f678538d3bc
[  745.311725][T18318] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  745.311745][T18318] RSP: 002b:00007f67862a4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  745.311768][T18318] RAX: ffffffffffffffda RBX: 00007f67855b5fa0 RCX: 00007f678538d3bc
[  745.311785][T18318] RDX: 000000000000000f RSI: 00007f67862a40a0 RDI: 0000000000000004
[  745.311799][T18318] RBP: 00007f67862a4090 R08: 0000000000000000 R09: 0000000000000000
[  745.311813][T18318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  745.311827][T18318] R13: 0000000000000000 R14: 00007f67855b5fa0 R15: 00007ffcec26a6b8
[  745.311861][T18318]  </TASK>
[  745.588675][ T5849] m920x_read = error: -19
[  745.593138][ T5849] dvb-usb: error while querying for an remote control event.
[  745.720384][  T980] m920x_read = error: -19
[  745.724811][  T980] dvb-usb: error while querying for an remote control event.
[  745.742094][T18323] rtc_cmos 00:00: Alarms can be up to one day in the future
[  745.751713][T18323] /dev/rnullb0: Can't open blockdev
[  745.778138][T18328] /dev/rnullb0: Can't open blockdev
[  745.840104][  T980] m920x_read = error: -19
[  745.844544][  T980] dvb-usb: error while querying for an remote control event.
[  745.961515][  T980] m920x_read = error: -19
[  745.965942][  T980] dvb-usb: error while querying for an remote control event.
[  746.107268][  T980] m920x_read = error: -19
[  746.130740][  T980] dvb-usb: error while querying for an remote control event.
[  746.189490][T18336] /dev/rnullb0: Can't open blockdev
[  746.280181][ T5849] m920x_read = error: -19
[  746.284607][ T5849] dvb-usb: error while querying for an remote control event.
[  746.420204][ T5849] m920x_read = error: -19
[  746.425323][ T5849] dvb-usb: error while querying for an remote control event.
[  746.551753][ T5849] m920x_read = error: -19
[  746.556183][ T5849] dvb-usb: error while querying for an remote control event.
[  746.645807][T18343] 9pnet_fd: Insufficient options for proto=fd
[  746.674163][T18343] /dev/rnullb0: Can't open blockdev
[  746.730444][ T5849] m920x_read = error: -19
[  746.743827][ T5849] dvb-usb: error while querying for an remote control event.
[  746.890151][ T5849] m920x_read = error: -19
[  746.894586][ T5849] dvb-usb: error while querying for an remote control event.
[  747.065575][ T5849] m920x_read = error: -19
[  747.073159][ T5849] dvb-usb: error while querying for an remote control event.
[  747.200268][ T5849] m920x_read = error: -19
[  747.204777][ T5849] dvb-usb: error while querying for an remote control event.
[  747.340676][ T5849] m920x_read = error: -19
[  747.358770][ T5849] dvb-usb: error while querying for an remote control event.
[  747.490506][ T5849] m920x_read = error: -19
[  747.509471][ T5849] dvb-usb: error while querying for an remote control event.
[  747.594449][T18359] /dev/rnullb0: Can't open blockdev
[  747.670292][ T5849] m920x_read = error: -19
[  747.674729][ T5849] dvb-usb: error while querying for an remote control event.
[  747.806323][T18369] /dev/rnullb0: Can't open blockdev
[  747.820348][ T5849] m920x_read = error: -19
[  747.828445][ T5849] dvb-usb: error while querying for an remote control event.
[  747.966765][ T5849] m920x_read = error: -19
[  747.984040][ T5849] dvb-usb: error while querying for an remote control event.
[  748.140077][ T5917] m920x_read = error: -19
[  748.144598][ T5917] dvb-usb: error while querying for an remote control event.
[  748.290593][ T5917] m920x_read = error: -19
[  748.305041][ T5917] dvb-usb: error while querying for an remote control event.
[  748.450074][ T5917] m920x_read = error: -19
[  748.464635][ T5917] dvb-usb: error while querying for an remote control event.
[  748.593633][T18383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  748.610493][ T5917] m920x_read = error: -19
[  748.620519][T18383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  748.621604][ T5917] dvb-usb: error while querying for an remote control event.
[  748.791835][ T5917] m920x_read = error: -19
[  748.810700][ T5917] dvb-usb: error while querying for an remote control event.
[  748.947809][ T5917] m920x_read = error: -19
[  748.970026][ T5917] dvb-usb: error while querying for an remote control event.
[  749.120407][ T5849] m920x_read = error: -19
[  749.124935][ T5849] dvb-usb: error while querying for an remote control event.
[  749.270679][ T5849] m920x_read = error: -19
[  749.275117][ T5849] dvb-usb: error while querying for an remote control event.
[  749.422967][T18396] qrtr: Invalid version 43
[  749.423243][ T5849] m920x_read = error: -19
[  749.458244][ T5849] dvb-usb: error while querying for an remote control event.
[  749.580193][ T5849] m920x_read = error: -19
[  749.588050][ T5849] dvb-usb: error while querying for an remote control event.
[  749.731793][ T5849] m920x_read = error: -19
[  749.736454][ T5849] dvb-usb: error while querying for an remote control event.
[  749.796810][T18403] ALSA: mixer_oss: invalid OSS volume ''
[  749.860578][ T5849] m920x_read = error: -19
[  749.875968][ T5849] dvb-usb: error while querying for an remote control event.
[  750.011664][ T5917] m920x_read = error: -19
[  750.019614][ T5917] dvb-usb: error while querying for an remote control event.
[  750.161891][ T5917] m920x_read = error: -19
[  750.172044][ T5917] dvb-usb: error while querying for an remote control event.
[  750.290315][ T5849] m920x_read = error: -19
[  750.298274][ T5849] dvb-usb: error while querying for an remote control event.
[  750.421011][ T5849] m920x_read = error: -19
[  750.438555][ T5849] dvb-usb: error while querying for an remote control event.
