last executing test programs:

11m27.658416138s ago: executing program 32 (id=441):
pipe(0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0) (async)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2500c1, 0x0) (async)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2500c1, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x9f, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x9, 0x70, 0x95, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0xa, {{0x5}, {0x5, 0x24, 0x0, 0x64f}, {0xd, 0x24, 0xf, 0x1, 0x8e, 0x2, 0xa, 0x40}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x1, 0xfffa}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x35, 0x7, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xd, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7f, 0x7, 0xff}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x4b, 0x9, 0x20, 0xd2}, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x424}}, {0xc5, &(0x7f00000003c0)=@string={0xc5, 0x3, "19beb67d26a56347be5f2df45a383b006c70697bc4d59962467b3bd0aba0bfd7b0b3d9168382d3f6366d88e0f2428fea11ad57665cb9ed8dcf4068261a6744cea0ae4e4a9a7f66c50fb70dc80b2409cfe8f9f5c6aafe222b545c2a71eb894799eac9fbfb093b6dc305e958fb37c9dcb91989c129c4bec21ad6387debe573a6ee056c5027a0e9c5ee2071076410882defa386874feb31f377bfaadca9b28df2a15f8e2f26fca017bc7838c2dbdcd6f30a49354eea5ea12517b90626907d81915dfeffbb"}}]})
fchdir(r1) (async)
fchdir(r1)
mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0)
syz_open_procfs(r0, &(0x7f0000000b80)='mounts\x00') (async)
syz_open_procfs(r0, &(0x7f0000000b80)='mounts\x00')
r2 = socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000000c0), 0x10)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000300000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20000080)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b00010001000b0904c8020103010203090504"], 0x0)

9m27.792896876s ago: executing program 33 (id=877):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x60)
pipe2$9p(&(0x7f0000002180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) (async)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}})

8m49.978310174s ago: executing program 3 (id=1090):
fanotify_init(0x4, 0x8003)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r2, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
pipe2$9p(&(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}})
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f20421140000000000010902240001000050b109040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r5, &(0x7f0000000480)='./file1\x00', 0x2000, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000240)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13)
syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x50, 0x23, 0x96, {0x96, 0x6, "2fe11ec9c0f56e68b8bffef78ada70a887f14ef372169d5d55d06fbf0ea96e8bfa67f29ef5c310de996f580649c8069079619cdcd646cf20d31127b183d9c0c2161ac096fa41b00e8403cc0c6f08b9fca9c3432e99f7c264506a934c56fdfd3614833a86de78d91f5a58bb7884e3182513d963b277edd31999c4067e24458c089227927f38be5754b505d63bad181d9d0ff2f839"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

8m46.825438628s ago: executing program 3 (id=1108):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086552108cd0c6900556e010203010902120001000000000904"], 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000500), 0x69, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc038563b, &(0x7f0000000000)={0x0, 0x1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x0, 0x0)
r3 = epoll_create1(0x80000)
r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4)
pwritev(r2, &(0x7f0000000bc0)=[{&(0x7f0000000580)="553941ee918ff725fe67502558f9bbc459cdf30306c9016f437e0bbce25f1f007dbe84877db8a160289664d6e5199b7ff473206037e7876759765a271490bf4ff047deab18307c936497ac88b6c40de7727a03d5761d033e4c90f4304260c35ec761fddca9d3899422330a30333fbeb850d00f0a", 0x74}, {&(0x7f0000000600)="d0f8f89a86c22478e833f747953e9c31f12308785c954cec2f68128293f40f035f761dfcdb0e22d92668576f162d9672dec8e1fcb2876ee3324ed027b38d85ed4ceee17961a9a95522c74a5c0165d2281a4895764a8bd2da0f2e9c9cb285a566389165059fd18cdffee98a68ae59a8db64f4", 0x72}, {&(0x7f0000000680)="45a2014aa0b11e395d24a0e18f7998aaf765c663af79034f1d3c6f808afb98cf6bf7942e08fbbbec7a2c623e1f6bd460470a1e28e5a7a352ec3b545e063ff6e583a49f35f28f6583aba275db13f6d89ec993a0fabc60e256769d9f60b4ffaeb415bb41430fd1812bbe4fcf0abf19572e97b021cf56643ef928b4333f42f1b082dd4b69b92c86e25eb9e4f30278de85387b5de20b80cde9017d55ef6373fc483045ad696f6782320ffc1e7a8959cc541eb10c352b0afcc65932cad56fe4bccbf96dc80fffa0d17277bb7f6fddfbca13f3afaa3b960fd32f52cfe83ead3afd2950fc342bfcdb2a41d9e3f965e2e625164c4898c2c4a1fb19", 0xf7}, {&(0x7f0000000780)="bd22ea962ee1cdcaf8aaead318da2e656dece1d51532411c927fbd553e14ac88aae439b93bbf72d7fa0abcef7acecfe9b95bc372f90b43bc1c11175632c26cdfb92b1edb0477e35012cecd89670bea594ea5f0ea999c928cc436ac9052a7b5893613cb2ffc2b38079ba7fde23c18991e05a9b2823746d1932f977c50c013bab575ce710f3faf2752747a9c496844c22a2376bd4eae92e2fd4ce777b00d5f165a451c98dcb56a5217dd", 0x7e}, {&(0x7f0000000840)="2d20e904bc48d9ce235cc005fc59b7452d4b3f78b1de2005550ae2bff3a7a60ed23d76360922ffd9ec0e593026d7609dae1b4b4413911106fb47326d638c661fddaed241b937a6d584eb74751d5ef422bf7f7615eb88eb5e81ac9934c82bd7238f0d8e52083340e6713c04a7f0610159ea4570a14335cddd889ca1254fe04fe508cc9a99d599c5b31ae469c8f9c15518f0e0a0f70402f139bc84dd1ecb4aaeb408", 0xa1}, {&(0x7f0000000900)="184a91247bd603c24ffb593637c1b4c5be42ce1ce1de3e94d664e7cacaafcb566bc68c63daf390ff6a4b2001315a55089f8fa54b51a33d66c23893373c3a3f1df4943a467086ba467b5a223f9c5480178929b5b433313782323e77dd34b9028c355913707b7efef212993762f7a4bd896571478883391702480c2a3970ec9b0f8370f87733edbb048e4a0be507fbf2aa764c13af5bc959c3ea525d42fb67003e478c70963f76a41579e45950205a04c1a42d34ee05ca98dde584e12731bc9ef09e45553f7d33b9ce60d3289e7dc2d863c1ed", 0xd2}, {&(0x7f0000000a00)="de0514a6903373d1a5c5e07e3fffe1d13747ddbb5eb37e37d7b5d9471096ee03171995c5d5ec96f2d4da05daea280786051c9fe36d46c733576124f503e1bf0548a0fc6c39cf7210662621b19f18e34f23fbd01394ba26de7638763aa47fc7234cca8a09263a9bcf01430f6362019e57955f5a77da8ec6f9a819f84913703fbe53d7cd1549e4894b86aecebc79144f50c6befbb8decfc984e942399f00880f9cb3869a9a0f7c737a91c2c33218f37fce55cc479ac45deb4c2ba110def48037275b3f2f7f2b94742aca261520349ac2423dc6a6aa61036ba212c2455be0682601", 0xe0}, {&(0x7f0000000d40)="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"/271, 0x82}], 0x8, 0x8000, 0x6)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'gre0\x00', <r6=>0x0, 0x7, 0x40, 0x0, 0x3ff, {{0xf, 0x4, 0x2, 0x2, 0x3c, 0x66, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@noop, @lsrr={0x83, 0x1b, 0xbe, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast, @empty, @private=0xa010101, @local]}, @generic={0x44, 0xc, "cd9e6f2e997122a574fd"}]}}}}})
sendto$packet(r5, &(0x7f0000000340)="549cbe2234b42aa5268e977e617a3243da", 0x11, 0x4000, &(0x7f0000000d00)={0x11, 0x17, r6, 0x1, 0x1, 0x6, @local}, 0x14)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a00040000000000008000f4"], 0x20}}, 0x0)
r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000b40), 0x2, 0x0)
write$cgroup_freezer_state(r7, &(0x7f0000000b80)='FREEZING\x00', 0x9)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x0, 0x10, 0x8c, {0x8c, 0xd, "a17389401c2a598a33f8fbbeedb51a9a2ec317e94770f719219eea3a3497bd080918fdf8d6617251b91b8be7d85e980549e74db2ba74a67b4b6d8d8579b3b4784afe62762b87641a82270c761d5a2945cda7a9b363a4ff19762fef7921308a127b11d6a19b7f9083d3c45c2d36d578d6deff2bb64bbf836cf609b3ae767184cd84ff136a38ecf4283233"}}, &(0x7f0000000480)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "be8061dc3a1f79e3bc512d4a2aa24cc87c19f172d56ff1a3034f95beea45f77e4f3ac867dfdd5767a94ba55576e83fdb94b4d79ed6c66b8446aefc91baec2579691a08a452d86a1d0232f6fc23ccb2dd855f2a1b5bb8c0ee0f47d69b8b81a7b962f67de29492bacbdd80d6fd0df0ea92cd7ce19c2317bcb104c8dc2ef86ccaecea8e71800bc4117ce1eb054ad7f07d73b48df6722b86435729c227c8df9443584001ca80cb7dec42e8fd727450257ce84d37067f658cc8dfbc98a2820808afa5a3bf68976d125091e45aa5ac091f96769ec34131dd94"}}, &(0x7f0000000400)=ANY=[@ANYBLOB="00222300000083c9568976b337b89184b3e6568a3961611780a4e87046c38fa25fd8640ac2d2b225092424bd39b2ce413af2ae"], &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0x629}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000eac0000006815b3873f44df6b1eb870893b2841c245646885246fea946331a4db3b83738fcbe44249c8ed2e0048c295831d3285205456753f38ac777a4ddd5db1508d32481f4f5d904eac7f1576ee227828efc6782d663b5e604ad6454680d19b68985a5d52b3fe008f7a20679d2237e7828d42330703c06407a74fcba934628d5f66bf0820b4654e9ee6d3049d25e239e95df5e0dac20a9a4043f7e1d89b12ebfc55408000"/178], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xb4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000140)=ANY=[@ANYBLOB="200125000000002941062bd821f24601335e77b094b7d94ca53759eea582ab8b9ad247f96c6d1022b2256c214ed55fe8358b"], &(0x7f0000000380)={0x20, 0x3, 0x1, 0x29}})

8m45.1261364s ago: executing program 3 (id=1114):
socket$l2tp(0x2, 0x2, 0x73) (async)
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = socket(0x11, 0xa, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
bind$can_raw(r1, &(0x7f0000000000), 0x10) (async)
bind$can_raw(r1, &(0x7f0000000000), 0x10)
getsockname$packet(r1, 0x0, &(0x7f0000000180))
setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0) (async)
setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={<r3=>0x0, 0x8d, "d35000620cdbca454c37ba6bfcf4060202172d123d33c32d96e6b7e4c95528dd53949f0da60a4dcd0a73cda4763b21ce9d28812ad22614f5d4988b0670400bb05dc8c34c10d10f5ebf4308f0ff134ef641b8c43c3186cc6f86441851ae35d76a5700f39e97e155d9f7b478be7f848ad9cdbc606932a6f4740d1c09e6bc022447ed72413575f4d6f31c81f90d03"}, &(0x7f0000000000)=0x95)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={r3, 0x6}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x4, 0xd, 0x0, 0x5, 0x3f7, 0x0, 0x34c, 0x67, r3}, &(0x7f00000002c0)=0x20)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)={0x7, [0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x20)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r4, 0x0, 0x800}, &(0x7f00000001c0)=0xc)

8m45.006120088s ago: executing program 3 (id=1115):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000300)="731ff3bbd5a126027d7dbb5e16186d21b61c4bde32cf978de81e69c9aa6f008bd95dada5d67d89510d926bad74c5e2026095297b2f634eb7b11a465b08d22bd5bbd869606186d609aa5224b84bb278ed3efc1bba22143ae18a99feeb383ac6a52aba2cd3a85e7aa9efef9f79ab2f59f2b0cf9cb2aef1f167da8594c3a58034f8016b02cce2bd57fe6511efafb8323ca4b5c68fda2ecdce60c5d338786b9245c12697561ac3", 0xa5, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000400)={r1})
setsockopt(0xffffffffffffffff, 0xffffffff, 0x0, &(0x7f0000000080)="c45af4c808491b8b217ae099c9a10653d12601006ee65c056fc76d", 0x1b)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r4})
sendto$packet(r3, 0x0, 0x0, 0x110, &(0x7f00000002c0)={0x11, 0x9, r4, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, <r8=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6})
mkdir(&(0x7f0000000140)='./file0\x00', 0x1d9)
mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000180)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xc)
sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)={0x20, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x5, 0x0, 0x0, @pid}]}, 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)

8m42.482829537s ago: executing program 3 (id=1122):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x80)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x2e, 0x4, 0x0, {0x5, 0x3, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@userxattr}, {@metacopy_on}]})

8m42.301543177s ago: executing program 3 (id=1123):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
fcntl$setflags(r1, 0x2, 0x1) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0xfffffffffffffffe) (async)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x13)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f00000000c0)="40d8953eb4679d40b2ece208bc22f39b32ebd1113ba68ce5bfb55b7a51eb901519fc9ebabeac99afddf46c947df7ebca68d6d98c83839d2e95f3beeb4a621786f3a3ba2b3276a6462a7dcefae86b55518c0442357e2f61e8bd51c1704ece95edd3f282d363ad4fda5419c4b2a5123a8062c49ac1a8278ad1", 0x78, r1}, 0x68)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4)
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x80)
vmsplice(r3, &(0x7f0000003480)=[{&(0x7f0000002100)='q', 0x1}], 0x1, 0x2)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)

8m41.852400931s ago: executing program 34 (id=1123):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
fcntl$setflags(r1, 0x2, 0x1) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0xfffffffffffffffe) (async)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x13)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f00000000c0)="40d8953eb4679d40b2ece208bc22f39b32ebd1113ba68ce5bfb55b7a51eb901519fc9ebabeac99afddf46c947df7ebca68d6d98c83839d2e95f3beeb4a621786f3a3ba2b3276a6462a7dcefae86b55518c0442357e2f61e8bd51c1704ece95edd3f282d363ad4fda5419c4b2a5123a8062c49ac1a8278ad1", 0x78, r1}, 0x68)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4)
pipe2(&(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x80)
vmsplice(r3, &(0x7f0000003480)=[{&(0x7f0000002100)='q', 0x1}], 0x1, 0x2)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)

8m33.525995074s ago: executing program 5 (id=1174):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42001, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000a80)={{r3}, "fad7b9428d93038f63c4dafa1da7e07527fe756bde6d960d81bfd34ba5cca803ad5bdebe227152d43a607faa0dc407fc189b0d7e7468ab55f146ff0337aed82849987da5e1ab963dda992d377e4eacce0e342581ab9962694df4a98aef6d7813fb8b796948ff95415e9d71a47ede207b1794f624b034487af5832e243034017f4f93e15abf71e2dc1e26f97de375b5a1f1a24f98467d2d07d33c06c55c3f89c8d5282a18faedb7595cdedc33c345c89deca5b925cf8467200094111705e71154b451ed8407d1c89255b27d9b243d3a333b099595c33db04682ac22a418c49f5c39a0918c015e8393d2cb7c20feb2c54c82b6387812412e3237e938369453e1e8030d49fcd1c91bf36f2422d1a72f49b31ec3889ebc0d28c929b0c6736f00b53b9ccfd3934a7d933a8202fd2bdb2a8b0d58d6180c1a69b7fb41255ce92795786d10a8c7d9e4f680517f4e34b1e8f884e81e09bd5ec5ecf38b7b8f1637afb0aee0e708c4074eec24e3141b9e12ced6b4beaedec6d55dbae69d5a63142b3e81997458d7151a84d0d7cd4ebd25d24f3d2a3b4c403ab707fe38aa61cab1b070d4730625f76dc37f201e8698204637fe62fe52ed11ae0d8f98f69d4f92762bcba03b8b42feeca7a9fa9300ca4759ff9d7e9162479f954b1316775fcbfc6640b91dd1cb976ceaf2f9f28040ecfdc0e28bb9705a1b985274c7d08bd96aacd6a00f865f3a22f86ef2ace146c4f40bb20798e0bc2db4ce62f0873c09a85e7892729489a7b9c8c9a2939812595942b1ca2d3260315bc723ac2edf24d88f0f49d586a8065817ad936dc8161e438eb5b845df96b2c9a56eb7535ee9e255f41def5d9e9720857fbfd84b4bf1c97c574f568933df8f25d6df5d74a374e4f9a6a2e76644df77da621a8c9ce947af8f20feda0e22ef467eb210665589823025c9144ec05d80276574d3cae61c639d3b12438e012ffe1ca3823b4b79185ce1896b7a41aa36a47776fade667af70c25d9543bc036f40aec1c521f39239cdbf2748883f86b89349ffee1f528f955bdf6f29686c57a49b66ebfc26ee604316f27f9547cf3c21c221581458246b04d627e29e8b846e099e5d8234ce0db1d3e77130147580622b8eeaa34707ea25369c250ce5f5adc14b7afcfbce3c25e5e65d04858dc056456e2f2d2bd6afb59afae8d63b7ab5b8b6ad3386d52dbcee60c7f0945517a77edeeda33789acdb3b7b3242704d6c51940c004cde1d3a342477607581a92a50716caf93495cbc1a6b2f1be20081f7ba8a013416e6b8433383299b752feabd1455bc336b868b38f5ad73f397f0381a51748ffa8550510837d9128ab095629b7a159c6b0dfadfd8a8bff53c80481c59d861954790c593524d8a53cd8b2f2c234b850ec7576a46074293453a86cb3c0c346a8cbbac65eda4a2130e00053f5a054603776ea1d2975e4badbaa83518dad9274c22ac17f20686f56315340e5581c787a2f71ab3a2063664bcc82c7380a13cc8eb106c036800c7b0f14ed667f39af9a5cc01dcdd5809b534fad505858508845d9c547e19c632cd8024ecd777e193c2258312b7a5998a875d33dd8b861500946852af487bbefa54e9b16a83b6131ac343eacb2558e759a9b6ce5db0f1ab173d457d144fd5a65f092e553e1d0e3f9972ec57d27bb48c78332c7a6fab0d5958c61898b3a5ae8810e2246ae36291cd5f79f9475e697c9da84d05cc8dc197485ad790d2a8da5400583dce8ffa3c8adfe276884ed5d33f0e7bc4fb1748e83884213c10ec673dbbbf55670da7fbdd6d8927cd41106064ce22cd2ae14084c439e8f07e4e261667507c0acb03033f30665dbf928d31ff9cf38f61a46d6d1286065bfad5839b0247c975673839f6f685ebaad9396c5f93b3a5f346202a40969ab5c72d0355fd609d33b9443093a53dfbf8052a405389ce269f71da8ae1fb39b30f6a701f56838ca11527de58850f17b4fcc6397614da8e2e331f06024f1ee7f6a8b2f910711526361244a585dfacb4bab57738d7938adb436cf17cfeceb95016e339aa5f2ba30515f289ba35118d32504f52710044e78666dd2834fc2d9fad35e2df29b10e0557ab4789c7dc718d2d03434062bb58fd824c13a0bc6298ed9bdc3d0cc79d008972fcc9f751af4824b2be0823313581cd2fd2b436f84b14719b93dd95a38941c11af5b51f3b0503f3db3569ac847a93ea9124622044b37b083fcf8882a788041289905296e1bf2eb12aadb5228f366a925269a20f7ca9db7f317d5117a70d93f90b402993a7f84328409bda0fdc6306dd5c126fdb179fde4e4d7314d2ee419c8635e62895f8dffdf73f38188121f7b24dae40531b6e43054d3b9b459df2f2613536819643e6b7038de55ffa43bc9edc72e2038e2bf9da70a4a24a3fce0b8673f7f8f5099fcf0d23ab90c7f8770bdfd23e6aaabf7d110768ff08c8754ff6d962e43ff215d78d2ebd882353490da27dabd92ab08291338eaacf3e1ebe6a7da8286d3d57e272b9eac7c70a9a1bd67fb3f4e3052779422a7e19b7cfb01760f949ce4562ce5ad5292cb607e42d513d1facd0903a87836d5c30c181b5728db474154d3cb4e524ba5e03336534ca9f6b093fd6d9e5b89ede5becc677996321d65e9022d1c00e2907767a51c75c9f0688e4e82e045dc972e6be8948c7fc8a84ca8e1a992d44ac8e7a962a931d8eb3d0c4756b838c1339758a4a563d108d35940366b582c48567b5ca539839fbd327361ed76f4204f8ec84ec6401079a189b271747129c3d0025ccc25c9d7fbea0aa4f6a0e5f10422e9866e42ab0f86d6e9022688652536eef7fd28dc5961670a4058eaec61ba3e11273111be9cc3da57edc16321e1382d20f4cf52827032b5f79e395e742113303b0aa595f7188a417ddfdc3b6259b56f9f8f7b133774bfb5c181f1288713e3144ac4ff69fc146cc633dc70c8aee1da2384b72115b49cdbdfe9508b2e06fcd02df78d895e12cf6f0cf4171c7570809b949c6bfbff07da4018935a186630be06d42a4844521428afbed6b3a34aa0226a948fa12e8bdfbb27d13fd5627093511f52a51a6dcd33e0122d2dd1736885c797e1d1c65c06739790767be42582349c147d52e377732742f176b79243edd2c6b585d5512702ce4a7395835e2ab038a5deff84f7ff0d4622aebcd31c58d2dbbaad54638473e5fb428b827a577215460489001af429b40d0dae3521be9a381913740ea72a8b707d2ed4a12f5791fc2d0ea9674d59d68ff02a7b7dda9b9a1917db6093bf8ba4a186c952434dfd664cf9607d9b194b874c24ad03b04148d6f1951d4127146b22783be7eceefc686c4bef899e6cce8ce1344e9e49cfc0d43633098983a40276b4b4fcbe4ce0b695d58471afcfcce714ff1da6e975bd1494d127fbcda25c0110f596e4e0882e01acc674446d2c6e3d08d8034eebd4432968b1aab2e825eba0f76612ae6617667ad6c823fb8234363d5bb341c440fe0a0cad018b6c36ca317e3473eedbcc5f6740a7fad23b55a6fb626d8093ea62d6f35d2babd391e138b24a4ddfa86fef5487a710289f2994f36e87fadd178a5e139455d398a8809e30d2569650ceee90ad6b68942087ae0e33c49c6f7952b08da8762be2c9066e56d27a69a926fc58c82565877e913bff08e0827c45f9e74c964f282d5023efb21e976b93177464a686150ef09a32c352505c534e467ce014fec144dbbdcc8e2d28b6bf619ddf63a48054406dfa33aa541cb9beafa70cabcd8600cabf93d138de261f6f5b63273691669e363e06bc583bdee1ed210179f2ab50a6bc0a727475551e90b0265e1e8ca02acabe93b596b7a782151d792a5679e21e730b7e964c38a49717d0a1385bbb1b0459916424133149720bf47ac38687178a8b351ae3f29bf4a6ea369c90f85f4f123416c8c09c3f25b133ddcdb71b1289821d81581b78ae66c075c535e30151ae1bd48e787b55cc45951c83b5ce097711df0764feab81f24d63940915c471479c24222bd5569201ac4c56577168b76c1f0684f981df516cf5ac5d4307ef2bf429d818c9809f6669f43b1eb160bdcb817154bc36cd8bd24cd6c75e037edab6fa0fe9a0f19b6dbaf99dd68f0318382ccf8d20fe2fdc08134a86b5b0794a534992751fca4ec726dfca985cc239bae2b04ce49416e07e14f752767d05f6584479b5da973fa22477be64fef48b5f3c07936c2be9fa8b92c9e8a0412a2718932edf53382efe2aa1531bbde87363fee5a15501a490c16d26354c0ffeeccf0d05705a6b68a0b88de1e15736092014273f7494474a24555e7e7a6b4e274a9dd4d534cac979a0e99758203f74309af7b221e925c592ad25e13c7907c1030fc79bb728bce4437047470cf97ebc48f45ef67695585caa73178057802a24e3e4fea0a55111275c738d2b09aa7e7a00e91be43ee507b6533c6c6e9d1848e708240d7547b08bb9121fc024caed12805a0a8bfb72f72c6787b760ccd3657328507050f8ad3e348597b38685ad6d44125266382dbf433a9628c548f89eea1691e92fc755502e4656d2faa2077ab1d749a3d2d0543cd5248db49cdb1a60f006ec8cb5b3ecfc1b6b38ed802a6885c6733dbdfbe9d6c0a0daacda38f9bdbd728bfae407e2be620cd8e66743c70073e38e87ede0daf00e7e6205bc0f5cc3ff5657ad559ad13a865d01357215e2e813153212d13d6817ff2badace7edac682ea459e30b476b98ea7ca540c9ec3f8a0550ab51340e04425e3eb0d36fcfa6612bfe947263322afb876ef4a86edf8adf41f4bf4fd617c2cc57c0639baa79f4e6468258e53b76ae51c83f37b6d128cbe4eaf3e58e7d24a7c24451289c991984bed04ce060e4ee13a0c0e43fc98baae2352366672075a6c8c26165aa538b1bac0765ffda39bfafaa401cea38646e418fc99704540acd08e128121bb0b8ab8e316f924cfdae1002d54e2ef3cf3477558d77881beaa3c31cb9cc2429eaf858ebaf06709910faf26d7433290a3250cca586c0e49c3d2456a6409da11259bc7b7e2345146a360404f3d7333487343d9dfbb2813bbeba56a1e1f90d421aca2d1e6ca075b1fcb5733df856fc45de7fe5dbe6174ebc4a6241576e46503a3f7e4ad18b5965c0525faa3d031b09b2b9aa1874285c874382359e93775a69701bb63fccc33d095aac42e79a74ec9700218add3c93114c0686f6897f3228cf3bee05ca63f709075df1b5e89e44c05feb00356c0de06190b84e09285443e58a361840e93da22a3ab64d8a4a0474466d13738c07c71847b6b2e47adb22db94e92524a08ca0dbb02de2e0eb5c2edb7e29d89ed5c2d76bb2fc5da5cd57b89bfd47465b5a57ebd72261ddfb443a141415670a59ae82acde715d73b4ab62602b9a347764a05a15159d25abfa2e26531efc90cce8692bb61d859ef6ecb4d9d6d44813085915e8d97916127241aa470b55cdf629ad52b7ad48d4253b2539726f26cf169c208a591ed4a3d4c0474446493a2da85d1226e58d988bcd484ed94d8b18f3298815be6627d1eb5bde9a2f8a3864b2e0c772502854afab501e8cbf1425028bebc3aece71cae8fc40f1606902d0ebcb124be02fcfb6a2810f580942e9f6a2871f9e9bd4a43bb3428c8e4cc16c5b7f3f6cf92bc0aec8c7826c2e759d6062c7409e2e770e3780bbff8e390bc9b551d12c5d295dda72b46cbf9a20c76f6881d69ec27a003b6edb5b2983483d06b246cc3cbd2c8524e601ce0d45c7441bb9e1dcd676ccb5ac3a9e59e6d65c4eee6b120b6bb71eafc80f9ca5de3529ff04fc2f3546"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8m32.963578041s ago: executing program 5 (id=1177):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
poll(&(0x7f0000000040)=[{r0, 0x81}], 0x1, 0x6f7)

