last executing test programs:

5m54.276521203s ago: executing program 0 (id=221):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001380)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xea68, @dev={0xfe, 0x80, '\x00', 0xb}, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="4c2450c449", 0x5}], 0x1}}], 0x1, 0x24040880) (async)
sendto$inet6(r0, &(0x7f0000000380)='\f', 0x1, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c) (async)
close(0x3)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) (async)
mount(&(0x7f0000000000)=@md0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='nilfs2\x00', 0x208002, 0x0)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

5m53.397345946s ago: executing program 0 (id=228):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000011c0)=0xa, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r5, 0x5708e000)

5m48.589098029s ago: executing program 0 (id=256):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200, 0xcc)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)={0x3, r3})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x7, 0x2)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'batadv_slave_0\x00', @random="671bf73047c1"})
write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0000120000008000000000000000000000000000aaff0200000000000002000000000000013a00000000000000020090780000d93f6400f0ff0f081120ff10000000000000e7a6000000000001fe800000000000000000001000ff0012"], 0x6e)
sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffefff)
sendfile(r0, r0, 0x0, 0x7ffff000)

5m46.744869025s ago: executing program 0 (id=262):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f0000000940)='./file0/../file0\x00', 0x0, 0x1100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x220000, 0x123)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x5)
open_tree(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x80101)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r0)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
execveat(r0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000980)={[&(0x7f00000002c0)='jfs\x00', &(0x7f0000000440)='jfs\x00', &(0x7f00000003c0)='/dev/vga_arbiter\x00', &(0x7f0000000400)=',\x00', &(0x7f0000000900)='jfs\xb8\x8d\x16\x9d\xe4\x1d-\xeab\'\xe7I\xa2<\xad\x92\x03@\xad\xb83\x1f\xde\xb7\xe4#.\x17\x03\xb9\x91\xfbf\x90', &(0x7f0000000480)='$\x00', &(0x7f00000004c0)='%&^&&\x00', &(0x7f0000000500)='}!{\'({&*\xfd}@\x00', &(0x7f00000007c0)='/dev/rnullb0\x00', &(0x7f0000000800)='+([.\',}\x00', &(0x7f00000008c0)='jfs\x00', &(0x7f00000005c0)='jfs\x00', &(0x7f0000000680)='\xc1\x9c\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\b}s\xcea\xfaEj\xb7\xc2\xd5S\xb7\xd9&\x9a\xc2\xd1\x862\x99\x1a\xb3BR}w\xf1%\xce[\xc8\x9a\xf9\r/!i\x94\x93\x97\xec)\xf8W\x9f\x00/[T\x89\x0f\n\xb3_\xfd\xfe\xc8\xf6qSf\xd1\xd7]\x8a^\xea\xc2\x95\xb7\x13\xe1D^\xbd\xa7\xe7\xcc\x8a\x97\b\xc4\xeaM\xa0z\xea\xda\xe1~\x98\v\x9a\xaaE7\x91\xd9\x9a_']}, &(0x7f0000000700)={[&(0x7f0000000580)='+([.\',}\x00', &(0x7f0000000600)='/dev/vga_arbiter\x00']}, 0x800)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0xac)
r4 = creat(&(0x7f0000000540)='./file0\x00', 0x0)
socket$unix(0x1, 0x5, 0x0)
r5 = socket(0x10, 0x3, 0x3)
write(r5, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000005200", 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000780)={'bridge0\x00', &(0x7f0000000840)=@ethtool_coalesce={0xf, 0xb5, 0x5, 0xffffb883, 0x8000, 0x238365dc, 0x2, 0x5, 0x80, 0x4, 0x3, 0x6, 0x0, 0x8000, 0x401, 0x3, 0x9c4, 0x3, 0x8, 0xd1a3, 0x1, 0x1, 0x8000}})
close(r4)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x42, 0x154)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00')
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000200)={0x1, @sliced})
write$vga_arbiter(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='lock m'], 0x7)
setsockopt$packet_int(r6, 0x107, 0x10, &(0x7f0000000000)=0x3, 0x4)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f0000000640), 0x5406c, &(0x7f0000000a40)=ANY=[@ANYRES16=r1, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="dc0e9475657205229e80c1a7647f91931e500fc6b92606b20a1de8d924954e9cde05"])

5m46.537177158s ago: executing program 0 (id=265):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="ddc000"])
openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004980, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, 0x0, 0x0, 0x1000000, 0x0, 0x10}])
openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
r2 = socket(0x28, 0x5, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x20, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10000002, 0x4]}})
syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905"], 0x0)

5m46.396051874s ago: executing program 0 (id=266):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, <r1=>0x0}) (async, rerun: 32)
r2 = socket$inet6(0xa, 0x3, 0x6) (rerun: 32)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02", 0x2)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000) (rerun: 64)

5m46.276906252s ago: executing program 32 (id=266):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, <r1=>0x0}) (async, rerun: 32)
r2 = socket$inet6(0xa, 0x3, 0x6) (rerun: 32)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02", 0x2)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000) (rerun: 64)

4m8.076946564s ago: executing program 3 (id=799):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040000010073797a300000000068000000090a0104000000000000dfff0700000008000a40000000000900020073797a31000000000900010073797a3000000000080005ffbc490f5f439b67d040000000212c0011800c000100636f756e746572001c0002800c000240000000000000e4010c00014000000000000000021400000010000100000000da0b9b1c8dd4b73c69833bb5a7f88fb8c6b354e660da4c493c5966753b6bb74cd4e3c04ca6d65643ec603da213c8f99b18c27961347a59d6646227a3fb7471f2c48bc3971859b1a4ef0eb94529e3a04aff23ffaf4ee1ff3a0d4f7b424ef84d166edb43143b3e49dc94d9a0af56bd0a86ef559f19a9164f5021da1c03bd417b6c35d2ffed04b47867e851f8f5050a28acf98bf94c09027cedc704b9"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=ANY=[@ANYBLOB="280000000308030000000000000000000100000805000300210000000c00048008002040ffffffff95de49ed9cc50321a2bb6743931c224f0ebefc73"], 0x28}, 0x1, 0x0, 0x0, 0x200c8}, 0x80) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=ANY=[@ANYBLOB="280000000308030000000000000000000100000805000300210000000c00048008002040ffffffff95de49ed9cc50321a2bb6743931c224f0ebefc73"], 0x28}, 0x1, 0x0, 0x0, 0x200c8}, 0x80)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000008, 0x31, 0xffffffffffffffff, 0xfffff000)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000002fc0)=@ethtool_stats})
read$FUSE(r5, &(0x7f0000005040)={0x2020}, 0x2020) (async)
read$FUSE(r5, &(0x7f0000005040)={0x2020, 0x0, <r7=>0x0}, 0x2020)
ioctl$SIOCGETSGCNT(r5, 0x89e1, &(0x7f00000000c0)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}})
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r7, @ANYRES16=r4, @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x81) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r7, @ANYRES16=r4, @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x81)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = socket$inet6(0xa, 0x80000, 0x7)
setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
getsockopt$inet6_opts(r10, 0x29, 0x36, 0x0, &(0x7f0000000140)) (async)
getsockopt$inet6_opts(r10, 0x29, 0x36, 0x0, &(0x7f0000000140))
openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0)
socket$packet(0x11, 0x2, 0x300)
setsockopt$inet6_tcp_int(r9, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$inet6_tcp_int(r9, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
sendmmsg$inet6(r8, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x3, @loopback={0x0, 0x7ffffffe}, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="7f39", 0x2}], 0x1}}], 0x0, 0x20000001)
write$binfmt_script(r8, &(0x7f00000022c0)={'#! ', '', [], 0xa, "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"}, 0x18a)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4m7.873489533s ago: executing program 3 (id=803):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
prctl$PR_MCE_KILL(0x35, 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000f3"])
r4 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r5, &(0x7f0000000140)=ANY=[], 0xff2e)
ioctl$TCFLSH(r5, 0x540b, 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
ioctl$FIBMAP(r6, 0x401870cb, &(0x7f0000000040))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r8, 0x5708e000)

4m6.91987888s ago: executing program 3 (id=808):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)
sendto$packet(r2, 0x0, 0x0, 0x200444c1, &(0x7f0000000040)={0xc9, 0x80f3, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0)

4m6.52116107s ago: executing program 3 (id=809):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
sendfile(r1, r0, 0x0, 0x7fffefff)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0xc8400, 0x0)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000100)={0xa, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}, {}]})
ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000140)={r4, 0x20})
ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7)
fcntl$addseals(r6, 0x409, 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000240)={0x1, 0x7f24, 0x3})
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260)
ftruncate(r6, 0x8000000)
sendto$inet6(r5, 0x0, 0x0, 0x8001, 0x0, 0x0)
fadvise64(r0, 0x9, 0x9, 0x2)
r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r8, 0xc01064c2, &(0x7f00000001c0))
sendfile(r0, r0, 0x0, 0x7ffff000)

4m5.637978073s ago: executing program 3 (id=814):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async)
r1 = inotify_init1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) (async)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

4m5.289104019s ago: executing program 3 (id=815):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000005c0)="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", 0x1000, <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffe, 0xfffffffc, 0x0, [{0x9, 0x5, 0x8, '\x00', 0xb4}, {0x83, 0xd2, 0x0, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0x40}, {0x0, 0x9, 0x40, '\x00', 0x6}, {0x8, 0x1, 0x8, '\x00', 0xa8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0xa, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x9, 0xa6, '\x00', 0x5}, {0x9, 0x5c, 0x6, '\x00', 0x24}, {0x1, 0xd, 0x15, '\x00', 0x5}, {0x8, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0x0, '\x00', 0xfd}, {0x6, 0x9b, 0x42, '\x00', 0x23}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xef, 0x6, 0x9, '\x00', 0x4}, {0xf, 0x6, 0x6}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x41, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x15, 0xfd, 0x7, '\x00', 0x2}, {0x92, 0x6, 0x7, '\x00', 0x42}]}})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000040)={r2, 0x1000, &(0x7f00000015c0)=""/4096})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0)
sendfile(r7, r7, 0x0, 0x7ffff000)

4m5.05555628s ago: executing program 33 (id=815):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000005c0)="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", 0x1000, <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffe, 0xfffffffc, 0x0, [{0x9, 0x5, 0x8, '\x00', 0xb4}, {0x83, 0xd2, 0x0, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0x40}, {0x0, 0x9, 0x40, '\x00', 0x6}, {0x8, 0x1, 0x8, '\x00', 0xa8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0xa, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x9, 0xa6, '\x00', 0x5}, {0x9, 0x5c, 0x6, '\x00', 0x24}, {0x1, 0xd, 0x15, '\x00', 0x5}, {0x8, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0x0, '\x00', 0xfd}, {0x6, 0x9b, 0x42, '\x00', 0x23}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xef, 0x6, 0x9, '\x00', 0x4}, {0xf, 0x6, 0x6}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x41, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x15, 0xfd, 0x7, '\x00', 0x2}, {0x92, 0x6, 0x7, '\x00', 0x42}]}})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000040)={r2, 0x1000, &(0x7f00000015c0)=""/4096})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0)
sendfile(r7, r7, 0x0, 0x7ffff000)

3m10.170454918s ago: executing program 1 (id=1056):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x48, 0x0, 0x2, "b49e1b6225be4279fa07fbde4749573e7c17e6e724ae09b9424f5ab23870ecd4"})
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
r3 = fcntl$dupfd(r2, 0x406, r1)
write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x1400000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
r4 = msgget$private(0x0, 0x1c0)
msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88))
msgsnd(r4, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000b2c000/0x1000)=nil, 0x1000, 0x19)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fstat(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setreuid(0x0, r6)
fstat(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = getuid()
stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0x40045532, &(0x7f0000000840))
msgctl$IPC_SET(r4, 0x1, &(0x7f0000000240)={{0x2, r6, r7, r8, r9, 0x100, 0x3}, 0x0, 0x0, 0x7, 0x8, 0x9, 0x6, 0x10, 0x1, 0xe0d, 0xd})

3m7.019797235s ago: executing program 1 (id=1072):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe0000, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$packet(0x11, 0x3, 0x300)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r4], 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000))
open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x8)

3m0.70883236s ago: executing program 1 (id=1092):
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x101080, 0x20, 0x36}, 0x18)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r4 = syz_io_uring_complete(0x0)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r6, 0x40046207, 0x0)
close(r5)
r7 = creat(&(0x7f0000000b00)='./file0\x00', 0x0)
close(r7) (async)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000300)={0x0, 0x62, r9, <r10=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, [<r11=>0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000002140)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [r11], [0x0, 0x0, 0xfffffffe, 0x4], [], [0x8000000000000000, 0x0, 0x4000]}) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000000)={r11})
r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000100)={0x2, 'ip6erspan0\x00', {0x10}, 0x5c}) (async)
setsockopt$bt_BT_DEFER_SETUP(r12, 0x112, 0x7, 0x0, 0x0) (async)
r13 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r13, 0x6) (async)
accept4$inet6(r13, 0x0, 0x0, 0x0)
shutdown(r13, 0x0) (async)
r14 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed9bebbbd, 0xa0011, r14, 0x52fbb000) (async)
ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000001180)={[0x6, 0x1, 0x49d6069d, 0x3f5, 0x2, 0x0, 0x5, 0x3, 0x3df, 0x1, 0x4, 0x4, 0xe, 0x1000, 0x0, 0x2, 0x4, 0x6, 0xffff, 0x1, 0xd, 0xb, 0x9, 0x3, 0x75d6, 0x3, 0x4, 0xffff, 0x10001, 0x0, 0x553, 0x3, 0x7, 0xda, 0x1, 0x0, 0xfffffffa, 0x0, 0xa, 0x2, 0x8, 0xffffffff, 0xffff2cd5, 0x3, 0xf, 0x8, 0x3, 0xbc1, 0x1, 0x0, 0x5620, 0x7, 0xa4b, 0xffff, 0x5, 0x9, 0x2, 0x4, 0x8000, 0x4, 0x400, 0x6, 0x4a, 0x3, 0x401, 0x0, 0x80000000, 0x62, 0xfff, 0x6, 0x8, 0x800000, 0x5, 0x1, 0x3, 0xc, 0x900, 0x9, 0xfffff801, 0xd14, 0xffffffff, 0x7f, 0x9, 0x7, 0x6, 0x7, 0x5, 0x5, 0x1, 0xfab7, 0x4, 0x8, 0x8, 0x5ab6, 0x80000000, 0x0, 0x99, 0x5, 0x9, 0x1ff, 0x6, 0x80, 0x915f, 0x1, 0xdcde, 0x2, 0x450, 0x2, 0x1, 0x8, 0x1, 0x0, 0x9, 0x6, 0x9, 0xfff00000, 0x0, 0x4, 0x4, 0x9, 0x7, 0x2dec, 0x2, 0x8073, 0x6, 0xa, 0x2, 0xfffffff9, 0x0, 0x7d3, 0x4, 0x1, 0x80000000, 0x4, 0xe, 0xe, 0x0, 0x6, 0x7fffffff, 0x9, 0x6, 0xfffffff3, 0x40, 0xee, 0xadb, 0x5, 0x2, 0xa00, 0xd13, 0x55de, 0x8, 0x2, 0x0, 0x4, 0x6bbe, 0xb18, 0x6, 0x800, 0x8, 0x8, 0xda3f, 0xaf, 0x4, 0x2, 0x100, 0x80, 0x7, 0x5, 0x4, 0x2, 0x80000001, 0x400, 0xffff2826, 0x9, 0x7, 0x2, 0x487f4171, 0x3, 0x5, 0x800, 0x80000000, 0x7, 0x4, 0x871, 0x50, 0x0, 0xff, 0x0, 0x7, 0x5, 0x1, 0x10000, 0xfffffffe, 0x5, 0x2, 0xb0, 0xfffffff5, 0x319, 0x2392, 0xbfd, 0x7, 0x80, 0x13, 0x6, 0x448, 0xeb48, 0x6, 0x5, 0x6c, 0x100, 0x80, 0x4, 0x5, 0x0, 0xe3a1, 0xffff, 0x17f, 0x4, 0x2, 0x6, 0x32c, 0x1000, 0x5, 0x4, 0xfffffff0, 0x3, 0x6, 0x7, 0x8, 0x9, 0x10, 0x6, 0x9, 0x915e, 0x7, 0x7, 0x738d, 0x10, 0x7, 0x1, 0xf, 0x7446, 0xfffffff9, 0x1, 0x7, 0xfffffff8, 0x9, 0xff, 0x0, 0x3, 0xe5, 0x2e2, 0x26210000, 0x3, 0x9, 0x40, 0xe, 0x7fffffff, 0x1, 0x4, 0x1, 0x75ee915a, 0x0, 0x1, 0x6, 0xa8ba, 0x0, 0x2, 0x5, 0x6, 0x7fff, 0x7ff, 0x4, 0x565, 0x80000000, 0x81, 0x7, 0xc, 0x0, 0xffffffff, 0x10, 0x2, 0xe, 0x5, 0x3, 0x8, 0x6, 0x9, 0x7, 0x2, 0x2, 0x3, 0x8, 0x6, 0x9, 0xb, 0x3, 0xb58d, 0x4, 0xfffffff8, 0xa9, 0x4, 0x9, 0xffff0000, 0x8, 0x7, 0x9, 0xfffffffa, 0x1, 0x7, 0x1, 0x7fffffff, 0x5, 0x8, 0x7b, 0xf, 0xc, 0xb08f, 0x5, 0x7ff, 0x2, 0xcaab, 0x9, 0x5, 0x7ff, 0x9, 0x3, 0x6, 0xffffff01, 0xd12, 0x3, 0x8, 0x6, 0x400, 0x3, 0x7, 0xa935, 0x300000, 0xa3, 0xc, 0x5, 0x5, 0x7ff, 0x7, 0x10000, 0x2, 0x8, 0x10001, 0x3ff, 0x3, 0x3, 0x3, 0x66a, 0x3, 0xff, 0x1ff, 0x6, 0x6, 0x6, 0x2, 0x80, 0x0, 0x8, 0x88c, 0x56c, 0x7, 0x98, 0x5, 0x2, 0x8, 0x8, 0x1, 0x7ff, 0x0, 0x5a3c, 0x7fffffff, 0x7, 0x9c, 0x1ff, 0xa00000, 0xffff, 0xd, 0xc6ea, 0xfff, 0x7ff, 0xc594, 0x3, 0x18, 0xa, 0x726c, 0x8, 0x3, 0xd71, 0xc, 0x9, 0x8, 0x2, 0x5, 0x0, 0x10, 0x0, 0xb9, 0x4, 0x9, 0xfff, 0x12, 0x7fff, 0x9, 0x8, 0x7fff, 0x9, 0xb4b, 0x6, 0x1, 0xa312, 0x553, 0x1, 0x0, 0xfffffffc, 0x2, 0xf, 0xe, 0x1, 0x3, 0x48, 0xf2, 0xa28, 0x4, 0xb3c, 0x4, 0xfffffffe, 0xf726, 0x0, 0x4, 0x80000000, 0x1, 0x8, 0xf4, 0x9, 0x2, 0x3, 0x8, 0x4, 0xfffffffe, 0x7, 0x7, 0x48, 0xf, 0xbab, 0xfffffe00, 0x2, 0x7fffffff, 0xfffffffc, 0x10000, 0x4, 0x36c, 0x1, 0x100, 0x3, 0x101, 0x7, 0x0, 0x6, 0x2, 0x5, 0x1, 0x800000, 0x4, 0x5, 0x100, 0x1000, 0x9, 0xde5c, 0x200, 0x80000001, 0xff, 0x0, 0xd, 0x4, 0x0, 0x7cbe8276, 0x3d4, 0x186, 0x1, 0x4, 0x6, 0xfffffffa, 0x1, 0xa000, 0x8, 0x3ad3125e, 0xfffff491, 0x81, 0x2, 0xffffff01, 0x800, 0x3ff, 0x39ae, 0xdf3, 0xe1d2, 0xffffee22, 0x1, 0x1000, 0x1a2f91b4, 0x6, 0x8, 0xfb3, 0x8, 0x3, 0x8, 0xc, 0x1, 0x152, 0xfffffff9, 0x2a, 0x5, 0xfff, 0x7fffffff, 0x4, 0x3000, 0x9, 0x8, 0x7fff, 0x10, 0x3, 0x8, 0x10, 0x57, 0xf, 0x8, 0x2, 0xff, 0xe1, 0xa9, 0x8, 0x8, 0x8c, 0x69e8, 0x130a, 0x4, 0x9, 0x80, 0x2, 0x8, 0x9, 0xfff, 0x7fff, 0x10000, 0x7ff80, 0x8, 0x2, 0x4, 0x90000000, 0x1, 0x7, 0xfffffffd, 0xa12, 0x7, 0xea8, 0x5bf8, 0x2, 0x6ab, 0x3, 0xf, 0xffff, 0x1, 0xfffffffb, 0x80000001, 0x80000001, 0x5, 0x0, 0x78, 0x8, 0x0, 0x0, 0x8001, 0x1, 0x6, 0x4, 0x7, 0x6, 0x400, 0x1, 0xb72, 0x0, 0x4800, 0xdd7f, 0x7, 0x6, 0x9, 0xe, 0x95f, 0x1ff, 0xe5, 0x37ae, 0x0, 0xa92, 0x4, 0x5, 0x9, 0x1, 0x6, 0x2, 0x3ff, 0x3b, 0xb, 0x4, 0x1, 0x12e7, 0x2, 0x10001, 0x7, 0xc5, 0x6, 0x5, 0x1, 0x1, 0x7fffffff, 0x5, 0xa1, 0xffffffff, 0x1, 0x1, 0x743, 0x1, 0x7, 0xffffe9fb, 0xb, 0x7, 0x1, 0x0, 0x100, 0xfffffff7, 0x0, 0x7ff, 0x1, 0x6, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1, 0x9, 0x5, 0x10001, 0x3, 0x8, 0x4, 0x3, 0xb4, 0x80000001, 0x1, 0xbe8b, 0x0, 0x9, 0x3, 0x81, 0x3, 0xdf8, 0x4, 0x71, 0x3, 0x3, 0x9, 0x4edc, 0x100, 0x8, 0x0, 0x2, 0x10, 0x8, 0x7, 0x7f, 0xa58, 0x6, 0x81, 0xfffffffa, 0x3, 0xff, 0xfffff000, 0x1237, 0x71a66a2a, 0x6, 0x1, 0x1, 0xcf0c, 0x4, 0x81, 0xff, 0x1, 0x698fdd79, 0xfffffffc, 0x8, 0x6, 0x7, 0x7f9a, 0x0, 0x0, 0x3, 0x6f5, 0xa, 0x6, 0xfffffffd, 0x2, 0x3, 0xffffffff, 0xfffffff3, 0x3, 0x6, 0x0, 0x200, 0x3cf5dd3d, 0x7, 0x1, 0xa, 0x200, 0x200, 0x92fe25b, 0xc, 0x1, 0x9, 0x81, 0x7, 0x7, 0x1000, 0xc651, 0xf, 0x3, 0x8, 0x6, 0x0, 0x0, 0x7fffffff, 0xffffffff, 0xffffffff, 0x5, 0xd02, 0x2, 0x7, 0x10001, 0x0, 0x9, 0x7, 0xfffffffb, 0x64e, 0x4403c5ae, 0xc, 0xfffffffc, 0x0, 0x3, 0x7f, 0x1, 0x4, 0x1, 0xfffffff6, 0x516, 0x5, 0x2, 0x200, 0xc3, 0x2b1c, 0x6, 0x4, 0x0, 0x81, 0x5, 0x6fa, 0x6, 0x2, 0x80000000, 0x6e7, 0x7f, 0x7, 0x8, 0xfffffff9, 0x3, 0x7f, 0x10000, 0x3, 0x6, 0x37, 0x89, 0x2, 0x2, 0x89a, 0xb, 0x80000000, 0x4, 0x10, 0x6, 0x1, 0x0, 0x5, 0xf8d9, 0x5, 0x2, 0x2, 0x9, 0x2, 0xb8, 0x74e2, 0x2, 0x3ff, 0x1, 0x9, 0x2, 0x1, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x2, 0x6, 0x1, 0x8, 0x7, 0x3, 0x7, 0x7, 0xf, 0x7ff, 0xffffffc6, 0x9, 0xcc9, 0x7, 0x5, 0xb0, 0xe4, 0x5, 0x80000001, 0xc410, 0x8000, 0x7fffffff, 0x3, 0x6, 0x1c000000, 0x101, 0x79, 0xfffffffb, 0x3, 0x1, 0xff, 0x6, 0x81, 0xfffffffc, 0x6, 0x30000, 0x6, 0x7, 0x6, 0x8, 0xc0e1, 0x5, 0x3, 0x6f, 0x5, 0x5, 0x800, 0x1, 0x80000000, 0x8, 0x81, 0x2, 0x9, 0x0, 0x7a8, 0x8e, 0x4, 0x1356, 0x3, 0x80000000, 0x8, 0x7, 0x81, 0x8, 0x1, 0x0, 0x5, 0xa, 0x1d, 0xa22, 0x5, 0xffffffc5, 0xc, 0xa, 0x7, 0x81, 0x2d063505, 0x223, 0xd7, 0x80000001, 0x5, 0xff, 0x4800000, 0x80000000, 0x8001, 0x8, 0x10, 0x9, 0x200, 0x5, 0xfffffffa, 0xd093, 0x3, 0x1, 0x3, 0x5, 0x5, 0x5, 0x589c1fd7, 0xd0f, 0x4, 0x0, 0xb55d, 0x920, 0x7f, 0x3ff, 0x4, 0x7, 0xfffffffd, 0x9, 0x0, 0xe, 0x3ff, 0x0, 0x5, 0x1, 0xffff4bfc, 0x1, 0x10001, 0xfe05, 0x5, 0x79, 0x1000, 0x9, 0x10000, 0xf8b9, 0x4, 0x3832, 0x1, 0xd, 0x81, 0x8, 0x5, 0xbd, 0x4, 0x800, 0x5, 0x826, 0xffffed29, 0x7f, 0x60b8, 0x200, 0x7, 0x6, 0x9, 0x101, 0x0, 0xfffffff8, 0x8, 0x8, 0x401, 0x5, 0x4d800000, 0xa44, 0x3, 0x6, 0xc00, 0x5, 0x2, 0x0, 0x3, 0x200, 0x1fc000, 0x3, 0x3, 0x5, 0x2, 0x8, 0xd, 0x1, 0x80000000, 0xbd1a, 0x0, 0x1, 0xfc4, 0x3, 0xfb1c, 0x42, 0x0, 0x400, 0x7, 0x8d7, 0xd, 0xfffffff9, 0x1, 0xc27a, 0x2, 0x5, 0x5, 0x101, 0x7, 0x0, 0x5, 0x7f, 0x2, 0x8, 0x8, 0x4, 0x8, 0x4, 0x7, 0x9, 0x1, 0x3, 0x3ff, 0x4b6, 0x9, 0x9, 0x3, 0x0, 0x5]})