[  750.570451][ T5849] m920x_read = error: -19
[  750.577605][ T5849] dvb-usb: error while querying for an remote control event.
[  750.700556][ T5849] m920x_read = error: -19
[  750.712809][ T5849] dvb-usb: error while querying for an remote control event.
[  750.722702][T18409] tc_dump_action: action bad kind
[  750.860127][ T5849] m920x_read = error: -19
[  750.864558][ T5849] dvb-usb: error while querying for an remote control event.
[  750.974409][T18415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  751.010198][ T5917] m920x_read = error: -19
[  751.026779][T18415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  751.030022][ T5917] dvb-usb: error while querying for an remote control event.
[  751.183647][ T5849] m920x_read = error: -19
[  751.188240][ T5849] dvb-usb: error while querying for an remote control event.
[  751.310495][ T5849] m920x_read = error: -19
[  751.324128][ T5849] dvb-usb: error while querying for an remote control event.
[  751.404973][ T5917] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  751.426244][T18422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  751.457158][T18422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  751.477003][ T5849] m920x_read = error: -19
[  751.483849][ T5849] dvb-usb: error while querying for an remote control event.
[  751.660445][ T5849] m920x_read = error: -19
[  751.664939][ T5849] dvb-usb: error while querying for an remote control event.
[  751.840120][ T5849] m920x_read = error: -19
[  751.844554][ T5849] dvb-usb: error while querying for an remote control event.
[  751.977166][T18432] /dev/rnullb0: Can't open blockdev
[  751.994843][ T5849] m920x_read = error: -19
[  751.999318][ T5849] dvb-usb: error while querying for an remote control event.
[  752.140147][ T5849] m920x_read = error: -19
[  752.144595][ T5849] dvb-usb: error while querying for an remote control event.
[  752.161809][T18434] /dev/rnullb0: Can't open blockdev
[  752.280433][ T5849] m920x_read = error: -19
[  752.284913][ T5849] dvb-usb: error while querying for an remote control event.
[  752.324299][T18436] netlink: 'syz.5.3938': attribute type 6 has an invalid length.
[  752.410169][ T5849] m920x_read = error: -19
[  752.414807][ T5849] dvb-usb: error while querying for an remote control event.
[  752.540176][ T5849] m920x_read = error: -19
[  752.556249][ T5849] dvb-usb: error while querying for an remote control event.
[  752.700114][  T980] m920x_read = error: -19
[  752.704597][  T980] dvb-usb: error while querying for an remote control event.
[  752.850114][  T980] m920x_read = error: -19
[  752.854643][  T980] dvb-usb: error while querying for an remote control event.
[  752.990208][  T980] m920x_read = error: -19
[  752.994645][  T980] dvb-usb: error while querying for an remote control event.
[  753.052633][ T5924] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[  753.130346][  T980] m920x_read = error: -19
[  753.141934][  T980] dvb-usb: error while querying for an remote control event.
[  753.182413][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  753.189356][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  753.220080][ T5924] usb 7-1: device descriptor read/64, error -71
[  753.300160][  T980] m920x_read = error: -19
[  753.310268][  T980] dvb-usb: error while querying for an remote control event.
[  753.362335][T18448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  753.385405][T18448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  753.450201][ T5917] m920x_read = error: -19
[  753.454831][ T5917] dvb-usb: error while querying for an remote control event.
[  753.465422][T18448] /dev/rnullb0: Can't open blockdev
[  753.494312][ T5924] usb 7-1: new full-speed USB device number 24 using dummy_hcd
[  753.602263][ T5917] m920x_read = error: -19
[  753.617751][ T5917] dvb-usb: error while querying for an remote control event.
[  753.650294][ T5924] usb 7-1: device descriptor read/64, error -71
[  753.753274][  T980] m920x_read = error: -19
[  753.761727][  T980] dvb-usb: error while querying for an remote control event.
[  753.779454][ T5924] usb usb7-port1: attempt power cycle
[  753.880381][  T980] m920x_read = error: -19
[  753.884813][  T980] dvb-usb: error while querying for an remote control event.
[  754.010437][ T5917] m920x_read = error: -19
[  754.019521][ T5917] dvb-usb: error while querying for an remote control event.
[  754.156413][ T5924] usb 7-1: new full-speed USB device number 25 using dummy_hcd
[  754.171975][ T5917] m920x_read = error: -19
[  754.176400][ T5917] dvb-usb: error while querying for an remote control event.
[  754.216428][ T5924] usb 7-1: device descriptor read/8, error -71
[  754.320233][ T5917] m920x_read = error: -19
[  754.330469][ T5917] dvb-usb: error while querying for an remote control event.
[  754.470190][ T5917] m920x_read = error: -19
[  754.476680][ T5917] dvb-usb: error while querying for an remote control event.
[  754.491645][ T5924] usb 7-1: new full-speed USB device number 26 using dummy_hcd
[  754.560794][ T5924] usb 7-1: device descriptor read/8, error -71
[  754.600464][ T5917] m920x_read = error: -19
[  754.619300][ T5917] dvb-usb: error while querying for an remote control event.
[  754.685039][ T5924] usb usb7-port1: unable to enumerate USB device
[  754.760245][ T5917] m920x_read = error: -19
[  754.764809][ T5917] dvb-usb: error while querying for an remote control event.
[  754.793611][T18461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  754.850895][T18461] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  754.890354][ T5917] m920x_read = error: -19
[  754.897112][ T5917] dvb-usb: error while querying for an remote control event.
[  755.030288][ T5917] m920x_read = error: -19
[  755.034844][ T5917] dvb-usb: error while querying for an remote control event.
[  755.170282][ T5917] m920x_read = error: -19
[  755.174866][ T5917] dvb-usb: error while querying for an remote control event.
[  755.250772][ T5854] Bluetooth: hci3: command 0x0406 tx timeout
[  755.310763][ T5917] m920x_read = error: -19
[  755.315189][ T5917] dvb-usb: error while querying for an remote control event.
