last executing test programs:

2m46.731662665s ago: executing program 3 (id=1173):
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="44010000", @ANYRES16, @ANYBLOB="000128bd7000fcdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f000200"], 0x144}, 0x1, 0x0, 0x0, 0x81}, 0x48041)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e008100000008"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="44010000", @ANYRES16, @ANYBLOB="000128bd7000fcdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f000200"], 0x144}, 0x1, 0x0, 0x0, 0x81}, 0x48041) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e008100000008"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) (async)

2m46.571173299s ago: executing program 3 (id=1175):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x20, @dev={0xfe, 0x80, '\x00', 0x42}, 0x20007caa}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) (async)
writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

2m46.489441866s ago: executing program 3 (id=1177):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x4000041)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2m46.217706074s ago: executing program 3 (id=1178):
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg$unix(r0, &(0x7f0000011800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000000bd40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x20, 0x20040010}}], 0x1, 0x20004810)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000)
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
unlink(&(0x7f00000000c0)='./file0\x00')
syz_clone(0x20000400, &(0x7f0000000000)="5aaf821e78afa4370b9852ec23395592c5095f65719d64193876b1ecf0a78c89b9", 0x21, &(0x7f0000000140), &(0x7f0000001280), &(0x7f00000012c0)="1acec9e1caf032ee8bdaf16ca9611809c8d363c8ed7e949213cd67e33cc50196bfde1a9fe212eac267d1410eaa7152194935e970a5a5042fd3c69018d514f26a73310b5716612b54acc014906ec18f86020d9328223b4f9fcf04b6af476c7fcca6709d3cfa68fa98481ca1b3fd52d89c9aeb4a72e5998f7a016bea3b35e27776c3a9de9b19eab3ed0cd29524e3ff33c4af3798cf3f29d96e2c896f")
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x64, 0x4, 0x7fff, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x8, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x7, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0xb, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0xa, 0x1, 0x9, 0x1, 0xd, 0x9, 0x7619, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0xffffffff, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x30a6, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]})
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250)

2m45.780015755s ago: executing program 3 (id=1180):
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x40, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x40}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsetxattr$security_capability(r4, &(0x7f0000000080), 0x0, 0x0, 0x3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f00000027c0))
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})

2m45.074949837s ago: executing program 3 (id=1185):
setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0)
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
close(r0)
r1 = inotify_init1(0x800)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
fcntl$setsig(r1, 0xa, 0xe)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000200)={'\x00', 0x401, 0x0, 0x3, 0x0, 0xff51, 0x8000000, 0xdddd0000, '\x00', 0x1})
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

2m44.695630567s ago: executing program 32 (id=1185):
setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0)
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
close(r0)
r1 = inotify_init1(0x800)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
fcntl$setsig(r1, 0xa, 0xe)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000200)={'\x00', 0x401, 0x0, 0x3, 0x0, 0xff51, 0x8000000, 0xdddd0000, '\x00', 0x1})
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

1m50.374390527s ago: executing program 2 (id=1521):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) (async, rerun: 64)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) (rerun: 64)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async, rerun: 32)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async, rerun: 32)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80240, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async, rerun: 32)
ioctl$TCFLSH(r1, 0x400455c8, 0x4) (rerun: 32)
ioctl$TCFLSH(r1, 0x400455cb, 0x2) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}}, @NFT_MSG_DELRULE={0x3c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x20000001}, 0x10)

1m50.078946928s ago: executing program 2 (id=1522):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

1m49.993928822s ago: executing program 2 (id=1524):
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x40, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x40}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsetxattr$security_capability(r3, &(0x7f0000000080), 0x0, 0x0, 0x3)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f00000027c0))
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})

1m49.302123548s ago: executing program 2 (id=1530):
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}, {@redirect_dir_nofollow}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)

1m49.22983624s ago: executing program 2 (id=1531):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464d2, &(0x7f0000000200)={r1})
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa)
connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa)
unshare(0x22020400)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x1}})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

1m49.102632481s ago: executing program 2 (id=1532):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f00000002c0))
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880) (async)
r6 = syz_open_dev$dri(&(0x7f0000001400), 0x0, 0x4802)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0xffffffff, 0x1, 0x3}) (async)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