3m0.525349594s ago: executing program 1 (id=1095):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119edabebbbc, 0x10010, r0, 0xebe3b000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119edabebbbc, 0x10010, r0, 0xebe3b000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x1004040, 0x0)
chroot(&(0x7f0000000180)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00')
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3m0.401061718s ago: executing program 1 (id=1097):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x21a8f5, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$nci(r1, &(0x7f0000000080)=@NCI_OP_CORE_RESET_RSP={0x0, 0x1, 0x2, 0x0, 0x6, {0x1, 0x1, 0x2}}, 0x6)

3m0.193357893s ago: executing program 1 (id=1099):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2100000052000100fd"], 0x18}, 0x1, 0x0, 0x0, 0x4000014}, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
ioctl$sock_ifreq(r1, 0x8932, &(0x7f0000001100)={'ipvlan1\x00', @ifru_names='vlan0\x00'})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2)
r3 = syz_usb_connect(0x0, 0x4bc, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x97, 0xfb, 0x92, 0x20, 0x5dc, 0xb002, 0x76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4aa, 0x2, 0xc3, 0x81, 0xcf867d5dc0db117, 0x3, [{{0x9, 0x4, 0x8c, 0x1, 0xb, 0xe7, 0x66, 0xa1, 0x40, [@hid_hid={0x9, 0x21, 0x0, 0x52, 0x1, {0x22, 0x5d0}}, @hid_hid={0x9, 0x21, 0x6, 0x9, 0x1, {0x22, 0x886}}], [{{0x9, 0x5, 0x9, 0x4, 0x10, 0xa2, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc2, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x9, 0x2, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0xd693ce0de22c2694, 0xd, 0x40}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x1, 0x9, 0x1, [@generic={0xb3, 0x31, "a8c0f8f8748b12d059abc1d59ac0724069a1fa20a1779fd5d8353828c3a1bc7f42b057f3bf5762fef7d83dc8762e2387cbc1cb30e2194203b1e2e329e2cb7661c01d398f36f73f873352b6d9c5a801809cdfef8e8c16f06c4e21eac528b16cf2512dd1c95d93d4757cb25d87fc4732e8d79c63171ecf32a2a825cb780781502cf7212d80077c123512ceb6d652a287903b36977515f447665189175f0dc443a74baaa5a19daec834fd22fb0bb3f9b0b59f"}, @generic={0xb4, 0x11, "5672e55c4ac27b4a9abacc3e4731a261a9a99f2ea16d052aa52d30c22394fead716a103e0b6d5110fd99f41627f4331b035ce6d351f923491cb9e6bdf5b27338c6db225988c894e02df49c6a7933e75320bc05cff99a2d4e600e8ea28e36550e35cdd2c24f92c3c5c9bf848d8b4e6144b60ee9a73bcf09b50ac611e8696027b864f1aaa0fc709a2d8119bec66a9a2372ca534edc95284773b842e094a1f41601ded74c4764bb27efc5c3c31d79e31199b1c9"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x0, 0x51, 0x10, [@generic={0x2e, 0xc, "d4cff21b30ca2d8e68ba8fab2c8065294ad3934a7558e9336789e710058e130244af594c8337a938e1c6626f"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x7, 0x0, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x1, 0xf8, 0x2, [@generic={0xaf, 0x10, "62850a2538f860f74f79576b980129302cc24b94da839512ef3187b25d4fdd961fa0da50f636badbc81a13b349e1617fc4ca057825ab544be02da486f9bc916b07ae4413c8b4ea4caec438dcf3d0086cb0b66ba7724dc2c3b3720cb9a524c9eae6643bbd4fbc47d1d98d6f1bf476385ee9d40ad9dda29ebf4d239c030ad93432a85c5f52e9f734bf3881411cbd3d54f92e0bc732a2641de3672d62902bc85f55b8d6e983b7c47ad3f88f3b5403"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xffff}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x10, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xa}]}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0x5, 0xda, 0xfb, [@generic={0xb9, 0x21, "cd3cc89aa209967e1bc571c2a75660efe6e09288f500232d3cf4036d4c768a35c7cf83123916c29b6b0cd692fe1b6681c0b8eb5d72306d3ab56d1bd9ea8507712778fb1cd5a7527dbed20a413116fa5345a2fc8182909576c19f7d6bed886f73ef891e947255ba81c93f25a980ff6fd13d6b019506906aee200d9d385a4df16ec6f9765bc2870d1416696430f696d9c2adbb48a442f42fae921db81b8e2218d650cd95507544a157046fdc0a4dcf984381ecf444859675"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0x4, 0xb, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x30, 0x6}]}}, {{0x9, 0x5, 0x80, 0x11, 0x400, 0xb, 0x0, 0x4, [@generic={0x68, 0x11, "72af3808f97d82e7687ac10ddf2a4b823c968381cca60e81dec4795a07506bea5adfec5621104d4a472a4c0b129760705b132521a9e956d433715ed945e71f25929472c11c291eef5a010d284ac4e6bfd86f3b6fcd341220862944c97449621756e1e6bd0e75"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x70, 0x9, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x3}]}}]}}, {{0x9, 0x4, 0xe5, 0x5, 0x2, 0xff, 0xff, 0xff, 0xc9, [@hid_hid={0x9, 0x21, 0xfa20, 0xb, 0x1, {0x22, 0x7ce}}], [{{0x9, 0x5, 0x8, 0xc, 0x200, 0xa0, 0x81, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x98, 0x6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x4b, 0x6, 0x6, [@generic={0x54, 0x5, "6551ec742accc13a807a723b47c4c796612ec12e47ecd94f5ffa1265aaa33c6f5a197b8ad24dbf267aa71b92b7a0fe112c8c3bd18b43f01948f8f9ef31d7dbda0aa41ea190c68a2c35bf89864f21737c90f3"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x3}]}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x8, 0xf, 0x0, 0x8, 0x8}, 0xb3, &(0x7f0000000180)={0x5, 0xf, 0xb3, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x8, 0x1, 0x81, 0x2}, @generic={0x6d, 0x10, 0x2, "68c9e8d9f601e402eb255a2d9e6e763388a306e72a654dd44f18f5a59085cfa96cf63842e5901b8a71a3cd273dc50a0a2e91b3ad9bb5720db6a4d55ac1103e3e9abde8773319addbeaa3e9a8b981a8662a3032195227840d6d19ee0bac0510e64d7d7e443cc233440904"}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0xc, 0xf00, 0x4, [0x6000]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0xa, 0xff00, 0x40, [0xc000, 0x180, 0xc0, 0x7, 0x30]}]}, 0x3, [{0xd0, &(0x7f0000000240)=@string={0xd0, 0x3, "5d9c8ba338a1ab04ad701fccaadd4d51442674d67be17c38f3e97147b0871aa83290cc81827cf0103537b537c7134ba0f8c48c82d48631c41dc9caede545bc5d8863d22432d5fc985312b2d7add72bc06575bd69218e62bc609acd78888554ecb5918d2d279e058837516cf27d362dca2a48c57a206020359f3b5c5f31d6a61e99e6f2637a30a7654dd21c7109eb256653e19001fda1f7a1b4cad5e8628c38f1328d34e10e65456674ac20e42fc91423df78626dd28bfaf93c2ff2fb8fabeec607cff1568cdb6fc293957d062fd0"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4c0a}}]})
syz_usb_control_io(r3, &(0x7f0000000b40)={0x2c, &(0x7f0000000400)={0x40, 0xe, 0xc5, {0xc5, 0x32, "8f181b025d59288bec9e5a2ac2d307112f8023d9f556957ad50f7c850e528fc15c71677a8703affb269d55f8c8e69d26f283abc826df14d47c70870a0b80a338cec2a533069950277f41ae0daabff9d563cdbc990fbc60040102704c30f579c6b0b4b83adf5b0ae0d7e46881fe04e9585caf2836588da3bcd746c903d1d17132f9b30fe84c4426e46e7c46a97e86ac1bc7fbbe80149acaf44ea08bd403bb494ff9acf20c90b82f655115969c3139997f5458c57ad6c2a9be53b2336da33ab72a12c17d"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}, &(0x7f0000000a80)=ANY=[@ANYBLOB="000f74000000040f7400031410040365fa207ccd4017c4187b143ee33060025110016232e74b2eaa11e4010f59a3cdd5eb1d8c3d809471a4f9f8e68788ac87f8de729288b52b25d9667c12df4ab07c259dbcdb2357da04f09aee5f757ae612ebd48d66e0f7bb27bdf3885d9117a325d90a100302040000000000"], &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x8, 0x2, "5f98a6ac", "50c124a4"}}, &(0x7f0000000b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x7, 0x10, 0xe, 0xd5, 0x2}}}, &(0x7f0000001040)={0x84, &(0x7f0000000b80)={0x40, 0x5, 0xcc, "e3e6befdca4a38dee7b693f626256d57824e2151f4b4d2f737feb12204a8447a0b63f0d05d593b6abf102c3560408ca709830f0ad044ac009017ac9f063c6b2c4cec83f7fee89411ea988648cf56c6552c4aeb88a2db70a02c08d0aebae202168f433bb1331b5191385d65c33ab81dd85eeaf67f12f2d8aec27bb0bad1c72c83e1d1a03c5795605071a05e09d42102b06668f19c10425a6fa128544f8c7ac61fcd1ae28a607e9f610547a7698a81beb6ae193d09096334796561f1cd86afae03b1698abbeeddc49ac9e0fc93"}, &(0x7f0000000c80)={0x0, 0xa, 0x1}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x10, 0x40}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "19ad"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000f00)={0x40, 0x19, 0x2, "9768"}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0xe}})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05630000000000000109"], 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2)
syz_usb_disconnect(r4)

3m0.083212198s ago: executing program 34 (id=1099):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2100000052000100fd"], 0x18}, 0x1, 0x0, 0x0, 0x4000014}, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
ioctl$sock_ifreq(r1, 0x8932, &(0x7f0000001100)={'ipvlan1\x00', @ifru_names='vlan0\x00'})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2)
r3 = syz_usb_connect(0x0, 0x4bc, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x97, 0xfb, 0x92, 0x20, 0x5dc, 0xb002, 0x76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4aa, 0x2, 0xc3, 0x81, 0xcf867d5dc0db117, 0x3, [{{0x9, 0x4, 0x8c, 0x1, 0xb, 0xe7, 0x66, 0xa1, 0x40, [@hid_hid={0x9, 0x21, 0x0, 0x52, 0x1, {0x22, 0x5d0}}, @hid_hid={0x9, 0x21, 0x6, 0x9, 0x1, {0x22, 0x886}}], [{{0x9, 0x5, 0x9, 0x4, 0x10, 0xa2, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc2, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x9, 0x2, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0xd693ce0de22c2694, 0xd, 0x40}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x1, 0x9, 0x1, [@generic={0xb3, 0x31, "a8c0f8f8748b12d059abc1d59ac0724069a1fa20a1779fd5d8353828c3a1bc7f42b057f3bf5762fef7d83dc8762e2387cbc1cb30e2194203b1e2e329e2cb7661c01d398f36f73f873352b6d9c5a801809cdfef8e8c16f06c4e21eac528b16cf2512dd1c95d93d4757cb25d87fc4732e8d79c63171ecf32a2a825cb780781502cf7212d80077c123512ceb6d652a287903b36977515f447665189175f0dc443a74baaa5a19daec834fd22fb0bb3f9b0b59f"}, @generic={0xb4, 0x11, "5672e55c4ac27b4a9abacc3e4731a261a9a99f2ea16d052aa52d30c22394fead716a103e0b6d5110fd99f41627f4331b035ce6d351f923491cb9e6bdf5b27338c6db225988c894e02df49c6a7933e75320bc05cff99a2d4e600e8ea28e36550e35cdd2c24f92c3c5c9bf848d8b4e6144b60ee9a73bcf09b50ac611e8696027b864f1aaa0fc709a2d8119bec66a9a2372ca534edc95284773b842e094a1f41601ded74c4764bb27efc5c3c31d79e31199b1c9"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x0, 0x51, 0x10, [@generic={0x2e, 0xc, "d4cff21b30ca2d8e68ba8fab2c8065294ad3934a7558e9336789e710058e130244af594c8337a938e1c6626f"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x7, 0x0, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x5}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x1, 0xf8, 0x2, [@generic={0xaf, 0x10, "62850a2538f860f74f79576b980129302cc24b94da839512ef3187b25d4fdd961fa0da50f636badbc81a13b349e1617fc4ca057825ab544be02da486f9bc916b07ae4413c8b4ea4caec438dcf3d0086cb0b66ba7724dc2c3b3720cb9a524c9eae6643bbd4fbc47d1d98d6f1bf476385ee9d40ad9dda29ebf4d239c030ad93432a85c5f52e9f734bf3881411cbd3d54f92e0bc732a2641de3672d62902bc85f55b8d6e983b7c47ad3f88f3b5403"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xffff}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x10, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xa}]}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0x5, 0xda, 0xfb, [@generic={0xb9, 0x21, "cd3cc89aa209967e1bc571c2a75660efe6e09288f500232d3cf4036d4c768a35c7cf83123916c29b6b0cd692fe1b6681c0b8eb5d72306d3ab56d1bd9ea8507712778fb1cd5a7527dbed20a413116fa5345a2fc8182909576c19f7d6bed886f73ef891e947255ba81c93f25a980ff6fd13d6b019506906aee200d9d385a4df16ec6f9765bc2870d1416696430f696d9c2adbb48a442f42fae921db81b8e2218d650cd95507544a157046fdc0a4dcf984381ecf444859675"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0x4, 0xb, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x30, 0x6}]}}, {{0x9, 0x5, 0x80, 0x11, 0x400, 0xb, 0x0, 0x4, [@generic={0x68, 0x11, "72af3808f97d82e7687ac10ddf2a4b823c968381cca60e81dec4795a07506bea5adfec5621104d4a472a4c0b129760705b132521a9e956d433715ed945e71f25929472c11c291eef5a010d284ac4e6bfd86f3b6fcd341220862944c97449621756e1e6bd0e75"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x9}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x70, 0x9, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x3}]}}]}}, {{0x9, 0x4, 0xe5, 0x5, 0x2, 0xff, 0xff, 0xff, 0xc9, [@hid_hid={0x9, 0x21, 0xfa20, 0xb, 0x1, {0x22, 0x7ce}}], [{{0x9, 0x5, 0x8, 0xc, 0x200, 0xa0, 0x81, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x98, 0x6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x4b, 0x6, 0x6, [@generic={0x54, 0x5, "6551ec742accc13a807a723b47c4c796612ec12e47ecd94f5ffa1265aaa33c6f5a197b8ad24dbf267aa71b92b7a0fe112c8c3bd18b43f01948f8f9ef31d7dbda0aa41ea190c68a2c35bf89864f21737c90f3"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x3}]}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x8, 0xf, 0x0, 0x8, 0x8}, 0xb3, &(0x7f0000000180)={0x5, 0xf, 0xb3, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x8, 0x1, 0x81, 0x2}, @generic={0x6d, 0x10, 0x2, "68c9e8d9f601e402eb255a2d9e6e763388a306e72a654dd44f18f5a59085cfa96cf63842e5901b8a71a3cd273dc50a0a2e91b3ad9bb5720db6a4d55ac1103e3e9abde8773319addbeaa3e9a8b981a8662a3032195227840d6d19ee0bac0510e64d7d7e443cc233440904"}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0xc, 0xf00, 0x4, [0x6000]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0xa, 0xff00, 0x40, [0xc000, 0x180, 0xc0, 0x7, 0x30]}]}, 0x3, [{0xd0, &(0x7f0000000240)=@string={0xd0, 0x3, "5d9c8ba338a1ab04ad701fccaadd4d51442674d67be17c38f3e97147b0871aa83290cc81827cf0103537b537c7134ba0f8c48c82d48631c41dc9caede545bc5d8863d22432d5fc985312b2d7add72bc06575bd69218e62bc609acd78888554ecb5918d2d279e058837516cf27d362dca2a48c57a206020359f3b5c5f31d6a61e99e6f2637a30a7654dd21c7109eb256653e19001fda1f7a1b4cad5e8628c38f1328d34e10e65456674ac20e42fc91423df78626dd28bfaf93c2ff2fb8fabeec607cff1568cdb6fc293957d062fd0"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4c0a}}]})
syz_usb_control_io(r3, &(0x7f0000000b40)={0x2c, &(0x7f0000000400)={0x40, 0xe, 0xc5, {0xc5, 0x32, "8f181b025d59288bec9e5a2ac2d307112f8023d9f556957ad50f7c850e528fc15c71677a8703affb269d55f8c8e69d26f283abc826df14d47c70870a0b80a338cec2a533069950277f41ae0daabff9d563cdbc990fbc60040102704c30f579c6b0b4b83adf5b0ae0d7e46881fe04e9585caf2836588da3bcd746c903d1d17132f9b30fe84c4426e46e7c46a97e86ac1bc7fbbe80149acaf44ea08bd403bb494ff9acf20c90b82f655115969c3139997f5458c57ad6c2a9be53b2336da33ab72a12c17d"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}, &(0x7f0000000a80)=ANY=[@ANYBLOB="000f74000000040f7400031410040365fa207ccd4017c4187b143ee33060025110016232e74b2eaa11e4010f59a3cdd5eb1d8c3d809471a4f9f8e68788ac87f8de729288b52b25d9667c12df4ab07c259dbcdb2357da04f09aee5f757ae612ebd48d66e0f7bb27bdf3885d9117a325d90a100302040000000000"], &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x8, 0x2, "5f98a6ac", "50c124a4"}}, &(0x7f0000000b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x7, 0x10, 0xe, 0xd5, 0x2}}}, &(0x7f0000001040)={0x84, &(0x7f0000000b80)={0x40, 0x5, 0xcc, "e3e6befdca4a38dee7b693f626256d57824e2151f4b4d2f737feb12204a8447a0b63f0d05d593b6abf102c3560408ca709830f0ad044ac009017ac9f063c6b2c4cec83f7fee89411ea988648cf56c6552c4aeb88a2db70a02c08d0aebae202168f433bb1331b5191385d65c33ab81dd85eeaf67f12f2d8aec27bb0bad1c72c83e1d1a03c5795605071a05e09d42102b06668f19c10425a6fa128544f8c7ac61fcd1ae28a607e9f610547a7698a81beb6ae193d09096334796561f1cd86afae03b1698abbeeddc49ac9e0fc93"}, &(0x7f0000000c80)={0x0, 0xa, 0x1}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x10, 0x40}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "19ad"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000f00)={0x40, 0x19, 0x2, "9768"}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0xe}})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05630000000000000109"], 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2)
syz_usb_disconnect(r4)