[  755.440237][ T5917] m920x_read = error: -19
[  755.448211][ T5917] dvb-usb: error while querying for an remote control event.
[  755.603409][ T5917] m920x_read = error: -19
[  755.621798][ T5917] dvb-usb: error while querying for an remote control event.
[  755.701172][T18466] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  755.723932][T18466] /dev/rnullb0: Can't open blockdev
[  755.750975][ T5917] m920x_read = error: -19
[  755.769537][ T5917] dvb-usb: error while querying for an remote control event.
[  755.918398][ T5917] m920x_read = error: -19
[  755.935001][ T5917] dvb-usb: error while querying for an remote control event.
[  756.100245][ T5849] m920x_read = error: -19
[  756.104718][ T5849] dvb-usb: error while querying for an remote control event.
[  756.230156][ T5849] m920x_read = error: -19
[  756.236511][ T5849] dvb-usb: error while querying for an remote control event.
[  756.370717][ T5849] m920x_read = error: -19
[  756.390466][ T5849] dvb-usb: error while querying for an remote control event.
[  756.510231][ T5849] m920x_read = error: -19
[  756.514655][ T5849] dvb-usb: error while querying for an remote control event.
[  756.640288][ T5849] m920x_read = error: -19
[  756.655124][ T5849] dvb-usb: error while querying for an remote control event.
[  756.800197][ T5849] m920x_read = error: -19
[  756.804836][ T5849] dvb-usb: error while querying for an remote control event.
[  756.886519][T18482] netlink: 'syz.5.3953': attribute type 1 has an invalid length.
[  756.967651][ T5849] m920x_read = error: -19
[  756.986524][ T5849] dvb-usb: error while querying for an remote control event.
[  757.150482][ T5849] m920x_read = error: -19
[  757.155771][ T5849] dvb-usb: error while querying for an remote control event.
[  757.217715][T18495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  757.238971][T18495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3957'.
[  757.290133][ T5849] m920x_read = error: -19
[  757.294570][ T5849] dvb-usb: error while querying for an remote control event.
[  757.312162][T18495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  757.347743][T18495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  757.430173][ T5849] m920x_read = error: -19
[  757.445075][ T5849] dvb-usb: error while querying for an remote control event.
[  757.591783][  T980] m920x_read = error: -19
[  757.600045][  T980] dvb-usb: error while querying for an remote control event.
[  757.721639][  T980] m920x_read = error: -19
[  757.729561][  T980] dvb-usb: error while querying for an remote control event.
[  757.850096][  T980] m920x_read = error: -19
[  757.854672][  T980] dvb-usb: error while querying for an remote control event.
[  757.982329][  T980] m920x_read = error: -19
[  757.993549][  T980] dvb-usb: error while querying for an remote control event.
[  758.130174][  T980] m920x_read = error: -19
[  758.140036][  T980] dvb-usb: error while querying for an remote control event.
[  758.285783][  T980] m920x_read = error: -19
[  758.300314][  T980] dvb-usb: error while querying for an remote control event.
[  758.420195][  T980] m920x_read = error: -19
[  758.440230][  T980] dvb-usb: error while querying for an remote control event.
[  758.559581][  T980] m920x_read = error: -19
[  758.564131][  T980] dvb-usb: error while querying for an remote control event.
[  758.711281][  T980] m920x_read = error: -19
[  758.716334][  T980] dvb-usb: error while querying for an remote control event.
[  758.840132][  T980] m920x_read = error: -19
[  758.844556][  T980] dvb-usb: error while querying for an remote control event.
[  758.920928][T18529] /dev/rnullb0: Can't open blockdev
[  758.990202][  T980] m920x_read = error: -19
[  758.995722][  T980] dvb-usb: error while querying for an remote control event.
[  759.108180][T18500] /dev/rnullb0: Can't open blockdev
[  759.130167][  T980] m920x_read = error: -19
[  759.144863][  T980] dvb-usb: error while querying for an remote control event.
[  759.293069][  T980] m920x_read = error: -19
[  759.311074][  T980] dvb-usb: error while querying for an remote control event.
[  759.474952][  T980] m920x_read = error: -19
[  759.479407][  T980] dvb-usb: error while querying for an remote control event.
[  759.630242][  T980] m920x_read = error: -19
[  759.635313][  T980] dvb-usb: error while querying for an remote control event.
[  759.770385][  T980] m920x_read = error: -19
[  759.787195][  T980] dvb-usb: error while querying for an remote control event.
[  759.796868][T18539] netlink: 'syz.5.3966': attribute type 83 has an invalid length.
[  759.930136][  T980] m920x_read = error: -19
[  759.934586][  T980] dvb-usb: error while querying for an remote control event.
[  760.090162][ T5849] m920x_read = error: -19
[  760.094737][ T5849] dvb-usb: error while querying for an remote control event.
[  760.230095][ T5849] m920x_read = error: -19
[  760.243766][ T5849] dvb-usb: error while querying for an remote control event.
[  760.370140][ T5854] Bluetooth: hci5: command 0x206a tx timeout
[  760.380355][  T980] m920x_read = error: -19
[  760.384778][  T980] dvb-usb: error while querying for an remote control event.
[  760.414651][ T5924] usb 4-1: USB disconnect, device number 13
[  760.530269][  T980] m920x_read = error: -19
[  760.534790][  T980] dvb-usb: error while querying for an remote control event.
[  760.731994][ T5917] m920x_read = error: -19
[  760.736421][ T5917] dvb-usb: error while querying for an remote control event.
[  760.890357][ T5849] m920x_read = error: -19
[  760.894797][ T5849] dvb-usb: error while querying for an remote control event.
[  761.020360][ T5849] m920x_read = error: -19
[  761.025004][ T5849] dvb-usb: error while querying for an remote control event.