8m32.811084544s ago: executing program 5 (id=1179):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x880)

8m32.669694179s ago: executing program 5 (id=1180):
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000)

8m32.475530622s ago: executing program 5 (id=1181):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

8m32.136755255s ago: executing program 5 (id=1183):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)

8m16.926905413s ago: executing program 35 (id=1183):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)

5m44.791650544s ago: executing program 7 (id=2208):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,size=', @ANYRESOCT])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x181)
ftruncate(r0, 0x82081fc)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r1, 0x800000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0xa00)

5m44.741032925s ago: executing program 7 (id=2209):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x615880000000000, 0x5)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

5m44.435542344s ago: executing program 7 (id=2211):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
read$FUSE(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x43, @lang_id={0x0, 0x3, 0x3409}}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000200)={0x18, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r4 = mq_open(&(0x7f00000004c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x1, 0x0, &(0x7f0000000040)={0x3, 0x1, 0x4})
mq_getsetattr(r4, &(0x7f0000000700)={0x800, 0x10, 0x9}, 0x0)
mq_timedreceive(r4, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

5m41.291381205s ago: executing program 7 (id=2225):
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x5})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x3})
chdir(&(0x7f00000001c0)='./bus\x00')
mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000400)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000002f80)={0xa0, 0x0, r2, {{0x4, 0x2, 0x6, 0x4, 0x7, 0xfffffffa, {0x1, 0xe, 0x100, 0x7b, 0x10, 0x400, 0x3, 0xfffffff9, 0x8, 0x8000, 0x10001, r3, r4, 0x9, 0x8}}}}, 0xa0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x92809, &(0x7f0000000400)=ANY=[])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r5 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r5, 0x0)
setpgid(0x0, r5)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10182, 0x85)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
setuid(0xee01)
ioctl$FS_IOC_RESVSP(r6, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3})

5m40.771729331s ago: executing program 7 (id=2229):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)

5m40.567470075s ago: executing program 7 (id=2230):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfc, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0})
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x600, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000400)={0xf, 0x1, 0x0, "8eb8a828e93b07f1dd06d87a41bfeae7800400b159fbba176fb1de26098d68d9"})
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0xfffffffffffffffc, 0x8, 0x5)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0x0, 0x3})

5m40.235391921s ago: executing program 36 (id=2230):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfc, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0})
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x600, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000400)={0xf, 0x1, 0x0, "8eb8a828e93b07f1dd06d87a41bfeae7800400b159fbba176fb1de26098d68d9"})
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0xfffffffffffffffc, 0x8, 0x5)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0x0, 0x3})

4m58.568657514s ago: executing program 6 (id=2391):
socket$inet(0x2, 0x1, 0x0) (async)
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]})
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000))
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d7dda4108911930800000102030109022400020000000009046802006e02c0000904680001253e5300090508", @ANYRES8=r0, @ANYRES8], 0x0) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d7dda4108911930800000102030109022400020000000009046802006e02c0000904680001253e5300090508", @ANYRES8=r0, @ANYRES8], 0x0)

4m57.239600482s ago: executing program 6 (id=2397):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
r0 = syz_io_uring_setup(0x6440, &(0x7f0000000500)={0x0, 0xd52b, 0x10100, 0x0, 0x20d}, &(0x7f0000000340), &(0x7f0000000140))
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, <r1=>0x0})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x40a02, 0x0)
write$tcp_mem(r2, &(0x7f0000000300), 0x48)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1})

4m57.207334211s ago: executing program 6 (id=2398):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, &(0x7f0000001340))
r1 = socket$inet6(0xa, 0x80003, 0x6)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'})
r2 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000100)={0xfffffffffffffffe, 0xe, 0x1f}) (async)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000100)={0xfffffffffffffffe, 0xe, 0x1f})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x3c, r3, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0c}]}]}, 0x3c}}, 0x40000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x3, 0xa, 0xffffffff, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x1, 0x7, 0xc, 0x9}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x3, 0xa, 0xffffffff, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x1, 0x7, 0xc, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2d, 0x9, 0x4, 0x9c, 0x49, @private1, @remote, 0x80, 0x80, 0xe, 0xffff}})
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4m56.967283819s ago: executing program 6 (id=2399):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000000900020073797a32000000000900010073797a300000000024000480200001800a00010071756f74610d97cc674d64098a06ad5d61a2c640000140000000000000ec4b1064d812cd6ef7ef4f14000000"], 0x78}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000040)=0x25, 0x4)
setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000000)=0x802, 0x4)
r5 = socket$unix(0x1, 0x1, 0x0)
sendto$unix(r5, 0x0, 0x0, 0x2000080, &(0x7f0000000d40)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340))
r7 = dup(r6)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r7})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1})
r8 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2)
close(r8)

4m56.639404271s ago: executing program 6 (id=2400):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, &(0x7f00000000c0)={{@any, 0xffffffff}, 0xfffffab1, 0x39c})
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r3)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010003000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000040008000440000000000900010073797a30000000000800034000000002"], 0x64}}, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x20044080)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r8=>0x0, <r9=>0x0})
r10 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082)
ioctl$SG_IO(r10, 0x2285, &(0x7f0000000580)={0x53, 0x0, 0x6, 0x4, @scatter={0x4, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f0000000340)=""/243, 0xf3}, {&(0x7f0000000440)=""/246, 0xf6}, {&(0x7f0000000140)=""/9, 0x9}]}, &(0x7f0000000000)="1201b6b661b9", 0x0, 0x1080, 0x4, 0x0, 0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e120900", 0x26}], 0x1}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0)
clock_gettime(0x0, &(0x7f0000000040)={<r12=>0x0, <r13=>0x0})
timer_settime(r7, 0x1, &(0x7f0000000080)={{r8, r9+60000000}, {r12, r13+10000000}}, &(0x7f00000000c0))
close_range(r1, 0xffffffffffffffff, 0x0)

4m56.433429638s ago: executing program 6 (id=2401):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_wakeup_irq', 0x141000, 0x140)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0)
close(r3)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r8=>0x0})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10}, 0x18)
connect$can_j1939(r9, &(0x7f0000000140)={0x1d, r8}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r12=>0x0})
write(r2, &(0x7f0000000140)="ca6d200cebf7108573193238a3125295a79bfe28a710b09ab053acb0c95c0b2a3b6e6b79f76481", 0x27)
r13 = dup2(r6, r2)
sendmsg$NL80211_CMD_JOIN_MESH(r13, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="05002dbd700000000000440000000800030059b4934195ad92f9b82929c96bafe88b587b2fe48ac09f7e259a3141f01774a82cb468969cf2e7f129e1831da760cecc0255cff8960064877881c5916b5921ed363c624074f1942f8cb7ddb1a7a3b8134dd1fd428fb7c98f963fbc9f49704e0fad75adc05bd70f1e3fe4232e2cf187e1d2b8b84e4fbfc5d5c9771c05dcc973424eae2ad357b775db11050f40", @ANYRES32=r12, @ANYBLOB="04002380"], 0x20}}, 0x0)
sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000076632d13262cbf7c4efdb2f64028a0a8b6deb875429df4f70cc808b5c6a8e34bc592a6ab6dfe5f4ab2bdbc8ae78a3d7b2362c4dae81878f31011bec6bceb63edcde4edcbf82b77c2c007cfa4bb40f18c3d967583b550e06966040fff82f0a35bd22c58ff77206cfa0ea49ce6801569e08163a15b69de924bb8253656bd912279bbd11b34bf26c9660f6b8895009418d0b153064866a96af2519e", @ANYRES16=r5, @ANYBLOB="000226bd7000fddbdf255e00000008000300", @ANYRES32=r10, @ANYBLOB='\b\x00\'\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r17=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="030629bd7000fcdbdf250300000005000300060000000c00018008000100", @ANYRES32=r17, @ANYBLOB], 0x30}}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

4m56.097516053s ago: executing program 37 (id=2401):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_wakeup_irq', 0x141000, 0x140)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0)
close(r3)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r8=>0x0})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10}, 0x18)
connect$can_j1939(r9, &(0x7f0000000140)={0x1d, r8}, 0x18)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r12=>0x0})
write(r2, &(0x7f0000000140)="ca6d200cebf7108573193238a3125295a79bfe28a710b09ab053acb0c95c0b2a3b6e6b79f76481", 0x27)
r13 = dup2(r6, r2)
sendmsg$NL80211_CMD_JOIN_MESH(r13, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="05002dbd700000000000440000000800030059b4934195ad92f9b82929c96bafe88b587b2fe48ac09f7e259a3141f01774a82cb468969cf2e7f129e1831da760cecc0255cff8960064877881c5916b5921ed363c624074f1942f8cb7ddb1a7a3b8134dd1fd428fb7c98f963fbc9f49704e0fad75adc05bd70f1e3fe4232e2cf187e1d2b8b84e4fbfc5d5c9771c05dcc973424eae2ad357b775db11050f40", @ANYRES32=r12, @ANYBLOB="04002380"], 0x20}}, 0x0)
sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000076632d13262cbf7c4efdb2f64028a0a8b6deb875429df4f70cc808b5c6a8e34bc592a6ab6dfe5f4ab2bdbc8ae78a3d7b2362c4dae81878f31011bec6bceb63edcde4edcbf82b77c2c007cfa4bb40f18c3d967583b550e06966040fff82f0a35bd22c58ff77206cfa0ea49ce6801569e08163a15b69de924bb8253656bd912279bbd11b34bf26c9660f6b8895009418d0b153064866a96af2519e", @ANYRES16=r5, @ANYBLOB="000226bd7000fddbdf255e00000008000300", @ANYRES32=r10, @ANYBLOB='\b\x00\'\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r17=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="030629bd7000fcdbdf250300000005000300060000000c00018008000100", @ANYRES32=r17, @ANYBLOB], 0x30}}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

1m31.651536942s ago: executing program 1 (id=3364):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x4, 'syz1\x00', @null, 0xfffffff1, 0x7, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default]})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00')
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newspdinfo={0x2c, 0x24, 0x29a, 0x70bd28, 0x25dfdbfd, 0x8000, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r2, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x6, 0x3f, 0x1a, "3eccd25569e20900"})
getdents64(r1, &(0x7f0000001fc0)=""/4079, 0xfef)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x9b)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r3, &(0x7f0000000480)='./file1\x00', 0x2000, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
open$dir(&(0x7f0000000040)='./file1\x00', 0xcc000, 0x14)
getdents64(r1, 0x0, 0x0)
recvmsg$can_raw(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/238, 0xee}], 0x1, &(0x7f0000000540)=""/4096, 0x1000}, 0x100)

1m31.599214968s ago: executing program 1 (id=3367):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
recvmmsg(r0, &(0x7f0000000400), 0x0, 0x0, 0x0) (async, rerun: 32)
r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) (rerun: 32)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000080)=0xf0) (async, rerun: 32)
close(r1) (rerun: 32)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3)
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x315ed1d74a70ee57, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4044)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r6 = syz_socket_connect_nvme_tcp()
recvmsg$inet_nvme(r6, &(0x7f00000003c0)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)=""/143, 0x8f}, {&(0x7f0000000140)=""/7, 0x7}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000340)=""/116, 0x74}], 0x4, &(0x7f0000000480)=""/82, 0x52}, 0x40) (async, rerun: 64)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (rerun: 64)
syz_usb_connect(0x5, 0xf4, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESHEX=r7, @ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYRES8=r5, @ANYRES16=r7], 0x0)

1m30.859864843s ago: executing program 1 (id=3370):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = inotify_init1(0x80000)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r3 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000140)="280320000500140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195e", 0x2a, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)
r5 = dup3(r0, r1, 0x80000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5)

1m30.743517251s ago: executing program 1 (id=3371):
io_setup(0x81, &(0x7f0000001440)=<r0=>0x0)
r1 = syz_io_uring_setup(0x372a, &(0x7f0000000380)={0x0, 0x3932, 0x13090, 0x0, 0x113}, &(0x7f0000000100), &(0x7f0000000080))
io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0)
sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000002d3a00"], 0x6c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a40000005400010000000000000080000700"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000000))
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')

1m30.649347833s ago: executing program 1 (id=3372):
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
read$usbfs(r0, &(0x7f00000005c0)=""/4096, 0x1000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT, @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000feffffffffffff07000000000000000000000000000000000000000000000000090000000000000000000200000000008fb855be5c3e763229e3c7d03f2dac5afead560b676e68deb84070eeebad547d04368a55ed25912a149ce079b5e234ef6eda9b155598cebaecbc16aa231b85f2610763dd0ae38e41a31238fe44ced57666eacc791b0296ad62e0a109"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x80000000, @mcast1, 0x8}, 0x20)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
prctl$PR_SET_FP_MODE(0x2d, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000140))
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff040000000000000000000000000000000000000000000000000000000000000000000400000000000800"/112], 0xb8}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x5, 0xb60}})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c504000000dd6067", 0x14}, {&(0x7f00000002c0)="b7ff010000000000004ba0d5984462732834d1d8e35e795c69d98117ebfd08f973a7733781f9c33ebb0b864dc05f70bb595d3cc8766c2a893edf638d917766f902c32021ef9c3b9b2682efc2bc82f5bc2de42bdca001d56cb0ab31c032ce23e0b15bab00f00d8977fd2ca221d65a0c9d2035cbe1b6d0a1c3416fe88f0a29e9159ee12ccbc4419a51293f0966a2e74b45cf4849cdcd3bd974ad", 0x99}, {&(0x7f0000000100)="37a8a6c41ef711513a5554633f6ecf2512425af281e453256f101699c31d746d9751dcb9435402dbc98277", 0x2b}, {&(0x7f00000001c0)="b86b7ebe4eb017326618ccc6057015af6e7351afe8ac1c", 0x17}], 0x4)

1m29.692672948s ago: executing program 1 (id=3380):
syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b010203010902"], 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x81, @mcast2, 0xffffffff}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xbe1, 0x100, {<r1=>0x0}, {0xee00}, 0x7, 0x3})
prlimit64(r1, 0xe, &(0x7f0000000080)={0xffffffffffffff81, 0xfffffffeffffffff}, &(0x7f00000000c0))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

1m29.380227941s ago: executing program 38 (id=3380):
syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b010203010902"], 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x81, @mcast2, 0xffffffff}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xbe1, 0x100, {<r1=>0x0}, {0xee00}, 0x7, 0x3})
prlimit64(r1, 0xe, &(0x7f0000000080)={0xffffffffffffff81, 0xfffffffeffffffff}, &(0x7f00000000c0))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

1m6.005573929s ago: executing program 9 (id=3528):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x3) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x50, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2e}}]}, 0x50}}, 0x8000)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6085, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "6f21f12e"}]}}, 0x0}, 0x0) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)

1m5.699515739s ago: executing program 9 (id=3529):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x57dc, 0x4)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000080ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c40105"], 0x27c}}, 0x0)

1m5.519266527s ago: executing program 9 (id=3530):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000007780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x294, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0xd3, 0xc, "6ac9072bf2feadd805aa0d0228272ae868e308e9868a5d958e8384e7b2364dd1d9a2f65dba5f27026c1191065c93a4e7ba6293d16deae521bf6ba9ab28bf582187cd7ca8e1cb1ab59f77cfdef9b1c2163986bc1ac59dae73b7e6472a968dd68372f14fec03dd7555b8e735dc8f6d96fa010836497cc4d3e59c731969c6855d09b9cc3f07209c118680bb96106c7d4a9b1e10be7ea2e8d12ce89b0fe6dc7b3a4d66aab8473f242e8644527122222e42ab5a280eea5631a6807793e02a98ed9e0870562ad34449533e43f6280a10e6f0"}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0x100, 0xc, "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"}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x24, 0xc, "05a62376d817afa32577da00b8ed26a687e6f26154ee2e811418ed874f46ff57"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'netpci0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x15ec, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x15c4, 0x3, 0x0, 0x1, [{0x15c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'R'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0xf0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9e, 0x1, "1b960a489d4c81e9fe9f2f5d0e7955784af92b489c772e813b618b7ef671bf0ff08212f9fc998987e186ebb00052593e409e7322f2e1f6ed7a04efddde37314ebc65b3152faf04462ceffd75391cf2eda5c7084e33cd067fce71f2244f26ed0f449fe90ec8753abb5902638375d10b4750a972c579b33ed58d04b76de26043e1775ca3d55cfe5c64e2578e95b8c09b419325c7e8480e020c23be"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x1468, 0xb, 0x0, 0x1, [{0x94, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x84, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x35}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1d}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x1350, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1344, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CMP_DATA={0x1e0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa3, 0x1, "f0ae0f510ca5130aaaf277268fc51d4cb47f0a9523763e24424fbac073201224fce00054ba8d71777940bb10ea5f2b049582b1c7849eaeb49864c799f0db1412f8b6368fc04e0fb9809e5042747884b293510f349ab9653be0c8bfe6b7711c8c44a87fde3b40ade590d218fccd03a89fa04ee468527ada178f34f1516a0c9230f2721c2e1f41a9f682ef914b549b3e4f7097c1f4e4d1b62545cf240a240aa9"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x84, 0x1, "516caf5d6f793c1433638f79f985816254e8b72de3165c74247aa4e1a6fa4170422fadc8b85a81a71c017e49ae88444e50a338498d66ee3f5a697d65cdbef863f046f8592cd26530128e66be9285e6cd9c0cf08e929f832a48dec63c14087a87734d8b6ad4ca65211ba819626223b92efebf83e2df885c6920270903bfcc6749"}, @NFTA_DATA_VALUE={0x7b, 0x1, "9c55ba541bc8101b1a2a0af6e7382ad499e064c6f86ec20d18f85b335c53550913b47ab877f134a14f2955b2f4c04b4a0af7a0b99058967dd44832d1ee274ebd8c613011e8b2b5e30c79535d37e1ab1891b2fe3935fbef2b714b4c43e9c89c3a46a650033a6f34e7222f4c4fff34ab05a54896c997b555"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_CMP_DATA={0x1140, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xd0, 0x1, "197d0ab0dfdbf5c4da8625e455e6249e386bafe936237f967cb121efaaf4b7c92168ecbe6ed7cf4d03739f85adf73274d6a1c5206744c1523fbb9aa9b03ac563f60d349f6fe1f551fe32812459de1531b6e255e4b69127bcdd4dbe0042a974a193ec4ee2d69ad50163cde63add3e6b94afae06213b72c80fa6d5d3136d2568ea4473f5a20a15656f4b7e4a251ee6c122b05b7ac5bb4d0c0a0ebf5f0970b1cd7c5464182b8e2ee62666dc51c867f904cf6c9bcc4f308e2d5e43a7cae6039cec94dcf3bf48a07f2a035858c1b3"}, @NFTA_DATA_VALUE={0x67, 0x1, "fc7fbcbaea0f06a5297dec7bb438aa868518e236f489665bacb46b0d5e72b500370506dd68bdd82ee60bb3415177050674a1cbfe0af6d6fec6fbfd1b0a0bc6c0fb48a22a2019e8f9d80b02b655fad1c3a7d982c6aa5f11bb9cc4204374b664febccae1"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x99cb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x357}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1980}, 0x1, 0x0, 0x0, 0x24000080}, 0x40004)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"})
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0xa481)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m5.383262301s ago: executing program 9 (id=3532):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = getpid()
waitid(0x1, r1, 0x0, 0x4, 0x0)
wait4(r1, &(0x7f0000000240), 0x4, &(0x7f0000000440))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}, {&(0x7f0000000040)="d2b8db4da598ceb65cb8cbfbf116e083c67f", 0x12}], 0x3)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0x80)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000007c0), 0x42140, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000800)=0x2)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r5, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r6 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000003c0)=ANY=[@ANYBLOB="030000000000000061616161616161616161616161616161616161616161611c96cf43b6575c6c356761616161616161616131313131313131313131f84288d6c12c5f6c792173223131310000000000"], 0x48, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000340)={@id={0x2, 0x0, @d}, 0x10, r6, '\x00', @d})
write$tun(r0, &(0x7f00000002c0)={@void, @void, @arp=@generic={0x10e, 0xc, 0x6, 0x1, 0x9, @broadcast, "83", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, "ac9f6327ffac23008625ebf8d77e85"}}, 0x24)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)=ANY=[@ANYBLOB="12010000411cf540f30c75939e1a000000010902120001000000000904000000bee4f900"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000fa0fffffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m2.191372845s ago: executing program 9 (id=3560):
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xa0000, 0x10d, 0x2}, 0x18)
open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x101)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf", 0x4b}], 0x1}, 0x4010)
setgroups(0x3, &(0x7f0000000340))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r4, 0x4068aea3, &(0x7f0000000200))
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2a41)
r6 = msgget$private(0x0, 0x3ac)
msgsnd(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x8, 0x0)
msgrcv(r6, 0x0, 0x0, 0x1, 0x4800)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
sendmsg$802154_dgram(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14, &(0x7f0000000480)={&(0x7f0000000380)="d74af4b6f0bd848d7e51af04074083154b9aff632e1fce83327d0ff30ef2a916bbf270177e084499e3ed732d1adda88f93350dd2ce2f706141a737f7682feba273548f393379ca94c2cdbc3835efc83366ffcd24187bb8e76f67e6d467ea34af8a3a3ede9fcdc7c7e862f2f507f3a05a701dd14bc6de38206c577376d815be591603ce8fe8023889b59d14e17ca70dee6b261e4591ab1f151093104d6172d826474a29e4695924213da63423ccccd26e707405f420c7a52746cc9beea3dde8d431fa830e70a7ab743c718c3a25b595f0e7f6234ea2f9f2882235c5cb903e", 0xde}, 0x1, 0x0, 0x0, 0x40b0}, 0x40500c0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000780)={{0x80a0000, 0xdddd1000, 0xa, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x8080000, 0xd000, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x8000000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x6, 0x0, 0xfd, 0xfc}, {0x100000, 0xd000, 0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x80}, {0x1000}, {0xeeef0000}, 0x3dfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, 0x0)

1m1.156287463s ago: executing program 9 (id=3565):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4)
landlock_restrict_self(r2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0045b0f, 0x0)

1m0.688289253s ago: executing program 39 (id=3565):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4)
landlock_restrict_self(r2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0045b0f, 0x0)

3.076372328s ago: executing program 0 (id=3972):
rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) (async)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}})
rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x7b, 0x4000000001, 0x0) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
lseek(r1, 0x851, 0x0) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="d4cb4a7e000000001521350612981f6d8df51c58b4c64299a977378690b5d1526b2fbf81ab017ab70440b1a7301dbb55aa0bd3bea5065fdd99507496eabc19e12bb5d5f9ac128b75d2eeec"], 0x0, 0x0, 0x0, 0x0}, 0x0)

2.507955516s ago: executing program 0 (id=3974):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8905, &(0x7f00000006c0))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
r4 = socket$netlink(0x10, 0x3, 0xe)
sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
write$6lowpan_control(r5, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

2.343619627s ago: executing program 0 (id=3976):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1e502d00000904000005030002000921000033012200000000000000000000000000000000000000e7505a43133731906c7bbe3c57d766d417"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="f4dbe75d7ed3cad49381a31967eda73430024a3c652c25c0b59ad6f5b1af11395bd0d9b19468d2ea2a9e7d18039d72cc99962d7a96058134942766ab2368356123e651a2fd39f3d9ab39e0ad79b8634d50091c12f1418e5851a9f11f12979e4ee3552799a2cf0000000000000000ae56f6c5b0969b7046c5eef139238405584b82dd3b38f1805381a9aa7b7521d9571b1c15ce77702df076119b0a069ff7126f33a4bbd3977a80c4391516ad93157abe0b1bad56de369dca01b746e751e8f7ba174b1f14d2c90b0aa21d1c8597c1d3816817f9cc417ded8cdc0da8b6217b00"/249], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x8000000, 0x1})
write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'})
ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000c00)={0x0, 0x4, 0xb, 0xffffffffffffff77, 0x0, 0xf0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="5400000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.92752092s ago: executing program 4 (id=3980):
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x2)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) (async)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x3) (async)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x2)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x5) (async)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xe) (async)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x4) (async)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x11)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) (async, rerun: 32)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xc) (async, rerun: 32)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) (async)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x3) (async, rerun: 64)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x9) (rerun: 64)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10) (async)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xd) (async)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xe)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x1) (async)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x13)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x5) (async, rerun: 32)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x7) (async, rerun: 32)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xc)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x11) (async, rerun: 32)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x7) (async, rerun: 32)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xe)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x11)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x13) (async, rerun: 32)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x214, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xdc, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd7, 0x1, "3460e7f3685b177c88a022441d52d746115e4bd3e2321e8a23f0656146ece415440e4345b37e6a6f762171d3701824f093e2c18eddf6992b3fea2ed86502e4fe98c76741fed750d9f70e85e47462093abd80f1effbc5b279bdfbc9dbef1a6f9830a079112aa6c61ca8b66e43eaf7dfe4c045b1fa3ba96cdd59574521daa040da04034490b2273246c2d962fc29815bd791dafede8e036fe559107fc6cfb1143eef42106c97bac8b26cda8d5a532af24a1c509ccb63f47089ef7544e07e7980a4c157d8decc7e4946965acacc5c119edd39ad83"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}, @NL80211_ATTR_SCAN_SSIDS={0x90, 0x2d, 0x0, 0x1, [{0x11, 0x0, @random="27894fcfa40660e5cc389bf260"}, {0x12, 0x0, @random="e472106064e4f5a2945322db5d04"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @random="ecfbc794cec0"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1b, 0x0, @random="02d25cc456d6864d5edb205035eb3eaaf52f965b0b69e3"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xb}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0xff}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x7}]}, @NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x19, 0x0, @random="107b17d112a88d6b1ff7df0f2ab47b0000203f1bf4"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x214}, 0x1, 0x0, 0x0, 0x4008000}, 0x2004c014)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xc)

1.82569708s ago: executing program 4 (id=3981):
r0 = socket(0x1000000000000010, 0x80802, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000140)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1411, 0x300, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4008040)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="5500000018007fd500fe01b2a4a280930a46000000a843089100fe801100080008000c00085540002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x20000004)
r2 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

1.667523533s ago: executing program 2 (id=3984):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x32)
setresuid(0x0, r2, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socket$kcm(0x29, 0x7, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000180)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000840)="c8f7b1e9333639f8bd8fdeb92d78b4a97911591fe679fb361f24c857a704110504a9a3fe19cb63d815dcd55dc3ccfceb58afaa1415db7fad56514bd8d49b846ab5b07e16a500963d4a69281a", 0x4c}, {&(0x7f0000000e40)="5449a6f1790f7090e2241d102fe867bcc9e6912d0323ec893d5745268a445f78328a0d0e3a125b29e072fcc834c3e643cb1801ab653acf9a854e0627568693bf40e3c6def891dc5d3303b6daf64609c3de8e8ff8b42a3f4c0eff22e21eea3b462a360aa2a76f128f66a0d6e9bfd6607309e3432eb02c4fb7ea28e10b3fd415ec410aaa478f81fd85b7f95ca255cc", 0x8e}], 0x2}}], 0x3, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0)