2m43.689166777s ago: executing program 6 (id=1171):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
r5 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0285628, &(0x7f0000000040)={0x3, 0x2})
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000280)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000012c0)=ANY=[@ANYRES8=r6, @ANYRESDEC=r4, @ANYBLOB="310300000000000020000800000008000300", @ANYBLOB="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", @ANYRESDEC=r4, @ANYRES32=r4], 0x24}}, 0x0)
pwritev2(r2, &(0x7f0000000b00)=[{&(0x7f0000000780)="8d", 0x1}], 0x1, 0xffffffff, 0x1, 0x3) (async)
pwritev2(r2, &(0x7f0000000b00)=[{&(0x7f0000000780)="8d", 0x1}], 0x1, 0xffffffff, 0x1, 0x3)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0xb0000017}) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0xb0000017})
r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/mdstat\x00', 0x0, 0x0)
preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0) (async)
preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r8, 0x4008af13, &(0x7f0000000000)={0x3, 0xc931}) (async)
ioctl$VHOST_SET_VRING_ENDIAN(r8, 0x4008af13, &(0x7f0000000000)={0x3, 0xc931})
r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb7, 0x100010, r0, 0x52fbd000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb7, 0x100010, r0, 0x52fbd000)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r9, 0x4018aee2, &(0x7f0000001280)=@attr_pmu_filter={0x0, 0x1, 0x1, 0x0}) (async)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r9, 0x4018aee2, &(0x7f0000001280)=@attr_pmu_filter={0x0, 0x1, 0x1, 0x0})

2m43.521797655s ago: executing program 6 (id=1172):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x48, 0x0, 0x2, "b49e1b6225be4279fa07fbde4749573e7c17e6e724ae09b9424f5ab23870ecd4"})
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
r3 = fcntl$dupfd(r2, 0x406, r1)
write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x1400000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
r4 = msgget$private(0x0, 0x1c0)
msgctl$IPC_SET(r4, 0x1, &(0x7f0000258f88))
msgsnd(r4, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000b2c000/0x1000)=nil, 0x1000, 0x19)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
fstat(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
msgctl$IPC_SET(r4, 0x1, &(0x7f0000000240)={{0x2, r5, 0x0, 0x0, 0x0, 0x100, 0x3}, 0x0, 0x0, 0x7, 0x8, 0x9, 0x6, 0x10, 0x1, 0xe0d, 0xd})

2m40.317225153s ago: executing program 6 (id=1184):
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
r1 = socket(0x2c, 0x3, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbe000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
sigaltstack(0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
shutdown(r1, 0x0)

2m40.126036297s ago: executing program 6 (id=1186):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffff9, 0x3a, 'F!\x14', 0x3a, '}', 0x3a, './file0'}, 0x2b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x4602, 0x0)
socketpair$tipc(0x1e, 0xc0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0))
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000003f0007017393a6df48e3831f013c0000040042800c00018006000600800a00000800028004001580"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0)
timer_create(0x3, 0x0, &(0x7f0000044000))
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$poke(0x4, r4, &(0x7f0000001040), 0x282d)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r5 = gettid()
timer_create(0x7, &(0x7f0000000780)={0x0, 0x3f, 0x4, @tid=r5}, &(0x7f0000000000)=<r6=>0x0)
clock_gettime(0x5, &(0x7f0000000800)={<r7=>0x0, <r8=>0x0})
timer_settime(r6, 0x1, &(0x7f0000000840)={{r7, r8+10000000}, {0x0, 0x989680}}, 0x0)
rt_sigaction(0x3f, &(0x7f0000000940)={&(0x7f00000008c0)="c46279340cdbc4c261ad9a0c000000c4c2d503f264430fae54bcc0660f638d9b540000c482c5ac2c566742d0430366f30fbae70040d9fa90", 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f0000000a80))
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x2000)
madvise(&(0x7f000009e000/0x3000)=nil, 0x3000, 0x9)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000440)=ANY=[@ANYBLOB="0400000000000000810000000500000001000000000000000100000000000000faffffffffffffff010001000000000005000000070000000300000001000000000000000000000000000000000000000000000000000000010000001452973d010000000000000000000000020000000000000000000000000000000000000000001e0000000000000001000000000000000000000000000000000000000000000000000000000100"/186])

2m39.984554764s ago: executing program 6 (id=1187):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}})
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xa6)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x1ce)
r2 = socket$xdp(0x2c, 0x3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11)

2m37.881044982s ago: executing program 6 (id=1191):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000)
mkdir(&(0x7f0000000440)='./file1\x00', 0x112)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x100008, &(0x7f0000000480)='usr1uota\x1f5@\xee\x9b=\xe9_\x0e\xb8\xe3\xb2\xea_ak\"\x1e\x8a&D\xc0\x06\f\x18c\x88\xb1\xac\xae\xc9\xf0\x05#\xa8x\xa8\xd9y\xad\r\x8d\"y\xbcmJ\xbeN4\x9a)\xa7\xa6\x11\xc2\b\x02\xc1\xdasB<a\x04\xcb\xaf0\xc2\xcf\xe3\xff\xcc\xd2\x95B\\@/\x80]\xbe\xe5^R\r\xbbXr\xf4./\xb2\x1fr\xb1}v\x85#G)\x16\x01\x8d\xb5D\xa6\xee\xa8\xc0\xb4%\xb7e\xd3H7\x06\xa6P\xc4\x15\x99\xa6\x00U\x13\x03#\xd3,\xac\x1f]\xfe\x81\x1e\xe9\xa0\x1aDv\xdaT\xf4^W\xc1\xf6\x94\xe0x6\x9e\xe9\xc5\x1a\xe6U\xd4\x03\x8a\x1b\xd9\xd2\xea\x18\xbb\x85\x93\x04\x03\x0e\xff\x89\x11\xa6\xdaJ\x01\v')
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000100)={0x1, 'team_slave_1\x00', {}, 0xe8df})
getpid()
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r5, 0x5708e000)

2m37.648926011s ago: executing program 35 (id=1191):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000)
mkdir(&(0x7f0000000440)='./file1\x00', 0x112)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x100008, &(0x7f0000000480)='usr1uota\x1f5@\xee\x9b=\xe9_\x0e\xb8\xe3\xb2\xea_ak\"\x1e\x8a&D\xc0\x06\f\x18c\x88\xb1\xac\xae\xc9\xf0\x05#\xa8x\xa8\xd9y\xad\r\x8d\"y\xbcmJ\xbeN4\x9a)\xa7\xa6\x11\xc2\b\x02\xc1\xdasB<a\x04\xcb\xaf0\xc2\xcf\xe3\xff\xcc\xd2\x95B\\@/\x80]\xbe\xe5^R\r\xbbXr\xf4./\xb2\x1fr\xb1}v\x85#G)\x16\x01\x8d\xb5D\xa6\xee\xa8\xc0\xb4%\xb7e\xd3H7\x06\xa6P\xc4\x15\x99\xa6\x00U\x13\x03#\xd3,\xac\x1f]\xfe\x81\x1e\xe9\xa0\x1aDv\xdaT\xf4^W\xc1\xf6\x94\xe0x6\x9e\xe9\xc5\x1a\xe6U\xd4\x03\x8a\x1b\xd9\xd2\xea\x18\xbb\x85\x93\x04\x03\x0e\xff\x89\x11\xa6\xdaJ\x01\v')
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000100)={0x1, 'team_slave_1\x00', {}, 0xe8df})
getpid()
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r5, 0x5708e000)

27.149443543s ago: executing program 7 (id=1795):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x244)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0)

26.956397609s ago: executing program 4 (id=1796):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/183, 0xb7}, {&(0x7f0000000d80)=""/255, 0xff}, {&(0x7f0000002fc0)=""/4067, 0xfe3}, {&(0x7f00000004c0)=""/236, 0xec}, {&(0x7f0000000000)=""/141, 0x8d}, {&(0x7f0000000740)=""/225, 0xe1}], 0x6}, 0xe68e}], 0x4, 0x10100, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r1, 0xd6baf000)
mremap(&(0x7f00000c0000/0xa000)=nil, 0xa000, 0x2000, 0x3, &(0x7f00000b4000/0x2000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)

26.954802853s ago: executing program 7 (id=1798):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800)
r0 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f00000003c0)={0x0, "9ecad92a17d6ac5045e3ade29f28bd6af5e44e631a4702a428f50287378eef4ec6c408956f3da90d6001df99e2a82b761f900e9c0942e2d1e01d4766c4ad2cf7", 0x25}, 0x48, 0xfffffffffffffffc)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x24140, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, 0xd, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x4008000)
r6 = fanotify_init(0x0, 0x400)
ppoll(&(0x7f0000000940)=[{r6, 0x4094}], 0x1, &(0x7f0000000980)={0x0, 0x3938700}, 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
tee(r7, r8, 0xfffffffffffffc01, 0x0)
write$dsp(r8, &(0x7f0000000240)="fec9014772dc83fb139f96b418fb9662e79774b844820ece73e74aa75c806c04cdc308fc4a649334eccb01410847368d33f8b8d5a283874e19cb5d66ee114db321872cb26b06a24b5722a53bff3a58aa1577e1b744d21c01e30985a762facf5dfa86df45495b7426b7aadcff1e09191c84cff2b5686b277f26d8903d288c9497be0e86d727611cc18cc612e81efc8cfc270e7d2c00c6ccf128b2b4759b8eded1429af2ea8e89f449c7fc403a9b593109d16c6fb88f7a", 0xb6)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
r10 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000b40)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d650e00b4075db8419d9e6d17b1eec4dfb860a7d7b4021d3459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r10)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r10)
r11 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080))
socket$inet_udp(0x2, 0x2, 0x0)
close(0x4)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r11}})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)
r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r12, 0x5708e000)

26.809560822s ago: executing program 4 (id=1800):
msgctl$IPC_SET(0x0, 0x1, 0x0)
msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3}, 0x0, 0x0, 0x7, 0x8, 0x9, 0x6, 0x10, 0x1, 0xe0d, 0xd})
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x21}, @l2cap_cid_signaling={{0x1d}, [@l2cap_move_chan_rsp={{0xf, 0x7f, 0x4}, {0xc0, 0x2}}, @l2cap_conn_req={{0x2, 0x9, 0x4}, {0x9, 0x1}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0x8}}, @l2cap_move_chan_req={{0xe, 0x4, 0x3}, {0x9, 0xa}}]}}, 0x26)

25.944162698s ago: executing program 7 (id=1801):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x11}, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in=@local}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xcd}, {{@in=@dev, 0x1, 0x33}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x9}]}]}, 0x1bc}}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)

25.878901924s ago: executing program 7 (id=1802):
openat$rnullb(0xffffffffffffff9c, 0x0, 0x101342, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000000), 0x1, 0x400)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket(0xa, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0x1c, 0x3d, 0x10, 0x67b, 0x331a, 0x4a31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0xa1, 0x0, 0x0, 0xc2, 0x16, 0x2}}]}}]}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x802, 0x88)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000240)=[0x2], 0x0, &(0x7f0000000280)=[0x7fffffff]})

25.839539438s ago: executing program 4 (id=1803):
r0 = socket(0x1a, 0x80000, 0x3)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x5b0}, 0x1, 0x0, 0x0, 0x4890}, 0x20008040)
syz_usb_connect(0x0, 0x3b, &(0x7f00000040c0)=ANY=[@ANYBLOB="1201a107a171fe103c419b81c9cf010203010902290001fa0900e309045804000206000f0524060000052400f8ff0d240f"], &(0x7f0000004ac0)={0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_stats})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="8eec320121070cba0225400c2b10e05779a335a6eff94db8a513d38a5b0e4d947a803d2af50515e3652ed16d5e6095e310a4d877c62440229b8f3d85cabad1ed0518f224c3c07a0a65d488cdd7af5b8c8ed0ca7db59c6a43025337fe529fc69fc2b4e4d67892aa1a90fca5c3dc0c8866a1b0cb6cf01361ef8fe2dbbf046bb3041f2bba2d1819ca519924661cb50b13efa08c1c564faf0171a51e9fff47032e572ba39c8b39c403c32b4624b71fc94ea53626e0e7674339ca", 0xb8}], 0x1}, 0x4000014)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000004c0)={0x0, 0x4, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil})
r3 = dup(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'virt_wifi0\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0)
ioctl$BLKPG(r7, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000400)={0x0, 0x8000, 0x10}})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f30f0ddf66b9170800000f322c00660f18d766b87c7300000f23c80f21f866350c0090000f23f82ee1d66526f30f2ce226360f01ca0f070fc7bc0400", 0x3c}], 0x1, 0x4c, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00443cfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef)

23.186411929s ago: executing program 2 (id=1808):
creat(&(0x7f0000000000)='./file0\x00', 0x1ea)

23.144419117s ago: executing program 2 (id=1809):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x57789000)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e23}}, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00')
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x11}, 0x20000001)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r5, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x204000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x1040, 0x2b, 0x400, 0x70bd2a, 0x25dfdbfe, {0x5}, [@generic="db7084a3a92a418995c266703162939de4e3cc9121f7", @typed={0xc, 0x117, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0xef, 0x0, 0x0, @pid=r5}, @generic="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"]}, 0x1040}, 0x1, 0x0, 0x0, 0x40000c1}, 0x1)

22.860155066s ago: executing program 2 (id=1810):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x1, 0x102, 0x0, {0x1, 0x3, 0x7fff, 0x4}})
mkdir(&(0x7f0000000140)='./file0\x00', 0x108)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x83, &(0x7f00000011c0), &(0x7f0000000180)=0x8)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000280)=""/68, 0x44}], 0x1, 0x6, 0x8001)
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f00000000c0)={[&(0x7f0000000200)='/dev/rnullb0\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='/dev/rnullb0\x00']})

22.725478281s ago: executing program 7 (id=1811):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x8}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@mpls_mc={0x8848, {[], @ipv6=@tipc_packet={0x6, 0x6, "113667", 0x28, 0x6, 0x0, @mcast1, @mcast2, {[], @payload_named={{{{{0x28, 0x0, 0x1, 0x1, 0x0, 0xa, 0x2, 0x2, 0x1, 0x0, 0x2, 0x7, 0x4, 0x2, 0xe5, 0x1, 0x3, 0x4e21, 0x4e24}, 0x0, 0x2}, 0x1, 0x3}}}}}}}}}}, 0x6a)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, <r3=>0x0})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000)

22.659504231s ago: executing program 2 (id=1812):
mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./cgroup/../file0\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/../file0\x00', 0x145080, 0x12)
fspick(r1, &(0x7f0000000100)='./cgroup/../file0\x00', 0x1)

22.596462312s ago: executing program 5 (id=1813):
r0 = socket(0x10, 0x3, 0x0)
bind$inet(r0, &(0x7f0000000700)={0x2, 0x4e23, @multicast1}, 0x10)
msgctl$IPC_SET(0x0, 0x1, 0x0)
msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0)
mmap(&(0x7f000078f000/0x1000)=nil, 0x1000, 0x9, 0x10, r0, 0x0)
r1 = socket(0x1f, 0x3, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000040), 0x6, 0x2b6d5ceda394b468)
r3 = msgget$private(0x0, 0x240)
msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYRES16], 0x2000, 0x0)
msgctl$IPC_STAT(r3, 0x2, &(0x7f00000002c0)=""/87)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000100))
r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendfile(r1, r4, 0x0, 0x9)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001800010000000000fbdbdf251d010900d0008a4b45d58a1459f83b677860fa3abf9ff2a8a0467293adca34730159ba42e52f4276b61b348588ca99d4702fcf0b4fde73a233605129c577de8bbebd30482827db320b72250a97d35767656bbf11bd58e8ced653e10277"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x146, 0x3}, 0x0, 0x0, 0x7, 0x8, 0x9, 0x6, 0x10, 0xffff, 0xe0d, 0xd})

21.713099039s ago: executing program 5 (id=1814):
ioprio_set$pid(0x1, 0x0, 0x0)
munmap(&(0x7f0000012000/0x4000)=nil, 0x4000)
get_mempolicy(0x0, 0x0, 0xa, &(0x7f0000012000/0x4000)=nil, 0x3)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x18f2, 0x0, &(0x7f0000000040), &(0x7f0000000140))
r1 = userfaultfd(0x1)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00009ca000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$kcm(0x2d, 0x2, 0x0)
r3 = socket$kcm(0x2d, 0x2, 0x0)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00')
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x2000})
mmap$KVM_VCPU(&(0x7f0000015000/0x5000)=nil, r4, 0x1, 0x30, r5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000380)={<r6=>r2})
read(r0, 0x0, 0x0)
bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xa}, 0x10)
close(r0)
r7 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1abf0737765c88b0)
dup2(r7, r2)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
read(r9, 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r11, r11, 0x0, 0x7ffff000)

21.70550497s ago: executing program 4 (id=1822):
msgctl$IPC_SET(0x0, 0x1, 0x0)
msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x300, 0x3}, 0x0, 0x0, 0x7, 0x8, 0x9, 0x6, 0x10, 0x1, 0xe0d, 0xd})

21.694790756s ago: executing program 2 (id=1815):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="8eec320121070cba0225400c2b10e05779a335a6eff94db8a513d38a5b0e4d947a803d2af50515e3652ed16d5e6095e310a4d877c62440229b8f3d85cabad1ed0518f224c3c07a0a65d488cdd7af5b8c8ed0ca7db59c6a43025337fe529fc69fc2b4e4d67892aa1a90fca5c3dc0c8866a1b0cb6cf01361ef8fe2dbbf046bb3041f2bba2d1819ca519924661cb50b13efa08c1c564faf0171a51e9fff47032e572ba39c8b39c403c32b4624b71fc94ea53626e0e7674339ca", 0xb8}], 0x1}, 0x4000014)
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00443cfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) (fail_nth: 9)

20.628998376s ago: executing program 5 (id=1816):
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCSBRK(r0, 0x5409, 0x7) (async)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x9, 0x81}, {0x2, 0x2}, {0x7, 0xffff}, {0x2, 0x4}]}) (async, rerun: 32)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=<r1=>0x0) (rerun: 32)
capset(&(0x7f00000000c0)={0x19980330, r1}, &(0x7f0000000100)={0x1, 0x6, 0xffffffff, 0x1, 0x4, 0x1}) (async, rerun: 64)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={<r2=>r0, 0x8, 0x81}) (rerun: 64)
close_range(r2, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r2, {0x4}}, './file0\x00'})
ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000003c0)={&(0x7f0000000380)=[{0x3, 0x4800, 0x8, &(0x7f00000001c0)="3a401d594a628a5a"}, {0x100, 0x9810, 0x57, &(0x7f0000000200)="8356c15d8836923d6a46ca753aa0a8e2a41df2c24e5cadcfd6871a5f3a4c41d1a2146962d6dddc6a387da978f37bcd5038a4616829343595d5ae429e43be117f02938586964165e9b938195bdcdb50e1fa0d4a38634977"}, {0x8, 0xc410, 0xdc, &(0x7f0000000280)="4e29d1a021f95c139e3f340592a2505de4a1d3a1c462b5102862e0ff4fd3bf55df1a9325c5797b99e6b4ea110585b47ea677e4197d2b8cf522de285c1382eea67df527bcae3a2f365fbea87eaeeffdbfc9751be0a059521b6c410d0a74d592930710d0bf29c3494c13352c9f286476909009dae9535b300ea493816261d83123bfea965730cf1f669e239df76e610436dcddd35a78cf0b3da877f5cd86603baded65f21a1273fabe75b79497e0643fb75afda38c18a49503a6eeef28c553c2923ceea8081ba54fbdcaf918177196efbe560523cb487c23dae65404d5"}], 0x3}) (async, rerun: 64)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000400)=0x80a0000) (async, rerun: 64)
ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x5) (async)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r5)
ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f00000004c0)={0x6, 0x4})
r6 = dup2(r4, r0)
preadv(r6, &(0x7f0000001600)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2, 0x9, 0xfffffffa) (async)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000001640)={0xa, 0x0, [{0x100000, 0x1, 0x0, 0x0, @sint={0x4}}, {0xc0e, 0x1, 0x0, 0x0, @msi={0x0, 0x2, 0x1ec, 0x7}}, {0x7, 0x3, 0x1, 0x0, @msi={0x6, 0x9, 0x2, 0x24000}}, {0x8, 0x5, 0xc12491389b03b4e8, 0x0, @adapter={0x6, 0x7fff, 0x7, 0x2, 0x3ff}}, {0x7, 0x2, 0x1, 0x0, @adapter={0x7, 0x6, 0xe85, 0x272, 0x2}}, {0x3, 0x1, 0x1, 0x0, @sint={0x401, 0x4}}, {0xcb1, 0x3, 0x0, 0x0, @sint={0x40, 0xfffffff9}}, {0xfffffe00, 0x3, 0x1, 0x0, @msi={0x7ff, 0x3, 0xfffff800, 0x5}}, {0xffffffaf, 0x2, 0x1, 0x0, @msi={0x10000, 0x1, 0xc7, 0x8}}, {0x0, 0x5, 0x1, 0x0, @irqchip={0xfffffffe, 0x6}}]})
ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f0000001840)) (async, rerun: 64)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (rerun: 64)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000001900)=@attr_other={0x0, 0xdd, 0xfffffffffffffff7, &(0x7f00000018c0)=0xfffffffffffffffb})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) (async)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000001980)) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r3)
r7 = open$dir(&(0x7f0000001a00)='./file0\x00', 0x40040, 0x100)
openat(r7, &(0x7f0000001a40)='./file0\x00', 0x400100, 0x61) (async)
write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000001c00)={0xc, 0x8, 0xfa00, {&(0x7f0000001a80)}}, 0x10) (async)
r8 = signalfd4(r3, &(0x7f0000001c40)={[0x1]}, 0x8, 0x1c00)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r8, 0x4008ae48, &(0x7f0000001c80)=0xdddd0000)