[  761.190780][ T5849] m920x_read = error: -19
[  761.195310][ T5849] dvb-usb: error while querying for an remote control event.
[  761.205368][T13410] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  761.345946][ T5917] m920x_read = error: -19
[  761.350469][ T5917] dvb-usb: error while querying for an remote control event.
[  761.464288][ T5917] m920x_read = error: -19
[  761.468725][ T5917] dvb-usb: error while querying for an remote control event.
[  761.610425][ T5917] m920x_read = error: -19
[  761.614858][ T5917] dvb-usb: error while querying for an remote control event.
[  761.750184][ T5917] m920x_read = error: -19
[  761.754668][ T5917] dvb-usb: error while querying for an remote control event.
[  761.836341][T13410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  761.910130][  T980] m920x_read = error: -19
[  761.914561][  T980] dvb-usb: error while querying for an remote control event.
[  762.040887][  T980] m920x_read = error: -19
[  762.045498][  T980] dvb-usb: error while querying for an remote control event.
[  762.180251][ T5849] m920x_read = error: -19
[  762.218726][ T5849] dvb-usb: error while querying for an remote control event.
[  762.360177][ T5849] m920x_read = error: -19
[  762.364617][ T5849] dvb-usb: error while querying for an remote control event.
[  762.530170][ T5849] m920x_read = error: -19
[  762.534615][ T5849] dvb-usb: error while querying for an remote control event.
[  762.625086][T13410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.680513][ T5849] m920x_read = error: -19
[  762.695918][ T5849] dvb-usb: error while querying for an remote control event.
[  762.774491][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  762.786939][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  762.817632][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  762.832072][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  762.842164][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  762.851702][ T5849] m920x_read = error: -19
[  762.856110][ T5849] dvb-usb: error while querying for an remote control event.
[  763.021041][ T5849] m920x_read = error: -19
[  763.025481][ T5849] dvb-usb: error while querying for an remote control event.
[  763.043189][T13410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.160786][ T5849] m920x_read = error: -19
[  763.170407][ T5849] dvb-usb: error while querying for an remote control event.
[  763.280166][ T5849] m920x_read = error: -19
[  763.284609][ T5849] dvb-usb: error while querying for an remote control event.
[  763.430896][ T5849] m920x_read = error: -19
[  763.435394][ T5849] dvb-usb: error while querying for an remote control event.
[  763.620103][ T5917] m920x_read = error: -19
[  763.650160][ T5917] dvb-usb: error while querying for an remote control event.
[  763.760106][ T5917] m920x_read = error: -19
[  763.764555][ T5917] dvb-usb: error while querying for an remote control event.
[  763.910073][ T5849] m920x_read = error: -19
[  763.930035][ T5849] dvb-usb: error while querying for an remote control event.
[  764.070162][ T5917] m920x_read = error: -19
[  764.074586][ T5917] dvb-usb: error while querying for an remote control event.
[  764.220523][ T5917] m920x_read = error: -19
[  764.240405][ T5917] dvb-usb: error while querying for an remote control event.
[  764.391246][ T5917] m920x_read = error: -19
[  764.395679][ T5917] dvb-usb: error while querying for an remote control event.
[  764.463893][T18589] /dev/rnullb0: Can't open blockdev
[  764.580182][ T5917] m920x_read = error: -19
[  764.584618][ T5917] dvb-usb: error while querying for an remote control event.
[  764.730261][ T5917] m920x_read = error: -19
[  764.734694][ T5917] dvb-usb: error while querying for an remote control event.
[  764.900412][    T9] m920x_read = error: -19
[  764.905732][    T9] dvb-usb: error while querying for an remote control event.
[  764.932752][ T5854] Bluetooth: hci0: command tx timeout
[  765.053971][    T9] m920x_read = error: -19
[  765.058407][    T9] dvb-usb: error while querying for an remote control event.
[  765.200140][    T9] m920x_read = error: -19
[  765.215248][    T9] dvb-usb: error while querying for an remote control event.
[  765.331688][   T31] INFO: task syz.2.3295:16559 blocked for more than 143 seconds.
[  765.339505][   T31]       Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
[  765.350787][ T5917] m920x_read = error: -19
[  765.355201][ T5917] dvb-usb: error while querying for an remote control event.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  765.380543][T13410] bridge_slave_1: left allmulticast mode
[  765.391917][T13410] bridge_slave_1: left promiscuous mode
[  765.401059][T13410] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.410129][   T31]       Blocked by coredump.
[  765.414780][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  765.459987][   T31] task:syz.2.3295      state:D stack:26920 pid:16559 tgid:16559 ppid:13262  task_flags:0x40044c flags:0x00004004
[  765.500143][    T9] m920x_read = error: -19
[  765.500225][   T31] Call Trace:
[  765.504549][    T9] dvb-usb: error while querying for an remote control event.
[  765.507834][   T31]  <TASK>
[  765.507852][   T31]  __schedule+0x1737/0x4d30
[  765.507905][   T31]  ? __lock_acquire+0xab9/0xd20
[  765.568946][   T31]  ? schedule+0x165/0x360
[  765.599487][   T31]  ? __lock_acquire+0xab9/0xd20
[  765.609678][   T31]  ? __pfx___schedule+0x10/0x10
[  765.630307][   T24] usb 7-1: new full-speed USB device number 27 using dummy_hcd
[  765.660298][   T31]  ? schedule+0x91/0x360
[  765.664639][   T31]  schedule+0x165/0x360
[  765.668847][   T31]  schedule_preempt_disabled+0x13/0x30
[  765.690081][    T9] m920x_read = error: -19
[  765.694502][    T9] dvb-usb: error while querying for an remote control event.
[  765.725432][   T31]  rwsem_down_read_slowpath+0x5fd/0x8f0
[  765.810533][   T31]  ? rwsem_down_read_slowpath+0x4b8/0x8f0
[  765.816356][   T31]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  765.860108][    T9] m920x_read = error: -19
[  765.864622][    T9] dvb-usb: error while querying for an remote control event.