1.599957424s ago: executing program 8 (id=3985):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={<r4=>r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r4, @in={{0x2, 0x4e22, @empty}}, 0x7f, 0x4, 0x3, 0x100, 0x40, 0xffffffff, 0xa0}, &(0x7f0000000300)=0x9c)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', @broadcast})

1.527534309s ago: executing program 2 (id=3986):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket(0x1d, 0x2, 0x6)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x42)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)={0x30, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}]}, 0x30}}, 0x20000000)

1.526215052s ago: executing program 0 (id=3987):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xb, 0x0, 0x2}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, &(0x7f00000000c0))
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x90, 0x3, 0x8, 0x301, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1de560}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfd}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x686892f78c3bccf3}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x2004c143)

1.462947209s ago: executing program 8 (id=3988):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a000000000109021b0001000000000904"], 0x0) (async)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000180)={0x95, [0x800003, 0xfeffffff]}, 0x10) (async)
recvmmsg$unix(r1, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) (async)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r3], 0x1c}}, 0x804)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "f9d0875c"}]}]}]}]}, 0x40}}, 0x8000) (async)
ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000140)={0xbdb, 0x6a}) (async)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc, 0x2000000]}) (async)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb, 0x37, 0x4, 0x10, 0x1bcf, 0xb40, 0xa0f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfc, 0x10, 0x0, [{{0x9, 0x4, 0x8e, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0)

1.397500819s ago: executing program 2 (id=3989):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="c39226bd7000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="19001d801c9fe41e7d6a15f9debdd16fca0000030000000000000005000a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
listen(r0, 0x800)
write(r0, &(0x7f0000000ac0)="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", 0x541)

1.307807022s ago: executing program 0 (id=3990):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x3032, r1, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r2, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick=0xdd, {0x4, 0xfc}, {}, @connect={{0x0, 0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x80f, 0x94}, {0x0, 0x4}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x80}, {}, {}, @connect={{0x80, 0x6}, {0x3, 0x72}}}], 0x70)
syz_usb_control_io$printer(r0, 0x0, 0x0)
memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r0])

1.294950759s ago: executing program 2 (id=3991):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x82, 0x0, 0x0, 0x0})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100))

1.184985037s ago: executing program 2 (id=3992):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
truncate(0x0, 0xfffffffffffffff9)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r3, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0)
write$tun(r1, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4000, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1}, {0xa000, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9, 0x0, @val=0x80}}}}}}}}, 0x36)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100))
r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$snddsp(r7, &(0x7f0000000000)="ea09", 0x2)
ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x4141, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff00142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x8, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

1.139421851s ago: executing program 4 (id=3993):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000002c0)={0x0, @bt={0x8cb, 0x200, 0x0, 0x1, 0x6, 0x5, 0xff, 0xfffff3f0, 0x101, 0x1000, 0x3, 0x9, 0x7ff, 0x0, 0x10, 0x5, {0x8, 0x5}, 0x1}})
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x8}, 0x8)
r2 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1010115000600142603600e120800060000001101a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x0)

1.079320476s ago: executing program 4 (id=3994):
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001300), 0x800)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, "614af285791a63abd00a94af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000300)={{r0}, 0x0, 0x18, @unused=[0x100000001, 0x2, 0x5, 0x1], @name="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"})
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x4000)
capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x928})
ioctl$LOOP_SET_CAPACITY(r2, 0x4c07)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYBLOB="54010000d8f248012335be05574f9696d96cf7d145307e487a4a3f92c05d7ec8e251901f7b01edfac3a2f4b50749da8bc980876c5c101482a3b052a50beac40d4ba96faf01180f827498e981c1bb0e08a30db45553c5ea962386c652dd5379aa45e6a639c912e9fdf8c23dccd8cdc9e51391118c40192347", @ANYRES16=r3, @ANYBLOB="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"], 0x154}}, 0x20008010)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000240)={{@host, 0x4}, 0x1, 0x0, 0x3})
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
recvmmsg$unix(r1, &(0x7f0000000040), 0x4000000000002ac, 0x0, 0x0)

939.127769ms ago: executing program 2 (id=3995):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120012000000ca7f6409040000000206"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000080)={0x40, 0xf, 0x4, "237c1a73"}, 0x0, 0x0, 0x0, 0x0, 0x0})

775.57582ms ago: executing program 8 (id=3996):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000380), 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
r2 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
lseek(r2, 0x2004, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="13030000550091"], 0xfe33)
write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000740)=""/207, 0xfffffffffffffe54, 0x0, 0x0, 0x2}}, 0x48)

774.343589ms ago: executing program 0 (id=3997):
ioctl$SNDRV_PCM_IOCTL_XRUN(0xffffffffffffffff, 0x4148, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x254, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x50ab}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x22d1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x43}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4b14}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x17}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x305ebeb0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x800}, 0x844)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='cpuset\x00')
ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f00000003c0))
ioctl$FITHAW(r0, 0xc0045878)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x170, r1, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x80000000, @private2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20004082}, 0x92)
r4 = socket$packet(0x11, 0x1, 0x300)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2)
sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd4, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0x38, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x25, 0x4, "494c7a0cafaf6b5352373c38340c4bf4f2be4799ae3bc29a7bffea2a957810a8a3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0x88, 0x3, "cd35cff6008df8b9fcebc531bd7e12d262cb9de27b5e2d91f0bb88a1dfd613bf8d8d42bd583d2f2b112d93d1536153feb4ab58dccd566b31cb2d8dda44d8de126a9e7c7f76862777fa1ea65fe38879ebd6ce4016bccf5ec68e151fd9ee983e69927e981467564b5f0d747183cec94c6a1f12bfdd73895de945cc09dba23e12d4e7a5decb"}]}, 0xd4}}, 0x4)
r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000840), 0x20200, 0x0)
msgget(0x3, 0x45b)
ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000880)="43d307803c51b8d6490f4e35b0a6c7094b24d98fc47a70eeaf588f3a4a135b00326c665be1ace8197e45862f84660b064572aeb6fa0eaf5059e4a2712adb456d9df91f74689fb55d1a6215291b")
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r6)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000f40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000980)={0x54c, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7f}}}}, [@NL80211_ATTR_FRAME={0x4e8, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @broadcast, @random="2179139346bc", {0x4, 0x3}, @value=@ver_80211n={0x0, 0x57, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x100, 0x7, @broadcast, {0x0, 0x7, @random="2940871f5919b7"}, @val={0x1, 0x4, [{0x60, 0x1}, {0xc, 0x1}, {0x4, 0x1}, {0x1b}]}, @val={0x2d, 0x1a, {0x20, 0x0, 0x1, 0x0, {0x40, 0xb79, 0x0, 0x3f8, 0x0, 0x1}, 0x6, 0x8, 0x80}}, [{0xdd, 0xba, "806f51571ea84b3dc93ef8723b99f638d5b3384150c59fb70a26546e637bf5b3f2104141dc62e35a93eef5b1d972a091767813a5c27bd9da061bf24b5bd58c505fb46129724b1029538a375b25169c446a33fb7b0e70fb0bd26c296be324a6b96c89b8ef79d0257a736b95a8fe154a8d07163c2dcef018bc9ef88a196e344bffdf2d111cd3e8e122e2135077de07cd341ceb73d50a8c3b2dc255ee76a478c57d32db74d08d5e42bea09ed57b94155b2f6bf89c22d114fe31dca7"}, {0xdd, 0xe1, "09717c3317a66789b3479d7c51a2056d1b2d7e354572f9ed9d371c966bc301ee669726e3f410a94f9df6f6e84513ffd4f376e84bd2e60824431dbd4eb49c82b3a9429ca260c135dc8d0ff92a176f5f1e2f6416f6a448e11b981839ed21ce33bd4ff4f76a41199423fdaeb93650ad83f2ca87fbf865bff83ceb1233b4779066dbb4b80d2f6f98880e613036f468311c66d8bbccdeb4b1c02735089f725b727d1a20b31c705f90ce5c7ee074247f352960abed21829dbd778e8f45ca94cb59a61a0679800ba592333973273dad5b5ba6a9d2cdcfa38b8c89ca319e89dddf0bd52467"}, {0xdd, 0x7e, "c0e62344881de9fff00ae70a30517ce2c00147415c79d186f130b8faf38f9727bfe87acfef36784470ee8364e8433faac770a372dd55443124d1e3438b173f03721295a19cc778a3b6c4ddb9f627efccea3605cbfb7db658da7c3f16375594e12f912620b042f92f57c0e1a26de60cded454b9c00e0122e4a75d5d9c945b"}, {0xdd, 0x95, "caeec0b0711d11102428d4d1bd65a049506617431cd7954ec116dc546447f7914344c4b679d9f02a8451a02b1344c7e40fd4e0304238561dd7bab973823b3b300ccf687273d1de6bcead16115989cfa9a0e094fb36eb9b78ed99a4555fe032c4df9ad971e9d8b88a7c3219bb98eff91f4b54ae124d2d59a0a6b77b36232d8305b4ffd5da5bf114143b30ecc1ab53934c3bf4934094"}, {0xdd, 0x98, "5bed0cb1e9bd059baf7a1767d7ec3c1c992ece448097ad64edb76ae8abd471ce8a5db8b0e8226cbbe4438b54003757819cb0ea11c0332b76481c22ddca89ce922c69567e7359cb40bac4640eba1e552e5610547166c18c7d51633b1ee21ea1f66ac8eb14ea1a24843bdd6d07ab7e7486adca78c91390674570b88bf8cc0788d512128e6bf7a159b1f2a0030d3a041da84e960a533caf19de"}, {0xdd, 0xac, "e273c78e8cac38fae2c8b5a5881aec62f02a6c4fc57df6ea1d8a79df8412286880ac60f3ad9f8bfc0b09c3cae93ec3de42b56c3b49fcdf632c515745f1bc1b85eba49e4f49f158e6d1c8c85f92a759b5df4842968abc0d8f360201e235c6dc34dd7ace4d86925551a0dd1cb3241a977374b5b86f8b52bc99fad26c5bc3123e095d326bb795c2b43547c58c3c3f97262b9225592fcd743430867f8caef945af7529dddd176256c117d37111f4"}, {0xdd, 0x93, "a53fc6c97ad87a3799a7fb551acc87fc20dddf411085e75004e3098e8175f721527197268f907acfb02e5495e29527adbbc24cdca24669f1569009170379da1254527170bd4cb2cc09b65bc38b90b6be9c81c493df9ae864cd60e71edeab05ba18cadba21f4f6e4ea5e1efa689f942dafb63130e14ad23198b453f5df1aa72d2d8d99dbe7018d5735cb970a90c1a505507fa1a"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x30, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7fff}, @broadcast, @device_b, @random="33a867aa29ad", {0x5, 0xa}}, 0x37, @val={0x8c, 0x10, {0xaca, "bfac87944538", @short="d684f06a53b30391"}}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x7}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1}]}, 0x54c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000f80)=0xe)
pwritev(r4, &(0x7f0000001100)=[{&(0x7f0000000fc0)="569f19c135aa3cd63421739c300e40d9fae97d998917596390fb142bc5d7afe1a6e18895c1789be39fd6a6a26162fecba5e12693832b64de545bca5afebb536342ff37f309926a2b71778d2783f0bd6345c75322740c95744bafbb18c65bc978b4646864dd652f920b8c52c344166caffc07a206daa62fb3706df3970317e3f148169a9a2d3c8723634f20f6ec56e3d854918534e78cafac3895975154e1492580ba5709b5e414276d559538573f2df805a0687885a8e4e35fdfda2978c779a283f19ea844915f81bbefc0c4", 0xcc}, {&(0x7f00000010c0)}], 0x2, 0x7, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40086607, &(0x7f0000001140)=0x7ff)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001180)={0x1fd, 0x6, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000011c0)={0xc, <r9=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000001200)={0x48, 0x5, r9})
fstat(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
fstat(r2, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
read$FUSE(r6, &(0x7f00000013c0)={0x2020, 0x0, 0x0, 0x0, <r12=>0x0}, 0x2020)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000003400)={{0x1, 0x1, 0x18, <r13=>r8, {0xee00, <r14=>0xee00}}, './file0\x00'})
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000003780)=@broute={'broute\x00', 0x20, 0x2, 0x30c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000003440], 0x0, &(0x7f0000001280), &(0x7f0000003440)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x0, 0x48, 0x805, 'veth1_virt_wifi\x00', 'pim6reg\x00', 'team0\x00', 'netpci0\x00', @remote, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x10e, 0x10e, 0x146, [@owner={{'owner\x00', 0x0, 0x18}, {{r10, r11, r12, r14, 0xd, 0x2}}}, @arp={{'arp\x00', 0x0, 0x38}, {{0x337, 0x8, 0x1, @empty, 0xff, @multicast2, 0xffffff00, @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff, 0xff], 0x0, 0x2}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}}, {0x3, 0x20, 0xd0db, 'hsr0\x00', 'team0\x00', 'virt_wifi0\x00', 'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x3b6a52d8e22336d6, 0xff, 0x0, 0x0, 0xff], 0xae, 0xe6, 0x136, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x6, 0x2, 0x10000, 0x9, 0x8}}}], [@common=@dnat={'dnat\x00', 0x10, {{@random="e9ca96c98171", 0xfffffffffffffffc}}}], @common=@log={'log\x00', 0x28, {{0x5, "452499895315841fa9c6e6954b1a5b666f2b4886352111e536bc1562498a", 0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x384)
ioctl$VIDIOC_REQBUFS(r13, 0xc0145608, &(0x7f0000003800)={0xffffffff, 0x1, 0x4, 0x0, 0x3})

742.192849ms ago: executing program 8 (id=3998):
r0 = socket$caif_stream(0x25, 0x1, 0x5)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0)

665.472748ms ago: executing program 8 (id=4000):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) (async)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000})

303.576643ms ago: executing program 4 (id=4001):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async)
r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1) (async)
ptrace(0x8, r1) (async)
r2 = syz_pidfd_open(r1, 0x0)
process_mrelease(r2, 0x700000000000000) (async)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xec9}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @adapter={0xffffffffffffffff, 0x62e98891, 0x202, 0x1, 0x5}}]}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

89.558434ms ago: executing program 4 (id=4002):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x4}, 0x8)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff", 0x4}])
add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="305c0607e1827557c7d7982b8f57fb20a3adc9e3baa292ce8f0a86d502b0cd490635df5bd0460500982b236949ab5e0000b9b94900d159c97eb91e8fe7ec7c49750a1a0ade80000000266cc5f5f46eba4a818f9e254c2534966d11c4ed9a", 0x5e, 0xfffffffffffffffe)

0s ago: executing program 8 (id=4003):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x38b6c1, 0x0)
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0)
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x0, 0x12, 0x11, "0790fcc6c83ed711efba22764d06f291ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xff, 0x87, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xf, 0x6, 0xf7}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x7, 0x7, 0x40, 0x2}, 0x53, &(0x7f00000000c0)={0x5, 0xf, 0x53, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8f, 0x66, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xd, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "22237cdcdfc53a3a5dfe98af682c9a8e"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xb, 0x5, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x3c, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x83, "1174546f3bb45d7cbd35288f37123db4"}]}, 0x3, [{0x7, &(0x7f0000000140)=@string={0x7, 0x3, "759aebcd5c"}}, {0xd6, &(0x7f0000000180)=@string={0xd6, 0x3, "ea0674e008e22544b5d9d116165984eb38969c3da8c1f14047e109d732df452265b0415abe1c46cb02a1052b97b72e3a051e7636b3ccf345aaa4b5089fcaf615478002f0790ae59eb464b375f4eed33176add8b24742fda35c697dd08f8bada3d1320388b3db98bdcb778565688b783a8906fd3d748eb834aa1ae229eff982543a285a917c7355ec9610564678088c70037c51f02e6935b6d6cb2b0e81c8653963f8ade3493ded5526749276713fda98f8076d7ddae2f152639fc8ed42819854d5bde86363284507d7c2af8a3755def5d6665803"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x457}}]})

kernel console output (not intermixed with test programs):