20.527071473s ago: executing program 5 (id=1817):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0}, &(0x7f0000000080)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r2=>0x0, 0x29, 0x6, 0x3, 0x2, 0x0, @mcast2, @private2, 0x700, 0x8047, 0x1, 0x9}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xfffffffe}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40004}, 0x4c840)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x724, 0xc65, 0x348}, 0x10)
r5 = fsmount(0xffffffffffffffff, 0x0, 0x2)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000003c0)={0x1, 0x5}, 0x4) (async, rerun: 64)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'vxcan1\x00', 0x1000}) (rerun: 64)
bind$rds(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000840)={&(0x7f0000000480)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000740)=[{&(0x7f00000004c0)="7835106278ff8cc112720045cf053acf4d56a180c81f1f70b465fc3cb9a0b705c0f0207709f83811e0cc2cd7b2fa444fd35428cb90720cee52b848ce2fb199a1ddec28", 0x43}, {&(0x7f0000000540)="0377b4d6e7a064426c02b4b0f2a3b0858ea88152ab6a7db11546c667a675d49a8ecf29c51253191f4a8d507221a6debc", 0x30}, {&(0x7f0000000580)="596524114c42bd11dbec63fcaa3fa4c1285a483cdb9c98d81a552890805bb171481bef003b14ba687ab79e32a3fc41d8c9e51b99cf142f2a79f974d5bb1a5072c33de543b6abf3db530a8ae11412cdd2978ad39177818366d99e1a68f99233d463e212fc986027c1b79099dbaacfe0c53371b7501bf3de6db0f4552433ffd676", 0x80}, {&(0x7f0000000600)="64d1c10bcbb3ff6a2ebecca46ee9b4208be8923f55749f265ed8ff72e23f00e072e59306f11a33eb96bf8ec7814faed3512fd8d49f034b46d1e14849f8c92c0743833439d6c2bf1d10a73e1b8652f307ab00a0c3866a3a3cef38aa4a0976b32953a9e51df68e748f5a20248a51285bf8208dff1218bbf83edbd43da5bfe1c4b196f4b8bc62eb10d686c9bb064d5663e2e74e5cf7a8373ca9bdbf5ea0c83ca29e46e0c8ea5f0b72211842e246f1fbea92ea3ae923ecf06c4b579e46e09be50f889492146bc056c27ffce6947262b01c6664a4", 0xd2}, {&(0x7f0000000700)="1fc628b5ecbdb860a8207f1fda3b1b8f7cb555cff302cf2fc2b68a83713d5e5c75cfa5b80d66de08380bb47d9ec695f7a5ba7388cf0c97", 0x37}], 0x5, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb0}}, @ip_ttl={{0x14, 0x0, 0x2, 0x942}}], 0x48}, 0x40) (async)
r7 = open(&(0x7f0000000880)='./file0\x00', 0x8000, 0x2)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r7, 0xc0305615, &(0x7f00000008c0)={0x0, {0x8, 0xfffffffb}}) (async)
syz_clone3(&(0x7f0000000b00)={0x1000000, &(0x7f0000000900), &(0x7f0000000940)=<r8=>0x0, &(0x7f0000000980), {0x27}, &(0x7f00000009c0)=""/142, 0x8e, &(0x7f0000000a80)=""/50, &(0x7f0000000ac0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r7}}, 0x58)
ioctl$BINDER_FREEZE(r7, 0x400c620e, &(0x7f0000000b80)={r8, 0x1, 0xd}) (async, rerun: 32)
r9 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000bc0), &(0x7f0000000c40)=0x60, 0x80000) (rerun: 32)
pread64(r9, &(0x7f0000000c80)=""/101, 0x65, 0x10001) (async, rerun: 32)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r0) (rerun: 32)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r10, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x73}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004007}, 0xc001)
recvmsg(r4, &(0x7f0000000f80)={&(0x7f0000000e40)=@isdn, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000ec0)=""/99, 0x63}], 0x1}, 0x4002) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, <r11=>r9, {0x7ff}}, './file0\x00'}) (rerun: 32)
newfstatat(0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}, 0x1000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r11, {0x0, r12}}, './file0\x00'}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000001100)={0x0, 0x2, 0x19001, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000001140)={<r13=>0x0, @in6={{0xa, 0x4e22, 0x1ff, @loopback, 0x6}}, 0x8, 0x7}, &(0x7f0000001200)=0x90)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001240)={r13, 0x401, 0x9, 0x2}, &(0x7f0000001280)=0x10) (async)
close_range(r0, r5, 0x0)
connect$inet6(r5, &(0x7f00000012c0)={0xa, 0x4e23, 0xffffffff, @mcast1, 0x5}, 0x1c)

20.380378004s ago: executing program 5 (id=1818):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4", 0x3a}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
socketpair(0x1a, 0x3, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
preadv(r3, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/20, 0x14}], 0x1, 0x0, 0x0)
sendmsg$rds(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000800)=""/194, 0xc2}, {&(0x7f0000000900)=""/120, 0x78}], 0x3, &(0x7f0000000a80)=[@rdma_dest={0x18, 0x114, 0x2, {0x9, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x17, 0x80000000}, &(0x7f0000000300)=0x10000, 0x0, 0x0, 0x7, 0x3, 0x5e13, 0x78, 0x1000000000000}}], 0x70, 0x4000000}, 0x4000080)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240b", 0x24}], 0x1}, 0x20048050)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, 0x0, &(0x7f0000000240))
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000040000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602"], 0x232)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VIDIOC_ENUMAUDOUT(r7, 0xc0345642, &(0x7f0000000200)={0x0, "7fe99814c2440619f3d9d94b4e4a84a23881e89eacc1333ffe736a89fb50587c"})
r8 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x300}})
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6bb3000)
mremap(&(0x7f0000962000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000a00)=ANY=[@ANYBLOB="28000000010903000000000005397e01e4bee5bd0800034000005dd50c0004800800014000000008b0cc97a30470887626e02042f894f7ff010000d0e6c957"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x1)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x19)
ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f00000006c0)={0x0, @sco={0x1f, @none}, @l2={0x1f, 0xc1, @none, 0x5, 0x2}, @xdp={0x2c, 0x4, 0x0, 0x23}, 0x7958, 0x0, 0x0, 0x0, 0xfffc, &(0x7f0000000600)='veth1_virt_wifi\x00', 0x100000001, 0x401})

20.155689925s ago: executing program 7 (id=1819):
openat$rnullb(0xffffffffffffff9c, 0x0, 0x101342, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000000), 0x1, 0x400)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket(0xa, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0x1c, 0x3d, 0x10, 0x67b, 0x331a, 0x4a31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0xa1, 0x0, 0x0, 0xc2, 0x16, 0x2}}]}}]}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x802, 0x88)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000240)=[0x2], 0x0, &(0x7f0000000280)=[0x7fffffff]})

20.015629664s ago: executing program 4 (id=1820):
r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
shmctl$SHM_LOCK(r0, 0xb)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x1000) (async)
shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x1000)
mount(&(0x7f0000001400)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r2, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x39)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x5, 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x5, 0x4)

19.916580593s ago: executing program 5 (id=1821):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000)

19.880609567s ago: executing program 4 (id=1823):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r2, 0xda90)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r3, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
r4 = socket(0x1, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x10, @empty, @empty, 0x1, 0x0, 0x0, 0x5d}})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r3, 0x300, 0x70b52c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0)
sendfile(r8, r8, 0x0, 0x7ffff000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

9.831626361s ago: executing program 2 (id=1824):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="8eec320121070cba0225400c2b10e05779a335a6eff94db8a513d38a5b0e4d947a803d2af50515e3652ed16d5e6095e310a4d877c62440229b8f3d85cabad1ed0518f224c3c07a0a65d488cdd7af5b8c8ed0ca7db59c6a43025337fe529fc69fc2b4e4d67892aa1a90fca5c3dc0c8866a1b0cb6cf01361ef8fe2dbbf046bb3041f2bba2d1819ca519924661cb50b13efa08c1c564faf0171a51e9fff47032e572ba39c8b39c403c32b4624b71fc94ea53626e0e7674339ca", 0xb8}], 0x1}, 0x4000014)
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_persistent(0x16, 0x0, r2)
keyctl$clear(0x7, r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00443cfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef)

0s ago: executing program 36 (id=1823):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r2, 0xda90)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r3, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
r4 = socket(0x1, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x10, @empty, @empty, 0x1, 0x0, 0x0, 0x5d}})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r3, 0x300, 0x70b52c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0)
sendfile(r8, r8, 0x0, 0x7ffff000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

kernel console output (not intermixed with test programs):