[  765.880129][   T31]  ? exit_mm+0xcc/0x2c0
[  765.884991][   T31]  ? __pfx_mm_release+0x10/0x10
[  765.889899][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  765.915864][   T31]  down_read+0x98/0x2e0
[  765.969900][   T31]  exit_mm+0xcc/0x2c0
[  765.974238][   T31]  ? __pfx_exit_mm+0x10/0x10
[  765.978887][   T31]  ? rcu_is_watching+0x15/0xb0
[  766.010072][   T31]  do_exit+0x648/0x2300
[  766.018729][   T31]  ? do_raw_spin_lock+0x121/0x290
[  766.030241][    T9] m920x_read = error: -19
[  766.034780][    T9] dvb-usb: error while querying for an remote control event.
[  766.088209][   T31]  ? __pfx_do_exit+0x10/0x10
[  766.094522][   T31]  ? cgroup_freezing+0x20/0x350
[  766.099463][   T31]  do_group_exit+0x21c/0x2d0
[  766.170696][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  766.176015][   T31]  get_signal+0x1286/0x1340
[  766.200098][ T5917] m920x_read = error: -19
[  766.204513][ T5917] dvb-usb: error while querying for an remote control event.
[  766.230232][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  766.235886][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  766.311422][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  766.316985][   T31]  exit_to_user_mode_loop+0x75/0x110
[  766.360084][   T31]  do_syscall_64+0x2bd/0x3b0
[  766.364780][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  766.380173][ T5917] m920x_read = error: -19
[  766.384591][ T5917] dvb-usb: error while querying for an remote control event.
[  766.410044][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.416208][   T31]  ? clear_bhb_loop+0x60/0xb0
[  766.440192][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.446178][   T31] RIP: 0033:0x7fa3adf8e9e3
[  766.480479][   T31] RSP: 002b:00007ffe884eb248 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  766.488980][   T31] RAX: fffffffffffffffc RBX: 00007fa3ac5f76c0 RCX: 00007fa3adf8e9e3
[  766.530176][ T5849] m920x_read = error: -19
[  766.534596][ T5849] dvb-usb: error while querying for an remote control event.
[  766.550002][   T31] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000
[  766.558079][   T31] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[  766.620054][   T31] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffe884eb3a0
[  766.628127][   T31] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[  766.680189][   T31]  </TASK>
[  766.700274][   T31] INFO: task syz.0.3304:16579 blocked for more than 144 seconds.
[  766.708079][   T31]       Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
[  766.715455][ T5849] m920x_read = error: -19
[  766.719842][ T5849] dvb-usb: error while querying for an remote control event.
[  766.744925][   T31]       Blocked by coredump.
[  766.749641][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  766.790058][   T31] task:syz.0.3304      state:D stack:25096 pid:16579 tgid:16579 ppid:14755  task_flags:0x40044c flags:0x00004004
[  766.830161][   T31] Call Trace:
[  766.833542][   T31]  <TASK>
[  766.836539][   T31]  __schedule+0x1737/0x4d30
[  766.868002][   T31]  ? __lock_acquire+0xab9/0xd20
[  766.880235][   T31]  ? schedule+0x165/0x360
[  766.884691][   T31]  ? __lock_acquire+0xab9/0xd20
[  766.885007][ T5849] m920x_read = error: -19
[  766.889603][   T31]  ? __pfx___schedule+0x10/0x10
[  766.921201][   T31]  ? schedule+0x91/0x360
[  766.925593][   T31]  schedule+0x165/0x360
[  766.930284][ T5849] dvb-usb: error while querying for an remote control event.
[  766.960422][   T31]  schedule_preempt_disabled+0x13/0x30
[  766.966034][   T31]  rwsem_down_read_slowpath+0x5fd/0x8f0
[  766.989775][   T31]  ? rwsem_down_read_slowpath+0x4b8/0x8f0
[  766.996115][   T31]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  767.010219][ T5854] Bluetooth: hci0: command tx timeout
[  767.023631][   T31]  ? exit_mm+0xcc/0x2c0
[  767.027968][   T31]  ? __pfx_mm_release+0x10/0x10
[  767.039153][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  767.044966][   T31]  down_read+0x98/0x2e0
[  767.049240][   T31]  exit_mm+0xcc/0x2c0
[  767.060072][   T31]  ? __pfx_exit_mm+0x10/0x10
[  767.060167][ T5849] m920x_read = error: -19
[  767.064792][   T31]  ? rcu_is_watching+0x15/0xb0
[  767.069122][ T5849] dvb-usb: error while querying for an remote control event.
[  767.086465][   T31]  do_exit+0x648/0x2300
[  767.094091][   T31]  ? do_raw_spin_lock+0x121/0x290
[  767.099261][   T31]  ? __pfx_do_exit+0x10/0x10
[  767.104375][   T31]  ? cgroup_freezing+0x20/0x350
[  767.111681][   T31]  do_group_exit+0x21c/0x2d0
[  767.116420][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  767.122022][   T31]  get_signal+0x1286/0x1340
[  767.126673][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  767.135111][   T31]  ? rcu_is_watching+0x15/0xb0
[  767.141365][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  767.147630][   T31]  ? __bad_area_nosemaphore+0x3fb/0x780
[  767.154188][   T31]  ? local_irq_enable_exit_to_user+0x5/0x10
[  767.167005][   T31]  irqentry_exit_to_user_mode+0x81/0x120
[  767.173205][   T31]  exc_page_fault+0x9f/0xf0
[  767.177952][   T31]  asm_exc_page_fault+0x26/0x30
[  767.180547][ T5849] m920x_read = error: -19
[  767.187217][ T5849] dvb-usb: error while querying for an remote control event.