_slave_1: left promiscuous mode
[  842.558351][ T5912] dvb-usb: error while querying for an remote control event.
[  842.565950][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  842.579386][   T12] bridge_slave_0: left allmulticast mode
[  842.595285][   T12] bridge_slave_0: left promiscuous mode
[  842.605148][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  842.619155][T11517] usb usb3-port1: unable to enumerate USB device
[  842.685821][T11525] m920x_read = error: -19
[  842.690223][T11525] dvb-usb: error while querying for an remote control event.
[  842.802211][T18132] overlayfs: failed to resolve './file1': -2
[  842.852908][T11517] m920x_read = error: -19
[  842.858547][T11517] dvb-usb: error while querying for an remote control event.
[  842.997139][T11525] m920x_read = error: -19
[  843.001627][T11525] dvb-usb: error while querying for an remote control event.
[  843.125603][T11525] m920x_read = error: -19
[  843.130021][T11525] dvb-usb: error while querying for an remote control event.
[  843.239851][T11517] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  843.267655][T18151] sctp: [Deprecated]: syz.0.3576 (pid 18151) Use of struct sctp_assoc_value in delayed_ack socket option.
[  843.267655][T18151] Use struct sctp_sack_info instead
[  843.267699][T11525] m920x_read = error: -19
[  843.291790][T11525] dvb-usb: error while querying for an remote control event.
[  843.397163][T11517] usb 3-1: device descriptor read/64, error -71
[  843.416433][T11525] m920x_read = error: -19
[  843.420835][T11525] dvb-usb: error while querying for an remote control event.
[  843.534129][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  843.545665][T11525] m920x_read = error: -19
[  843.550226][T11525] dvb-usb: error while querying for an remote control event.
[  843.550877][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  843.568936][   T12] bond0 (unregistering): Released all slaves
[  843.646304][T11517] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  843.687402][T11525] m920x_read = error: -19
[  843.702929][T11525] dvb-usb: error while querying for an remote control event.
[  843.720160][   T12] tipc: Left network mode
[  843.816923][T11517] usb 3-1: device descriptor read/64, error -71
[  843.823332][T11524] m920x_read = error: -19
[  843.833275][T11524] dvb-usb: error while querying for an remote control event.
[  843.923269][T18119] wg0 speed is unknown, defaulting to 1000
[  843.929801][T11517] usb usb3-port1: attempt power cycle
[  843.975101][T11524] m920x_read = error: -19
[  843.981036][T11524] dvb-usb: error while querying for an remote control event.
[  844.105426][T11524] m920x_read = error: -19
[  844.110601][T11524] dvb-usb: error while querying for an remote control event.
[  844.235972][T11524] m920x_read = error: -19
[  844.251520][T11524] dvb-usb: error while querying for an remote control event.
[  844.286589][T15682] Bluetooth: hci2: command tx timeout
[  844.293733][T11517] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  844.316595][T11517] usb 3-1: device descriptor read/8, error -71
[  844.375495][T11524] m920x_read = error: -19
[  844.381152][T11524] dvb-usb: error while querying for an remote control event.
[  844.409653][   T12] hsr_slave_0: left promiscuous mode
[  844.427800][   T12] hsr_slave_1: left promiscuous mode
[  844.441463][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  844.470011][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  844.482978][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  844.494022][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  844.508610][T11525] m920x_read = error: -19
[  844.514209][T11525] dvb-usb: error while querying for an remote control event.
[  844.524333][   T12] veth1_macvtap: left promiscuous mode
[  844.531194][   T12] veth0_macvtap: left promiscuous mode
[  844.541750][   T12] veth1_vlan: left promiscuous mode
[  844.547354][   T12] veth0_vlan: left promiscuous mode
[  844.608169][T11517] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  844.637667][T11525] m920x_read = error: -19
[  844.642113][T11525] dvb-usb: error while querying for an remote control event.
[  844.653164][T11517] usb 3-1: device descriptor read/8, error -71
[  844.757468][T11517] usb usb3-port1: unable to enumerate USB device
[  844.764708][T11517] m920x_read = error: -19
[  844.773851][T11517] dvb-usb: error while querying for an remote control event.
[  844.895998][T11517] m920x_read = error: -19
[  844.900617][T11517] dvb-usb: error while querying for an remote control event.
[  845.025980][T11517] m920x_read = error: -19
[  845.031652][T11517] dvb-usb: error while querying for an remote control event.
[  845.117750][   T12] team0 (unregistering): Port device team_slave_1 removed
[  845.151134][T11517] m920x_read = error: -19
[  845.156910][T11517] dvb-usb: error while querying for an remote control event.
[  845.181111][   T12] team0 (unregistering): Port device team_slave_0 removed
[  845.275558][T11517] m920x_read = error: -19
[  845.280233][T11517] dvb-usb: error while querying for an remote control event.
[  845.405481][T11517] m920x_read = error: -19
[  845.409892][T11517] dvb-usb: error while querying for an remote control event.
[  845.523579][T11525] m920x_read = error: -19
[  845.528128][T11525] dvb-usb: error while querying for an remote control event.
[  845.648066][T11517] m920x_read = error: -19
[  845.652503][T11517] dvb-usb: error while querying for an remote control event.
[  845.765467][T11517] m920x_read = error: -19
[  845.769900][T11517] dvb-usb: error while querying for an remote control event.
[  845.896744][T11517] m920x_read = error: -19
[  845.901177][T11517] dvb-usb: error while querying for an remote control event.
[  845.918935][T18119] chnl_net:caif_netlink_parms(): no params data found
[  846.059204][T11525] m920x_read = error: -19
[  846.063621][T11525] dvb-usb: error while querying for an remote control event.
[  846.185654][T11517] m920x_read = error: -19
[  846.200301][T11517] dvb-usb: error while querying for an remote control event.
[  846.289920][T18119] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.304266][T18119] bridge0: port 1(bridge_slave_0) entered disabled state
[  846.319562][T18119] bridge_slave_0: entered allmulticast mode
[  846.343164][T18119] bridge_slave_0: entered promiscuous mode
[  846.369201][T15682] Bluetooth: hci2: command tx timeout
[  846.382965][T18119] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.396014][ T5912] m920x_read = error: -19
[  846.400420][ T5912] dvb-usb: error while querying for an remote control event.
[  846.427411][T18119] bridge0: port 2(bridge_slave_1) entered disabled state
[  846.455325][T18119] bridge_slave_1: entered allmulticast mode
[  846.484920][T18119] bridge_slave_1: entered promiscuous mode
[  846.556694][ T5912] m920x_read = error: -19
[  846.581156][ T5912] dvb-usb: error while querying for an remote control event.
[  846.672760][T18119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  846.705286][ T5912] m920x_read = error: -19
[  846.711614][ T5912] dvb-usb: error while querying for an remote control event.
[  846.758842][T18119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  846.855178][T11517] m920x_read = error: -19
[  846.862444][T11517] dvb-usb: error while querying for an remote control event.
[  846.914899][T18227] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3588'.
[  847.017077][T11517] m920x_read = error: -19
[  847.021491][T11517] dvb-usb: error while querying for an remote control event.
[  847.035170][T18119] team0: Port device team_slave_0 added
[  847.058072][T18119] team0: Port device team_slave_1 added
[  847.060062][T15682] Bluetooth: hci7: unknown advertising packet type: 0x69
[  847.063804][T15682] Bluetooth: hci7: Malformed LE Event: 0x02
[  847.132131][T18119] batman_adv: batadv0: Adding interface: batadv_slave_0
[  847.139963][T18119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  847.167286][T18119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  847.175865][T11517] m920x_read = error: -19
[  847.184086][T11517] dvb-usb: error while querying for an remote control event.
[  847.204835][T18119] batman_adv: batadv0: Adding interface: batadv_slave_1
[  847.214752][T18119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  847.243369][T18239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3590'.
[  847.273950][T18119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  847.355137][T11517] m920x_read = error: -19
[  847.359637][T11517] dvb-usb: error while querying for an remote control event.
[  847.453110][T18119] hsr_slave_0: entered promiscuous mode
[  847.475478][T18119] hsr_slave_1: entered promiscuous mode
[  847.486358][T18119] debugfs: 'hsr0' already exists in 'hsr'
[  847.486750][T11525] m920x_read = error: -19
[  847.492652][T18119] Cannot create hsr debugfs directory
[  847.496856][T11525] dvb-usb: error while querying for an remote control event.
[  847.585050][ T5912] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  847.646174][T11525] m920x_read = error: -19
[  847.650805][T11525] dvb-usb: error while querying for an remote control event.
[  847.765711][T11525] m920x_read = error: -19
[  847.770264][T11525] dvb-usb: error while querying for an remote control event.
[  847.780434][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  847.825125][ T5912] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  847.846867][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.874243][ T5912] usb 3-1: config 0 descriptor??
[  847.915202][T11525] m920x_read = error: -19
[  847.919615][T11525] dvb-usb: error while querying for an remote control event.
[  847.921109][T18259] netlink: 'syz.0.3594': attribute type 27 has an invalid length.
[  847.931754][ T5912] usb 3-1: bad CDC descriptors
[  848.058184][T18119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.069493][ T5912] m920x_read = error: -19
[  848.073881][ T5912] dvb-usb: error while querying for an remote control event.
[  848.166639][ T5912] usb 3-1: USB disconnect, device number 80
[  848.193932][T18269] netlink: 'syz.0.3595': attribute type 46 has an invalid length.
[  848.212728][T11525] m920x_read = error: -19
[  848.217288][T11525] dvb-usb: error while querying for an remote control event.
[  848.263674][T18119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.336065][T11525] m920x_read = error: -19
[  848.340612][T11525] dvb-usb: error while querying for an remote control event.
[  848.369731][T18119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.444775][T18119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.457113][T15682] Bluetooth: hci2: command tx timeout
[  848.465878][ T5912] m920x_read = error: -19
[  848.473749][ T5912] dvb-usb: error while querying for an remote control event.
[  848.524304][T18280] kAFS: unable to lookup cell ''
[  848.587039][T11525] m920x_read = error: -19
[  848.591573][T11525] dvb-usb: error while querying for an remote control event.
[  848.734977][T11517] m920x_read = error: -19
[  848.739568][T11517] dvb-usb: error while querying for an remote control event.
[  848.753191][T18119] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  848.806803][T18119] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  848.865960][T11517] m920x_read = error: -19
[  848.870698][T18119] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  848.877708][T11517] dvb-usb: error while querying for an remote control event.
[  848.909651][T18119] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  849.016642][T11525] m920x_read = error: -19
[  849.021391][T11525] dvb-usb: error while querying for an remote control event.
[  849.175198][T11525] m920x_read = error: -19
[  849.179702][T11525] dvb-usb: error while querying for an remote control event.
[  849.226201][T18119] 8021q: adding VLAN 0 to HW filter on device bond0
[  849.285775][T18119] 8021q: adding VLAN 0 to HW filter on device team0
[  849.295455][T11525] m920x_read = error: -19
[  849.299873][T11525] dvb-usb: error while querying for an remote control event.
[  849.323620][T18179] bridge0: port 1(bridge_slave_0) entered blocking state
[  849.330909][T18179] bridge0: port 1(bridge_slave_0) entered forwarding state
[  849.351565][T18179] bridge0: port 2(bridge_slave_1) entered blocking state
[  849.358847][T18179] bridge0: port 2(bridge_slave_1) entered forwarding state
[  849.421662][T18310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3604'.
[  849.435525][T11525] m920x_read = error: -19
[  849.439924][T11525] dvb-usb: error while querying for an remote control event.
[  849.462067][T18119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  849.585131][T11525] m920x_read = error: -19
[  849.589557][T11525] dvb-usb: error while querying for an remote control event.
[  849.704946][ T5912] m920x_read = error: -19
[  849.709384][ T5912] dvb-usb: error while querying for an remote control event.
[  849.766857][T18119] 8021q: adding VLAN 0 to HW filter on device batadv0
[  849.851091][T18325] netlink: 'syz.0.3607': attribute type 16 has an invalid length.
[  849.859198][ T5912] m920x_read = error: -19
[  849.863588][ T5912] dvb-usb: error while querying for an remote control event.
[  849.871878][T18326] netlink: 'syz.0.3607': attribute type 16 has an invalid length.
[  849.880692][T18325] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.3607'.
[  849.892977][T18326] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.3607'.
[  849.915519][T18329] netlink: 'syz.2.3608': attribute type 13 has an invalid length.
[  849.929915][T18329] bridge0: port 2(bridge_slave_1) entered disabled state
[  849.985927][T11525] m920x_read = error: -19
[  849.990375][T11525] dvb-usb: error while querying for an remote control event.
[  850.107803][T11525] m920x_read = error: -19
[  850.116799][T11525] dvb-usb: error while querying for an remote control event.
[  850.245594][T11525] m920x_read = error: -19
[  850.250013][T11525] dvb-usb: error while querying for an remote control event.
[  850.281333][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3611'.
[  850.300578][T18119] veth0_vlan: entered promiscuous mode
[  850.332902][T18119] veth1_vlan: entered promiscuous mode
[  850.378952][T18119] veth0_macvtap: entered promiscuous mode
[  850.394350][T18119] veth1_macvtap: entered promiscuous mode
[  850.405409][T11523] m920x_read = error: -19
[  850.426827][T11523] dvb-usb: error while querying for an remote control event.
[  850.444493][T18119] batman_adv: batadv0: Interface activated: batadv_slave_0
[  850.493039][T18119] batman_adv: batadv0: Interface activated: batadv_slave_1
[  850.501859][   T30] kauditd_printk_skb: 58 callbacks suppressed
[  850.501877][   T30] audit: type=1800 audit(1759401590.921:1954): pid=18351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3614" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  850.525686][T15682] Bluetooth: hci2: command tx timeout
[  850.545067][T11520] m920x_read = error: -19
[  850.551967][T11520] dvb-usb: error while querying for an remote control event.
[  850.560869][T11541] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  850.605068][T11523] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  850.633109][T11541] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  850.644324][T11541] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  850.675689][T11541] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  850.685368][T11520] m920x_read = error: -19
[  850.700498][T11520] dvb-usb: error while querying for an remote control event.
[  850.731705][T18179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.749116][T18179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  850.806381][T11523] usb 3-1: Using ep0 maxpacket: 8
[  850.815484][T11523] usb 3-1: unable to get BOS descriptor or descriptor too short
[  850.827822][T11523] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  850.838212][ T5912] m920x_read = error: -19
[  850.842623][ T5912] dvb-usb: error while querying for an remote control event.
[  850.853583][T11523] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 9
[  850.855501][T18179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.867391][T11523] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  850.881683][T18179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  850.891765][T11523] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.904742][T11523] usb 3-1: Product: syz
[  850.908992][T11523] usb 3-1: Manufacturer: syz
[  850.922430][T11523] usb 3-1: SerialNumber: syz
[  850.964870][T11520] m920x_read = error: -19
[  850.970348][T11520] dvb-usb: error while querying for an remote control event.
[  851.108910][T11520] m920x_read = error: -19
[  851.113382][T11520] dvb-usb: error while querying for an remote control event.
[  851.148428][T18344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  851.159911][T18344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  851.238949][T11520] m920x_read = error: -19
[  851.255019][T11520] dvb-usb: error while querying for an remote control event.
[  851.365941][T11520] m920x_read = error: -19
[  851.370648][T11520] dvb-usb: error while querying for an remote control event.
[  851.477598][T11523] usb 3-1: USB disconnect, device number 81
[  851.495173][ T5912] m920x_read = error: -19
[  851.499710][ T5912] dvb-usb: error while querying for an remote control event.
[  851.516622][T18381] netlink: 'syz.0.3619': attribute type 11 has an invalid length.
[  851.553456][T18381] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3619'.
[  851.569734][T18389] netlink: 'syz.8.3622': attribute type 13 has an invalid length.
[  851.583972][T18389] macvtap0: entered promiscuous mode
[  851.585258][ T5862] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  851.598503][T18389] macvtap0: refused to change device tx_queue_len
[  851.645059][T11520] m920x_read = error: -19
[  851.650575][T11520] dvb-usb: error while querying for an remote control event.
[  851.745629][ T5862] usb 5-1: Using ep0 maxpacket: 32
[  851.753436][ T5862] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  851.764297][ T5862] usb 5-1: config 0 has no interface number 0
[  851.775646][T11520] m920x_read = error: -19
[  851.780038][T11520] dvb-usb: error while querying for an remote control event.
[  851.789830][ T5862] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  851.800888][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.809687][ T5862] usb 5-1: Product: syz
[  851.814093][ T5862] usb 5-1: Manufacturer: syz
[  851.819577][ T5862] usb 5-1: SerialNumber: syz
[  851.827924][ T5862] usb 5-1: config 0 descriptor??
[  851.842049][ T5862] smsc95xx v2.0.0
[  851.885949][T11523] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  851.904863][T11520] m920x_read = error: -19
[  851.909287][T11520] dvb-usb: error while querying for an remote control event.
[  852.024946][T11520] m920x_read = error: -19
[  852.029524][T11520] dvb-usb: error while querying for an remote control event.
[  852.048745][T11523] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  852.059235][T11523] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  852.067678][T11523] usb 3-1: Product: syz
[  852.071906][T11523] usb 3-1: Manufacturer: syz
[  852.076979][T11523] usb 3-1: SerialNumber: syz
[  852.085500][T11523] usb 3-1: config 0 descriptor??
[  852.093314][T11523] ch341 3-1:0.0: ch341-uart converter detected
[  852.144903][T11520] m920x_read = error: -19
[  852.149402][T11520] dvb-usb: error while querying for an remote control event.
[  852.267426][T11520] m920x_read = error: -19
[  852.271975][T11520] dvb-usb: error while querying for an remote control event.
[  852.385116][T11525] m920x_read = error: -19
[  852.389594][T11525] dvb-usb: error while querying for an remote control event.
[  852.504772][T11525] m920x_read = error: -19
[  852.509233][T11525] dvb-usb: error while querying for an remote control event.
[  852.624967][T11525] m920x_read = error: -19
[  852.629620][T11525] dvb-usb: error while querying for an remote control event.
[  852.641074][ T5862] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  852.698481][T11523] ch341-uart ttyUSB0: failed to read break control: -71
[  852.713697][T11523] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  852.727126][T11523] usb 3-1: USB disconnect, device number 82
[  852.735926][T11523] ch341 3-1:0.0: device disconnected
[  852.745726][T11520] m920x_read = error: -19
[  852.750103][T11520] dvb-usb: error while querying for an remote control event.
[  852.846659][ T5862] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  852.865258][T11525] m920x_read = error: -19
[  852.865745][ T5862] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  852.869650][T11525] dvb-usb: error while querying for an remote control event.
[  852.889511][ T5862] usb 5-1: USB disconnect, device number 59
[  852.997804][T18426] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  853.005103][T11523] m920x_read = error: -19
[  853.011574][T11523] dvb-usb: error while querying for an remote control event.
[  853.016148][T18426] overlayfs: missing 'lowerdir'
[  853.124740][T11523] m920x_read = error: -19
[  853.129157][T11523] dvb-usb: error while querying for an remote control event.
[  853.244807][T11523] m920x_read = error: -19
[  853.249214][T11523] dvb-usb: error while querying for an remote control event.
[  853.384634][T11523] m920x_read = error: -19
[  853.394597][T11523] dvb-usb: error while querying for an remote control event.
[  853.504706][T11523] m920x_read = error: -19
[  853.514686][T11523] dvb-usb: error while querying for an remote control event.
[  853.629340][T11523] m920x_read = error: -19
[  853.654786][T11523] dvb-usb: error while querying for an remote control event.
[  853.786814][T11523] m920x_read = error: -19
[  853.803764][T11523] dvb-usb: error while querying for an remote control event.
[  853.934957][T11525] m920x_read = error: -19
[  853.940266][T11525] dvb-usb: error while querying for an remote control event.
[  854.056894][T11525] m920x_read = error: -19
[  854.061734][T11525] dvb-usb: error while querying for an remote control event.
[  854.174667][T11525] m920x_read = error: -19
[  854.181653][T11525] dvb-usb: error while querying for an remote control event.
[  854.304603][T11525] m920x_read = error: -19
[  854.309020][T11525] dvb-usb: error while querying for an remote control event.
[  854.324571][T11517] usb 5-1: new full-speed USB device number 60 using dummy_hcd
[  854.425947][T11525] m920x_read = error: -19
[  854.430573][T11525] dvb-usb: error while querying for an remote control event.
[  854.476475][T11517] usb 5-1: config 5 has an invalid interface number: 148 but max is 0
[  854.486200][T11517] usb 5-1: config 5 has an invalid descriptor of length 145, skipping remainder of the config
[  854.499669][T11517] usb 5-1: config 5 has no interface number 0
[  854.505996][T11517] usb 5-1: config 5 interface 148 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[  854.519710][T11517] usb 5-1: config 5 interface 148 has no altsetting 0
[  854.531447][T11517] usb 5-1: New USB device found, idVendor=12d1, idProduct=142d, bcdDevice= 0.00
[  854.543473][T11517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.552990][T11525] m920x_read = error: -19
[  854.557608][T11525] dvb-usb: error while querying for an remote control event.
[  854.571839][T11517] usb 5-1: Product: syz
[  854.577386][T11517] usb 5-1: Manufacturer: syz
[  854.582269][T11517] usb 5-1: SerialNumber: syz
[  854.644628][T11536] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  854.687992][T11523] m920x_read = error: -19
[  854.692567][T11523] dvb-usb: error while querying for an remote control event.
[  854.793797][T18451] netlink: zone id is out of range
[  854.800491][T18451] netlink: zone id is out of range
[  854.806702][T11523] m920x_read = error: -19
[  854.811905][T18451] netlink: zone id is out of range
[  854.816550][T11536] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  854.817917][T11523] dvb-usb: error while querying for an remote control event.
[  854.828022][T11536] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  854.844134][T18451] netlink: zone id is out of range
[  854.852389][T18451] netlink: zone id is out of range
[  854.861153][T18451] netlink: zone id is out of range
[  854.866832][T18451] netlink: zone id is out of range
[  854.866931][T11536] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  854.872215][T18451] netlink: zone id is out of range
[  854.891071][T18451] netlink: zone id is out of range
[  854.897079][T18451] netlink: zone id is out of range
[  854.911808][T11536] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  854.921740][T11536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.931416][T11536] usb 3-1: Product: syz
[  854.938028][T11536] usb 3-1: Manufacturer: syz
[  854.944000][T11536] usb 3-1: SerialNumber: syz
[  854.965932][T11523] m920x_read = error: -19
[  854.970701][T11523] dvb-usb: error while querying for an remote control event.
[  854.989741][T11536] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  855.002782][T11536] cdc_ncm 3-1:1.0: bind() failure
[  855.046426][T18457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3642'.
[  855.094834][T11525] m920x_read = error: -19
[  855.099349][T11525] dvb-usb: error while querying for an remote control event.
[  855.123977][T18459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3642'.
[  855.136837][T18459] nbd: nbd64 already in use
[  855.227771][T11525] m920x_read = error: -19
[  855.232979][T11525] dvb-usb: error while querying for an remote control event.
[  855.249952][ T8353] udevd[8353]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  855.355393][T11525] m920x_read = error: -19
[  855.359898][T11525] dvb-usb: error while querying for an remote control event.
[  855.485386][T11525] m920x_read = error: -19
[  855.489872][T11525] dvb-usb: error while querying for an remote control event.
[  855.536177][T18463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  855.546075][T18463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  855.615393][T11525] m920x_read = error: -19
[  855.619839][T11525] dvb-usb: error while querying for an remote control event.
[  855.744774][T11525] m920x_read = error: -19
[  855.749529][T18468] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20001
[  855.751883][T11525] dvb-usb: error while querying for an remote control event.
[  855.761738][T18468] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3644'.
[  855.914617][T11525] m920x_read = error: -19
[  855.919047][T11525] dvb-usb: error while querying for an remote control event.
[  856.045113][T11525] m920x_read = error: -19
[  856.049742][T11525] dvb-usb: error while querying for an remote control event.
[  856.164534][T11525] m920x_read = error: -19
[  856.168974][T11525] dvb-usb: error while querying for an remote control event.
[  856.285055][T11525] m920x_read = error: -19
[  856.289571][T11525] dvb-usb: error while querying for an remote control event.
[  856.415637][T11525] m920x_read = error: -19
[  856.420108][T11525] dvb-usb: error while querying for an remote control event.
[  856.534813][T11525] m920x_read = error: -19
[  856.544542][T11525] dvb-usb: error while querying for an remote control event.
[  856.676854][T11525] m920x_read = error: -19
[  856.688638][T11525] dvb-usb: error while querying for an remote control event.
[  856.814509][T11525] m920x_read = error: -19
[  856.819195][T11525] dvb-usb: error while querying for an remote control event.
[  856.945177][T11525] m920x_read = error: -19
[  856.949694][T11525] dvb-usb: error while querying for an remote control event.
[  856.995369][T11517] usb-storage 5-1:5.148: USB Mass Storage device detected
[  857.070880][T11525] m920x_read = error: -19
[  857.082824][T11525] dvb-usb: error while querying for an remote control event.
[  857.091608][T11517] usb 5-1: USB disconnect, device number 60
[  857.214589][T11523] m920x_read = error: -19
[  857.218990][T11523] dvb-usb: error while querying for an remote control event.
[  857.246876][T18518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  857.260055][T18518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  857.344850][T11523] m920x_read = error: -19
[  857.357238][T11523] dvb-usb: error while querying for an remote control event.
[  857.420831][T11536] usb 3-1: USB disconnect, device number 83
[  857.484934][T11525] m920x_read = error: -19
[  857.489634][T11525] dvb-usb: error while querying for an remote control event.
[  857.614824][T11525] m920x_read = error: -19
[  857.619226][T11525] dvb-usb: error while querying for an remote control event.
[  857.632807][   T30] audit: type=1326 audit(1759401598.052:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117738eec9 code=0x7ffc0000
[  857.656517][   T30] audit: type=1326 audit(1759401598.052:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117738eec9 code=0x7ffc0000
[  857.679055][    C1] vkms_vblank_simulate: vblank timer overrun
[  857.691449][   T30] audit: type=1326 audit(1759401598.052:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117738eec9 code=0x7ffc0000
[  857.714637][   T30] audit: type=1326 audit(1759401598.052:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f117738eec9 code=0x7ffc0000
[  857.737718][T11525] m920x_read = error: -19
[  857.742900][   T30] audit: type=1326 audit(1759401598.052:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117738eec9 code=0x7ffc0000
[  857.743123][T11525] dvb-usb: error while querying for an remote control event.
[  857.766635][   T30] audit: type=1326 audit(1759401598.052:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117738eec9 code=0x7ffc0000
[  857.773095][T11517] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  857.795465][    C1] vkms_vblank_simulate: vblank timer overrun
[  857.796599][   T30] audit: type=1326 audit(1759401598.052:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117738eec9 code=0x7ffc0000
[  857.836690][   T30] audit: type=1326 audit(1759401598.052:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117738eec9 code=0x7ffc0000
[  857.859299][    C1] vkms_vblank_simulate: vblank timer overrun
[  857.866512][   T30] audit: type=1326 audit(1759401598.052:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f117738eec9 code=0x7ffc0000
[  857.900917][   T30] audit: type=1326 audit(1759401598.052:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18529 comm="syz.2.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f117738d710 code=0x7ffc0000
[  857.935302][T11523] m920x_read = error: -19
[  857.939704][T11523] dvb-usb: error while querying for an remote control event.
[  858.013256][T18541] 9pnet_fd: Insufficient options for proto=fd
[  858.021804][T11517] usb 5-1: Using ep0 maxpacket: 16