rror while querying for an remote control event.
[  398.904457][ T1937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.926036][ T1937] usb 5-1: Product: syz
[  398.930258][ T1937] usb 5-1: Manufacturer: syz
[  398.934872][ T1937] usb 5-1: SerialNumber: syz
[  398.944820][ T1937] usb 5-1: config 0 descriptor??
[  399.020712][   T44] m920x_read = error: -19
[  399.025202][   T44] dvb-usb: error while querying for an remote control event.
[  399.145780][   T44] m920x_read = error: -19
[  399.150731][   T44] dvb-usb: error while querying for an remote control event.
[  399.191153][ T1937] pl2303 5-1:0.161: required endpoints missing
[  399.211638][ T1937] usb 5-1: USB disconnect, device number 9
[  399.275844][   T44] m920x_read = error: -19
[  399.281732][   T44] dvb-usb: error while querying for an remote control event.
[  399.395729][   T44] m920x_read = error: -19
[  399.406038][   T44] dvb-usb: error while querying for an remote control event.
[  399.544225][   T44] m920x_read = error: -19
[  399.564512][   T44] dvb-usb: error while querying for an remote control event.
[  399.697849][   T44] m920x_read = error: -19
[  399.734946][   T44] dvb-usb: error while querying for an remote control event.
[  399.855911][   T44] m920x_read = error: -19
[  399.864117][   T44] dvb-usb: error while querying for an remote control event.
[  399.996211][   T44] m920x_read = error: -19
[  400.005811][   T44] dvb-usb: error while querying for an remote control event.
[  400.146117][   T44] m920x_read = error: -19
[  400.153267][   T44] dvb-usb: error while querying for an remote control event.
[  400.285823][   T44] m920x_read = error: -19
[  400.297348][   T44] dvb-usb: error while querying for an remote control event.
[  400.425770][   T44] m920x_read = error: -19
[  400.445760][   T44] dvb-usb: error while querying for an remote control event.
[  400.576140][   T44] m920x_read = error: -19
[  400.594814][   T44] dvb-usb: error while querying for an remote control event.
[  400.626573][    C0] net_ratelimit: 12102 callbacks suppressed
[  400.626594][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.645144][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.657725][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.670354][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.673631][T11879] netlink: 'syz.4.1685': attribute type 1 has an invalid length.
[  400.682861][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.703265][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.715812][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.728451][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.735744][   T44] m920x_read = error: -19
[  400.741026][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.757288][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  400.765201][   T44] dvb-usb: error while querying for an remote control event.
[  400.906111][ T1937] m920x_read = error: -19
[  400.912730][ T1937] dvb-usb: error while querying for an remote control event.
[  401.035810][ T1937] m920x_read = error: -19
[  401.041654][ T1937] dvb-usb: error while querying for an remote control event.
[  402.076305][ T1937] m920x_read = error: -19
[  402.080708][ T1937] dvb-usb: error while querying for an remote control event.
[  402.663232][ T1937] m920x_read = error: -19
[  402.667828][ T1937] dvb-usb: error while querying for an remote control event.
[  402.775814][ T1937] m920x_read = error: -19
[  402.795707][ T1937] dvb-usb: error while querying for an remote control event.
[  402.936351][ T1937] m920x_read = error: -19
[  402.940849][ T1937] dvb-usb: error while querying for an remote control event.
[  402.980592][T11899] FAULT_INJECTION: forcing a failure.
[  402.980592][T11899] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  403.033077][T11899] CPU: 1 UID: 0 PID: 11899 Comm: syz.5.1692 Not tainted syzkaller #0 PREEMPT(full) 
[  403.033107][T11899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  403.033120][T11899] Call Trace:
[  403.033129][T11899]  <TASK>
[  403.033138][T11899]  dump_stack_lvl+0x189/0x250
[  403.033174][T11899]  ? __pfx____ratelimit+0x10/0x10
[  403.033200][T11899]  ? __pfx_dump_stack_lvl+0x10/0x10
[  403.033230][T11899]  ? __pfx__printk+0x10/0x10
[  403.033257][T11899]  ? __might_fault+0xb0/0x130
[  403.033290][T11899]  ? rcu_is_watching+0x15/0xb0
[  403.033313][T11899]  should_fail_ex+0x414/0x560
[  403.033342][T11899]  _copy_from_iter+0x1de/0x1790
[  403.033362][T11899]  ? unwind_next_frame+0xa5/0x2390
[  403.033386][T11899]  ? rcu_is_watching+0x15/0xb0
[  403.033408][T11899]  ? unwind_next_frame+0xa5/0x2390
[  403.033432][T11899]  ? unwind_next_frame+0xa5/0x2390
[  403.033458][T11899]  ? __pfx__copy_from_iter+0x10/0x10
[  403.033478][T11899]  ? rcu_is_watching+0x15/0xb0
[  403.033500][T11899]  ? lock_release+0x4b/0x3e0
[  403.033518][T11899]  ? lock_release+0x4b/0x3e0
[  403.033540][T11899]  tun_get_user+0x219/0x3e20
[  403.033573][T11899]  ? rcu_is_watching+0x15/0xb0
[  403.033596][T11899]  ? lock_release+0x4b/0x3e0
[  403.033617][T11899]  ? aa_file_perm+0x44d/0x1550
[  403.033645][T11899]  ? __pfx_tun_get_user+0x10/0x10
[  403.033668][T11899]  ? _parse_integer_limit+0x1ae/0x1f0
[  403.033700][T11899]  ? kstrtoull+0x12f/0x1d0
[  403.033732][T11899]  ? ref_tracker_alloc+0x318/0x460
[  403.033760][T11899]  ? get_pid_task+0x20/0x1f0
[  403.033787][T11899]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  403.033817][T11899]  ? tun_get+0x1c/0x2f0
[  403.033840][T11899]  ? tun_get+0x1c/0x2f0
[  403.033861][T11899]  ? rcu_is_watching+0x15/0xb0
[  403.033882][T11899]  ? tun_get+0x1c/0x2f0
[  403.033904][T11899]  ? lock_release+0x4b/0x3e0
[  403.033922][T11899]  ? common_file_perm+0x1b5/0x230
[  403.033949][T11899]  ? tun_get+0x1c/0x2f0
[  403.033974][T11899]  tun_chr_write_iter+0x113/0x200
[  403.034000][T11899]  vfs_write+0x5c9/0xb30
[  403.034023][T11899]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  403.034047][T11899]  ? __pfx_vfs_write+0x10/0x10
[  403.034078][T11899]  ? __fget_files+0x2a/0x420
[  403.034105][T11899]  ksys_write+0x145/0x250
[  403.034126][T11899]  ? __pfx_ksys_write+0x10/0x10
[  403.034147][T11899]  ? rcu_is_watching+0x15/0xb0
[  403.034170][T11899]  do_syscall_64+0xfa/0xfa0
[  403.034197][T11899]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.034216][T11899]  ? clear_bhb_loop+0x60/0xb0
[  403.034239][T11899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.034258][T11899] RIP: 0033:0x7f72faf8ebe9
[  403.034276][T11899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  403.034294][T11899] RSP: 002b:00007f72fbede038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  403.034316][T11899] RAX: ffffffffffffffda RBX: 00007f72fb1c5fa0 RCX: 00007f72faf8ebe9
[  403.034331][T11899] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000005
[  403.034344][T11899] RBP: 00007f72fbede090 R08: 0000000000000000 R09: 0000000000000000
[  403.034356][T11899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  403.034368][T11899] R13: 00007f72fb1c6038 R14: 00007f72fb1c5fa0 R15: 00007ffe5cebfe78
[  403.034391][T11899]  </TASK>
[  403.353809][    C1] vkms_vblank_simulate: vblank timer overrun
[  403.356046][ T1937] m920x_read = error: -19
[  403.356071][ T1937] dvb-usb: error while querying for an remote control event.
[  403.465943][   T44] m920x_read = error: -19
[  403.470379][   T44] dvb-usb: error while querying for an remote control event.
[  403.585719][   T44] m920x_read = error: -19
[  403.590201][   T44] dvb-usb: error while querying for an remote control event.
[  403.703576][T11910] netlink: 'syz.4.1694': attribute type 10 has an invalid length.
[  403.714490][   T44] m920x_read = error: -19
[  403.719064][   T44] dvb-usb: error while querying for an remote control event.
[  403.846344][   T44] m920x_read = error: -19
[  403.850926][   T44] dvb-usb: error while querying for an remote control event.
[  403.927026][ T6262] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  403.937854][T11910] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.957652][T11910] team0: Port device bond0 added
[  403.997502][ T7086] m920x_read = error: -19
[  404.002008][ T7086] dvb-usb: error while querying for an remote control event.
[  404.093692][ T6262] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  404.105590][ T6262] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  404.114669][ T1937] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  404.124331][ T7086] m920x_read = error: -19
[  404.129951][ T7086] dvb-usb: error while querying for an remote control event.
[  404.142868][ T6262] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  404.152650][ T6262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  404.163698][ T6262] usb 3-1: SerialNumber: syz
[  404.246083][ T7086] m920x_read = error: -19
[  404.250497][ T7086] dvb-usb: error while querying for an remote control event.
[  404.277513][ T1937] usb 5-1: Using ep0 maxpacket: 8
[  404.287411][ T1937] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e
[  404.298462][ T1937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.307274][ T1937] usb 5-1: Product: syz
[  404.312680][ T1937] usb 5-1: Manufacturer: syz
[  404.318003][ T1937] usb 5-1: SerialNumber: syz
[  404.332099][ T1937] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state.
[  404.342147][ T1937] usb 5-1: setting power ON
[  404.347242][ T1937] dvb-usb: bulk message failed: -22 (2/0)
[  404.369214][ T7086] m920x_read = error: -19
[  404.373649][ T7086] dvb-usb: error while querying for an remote control event.
[  404.388666][ T1937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  404.400566][ T6262] usb 3-1: 0:2 : does not exist
[  404.413212][ T1937] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T NANO2 w/o firmware)
[  404.430610][ T6262] usb 3-1: USB disconnect, device number 13
[  404.445703][ T1937] usb 5-1: media controller created
[  404.468753][ T7011] udevd[7011]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  404.513090][ T1937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  404.524437][ T7086] m920x_read = error: -19
[  404.542415][ T7086] dvb-usb: error while querying for an remote control event.
[  404.608880][ T1937] usb 5-1: selecting invalid altsetting 1
[  404.642379][ T1937] cxusb: set interface failed
[  404.653034][ T1937] dvb-usb: bulk message failed: -22 (1/0)
[  404.677279][ T1937] dvb-usb: bulk message failed: -22 (3/0)
[  404.688847][ T6262] m920x_read = error: -19
[  404.698978][ T6262] dvb-usb: error while querying for an remote control event.
[  404.719198][ T1937] usb 5-1: bluebird_gpio_write failed.
[  404.738939][ T1937] dvb-usb: bulk message failed: -22 (3/0)
[  404.759951][ T1937] usb 5-1: bluebird_gpio_write failed.
[  404.806110][ T1937] dvb-usb: bulk message failed: -22 (3/0)
[  404.844923][ T1937] usb 5-1: bluebird_gpio_write failed.
[  404.851709][ T6262] m920x_read = error: -19
[  404.860117][ T1937] dvb-usb: bulk message failed: -22 (3/0)
[  404.866200][ T6262] dvb-usb: error while querying for an remote control event.
[  404.887287][ T1937] usb 5-1: bluebird_gpio_write failed.
[  404.898023][T11923] /dev/rnullb0: Can't open blockdev
[  404.905871][ T1937] dvb-usb: bulk message failed: -22 (3/0)
[  404.918298][ T1937] usb 5-1: bluebird_gpio_write failed.
[  404.945770][ T1937] dvb-usb: bulk message failed: -22 (5/0)
[  404.969631][ T1937] zl10353_read_register: readreg error (reg=127, ret==-121)
[  404.995934][ T6262] m920x_read = error: -19
[  405.004925][ T6262] dvb-usb: error while querying for an remote control event.
[  405.070348][T11927] loop6: detected capacity change from 0 to 1
[  405.095508][ T7011]  loop6: [POWERTEC] p1 p2 p3 p4 p5 p6
[  405.107496][ T1937] DVB: Unable to find symbol mt352_attach()
[  405.114483][ T7011] loop6: p1 start 1048576 is beyond EOD, truncated
[  405.133028][ T1937] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T NANO2 w/o firmware'
[  405.146435][T11928] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  405.162124][ T6262] m920x_read = error: -19
[  405.166716][ T7011] loop6: p2 size 458752 extends beyond EOD, truncated
[  405.177972][ T6262] dvb-usb: error while querying for an remote control event.
[  405.200377][ T7011] loop6: p3 start 12666 is beyond EOD, truncated
[  405.221561][ T7011] loop6: p4 start 16387 is beyond EOD, truncated
[  405.245722][ T7011] loop6: p5 start 2037579777 is beyond EOD, truncated
[  405.275691][ T7011] loop6: p6 start 425986 is beyond EOD, truncated
[  405.325870][ T6262] m920x_read = error: -19
[  405.330427][ T6262] dvb-usb: error while querying for an remote control event.
[  405.338003][ T1937] rc_core: IR keymap rc-dvico-portable not found
[  405.347505][ T1937] Registered IR keymap rc-empty
[  405.359652][ T1937] rc rc0: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  405.401968][ T1937] input: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input33
[  405.433184][ T1937] dvb-usb: schedule remote query interval to 100 msecs.
[  405.448532][ T1937] usb 5-1: setting power OFF
[  405.458905][ T1937] dvb-usb: bulk message failed: -22 (2/0)
[  405.467458][ T6262] m920x_read = error: -19
[  405.478725][ T1937] dvb-usb: bulk message failed: -22 (3/0)
[  405.484827][ T6262] dvb-usb: error while querying for an remote control event.
[  405.507133][ T1937] usb 5-1: bluebird_gpio_write failed.
[  405.518291][ T1937] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware successfully initialized and connected.
[  405.555873][ T1937] dvb-usb: bulk message failed: -22 (1/0)
[  405.615750][ T1937] m920x_read = error: -19
[  405.623209][ T1937] dvb-usb: error while querying for an remote control event.
[  405.635740][    C0] net_ratelimit: 10674 callbacks suppressed
[  405.635759][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.654285][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.666779][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.679350][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.691433][ T1937] dvb-usb: bulk message failed: -22 (1/0)
[  405.691859][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.709774][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.722329][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.734944][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.747422][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.759999][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  405.785707][ T6262] m920x_read = error: -19
[  405.802443][ T6262] dvb-usb: error while querying for an remote control event.
[  405.812124][ T7086] dvb-usb: bulk message failed: -22 (1/0)
[  405.926001][ T1937] dvb-usb: bulk message failed: -22 (1/0)
[  405.966054][ T1937] m920x_read = error: -19
[  405.978477][ T1937] dvb-usb: error while querying for an remote control event.
[  406.048090][ T6262] dvb-usb: bulk message failed: -22 (1/0)
[  406.066135][T11933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.086166][T11933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.105715][ T6262] m920x_read = error: -19
[  406.119025][ T6262] dvb-usb: error while querying for an remote control event.
[  406.181159][ T6262] dvb-usb: bulk message failed: -22 (1/0)
[  406.235776][ T6262] m920x_read = error: -19
[  406.241484][ T6262] dvb-usb: error while querying for an remote control event.
[  406.295954][ T6262] dvb-usb: bulk message failed: -22 (1/0)
[  406.366277][ T6262] m920x_read = error: -19
[  406.375676][ T6262] dvb-usb: error while querying for an remote control event.
[  406.416091][ T6262] dvb-usb: bulk message failed: -22 (1/0)
[  406.496415][ T6262] m920x_read = error: -19
[  406.502032][ T6262] dvb-usb: error while querying for an remote control event.
[  406.530343][ T6262] dvb-usb: bulk message failed: -22 (1/0)
[  406.626803][ T6262] m920x_read = error: -19
[  406.633523][ T6262] dvb-usb: error while querying for an remote control event.
[  406.645853][ T1937] dvb-usb: bulk message failed: -22 (1/0)
[  406.674608][ T1937] usb 5-1: USB disconnect, device number 10
[  406.794857][ T1937] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmwa successfully deinitialized and disconnected.
[  406.818686][ T6262] m920x_read = error: -19
[  406.835753][ T6262] dvb-usb: error while querying for an remote control event.
[  406.872556][T11938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  406.909409][T11938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.965983][ T6262] m920x_read = error: -19
[  406.977067][ T6262] dvb-usb: error while querying for an remote control event.
[  407.044600][T11927]  loop6: [POWERTEC] p1 p2 p3 p4 p5 p6
[  407.058268][T11927] loop6: p1 start 1048576 is beyond EOD, truncated
[  407.081346][T11927] loop6: p2 size 458752 extends beyond EOD, truncated
[  407.106997][T11927] loop6: p3 start 12666 is beyond EOD, truncated
[  407.117851][ T1937] m920x_read = error: -19
[  407.132155][ T1937] dvb-usb: error while querying for an remote control event.
[  407.152660][T11927] loop6: p4 start 16387 is beyond EOD, truncated
[  407.177064][T11927] loop6: p5 start 2037579777 is beyond EOD, truncated
[  407.201317][T11927] loop6: p6 start 425986 is beyond EOD, truncated
[  407.304001][ T1937] m920x_read = error: -19
[  407.322361][ T1937] dvb-usb: error while querying for an remote control event.
[  407.338330][ T7011] udevd[7011]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  407.369803][    C0] sched: DL replenish lagged too much
[  407.390787][ T7011] udevd[7011]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  407.471595][ T6262] m920x_read = error: -19
[  407.476103][ T6262] dvb-usb: error while querying for an remote control event.
[  407.590896][ T6262] m920x_read = error: -19
[  407.595308][ T6262] dvb-usb: error while querying for an remote control event.
[  407.721207][ T6262] m920x_read = error: -19
[  407.725670][ T6262] dvb-usb: error while querying for an remote control event.
[  407.837646][ T6262] m920x_read = error: -19
[  407.844282][ T6262] dvb-usb: error while querying for an remote control event.
[  407.958907][ T6262] m920x_read = error: -19
[  407.963309][ T6262] dvb-usb: error while querying for an remote control event.
[  407.996324][T11948] /dev/rnullb0: Can't open blockdev
[  408.042089][T11950] netlink: 'syz.5.1708': attribute type 21 has an invalid length.
[  408.106208][ T1937] m920x_read = error: -19
[  408.113490][ T1937] dvb-usb: error while querying for an remote control event.
[  408.229049][ T1937] m920x_read = error: -19
[  408.233546][ T1937] dvb-usb: error while querying for an remote control event.
[  408.342986][T11953] FAULT_INJECTION: forcing a failure.
[  408.342986][T11953] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  408.357827][ T6262] m920x_read = error: -19
[  408.362217][ T6262] dvb-usb: error while querying for an remote control event.
[  408.380531][T11953] CPU: 1 UID: 0 PID: 11953 Comm: syz.4.1709 Not tainted syzkaller #0 PREEMPT(full) 
[  408.380560][T11953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  408.380574][T11953] Call Trace:
[  408.380582][T11953]  <TASK>
[  408.380591][T11953]  dump_stack_lvl+0x189/0x250
[  408.380627][T11953]  ? __pfx____ratelimit+0x10/0x10
[  408.380666][T11953]  ? __pfx_dump_stack_lvl+0x10/0x10
[  408.380705][T11953]  ? __pfx__printk+0x10/0x10
[  408.380732][T11953]  ? __might_fault+0xb0/0x130
[  408.380766][T11953]  ? rcu_is_watching+0x15/0xb0
[  408.380790][T11953]  should_fail_ex+0x414/0x560
[  408.380819][T11953]  _copy_from_iter+0x1de/0x1790
[  408.380839][T11953]  ? unwind_next_frame+0xa5/0x2390
[  408.380862][T11953]  ? rcu_is_watching+0x15/0xb0
[  408.380884][T11953]  ? unwind_next_frame+0xa5/0x2390
[  408.380909][T11953]  ? unwind_next_frame+0xa5/0x2390
[  408.380935][T11953]  ? __pfx__copy_from_iter+0x10/0x10
[  408.380955][T11953]  ? rcu_is_watching+0x15/0xb0
[  408.380975][T11953]  ? lock_release+0x4b/0x3e0
[  408.380993][T11953]  ? lock_release+0x4b/0x3e0
[  408.381015][T11953]  tun_get_user+0x488/0x3e20
[  408.381043][T11953]  ? rcu_is_watching+0x15/0xb0
[  408.381064][T11953]  ? lock_release+0x4b/0x3e0
[  408.381086][T11953]  ? aa_file_perm+0x44d/0x1550
[  408.381113][T11953]  ? __pfx_tun_get_user+0x10/0x10
[  408.381136][T11953]  ? _parse_integer_limit+0x1ae/0x1f0
[  408.381169][T11953]  ? kstrtoull+0x12f/0x1d0
[  408.381200][T11953]  ? ref_tracker_alloc+0x318/0x460
[  408.381229][T11953]  ? get_pid_task+0x20/0x1f0
[  408.381256][T11953]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  408.381286][T11953]  ? tun_get+0x1c/0x2f0
[  408.381309][T11953]  ? tun_get+0x1c/0x2f0
[  408.381331][T11953]  ? rcu_is_watching+0x15/0xb0
[  408.381352][T11953]  ? tun_get+0x1c/0x2f0
[  408.381374][T11953]  ? lock_release+0x4b/0x3e0
[  408.381392][T11953]  ? common_file_perm+0x1b5/0x230
[  408.381418][T11953]  ? tun_get+0x1c/0x2f0
[  408.381442][T11953]  tun_chr_write_iter+0x113/0x200
[  408.381468][T11953]  vfs_write+0x5c9/0xb30
[  408.381489][T11953]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  408.381514][T11953]  ? __pfx_vfs_write+0x10/0x10
[  408.381538][T11953]  ? __fget_files+0x2a/0x420
[  408.381566][T11953]  ksys_write+0x145/0x250
[  408.381586][T11953]  ? __pfx_ksys_write+0x10/0x10
[  408.381608][T11953]  ? rcu_is_watching+0x15/0xb0
[  408.381631][T11953]  do_syscall_64+0xfa/0xfa0
[  408.381659][T11953]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.381678][T11953]  ? clear_bhb_loop+0x60/0xb0
[  408.381707][T11953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.381727][T11953] RIP: 0033:0x7f1e5c18ebe9
[  408.381745][T11953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  408.381763][T11953] RSP: 002b:00007f1e5cf47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  408.381784][T11953] RAX: ffffffffffffffda RBX: 00007f1e5c3c5fa0 RCX: 00007f1e5c18ebe9
[  408.381799][T11953] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000005
[  408.381811][T11953] RBP: 00007f1e5cf47090 R08: 0000000000000000 R09: 0000000000000000
[  408.381824][T11953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  408.381835][T11953] R13: 00007f1e5c3c6038 R14: 00007f1e5c3c5fa0 R15: 00007ffe426a47f8
[  408.381857][T11953]  </TASK>
[  408.703280][    C1] vkms_vblank_simulate: vblank timer overrun
[  408.816187][ T7086] m920x_read = error: -19
[  408.820706][ T7086] dvb-usb: error while querying for an remote control event.
[  408.896939][T11955] syzkaller1: entered promiscuous mode
[  408.902497][T11955] syzkaller1: entered allmulticast mode
[  408.936489][ T7086] m920x_read = error: -19
[  408.940929][ T7086] dvb-usb: error while querying for an remote control event.
[  409.056106][ T7086] m920x_read = error: -19
[  409.066875][ T7086] dvb-usb: error while querying for an remote control event.
[  409.176922][ T7086] m920x_read = error: -19
[  409.185996][ T7086] dvb-usb: error while querying for an remote control event.
[  409.306017][ T7086] m920x_read = error: -19
[  409.310500][ T7086] dvb-usb: error while querying for an remote control event.
[  409.347475][T11963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  409.359248][T11963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  409.436957][ T7086] m920x_read = error: -19
[  409.441585][ T7086] dvb-usb: error while querying for an remote control event.
[  409.560022][ T7086] m920x_read = error: -19
[  409.564952][ T7086] dvb-usb: error while querying for an remote control event.
[  409.679657][ T7086] m920x_read = error: -19
[  409.684268][ T7086] dvb-usb: error while querying for an remote control event.
[  409.802035][ T7086] m920x_read = error: -19
[  409.806689][ T7086] dvb-usb: error while querying for an remote control event.
[  409.917291][ T7086] m920x_read = error: -19
[  409.921724][ T7086] dvb-usb: error while querying for an remote control event.
[  410.046279][ T7086] m920x_read = error: -19
[  410.050836][ T7086] dvb-usb: error while querying for an remote control event.
[  410.176058][ T7086] m920x_read = error: -19
[  410.181789][ T7086] dvb-usb: error while querying for an remote control event.
[  410.310688][ T7086] m920x_read = error: -19
[  410.323016][ T7086] dvb-usb: error while querying for an remote control event.
[  410.420425][T11971] vxcan0: tx drop: invalid sa for name 0x0000000000000003
[  410.445808][ T7086] m920x_read = error: -19
[  410.450211][ T7086] dvb-usb: error while querying for an remote control event.
[  410.575834][ T7086] m920x_read = error: -19
[  410.583784][ T7086] dvb-usb: error while querying for an remote control event.
[  410.645748][    C0] net_ratelimit: 12103 callbacks suppressed
[  410.645764][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.664930][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.677458][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.690124][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.702622][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.715045][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.715746][ T7086] m920x_read = error: -19
[  410.727660][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.744257][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.745108][ T7086] dvb-usb: error while querying for an remote control event.
[  410.756864][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.776555][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  410.895948][ T7086] m920x_read = error: -19
[  410.904323][T11974] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  410.923883][ T7086] dvb-usb: error while querying for an remote control event.
[  410.934653][T11974] netlink: 'syz.2.1716': attribute type 1 has an invalid length.
[  410.964338][T11974] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1716'.
[  410.973936][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'.
[  411.037540][ T7086] m920x_read = error: -19
[  411.047682][ T7086] dvb-usb: error while querying for an remote control event.
[  411.181185][ T7086] m920x_read = error: -19
[  411.185889][ T7086] dvb-usb: error while querying for an remote control event.
[  411.300033][ T7086] m920x_read = error: -19
[  411.304469][ T7086] dvb-usb: error while querying for an remote control event.
[  411.395437][T11977] /dev/rnullb0: Can't open blockdev
[  411.416768][ T6262] m920x_read = error: -19
[  411.422860][ T6262] dvb-usb: error while querying for an remote control event.
[  411.477697][T11980] fuse: Bad value for 'user_id'
[  411.482783][T11980] fuse: Bad value for 'user_id'
[  411.539882][T11982] ntfs3(loop4): try to read out of volume at offset 0x0
[  411.549030][ T6262] m920x_read = error: -19
[  411.553534][ T6262] dvb-usb: error while querying for an remote control event.
[  411.680807][ T7086] m920x_read = error: -19
[  411.687550][ T7086] dvb-usb: error while querying for an remote control event.
[  411.795763][ T6262] m920x_read = error: -19
[  411.800704][ T6262] dvb-usb: error while querying for an remote control event.
[  411.816747][ T7086] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  411.915768][ T6262] m920x_read = error: -19
[  411.921252][ T6262] dvb-usb: error while querying for an remote control event.
[  411.976485][ T7086] usb 5-1: Using ep0 maxpacket: 16
[  411.984501][ T7086] usb 5-1: config 2 has an invalid interface number: 87 but max is 0
[  411.994730][ T7086] usb 5-1: config 2 has no interface number 0
[  412.001383][ T7086] usb 5-1: config 2 interface 87 altsetting 248 has an invalid descriptor for endpoint zero, skipping
[  412.014154][ T7086] usb 5-1: config 2 interface 87 altsetting 248 endpoint 0xA has invalid maxpacket 512, setting to 64
[  412.028202][ T7086] usb 5-1: config 2 interface 87 altsetting 248 endpoint 0x8 has invalid wMaxPacketSize 0
[  412.038484][ T6262] m920x_read = error: -19
[  412.042854][ T6262] dvb-usb: error while querying for an remote control event.
[  412.055575][ T7086] usb 5-1: config 2 interface 87 altsetting 248 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  412.071092][ T7086] usb 5-1: config 2 interface 87 altsetting 248 has a duplicate endpoint with address 0xE, skipping
[  412.083384][ T7086] usb 5-1: config 2 interface 87 altsetting 248 bulk endpoint 0xF has invalid maxpacket 1023