[  767.194337][   T31] RIP: 0033:0x7fe182664fc9
[  767.199096][   T31] RSP: 002b:00007ffcac82e4e0 EFLAGS: 00010246
[  767.218480][   T31] RAX: 0000200000000480 RBX: 0000000000000002 RCX: ffffffffffffdcbf
[  767.228353][   T31] RDX: de24901ed4058f67 RSI: 0000200000002340 RDI: 000055558c7f83c8
[  767.246003][   T31] RBP: 00007fe1829b7ba0 R08: 00007fe182600000 R09: 0000000000000001
[  767.287516][   T31] R10: 0000000000000000 R11: 0000000000000002 R12: 00007fe1829b5fac
[  767.300171][   T31] R13: 00007fe1829b5fa0 R14: fffffffffffffffe R15: 00007ffcac82e5f0
[  767.308292][   T31]  </TASK>
[  767.350160][   T31] INFO: task syz.0.3304:16580 blocked for more than 145 seconds.
[  767.358001][   T31]       Not tainted 6.16.0-rc6-next-20250718-syzkaller #0
[  767.366398][T13410] bridge_slave_0: left allmulticast mode
[  767.372916][    T9] m920x_read = error: -19
[  767.377314][    T9] dvb-usb: error while querying for an remote control event.
[  767.457430][T13410] bridge_slave_0: left promiscuous mode
[  767.499980][   T31]       Blocked by coredump.
[  767.504668][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  767.530288][T13410] bridge0: port 1(bridge_slave_0) entered disabled state
[  767.570229][    T9] m920x_read = error: -19
[  767.574660][    T9] dvb-usb: error while querying for an remote control event.
[  767.582563][   T31] task:syz.0.3304      state:D stack:25208 pid:16580 tgid:16579 ppid:14755  task_flags:0x40044c flags:0x00004004
[  767.645438][   T31] Call Trace:
[  767.648836][   T31]  <TASK>
[  767.671521][    T9] usb 6-1: USB disconnect, device number 15
[  767.675786][   T31]  __schedule+0x1737/0x4d30
[  767.720066][   T31]  ? __lock_acquire+0xab9/0xd20
[  767.725574][   T31]  ? schedule+0x165/0x360
[  767.730763][ T5917] m920x_read = error: -19
[  767.735153][ T5917] dvb-usb: error while querying for an remote control event.
[  767.770079][   T31]  ? __lock_acquire+0xab9/0xd20
[  767.775039][   T31]  ? __pfx___schedule+0x10/0x10
[  767.800302][   T31]  ? schedule+0x91/0x360
[  767.804690][   T31]  schedule+0x165/0x360
[  767.808895][   T31]  schedule_preempt_disabled+0x13/0x30
[  767.860183][   T31]  rwsem_down_read_slowpath+0x5fd/0x8f0
[  767.865817][   T31]  ? rwsem_down_read_slowpath+0x4b8/0x8f0
[  767.890465][    T9] m920x_read = error: -19
[  767.894892][    T9] dvb-usb: error while querying for an remote control event.
[  767.902430][   T31]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  767.908564][   T31]  ? exit_mm+0xcc/0x2c0
[  767.937706][   T31]  ? __pfx_mm_release+0x10/0x10
[  767.943069][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  767.948340][   T31]  down_read+0x98/0x2e0
[  767.972383][   T31]  exit_mm+0xcc/0x2c0
[  767.976469][   T31]  ? __pfx_exit_mm+0x10/0x10
[  768.000207][   T31]  ? rcu_is_watching+0x15/0xb0
[  768.005071][   T31]  do_exit+0x648/0x2300
[  768.009304][   T31]  ? do_raw_spin_lock+0x121/0x290
[  768.033482][   T31]  ? __pfx_do_exit+0x10/0x10
[  768.038180][   T31]  ? cgroup_freezing+0x20/0x350
[  768.043393][    T9] m920x_read = error: -19
[  768.047771][    T9] dvb-usb: error while querying for an remote control event.
[  768.080169][   T31]  do_group_exit+0x21c/0x2d0
[  768.084851][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  768.101240][   T31]  get_signal+0x1286/0x1340
[  768.106041][   T31]  arch_do_signal_or_restart+0x9a/0x750
[  768.120448][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  768.126711][   T31]  ? __fget_files+0x2a/0x420
[  768.150054][   T31]  ? exit_to_user_mode_loop+0x40/0x110
[  768.155615][   T31]  exit_to_user_mode_loop+0x75/0x110
[  768.169999][   T31]  do_syscall_64+0x2bd/0x3b0
[  768.174681][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  768.189999][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.200105][ T5917] m920x_read = error: -19
[  768.204588][ T5917] dvb-usb: error while querying for an remote control event.
[  768.212288][   T31]  ? clear_bhb_loop+0x60/0xb0
[  768.217031][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.244093][   T31] RIP: 0033:0x7fe18278e9a9
[  768.248600][   T31] RSP: 002b:00007fe1836ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  768.270115][   T31] RAX: fffffffffffffe00 RBX: 00007fe1829b5fa8 RCX: 00007fe18278e9a9
[  768.278213][   T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe1829b5fa8
[  768.310322][   T31] RBP: 00007fe1829b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  768.318419][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1829b5fac
[  768.350438][ T5917] m920x_read = error: -19
[  768.354856][ T5917] dvb-usb: error while querying for an remote control event.
[  768.354877][   T31] R13: 0000000000000000 R14: 00007ffcac82e290 R15: 00007ffcac82e378
[  768.390127][   T31]  </TASK>
[  768.393451][   T31] 
[  768.393451][   T31] Showing all locks held in the system:
[  768.425478][   T31] 5 locks held by kworker/1:0/24:
[  768.443300][   T31]  #0: ffff888022285148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  768.480271][ T5849] m920x_read = error: -19
[  768.484780][ T5849] dvb-usb: error while querying for an remote control event.