1m46.90424716s ago: executing program 0 (id=1540):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x11)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "9566b3b593308c38", "1bb9836c6eb604b64a5a3a7199864b31", "f0f1eca3", "dc1c878179e62a12"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb)
shutdown(r1, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8002, 0x80)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000080))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x21, @any, 0x0, 0x1}, 0xe)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000000000000050000000000000000000000030000000000f100ffffffff"])
ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000000)={0x0, 0xc0a8})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r7, 0x2000009)
sendfile(r6, r7, 0x0, 0x7ffff004)
recvmsg(r6, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x20}, 0x700)
dup(r4)

1m46.755152668s ago: executing program 0 (id=1541):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc72}, {&(0x7f0000003000)="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", 0x1000}], 0x8}}], 0x1, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd80}, &(0x7f0000000300)=0x40)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x1}, 0x8)

1m46.598896805s ago: executing program 0 (id=1543):
r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
ioctl$FICLONE(r1, 0x40049409, r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0})
r3 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma +cpuset'], 0xe)

1m46.536298491s ago: executing program 0 (id=1544):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000980)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4}}, &(0x7f0000000440)=0xe8)
mount$fuse(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000340), 0x20644b0, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x7f}}, {@allow_other}, {@default_permissions}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x600}}], [{@dont_appraise}]}})
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40)
r4 = open_tree(r3, &(0x7f0000000300)='\x00', 0x89901)
syz_usb_connect$hid(0x5, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010002000000ff6a05bb00400001020301090224000101cf50020904004a01030102fb0971edc5665032210600ff01228700090581030800dbf40932603aa1283621a4a1395c33401d23546eba9bc6aca74dd13c0c4426965c9406a35f6badfc747fcdab22394d67dce90ab6dd431814eb9103c9d168e0089fbff1fb445b4efd716367f0a20eb52a27601389f8ae8fb0e828354f9a81556b38648ae32a"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x8, 0x8, 0xff, 0x10, 0x8b}, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="050f16000303100b0710040600000106000218420300"], 0x1, [{0xf0, &(0x7f00000004c0)=@string={0xf0, 0x3, "1be9bac30e17b300ef609873be4ecb41d0284ae9c015188938e3c0ae8e8a665310c7ea33c6c21b878e7df9a17b1392f40bfb9308860de513706d5b0ea6112d133fa93d2989c8a40ed5b215c62a7d66178b6168609fe1198b5b1bccbec577e7486b284d1df37a2874dcddda07ce0f841e6d4c38196c1e71e722f5f8e83bde018ee38d710deaa4b31ec332025d893dc165137b222ce2a105005e7d818424e0d7c6d47e1b7888030d37796a685bf5605533a1cb59ec1ffee51018af9cf1806e533305d8cb246b85de37f7aa90d916530b758f9525cb866a88be08f1f4607ec6c78c00413811377edcafcb4b5a24cf4d"}}]})
kexec_load(0xd, 0x0, 0x0, 0x1)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f0000000e00)={0x2c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1203000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x500a}}, {0x0, 0x0}]})
capset(0x0, 0x0)
r7 = msgget$private(0x0, 0x790)
msgsnd(r7, 0x0, 0x401, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_usb_ep_write(r5, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000400007012dbd7000fbdbdf25047c0000040000001800018006000600800a00000c0015003000000000000020"], 0x30}}, 0x0)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0x8, 0x8, 0x2)

1m45.84386606s ago: executing program 0 (id=1545):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000002060108000000000000000004000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x50}, 0x1, 0x0, 0x2000000000000000}, 0x0)

1m45.370404637s ago: executing program 0 (id=1547):
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000140)={0x6, 0x6, 0x4, 0x1, 0xe, "626587f147559178"}) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) (async)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="020000000100020000000000040003000000000008000600", @ANYBLOB="1ef40c661fd88916d20f8f6eb422aa843659c9016f3a1b05863830bf2b8da631fde2ed6b29a1843a2bf593026b531eaed5cb0038f3cf1fe5f739312dccbe4a545ae1e1eb64883be4d063fd92595b044277", @ANYRES8=r1], 0x2c, 0x3)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r2, 0x107, 0x0, 0x0, &(0x7f0000000100)) (async)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250b0000006c00058024000280080001001b000000080001000100000008000400b3000000080004000a00000008"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014)

1m44.807502082s ago: executing program 33 (id=1547):
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000140)={0x6, 0x6, 0x4, 0x1, 0xe, "626587f147559178"}) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) (async)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="020000000100020000000000040003000000000008000600", @ANYBLOB="1ef40c661fd88916d20f8f6eb422aa843659c9016f3a1b05863830bf2b8da631fde2ed6b29a1843a2bf593026b531eaed5cb0038f3cf1fe5f739312dccbe4a545ae1e1eb64883be4d063fd92595b044277", @ANYRES8=r1], 0x2c, 0x3)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r2, 0x107, 0x0, 0x0, &(0x7f0000000100)) (async)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250b0000006c00058024000280080001001b000000080001000100000008000400b3000000080004000a00000008"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014)