[  858.023935][T18541] 9pnet_fd: Insufficient options for proto=fd
[  858.031625][T11517] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  858.059575][T11523] m920x_read = error: -19
[  858.064044][T11523] dvb-usb: error while querying for an remote control event.
[  858.071981][T11517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.092037][T11517] usb 5-1: Product: syz
[  858.113629][T11517] usb 5-1: Manufacturer: syz
[  858.122305][T11517] usb 5-1: SerialNumber: syz
[  858.143323][T11517] usb 5-1: config 0 descriptor??
[  858.174692][T11523] m920x_read = error: -19
[  858.179095][T11523] dvb-usb: error while querying for an remote control event.
[  858.220059][T18548] netlink: 14478 bytes leftover after parsing attributes in process `syz.0.3671'.
[  858.294733][T11523] m920x_read = error: -19
[  858.299172][T11523] dvb-usb: error while querying for an remote control event.
[  858.344328][T11536] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  858.414545][T11523] m920x_read = error: -19
[  858.419078][T11523] dvb-usb: error while querying for an remote control event.
[  858.506337][T11536] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  858.519849][T11536] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  858.535256][T11523] m920x_read = error: -19
[  858.535678][T11536] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  858.540843][T11523] dvb-usb: error while querying for an remote control event.
[  858.552937][T11536] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  858.568841][T11536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.574453][T11517] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  858.591702][T18543] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  858.600541][T11517] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  858.620752][T11517] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  858.629252][T11517] usb 5-1: media controller created
[  858.659889][T11517] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  858.669001][T11523] m920x_read = error: -19
[  858.673488][T11523] dvb-usb: error while querying for an remote control event.
[  858.770465][T11517] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  858.778513][T11517] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  858.787805][T11523] m920x_read = error: -19
[  858.792293][T11523] dvb-usb: error while querying for an remote control event.
[  858.853470][T18560] overlayfs: failed to clone upperpath
[  858.905047][T11523] m920x_read = error: -19
[  858.909980][T11523] dvb-usb: error while querying for an remote control event.
[  859.046239][T15682] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  859.058409][T15682] CPU: 0 UID: 0 PID: 15682 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  859.058441][T15682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  859.058457][T15682] Workqueue: hci2 hci_rx_work
[  859.058486][T15682] Call Trace:
[  859.058496][T15682]  <TASK>
[  859.058506][T15682]  dump_stack_lvl+0x189/0x250
[  859.058550][T15682]  ? __pfx_dump_stack_lvl+0x10/0x10
[  859.058586][T15682]  ? __pfx__printk+0x10/0x10
[  859.058625][T15682]  ? kernfs_path_from_node+0x250/0x290
[  859.058661][T15682]  ? kernfs_path_from_node+0x2f/0x290
[  859.058701][T15682]  sysfs_create_dir_ns+0x259/0x280
[  859.058741][T15682]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  859.058779][T15682]  ? do_raw_spin_unlock+0x122/0x240
[  859.058821][T15682]  kobject_add_internal+0x59f/0xb40
[  859.058863][T15682]  kobject_add+0x155/0x220
[  859.058900][T15682]  ? __pfx_kobject_add+0x10/0x10
[  859.058931][T15682]  ? _raw_spin_unlock+0x28/0x50
[  859.058960][T15682]  ? get_device_parent+0x366/0x3a0
[  859.058990][T15682]  device_add+0x408/0xb50
[  859.059018][T15682]  hci_conn_add_sysfs+0xd5/0x1e0
[  859.059059][T15682]  le_conn_complete_evt+0xf39/0x1500
[  859.059104][T15682]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  859.059131][T15682]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  859.059159][T15682]  ? __asan_memcpy+0x40/0x70
[  859.059199][T15682]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  859.059228][T15682]  ? skb_pull_data+0xfb/0x200
[  859.059268][T15682]  hci_le_conn_complete_evt+0x187/0x450
[  859.059317][T15682]  hci_event_packet+0x78f/0x1200
[  859.059344][T15682]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  859.059384][T15682]  ? __pfx_hci_event_packet+0x10/0x10
[  859.059409][T15682]  ? kcov_remote_start+0x4d3/0x7f0
[  859.059434][T15682]  ? local_clock_noinstr+0xe0/0xe0
[  859.059465][T15682]  ? hci_send_to_monitor+0xe2/0x570
[  859.059500][T15682]  hci_rx_work+0x46a/0xe80
[  859.059532][T15682]  ? process_scheduled_works+0x9ef/0x17b0
[  859.059563][T15682]  process_scheduled_works+0xae1/0x17b0
[  859.059625][T15682]  ? __pfx_process_scheduled_works+0x10/0x10
[  859.059672][T15682]  worker_thread+0x8a0/0xda0
[  859.059705][T15682]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  859.059740][T15682]  ? __kthread_parkme+0x7b/0x200
[  859.059800][T15682]  kthread+0x711/0x8a0
[  859.059839][T15682]  ? __pfx_worker_thread+0x10/0x10
[  859.059869][T15682]  ? __pfx_kthread+0x10/0x10
[  859.059906][T15682]  ? _raw_spin_unlock_irq+0x23/0x50
[  859.059931][T15682]  ? lockdep_hardirqs_on+0x9c/0x150
[  859.059957][T15682]  ? __pfx_kthread+0x10/0x10
[  859.059994][T15682]  ret_from_fork+0x4bc/0x870
[  859.060026][T15682]  ? __pfx_ret_from_fork+0x10/0x10
[  859.060064][T15682]  ? __switch_to_asm+0x39/0x70
[  859.060086][T15682]  ? __switch_to_asm+0x33/0x70
[  859.060109][T15682]  ? __pfx_kthread+0x10/0x10
[  859.060146][T15682]  ret_from_fork_asm+0x1a/0x30
[  859.060191][T15682]  </TASK>
[  859.060224][T15682] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  859.152748][T11523] m920x_read = error: -19
[  859.157827][T15682] Bluetooth: hci2: failed to register connection device
[  859.174467][T11523] dvb-usb: error while querying for an remote control event.
[  859.224744][T11536] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[  859.259657][ T5912] usb 5-1: USB disconnect, device number 61
[  859.439261][ T5912] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  859.481751][T11536] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input126
[  859.494925][T11525] m920x_read = error: -19
[  859.499460][T11525] dvb-usb: error while querying for an remote control event.
[  859.599139][T18562] wg0 speed is unknown, defaulting to 1000
[  859.615208][T11525] m920x_read = error: -19
[  859.632358][T11525] dvb-usb: error while querying for an remote control event.
[  859.633213][    C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  859.651194][T11536] usb 3-1: USB disconnect, device number 84
[  859.760362][T18587] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3681'.
[  859.784290][ T5912] m920x_read = error: -19
[  859.788697][ T5912] dvb-usb: error while querying for an remote control event.
[  859.803012][T18587] bridge0: port 1(bridge_slave_0) entered disabled state
[  859.912117][T11525] m920x_read = error: -19
[  859.920520][T11525] dvb-usb: error while querying for an remote control event.
[  859.977286][T18587] bridge_slave_0 (unregistering): left allmulticast mode
[  859.998652][T18587] bridge_slave_0 (unregistering): left promiscuous mode
[  860.007852][T18587] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.055830][T11525] m920x_read = error: -19
[  860.060384][T11525] dvb-usb: error while querying for an remote control event.
[  860.176450][T11539] usb 5-1: new low-speed USB device number 62 using dummy_hcd
[  860.195086][T11525] m920x_read = error: -19
[  860.199499][T11525] dvb-usb: error while querying for an remote control event.
[  860.339508][T11539] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  860.348884][T11539] usb 5-1: config 0 has no interface number 0
[  860.354343][T11525] m920x_read = error: -19
[  860.356416][T11539] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  860.365297][T11525] dvb-usb: error while querying for an remote control event.
[  860.397493][T11539] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  860.409074][T11539] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  860.439808][T11539] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  860.452690][T11539] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  860.486758][T11539] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  860.506297][T11539] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  860.506905][T11525] m920x_read = error: -19
[  860.516463][T11539] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  860.528901][T11525] dvb-usb: error while querying for an remote control event.
[  860.536770][T11539] usb 5-1: config 0 descriptor??
[  860.537848][T18592] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  860.551790][T18592] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  860.577668][T11539] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  860.596137][T18591] wg0 speed is unknown, defaulting to 1000
[  860.674624][T11517] m920x_read = error: -19
[  860.679079][T11517] dvb-usb: error while querying for an remote control event.
[  860.768904][T11539] usb 5-1: USB disconnect, device number 62
[  860.798696][T11539] ldusb 5-1:0.55: LD USB Device #1 now disconnected
[  860.834560][T11517] m920x_read = error: -19
[  860.838970][T11517] dvb-usb: error while querying for an remote control event.
[  860.984323][T11517] m920x_read = error: -19
[  860.992853][T11517] dvb-usb: error while querying for an remote control event.
[  861.135796][T11517] m920x_read = error: -19
[  861.140354][T11517] dvb-usb: error while querying for an remote control event.
[  861.274861][T11517] m920x_read = error: -19
[  861.279291][T11517] dvb-usb: error while querying for an remote control event.
[  861.424951][T11517] m920x_read = error: -19
[  861.429609][T11517] dvb-usb: error while querying for an remote control event.
[  861.479633][T18634] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3687'.
[  861.586474][T11517] m920x_read = error: -19
[  861.591009][T11517] dvb-usb: error while querying for an remote control event.
[  861.762902][T11517] m920x_read = error: -19
[  861.769295][T11517] dvb-usb: error while querying for an remote control event.
[  861.896029][T11517] m920x_read = error: -19
[  861.913919][T11517] dvb-usb: error while querying for an remote control event.
[  861.926576][T18669] tmpfs: Bad value for 'mpol'
[  862.054986][T11517] m920x_read = error: -19
[  862.069288][T11517] dvb-usb: error while querying for an remote control event.
[  862.118787][    C0] vcan0: j1939_tp_rxtimer: 0xffff888060d46000: rx timeout, send abort
[  862.194565][T11517] m920x_read = error: -19
[  862.198969][T11517] dvb-usb: error while querying for an remote control event.
[  862.314256][T11517] m920x_read = error: -19
[  862.318760][T11517] dvb-usb: error while querying for an remote control event.
[  862.445311][T11517] m920x_read = error: -19
[  862.454399][T11517] dvb-usb: error while querying for an remote control event.
[  862.574876][ T5912] m920x_read = error: -19
[  862.581970][ T5912] dvb-usb: error while querying for an remote control event.
[  862.618899][    C0] vcan0: j1939_tp_rxtimer: 0xffff888060d44400: rx timeout, send abort
[  862.627476][    C0] vcan0: j1939_tp_rxtimer: 0xffff888060d46000: abort rx timeout. Force session deactivation
[  862.714308][T11517] m920x_read = error: -19
[  862.718961][T11517] dvb-usb: error while querying for an remote control event.
[  862.745809][T18700] Unknown options in mask b7f2
[  862.802612][T18707] netlink: 'syz.0.3701': attribute type 28 has an invalid length.
[  862.813921][T18707] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3701'.
[  862.824346][ T5862] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  862.854192][T11517] m920x_read = error: -19
[  862.858583][T11517] dvb-usb: error while querying for an remote control event.
[  862.866658][ T5912] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  862.954233][ T5862] usb 3-1: device descriptor read/64, error -71
[  862.984177][T11517] m920x_read = error: -19
[  862.988659][T11517] dvb-usb: error while querying for an remote control event.
[  863.027466][ T5912] usb 5-1: unable to get BOS descriptor or descriptor too short
[  863.035727][ T5912] usb 5-1: not running at top speed; connect to a high speed hub
[  863.045112][ T5912] usb 5-1: unable to read config index 0 descriptor/start: -61
[  863.053431][ T5912] usb 5-1: can't read configurations, error -61
[  863.104919][T11517] m920x_read = error: -19
[  863.109438][T11517] dvb-usb: error while querying for an remote control event.
[  863.127376][    C0] vcan0: j1939_tp_rxtimer: 0xffff888060d44400: abort rx timeout. Force session deactivation
[  863.184348][ T5912] usb 5-1: new full-speed USB device number 64 using dummy_hcd
[  863.194186][ T5862] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  863.224281][T11517] m920x_read = error: -19
[  863.228788][T11517] dvb-usb: error while querying for an remote control event.
[  863.324245][ T5862] usb 3-1: device descriptor read/64, error -71
[  863.342014][ T5912] usb 5-1: unable to get BOS descriptor or descriptor too short
[  863.355912][T11517] m920x_read = error: -19
[  863.361270][T11517] dvb-usb: error while querying for an remote control event.
[  863.379231][ T5912] usb 5-1: not running at top speed; connect to a high speed hub
[  863.389826][ T5912] usb 5-1: unable to read config index 0 descriptor/start: -61
[  863.398517][ T5912] usb 5-1: can't read configurations, error -61
[  863.412336][ T5912] usb usb5-port1: attempt power cycle
[  863.428580][T18713] No control pipe specified
[  863.434455][ T5862] usb usb3-port1: attempt power cycle
[  863.496670][T11517] m920x_read = error: -19
[  863.501171][T11517] dvb-usb: error while querying for an remote control event.
[  863.616197][T11517] m920x_read = error: -19
[  863.621666][T11517] dvb-usb: error while querying for an remote control event.
[  863.734498][T11520] m920x_read = error: -19
[  863.741116][T11520] dvb-usb: error while querying for an remote control event.
[  863.756224][ T5912] usb 5-1: new full-speed USB device number 65 using dummy_hcd
[  863.784114][ T5862] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  863.797235][ T5912] usb 5-1: unable to get BOS descriptor or descriptor too short
[  863.813647][ T5912] usb 5-1: not running at top speed; connect to a high speed hub
[  863.828477][ T5862] usb 3-1: device descriptor read/8, error -71
[  863.843101][ T5912] usb 5-1: unable to read config index 0 descriptor/start: -61
[  863.866351][ T5912] usb 5-1: can't read configurations, error -61
[  863.884404][T11520] m920x_read = error: -19
[  863.891019][T11520] dvb-usb: error while querying for an remote control event.
[  863.911894][T18737] overlayfs: failed to clone upperpath
[  864.004169][T11520] m920x_read = error: -19
[  864.008654][ T5912] usb 5-1: new full-speed USB device number 66 using dummy_hcd
[  864.017429][T11520] dvb-usb: error while querying for an remote control event.
[  864.078375][ T5862] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  864.078541][ T5912] usb 5-1: unable to get BOS descriptor or descriptor too short
[  864.107405][ T5912] usb 5-1: not running at top speed; connect to a high speed hub
[  864.123353][ T5912] usb 5-1: unable to read config index 0 descriptor/start: -61
[  864.136004][ T5862] usb 3-1: device descriptor read/8, error -71
[  864.144234][T11525] m920x_read = error: -19
[  864.149861][T11525] dvb-usb: error while querying for an remote control event.
[  864.161343][ T5912] usb 5-1: can't read configurations, error -61
[  864.169498][ T5912] usb usb5-port1: unable to enumerate USB device
[  864.260257][ T5862] usb usb3-port1: unable to enumerate USB device
[  864.274216][ T5912] m920x_read = error: -19
[  864.280401][ T5912] dvb-usb: error while querying for an remote control event.
[  864.396925][ T5912] m920x_read = error: -19
[  864.401364][ T5912] dvb-usb: error while querying for an remote control event.
[  864.514827][ T5912] m920x_read = error: -19
[  864.519217][ T5912] dvb-usb: error while querying for an remote control event.
[  864.634641][ T5912] m920x_read = error: -19
[  864.639156][ T5912] dvb-usb: error while querying for an remote control event.
[  864.754707][ T5912] m920x_read = error: -19
[  864.759177][ T5912] dvb-usb: error while querying for an remote control event.
[  864.874503][ T5912] m920x_read = error: -19
[  864.879001][ T5912] dvb-usb: error while querying for an remote control event.
[  864.995014][ T5912] m920x_read = error: -19
[  865.000349][ T5912] dvb-usb: error while querying for an remote control event.
[  865.115252][ T5912] m920x_read = error: -19
[  865.119730][ T5912] dvb-usb: error while querying for an remote control event.
[  865.234229][ T5912] m920x_read = error: -19
[  865.238651][ T5912] dvb-usb: error while querying for an remote control event.
[  865.324169][T15682] Bluetooth: hci2: command 0x0406 tx timeout
[  865.354260][ T5912] m920x_read = error: -19
[  865.358801][ T5912] dvb-usb: error while querying for an remote control event.
[  865.474341][ T5912] m920x_read = error: -19
[  865.478800][ T5912] dvb-usb: error while querying for an remote control event.
[  865.583302][T18779] netlink: 188 bytes leftover after parsing attributes in process `syz.8.3723'.
[  865.605062][ T5912] m920x_read = error: -19
[  865.609463][ T5912] dvb-usb: error while querying for an remote control event.
[  865.784093][T11525] m920x_read = error: -19
[  865.788510][T11525] dvb-usb: error while querying for an remote control event.
[  865.984206][ T5912] m920x_read = error: -19
[  865.988778][ T5912] dvb-usb: error while querying for an remote control event.
[  866.114268][ T5912] m920x_read = error: -19
[  866.118693][ T5912] dvb-usb: error while querying for an remote control event.
[  866.127274][T11525] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  866.214084][T11524] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  866.254101][ T5912] m920x_read = error: -19
[  866.258594][ T5912] dvb-usb: error while querying for an remote control event.
[  866.296165][T11525] usb 5-1: config index 0 descriptor too short (expected 65042, got 18)
[  866.314022][T11525] usb 5-1: config 0 has an invalid interface number: 62 but max is -1
[  866.322460][T11525] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  866.342844][T11525] usb 5-1: config 0 has no interface number 0
[  866.349335][T11525] usb 5-1: config 0 interface 62 has no altsetting 0
[  866.366476][T11525] usb 5-1: New USB device found, idVendor=2584, idProduct=4a8f, bcdDevice=a4.2c
[  866.376237][ T5912] m920x_read = error: -19
[  866.380630][ T5912] dvb-usb: error while querying for an remote control event.
[  866.388570][T11524] usb 3-1: Using ep0 maxpacket: 8
[  866.393781][T11525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.405417][T11524] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  866.423987][T11525] usb 5-1: Product: syz
[  866.428387][T11524] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[  866.438283][T11525] usb 5-1: Manufacturer: syz
[  866.443559][T11525] usb 5-1: SerialNumber: syz
[  866.448402][T11524] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  866.460916][T11525] usb 5-1: config 0 descriptor??
[  866.473984][T11524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  866.504173][T11524] m920x_read = error: -19
[  866.508639][T11524] dvb-usb: error while querying for an remote control event.
[  866.634857][T11524] m920x_read = error: -19
[  866.639396][T11524] dvb-usb: error while querying for an remote control event.
[  866.671916][T11525] usb-storage 5-1:0.62: USB Mass Storage device detected
[  866.754099][T11524] m920x_read = error: -19
[  866.758521][T11524] dvb-usb: error while querying for an remote control event.
[  866.806524][T11517] usb 3-1: USB disconnect, device number 89
[  866.819552][T11525] usb 5-1: USB disconnect, device number 67
[  866.924475][T11524] m920x_read = error: -19
[  866.929035][T11524] dvb-usb: error while querying for an remote control event.
[  866.938150][T18807] netlink: 'syz.0.3732': attribute type 4 has an invalid length.
[  867.044810][T11517] m920x_read = error: -19
[  867.060827][T11517] dvb-usb: error while querying for an remote control event.
[  867.186633][T11517] m920x_read = error: -19
[  867.191636][T11517] dvb-usb: error while querying for an remote control event.
[  867.211085][T18822] netlink: 'syz.8.3736': attribute type 6 has an invalid length.
[  867.219628][T18823] netlink: 393 bytes leftover after parsing attributes in process `syz.8.3736'.
[  867.254478][T18822] netlink: 'syz.8.3736': attribute type 6 has an invalid length.
[  867.264397][T18823] netlink: 393 bytes leftover after parsing attributes in process `syz.8.3736'.
[  867.290357][T18823] netlink: 393 bytes leftover after parsing attributes in process `syz.8.3736'.
[  867.300207][T18822] netlink: 'syz.8.3736': attribute type 6 has an invalid length.
[  867.304099][T18823] netlink: 393 bytes leftover after parsing attributes in process `syz.8.3736'.
[  867.308268][T11525] m920x_read = error: -19
[  867.321095][T18823] netlink: 393 bytes leftover after parsing attributes in process `syz.8.3736'.
[  867.330777][T11525] dvb-usb: error while querying for an remote control event.
[  867.340143][T18822] netlink: 'syz.8.3736': attribute type 6 has an invalid length.
[  867.353352][T18822] netlink: 'syz.8.3736': attribute type 6 has an invalid length.
[  867.387648][T18822] netlink: 'syz.8.3736': attribute type 6 has an invalid length.
[  867.396669][T18822] netlink: 'syz.8.3736': attribute type 6 has an invalid length.
[  867.405092][T18822] netlink: 'syz.8.3736': attribute type 6 has an invalid length.
[  867.421883][T18823] netlink: 393 bytes leftover after parsing attributes in process `syz.8.3736'.
[  867.454061][T11525] m920x_read = error: -19
[  867.458520][T11525] dvb-usb: error while querying for an remote control event.
[  867.498050][T18823] netlink: 393 bytes leftover after parsing attributes in process `syz.8.3736'.
[  867.508131][T18823] netlink: 393 bytes leftover after parsing attributes in process `syz.8.3736'.
[  867.594018][T11525] m920x_read = error: -19
[  867.598429][T11525] dvb-usb: error while querying for an remote control event.
[  867.625392][T18823] netlink: 393 bytes leftover after parsing attributes in process `syz.8.3736'.
[  867.664226][T18823] netlink: 393 bytes leftover after parsing attributes in process `syz.8.3736'.
[  867.714444][T11525] m920x_read = error: -19
[  867.718935][T11525] dvb-usb: error while querying for an remote control event.
[  867.844077][T11525] m920x_read = error: -19
[  867.848486][T11525] dvb-usb: error while querying for an remote control event.
[  867.857131][T18839] kAFS: unable to lookup cell '@mTsyz0'
[  867.923966][ T5862] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  867.964212][T11525] m920x_read = error: -19
[  867.969647][T11525] dvb-usb: error while querying for an remote control event.
[  868.075640][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  868.094004][T11525] m920x_read = error: -19
[  868.098405][T11525] dvb-usb: error while querying for an remote control event.
[  868.127032][ T5862] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  868.138097][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  868.170641][ T5862] usb 5-1: config 0 descriptor??
[  868.217651][T11525] m920x_read = error: -19
[  868.222139][T11525] dvb-usb: error while querying for an remote control event.
[  868.344183][T11525] m920x_read = error: -19
[  868.348597][T11525] dvb-usb: error while querying for an remote control event.
[  868.484940][T11525] m920x_read = error: -19
[  868.498728][T11525] dvb-usb: error while querying for an remote control event.
[  868.624642][T11517] m920x_read = error: -19
[  868.629138][T11517] dvb-usb: error while querying for an remote control event.
[  868.637138][ T5862] keytouch 0003:0926:3333.0069: fixing up Keytouch IEC report descriptor
[  868.669557][ T5862] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0069/input/input127
[  868.744018][T11525] m920x_read = error: -19
[  868.754907][T11525] dvb-usb: error while querying for an remote control event.
[  868.794168][ T5862] keytouch 0003:0926:3333.0069: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  868.881572][T11525] m920x_read = error: -19
[  868.894955][T11525] dvb-usb: error while querying for an remote control event.
[  869.024282][T11525] m920x_read = error: -19
[  869.033490][T11525] dvb-usb: error while querying for an remote control event.
[  869.163304][T18862] validate_nla: 27 callbacks suppressed
[  869.163324][T18862] netlink: 'syz.0.3751': attribute type 37 has an invalid length.
[  869.185826][T11525] m920x_read = error: -19
[  869.190222][T11525] dvb-usb: error while querying for an remote control event.
[  869.265540][T11525] usb 5-1: USB disconnect, device number 68
[  869.313980][T11517] m920x_read = error: -19
[  869.318376][T11517] dvb-usb: error while querying for an remote control event.
[  869.464042][T11517] m920x_read = error: -19
[  869.468528][T11517] dvb-usb: error while querying for an remote control event.
[  869.538001][T18878] netlink: 'syz.0.3755': attribute type 15 has an invalid length.
[  869.584048][T11525] m920x_read = error: -19
[  869.588589][T11525] dvb-usb: error while querying for an remote control event.
[  869.596374][ T5862] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  869.703999][T11525] m920x_read = error: -19
[  869.709203][T11525] dvb-usb: error while querying for an remote control event.
[  869.763962][ T5862] usb 3-1: Using ep0 maxpacket: 8
[  869.771515][ T5862] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  869.783129][ T5862] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  869.793128][ T5862] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  869.803630][ T5862] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  869.819357][ T5862] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  869.827227][T11525] m920x_read = error: -19
[  869.837156][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.843129][T11525] dvb-usb: error while querying for an remote control event.
[  869.984365][T11525] m920x_read = error: -19
[  869.988789][T11525] dvb-usb: error while querying for an remote control event.
[  870.006459][T15682] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  870.016720][T15682] CPU: 0 UID: 0 PID: 15682 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  870.016748][T15682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  870.016764][T15682] Workqueue: hci2 hci_rx_work
[  870.016796][T15682] Call Trace:
[  870.016806][T15682]  <TASK>
[  870.016815][T15682]  dump_stack_lvl+0x189/0x250
[  870.016857][T15682]  ? __pfx_dump_stack_lvl+0x10/0x10
[  870.016899][T15682]  ? __pfx__printk+0x10/0x10
[  870.016939][T15682]  ? kernfs_path_from_node+0x250/0x290
[  870.016973][T15682]  ? kernfs_path_from_node+0x2f/0x290
[  870.017012][T15682]  sysfs_create_dir_ns+0x259/0x280
[  870.017050][T15682]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  870.017086][T15682]  ? do_raw_spin_unlock+0x122/0x240
[  870.017127][T15682]  kobject_add_internal+0x59f/0xb40
[  870.017167][T15682]  kobject_add+0x155/0x220
[  870.017222][T15682]  ? __pfx_kobject_add+0x10/0x10
[  870.017253][T15682]  ? _raw_spin_unlock+0x28/0x50
[  870.017281][T15682]  ? get_device_parent+0x366/0x3a0
[  870.017312][T15682]  device_add+0x408/0xb50
[  870.017349][T15682]  hci_conn_add_sysfs+0xd5/0x1e0
[  870.017391][T15682]  le_conn_complete_evt+0xf39/0x1500
[  870.017438][T15682]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  870.017469][T15682]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  870.017507][T15682]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  870.017535][T15682]  ? skb_pull_data+0xfb/0x200
[  870.017587][T15682]  hci_le_enh_conn_complete_evt+0x189/0x470
[  870.017610][T15682]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  870.017634][T15682]  hci_event_packet+0x78f/0x1200
[  870.017654][T15682]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  870.017675][T15682]  ? __pfx_hci_event_packet+0x10/0x10
[  870.017698][T15682]  ? kcov_remote_start+0x4d3/0x7f0
[  870.017715][T15682]  ? local_clock_noinstr+0xe0/0xe0
[  870.017736][T15682]  ? hci_send_to_monitor+0xe2/0x570
[  870.017761][T15682]  hci_rx_work+0x46a/0xe80
[  870.017803][T15682]  ? process_scheduled_works+0x9ef/0x17b0
[  870.017825][T15682]  process_scheduled_works+0xae1/0x17b0
[  870.017868][T15682]  ? __pfx_process_scheduled_works+0x10/0x10
[  870.017902][T15682]  worker_thread+0x8a0/0xda0
[  870.017938][T15682]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  870.017962][T15682]  ? __kthread_parkme+0x7b/0x200
[  870.017990][T15682]  kthread+0x711/0x8a0
[  870.018017][T15682]  ? __pfx_worker_thread+0x10/0x10
[  870.018036][T15682]  ? __pfx_kthread+0x10/0x10
[  870.018062][T15682]  ? _raw_spin_unlock_irq+0x23/0x50
[  870.018080][T15682]  ? lockdep_hardirqs_on+0x9c/0x150
[  870.018098][T15682]  ? __pfx_kthread+0x10/0x10
[  870.018122][T15682]  ret_from_fork+0x4bc/0x870
[  870.018143][T15682]  ? __pfx_ret_from_fork+0x10/0x10
[  870.018168][T15682]  ? __switch_to_asm+0x39/0x70
[  870.018183][T15682]  ? __switch_to_asm+0x33/0x70
[  870.018198][T15682]  ? __pfx_kthread+0x10/0x10
[  870.018223][T15682]  ret_from_fork_asm+0x1a/0x30
[  870.018253][T15682]  </TASK>
[  870.019845][T15682] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  870.078665][ T5862] usb 3-1: GET_CAPABILITIES returned 0
[  870.081869][T15682] Bluetooth: hci2: failed to register connection device
[  870.104055][ T5862] usbtmc 3-1:16.0: can't read capabilities
[  870.112572][T11525] m920x_read = error: -19
[  870.339431][T11525] dvb-usb: error while querying for an remote control event.
[  870.350631][ T5862] usb 3-1: USB disconnect, device number 90
[  870.453982][T11525] m920x_read = error: -19
[  870.463739][T11525] dvb-usb: error while querying for an remote control event.
[  870.576122][T11525] m920x_read = error: -19
[  870.580557][T11525] dvb-usb: error while querying for an remote control event.
[  870.696259][T11524] m920x_read = error: -19
[  870.700687][T11524] dvb-usb: error while querying for an remote control event.
[  870.785567][T18897] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  870.792319][T18897] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  870.798883][T18897] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  870.805003][T18897] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  870.815984][T11525] m920x_read = error: -19
[  870.818928][T18897] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  870.820514][T11525] dvb-usb: error while querying for an remote control event.