[  768.500117][   T31]  #1: ffffc900001e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  768.578325][   T31]  #2: ffff888144f09198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  768.587501][   T31]  #3: ffff88802829e518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20
[  768.597602][   T31]  #4: ffff888144b0d268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20
[  768.608002][   T31] 1 lock held by khungtaskd/31:
[  768.614266][   T31]  #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  768.620268][  T980] m920x_read = error: -19
[  768.624972][   T31] 3 locks held by kworker/u8:3/49:
[  768.628560][  T980] dvb-usb: error while querying for an remote control event.
[  768.641840][   T31]  #0: ffff88814cd1d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  768.656392][   T31]  #1: ffffc90000b97bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  768.670837][   T31]  #2: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  768.680861][   T31] 3 locks held by kworker/u8:8/4509:
[  768.686215][   T31]  #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  768.699573][   T31]  #1: ffffc9000d02fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  768.720418][   T31]  #2: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  768.729543][   T31] 1 lock held by dhcpcd/5511:
[  768.735306][  T980] m920x_read = error: -19
[  768.756113][   T31]  #0: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50
[  768.760008][  T980] dvb-usb: error while querying for an remote control event.
[  768.790254][   T31] 2 locks held by getty/5605:
[  768.795044][   T31]  #0: ffff88814de6e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  768.820175][   T31]  #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  768.853682][   T31] 2 locks held by kworker/0:5/5917:
[  768.859014][   T31]  #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  768.890078][  T980] m920x_read = error: -19
[  768.890212][   T31]  #1: 
[  768.894495][  T980] dvb-usb: error while querying for an remote control event.
[  768.920010][   T31] ffffc900044efbc0 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  768.929879][   T31] 3 locks held by kworker/1:5/5935:
[  768.957707][   T31]  #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  768.990149][   T31]  #1: ffffc9000453fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  769.005188][  T980] m920x_read = error: -19
[  769.009609][  T980] dvb-usb: error while querying for an remote control event.
[  769.036393][   T31]  #2: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  769.050124][   T31] 5 locks held by kworker/u8:9/13410:
[  769.073910][   T31]  #0: ffff88801b6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  769.090175][ T5854] Bluetooth: hci0: command tx timeout
[  769.100218][   T31]  #1: ffffc9000ec3fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  769.124686][   T31]  #2: ffffffff8f92b870 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  769.150144][  T980] m920x_read = error: -19
[  769.154582][  T980] dvb-usb: error while querying for an remote control event.
[  769.162561][   T31]  #3: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990
[  769.200159][   T31]  #4: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  769.230195][   T31] 1 lock held by syz.2.3295/16559:
[  769.235475][   T31]  #0: ffff88807abe81e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0
[  769.250093][   T31] 1 lock held by syz.2.3295/16561:
[  769.255515][   T31] 1 lock held by syz.0.3304/16579:
[  769.269987][   T31]  #0: ffff888030df9760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0
[  769.279285][   T31] 1 lock held by syz.0.3304/16580:
[  769.310051][   T31]  #0: ffff888030df9760 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0
[  769.319031][   T31] 1 lock held by syz.0.3304/16583:
[  769.330420][  T980] m920x_read = error: -19
[  769.334952][  T980] dvb-usb: error while querying for an remote control event.
[  769.347188][   T31] 2 locks held by syz.5.3971/18550:
[  769.353132][   T31]  #0: ffffffff8f92b870 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  769.379976][   T31]  #1: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: cangw_pernet_exit_batch+0x20/0x90
[  769.389856][   T31] 1 lock held by syz-executor/18572:
[  769.406362][   T31]  #0: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20
[  769.421855][   T31] 2 locks held by syz.4.3981/18583:
[  769.427127][   T31]  #0: ffffffff8f92b870 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  769.439483][   T31]  #1: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0x140
[  769.454196][   T31] 3 locks held by syz.6.3986/18600:
[  769.459466][   T31]  #0: ffff88807cbbcdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  769.470707][  T980] m920x_read = error: -19
[  769.475104][  T980] dvb-usb: error while querying for an remote control event.
[  769.492919][   T31]  #1: ffff88807cbbc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  769.507563][   T31]  #2: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  769.529580][   T31] 
[  769.533550][   T31] =============================================
[  769.533550][   T31] 
[  769.610419][  T980] m920x_read = error: -19
[  769.614894][  T980] dvb-usb: error while querying for an remote control event.