[  412.096560][ T7086] usb 5-1: config 2 interface 87 altsetting 248 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  412.109290][ T7086] usb 5-1: config 2 interface 87 altsetting 248 has a duplicate endpoint with address 0x6, skipping
[  412.120541][ T7086] usb 5-1: config 2 interface 87 altsetting 248 has an invalid descriptor for endpoint zero, skipping
[  412.133718][ T7086] usb 5-1: config 2 interface 87 altsetting 248 has a duplicate endpoint with address 0x7, skipping
[  412.148056][ T7086] usb 5-1: config 2 interface 87 altsetting 248 has a duplicate endpoint with address 0x6, skipping
[  412.159310][ T7086] usb 5-1: config 2 interface 87 altsetting 248 endpoint 0xB has invalid maxpacket 512, setting to 64
[  412.175147][ T7086] usb 5-1: config 2 interface 87 has no altsetting 0
[  412.182012][ T6262] m920x_read = error: -19
[  412.188585][ T6262] dvb-usb: error while querying for an remote control event.
[  412.199351][ T7086] usb 5-1: New USB device found, idVendor=04cb, idProduct=0131, bcdDevice=db.0e
[  412.210623][ T7086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.221995][ T7086] usb 5-1: Product: 쾖䖕쫖⌨ꖶ쎄ᆑ쩣ꆄᗕ�㨖ାŬ똀潙렦꤯핹궥䱯�墇윭楪꧕勒�栯嚳낔醫꛷蘑⡄
[  412.237977][ T7086] usb 5-1: Manufacturer: П
[  412.242522][ T7086] usb 5-1: SerialNumber: syz
[  412.254709][T11982] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  412.310098][ T6262] m920x_read = error: -19
[  412.314632][ T6262] dvb-usb: error while querying for an remote control event.
[  412.429878][ T6262] m920x_read = error: -19
[  412.444882][ T6262] dvb-usb: error while querying for an remote control event.
[  412.477916][ T7086] gspca_main: finepix-2.14.0 probing 04cb:0131
[  412.517721][ T7086] usb 5-1: USB disconnect, device number 11
[  412.569652][ T6262] m920x_read = error: -19
[  412.580683][ T6262] dvb-usb: error while querying for an remote control event.
[  412.695971][ T6262] m920x_read = error: -19
[  412.700470][ T6262] dvb-usb: error while querying for an remote control event.
[  412.817001][ T6262] m920x_read = error: -19
[  412.825845][ T6262] dvb-usb: error while querying for an remote control event.
[  412.950845][ T6262] m920x_read = error: -19
[  412.955570][ T6262] dvb-usb: error while querying for an remote control event.
[  413.065785][ T6262] m920x_read = error: -19
[  413.071575][ T6262] dvb-usb: error while querying for an remote control event.
[  413.185783][ T6262] m920x_read = error: -19
[  413.199562][ T6262] dvb-usb: error while querying for an remote control event.
[  413.347920][ T6262] m920x_read = error: -19
[  413.358744][ T6262] dvb-usb: error while querying for an remote control event.
[  413.455818][ T7086] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  413.485965][ T6262] m920x_read = error: -19
[  413.493675][ T6262] dvb-usb: error while querying for an remote control event.
[  413.615818][ T6262] m920x_read = error: -19
[  413.620270][ T6262] dvb-usb: error while querying for an remote control event.
[  413.638694][ T7086] usb 5-1: config 0 has an invalid interface number: 161 but max is 0
[  413.659261][ T7086] usb 5-1: config 0 has no interface number 0
[  413.669604][ T7086] usb 5-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31
[  413.687771][ T7086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.707162][ T7086] usb 5-1: Product: syz
[  413.711411][ T7086] usb 5-1: Manufacturer: syz
[  413.726729][ T7086] usb 5-1: SerialNumber: syz
[  413.741493][ T7086] usb 5-1: config 0 descriptor??
[  413.765832][ T6262] m920x_read = error: -19
[  413.770287][ T6262] dvb-usb: error while querying for an remote control event.
[  413.820894][T11998] FAULT_INJECTION: forcing a failure.
[  413.820894][T11998] name failslab, interval 1, probability 0, space 0, times 0
[  413.833757][T11998] CPU: 1 UID: 0 PID: 11998 Comm: syz.5.1725 Not tainted syzkaller #0 PREEMPT(full) 
[  413.833786][T11998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  413.833799][T11998] Call Trace:
[  413.833807][T11998]  <TASK>
[  413.833816][T11998]  dump_stack_lvl+0x189/0x250
[  413.833851][T11998]  ? __pfx____ratelimit+0x10/0x10
[  413.833877][T11998]  ? __pfx_dump_stack_lvl+0x10/0x10
[  413.833907][T11998]  ? __pfx__printk+0x10/0x10
[  413.833936][T11998]  ? __pfx___might_resched+0x10/0x10
[  413.833959][T11998]  ? lock_acquire+0x5f/0x360
[  413.833979][T11998]  should_fail_ex+0x414/0x560
[  413.834007][T11998]  should_failslab+0xa8/0x100
[  413.834028][T11998]  kmem_cache_alloc_node_noprof+0x76/0x390
[  413.834058][T11998]  ? __alloc_skb+0x112/0x2d0
[  413.834086][T11998]  __alloc_skb+0x112/0x2d0
[  413.834113][T11998]  alloc_skb_with_frags+0xca/0x890
[  413.834144][T11998]  ? rcu_is_watching+0x15/0xb0
[  413.834166][T11998]  ? lock_release+0x4b/0x3e0
[  413.834184][T11998]  ? __might_fault+0xb0/0x130
[  413.834214][T11998]  sock_alloc_send_pskb+0x857/0x990
[  413.834242][T11998]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  413.834262][T11998]  ? rcu_is_watching+0x15/0xb0
[  413.834285][T11998]  ? lock_release+0x4b/0x3e0
[  413.834302][T11998]  ? lock_release+0x4b/0x3e0
[  413.834321][T11998]  ? iov_iter_advance+0x8b/0x1c0
[  413.834342][T11998]  tun_get_user+0xa43/0x3e20
[  413.834370][T11998]  ? rcu_is_watching+0x15/0xb0
[  413.834391][T11998]  ? lock_release+0x4b/0x3e0
[  413.834412][T11998]  ? aa_file_perm+0x44d/0x1550
[  413.834441][T11998]  ? __pfx_tun_get_user+0x10/0x10
[  413.834465][T11998]  ? _parse_integer_limit+0x1ae/0x1f0
[  413.834506][T11998]  ? kstrtoull+0x12f/0x1d0
[  413.834537][T11998]  ? ref_tracker_alloc+0x318/0x460
[  413.834566][T11998]  ? get_pid_task+0x20/0x1f0
[  413.834594][T11998]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  413.834623][T11998]  ? tun_get+0x1c/0x2f0
[  413.834647][T11998]  ? tun_get+0x1c/0x2f0
[  413.834669][T11998]  ? rcu_is_watching+0x15/0xb0
[  413.834689][T11998]  ? tun_get+0x1c/0x2f0
[  413.834711][T11998]  ? lock_release+0x4b/0x3e0
[  413.834728][T11998]  ? common_file_perm+0x1b5/0x230
[  413.834754][T11998]  ? tun_get+0x1c/0x2f0
[  413.834780][T11998]  tun_chr_write_iter+0x113/0x200
[  413.834805][T11998]  vfs_write+0x5c9/0xb30
[  413.834827][T11998]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  413.834851][T11998]  ? __pfx_vfs_write+0x10/0x10
[  413.834875][T11998]  ? __fget_files+0x2a/0x420
[  413.834903][T11998]  ksys_write+0x145/0x250
[  413.834923][T11998]  ? __pfx_ksys_write+0x10/0x10
[  413.834945][T11998]  ? rcu_is_watching+0x15/0xb0
[  413.834967][T11998]  do_syscall_64+0xfa/0xfa0
[  413.834995][T11998]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.835015][T11998]  ? clear_bhb_loop+0x60/0xb0
[  413.835036][T11998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.835055][T11998] RIP: 0033:0x7f72faf8ebe9
[  413.835073][T11998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  413.835090][T11998] RSP: 002b:00007f72fbede038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  413.835112][T11998] RAX: ffffffffffffffda RBX: 00007f72fb1c5fa0 RCX: 00007f72faf8ebe9
[  413.835127][T11998] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000005
[  413.835140][T11998] RBP: 00007f72fbede090 R08: 0000000000000000 R09: 0000000000000000
[  413.835152][T11998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  413.835164][T11998] R13: 00007f72fb1c6038 R14: 00007f72fb1c5fa0 R15: 00007ffe5cebfe78
[  413.835205][T11998]  </TASK>
[  414.178590][    C1] vkms_vblank_simulate: vblank timer overrun
[  414.190326][ T1937] m920x_read = error: -19
[  414.195386][ T1937] dvb-usb: error while querying for an remote control event.
[  414.238932][ T7086] pl2303 5-1:0.161: required endpoints missing
[  414.247976][ T7086] usb 5-1: USB disconnect, device number 12
[  414.306359][ T6262] m920x_read = error: -19
[  414.310903][ T6262] dvb-usb: error while querying for an remote control event.
[  414.425905][ T7086] m920x_read = error: -19
[  414.430335][ T7086] dvb-usb: error while querying for an remote control event.
[  414.550861][ T7086] m920x_read = error: -19
[  414.555279][ T7086] dvb-usb: error while querying for an remote control event.
[  414.679586][ T7086] m920x_read = error: -19
[  414.684232][ T7086] dvb-usb: error while querying for an remote control event.
[  414.798529][ T7086] m920x_read = error: -19
[  414.809103][ T7086] dvb-usb: error while querying for an remote control event.
[  414.849215][T12000] /dev/rnullb0: Can't open blockdev
[  414.936253][ T7086] m920x_read = error: -19
[  414.942442][ T7086] dvb-usb: error while querying for an remote control event.
[  415.057355][ T7086] m920x_read = error: -19
[  415.061752][ T7086] dvb-usb: error while querying for an remote control event.
[  415.176113][ T7086] m920x_read = error: -19
[  415.180520][ T7086] dvb-usb: error while querying for an remote control event.
[  415.296170][ T7086] m920x_read = error: -19
[  415.300739][ T7086] dvb-usb: error while querying for an remote control event.
[  415.430664][ T7086] m920x_read = error: -19
[  415.435193][ T7086] dvb-usb: error while querying for an remote control event.
[  415.551227][ T7086] m920x_read = error: -19
[  415.564582][ T7086] dvb-usb: error while querying for an remote control event.
[  415.655940][    C0] net_ratelimit: 13032 callbacks suppressed
[  415.655961][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  415.674357][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  415.686763][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  415.699294][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  415.711861][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  415.712118][ T7086] m920x_read = error: -19
[  415.724360][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  415.731341][ T7086] dvb-usb: error while querying for an remote control event.
[  415.740989][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  415.760289][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  415.772748][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  415.785552][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  415.855854][ T7086] m920x_read = error: -19
[  415.863482][ T7086] dvb-usb: error while querying for an remote control event.
[  415.986126][ T7086] m920x_read = error: -19
[  415.990535][ T7086] dvb-usb: error while querying for an remote control event.
[  416.115832][ T7086] m920x_read = error: -19
[  416.120277][ T7086] dvb-usb: error while querying for an remote control event.
[  416.248694][ T6262] m920x_read = error: -19
[  416.263463][ T6262] dvb-usb: error while querying for an remote control event.
[  416.387643][ T6262] m920x_read = error: -19
[  416.392107][ T6262] dvb-usb: error while querying for an remote control event.
[  416.518508][ T6262] m920x_read = error: -19
[  416.528162][ T6262] dvb-usb: error while querying for an remote control event.
[  416.658194][ T6262] m920x_read = error: -19
[  416.669537][ T6262] dvb-usb: error while querying for an remote control event.
[  416.799824][ T6262] m920x_read = error: -19
[  416.814498][ T6262] dvb-usb: error while querying for an remote control event.
[  416.941141][ T6262] m920x_read = error: -19
[  416.946817][ T6262] dvb-usb: error while querying for an remote control event.
[  417.078692][ T6262] m920x_read = error: -19
[  417.083100][ T6262] dvb-usb: error while querying for an remote control event.
[  417.235794][ T6262] m920x_read = error: -19
[  417.244602][ T6262] dvb-usb: error while querying for an remote control event.
[  417.307709][T12025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  417.320293][T12025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  417.375860][ T6262] m920x_read = error: -19
[  417.380411][ T6262] dvb-usb: error while querying for an remote control event.
[  417.495595][T12031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  417.495893][ T6262] m920x_read = error: -19
[  417.513969][T12031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  417.524535][ T6262] dvb-usb: error while querying for an remote control event.
[  417.537289][T12033] tmpfs: Unknown parameter 'grpqqota_blockì#£:_haK~limit'
[  417.659241][ T6262] m920x_read = error: -19
[  417.664510][ T6262] dvb-usb: error while querying for an remote control event.
[  417.791531][ T6262] m920x_read = error: -19
[  417.798058][ T6262] dvb-usb: error while querying for an remote control event.
[  417.913553][ T6262] m920x_read = error: -19
[  417.918088][ T6262] dvb-usb: error while querying for an remote control event.
[  418.044232][ T6262] m920x_read = error: -19
[  418.048815][ T6262] dvb-usb: error while querying for an remote control event.
[  418.159576][T12038] /dev/rnullb0: Can't open blockdev
[  418.167692][ T6262] m920x_read = error: -19
[  418.174211][ T6262] dvb-usb: error while querying for an remote control event.
[  418.295905][ T6262] m920x_read = error: -19
[  418.306361][ T6262] dvb-usb: error while querying for an remote control event.
[  418.435747][ T6262] m920x_read = error: -19
[  418.440609][ T6262] dvb-usb: error while querying for an remote control event.
[  418.559880][ T6262] m920x_read = error: -19
[  418.564504][ T6262] dvb-usb: error while querying for an remote control event.
[  418.679418][ T6262] m920x_read = error: -19
[  418.683881][ T6262] dvb-usb: error while querying for an remote control event.
[  418.800109][ T6262] m920x_read = error: -19
[  418.805526][ T6262] dvb-usb: error while querying for an remote control event.
[  418.930583][ T6262] m920x_read = error: -19
[  418.935086][ T6262] dvb-usb: error while querying for an remote control event.
[  419.049960][ T6262] m920x_read = error: -19
[  419.055260][ T6262] dvb-usb: error while querying for an remote control event.
[  419.135110][T12047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1740'.
[  419.175847][ T7086] m920x_read = error: -19
[  419.181153][ T7086] dvb-usb: error while querying for an remote control event.
[  419.305953][ T7086] m920x_read = error: -19
[  419.311043][ T7086] dvb-usb: error while querying for an remote control event.
[  419.427776][ T7086] m920x_read = error: -19
[  419.432319][ T7086] dvb-usb: error while querying for an remote control event.
[  419.550466][ T7086] m920x_read = error: -19
[  419.555109][ T7086] dvb-usb: error while querying for an remote control event.
[  419.669416][ T6262] m920x_read = error: -19
[  419.673823][ T6262] dvb-usb: error while querying for an remote control event.
[  419.789171][ T6262] m920x_read = error: -19
[  419.795765][ T6262] dvb-usb: error while querying for an remote control event.
[  419.911174][ T6262] m920x_read = error: -19
[  419.915754][ T6262] dvb-usb: error while querying for an remote control event.
[  420.031778][ T6262] m920x_read = error: -19
[  420.038419][ T6262] dvb-usb: error while querying for an remote control event.
[  420.156602][ T6262] m920x_read = error: -19
[  420.164844][ T6262] dvb-usb: error while querying for an remote control event.
[  420.293026][ T6262] m920x_read = error: -19
[  420.298264][ T6262] dvb-usb: error while querying for an remote control event.
[  420.418607][T12055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.430413][ T6262] m920x_read = error: -19
[  420.434836][ T6262] dvb-usb: error while querying for an remote control event.
[  420.449079][T12055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.584066][ T6262] m920x_read = error: -19
[  420.590464][ T6262] dvb-usb: error while querying for an remote control event.
[  420.665860][    C0] net_ratelimit: 13464 callbacks suppressed
[  420.665883][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  420.684296][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  420.696720][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  420.709078][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  420.715851][ T6262] m920x_read = error: -19
[  420.721664][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  420.737898][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  420.739201][ T6262] dvb-usb: error while querying for an remote control event.
[  420.750409][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  420.770192][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  420.782848][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  420.795294][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  420.908582][ T6262] m920x_read = error: -19
[  420.913241][ T6262] dvb-usb: error while querying for an remote control event.
[  421.028802][ T6262] m920x_read = error: -19
[  421.035016][ T6262] dvb-usb: error while querying for an remote control event.
[  421.146609][ T6262] m920x_read = error: -19
[  421.157811][ T6262] dvb-usb: error while querying for an remote control event.
[  421.286447][ T6262] m920x_read = error: -19
[  421.298781][ T6262] dvb-usb: error while querying for an remote control event.
[  421.330475][   T30] audit: type=1326 audit(2000000098.580:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5c18ebe9 code=0x50000
[  421.368089][   T30] audit: type=1326 audit(2000000098.580:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5c18ebe9 code=0x50000
[  421.396694][   T30] audit: type=1326 audit(2000000098.580:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5c18ebe9 code=0x50000
[  421.424846][   T30] audit: type=1326 audit(2000000098.600:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5c18ebe9 code=0x50000
[  421.447228][ T6262] m920x_read = error: -19
[  421.451603][ T6262] dvb-usb: error while querying for an remote control event.
[  421.463054][   T30] audit: type=1326 audit(2000000098.600:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5c18ebe9 code=0x50000
[  421.489294][   T30] audit: type=1326 audit(2000000098.600:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5c18ebe9 code=0x50000
[  421.519487][T12064] CIFS: VFS: Malformed UNC in devname
[  421.520786][   T30] audit: type=1326 audit(2000000098.600:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5c18ebe9 code=0x50000
[  421.549337][   T30] audit: type=1326 audit(2000000098.600:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5c18ebe9 code=0x50000
[  421.574578][ T6262] m920x_read = error: -19
[  421.579894][ T6262] dvb-usb: error while querying for an remote control event.
[  421.589346][   T30] audit: type=1326 audit(2000000098.600:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5c18ebe9 code=0x50000
[  421.615588][   T30] audit: type=1326 audit(2000000098.600:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e5c18ebe9 code=0x50000
[  421.823992][ T6262] m920x_read = error: -19
[  421.874469][ T6262] dvb-usb: error while querying for an remote control event.
[  423.035831][ T7086] m920x_read = error: -19
[  423.043855][ T7086] dvb-usb: error while querying for an remote control event.
[  423.074343][T12070] /dev/rnullb0: Can't open blockdev
[  423.089309][T12072] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  423.109723][T12072] /dev/rnullb0: Can't open blockdev
[  423.185745][ T7086] m920x_read = error: -19
[  423.190166][ T7086] dvb-usb: error while querying for an remote control event.
[  423.317410][T12079] /dev/rnullb0: Can't open blockdev
[  423.375883][ T6262] m920x_read = error: -19
[  423.380887][ T6262] dvb-usb: error while querying for an remote control event.
[  423.515792][ T1937] m920x_read = error: -19
[  423.520249][ T1937] dvb-usb: error while querying for an remote control event.
[  423.566153][ T7086] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  423.658693][ T1937] m920x_read = error: -19
[  423.665681][ T1937] dvb-usb: error while querying for an remote control event.
[  423.681561][T12087] sctp: [Deprecated]: syz.7.1754 (pid 12087) Use of struct sctp_assoc_value in delayed_ack socket option.
[  423.681561][T12087] Use struct sctp_sack_info instead
[  423.705104][T12088] sctp: [Deprecated]: syz.7.1754 (pid 12088) Use of struct sctp_assoc_value in delayed_ack socket option.
[  423.705104][T12088] Use struct sctp_sack_info instead
[  423.751905][ T7086] usb 3-1: config 0 has an invalid interface number: 161 but max is 0
[  423.760538][ T7086] usb 3-1: config 0 has no interface number 0
[  423.770861][ T7086] usb 3-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31
[  423.783399][ T7086] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.801926][ T7086] usb 3-1: Product: syz
[  423.813050][ T1937] m920x_read = error: -19
[  423.825661][ T1937] dvb-usb: error while querying for an remote control event.
[  423.837723][ T7086] usb 3-1: Manufacturer: syz
[  423.848144][ T7086] usb 3-1: SerialNumber: syz
[  423.863395][ T7086] usb 3-1: config 0 descriptor??
[  423.969749][ T1937] m920x_read = error: -19
[  423.978045][ T1937] dvb-usb: error while querying for an remote control event.
[  424.105834][ T1937] m920x_read = error: -19
[  424.115254][ T7086] pl2303 3-1:0.161: required endpoints missing
[  424.128236][ T1937] dvb-usb: error while querying for an remote control event.
[  424.156726][ T7086] usb 3-1: USB disconnect, device number 14
[  424.265721][ T1937] m920x_read = error: -19
[  424.273476][ T1937] dvb-usb: error while querying for an remote control event.
[  424.395812][ T1937] m920x_read = error: -19
[  424.402392][ T1937] dvb-usb: error while querying for an remote control event.
[  424.518556][ T7086] m920x_read = error: -19
[  424.522986][ T7086] dvb-usb: error while querying for an remote control event.
[  424.655977][ T7086] m920x_read = error: -19
[  424.664783][ T7086] dvb-usb: error while querying for an remote control event.
[  424.785869][ T1937] m920x_read = error: -19
[  424.790277][ T1937] dvb-usb: error while querying for an remote control event.
[  424.917765][ T1937] m920x_read = error: -19
[  424.932385][ T1937] dvb-usb: error while querying for an remote control event.
[  425.065792][ T1937] m920x_read = error: -19
[  425.071737][ T1937] dvb-usb: error while querying for an remote control event.
[  425.185773][ T1937] m920x_read = error: -19
[  425.193383][ T1937] dvb-usb: error while querying for an remote control event.
[  425.315816][ T1937] m920x_read = error: -19
[  425.321948][ T1937] dvb-usb: error while querying for an remote control event.
[  425.437737][ T1937] m920x_read = error: -19
[  425.450169][ T1937] dvb-usb: error while querying for an remote control event.
[  425.499676][T12101] overlayfs: missing 'lowerdir'
[  425.575852][ T7086] m920x_read = error: -19
[  425.580435][ T7086] dvb-usb: error while querying for an remote control event.
[  425.675796][    C0] net_ratelimit: 11455 callbacks suppressed
[  425.675817][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  425.694284][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  425.706770][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  425.716035][ T7086] m920x_read = error: -19
[  425.719480][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  425.735691][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  425.748247][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  425.755151][ T7086] dvb-usb: error while querying for an remote control event.
[  425.760717][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  425.780227][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  425.792684][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  425.805253][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  425.907674][ T7086] m920x_read = error: -19
[  425.912211][ T7086] dvb-usb: error while querying for an remote control event.
[  426.031116][T12110] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1761'.
[  426.047469][T12110] /dev/rnullb0: Can't open blockdev
[  426.057137][ T6262] m920x_read = error: -19
[  426.061700][ T6262] dvb-usb: error while querying for an remote control event.
[  426.203756][ T6262] m920x_read = error: -19
[  426.215146][ T6262] dvb-usb: error while querying for an remote control event.
[  426.245735][ T7086] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  426.337186][ T6262] m920x_read = error: -19
[  426.341587][ T6262] dvb-usb: error while querying for an remote control event.
[  426.385750][ T7086] usb 3-1: device descriptor read/64, error -71
[  426.486982][ T1937] m920x_read = error: -19
[  426.492525][ T1937] dvb-usb: error while querying for an remote control event.
[  426.605762][ T1937] m920x_read = error: -19
[  426.610489][ T1937] dvb-usb: error while querying for an remote control event.
[  426.625813][ T7086] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  426.655949][ T6262] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  426.725740][ T1937] m920x_read = error: -19
[  426.730358][ T1937] dvb-usb: error while querying for an remote control event.
[  426.765868][ T7086] usb 3-1: device descriptor read/64, error -71
[  426.817662][ T6262] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  426.829321][ T6262] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  426.841473][ T6262] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  426.853972][ T1937] m920x_read = error: -19
[  426.867553][ T1937] dvb-usb: error while querying for an remote control event.
[  426.876365][ T6262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.885438][ T7086] usb usb3-port1: attempt power cycle
[  426.897178][ T6262] usb 5-1: Product: syz
[  426.901532][ T6262] usb 5-1: Manufacturer: syz
[  426.907654][ T6262] usb 5-1: SerialNumber: syz
[  426.975986][ T1937] m920x_read = error: -19
[  426.987631][ T1937] dvb-usb: error while querying for an remote control event.
[  427.108165][ T1937] m920x_read = error: -19
[  427.112889][ T1937] dvb-usb: error while querying for an remote control event.
[  427.139660][T12121] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  427.236025][ T1937] m920x_read = error: -19
[  427.245752][ T7086] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  427.253472][ T1937] dvb-usb: error while querying for an remote control event.
[  427.290150][ T7086] usb 3-1: device descriptor read/8, error -71
[  427.379309][ T1937] m920x_read = error: -19
[  427.386560][ T1937] dvb-usb: error while querying for an remote control event.
[  427.496019][   T44] m920x_read = error: -19
[  427.500664][   T44] dvb-usb: error while querying for an remote control event.
[  427.535947][ T7086] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  427.567940][ T7086] usb 3-1: device descriptor read/8, error -71
[  427.636932][ T1937] m920x_read = error: -19
[  427.641406][ T1937] dvb-usb: error while querying for an remote control event.
[  427.676106][ T7086] usb usb3-port1: unable to enumerate USB device
[  427.761857][ T7086] m920x_read = error: -19
[  427.770215][ T7086] dvb-usb: error while querying for an remote control event.
[  427.890282][ T7086] m920x_read = error: -19
[  427.896543][ T7086] dvb-usb: error while querying for an remote control event.
[  428.011666][ T7086] m920x_read = error: -19
[  428.016174][ T7086] dvb-usb: error while querying for an remote control event.
[  428.127902][ T7086] m920x_read = error: -19
[  428.132339][ T7086] dvb-usb: error while querying for an remote control event.
[  428.265883][ T7086] m920x_read = error: -19
[  428.272706][ T7086] dvb-usb: error while querying for an remote control event.
[  428.390133][ T7086] m920x_read = error: -19
[  428.396988][ T7086] dvb-usb: error while querying for an remote control event.
[  428.509593][ T7086] m920x_read = error: -19
[  428.519383][ T7086] dvb-usb: error while querying for an remote control event.
[  428.639611][ T7086] m920x_read = error: -19
[  428.645274][ T7086] dvb-usb: error while querying for an remote control event.
[  428.772125][ T7086] m920x_read = error: -19
[  428.778290][ T7086] dvb-usb: error while querying for an remote control event.
[  428.895815][   T44] m920x_read = error: -19
[  428.905137][   T44] dvb-usb: error while querying for an remote control event.
[  428.923772][T12130] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1767'.
[  428.950214][T12130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1767'.
[  429.037762][   T44] m920x_read = error: -19
[  429.043725][   T44] dvb-usb: error while querying for an remote control event.
[  429.156247][   T44] m920x_read = error: -19