[  870.827099][T18897] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  870.841777][T18897] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  870.851261][T18897] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  870.857440][T18897] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  870.864677][T18897] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  870.871648][T18897] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  870.879459][T18897] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  870.944010][T11524] m920x_read = error: -19
[  870.948629][T11524] dvb-usb: error while querying for an remote control event.
[  870.966856][T18921] tmpfs: Bad value for 'mpol'
[  871.055556][T18926] netlink: 'syz.4.3767': attribute type 4 has an invalid length.
[  871.074969][T11524] m920x_read = error: -19
[  871.079403][T11524] dvb-usb: error while querying for an remote control event.
[  871.124015][T11525] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  871.148353][T18926] loop9: detected capacity change from 0 to 7
[  871.156258][T18780] buffer_io_error: 54 callbacks suppressed
[  871.156293][T18780] Buffer I/O error on dev loop9, logical block 0, async page read
[  871.176795][T18780] Buffer I/O error on dev loop9, logical block 0, async page read
[  871.185160][T18780] Buffer I/O error on dev loop9, logical block 0, async page read
[  871.193213][T18780] Buffer I/O error on dev loop9, logical block 0, async page read
[  871.201301][T11520] m920x_read = error: -19
[  871.205799][T11520] dvb-usb: error while querying for an remote control event.
[  871.224626][T18780] Buffer I/O error on dev loop9, logical block 0, async page read
[  871.232666][T18780] Buffer I/O error on dev loop9, logical block 0, async page read
[  871.241057][T18780] Buffer I/O error on dev loop9, logical block 0, async page read
[  871.249948][T18780] ldm_validate_partition_table(): Disk read failed.
[  871.259355][T18780] Buffer I/O error on dev loop9, logical block 0, async page read
[  871.267717][T18780] Buffer I/O error on dev loop9, logical block 0, async page read
[  871.276002][T18780] Buffer I/O error on dev loop9, logical block 0, async page read
[  871.284336][T18780] Dev loop9: unable to read RDB block 0
[  871.290229][T18780]  loop9: unable to read partition table
[  871.296342][T11525] usb 3-1: Using ep0 maxpacket: 16
[  871.303547][T18780] loop9: partition table beyond EOD, truncated
[  871.310784][T11525] usb 3-1: config 8 has an invalid interface number: 206 but max is 0
[  871.322806][T18926] ldm_validate_partition_table(): Disk read failed.
[  871.337919][T18926] Dev loop9: unable to read RDB block 0
[  871.343598][T11525] usb 3-1: config 8 has no interface number 0
[  871.351709][T11520] m920x_read = error: -19
[  871.359010][T11520] dvb-usb: error while querying for an remote control event.
[  871.368866][T18926]  loop9: unable to read partition table
[  871.374981][T11525] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  871.378904][T18926] loop9: partition table beyond EOD, truncated
[  871.387553][T11525] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  871.393313][T18926] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[  871.393313][T18926] 
) failed (rc=-5)
[  871.404570][T11525] usb 3-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  871.404606][T11525] usb 3-1: config 8 interface 206 has no altsetting 0
[  871.407633][T11525] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  871.443917][ T5862] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  871.452726][T11525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.466265][T11525] usb 3-1: Product: syz
[  871.470454][T11525] usb 3-1: Manufacturer: syz
[  871.475854][T11525] usb 3-1: SerialNumber: syz
[  871.494014][T11520] m920x_read = error: -19
[  871.498441][T11520] dvb-usb: error while querying for an remote control event.
[  871.606629][ T5862] usb 5-1: Using ep0 maxpacket: 32
[  871.614207][T11520] m920x_read = error: -19
[  871.618598][T11520] dvb-usb: error while querying for an remote control event.
[  871.619501][T18926] netlink: 'syz.4.3767': attribute type 4 has an invalid length.
[  871.744087][T11520] m920x_read = error: -19
[  871.748535][T11520] dvb-usb: error while querying for an remote control event.
[  871.864866][T11520] m920x_read = error: -19
[  871.872511][T11520] dvb-usb: error while querying for an remote control event.
[  871.984376][T11520] m920x_read = error: -19
[  871.988806][T11520] dvb-usb: error while querying for an remote control event.
[  872.044223][ T5872] Bluetooth: hci1: command 0x0405 tx timeout
[  872.105062][T11520] m920x_read = error: -19
[  872.109494][T11520] dvb-usb: error while querying for an remote control event.
[  872.223953][T11520] m920x_read = error: -19
[  872.228541][T11520] dvb-usb: error while querying for an remote control event.
[  872.345547][T11520] m920x_read = error: -19
[  872.350003][T11520] dvb-usb: error while querying for an remote control event.
[  872.464153][T11520] m920x_read = error: -19
[  872.468844][T11520] dvb-usb: error while querying for an remote control event.
[  872.539104][T18951] __nla_validate_parse: 28 callbacks suppressed
[  872.539126][T18951] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3776'.
[  872.554719][T18951] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3776'.
[  872.584132][T11520] m920x_read = error: -19
[  872.588778][T11520] dvb-usb: error while querying for an remote control event.
[  872.706597][T11520] m920x_read = error: -19
[  872.711425][T11520] dvb-usb: error while querying for an remote control event.
[  872.834188][T11520] m920x_read = error: -19
[  872.839070][T11520] dvb-usb: error while querying for an remote control event.
[  872.847016][T15682] Bluetooth: hci5: command 0x0406 tx timeout
[  872.853450][ T5872] Bluetooth: hci7: command 0x0c1a tx timeout
[  872.859742][T15682] Bluetooth: hci4: command 0x0c1a tx timeout
[  872.923977][T18953] Bluetooth: hci2: command 0x0406 tx timeout
[  872.974165][T11520] m920x_read = error: -19
[  872.978638][T11520] dvb-usb: error while querying for an remote control event.
[  873.079014][T18960] overlayfs: failed to clone lowerpath
[  873.094103][T11520] m920x_read = error: -19
[  873.099233][T11520] dvb-usb: error while querying for an remote control event.
[  873.214779][T11520] m920x_read = error: -19
[  873.219282][T11520] dvb-usb: error while querying for an remote control event.
[  873.354018][T11524] m920x_read = error: -19
[  873.359492][T11524] dvb-usb: error while querying for an remote control event.
[  873.473982][T11524] m920x_read = error: -19
[  873.478430][T11524] dvb-usb: error while querying for an remote control event.
[  873.593887][T11524] m920x_read = error: -19
[  873.599224][T11524] dvb-usb: error while querying for an remote control event.
[  873.661446][T11525] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected
[  873.690237][T11525] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  873.715206][T11524] m920x_read = error: -19
[  873.720815][T11524] dvb-usb: error while querying for an remote control event.
[  873.731113][T11525] usb 3-1: USB disconnect, device number 91
[  873.752658][T11525] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  873.764238][T11525] garmin_gps 3-1:8.206: device disconnected
[  873.834906][T18976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3785'.
[  873.844347][T11524] m920x_read = error: -19
[  873.848953][T11524] dvb-usb: error while querying for an remote control event.
[  873.964631][T11525] m920x_read = error: -19
[  873.970165][T11525] dvb-usb: error while querying for an remote control event.
[  874.018453][ T5862] usb 5-1: unable to get BOS descriptor or descriptor too short
[  874.037061][ T5862] usb 5-1: unable to read config index 0 descriptor/start: -71
[  874.054955][ T5862] usb 5-1: can't read configurations, error -71
[  874.103909][T11525] m920x_read = error: -19
[  874.108704][T11525] dvb-usb: error while querying for an remote control event.
[  874.224599][T11525] m920x_read = error: -19
[  874.229003][T11525] dvb-usb: error while querying for an remote control event.
[  874.354032][T11525] m920x_read = error: -19
[  874.358436][T11525] dvb-usb: error while querying for an remote control event.
[  874.473901][T11525] m920x_read = error: -19
[  874.482573][T11525] dvb-usb: error while querying for an remote control event.
[  874.605051][T11525] m920x_read = error: -19
[  874.612768][T11525] dvb-usb: error while querying for an remote control event.
[  874.738124][T11524] m920x_read = error: -19
[  874.742555][T11524] dvb-usb: error while querying for an remote control event.
[  874.903905][T11524] m920x_read = error: -19
[  874.908332][T11524] dvb-usb: error while querying for an remote control event.
[  874.924313][T11525] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  874.932860][T18953] Bluetooth: hci7: command 0x0c1a tx timeout
[  874.932889][T10643] Bluetooth: hci5: command 0x0406 tx timeout
[  875.004510][T10643] Bluetooth: hci2: command 0x0406 tx timeout
[  875.023912][T11524] m920x_read = error: -19
[  875.028376][T11524] dvb-usb: error while querying for an remote control event.
[  875.093859][T11525] usb 3-1: Using ep0 maxpacket: 8
[  875.115319][T11525] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  875.124638][T11525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.139223][T11525] usb 3-1: config 0 descriptor??
[  875.144499][T11524] m920x_read = error: -19
[  875.148881][T11524] dvb-usb: error while querying for an remote control event.
[  875.252218][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  875.258734][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  875.277036][T11524] m920x_read = error: -19
[  875.281511][T11524] dvb-usb: error while querying for an remote control event.
[  875.393936][T11524] m920x_read = error: -19
[  875.398423][T11524] dvb-usb: error while querying for an remote control event.
[  875.415482][T11525] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  875.488600][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  875.488620][   T30] audit: type=1326 audit(1759401615.912:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19021 comm="syz.8.3801" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32f938eec9 code=0x0
[  875.518607][T11524] m920x_read = error: -19
[  875.523038][T11524] dvb-usb: error while querying for an remote control event.
[  875.543803][T11532] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  875.621097][   T30] audit: type=1800 audit(1759401616.042:1993): pid=19026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3802" name="nullb0" dev="tmpfs" ino=2856 res=0 errno=0
[  875.642719][T11524] m920x_read = error: -19
[  875.648273][T11524] dvb-usb: error while querying for an remote control event.
[  875.730247][T11532] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99
[  875.739451][T11532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.751767][T11532] usb 5-1: Product: syz
[  875.759250][T11532] usb 5-1: Manufacturer: syz
[  875.763913][T11520] m920x_read = error: -19
[  875.763966][T11520] dvb-usb: error while querying for an remote control event.
[  875.776528][T11532] usb 5-1: SerialNumber: syz
[  875.787771][T11532] usb 5-1: config 0 descriptor??
[  875.860307][T18997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  875.874534][T11520] m920x_read = error: -19
[  875.878944][T11520] dvb-usb: error while querying for an remote control event.
[  875.900934][T18997] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  876.002155][T11532] usb 5-1: USB disconnect, device number 71
[  876.013897][T11520] m920x_read = error: -19
[  876.018621][T11520] dvb-usb: error while querying for an remote control event.
[  876.134118][T11520] m920x_read = error: -19
[  876.138790][T11520] dvb-usb: error while querying for an remote control event.
[  876.254694][T11520] m920x_read = error: -19
[  876.260164][T11520] dvb-usb: error while querying for an remote control event.
[  876.321607][T18997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  876.340125][T18997] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  876.374192][T11520] m920x_read = error: -19
[  876.378597][T11520] dvb-usb: error while querying for an remote control event.
[  876.399464][T19035] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3804'.
[  876.408732][T19035] netlink: 13 bytes leftover after parsing attributes in process `syz.8.3804'.
[  876.422294][T19037] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3804'.
[  876.431717][T19037] netlink: 13 bytes leftover after parsing attributes in process `syz.8.3804'.
[  876.456749][T11525] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  876.479962][T11525] asix 3-1:0.0: probe with driver asix failed with error -71
[  876.491779][T11525] usb 3-1: USB disconnect, device number 92
[  876.501396][T11524] m920x_read = error: -19
[  876.507296][T11524] dvb-usb: error while querying for an remote control event.
[  876.576873][T19040] ceph: Path missing in source
[  876.623933][T11524] m920x_read = error: -19
[  876.628341][T11524] dvb-usb: error while querying for an remote control event.
[  876.775253][T11520] m920x_read = error: -19
[  876.779658][T11520] dvb-usb: error while querying for an remote control event.
[  876.847415][T18179] wlan1: Trigger new scan to find an IBSS to join
[  876.893884][T11520] m920x_read = error: -19
[  876.898520][T11520] dvb-usb: error while querying for an remote control event.
[  876.989153][T19068] CUSE: zero length info key specified
[  877.004754][T10643] Bluetooth: hci7: command 0x0c1a tx timeout
[  877.014421][T11525] m920x_read = error: -19
[  877.025153][T11525] dvb-usb: error while querying for an remote control event.
[  877.094079][T10643] Bluetooth: hci2: command 0x0406 tx timeout
[  877.153919][T11525] m920x_read = error: -19
[  877.158357][T11525] dvb-usb: error while querying for an remote control event.
[  877.253987][T11520] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  877.273886][T11525] m920x_read = error: -19
[  877.278247][T11525] dvb-usb: error while querying for an remote control event.
[  877.383972][ T5862] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  877.394735][T11525] m920x_read = error: -19
[  877.399116][T11525] dvb-usb: error while querying for an remote control event.
[  877.412456][T11520] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  877.421984][T11520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.431955][T11520] usb 3-1: Product: syz
[  877.438278][T11520] usb 3-1: Manufacturer: syz
[  877.443081][T11520] usb 3-1: SerialNumber: syz
[  877.513879][T11524] m920x_read = error: -19
[  877.518343][T11524] dvb-usb: error while querying for an remote control event.
[  877.537514][ T5862] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  877.556641][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  877.584193][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  877.596599][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  877.623817][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  877.635534][T11524] m920x_read = error: -19
[  877.637620][ T5862] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  877.650793][T11524] dvb-usb: error while querying for an remote control event.
[  877.651714][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.682118][ T5862] usb 5-1: config 0 descriptor??
[  877.698443][T19073] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  877.731266][T19078] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3817'.
[  877.778951][T11524] m920x_read = error: -19
[  877.792657][T11524] dvb-usb: error while querying for an remote control event.
[  877.922047][T10643] Bluetooth: hci2: unexpected event for opcode 0x0c57
[  877.938156][T11524] m920x_read = error: -19
[  877.942579][T11524] dvb-usb: error while querying for an remote control event.
[  878.065482][T19085] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475
[  878.083383][T19085] PKCS7: Only support pkcs7_signedData type
[  878.089721][ T5912] m920x_read = error: -19
[  878.095004][ T5912] dvb-usb: error while querying for an remote control event.
[  878.147798][ T5862] plantronics 0003:047F:FFFF.006A: reserved main item tag 0xd
[  878.179443][ T5862] plantronics 0003:047F:FFFF.006A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  878.229468][ T5912] m920x_read = error: -19
[  878.237034][ T5912] dvb-usb: error while querying for an remote control event.
[  878.361558][ T5912] usb 5-1: USB disconnect, device number 72
[  878.371111][T11524] m920x_read = error: -19
[  878.377084][T11524] dvb-usb: error while querying for an remote control event.
[  878.467852][T19070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  878.478255][T19070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  878.494720][T11524] m920x_read = error: -19
[  878.499276][T11524] dvb-usb: error while querying for an remote control event.
[  878.614013][ T5912] m920x_read = error: -19
[  878.619572][ T5912] dvb-usb: error while querying for an remote control event.
[  878.733898][ T5912] m920x_read = error: -19
[  878.740808][ T5912] dvb-usb: error while querying for an remote control event.
[  878.864351][ T5912] m920x_read = error: -19
[  878.868890][ T5912] dvb-usb: error while querying for an remote control event.
[  879.004745][T11524] m920x_read = error: -19
[  879.009357][T11524] dvb-usb: error while querying for an remote control event.
[  879.153826][T11524] m920x_read = error: -19
[  879.158263][T11524] dvb-usb: error while querying for an remote control event.
[  879.237096][T11534] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  879.283837][T11524] m920x_read = error: -19
[  879.292030][T11524] dvb-usb: error while querying for an remote control event.
[  879.405865][T11534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  879.416307][T11534] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  879.423876][T11524] m920x_read = error: -19
[  879.426553][T11534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  879.430660][T11524] dvb-usb: error while querying for an remote control event.
[  879.441149][T11534] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  879.493538][T11534] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  879.504022][T11534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.516383][T11534] usb 5-1: config 0 descriptor??
[  879.560650][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3831'.
[  879.578709][T11524] m920x_read = error: -19
[  879.583348][T11524] dvb-usb: error while querying for an remote control event.
[  879.694353][T11524] m920x_read = error: -19
[  879.699058][T11524] dvb-usb: error while querying for an remote control event.
[  879.725719][T19101] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  879.732967][T19101] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  879.752869][T19101] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  879.769668][T19101] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  879.789374][T19101] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  879.790261][T11534] hdpvr 5-1:0.0: firmware version 0x0 dated 
[  879.813839][ T5912] m920x_read = error: -19
[  879.818394][T11534] hdpvr 5-1:0.0: untested firmware, the driver might not work.
[  879.818466][ T5912] dvb-usb: error while querying for an remote control event.
[  879.863195][T19101] comedi comedi3: 8255: I/O port conflict (0x12,4)
[  879.870419][T19101] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  879.877464][T19101] comedi comedi3: 8255: I/O port conflict (0x81,4)
[  879.884929][   T12] wlan1: Trigger new scan to find an IBSS to join
[  879.891549][T19101] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  879.906573][T19101] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  879.913391][T19101] comedi comedi3: 8255: I/O port conflict (0xc4,4)
[  879.931960][T19101] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  879.974022][T19101] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  879.980780][T11520] net_ratelimit: 37 callbacks suppressed
[  879.980804][T11520] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[  880.035162][ T5912] m920x_read = error: -19
[  880.064793][ T5912] dvb-usb: error while querying for an remote control event.
[  880.074951][T11520] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  880.095430][T11520] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  880.125805][T11520] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  880.165636][T11520] usb 3-1: USB disconnect, device number 93
[  880.194094][T11525] m920x_read = error: -19
[  880.198498][T11525] dvb-usb: error while querying for an remote control event.
[  880.306565][T11534] hdpvr 5-1:0.0: Could not setup controls
[  880.330504][T11534] hdpvr 5-1:0.0: registering videodev failed
[  880.336616][T11525] m920x_read = error: -19
[  880.336644][T11525] dvb-usb: error while querying for an remote control event.
[  880.389754][T11534] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71
[  880.416559][T11534] usb 5-1: USB disconnect, device number 73
[  880.444192][T11520] m920x_read = error: -19
[  880.448592][T11520] dvb-usb: error while querying for an remote control event.
[  880.564190][T11520] m920x_read = error: -19
[  880.568679][T11520] dvb-usb: error while querying for an remote control event.
[  880.617790][T19137] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  880.634851][T19138] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  880.646168][T19137] overlayfs: missing 'lowerdir'
[  880.685835][T11520] m920x_read = error: -19
[  880.693117][T11520] dvb-usb: error while querying for an remote control event.
[  880.833910][T11520] m920x_read = error: -19
[  880.841387][T11520] dvb-usb: error while querying for an remote control event.
[  880.890746][T19141] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3840'.
[  880.901159][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3840'.
[  880.983826][T11520] m920x_read = error: -19
[  880.988254][T11520] dvb-usb: error while querying for an remote control event.
[  881.114145][T11517] m920x_read = error: -19
[  881.118598][T11517] dvb-usb: error while querying for an remote control event.
[  881.213829][T11525] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  881.233914][T11520] m920x_read = error: -19
[  881.243413][T11520] dvb-usb: error while querying for an remote control event.
[  881.364313][T11520] m920x_read = error: -19
[  881.368898][T11520] dvb-usb: error while querying for an remote control event.
[  881.383787][T11525] usb 5-1: Using ep0 maxpacket: 8
[  881.391983][T11525] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  881.401685][T11525] usb 5-1: config 179 has no interface number 0
[  881.408947][T11525] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  881.420493][T11525] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  881.431930][T11525] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  881.443173][T11525] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  881.454818][T11525] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  881.468193][T11525] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  881.477357][T11525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.486695][T11520] m920x_read = error: -19
[  881.491068][T11520] dvb-usb: error while querying for an remote control event.
[  881.504844][T19144] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  881.603834][T11525] m920x_read = error: -19
[  881.608605][T11525] dvb-usb: error while querying for an remote control event.
[  881.724474][T11525] m920x_read = error: -19
[  881.728951][T11525] dvb-usb: error while querying for an remote control event.
[  881.843979][T11525] m920x_read = error: -19
[  881.848671][T11525] dvb-usb: error while querying for an remote control event.
[  881.964064][T11525] m920x_read = error: -19
[  881.996511][T11525] dvb-usb: error while querying for an remote control event.
[  882.017208][T19144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  882.036869][T19144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  882.073180][T19144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  882.114205][T19144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  882.134372][T11525] m920x_read = error: -19
[  882.138965][T11525] dvb-usb: error while querying for an remote control event.
[  882.179768][T11534] usb 5-1: USB disconnect, device number 74
[  882.179791][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  882.194437][    C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending?
[  882.263799][T11525] m920x_read = error: -19
[  882.268301][T11525] dvb-usb: error while querying for an remote control event.
[  882.355585][T19193] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3855'.
[  882.365583][T19193] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3855'.
[  882.377422][T19193] netlink: 'syz.2.3855': attribute type 5 has an invalid length.
[  882.384341][T11520] m920x_read = error: -19
[  882.385365][T19193] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3855'.
[  882.404097][T11520] dvb-usb: error while querying for an remote control event.
[  882.493011][T19198] netlink: 'syz.8.3857': attribute type 3 has an invalid length.
[  882.495582][T19199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3858'.
[  882.524383][T11520] m920x_read = error: -19
[  882.528786][T11520] dvb-usb: error while querying for an remote control event.
[  882.643777][T11520] m920x_read = error: -19
[  882.648571][T11520] dvb-usb: error while querying for an remote control event.
[  882.663134][T19204] netlink: 'syz.0.3859': attribute type 8 has an invalid length.
[  882.766766][T11517] m920x_read = error: -19
[  882.771250][T11517] dvb-usb: error while querying for an remote control event.
[  882.844104][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  882.883769][T11520] m920x_read = error: -19
[  882.888206][T11520] dvb-usb: error while querying for an remote control event.
[  883.003776][T11520] m920x_read = error: -19
[  883.008211][T11520] dvb-usb: error while querying for an remote control event.
[  883.043767][T11534] usb 3-1: new full-speed USB device number 94 using dummy_hcd
[  883.123795][T11520] m920x_read = error: -19
[  883.128370][T11520] dvb-usb: error while querying for an remote control event.
[  883.205211][T11534] usb 3-1: config 9 has an invalid interface number: 252 but max is 0
[  883.214281][T11534] usb 3-1: config 9 has no interface number 0
[  883.221204][T11534] usb 3-1: config 9 interface 252 has no altsetting 0
[  883.234281][T11534] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice=dd.7c
[  883.244158][T11517] m920x_read = error: -19
[  883.244197][T11534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.248534][T11517] dvb-usb: error while querying for an remote control event.
[  883.266318][T11534] usb 3-1: Product: syz
[  883.270648][T11534] usb 3-1: Manufacturer: syz
[  883.275814][T11534] usb 3-1: SerialNumber: syz
[  883.385749][T11517] m920x_read = error: -19
[  883.390282][T11517] dvb-usb: error while querying for an remote control event.
[  883.433766][T11532] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  883.506720][T11517] m920x_read = error: -19
[  883.511122][T11517] dvb-usb: error while querying for an remote control event.
[  883.534582][T11534] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.252/input/input129
[  883.551274][ T5219] bcm5974 3-1:9.252: could not read from device
[  883.566340][ T5219] bcm5974 3-1:9.252: could not read from device
[  883.580617][T11534] usb 3-1: USB disconnect, device number 94
[  883.587684][ T5219] bcm5974 3-1:9.252: could not read from device
[  883.605681][T11532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  883.621967][T11532] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  883.638034][T11517] m920x_read = error: -19
[  883.645712][T11517] dvb-usb: error while querying for an remote control event.
[  883.652619][T11532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  883.676129][T11532] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  883.695873][T11532] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  883.712179][T11532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.721057][T11532] usb 5-1: Product: syz
[  883.725731][T11532] usb 5-1: Manufacturer: syz
[  883.730390][T11532] usb 5-1: SerialNumber: syz
[  883.740417][T11532] usb 5-1: config 0 descriptor??
[  883.750220][T11532] ums-isd200 5-1:0.0: USB Mass Storage device detected
[  883.774847][T11517] m920x_read = error: -19
[  883.779245][T11517] dvb-usb: error while querying for an remote control event.
[  883.893840][T11517] m920x_read = error: -19
[  883.898253][T11517] dvb-usb: error while querying for an remote control event.
[  884.013827][T11517] m920x_read = error: -19
[  884.018305][T11517] dvb-usb: error while querying for an remote control event.
[  884.129699][T19248] tmpfs: Unknown parameter 'quota	'
[  884.134279][T11517] m920x_read = error: -19
[  884.143045][T11517] dvb-usb: error while querying for an remote control event.
[  884.164001][T11532] scsi host1: usb-storage 5-1:0.0
[  884.264137][T19255] netdevsim netdevsim2 ªªªªªª: renamed from netdevsim0 (while UP)
[  884.273742][T11517] m920x_read = error: -19
[  884.278137][T11517] dvb-usb: error while querying for an remote control event.
[  884.367882][T11532] usb 5-1: USB disconnect, device number 75
[  884.403804][T11517] m920x_read = error: -19
[  884.410175][T11517] dvb-usb: error while querying for an remote control event.
[  884.552074][ T5912] m920x_read = error: -19
[  884.569618][ T5912] dvb-usb: error while querying for an remote control event.
[  884.694134][ T5912] m920x_read = error: -19
[  884.698553][ T5912] dvb-usb: error while querying for an remote control event.
[  884.823735][ T5912] m920x_read = error: -19
[  884.828224][ T5912] dvb-usb: error while querying for an remote control event.
[  884.956654][ T5912] m920x_read = error: -19
[  884.967293][ T5912] dvb-usb: error while querying for an remote control event.
[  885.103850][ T5912] m920x_read = error: -19
[  885.119359][ T5912] dvb-usb: error while querying for an remote control event.
[  885.244418][T11517] m920x_read = error: -19
[  885.248818][T11517] dvb-usb: error while querying for an remote control event.
[  885.713768][T11532] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  885.894040][T11532] usb 3-1: Using ep0 maxpacket: 16
[  885.929978][T11532] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  885.967202][T11532] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  886.013096][T11532] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  886.056412][T11532] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  886.086172][T11532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.131900][T11532] usb 3-1: Product: syz