[  769.644279][   T31] NMI backtrace for cpu 0
[  769.644301][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  769.644327][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  769.644340][   T31] Call Trace:
[  769.644349][   T31]  <TASK>
[  769.644359][   T31]  dump_stack_lvl+0x189/0x250
[  769.644405][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  769.644434][   T31]  ? __pfx__printk+0x10/0x10
[  769.644475][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  769.644501][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  769.644530][   T31]  ? __pfx__printk+0x10/0x10
[  769.644564][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  769.644591][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  769.644621][   T31]  watchdog+0xf93/0xfe0
[  769.644647][   T31]  ? watchdog+0x1de/0xfe0
[  769.644675][   T31]  kthread+0x70e/0x8a0
[  769.644707][   T31]  ? __pfx_watchdog+0x10/0x10
[  769.644728][   T31]  ? __pfx_kthread+0x10/0x10
[  769.644759][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  769.644786][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  769.644813][   T31]  ? __pfx_kthread+0x10/0x10
[  769.644843][   T31]  ret_from_fork+0x3f9/0x770
[  769.644869][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  769.644900][   T31]  ? __switch_to_asm+0x39/0x70
[  769.644918][   T31]  ? __switch_to_asm+0x33/0x70
[  769.644935][   T31]  ? __pfx_kthread+0x10/0x10
[  769.644966][   T31]  ret_from_fork_asm+0x1a/0x30
[  769.645002][   T31]  </TASK>
[  769.645010][   T31] Sending NMI from CPU 0 to CPUs 1:
[  769.796370][    C1] NMI backtrace for cpu 1
[  769.796389][    C1] CPU: 1 UID: 0 PID: 16583 Comm: syz.0.3304 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  769.796412][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  769.796429][    C1] RIP: 0010:kasan_check_range+0x1d4/0x2c0
[  769.796457][    C1] Code: 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 b8 00 00 00 49 ff c3 49 ff cc 75 ee 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 45 84 ff 75 63 41 f7
[  769.796473][    C1] RSP: 0018:ffffc90010ab74d0 EFLAGS: 00000256
[  769.796489][    C1] RAX: ffff88807c6d0001 RBX: ffff888078b93888 RCX: ffffffff819d433e
[  769.796504][    C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90010ab7540
[  769.796515][    C1] RBP: ffffc90010ab75b0 R08: ffffc90010ab7547 R09: 1ffff92002156ea8
[  769.796529][    C1] R10: dffffc0000000000 R11: fffff52002156ea9 R12: 0000000000000001
[  769.796542][    C1] R13: 1ffff1100f172712 R14: fffff52002156ea9 R15: 1ffff92002156ea8
[  769.796556][    C1] FS:  00007fe18368d6c0(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000
[  769.796571][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  769.796583][    C1] CR2: 000055ed3feb1138 CR3: 0000000023f16000 CR4: 00000000003526f0
[  769.796600][    C1] Call Trace:
[  769.796607][    C1]  <TASK>
[  769.796617][    C1]  __up_read+0x1ee/0x680
[  769.796645][    C1]  ? __pfx___up_read+0x10/0x10
[  769.796676][    C1]  validate_mm+0x24e/0x4b0
[  769.796703][    C1]  ? __pfx_validate_mm+0x10/0x10
[  769.796731][    C1]  ? mas_find+0xb40/0xd30
[  769.796758][    C1]  vms_complete_munmap_vmas+0x6aa/0x8a0
[  769.796792][    C1]  do_vmi_align_munmap+0x358/0x420
[  769.796827][    C1]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  769.796869][    C1]  do_vmi_munmap+0x253/0x2e0
[  769.796897][    C1]  do_munmap+0xe1/0x140
[  769.796917][    C1]  ? __pfx_do_munmap+0x10/0x10
[  769.796939][    C1]  ? bpf_lsm_mmap_addr+0x9/0x20
[  769.796956][    C1]  ? security_mmap_addr+0x71/0x270
[  769.796983][    C1]  mremap_to+0x2df/0x7a0
[  769.797012][    C1]  ? __pfx_mremap_to+0x10/0x10
[  769.797039][    C1]  ? check_prep_vma+0x740/0xae0
[  769.797070][    C1]  __se_sys_mremap+0xa0b/0xef0
[  769.797107][    C1]  ? __pfx___se_sys_mremap+0x10/0x10
[  769.797137][    C1]  ? exc_page_fault+0x76/0xf0
[  769.797163][    C1]  ? do_user_addr_fault+0xc8a/0x1390
[  769.797186][    C1]  ? do_syscall_64+0xbe/0x3b0
[  769.797212][    C1]  ? __x64_sys_mremap+0x20/0xc0
[  769.797237][    C1]  do_syscall_64+0xfa/0x3b0
[  769.797262][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  769.797286][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.797303][    C1]  ? clear_bhb_loop+0x60/0xb0
[  769.797323][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.797340][    C1] RIP: 0033:0x7fe18278e9a9
[  769.797356][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  769.797370][    C1] RSP: 002b:00007fe18368d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  769.797387][    C1] RAX: ffffffffffffffda RBX: 00007fe1829b6080 RCX: 00007fe18278e9a9
[  769.797400][    C1] RDX: 0000000000600002 RSI: 0000000000600002 RDI: 0000200000000000
[  769.797412][    C1] RBP: 00007fe182810d69 R08: 0000200000a00000 R09: 0000000000000000
[  769.797430][    C1] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000
[  769.797441][    C1] R13: 0000000000000001 R14: 00007fe1829b6080 R15: 00007ffcac82e378
[  769.797461][    C1]  </TASK>
[  769.900604][  T980] m920x_read = error: -19
[  770.157843][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  770.164772][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) 
[  770.176116][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  770.186201][   T31] Call Trace:
[  770.189500][   T31]  <TASK>
[  770.192457][   T31]  dump_stack_lvl+0x99/0x250
[  770.197088][   T31]  ? __asan_memcpy+0x40/0x70
[  770.201715][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  770.206942][   T31]  ? __pfx__printk+0x10/0x10
[  770.211567][   T31]  vpanic+0x281/0x750
[  770.215575][   T31]  ? __pfx_vpanic+0x10/0x10
[  770.220114][   T31]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  770.225702][   T31]  ? preempt_schedule+0xae/0xc0
[  770.230580][   T31]  ? preempt_schedule_common+0x83/0xd0
[  770.236078][   T31]  panic+0xb9/0xc0
[  770.239825][   T31]  ? __pfx_panic+0x10/0x10
[  770.244258][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  770.249646][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  770.255826][   T31]  watchdog+0xfd2/0xfe0
[  770.260023][   T31]  ? watchdog+0x1de/0xfe0
[  770.264404][   T31]  kthread+0x70e/0x8a0
[  770.268497][   T31]  ? __pfx_watchdog+0x10/0x10
[  770.273225][   T31]  ? __pfx_kthread+0x10/0x10
[  770.277839][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  770.283059][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  770.288282][   T31]  ? __pfx_kthread+0x10/0x10
[  770.292909][   T31]  ret_from_fork+0x3f9/0x770
[  770.297527][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  770.302667][   T31]  ? __switch_to_asm+0x39/0x70
[  770.307444][   T31]  ? __switch_to_asm+0x33/0x70
[  770.312222][   T31]  ? __pfx_kthread+0x10/0x10
[  770.316839][   T31]  ret_from_fork_asm+0x1a/0x30
[  770.321629][   T31]  </TASK>
[  770.324963][   T31] Kernel Offset: disabled
[  770.329296][   T31] Rebooting in 86400 seconds..