[  429.160706][   T44] dvb-usb: error while querying for an remote control event.
[  429.258525][T12135] /dev/rnullb0: Can't open blockdev
[  429.280130][T12137] /dev/rnullb0: Can't open blockdev
[  429.295935][   T44] m920x_read = error: -19
[  429.300356][   T44] dvb-usb: error while querying for an remote control event.
[  429.439696][   T44] m920x_read = error: -19
[  429.462412][   T44] dvb-usb: error while querying for an remote control event.
[  429.556610][T12141] overlayfs: conflicting lowerdir path
[  429.606900][   T44] m920x_read = error: -19
[  429.617957][   T44] dvb-usb: error while querying for an remote control event.
[  429.630162][T12144] /dev/rnullb0: Can't open blockdev
[  429.759868][   T44] m920x_read = error: -19
[  429.771135][   T44] dvb-usb: error while querying for an remote control event.
[  429.906031][ T6262] usb 5-1: 0:2 : does not exist
[  429.915807][ T7086] m920x_read = error: -19
[  429.920209][ T7086] dvb-usb: error while querying for an remote control event.
[  429.973972][ T6262] usb 5-1: USB disconnect, device number 13
[  430.014752][ T7011] udevd[7011]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  430.076093][ T7086] m920x_read = error: -19
[  430.080503][ T7086] dvb-usb: error while querying for an remote control event.
[  430.245823][ T6262] m920x_read = error: -19
[  430.262658][ T6262] dvb-usb: error while querying for an remote control event.
[  430.405788][ T6262] m920x_read = error: -19
[  430.410196][ T6262] dvb-usb: error while querying for an remote control event.
[  430.561375][ T6262] m920x_read = error: -19
[  430.574544][ T6262] dvb-usb: error while querying for an remote control event.
[  430.685863][    C0] net_ratelimit: 11969 callbacks suppressed
[  430.685886][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  430.704371][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  430.710017][T12162] FAULT_INJECTION: forcing a failure.
[  430.710017][T12162] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  430.717625][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  430.729979][ T6262] m920x_read = error: -19
[  430.742314][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  430.758670][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  430.771118][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  430.783667][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  430.796322][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  430.808038][ T6262] dvb-usb: error while querying for an remote control event.
[  430.809095][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  430.828288][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  430.840229][T12162] CPU: 1 UID: 0 PID: 12162 Comm: syz.2.1777 Not tainted syzkaller #0 PREEMPT(full) 
[  430.840263][T12162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  430.840282][T12162] Call Trace:
[  430.840291][T12162]  <TASK>
[  430.840299][T12162]  dump_stack_lvl+0x189/0x250
[  430.840344][T12162]  ? __pfx____ratelimit+0x10/0x10
[  430.840371][T12162]  ? __pfx_dump_stack_lvl+0x10/0x10
[  430.840407][T12162]  ? __pfx__printk+0x10/0x10
[  430.840439][T12162]  ? __might_fault+0xb0/0x130
[  430.840478][T12162]  ? rcu_is_watching+0x15/0xb0
[  430.840505][T12162]  should_fail_ex+0x414/0x560
[  430.840538][T12162]  _copy_from_iter+0x1de/0x1790
[  430.840562][T12162]  ? skb_set_owner_w+0x25b/0x3a0
[  430.840598][T12162]  ? sock_alloc_send_pskb+0x875/0x990
[  430.840623][T12162]  ? __pfx__copy_from_iter+0x10/0x10
[  430.840649][T12162]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  430.840672][T12162]  skb_copy_datagram_from_iter+0xf5/0x720
[  430.840697][T12162]  ? lock_release+0x4b/0x3e0
[  430.840719][T12162]  ? skb_put+0x11b/0x210
[  430.840750][T12162]  tun_get_user+0x1691/0x3e20
[  430.840782][T12162]  ? rcu_is_watching+0x15/0xb0
[  430.840807][T12162]  ? lock_release+0x4b/0x3e0
[  430.840831][T12162]  ? aa_file_perm+0x44d/0x1550
[  430.840861][T12162]  ? __pfx_tun_get_user+0x10/0x10
[  430.840888][T12162]  ? _parse_integer_limit+0x1ae/0x1f0
[  430.840923][T12162]  ? kstrtoull+0x12f/0x1d0
[  430.840957][T12162]  ? ref_tracker_alloc+0x318/0x460
[  430.840989][T12162]  ? get_pid_task+0x20/0x1f0
[  430.841019][T12162]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  430.841053][T12162]  ? tun_get+0x1c/0x2f0
[  430.841077][T12162]  ? tun_get+0x1c/0x2f0
[  430.841103][T12162]  ? rcu_is_watching+0x15/0xb0
[  430.841125][T12162]  ? tun_get+0x1c/0x2f0
[  430.841150][T12162]  ? lock_release+0x4b/0x3e0
[  430.841169][T12162]  ? common_file_perm+0x1b5/0x230
[  430.841199][T12162]  ? tun_get+0x1c/0x2f0
[  430.841226][T12162]  tun_chr_write_iter+0x113/0x200
[  430.841255][T12162]  vfs_write+0x5c9/0xb30
[  430.841281][T12162]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  430.841308][T12162]  ? __pfx_vfs_write+0x10/0x10
[  430.841343][T12162]  ? __fget_files+0x2a/0x420
[  430.841375][T12162]  ksys_write+0x145/0x250
[  430.841397][T12162]  ? __pfx_ksys_write+0x10/0x10
[  430.841421][T12162]  ? rcu_is_watching+0x15/0xb0
[  430.841447][T12162]  do_syscall_64+0xfa/0xfa0
[  430.841478][T12162]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.841498][T12162]  ? clear_bhb_loop+0x60/0xb0
[  430.841523][T12162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.841551][T12162] RIP: 0033:0x7f6bca98ebe9
[  430.841571][T12162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  430.841592][T12162] RSP: 002b:00007f6bc8bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  430.841615][T12162] RAX: ffffffffffffffda RBX: 00007f6bcabc5fa0 RCX: 00007f6bca98ebe9
[  430.841632][T12162] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000005
[  430.841648][T12162] RBP: 00007f6bc8bf6090 R08: 0000000000000000 R09: 0000000000000000
[  430.841663][T12162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  430.841676][T12162] R13: 00007f6bcabc6038 R14: 00007f6bcabc5fa0 R15: 00007ffc0b0e95c8
[  430.841701][T12162]  </TASK>
[  430.955800][ T6262] m920x_read = error: -19
[  431.184873][T12165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.202533][T12165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  431.230934][ T6262] dvb-usb: error while querying for an remote control event.
[  431.346788][ T6262] m920x_read = error: -19
[  431.364023][ T6262] dvb-usb: error while querying for an remote control event.
[  431.508177][ T6262] m920x_read = error: -19
[  431.512600][ T6262] dvb-usb: error while querying for an remote control event.
[  431.646212][ T6262] m920x_read = error: -19
[  431.653868][ T6262] dvb-usb: error while querying for an remote control event.
[  431.785743][   T44] m920x_read = error: -19
[  431.790145][   T44] dvb-usb: error while querying for an remote control event.
[  431.897541][T12175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.915877][   T44] m920x_read = error: -19
[  431.915902][   T44] dvb-usb: error while querying for an remote control event.
[  431.956437][T12175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  432.035738][   T44] m920x_read = error: -19
[  432.040380][   T44] dvb-usb: error while querying for an remote control event.
[  432.165771][   T44] m920x_read = error: -19
[  432.170359][   T44] dvb-usb: error while querying for an remote control event.
[  432.285940][   T44] m920x_read = error: -19
[  432.290356][   T44] dvb-usb: error while querying for an remote control event.
[  432.436795][   T44] m920x_read = error: -19
[  432.441209][   T44] dvb-usb: error while querying for an remote control event.
[  432.485946][T12181] FAULT_INJECTION: forcing a failure.
[  432.485946][T12181] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  432.502045][T12181] CPU: 1 UID: 0 PID: 12181 Comm: syz.5.1783 Not tainted syzkaller #0 PREEMPT(full) 
[  432.502073][T12181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  432.502085][T12181] Call Trace:
[  432.502093][T12181]  <TASK>
[  432.502101][T12181]  dump_stack_lvl+0x189/0x250
[  432.502135][T12181]  ? __pfx____ratelimit+0x10/0x10
[  432.502160][T12181]  ? __pfx_dump_stack_lvl+0x10/0x10
[  432.502187][T12181]  ? __pfx__printk+0x10/0x10
[  432.502223][T12181]  ? __might_fault+0xb0/0x130
[  432.502252][T12181]  ? lock_release+0x4b/0x3e0
[  432.502269][T12181]  ? vfs_write+0x956/0xb30
[  432.502288][T12181]  ? rcu_is_watching+0x15/0xb0
[  432.502310][T12181]  should_fail_ex+0x414/0x560
[  432.502338][T12181]  _copy_from_user+0x2d/0xb0
[  432.502360][T12181]  __se_sys_msgctl+0x2a7/0x350
[  432.502387][T12181]  ? __pfx___se_sys_msgctl+0x10/0x10
[  432.502417][T12181]  ? ksys_write+0x22a/0x250
[  432.502436][T12181]  ? __pfx_ksys_write+0x10/0x10
[  432.502456][T12181]  ? rcu_is_watching+0x15/0xb0
[  432.502477][T12181]  do_syscall_64+0xfa/0xfa0
[  432.502503][T12181]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.502521][T12181]  ? clear_bhb_loop+0x60/0xb0
[  432.502542][T12181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.502560][T12181] RIP: 0033:0x7f72faf8ebe9
[  432.502593][T12181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  432.502611][T12181] RSP: 002b:00007f72fbe9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000047
[  432.502633][T12181] RAX: ffffffffffffffda RBX: 00007f72fb1c6180 RCX: 00007f72faf8ebe9
[  432.502647][T12181] RDX: 0000200000000240 RSI: 0000000000000001 RDI: 0000000000000000
[  432.502660][T12181] RBP: 00007f72fbe9c090 R08: 0000000000000000 R09: 0000000000000000
[  432.502672][T12181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  432.502684][T12181] R13: 00007f72fb1c6218 R14: 00007f72fb1c6180 R15: 00007ffe5cebfe78
[  432.502706][T12181]  </TASK>
[  432.699331][    C1] vkms_vblank_simulate: vblank timer overrun
[  432.709047][ T6262] m920x_read = error: -19
[  432.713458][ T6262] dvb-usb: error while querying for an remote control event.
[  432.836056][   T44] m920x_read = error: -19
[  432.840495][   T44] dvb-usb: error while querying for an remote control event.
[  432.955892][   T44] m920x_read = error: -19
[  432.980817][   T44] dvb-usb: error while querying for an remote control event.
[  433.105790][   T44] m920x_read = error: -19
[  433.110188][   T44] dvb-usb: error while querying for an remote control event.
[  433.247222][   T44] m920x_read = error: -19
[  433.252250][   T44] dvb-usb: error while querying for an remote control event.
[  433.375841][   T44] m920x_read = error: -19
[  433.384425][   T44] dvb-usb: error while querying for an remote control event.
[  433.464176][T12192] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  433.479028][T12192] block device autoloading is deprecated and will be removed.
[  433.515836][   T44] m920x_read = error: -19
[  433.520387][   T44] dvb-usb: error while querying for an remote control event.
[  433.546995][T12191] md2: using deprecated bitmap file support
[  433.555341][T12191] md2: error: bitmap file must be a regular file
[  433.651473][ T6262] m920x_read = error: -19
[  433.658404][ T6262] dvb-usb: error while querying for an remote control event.
[  433.775768][   T44] m920x_read = error: -19
[  433.780205][   T44] dvb-usb: error while querying for an remote control event.
[  433.916029][   T44] m920x_read = error: -19
[  433.924390][   T44] dvb-usb: error while querying for an remote control event.
[  434.065773][ T6262] m920x_read = error: -19
[  434.070938][ T6262] dvb-usb: error while querying for an remote control event.
[  434.206049][ T6262] m920x_read = error: -19
[  434.226643][ T6262] dvb-usb: error while querying for an remote control event.
[  434.285699][   T44] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  434.355972][ T7086] m920x_read = error: -19
[  434.364803][ T7086] dvb-usb: error while querying for an remote control event.
[  434.477298][   T44] usb 5-1: config 0 has an invalid interface number: 161 but max is 0
[  434.500670][   T44] usb 5-1: config 0 has no interface number 0
[  434.517319][ T7086] m920x_read = error: -19
[  434.532067][ T7086] dvb-usb: error while querying for an remote control event.
[  434.562130][   T44] usb 5-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31
[  434.587383][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.615590][   T44] usb 5-1: Product: syz
[  434.635545][   T44] usb 5-1: Manufacturer: syz
[  434.651845][   T44] usb 5-1: SerialNumber: syz
[  434.681894][   T44] usb 5-1: config 0 descriptor??
[  434.688235][ T7086] m920x_read = error: -19
[  434.699704][ T7086] dvb-usb: error while querying for an remote control event.
[  434.835962][ T7086] m920x_read = error: -19
[  434.850701][ T7086] dvb-usb: error while querying for an remote control event.
[  434.958432][   T44] pl2303 5-1:0.161: required endpoints missing
[  435.008300][   T44] usb 5-1: USB disconnect, device number 14
[  435.027265][ T7086] m920x_read = error: -19
[  435.031695][ T7086] dvb-usb: error while querying for an remote control event.
[  435.166361][ T1937] m920x_read = error: -19
[  435.170767][ T1937] dvb-usb: error while querying for an remote control event.
[  435.325826][   T44] m920x_read = error: -19
[  435.337056][   T44] dvb-usb: error while querying for an remote control event.
[  435.475863][   T44] m920x_read = error: -19
[  435.490523][   T44] dvb-usb: error while querying for an remote control event.
[  435.630614][   T44] m920x_read = error: -19
[  435.635019][   T44] dvb-usb: error while querying for an remote control event.
[  435.695734][    C0] net_ratelimit: 10587 callbacks suppressed
[  435.695763][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  435.714299][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  435.726802][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  435.739336][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  435.751865][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  435.764413][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  435.776966][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  435.789660][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  435.802170][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  435.814746][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  435.836127][   T44] m920x_read = error: -19
[  435.843661][   T44] dvb-usb: error while querying for an remote control event.
[  435.973043][   T44] m920x_read = error: -19
[  435.981202][   T44] dvb-usb: error while querying for an remote control event.
[  436.136161][T12219] FAULT_INJECTION: forcing a failure.
[  436.136161][T12219] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  436.149763][   T44] m920x_read = error: -19
[  436.154137][   T44] dvb-usb: error while querying for an remote control event.
[  436.177121][T12219] CPU: 1 UID: 0 PID: 12219 Comm: syz.5.1793 Not tainted syzkaller #0 PREEMPT(full) 
[  436.177151][T12219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  436.177165][T12219] Call Trace:
[  436.177173][T12219]  <TASK>
[  436.177183][T12219]  dump_stack_lvl+0x189/0x250
[  436.177219][T12219]  ? __pfx____ratelimit+0x10/0x10
[  436.177244][T12219]  ? __pfx_dump_stack_lvl+0x10/0x10
[  436.177275][T12219]  ? __pfx__printk+0x10/0x10
[  436.177307][T12219]  ? rcu_is_watching+0x15/0xb0
[  436.177332][T12219]  should_fail_ex+0x414/0x560
[  436.177363][T12219]  _copy_to_user+0x31/0xb0
[  436.177388][T12219]  simple_read_from_buffer+0xe1/0x170
[  436.177413][T12219]  proc_fail_nth_read+0x1b3/0x220
[  436.177444][T12219]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  436.177475][T12219]  ? rw_verify_area+0x2a6/0x4d0
[  436.177494][T12219]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  436.177524][T12219]  vfs_read+0x200/0xa30
[  436.177543][T12219]  ? fdget_pos+0x247/0x320
[  436.177601][T12219]  ? __pfx___mutex_lock+0x10/0x10
[  436.177631][T12219]  ? __pfx_vfs_read+0x10/0x10
[  436.177655][T12219]  ? __fget_files+0x3a0/0x420
[  436.177679][T12219]  ? __fget_files+0x2a/0x420
[  436.177706][T12219]  ksys_read+0x145/0x250
[  436.177728][T12219]  ? __pfx_ksys_read+0x10/0x10
[  436.177750][T12219]  ? rcu_is_watching+0x15/0xb0
[  436.177774][T12219]  do_syscall_64+0xfa/0xfa0
[  436.177801][T12219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.177821][T12219]  ? clear_bhb_loop+0x60/0xb0
[  436.177843][T12219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.177863][T12219] RIP: 0033:0x7f72faf8d5fc
[  436.177882][T12219] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  436.177900][T12219] RSP: 002b:00007f72fbe9c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  436.177923][T12219] RAX: ffffffffffffffda RBX: 00007f72fb1c6180 RCX: 00007f72faf8d5fc
[  436.177938][T12219] RDX: 000000000000000f RSI: 00007f72fbe9c0a0 RDI: 0000000000000003
[  436.177951][T12219] RBP: 00007f72fbe9c090 R08: 0000000000000000 R09: 0000000000000000
[  436.177964][T12219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.177976][T12219] R13: 00007f72fb1c6218 R14: 00007f72fb1c6180 R15: 00007ffe5cebfe78
[  436.177999][T12219]  </TASK>
[  436.408848][    C1] vkms_vblank_simulate: vblank timer overrun
[  436.485746][   T44] m920x_read = error: -19
[  436.490152][   T44] dvb-usb: error while querying for an remote control event.
[  436.550893][T12221] /dev/rnullb0: Can't open blockdev
[  436.606003][   T44] m920x_read = error: -19
[  436.610549][   T44] dvb-usb: error while querying for an remote control event.
[  436.725984][   T44] m920x_read = error: -19
[  436.730415][   T44] dvb-usb: error while querying for an remote control event.
[  436.845979][   T44] m920x_read = error: -19
[  436.850539][   T44] dvb-usb: error while querying for an remote control event.
[  436.950538][T12231] FAULT_INJECTION: forcing a failure.
[  436.950538][T12231] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  436.977924][T12227] 9p: Bad value for 'wfdno'
[  436.985814][   T44] m920x_read = error: -19
[  436.995512][   T44] dvb-usb: error while querying for an remote control event.
[  437.016370][T12231] CPU: 1 UID: 0 PID: 12231 Comm: syz.5.1799 Not tainted syzkaller #0 PREEMPT(full) 
[  437.016401][T12231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  437.016414][T12231] Call Trace:
[  437.016422][T12231]  <TASK>
[  437.016431][T12231]  dump_stack_lvl+0x189/0x250
[  437.016466][T12231]  ? __pfx____ratelimit+0x10/0x10
[  437.016492][T12231]  ? __pfx_dump_stack_lvl+0x10/0x10
[  437.016523][T12231]  ? __pfx__printk+0x10/0x10
[  437.016549][T12231]  ? __might_fault+0xb0/0x130
[  437.016580][T12231]  ? policy_nodemask+0x27c/0x720
[  437.016611][T12231]  ? rcu_is_watching+0x15/0xb0
[  437.016635][T12231]  should_fail_ex+0x414/0x560
[  437.016664][T12231]  _copy_from_iter+0x1de/0x1790
[  437.016683][T12231]  ? __might_fault+0xb0/0x130
[  437.016711][T12231]  ? __might_fault+0xcc/0x130
[  437.016758][T12231]  ? _copy_from_iter+0x24f/0x1790
[  437.016781][T12231]  ? __pfx__copy_from_iter+0x10/0x10
[  437.016799][T12231]  ? sock_alloc_send_pskb+0x875/0x990
[  437.016822][T12231]  ? __pfx__copy_from_iter+0x10/0x10
[  437.016843][T12231]  ? page_copy_sane+0x16a/0x280
[  437.016864][T12231]  copy_page_from_iter+0xdd/0x170
[  437.016887][T12231]  skb_copy_datagram_from_iter+0x306/0x720
[  437.016922][T12231]  tun_get_user+0x1691/0x3e20
[  437.016951][T12231]  ? rcu_is_watching+0x15/0xb0
[  437.016975][T12231]  ? lock_release+0x4b/0x3e0
[  437.016998][T12231]  ? aa_file_perm+0x44d/0x1550
[  437.017026][T12231]  ? __pfx_tun_get_user+0x10/0x10
[  437.017051][T12231]  ? _parse_integer_limit+0x1ae/0x1f0
[  437.017084][T12231]  ? kstrtoull+0x12f/0x1d0
[  437.017116][T12231]  ? ref_tracker_alloc+0x318/0x460
[  437.017146][T12231]  ? get_pid_task+0x20/0x1f0
[  437.017175][T12231]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  437.017206][T12231]  ? tun_get+0x1c/0x2f0
[  437.017230][T12231]  ? tun_get+0x1c/0x2f0
[  437.017254][T12231]  ? rcu_is_watching+0x15/0xb0
[  437.017275][T12231]  ? tun_get+0x1c/0x2f0
[  437.017298][T12231]  ? lock_release+0x4b/0x3e0
[  437.017316][T12231]  ? common_file_perm+0x1b5/0x230
[  437.017343][T12231]  ? tun_get+0x1c/0x2f0
[  437.017369][T12231]  tun_chr_write_iter+0x113/0x200
[  437.017401][T12231]  vfs_write+0x5c9/0xb30
[  437.017423][T12231]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  437.017449][T12231]  ? __pfx_vfs_write+0x10/0x10
[  437.017474][T12231]  ? __fget_files+0x2a/0x420
[  437.017526][T12231]  ksys_write+0x145/0x250
[  437.017549][T12231]  ? __pfx_ksys_write+0x10/0x10
[  437.017570][T12231]  ? rcu_is_watching+0x15/0xb0
[  437.017594][T12231]  do_syscall_64+0xfa/0xfa0
[  437.017622][T12231]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.017643][T12231]  ? clear_bhb_loop+0x60/0xb0
[  437.017666][T12231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.017687][T12231] RIP: 0033:0x7f72faf8ebe9
[  437.017705][T12231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  437.017723][T12231] RSP: 002b:00007f72fbede038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  437.017745][T12231] RAX: ffffffffffffffda RBX: 00007f72fb1c5fa0 RCX: 00007f72faf8ebe9
[  437.017760][T12231] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000005
[  437.017773][T12231] RBP: 00007f72fbede090 R08: 0000000000000000 R09: 0000000000000000
[  437.017786][T12231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  437.017799][T12231] R13: 00007f72fb1c6038 R14: 00007f72fb1c5fa0 R15: 00007ffe5cebfe78
[  437.017822][T12231]  </TASK>
[  437.355729][    C1] vkms_vblank_simulate: vblank timer overrun
[  437.467401][   T44] m920x_read = error: -19
[  437.471920][   T44] dvb-usb: error while querying for an remote control event.
[  437.591813][   T44] m920x_read = error: -19
[  437.596305][   T44] dvb-usb: error while querying for an remote control event.
[  437.722920][   T44] m920x_read = error: -19
[  437.735679][   T44] dvb-usb: error while querying for an remote control event.
[  437.787532][T12235] /dev/rnullb0: Can't open blockdev
[  437.881719][   T44] m920x_read = error: -19
[  437.896935][   T44] dvb-usb: error while querying for an remote control event.
[  438.025849][ T1937] m920x_read = error: -19
[  438.033452][ T1937] dvb-usb: error while querying for an remote control event.
[  438.156111][ T1937] m920x_read = error: -19
[  438.160557][ T1937] dvb-usb: error while querying for an remote control event.
[  438.169792][   T44] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  438.316380][ T7086] m920x_read = error: -19
[  438.320798][ T7086] dvb-usb: error while querying for an remote control event.
[  438.345786][   T44] usb 5-1: Using ep0 maxpacket: 16
[  438.355015][   T44] usb 5-1: unable to get BOS descriptor or descriptor too short
[  438.365383][   T44] usb 5-1: config 250 has an invalid interface number: 88 but max is 0
[  438.376796][   T44] usb 5-1: config 250 has no interface number 0
[  438.383225][   T44] usb 5-1: config 250 interface 88 has no altsetting 0
[  438.396183][   T44] usb 5-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=cf.c9
[  438.411828][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.421930][   T44] usb 5-1: Product: syz
[  438.430413][   T44] usb 5-1: Manufacturer: syz
[  438.435178][   T44] usb 5-1: SerialNumber: syz
[  438.445800][ T7086] m920x_read = error: -19
[  438.452027][ T7086] dvb-usb: error while querying for an remote control event.
[  438.565869][ T7086] m920x_read = error: -19
[  438.573057][ T7086] dvb-usb: error while querying for an remote control event.
[  438.705903][ T7086] m920x_read = error: -19
[  438.713256][ T7086] dvb-usb: error while querying for an remote control event.
[  438.815905][ T7086] m920x_read = error: -19
[  438.823184][ T7086] dvb-usb: error while querying for an remote control event.
[  438.966002][ T7086] m920x_read = error: -19
[  438.974376][ T7086] dvb-usb: error while querying for an remote control event.
[  439.098854][ T1937] m920x_read = error: -19
[  439.114352][ T1937] dvb-usb: error while querying for an remote control event.
[  439.246673][ T1937] m920x_read = error: -19
[  439.253861][ T1937] dvb-usb: error while querying for an remote control event.
[  439.376152][ T1937] m920x_read = error: -19
[  439.381928][ T1937] dvb-usb: error while querying for an remote control event.
[  439.497944][ T1937] m920x_read = error: -19
[  439.502494][ T1937] dvb-usb: error while querying for an remote control event.
[  439.618652][ T1937] m920x_read = error: -19
[  439.625326][ T1937] dvb-usb: error while querying for an remote control event.
[  439.735858][ T1937] m920x_read = error: -19
[  439.742426][ T1937] dvb-usb: error while querying for an remote control event.
[  439.866491][ T1937] m920x_read = error: -19
[  439.872856][ T1937] dvb-usb: error while querying for an remote control event.
[  439.995810][ T1937] m920x_read = error: -19
[  440.003711][ T1937] dvb-usb: error while querying for an remote control event.
[  440.116671][ T1937] m920x_read = error: -19
[  440.124472][ T1937] dvb-usb: error while querying for an remote control event.
[  440.140924][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  440.265749][ T1937] m920x_read = error: -19
[  440.270201][ T1937] dvb-usb: error while querying for an remote control event.
[  440.389975][ T1937] m920x_read = error: -19
[  440.395163][ T1937] dvb-usb: error while querying for an remote control event.
[  440.506453][ T1937] m920x_read = error: -19
[  440.511481][ T1937] dvb-usb: error while querying for an remote control event.
[  440.635720][ T1937] m920x_read = error: -19
[  440.640225][ T1937] dvb-usb: error while querying for an remote control event.
[  440.705772][    C0] net_ratelimit: 10803 callbacks suppressed
[  440.705797][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  440.724275][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  440.736930][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  440.749522][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  440.762219][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  440.774784][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  440.775793][ T1937] m920x_read = error: -19
[  440.787385][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  440.804203][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  440.816923][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  440.824527][ T1937] dvb-usb: error while querying for an remote control event.
[  440.829532][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  440.851556][T12267] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  440.875836][T12267] /dev/rnullb0: Can't open blockdev
[  440.902442][T12267] smc: net device bond0 erased user defined pnetid SYZ0
[  440.976274][ T1937] m920x_read = error: -19
[  440.988720][ T1937] dvb-usb: error while querying for an remote control event.
[  441.145895][ T1937] m920x_read = error: -19
[  441.150403][ T1937] dvb-usb: error while querying for an remote control event.
[  441.296336][ T1937] m920x_read = error: -19
[  441.300787][ T1937] dvb-usb: error while querying for an remote control event.
[  441.425841][ T1937] m920x_read = error: -19
[  441.433076][ T1937] dvb-usb: error while querying for an remote control event.
[  441.548417][ T1937] m920x_read = error: -19
[  441.553025][ T1937] dvb-usb: error while querying for an remote control event.
[  441.669904][ T1937] m920x_read = error: -19
[  441.675986][ T1937] dvb-usb: error while querying for an remote control event.
[  441.787972][ T1937] m920x_read = error: -19
[  441.794149][ T1937] dvb-usb: error while querying for an remote control event.
[  441.896667][   T44] qmi_wwan 5-1:250.88: bogus CDC Union: master=0, slave=0
[  441.905867][ T1937] m920x_read = error: -19
[  441.910260][ T1937] dvb-usb: error while querying for an remote control event.
[  441.929643][   T44] qmi_wwan 5-1:250.88: probe with driver qmi_wwan failed with error -22
[  441.955240][   T44] usb 5-1: USB disconnect, device number 15
[  442.043601][T12280] FAULT_INJECTION: forcing a failure.
[  442.043601][T12280] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.057757][ T7596] m920x_read = error: -19
[  442.062149][ T7596] dvb-usb: error while querying for an remote control event.
[  442.108358][T12280] CPU: 1 UID: 0 PID: 12280 Comm: syz.2.1815 Not tainted syzkaller #0 PREEMPT(full) 