[  886.159751][T11532] usb 3-1: Manufacturer: syz
[  886.169709][T11517] m920x_read = error: -19
[  886.173647][T11532] usb 3-1: SerialNumber: syz
[  886.179239][T11517] dvb-usb: error while querying for an remote control event.
[  886.279078][T19283] wg0 speed is unknown, defaulting to 1000
[  886.314087][ T5912] m920x_read = error: -19
[  886.318554][ T5912] dvb-usb: error while querying for an remote control event.
[  886.458098][ T5912] m920x_read = error: -19
[  886.462541][ T5912] dvb-usb: error while querying for an remote control event.
[  886.603811][T11517] m920x_read = error: -19
[  886.608299][T11517] dvb-usb: error while querying for an remote control event.
[  886.658886][T11532] usb 3-1: 0:2 : does not exist
[  886.733837][T11517] m920x_read = error: -19
[  886.738237][T11517] dvb-usb: error while querying for an remote control event.
[  886.813718][T11520] usb 5-1: new full-speed USB device number 76 using dummy_hcd
[  886.859881][T19290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  886.868504][T11517] m920x_read = error: -19
[  886.869119][T19290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  886.872907][T11517] dvb-usb: error while querying for an remote control event.
[  886.975357][T11520] usb 5-1: config 1 has an invalid interface number: 132 but max is 0
[  886.984087][T11520] usb 5-1: config 1 has no interface number 0
[  886.990222][T11520] usb 5-1: config 1 interface 132 has no altsetting 0
[  886.997257][T11517] m920x_read = error: -19
[  887.001632][T11517] dvb-usb: error while querying for an remote control event.
[  887.017722][T11520] usb 5-1: New USB device found, idVendor=0c45, idProduct=6248, bcdDevice=3d.34
[  887.026870][T11520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.035994][T11520] usb 5-1: Product: syz
[  887.040191][T11520] usb 5-1: Manufacturer: syz
[  887.044871][T11520] usb 5-1: SerialNumber: syz
[  887.117606][T11517] m920x_read = error: -19
[  887.122045][T11517] dvb-usb: error while querying for an remote control event.
[  887.242742][T11517] m920x_read = error: -19
[  887.252516][T11517] dvb-usb: error while querying for an remote control event.
[  887.267382][T11520] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6248
[  887.286097][T11520] gspca_sn9c20x: Write register 1000 failed -71
[  887.299783][T11520] gspca_sn9c20x: Device initialization failed
[  887.305042][T19290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  887.308010][T11520] gspca_sn9c20x 5-1:1.132: probe with driver gspca_sn9c20x failed with error -71
[  887.327745][T19290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  887.344712][T11520] usb 5-1: USB disconnect, device number 76
[  887.382045][T11532] usb 3-1: USB disconnect, device number 95
[  887.389594][ T5912] m920x_read = error: -19
[  887.397057][ T5912] dvb-usb: error while querying for an remote control event.
[  887.533798][T11520] m920x_read = error: -19
[  887.538222][T11520] dvb-usb: error while querying for an remote control event.
[  887.663864][T11520] m920x_read = error: -19
[  887.668460][T11520] dvb-usb: error while querying for an remote control event.
[  887.793529][T11520] m920x_read = error: -19
[  887.804077][T11520] dvb-usb: error while querying for an remote control event.
[  887.857180][   T30] audit: type=1400 audit(1759401628.282:1994): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=5DB3145C40 pid=19326 comm="syz.4.3899"
[  887.877851][T19327] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3899'.
[  887.897119][   T30] audit: type=1326 audit(1759401628.322:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19326 comm="syz.4.3899" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed8098eec9 code=0x0
[  887.944579][T11520] m920x_read = error: -19
[  887.954966][   T30] audit: type=1326 audit(1759401628.372:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19326 comm="syz.4.3899" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed8098eec9 code=0x0
[  887.967417][T11520] dvb-usb: error while querying for an remote control event.
[  888.123818][ T5912] m920x_read = error: -19
[  888.128437][ T5912] dvb-usb: error while querying for an remote control event.
[  888.151158][T19334] ptm ptm9: ldisc open failed (-12), clearing slot 9
[  888.258062][ T5912] m920x_read = error: -19
[  888.262487][ T5912] dvb-usb: error while querying for an remote control event.
[  888.374995][T11520] m920x_read = error: -19
[  888.379398][T11520] dvb-usb: error while querying for an remote control event.
[  888.503760][T11517] m920x_read = error: -19
[  888.508181][T11517] dvb-usb: error while querying for an remote control event.
[  888.633717][T11517] m920x_read = error: -19
[  888.638373][T11517] dvb-usb: error while querying for an remote control event.
[  888.774080][T11517] m920x_read = error: -19
[  888.778469][T11517] dvb-usb: error while querying for an remote control event.
[  888.793663][T11532] usb 3-1: new full-speed USB device number 96 using dummy_hcd
[  888.893771][T11517] m920x_read = error: -19
[  888.898311][T11517] dvb-usb: error while querying for an remote control event.
[  888.945572][T11532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  888.958865][T11532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  888.968864][T11532] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  888.978076][T11532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  888.998170][T11532] usb 3-1: config 0 descriptor??
[  889.013998][T11517] m920x_read = error: -19
[  889.021901][T11517] dvb-usb: error while querying for an remote control event.
[  889.144638][T11520] m920x_read = error: -19
[  889.149050][T11520] dvb-usb: error while querying for an remote control event.
[  889.293754][T11517] m920x_read = error: -19
[  889.298165][T11517] dvb-usb: error while querying for an remote control event.
[  889.433709][T11520] m920x_read = error: -19
[  889.438117][T11520] dvb-usb: error while querying for an remote control event.
[  889.511007][T11532] hid (null): invalid report_size 30963
[  889.540573][T11532] hid-u2fzero 0003:10C4:8ACF.006B: invalid report_size 30963
[  889.559402][T11532] hid-u2fzero 0003:10C4:8ACF.006B: item 0 2 1 7 parsing failed
[  889.574026][T11520] m920x_read = error: -19
[  889.578510][T11520] dvb-usb: error while querying for an remote control event.
[  889.579838][T11532] hid-u2fzero 0003:10C4:8ACF.006B: probe with driver hid-u2fzero failed with error -22
[  889.713796][T11520] m920x_read = error: -19
[  889.718210][T11520] dvb-usb: error while querying for an remote control event.
[  889.863812][T11520] m920x_read = error: -19
[  889.871010][T11520] dvb-usb: error while querying for an remote control event.
[  890.006476][T11520] m920x_read = error: -19
[  890.011294][T11520] dvb-usb: error while querying for an remote control event.
[  890.145029][T11517] m920x_read = error: -19
[  890.153675][T11517] dvb-usb: error while querying for an remote control event.
[  890.273720][T11517] m920x_read = error: -19
[  890.278114][T11517] dvb-usb: error while querying for an remote control event.
[  890.414114][T11517] m920x_read = error: -19
[  890.418610][T11517] dvb-usb: error while querying for an remote control event.
[  890.545170][T11520] m920x_read = error: -19
[  890.553775][T11520] dvb-usb: error while querying for an remote control event.
[  890.563506][T19381] bond_slave_1: entered allmulticast mode
[  890.684312][T11517] m920x_read = error: -19
[  890.695627][T11517] dvb-usb: error while querying for an remote control event.
[  890.823721][T11517] m920x_read = error: -19
[  890.828255][T11517] dvb-usb: error while querying for an remote control event.
[  890.953929][T11517] m920x_read = error: -19
[  890.958324][T11517] dvb-usb: error while querying for an remote control event.
[  891.093699][T11517] m920x_read = error: -19
[  891.098188][T11517] dvb-usb: error while querying for an remote control event.
[  891.213939][T11520] m920x_read = error: -19
[  891.219934][T11520] dvb-usb: error while querying for an remote control event.
[  891.344210][T11520] m920x_read = error: -19
[  891.348612][T11520] dvb-usb: error while querying for an remote control event.
[  891.388192][T19401] netlink: 'syz.4.3920': attribute type 11 has an invalid length.
[  891.475887][T11520] m920x_read = error: -19
[  891.480290][T11520] dvb-usb: error while querying for an remote control event.
[  891.643954][T11520] m920x_read = error: -19
[  891.648375][T11520] dvb-usb: error while querying for an remote control event.
[  891.686389][T19408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  891.734043][T19408] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  891.773761][T11520] m920x_read = error: -19
[  891.778163][T11520] dvb-usb: error while querying for an remote control event.
[  891.914154][ T5912] m920x_read = error: -19
[  891.918560][ T5912] dvb-usb: error while querying for an remote control event.
[  892.053696][ T5912] m920x_read = error: -19
[  892.058192][ T5912] dvb-usb: error while querying for an remote control event.
[  892.122763][ T5912] usb 3-1: USB disconnect, device number 96
[  892.183720][T11517] m920x_read = error: -19
[  892.188125][T11517] dvb-usb: error while querying for an remote control event.
[  892.303940][T19422] random: crng reseeded on system resumption
[  892.333741][ T5912] m920x_read = error: -19
[  892.339148][ T5912] dvb-usb: error while querying for an remote control event.
[  892.464174][T11524] m920x_read = error: -19
[  892.468577][T11524] dvb-usb: error while querying for an remote control event.
[  892.583709][T11517] m920x_read = error: -19
[  892.588121][T11517] dvb-usb: error while querying for an remote control event.
[  892.623955][ T5912] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  892.703880][T11517] m920x_read = error: -19
[  892.708278][T11517] dvb-usb: error while querying for an remote control event.
[  892.795910][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  892.813217][ T5912] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  892.824139][T11524] m920x_read = error: -19
[  892.828517][T11524] dvb-usb: error while querying for an remote control event.
[  892.845510][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 1024
[  892.863603][ T5912] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024
[  892.893752][ T5912] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  892.902850][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.927290][ T5912] usb 5-1: config 0 descriptor??
[  892.933165][T19423] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  892.955940][T11524] m920x_read = error: -19
[  892.960396][T11524] dvb-usb: error while querying for an remote control event.
[  893.024870][T11517] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  893.074107][T11524] m920x_read = error: -19
[  893.078644][T11524] dvb-usb: error while querying for an remote control event.
[  893.153674][ T5912] hdpvr 5-1:0.0: unexpected answer of status request, len 0
[  893.162751][ T5912] hdpvr 5-1:0.0: device init failed
[  893.169178][ T5912] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12
[  893.193693][ T5912] m920x_read = error: -19
[  893.198086][ T5912] dvb-usb: error while querying for an remote control event.
[  893.207783][T11517] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  893.222552][T11517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  893.242203][T11517] usb 3-1: config 0 descriptor??
[  893.313701][ T5912] m920x_read = error: -19
[  893.318119][ T5912] dvb-usb: error while querying for an remote control event.
[  893.439695][ T5912] m920x_read = error: -19
[  893.446738][ T5912] dvb-usb: error while querying for an remote control event.
[  893.564453][T11524] m920x_read = error: -19
[  893.569991][T11524] dvb-usb: error while querying for an remote control event.
[  893.665854][T11517] usb 3-1: string descriptor 0 read error: -71
[  893.703743][T11524] m920x_read = error: -19
[  893.718411][T11524] dvb-usb: error while querying for an remote control event.
[  893.743901][T11517] usb 3-1: USB disconnect, device number 97
[  893.864213][T11524] m920x_read = error: -19
[  893.868983][T11524] dvb-usb: error while querying for an remote control event.
[  893.893476][   T30] audit: type=1326 audit(1759401634.312:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.0.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30418eec9 code=0x7ffc0000
[  893.917473][   T30] audit: type=1326 audit(1759401634.312:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.0.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30418eec9 code=0x7ffc0000
[  893.942644][   T30] audit: type=1326 audit(1759401634.322:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.0.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff30418eec9 code=0x7ffc0000
[  893.969251][   T30] audit: type=1326 audit(1759401634.362:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.0.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30418eec9 code=0x7ffc0000
[  893.992942][T11517] m920x_read = error: -19
[  893.997925][T11517] dvb-usb: error while querying for an remote control event.
[  894.006599][   T30] audit: type=1326 audit(1759401634.362:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.0.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30418eec9 code=0x7ffc0000
[  894.030403][   T30] audit: type=1326 audit(1759401634.392:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.0.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff30418eec9 code=0x7ffc0000
[  894.076004][   T30] audit: type=1326 audit(1759401634.392:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.0.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30418eec9 code=0x7ffc0000
[  894.098943][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  894.113749][T11517] m920x_read = error: -19
[  894.120994][T11517] dvb-usb: error while querying for an remote control event.
[  894.135870][   T30] audit: type=1326 audit(1759401634.392:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.0.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30418eec9 code=0x7ffc0000
[  894.175900][   T30] audit: type=1326 audit(1759401634.402:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.0.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff30418eec9 code=0x7ffc0000
[  894.204382][   T30] audit: type=1326 audit(1759401634.402:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.0.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff30418eec9 code=0x7ffc0000
[  894.273694][T11517] m920x_read = error: -19
[  894.278189][T11517] dvb-usb: error while querying for an remote control event.
[  894.404473][T11524] m920x_read = error: -19
[  894.408883][T11524] dvb-usb: error while querying for an remote control event.
[  894.469518][T19471] 9pnet_fd: Insufficient options for proto=fd
[  894.523924][T11520] m920x_read = error: -19
[  894.529703][T11520] dvb-usb: error while querying for an remote control event.
[  894.644260][T11517] m920x_read = error: -19
[  894.655191][T11517] dvb-usb: error while querying for an remote control event.
[  894.774039][T11517] m920x_read = error: -19
[  894.779567][T11517] dvb-usb: error while querying for an remote control event.
[  894.894072][T11517] m920x_read = error: -19
[  894.901854][T11517] dvb-usb: error while querying for an remote control event.
[  895.025044][T11517] m920x_read = error: -19
[  895.029598][T11517] dvb-usb: error while querying for an remote control event.
[  895.153758][T11517] m920x_read = error: -19
[  895.158241][T11517] dvb-usb: error while querying for an remote control event.
[  895.273728][T11517] m920x_read = error: -19
[  895.278190][T11517] dvb-usb: error while querying for an remote control event.
[  895.303048][T11517] usb 5-1: USB disconnect, device number 77
[  895.393783][ T5912] m920x_read = error: -19
[  895.401572][ T5912] dvb-usb: error while querying for an remote control event.
[  895.414034][T11520] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  895.534085][T11517] m920x_read = error: -19
[  895.538578][T11517] dvb-usb: error while querying for an remote control event.
[  895.577488][T11520] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  895.587924][T11520] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  895.597897][T11520] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  895.607154][T11520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  895.616200][T11520] usb 3-1: SerialNumber: syz
[  895.654263][T11517] m920x_read = error: -19
[  895.658647][T11517] dvb-usb: error while querying for an remote control event.
[  895.753710][T11534] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  895.773907][T11517] m920x_read = error: -19
[  895.778352][T11517] dvb-usb: error while querying for an remote control event.
[  895.891980][T11520] usb 3-1: 0:2 : does not exist
[  895.893657][T11534] usb 5-1: device descriptor read/64, error -71
[  895.900948][T11517] m920x_read = error: -19
[  895.912835][T11517] dvb-usb: error while querying for an remote control event.
[  895.930453][T11520] usb 3-1: USB disconnect, device number 98
[  895.955913][T18780] udevd[18780]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  896.033856][T11517] m920x_read = error: -19
[  896.038408][T11517] dvb-usb: error while querying for an remote control event.
[  896.125939][T19492] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  896.153975][T11534] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  896.154011][T11520] m920x_read = error: -19
[  896.166223][T11520] dvb-usb: error while querying for an remote control event.
[  896.257536][T19497] xt_l2tp: missing protocol rule (udp|l2tpip)
[  896.284032][T11520] m920x_read = error: -19
[  896.288477][T11520] dvb-usb: error while querying for an remote control event.
[  896.304874][T11534] usb 5-1: device descriptor read/64, error -71
[  896.413757][T11520] m920x_read = error: -19
[  896.414249][T11534] usb usb5-port1: attempt power cycle
[  896.432894][T11520] dvb-usb: error while querying for an remote control event.
[  896.543720][T11520] m920x_read = error: -19
[  896.548054][T19499] block nbd2: shutting down sockets
[  896.548242][T11520] dvb-usb: error while querying for an remote control event.
[  896.657755][T19501] dns_resolver: Unsupported server list version (0)
[  896.664722][T11520] m920x_read = error: -19
[  896.664751][T11520] dvb-usb: error while querying for an remote control event.
[  896.763646][T11534] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  896.774091][T11517] m920x_read = error: -19
[  896.778677][T11517] dvb-usb: error while querying for an remote control event.
[  896.794367][T11534] usb 5-1: device descriptor read/8, error -71
[  896.893787][T11517] m920x_read = error: -19
[  896.898240][T11517] dvb-usb: error while querying for an remote control event.
[  897.021350][T19515] netlink: 'syz.0.3962': attribute type 10 has an invalid length.
[  897.029490][T11517] m920x_read = error: -19
[  897.032319][T19515] bridge0: port 2(bridge_slave_1) entered disabled state
[  897.035268][T11517] dvb-usb: error while querying for an remote control event.
[  897.041511][T19515] bridge0: port 1(bridge_slave_0) entered disabled state
[  897.057310][T11534] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  897.095303][T11534] usb 5-1: device descriptor read/8, error -71
[  897.163759][T11517] m920x_read = error: -19
[  897.168196][T11517] dvb-usb: error while querying for an remote control event.
[  897.203702][T11538] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  897.211701][T11534] usb usb5-port1: unable to enumerate USB device
[  897.283892][T11520] m920x_read = error: -19
[  897.288377][T11520] dvb-usb: error while querying for an remote control event.
[  897.363614][T11538] usb 3-1: Using ep0 maxpacket: 8
[  897.370776][T11538] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  897.381263][T11538] usb 3-1: config 0 interface 0 has no altsetting 0
[  897.390668][T11538] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  897.399879][T11538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  897.404268][T11520] m920x_read = error: -19
[  897.408224][T11538] usb 3-1: Product: syz
[  897.415611][T11520] dvb-usb: error while querying for an remote control event.
[  897.417851][T11538] usb 3-1: Manufacturer: syz
[  897.428587][T11538] usb 3-1: SerialNumber: syz
[  897.436688][T11538] usb 3-1: config 0 descriptor??
[  897.446219][T11538] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found
[  897.534782][T11520] m920x_read = error: -19
[  897.539217][T11520] dvb-usb: error while querying for an remote control event.
[  897.653694][T11538] snd_usb_toneport 3-1:0.0: cannot get proper max packet size
[  897.653857][T11520] m920x_read = error: -19
[  897.662075][T11538] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected
[  897.676810][T11538] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  897.689538][T11520] dvb-usb: error while querying for an remote control event.
[  897.804112][T11520] m920x_read = error: -19
[  897.808611][T11520] dvb-usb: error while querying for an remote control event.
[  897.858615][T11538] usb 3-1: USB disconnect, device number 99
[  897.933805][T11520] m920x_read = error: -19
[  897.938357][T11520] dvb-usb: error while querying for an remote control event.
[  898.053774][T11520] m920x_read = error: -19
[  898.058166][T11520] dvb-usb: error while querying for an remote control event.
[  898.174472][T11520] m920x_read = error: -19
[  898.178878][T11520] dvb-usb: error while querying for an remote control event.
[  898.293730][T11520] m920x_read = error: -19
[  898.298135][T11520] dvb-usb: error while querying for an remote control event.
[  898.358535][T19525] batadv_slave_1: entered promiscuous mode
[  898.372238][T19524] batadv_slave_1: left promiscuous mode
[  898.413668][T11520] m920x_read = error: -19
[  898.419727][T11520] dvb-usb: error while querying for an remote control event.
[  898.463105][T19527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3968'.
[  898.543740][T11517] m920x_read = error: -19
[  898.548228][T11517] dvb-usb: error while querying for an remote control event.
[  898.673678][T11520] m920x_read = error: -19
[  898.678169][T11520] dvb-usb: error while querying for an remote control event.
[  898.713664][ T5912] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  898.793699][T11517] m920x_read = error: -19
[  898.798444][T11517] dvb-usb: error while querying for an remote control event.
[  898.863642][ T5912] usb 3-1: Using ep0 maxpacket: 16
[  898.870829][ T5912] usb 3-1: config 0 has an invalid interface number: 180 but max is 0
[  898.879220][ T5912] usb 3-1: config 0 has no interface number 0
[  898.887613][ T5912] usb 3-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72
[  898.897736][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.905824][ T5912] usb 3-1: Product: syz
[  898.910010][ T5912] usb 3-1: Manufacturer: syz
[  898.914787][T11517] m920x_read = error: -19
[  898.919179][T11517] dvb-usb: error while querying for an remote control event.
[  898.926797][ T5912] usb 3-1: SerialNumber: syz
[  898.934685][ T5912] usb 3-1: config 0 descriptor??
[  898.942475][ T5912] usb 3-1: bad CDC descriptors
[  899.033698][ T5912] m920x_read = error: -19
[  899.038130][ T5912] dvb-usb: error while querying for an remote control event.
[  899.150945][T11534] usb 3-1: USB disconnect, device number 100
[  899.153859][ T5912] m920x_read = error: -19
[  899.164543][ T5912] dvb-usb: error while querying for an remote control event.
[  899.283678][ T5912] m920x_read = error: -19
[  899.288175][ T5912] dvb-usb: error while querying for an remote control event.
[  899.403899][ T5912] m920x_read = error: -19
[  899.408313][ T5912] dvb-usb: error while querying for an remote control event.
[  899.524567][ T5912] m920x_read = error: -19
[  899.529981][ T5912] dvb-usb: error while querying for an remote control event.
[  899.654601][ T5912] m920x_read = error: -19
[  899.659002][ T5912] dvb-usb: error while querying for an remote control event.
[  899.776862][T11520] m920x_read = error: -19
[  899.781272][T11520] dvb-usb: error while querying for an remote control event.
[  899.914448][T11520] m920x_read = error: -19
[  899.920307][T11520] dvb-usb: error while querying for an remote control event.
[  899.955127][T19560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3978'.
[  900.054913][T11520] m920x_read = error: -19
[  900.063639][T11520] dvb-usb: error while querying for an remote control event.
[  900.183766][T11520] m920x_read = error: -19
[  900.188177][T11520] dvb-usb: error while querying for an remote control event.
[  900.272212][T19568] netlink: 37 bytes leftover after parsing attributes in process `syz.4.3981'.
[  900.304016][T11520] m920x_read = error: -19
[  900.308672][T11520] dvb-usb: error while querying for an remote control event.
[  900.330567][T19568] netlink: 'syz.4.3981': attribute type 39 has an invalid length.
[  900.428088][T11520] m920x_read = error: -19
[  900.432757][T11520] dvb-usb: error while querying for an remote control event.
[  900.536654][T19578] bridge0: entered promiscuous mode
[  900.542253][T19578] bridge0: entered allmulticast mode
[  900.559934][T19579] block nbd1: Unsupported socket: should be TCP or UNIX.
[  900.563718][ T5912] m920x_read = error: -19
[  900.581642][ T5912] dvb-usb: error while querying for an remote control event.
[  900.703882][ T5912] m920x_read = error: -19
[  900.708846][ T5912] dvb-usb: error while querying for an remote control event.
[  900.731586][T19587] netlink: 'syz.2.3989': attribute type 29 has an invalid length.
[  900.823738][ T5912] m920x_read = error: -19
[  900.828385][ T5912] dvb-usb: error while querying for an remote control event.
[  900.943667][T11520] m920x_read = error: -19
[  900.954047][T11520] dvb-usb: error while querying for an remote control event.
[  900.968016][T19593] netlink: 'syz.2.3992': attribute type 3 has an invalid length.
[  900.976039][T19593] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3992'.
[  901.037450][T19597] pimreg: entered allmulticast mode
[  901.045574][T19597] pimreg: left allmulticast mode
[  901.084187][T11520] m920x_read = error: -19
[  901.091140][T11520] dvb-usb: error while querying for an remote control event.
[  901.213746][T11520] m920x_read = error: -19
[  901.218479][T11520] dvb-usb: error while querying for an remote control event.
[  901.333689][T11520] m920x_read = error: -19
[  901.338088][T11520] dvb-usb: error while querying for an remote control event.
[  901.383688][T11538] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  901.453640][T11520] m920x_read = error: -19
[  901.458079][T11520] dvb-usb: error while querying for an remote control event.
[  901.570406][T11538] usb 3-1: Using ep0 maxpacket: 16
[  901.584221][T11520] m920x_read = error: -19
[  901.589340][ T5862] usb 1-1: USB disconnect, device number 126
[  901.598100][T11538] usb 3-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config
[  901.598868][T11520] dvb-usb: error while querying for an remote control event.
[  901.639771][T11538] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 18
[  901.670874][T11538] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  901.681905][T11538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  901.693596][T11538] usb 3-1: Product: syz
[  901.697810][T11538] usb 3-1: Manufacturer: syz
[  901.702512][T11538] usb 3-1: SerialNumber: syz
[  901.742819][T11538] r8152-cfgselector 3-1: Unknown version 0x0000
[  901.753779][T11538] r8152-cfgselector 3-1: config 0 descriptor??
[  901.754127][ T5912] m920x_read = error: -19
[  901.785105][ T5912] dvb-usb: error while querying for an remote control event.
[  901.914361][ T5912] m920x_read = error: -19
[  901.933600][ T5912] dvb-usb: error while querying for an remote control event.
[  902.040243][T18953] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  902.063670][T11520] m920x_read = error: -19
[  902.069104][T11520] dvb-usb: error while querying for an remote control event.
[  902.078071][T18953] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  902.088336][T18953] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  902.097669][T18953] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  902.107790][T18953] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  902.127758][T10643] 
[  902.130147][T10643] ======================================================
[  902.137245][T10643] WARNING: possible circular locking dependency detected
[  902.144280][T10643] syzkaller #0 Not tainted
[  902.148697][T10643] ------------------------------------------------------
[  902.155722][T10643] kworker/u9:1/10643 is trying to acquire lock:
[  902.161965][T10643] ffffffff8e645220 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x48/0x710
[  902.171876][T10643] 
[  902.171876][T10643] but task is already holding lock:
[  902.179245][T10643] ffffffff8fcc06e8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  902.189798][T10643] 
[  902.189798][T10643] which lock already depends on the new lock.
[  902.189798][T10643] 
[  902.200210][T10643] 
[  902.200210][T10643] the existing dependency chain (in reverse order) is:
[  902.209241][T10643] 
[  902.209241][T10643] -> #9 (uevent_sock_mutex){+.+.}-{4:4}:
[  902.217096][T10643]        lock_acquire+0x120/0x360
[  902.222139][T10643]        __mutex_lock+0x187/0x1350
[  902.227262][T10643]        kobject_uevent_net_broadcast+0x27e/0x560
[  902.233695][T10643]        kobject_uevent_env+0x55b/0x8c0
[  902.239258][T10643]        device_add+0x557/0xb50
[  902.244124][T10643]        device_create+0x25b/0x2f0
[  902.249247][T10643]        msr_device_create+0x33/0x50
[  902.254551][T10643]        cpuhp_invoke_callback+0x445/0x860
[  902.260375][T10643]        cpuhp_thread_fun+0x3f4/0x850
[  902.265765][T10643]        smpboot_thread_fn+0x542/0xa60
[  902.271237][T10643]        kthread+0x711/0x8a0
[  902.275863][T10643]        ret_from_fork+0x4bc/0x870
[  902.281078][T10643]        ret_from_fork_asm+0x1a/0x30
[  902.286371][T10643] 
[  902.286371][T10643] -> #8 (cpuhp_state-up){+.+.}-{0:0}:
[  902.293948][T10643]        lock_acquire+0x120/0x360
[  902.298990][T10643]        cpuhp_thread_fun+0x182/0x850
[  902.304376][T10643]        smpboot_thread_fn+0x542/0xa60
[  902.309858][T10643]        kthread+0x711/0x8a0
[  902.314463][T10643]        ret_from_fork+0x4bc/0x870
[  902.319583][T10643]        ret_from_fork_asm+0x1a/0x30
[  902.324879][T10643] 
[  902.324879][T10643] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  902.332626][T10643]        lock_acquire+0x120/0x360
[  902.338105][T10643]        cpus_read_lock+0x42/0x160
[  902.343236][T10643]        static_key_slow_inc+0x12/0x30
[  902.348716][T10643]        tcp_md5_do_add+0x21f/0x3a0