[  442.108388][T12280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  442.108401][T12280] Call Trace:
[  442.108409][T12280]  <TASK>
[  442.108419][T12280]  dump_stack_lvl+0x189/0x250
[  442.108455][T12280]  ? __pfx____ratelimit+0x10/0x10
[  442.108482][T12280]  ? __pfx_dump_stack_lvl+0x10/0x10
[  442.108513][T12280]  ? __pfx__printk+0x10/0x10
[  442.108541][T12280]  ? __might_fault+0xb0/0x130
[  442.108575][T12280]  ? rcu_is_watching+0x15/0xb0
[  442.108605][T12280]  should_fail_ex+0x414/0x560
[  442.108653][T12280]  _copy_from_iter+0x1de/0x1790
[  442.108672][T12280]  ? __might_fault+0xb0/0x130
[  442.108700][T12280]  ? __might_fault+0xcc/0x130
[  442.108729][T12280]  ? _copy_from_iter+0x24f/0x1790
[  442.108751][T12280]  ? __pfx__copy_from_iter+0x10/0x10
[  442.108769][T12280]  ? sock_alloc_send_pskb+0x875/0x990
[  442.108792][T12280]  ? __pfx__copy_from_iter+0x10/0x10
[  442.108810][T12280]  ? page_copy_sane+0x16a/0x280
[  442.108829][T12280]  copy_page_from_iter+0xdd/0x170
[  442.108851][T12280]  skb_copy_datagram_from_iter+0x306/0x720
[  442.108877][T12280]  tun_get_user+0x1691/0x3e20
[  442.108905][T12280]  ? rcu_is_watching+0x15/0xb0
[  442.108927][T12280]  ? lock_release+0x4b/0x3e0
[  442.108948][T12280]  ? aa_file_perm+0x44d/0x1550
[  442.108976][T12280]  ? __pfx_tun_get_user+0x10/0x10
[  442.109000][T12280]  ? _parse_integer_limit+0x1ae/0x1f0
[  442.109032][T12280]  ? kstrtoull+0x12f/0x1d0
[  442.109064][T12280]  ? ref_tracker_alloc+0x318/0x460
[  442.109091][T12280]  ? get_pid_task+0x20/0x1f0
[  442.109118][T12280]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  442.109148][T12280]  ? tun_get+0x1c/0x2f0
[  442.109171][T12280]  ? tun_get+0x1c/0x2f0
[  442.109193][T12280]  ? rcu_is_watching+0x15/0xb0
[  442.109214][T12280]  ? tun_get+0x1c/0x2f0
[  442.109235][T12280]  ? lock_release+0x4b/0x3e0
[  442.109260][T12280]  ? common_file_perm+0x1b5/0x230
[  442.109286][T12280]  ? tun_get+0x1c/0x2f0
[  442.109311][T12280]  tun_chr_write_iter+0x113/0x200
[  442.109337][T12280]  vfs_write+0x5c9/0xb30
[  442.109363][T12280]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  442.109388][T12280]  ? __pfx_vfs_write+0x10/0x10
[  442.109412][T12280]  ? __fget_files+0x2a/0x420
[  442.109439][T12280]  ksys_write+0x145/0x250
[  442.109461][T12280]  ? __pfx_ksys_write+0x10/0x10
[  442.109482][T12280]  ? rcu_is_watching+0x15/0xb0
[  442.109505][T12280]  do_syscall_64+0xfa/0xfa0
[  442.109533][T12280]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.109553][T12280]  ? clear_bhb_loop+0x60/0xb0
[  442.109574][T12280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.109595][T12280] RIP: 0033:0x7f6bca98ebe9
[  442.109613][T12280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  442.109637][T12280] RSP: 002b:00007f6bc8bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  442.109659][T12280] RAX: ffffffffffffffda RBX: 00007f6bcabc5fa0 RCX: 00007f6bca98ebe9
[  442.109674][T12280] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000005
[  442.109687][T12280] RBP: 00007f6bc8bf6090 R08: 0000000000000000 R09: 0000000000000000
[  442.109699][T12280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.109711][T12280] R13: 00007f6bcabc6038 R14: 00007f6bcabc5fa0 R15: 00007ffc0b0e95c8
[  442.109734][T12280]  </TASK>
[  442.832974][ T7596] m920x_read = error: -19
[  442.842009][ T7596] dvb-usb: error while querying for an remote control event.
[  443.026208][ T7086] m920x_read = error: -19
[  443.030623][ T7086] dvb-usb: error while querying for an remote control event.
[  443.145717][   T44] m920x_read = error: -19
[  443.150277][   T44] dvb-usb: error while querying for an remote control event.
[  443.279364][   T44] m920x_read = error: -19
[  443.283955][   T44] dvb-usb: error while querying for an remote control event.
[  443.405728][   T44] m920x_read = error: -19
[  443.410142][   T44] dvb-usb: error while querying for an remote control event.
[  443.560903][   T44] m920x_read = error: -19
[  443.575530][   T44] dvb-usb: error while querying for an remote control event.
[  443.673497][T12298] nbd_handle_cmd: 2 callbacks suppressed
[  443.673520][T12298] block nbd4: Attempted send on invalid socket
[  443.688009][T12298] blk_print_req_error: 2 callbacks suppressed
[  443.688027][T12298] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  443.719509][   T44] m920x_read = error: -19
[  443.724335][   T44] dvb-usb: error while querying for an remote control event.
[  443.837366][   T44] m920x_read = error: -19
[  443.841888][   T44] dvb-usb: error while querying for an remote control event.
[  444.889566][ T7086] m920x_read = error: -19
[  444.893979][ T7086] dvb-usb: error while querying for an remote control event.
[  445.715709][    C1] net_ratelimit: 12584 callbacks suppressed
[  445.715709][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  445.715731][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  445.722151][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  445.733952][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  445.746099][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  445.757836][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  445.770058][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  445.781806][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  445.793894][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  445.805708][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  450.725882][    C0] net_ratelimit: 31644 callbacks suppressed
[  450.725894][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  450.725903][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  450.726358][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  450.732108][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  450.744396][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  450.756805][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  450.768578][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  450.780184][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  450.792429][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  450.805290][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  455.735657][    C1] net_ratelimit: 20378 callbacks suppressed
[  455.735664][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  455.735677][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  455.736622][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  455.742237][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  455.753870][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  455.766049][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  455.778453][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  455.790033][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  455.801677][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  455.813853][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  460.745679][    C0] net_ratelimit: 20789 callbacks suppressed
[  460.745701][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  460.745843][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  460.752147][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  460.763837][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  460.776321][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  460.788466][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  460.800169][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  460.811739][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  460.823923][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  460.836328][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  465.755661][    C1] net_ratelimit: 20796 callbacks suppressed
[  465.755684][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  465.755769][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  465.762482][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  465.774191][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  465.785856][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  465.798191][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  465.810394][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  465.822068][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  465.833720][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  465.846037][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  470.765716][    C1] net_ratelimit: 20479 callbacks suppressed
[  470.765739][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  470.765871][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  470.772631][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  470.784196][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  470.795907][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  470.808102][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  470.820494][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  470.832070][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  470.843720][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  470.856038][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  475.775776][    C0] net_ratelimit: 20348 callbacks suppressed
[  475.775801][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  475.776080][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  475.782365][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  475.794287][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  475.806643][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  475.818830][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  475.830494][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  475.842201][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  475.854580][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  475.866712][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  480.786010][    C0] net_ratelimit: 22482 callbacks suppressed
[  480.786034][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  480.786092][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  480.792529][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  480.804459][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  480.816459][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  480.829028][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  480.840676][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  480.852454][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  480.864610][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  480.876925][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  481.897002][ T7086] m920x_read = error: -19
[  481.901403][ T7086] dvb-usb: error while querying for an remote control event.
[  485.795733][    C0] net_ratelimit: 23319 callbacks suppressed
[  485.795757][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  485.796039][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  485.802273][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  485.813938][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  485.826048][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  485.838976][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  485.850344][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  485.861984][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  485.874302][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  485.886621][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  489.498840][   T44] m920x_read = error: -19
[  489.503257][   T44] dvb-usb: error while querying for an remote control event.
[  490.805813][    C1] net_ratelimit: 23066 callbacks suppressed
[  490.805837][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  490.806176][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  490.812646][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  490.824360][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  490.835922][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  490.847915][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  490.860440][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  490.872136][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  490.883794][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  490.896273][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  495.815676][    C0] net_ratelimit: 22779 callbacks suppressed
[  495.815700][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  495.816042][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  495.822211][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  495.834003][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  495.846251][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  495.858492][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  495.869780][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  495.881780][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  495.894193][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  495.906471][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  500.825658][    C1] net_ratelimit: 22735 callbacks suppressed
[  500.825664][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  500.825680][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  500.825918][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  500.832093][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  500.844741][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  500.856132][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  500.868075][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  500.880630][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  500.892831][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  500.904587][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  502.752902][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  505.835874][    C1] net_ratelimit: 22542 callbacks suppressed
[  505.835887][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  505.835899][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  505.836121][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  505.842184][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  505.854707][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  505.866660][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  505.878204][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  505.890411][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  505.902656][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  505.914049][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  510.845666][    C0] net_ratelimit: 22283 callbacks suppressed
[  510.845690][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  510.845722][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  510.852230][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  510.864726][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  510.876031][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  510.887912][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  510.900230][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  510.912473][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  510.924113][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  510.935732][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  515.855781][    C1] net_ratelimit: 23118 callbacks suppressed
[  515.855792][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  515.855803][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  515.856597][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  515.862044][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  515.874067][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  515.886327][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  515.898536][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  515.910309][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  515.921888][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  515.933778][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  520.865654][    C0] net_ratelimit: 24719 callbacks suppressed
[  520.865677][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  520.865678][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  520.865926][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  520.871913][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  520.883829][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  520.896066][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  520.908436][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  520.920208][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  520.931811][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  520.943653][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  525.875663][    C1] net_ratelimit: 25367 callbacks suppressed
[  525.875686][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  525.875968][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  525.881907][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  525.894156][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  525.906474][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  525.917830][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  525.929870][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  525.942194][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  525.953876][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  525.966270][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  530.886045][    C0] net_ratelimit: 25460 callbacks suppressed
[  530.886069][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  530.886279][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  530.892353][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  530.904281][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  530.916664][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  530.928454][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  530.940657][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  530.953080][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  530.964211][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  530.976173][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  535.895656][    C0] net_ratelimit: 25549 callbacks suppressed
[  535.895682][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  535.896266][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  535.902250][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  535.913836][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  535.925870][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  535.937751][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  535.950276][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  535.962580][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  535.974364][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  535.985999][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  540.905996][    C1] net_ratelimit: 25417 callbacks suppressed
[  540.906020][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  540.906024][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  540.906249][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  540.912241][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  540.924480][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  540.937137][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  540.948584][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  540.960179][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  540.972076][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  540.984110][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  545.915857][    C0] net_ratelimit: 24631 callbacks suppressed
[  545.915879][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  545.916309][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  545.922087][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  545.934009][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  545.946529][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  545.958144][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  545.971275][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  545.982608][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  545.993958][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  546.005853][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  550.925641][    C1] net_ratelimit: 24347 callbacks suppressed
[  550.925665][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  550.925868][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  550.931905][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  550.944260][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  550.956610][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  550.967767][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  550.979679][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  550.992242][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  551.003785][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  551.016302][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  551.995589][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  552.002584][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P12306/1:b..l
[  552.010608][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=78453, q=200516 ncpus=2)
[  552.018624][    C1] task:syz.4.1823      state:R  running task     stack:26440 pid:12306 tgid:12302 ppid:6786   task_flags:0x400140 flags:0x00004006
[  552.032170][    C1] Call Trace:
[  552.035558][    C1]  <TASK>
[  552.038510][    C1]  __schedule+0x1798/0x4cc0
[  552.043055][    C1]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[  552.049854][    C1]  ? __pfx___schedule+0x10/0x10
[  552.054826][    C1]  ? rcu_is_watching+0x15/0xb0
[  552.059662][    C1]  ? rcu_is_watching+0x15/0xb0
[  552.064454][    C1]  ? percpu_ref_put_many+0x22/0x240
[  552.069694][    C1]  ? percpu_ref_put_many+0x22/0x240
[  552.074930][    C1]  ? rcu_is_watching+0x15/0xb0
[  552.079719][    C1]  preempt_schedule_irq+0xb5/0x150
[  552.084861][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  552.090610][    C1]  ? rcu_is_watching+0x15/0xb0
[  552.095414][    C1]  ? rcu_irq_exit_check_preempt+0xd6/0x210
[  552.101337][    C1]  irqentry_exit+0x6f/0x90
[  552.105786][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  552.111814][    C1] RIP: 0010:xas_load+0x459/0x5b0
[  552.116791][    C1] Code: c1 0f 8c f5 fe ff ff 48 8b 3c 24 e8 61 ad a0 f6 e9 e7 fe ff ff 41 83 e7 3f e8 13 04 3d f6 eb 05 e8 0c 04 3d f6 4c 8b 64 24 38 <4c> 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 48 8b 1c 24 0f 85 da 00
[  552.136433][    C1] RSP: 0018:ffffc90003937040 EFLAGS: 00000246
[  552.142529][    C1] RAX: ffffffff8b83cabd RBX: dffffc0000000000 RCX: 0000000000080000
[  552.150537][    C1] RDX: ffffc90017be3000 RSI: 000000000007ffff RDI: 0000000000080000
[  552.158535][    C1] RBP: ffff8880477f2680 R08: ffff88802cb88000 R09: 0000000000000002
[  552.166620][    C1] R10: 0000000000000003 R11: 0000000000000002 R12: ffffc900039371d2
[  552.174613][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000010
[  552.182623][    C1]  ? xas_load+0x44d/0x5b0
[  552.187004][    C1]  xas_find+0x157/0x990
[  552.191207][    C1]  find_get_entries+0x1cf/0x7f0
[  552.196093][    C1]  ? __pfx___blk_flush_plug+0x10/0x10
[  552.201496][    C1]  ? find_get_entries+0xfe/0x7f0
[  552.206469][    C1]  ? __pfx_find_get_entries+0x10/0x10
[  552.211875][    C1]  invalidate_inode_pages2_range+0x13f/0xa80
[  552.217908][    C1]  ? rcu_is_watching+0x15/0xb0
[  552.222700][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  552.227948][    C1]  ? wait_for_common_io+0x4e7/0x600
[  552.233178][    C1]  ? __pfx_invalidate_inode_pages2_range+0x10/0x10
[  552.239733][    C1]  ? blk_status_to_errno+0x22/0x80
[  552.244879][    C1]  ? submit_bio_wait+0x183/0x200
[  552.250103][    C1]  ? __pfx_submit_bio_wait+0x10/0x10
[  552.255433][    C1]  ? __pfx_blkdev_direct_IO+0x10/0x10
[  552.260843][    C1]  kiocb_invalidate_post_direct_write+0x12d/0x2c0
[  552.267293][    C1]  ? __pfx_kiocb_invalidate_post_direct_write+0x10/0x10
[  552.274264][    C1]  ? __pfx_submit_bio_wait_endio+0x10/0x10
[  552.280103][    C1]  ? __pfx_current_time+0x10/0x10
[  552.285167][    C1]  ? kiocb_invalidate_pages+0xfb/0x140
[  552.290656][    C1]  blkdev_direct_write+0x9e/0x140
[  552.295718][    C1]  blkdev_write_iter+0x547/0x710
[  552.300695][    C1]  iter_file_splice_write+0x975/0x10e0
[  552.306192][    C1]  ? __pfx_iter_file_splice_write+0x10/0x10
[  552.312111][    C1]  ? __pfx_copy_splice_read+0x10/0x10
[  552.317519][    C1]  ? __pfx_iter_file_splice_write+0x10/0x10
[  552.323439][    C1]  direct_splice_actor+0x101/0x160
[  552.328577][    C1]  splice_direct_to_actor+0x5a5/0xcc0
[  552.333986][    C1]  ? __pfx_direct_splice_actor+0x10/0x10
[  552.339649][    C1]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  552.345588][    C1]  do_splice_direct+0x181/0x270
[  552.350484][    C1]  ? __pfx_do_splice_direct+0x10/0x10
[  552.355890][    C1]  ? common_file_perm+0x1b5/0x230
[  552.360960][    C1]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  552.366893][    C1]  ? bpf_lsm_file_permission+0x9/0x20
[  552.372308][    C1]  ? security_file_permission+0x75/0x290
[  552.377985][    C1]  ? rw_verify_area+0x255/0x4d0
[  552.382880][    C1]  do_sendfile+0x4da/0x7e0
[  552.387340][    C1]  ? __pfx_do_sendfile+0x10/0x10
[  552.392316][    C1]  ? __se_sys_futex+0x36f/0x400
[  552.397298][    C1]  __se_sys_sendfile64+0x13e/0x190
[  552.402440][    C1]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  552.408107][    C1]  ? rcu_is_watching+0x15/0xb0
[  552.412903][    C1]  do_syscall_64+0xfa/0xfa0
[  552.417440][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.423529][    C1]  ? clear_bhb_loop+0x60/0xb0
[  552.428239][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.434152][    C1] RIP: 0033:0x7f1e5c18ebe9
[  552.438679][    C1] RSP: 002b:00007f1e5cf26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  552.447213][    C1] RAX: ffffffffffffffda RBX: 00007f1e5c3c6090 RCX: 00007f1e5c18ebe9
[  552.455210][    C1] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009
[  552.463205][    C1] RBP: 00007f1e5c211e19 R08: 0000000000000000 R09: 0000000000000000
[  552.471200][    C1] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000
[  552.479201][    C1] R13: 00007f1e5c3c6128 R14: 00007f1e5c3c6090 R15: 00007ffe426a47f8
[  552.487210][    C1]  </TASK>
[  555.935642][    C0] net_ratelimit: 22625 callbacks suppressed
[  555.935666][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  555.935762][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  555.941845][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  555.953801][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  555.966212][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  555.978056][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  555.990221][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  556.002458][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  556.013783][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  556.025688][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  560.945746][    C1] net_ratelimit: 24248 callbacks suppressed
[  560.945769][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  560.945798][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  560.952630][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  560.964326][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  560.976132][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:c8:7b:ce:e1:ff, vlan:0)
[  560.988364][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  560.999940][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  561.011980][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  561.024620][    C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  561.036257][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  561.235174][ T6262] m920x_read = error: -19
[  561.247709][ T6262] dvb-usb: error while querying for an remote control event.