[  902.354107][T10643]        tcp_v4_parse_md5_keys+0x412/0x600
[  902.359937][T10643]        do_tcp_setsockopt+0x11dc/0x1f20
[  902.365672][T10643]        do_sock_setsockopt+0x17c/0x1b0
[  902.371236][T10643]        __x64_sys_setsockopt+0x13f/0x1b0
[  902.376975][T10643]        do_syscall_64+0xfa/0xfa0
[  902.382016][T10643]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  902.388444][T10643] 
[  902.388444][T10643] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}:
[  902.396105][T10643]        lock_acquire+0x120/0x360
[  902.401230][T10643]        lock_sock_nested+0x48/0x100
[  902.406905][T10643]        inet_shutdown+0x6a/0x390
[  902.411941][T10643]        nbd_mark_nsock_dead+0x2e9/0x560
[  902.417670][T10643]        sock_shutdown+0x15e/0x260
[  902.422838][T10643]        nbd_config_put+0x342/0x790
[  902.428049][T10643]        nbd_release+0xfe/0x140
[  902.432903][T10643]        bdev_release+0x536/0x650
[  902.437938][T10643]        blkdev_release+0x15/0x20
[  902.442971][T10643]        __fput+0x44c/0xa70
[  902.447506][T10643]        task_work_run+0x1d4/0x260
[  902.452627][T10643]        exit_to_user_mode_loop+0xe9/0x130
[  902.458439][T10643]        do_syscall_64+0x2bd/0xfa0
[  902.463561][T10643]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  902.469979][T10643] 
[  902.469979][T10643] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  902.477652][T10643]        lock_acquire+0x120/0x360
[  902.483034][T10643]        __mutex_lock+0x187/0x1350
[  902.488178][T10643]        nbd_queue_rq+0x257/0xf10
[  902.493227][T10643]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  902.499307][T10643]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  902.506176][T10643]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  902.512696][T10643]        blk_mq_run_hw_queue+0x348/0x4f0
[  902.518340][T10643]        blk_mq_dispatch_list+0xd0c/0xe00
[  902.524072][T10643]        blk_mq_flush_plug_list+0x469/0x550
[  902.530060][T10643]        __blk_flush_plug+0x3d3/0x4b0
[  902.535439][T10643]        __submit_bio+0x2d3/0x5a0
[  902.540479][T10643]        submit_bio_noacct_nocheck+0x2fb/0xa50
[  902.546639][T10643]        block_read_full_folio+0x599/0x830
[  902.552448][T10643]        filemap_read_folio+0x117/0x380
[  902.558011][T10643]        do_read_cache_folio+0x350/0x590
[  902.563645][T10643]        read_part_sector+0xb6/0x2b0
[  902.568933][T10643]        adfspart_check_ICS+0xa4/0xa50
[  902.574397][T10643]        bdev_disk_changed+0x75f/0x14b0
[  902.579949][T10643]        blkdev_get_whole+0x380/0x510
[  902.585331][T10643]        bdev_open+0x31e/0xd30
[  902.590102][T10643]        blkdev_open+0x457/0x600
[  902.595044][T10643]        do_dentry_open+0x953/0x13f0
[  902.600337][T10643]        vfs_open+0x3b/0x340
[  902.604932][T10643]        path_openat+0x2ee5/0x3830
[  902.610058][T10643]        do_filp_open+0x1fa/0x410
[  902.615086][T10643]        do_sys_openat2+0x121/0x1c0
[  902.620387][T10643]        __x64_sys_openat+0x138/0x170
[  902.625773][T10643]        do_syscall_64+0xfa/0xfa0
[  902.630811][T10643]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  902.637233][T10643] 
[  902.637233][T10643] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  902.644454][T10643]        lock_acquire+0x120/0x360
[  902.649491][T10643]        __mutex_lock+0x187/0x1350
[  902.654612][T10643]        nbd_queue_rq+0xc8/0xf10
[  902.659562][T10643]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  902.665637][T10643]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  902.672500][T10643]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  902.679017][T10643]        blk_mq_run_hw_queue+0x348/0x4f0
[  902.684660][T10643]        blk_mq_dispatch_list+0xd0c/0xe00
[  902.690393][T10643]        blk_mq_flush_plug_list+0x469/0x550
[  902.696299][T10643]        __blk_flush_plug+0x3d3/0x4b0
[  902.701685][T10643]        __submit_bio+0x2d3/0x5a0
[  902.706720][T10643]        submit_bio_noacct_nocheck+0x2fb/0xa50
[  902.712882][T10643]        block_read_full_folio+0x599/0x830
[  902.718694][T10643]        filemap_read_folio+0x117/0x380
[  902.724245][T10643]        do_read_cache_folio+0x350/0x590
[  902.729904][T10643]        read_part_sector+0xb6/0x2b0
[  902.735205][T10643]        adfspart_check_ICS+0xa4/0xa50
[  902.740674][T10643]        bdev_disk_changed+0x75f/0x14b0
[  902.746229][T10643]        blkdev_get_whole+0x380/0x510
[  902.751606][T10643]        bdev_open+0x31e/0xd30
[  902.756378][T10643]        blkdev_open+0x457/0x600
[  902.761330][T10643]        do_dentry_open+0x953/0x13f0
[  902.766626][T10643]        vfs_open+0x3b/0x340
[  902.771271][T10643]        path_openat+0x2ee5/0x3830
[  902.776755][T10643]        do_filp_open+0x1fa/0x410
[  902.781803][T10643]        do_sys_openat2+0x121/0x1c0
[  902.787030][T10643]        __x64_sys_openat+0x138/0x170
[  902.792423][T10643]        do_syscall_64+0xfa/0xfa0
[  902.797498][T10643]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  902.803924][T10643] 
[  902.803924][T10643] -> #3 (set->srcu){.+.+}-{0:0}:
[  902.811067][T10643]        lock_sync+0xba/0x160
[  902.815758][T10643]        __synchronize_srcu+0x96/0x3a0
[  902.821222][T10643]        elevator_switch+0x12b/0x640
[  902.826515][T10643]        elevator_change+0x315/0x4c0
[  902.831811][T10643]        elevator_set_default+0x186/0x260
[  902.837545][T10643]        blk_register_queue+0x34e/0x3f0
[  902.843126][T10643]        __add_disk+0x677/0xd50
[  902.848004][T10643]        add_disk_fwnode+0xfc/0x480
[  902.853226][T10643]        nbd_dev_add+0x717/0xae0
[  902.858173][T10643]        nbd_init+0x168/0x1f0
[  902.862865][T10643]        do_one_initcall+0x236/0x820
[  902.868161][T10643]        do_initcall_level+0x104/0x190
[  902.873665][T10643]        do_initcalls+0x59/0xa0
[  902.878580][T10643]        kernel_init_freeable+0x334/0x4b0
[  902.884312][T10643]        kernel_init+0x1d/0x1d0
[  902.889188][T10643]        ret_from_fork+0x4bc/0x870
[  902.894322][T10643]        ret_from_fork_asm+0x1a/0x30
[  902.899723][T10643] 
[  902.899723][T10643] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  902.907646][T10643]        lock_acquire+0x120/0x360
[  902.912692][T10643]        __mutex_lock+0x187/0x1350
[  902.917821][T10643]        elevator_change+0x1e5/0x4c0
[  902.923120][T10643]        elevator_set_none+0x42/0xb0
[  902.928416][T10643]        blk_mq_update_nr_hw_queues+0x598/0x1ab0
[  902.934782][T10643]        nbd_start_device+0x17f/0xb10
[  902.940183][T10643]        nbd_genl_connect+0x135b/0x18f0
[  902.945757][T10643]        genl_family_rcv_msg_doit+0x215/0x300
[  902.951842][T10643]        genl_rcv_msg+0x60e/0x790
[  902.956971][T10643]        netlink_rcv_skb+0x208/0x470
[  902.962264][T10643]        genl_rcv+0x28/0x40
[  902.966813][T10643]        netlink_unicast+0x82f/0x9e0
[  902.972100][T10643]        netlink_sendmsg+0x805/0xb30
[  902.977391][T10643]        __sock_sendmsg+0x21c/0x270
[  902.982603][T10643]        ____sys_sendmsg+0x505/0x830
[  902.987897][T10643]        ___sys_sendmsg+0x21f/0x2a0
[  902.993106][T10643]        __x64_sys_sendmsg+0x19b/0x260
[  902.998583][T10643]        do_syscall_64+0xfa/0xfa0
[  903.003619][T10643]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.010037][T10643] 
[  903.010037][T10643] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  903.018650][T10643]        lock_acquire+0x120/0x360
[  903.023686][T10643]        blk_alloc_queue+0x538/0x620
[  903.028980][T10643]        __blk_mq_alloc_disk+0x15c/0x340
[  903.034629][T10643]        nbd_dev_add+0x46c/0xae0
[  903.039616][T10643]        nbd_init+0x168/0x1f0
[  903.044310][T10643]        do_one_initcall+0x236/0x820
[  903.049617][T10643]        do_initcall_level+0x104/0x190
[  903.055092][T10643]        do_initcalls+0x59/0xa0
[  903.059954][T10643]        kernel_init_freeable+0x334/0x4b0
[  903.065682][T10643]        kernel_init+0x1d/0x1d0
[  903.070557][T10643]        ret_from_fork+0x4bc/0x870
[  903.075681][T10643]        ret_from_fork_asm+0x1a/0x30
[  903.080974][T10643] 
[  903.080974][T10643] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  903.088200][T10643]        validate_chain+0xb9b/0x2140
[  903.093565][T10643]        __lock_acquire+0xab9/0xd20
[  903.098784][T10643]        lock_acquire+0x120/0x360
[  903.103814][T10643]        fs_reclaim_acquire+0x72/0x100
[  903.109278][T10643]        kmem_cache_alloc_node_noprof+0x48/0x710
[  903.115637][T10643]        __alloc_skb+0x112/0x2d0
[  903.120584][T10643]        alloc_uevent_skb+0x7d/0x230
[  903.125883][T10643]        kobject_uevent_net_broadcast+0x2fa/0x560
[  903.132314][T10643]        kobject_uevent_env+0x55b/0x8c0
[  903.137873][T10643]        device_add+0x557/0xb50
[  903.142761][T10643]        hci_conn_add_sysfs+0xd5/0x1e0
[  903.148235][T10643]        hci_conn_complete_evt+0x779/0x1140
[  903.154142][T10643]        hci_event_packet+0x7e3/0x1200
[  903.159607][T10643]        hci_rx_work+0x46a/0xe80
[  903.164547][T10643]        process_scheduled_works+0xae1/0x17b0
[  903.170799][T10643]        worker_thread+0x8a0/0xda0
[  903.176008][T10643]        kthread+0x711/0x8a0
[  903.180815][T10643]        ret_from_fork+0x4bc/0x870
[  903.185958][T10643]        ret_from_fork_asm+0x1a/0x30
[  903.191461][T10643] 
[  903.191461][T10643] other info that might help us debug this:
[  903.191461][T10643] 
[  903.201698][T10643] Chain exists of:
[  903.201698][T10643]   fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex
[  903.201698][T10643] 
[  903.214408][T10643]  Possible unsafe locking scenario:
[  903.214408][T10643] 
[  903.221882][T10643]        CPU0                    CPU1
[  903.227365][T10643]        ----                    ----
[  903.232733][T10643]   lock(uevent_sock_mutex);
[  903.237363][T10643]                                lock(cpuhp_state-up);
[  903.244226][T10643]                                lock(uevent_sock_mutex);
[  903.251357][T10643]   lock(fs_reclaim);
[  903.255349][T10643] 
[  903.255349][T10643]  *** DEADLOCK ***
[  903.255349][T10643] 
[  903.263520][T10643] 4 locks held by kworker/u9:1/10643:
[  903.268896][T10643]  #0: ffff888057b58148 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  903.279894][T10643]  #1: ffffc9000abd7ba0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  903.292122][T10643]  #2: ffff8880274c00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xb8/0x1140
[  903.301975][T10643]  #3: ffffffff8fcc06e8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  903.312968][T10643] 
[  903.312968][T10643] stack backtrace:
[  903.318858][T10643] CPU: 0 UID: 0 PID: 10643 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  903.318888][T10643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  903.318905][T10643] Workqueue: hci8 hci_rx_work
[  903.318924][T10643] Call Trace:
[  903.318932][T10643]  <TASK>
[  903.318940][T10643]  dump_stack_lvl+0x189/0x250
[  903.318971][T10643]  ? __pfx_dump_stack_lvl+0x10/0x10
[  903.318998][T10643]  ? __pfx__printk+0x10/0x10
[  903.319021][T10643]  ? stack_trace_save+0x9c/0xe0
[  903.319052][T10643]  print_circular_bug+0x2ee/0x310
[  903.319080][T10643]  check_noncircular+0x134/0x160
[  903.319108][T10643]  validate_chain+0xb9b/0x2140
[  903.319134][T10643]  ? __lock_acquire+0xab9/0xd20
[  903.319159][T10643]  __lock_acquire+0xab9/0xd20
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  903.319180][T10643]  ? kmem_cache_alloc_node_noprof+0x48/0x710
[  903.319206][T10643]  lock_acquire+0x120/0x360
[  903.319225][T10643]  ? kmem_cache_alloc_node_noprof+0x48/0x710
[  903.319253][T10643]  ? __lock_acquire+0xab9/0xd20
[  903.319274][T10643]  fs_reclaim_acquire+0x72/0x100
[  903.319291][T10643]  ? kmem_cache_alloc_node_noprof+0x48/0x710
[  903.319316][T10643]  kmem_cache_alloc_node_noprof+0x48/0x710
[  903.319348][T10643]  ? __alloc_skb+0x112/0x2d0
[  903.319369][T10643]  __alloc_skb+0x112/0x2d0
[  903.319389][T10643]  alloc_uevent_skb+0x7d/0x230
[  903.319416][T10643]  kobject_uevent_net_broadcast+0x2fa/0x560
[  903.319445][T10643]  kobject_uevent_env+0x55b/0x8c0
[  903.319473][T10643]  device_add+0x557/0xb50
[  903.319492][T10643]  hci_conn_add_sysfs+0xd5/0x1e0
[  903.319521][T10643]  hci_conn_complete_evt+0x779/0x1140
[  903.319542][T10643]  ? __pfx_hci_conn_complete_evt+0x10/0x10
[  903.319563][T10643]  hci_event_packet+0x7e3/0x1200
[  903.319581][T10643]  ? __pfx_hci_conn_complete_evt+0x10/0x10
[  903.319599][T10643]  ? __pfx_hci_event_packet+0x10/0x10
[  903.319617][T10643]  ? kcov_remote_start+0x4d3/0x7f0
[  903.319635][T10643]  ? local_clock_noinstr+0xe0/0xe0
[  903.319656][T10643]  ? hci_send_to_monitor+0xe2/0x570
[  903.319680][T10643]  hci_rx_work+0x46a/0xe80
[  903.319700][T10643]  ? process_scheduled_works+0x9ef/0x17b0
[  903.319722][T10643]  process_scheduled_works+0xae1/0x17b0
[  903.319754][T10643]  ? __pfx_process_scheduled_works+0x10/0x10
[  903.319782][T10643]  worker_thread+0x8a0/0xda0
[  903.319813][T10643]  kthread+0x711/0x8a0
[  903.319841][T10643]  ? __pfx_worker_thread+0x10/0x10
[  903.319863][T10643]  ? __pfx_kthread+0x10/0x10
[  903.319889][T10643]  ? _raw_spin_unlock_irq+0x23/0x50
[  903.319908][T10643]  ? lockdep_hardirqs_on+0x9c/0x150
[  903.319927][T10643]  ? __pfx_kthread+0x10/0x10
[  903.319954][T10643]  ret_from_fork+0x4bc/0x870
[  903.319975][T10643]  ? __pfx_ret_from_fork+0x10/0x10
[  903.319998][T10643]  ? __switch_to_asm+0x39/0x70
[  903.320015][T10643]  ? __switch_to_asm+0x33/0x70
[  903.320032][T10643]  ? __pfx_kthread+0x10/0x10
[  903.320058][T10643]  ret_from_fork_asm+0x1a/0x30
[  903.320084][T10643]  </TASK>
[  903.320263][T11520] m920x_read = error: -19
[  903.496585][ T5862] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  903.529321][T11520] dvb-usb: error while querying for an remote control event.
[  903.757462][T11517] m920x_read = error: -19
[  903.761892][T11517] dvb-usb: error while querying for an remote control event.
[  903.884306][T11520] m920x_read = error: -19
[  903.888703][T11520] dvb-usb: error while querying for an remote control event.
[  904.020482][T19616] wg0 speed is unknown, defaulting to 1000
[  904.024041][T11520] m920x_read = error: -19
[  904.030796][T11520] dvb-usb: error while querying for an remote control event.
[  904.164007][T11520] m920x_read = error: -19
[  904.168496][T11520] dvb-usb: error while querying for an remote control event.
[  904.211772][   T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.286468][   T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.296896][T11517] m920x_read = error: -19
[  904.301251][T11517] dvb-usb: error while querying for an remote control event.
[  904.358889][T11520] r8152-cfgselector 3-1: USB disconnect, device number 101
[  904.367640][   T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.413898][T11517] m920x_read = error: -19
[  904.418276][T11517] dvb-usb: error while querying for an remote control event.
[  904.432805][   T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  904.535927][ T5912] m920x_read = error: -19
[  904.541461][ T5912] dvb-usb: error while querying for an remote control event.
[  904.583843][   T36] bridge_slave_1: left allmulticast mode
[  904.589539][   T36] bridge_slave_1: left promiscuous mode
[  904.602480][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.616749][   T36] bridge_slave_0: left allmulticast mode
[  904.622421][   T36] bridge_slave_0: left promiscuous mode
[  904.628918][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.653752][T11520] m920x_read = error: -19
[  904.658156][T11520] dvb-usb: error while querying for an remote control event.
[  904.768524][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  904.773740][T11520] m920x_read = error: -19
[  904.781431][T11520] dvb-usb: error while querying for an remote control event.
[  904.790902][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  904.800675][   T36] bond0 (unregistering): Released all slaves
[  904.896316][T11520] m920x_read = error: -19
[  904.900719][T11520] dvb-usb: error while querying for an remote control event.
[  905.023618][T11520] m920x_read = error: -19
[  905.028080][T11520] dvb-usb: error while querying for an remote control event.
[  905.153998][T11520] m920x_read = error: -19
[  905.158393][T11520] dvb-usb: error while querying for an remote control event.
[  905.188118][   T36] hsr_slave_0: left promiscuous mode
[  905.207198][   T36] hsr_slave_1: left promiscuous mode
[  905.217318][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  905.226176][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  905.234483][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  905.242157][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  905.256888][   T36] veth1_macvtap: left promiscuous mode
[  905.262438][   T36] veth0_macvtap: left promiscuous mode
[  905.268537][   T36] veth1_vlan: left promiscuous mode
[  905.274030][   T36] veth0_vlan: left promiscuous mode
[  905.283772][T11520] m920x_read = error: -19
[  905.288150][T11520] dvb-usb: error while querying for an remote control event.
[  905.403775][ T5912] m920x_read = error: -19
[  905.408212][ T5912] dvb-usb: error while querying for an remote control event.
[  905.523726][T11520] m920x_read = error: -19
[  905.528125][T11520] dvb-usb: error while querying for an remote control event.
[  905.582978][   T36] team0 (unregistering): Port device team_slave_1 removed
[  905.597340][   T36] team0 (unregistering): Port device team_slave_0 removed
[  905.673709][ T5912] m920x_read = error: -19
[  905.678102][ T5912] dvb-usb: error while querying for an remote control event.
[  905.797858][ T5912] m920x_read = error: -19
[  905.802256][ T5912] dvb-usb: error while querying for an remote control event.
[  905.933817][ T5912] m920x_read = error: -19
[  905.943865][ T5912] dvb-usb: error while querying for an remote control event.
[  906.011663][   T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.053879][ T5912] m920x_read = error: -19
[  906.059871][ T5912] dvb-usb: error while querying for an remote control event.
[  906.075895][   T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.119996][   T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.173778][ T5912] m920x_read = error: -19
[  906.180742][ T5912] dvb-usb: error while querying for an remote control event.
[  906.191488][   T36] netdevsim netdevsim2 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.303803][ T5912] m920x_read = error: -19
[  906.310234][ T5912] dvb-usb: error while querying for an remote control event.
[  906.311527][   T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.386466][   T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.423762][ T5912] m920x_read = error: -19
[  906.429777][ T5912] dvb-usb: error while querying for an remote control event.
[  906.446334][   T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.491076][   T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.543628][ T5912] m920x_read = error: -19
[  906.548021][ T5912] dvb-usb: error while querying for an remote control event.
[  906.624009][   T36] bridge_slave_1: left allmulticast mode
[  906.630635][   T36] bridge_slave_1: left promiscuous mode
[  906.637806][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.646718][   T36] bridge_slave_0: left allmulticast mode
[  906.652418][   T36] bridge_slave_0: left promiscuous mode
[  906.658235][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.670125][   T36] bridge_slave_1: left allmulticast mode
[  906.673699][T11520] m920x_read = error: -19
[  906.678820][   T36] bridge_slave_1: left promiscuous mode
[  906.680531][T11520] dvb-usb: error while querying for an remote control event.
[  906.686852][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.707669][   T36] tipc: Resetting bearer <eth:syzkaller0>
[  906.803677][T11520] m920x_read = error: -19
[  906.808080][T11520] dvb-usb: error while querying for an remote control event.
[  906.863614][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  906.874508][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  906.887692][   T36] bond0 (unregistering): Released all slaves
[  906.937605][T11520] m920x_read = error: -19
[  906.944044][T11520] dvb-usb: error while querying for an remote control event.
[  906.976338][   T36] tipc: Disabling bearer <eth:syzkaller0>
[  907.029192][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  907.039817][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  907.050465][   T36] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  907.053763][T11520] m920x_read = error: -19
[  907.063289][T11520] dvb-usb: error while querying for an remote control event.
[  907.065572][   T36] veth1_vlan: left allmulticast mode
[  907.077799][   T36] bond0 (unregistering): Released all slaves
[  907.174267][T11517] m920x_read = error: -19
[  907.179219][   T36] tipc: Left network mode
[  907.179431][T11517] dvb-usb: error while querying for an remote control event.
[  907.307569][T11517] m920x_read = error: -19
[  907.312055][T11517] dvb-usb: error while querying for an remote control event.
[  907.443826][T11517] m920x_read = error: -19
[  907.450405][T11517] dvb-usb: error while querying for an remote control event.
[  907.593702][T11517] m920x_read = error: -19
[  907.598092][T11517] dvb-usb: error while querying for an remote control event.
[  907.723675][T11517] m920x_read = error: -19
[  907.728075][T11517] dvb-usb: error while querying for an remote control event.
[  907.735838][   T36] hsr_slave_0: left promiscuous mode
[  907.743172][   T36] hsr_slave_1: left promiscuous mode
[  907.749291][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  907.762198][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  907.770456][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  907.778223][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  907.792744][   T36] hsr_slave_0: left promiscuous mode
[  907.799952][   T36] hsr_slave_1: left promiscuous mode
[  907.810877][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  907.818898][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  907.826904][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  907.834566][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  907.849331][   T36] veth1_macvtap: left promiscuous mode
[  907.853621][T11517] m920x_read = error: -19
[  907.855223][   T36] veth0_macvtap: left promiscuous mode
[  907.859215][T11517] dvb-usb: error while querying for an remote control event.
[  907.864872][   T36] veth1_vlan: left promiscuous mode
[  907.877660][   T36] veth0_vlan: left promiscuous mode
[  907.890663][   T36] veth1_macvtap: left promiscuous mode
[  907.896637][   T36] veth0_macvtap: left promiscuous mode
[  907.902266][   T36] veth1_vlan: left promiscuous mode
[  907.909685][   T36] veth0_vlan: left promiscuous mode
[  907.984101][T11517] m920x_read = error: -19
[  907.988497][T11517] dvb-usb: error while querying for an remote control event.
[  908.117468][T11517] m920x_read = error: -19
[  908.121870][T11517] dvb-usb: error while querying for an remote control event.
[  908.162391][   T36] team0 (unregistering): Port device team_slave_1 removed
[  908.174405][   T36] team0 (unregistering): Port device team_slave_0 removed
[  908.234410][T11517] m920x_read = error: -19
[  908.238898][T11517] dvb-usb: error while querying for an remote control event.
[  908.353723][ T5912] m920x_read = error: -19
[  908.358137][ T5912] dvb-usb: error while querying for an remote control event.
[  908.449358][   T36] team0 (unregistering): Port device team_slave_1 removed
[  908.476490][ T5912] m920x_read = error: -19
[  908.480858][ T5912] dvb-usb: error while querying for an remote control event.
[  908.489911][   T36] team0 (unregistering): Port device team_slave_0 removed
[  908.599528][T19725] m920x_read = error: -19
[  908.605211][T19725] dvb-usb: error while querying for an remote control event.
[  908.715974][T19725] m920x_read = error: -19
[  908.720470][T19725] dvb-usb: error while querying for an remote control event.
[  908.838878][T19725] m920x_read = error: -19
[  908.844803][T19725] dvb-usb: error while querying for an remote control event.
[  908.953957][T19725] m920x_read = error: -19
[  908.958337][T19725] dvb-usb: error while querying for an remote control event.
[  909.036338][   T36] ------------[ cut here ]------------
[  909.042112][   T36] WARNING: net/xfrm/xfrm_state.c:3306 at xfrm_state_fini+0x26d/0x2f0, CPU#1: kworker/u8:2/36
[  909.052413][   T36] Modules linked in:
[  909.056448][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  909.065912][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  909.076058][   T36] Workqueue: netns cleanup_net
[  909.080862][   T36] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  909.086516][   T36] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9b 5e ed f7 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e9 4f cd f7 e8 64 bb 87 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 56 bb 87 f7 90 0f 0b 90 e9 60 fe ff ff
[  909.106375][   T36] RSP: 0018:ffffc90000ac7878 EFLAGS: 00010293
[  909.112521][   T36] RAX: ffffffff8a38d6dc RBX: ffff8880121823c0 RCX: ffff88801e299e40
[  909.120652][   T36] RDX: 0000000000000000 RSI: ffffffff8c05d040 RDI: ffff88801e299e40
[  909.128757][   T36] RBP: ffffc90000ac7990 R08: ffffffff8fe57b77 R09: 1ffffffff1fcaf6e
[  909.136932][   T36] R10: dffffc0000000000 R11: fffffbfff1fcaf6f R12: ffffffff8fa5aac0
[  909.144978][   T36] R13: 1ffff92000158f3c R14: ffff888012183880 R15: dffffc0000000000
[  909.152976][   T36] FS:  0000000000000000(0000) GS:ffff8881258a8000(0000) knlGS:0000000000000000
[  909.161977][   T36] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  909.168725][   T36] CR2: 00007fdae3889286 CR3: 000000006cace000 CR4: 00000000003526f0
[  909.176807][   T36] Call Trace:
[  909.180106][   T36]  <TASK>
[  909.183064][   T36]  xfrm_net_exit+0x2d/0x70
[  909.187562][   T36]  ops_undo_list+0x49a/0x990
[  909.192259][   T36]  ? __pfx_ops_undo_list+0x10/0x10
[  909.197444][   T36]  ? do_raw_spin_unlock+0x122/0x240
[  909.202684][   T36]  cleanup_net+0x4d8/0x820
[  909.207197][   T36]  ? __pfx_cleanup_net+0x10/0x10
[  909.212167][   T36]  ? rcu_is_watching+0x15/0xb0
[  909.216995][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  909.222753][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  909.228589][   T36]  process_scheduled_works+0xae1/0x17b0
[  909.234306][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  909.240327][   T36]  worker_thread+0x8a0/0xda0
[  909.245017][   T36]  kthread+0x711/0x8a0
[  909.249135][   T36]  ? __pfx_worker_thread+0x10/0x10
[  909.254308][   T36]  ? __pfx_kthread+0x10/0x10
[  909.258930][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  909.264194][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  909.269449][   T36]  ? __pfx_kthread+0x10/0x10
[  909.274175][   T36]  ret_from_fork+0x4bc/0x870
[  909.278817][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  909.284040][   T36]  ? __switch_to_asm+0x39/0x70
[  909.288830][   T36]  ? __switch_to_asm+0x33/0x70
[  909.293920][   T36]  ? __pfx_kthread+0x10/0x10
[  909.298561][   T36]  ret_from_fork_asm+0x1a/0x30
[  909.303363][   T36]  </TASK>
[  909.306461][   T36] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  909.313759][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  909.323069][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  909.333146][   T36] Workqueue: netns cleanup_net
[  909.337945][   T36] Call Trace:
[  909.341247][   T36]  <TASK>
[  909.344203][   T36]  dump_stack_lvl+0x99/0x250
[  909.348845][   T36]  ? __asan_memcpy+0x40/0x70
[  909.353480][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  909.358720][   T36]  ? __pfx__printk+0x10/0x10
[  909.363354][   T36]  vpanic+0x237/0x6d0
[  909.367364][   T36]  ? __pfx_vpanic+0x10/0x10
[  909.371894][   T36]  ? is_bpf_text_address+0x26/0x2b0
[  909.377122][   T36]  panic+0xb9/0xc0
[  909.380873][   T36]  ? __pfx_panic+0x10/0x10
[  909.385322][   T36]  __warn+0x334/0x4c0
[  909.389501][   T36]  ? xfrm_state_fini+0x26d/0x2f0
[  909.394474][   T36]  ? xfrm_state_fini+0x26d/0x2f0
[  909.399433][   T36]  report_bug+0x2be/0x4f0
[  909.403796][   T36]  ? xfrm_state_fini+0x26d/0x2f0
[  909.408762][   T36]  ? xfrm_state_fini+0x26d/0x2f0
[  909.413734][   T36]  ? xfrm_state_fini+0x26f/0x2f0
[  909.418787][   T36]  handle_bug+0x84/0x160
[  909.423044][   T36]  exc_invalid_op+0x1a/0x50
[  909.427573][   T36]  asm_exc_invalid_op+0x1a/0x20
[  909.432438][   T36] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  909.437990][   T36] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9b 5e ed f7 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e9 4f cd f7 e8 64 bb 87 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 56 bb 87 f7 90 0f 0b 90 e9 60 fe ff ff
[  909.457599][   T36] RSP: 0018:ffffc90000ac7878 EFLAGS: 00010293
[  909.463672][   T36] RAX: ffffffff8a38d6dc RBX: ffff8880121823c0 RCX: ffff88801e299e40
[  909.471653][   T36] RDX: 0000000000000000 RSI: ffffffff8c05d040 RDI: ffff88801e299e40
[  909.479631][   T36] RBP: ffffc90000ac7990 R08: ffffffff8fe57b77 R09: 1ffffffff1fcaf6e
[  909.487623][   T36] R10: dffffc0000000000 R11: fffffbfff1fcaf6f R12: ffffffff8fa5aac0
[  909.495608][   T36] R13: 1ffff92000158f3c R14: ffff888012183880 R15: dffffc0000000000
[  909.503591][   T36]  ? xfrm_state_fini+0x26c/0x2f0
[  909.508577][   T36]  ? xfrm_state_fini+0x26c/0x2f0
[  909.513523][   T36]  xfrm_net_exit+0x2d/0x70
[  909.517957][   T36]  ops_undo_list+0x49a/0x990
[  909.522594][   T36]  ? __pfx_ops_undo_list+0x10/0x10
[  909.528149][   T36]  ? do_raw_spin_unlock+0x122/0x240
[  909.533374][   T36]  cleanup_net+0x4d8/0x820
[  909.537798][   T36]  ? __pfx_cleanup_net+0x10/0x10
[  909.542744][   T36]  ? rcu_is_watching+0x15/0xb0
[  909.547872][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  909.553595][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  909.559318][   T36]  process_scheduled_works+0xae1/0x17b0
[  909.564969][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  909.570969][   T36]  worker_thread+0x8a0/0xda0
[  909.575581][   T36]  kthread+0x711/0x8a0
[  909.579664][   T36]  ? __pfx_worker_thread+0x10/0x10
[  909.584788][   T36]  ? __pfx_kthread+0x10/0x10
[  909.589394][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  909.594610][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  909.599815][   T36]  ? __pfx_kthread+0x10/0x10
[  909.604419][   T36]  ret_from_fork+0x4bc/0x870
[  909.609020][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  909.614171][   T36]  ? __switch_to_asm+0x39/0x70
[  909.618942][   T36]  ? __switch_to_asm+0x33/0x70
[  909.623704][   T36]  ? __pfx_kthread+0x10/0x10
[  909.628309][   T36]  ret_from_fork_asm+0x1a/0x30
[  909.633078][   T36]  </TASK>
[  909.636448][   T36] Kernel Offset: disabled
[  909.640773][   T36] Rebooting in 86400 seconds..