1m34.053429043s ago: executing program 34 (id=1532):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f00000002c0))
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880) (async)
r6 = syz_open_dev$dri(&(0x7f0000001400), 0x0, 0x4802)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0xffffffff, 0x1, 0x3}) (async)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

32.285283191s ago: executing program 5 (id=1808):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xd, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000002c0)={0x18, r1})
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000040)) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
lsm_list_modules(0x0, 0x0, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) (async)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

32.112176019s ago: executing program 5 (id=1809):
r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="03110902240001000010000904020000000000000000000200020d00060905820200021000000000ff00"/51], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000014c0)={0x24, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0003e5ffffff0303bef0"], 0x0, 0x0}, 0x0)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x7ef}}}}}]}}]}}, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000020000000000000000000000007000000440d09"], 0x40}, 0x20002880)
syz_usb_control_io$hid(r1, 0x0, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x40601)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0b45545, &(0x7f0000000040))
r4 = semget$private(0x0, 0x5, 0x0)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000100)=[0x4])
semop(r4, &(0x7f0000000280)=[{}], 0x1)
semop(r4, &(0x7f0000000140)=[{}], 0x1)
semctl$IPC_RMID(r4, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="200e07000000070d39f6c91b00"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_read(r0, 0x6, 0x0, 0x0)

28.967653373s ago: executing program 5 (id=1819):
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mknod(0x0, 0x1000, 0x0)

28.834731643s ago: executing program 5 (id=1820):
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00')
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0xa, 0x800000010000, 0x4, 0x4002004c2, 0x0, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffffd, 0x7fffffff, 0x20000000009, 0x2, 0xfffffffffffffff7], 0x100000})
syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x3000000)

27.222967544s ago: executing program 5 (id=1829):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x0, 0xc1, 0x7f, 0xc}}]}}]}}, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185)

25.736214528s ago: executing program 5 (id=1836):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000003d40), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x3, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000000080))
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_VENDOR(r6, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000001280)={0x1038, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_VENDOR_DATA={0x1004, 0x1f, "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"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xa}]}, 0x1038}, 0x1, 0x0, 0x0, 0x10d18b099b02eebe}, 0x40080)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffc}, {0x2}, 0x70bd2c, 0x3504, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
write$fb(r2, &(0x7f0000000200)="1e9e375276699e60a8408bff79042c9e64b324e28be7ed8bbd3f774accecd4cb241aede0ea063a85f45d5cf57e07fa14931295124b2f836334fd87768f", 0x3d)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x7)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r7, @ANYRES64=r3], 0x0)

10.549774099s ago: executing program 35 (id=1836):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000003d40), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x3, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000000080))
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_VENDOR(r6, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000001280)={0x1038, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_VENDOR_DATA={0x1004, 0x1f, "6b5e8a8da47b67c189231d5ce534a40178039bffe69f116007db98f89085577faf5ca35905cb8c694b77fa93f2a9afdd5ba621b1f2fb3ad3b54fe87f4b4a9439bb1889b950c8a2436244920ce45db5c6821a9c41e1a5d1169b3b954a9c9a0ca776f050133f4d7742fac2d536009da3ec559dab2c89176f341c03320b800f902d8a7777881efcac1a1eb75b08c249ce1d69b1e6fed19d7646f592eacc2ea6f0e8ffcdd85f2ef1af8081193d3788646475a353a53346363b72cf76bcce2461d613aa16aa65115e4e603e958513bb4a47ef75a9f435f337a1e4fa6acb1be918d0cdb4841f164ffd14b831787eabec699767e3cc3be1b32a399fb90941a39f561272cf6ebf82d2d78fd804fcd29a44049625d9fdde19a65d6dfbc7df21d8aba92e882f537b45fa8dd9578b48c294d0d1e9c4b57bc329c7aa57669c4cb696dbf2f94b8dd2e6ab991ffc7bdd6a85a731f04e652bf63e6b24ca62e40f439abb6ff702a7a125b09ec8025b2070c548946db9b683426981bac9ed5275b92cd397bb51e36c433523de4804b25efb0489d8b67f5897f9bfc4bbef01a553766a769e5801201529f7c56a3c0cf3dfa5d3e9ab3a81546a460408278ae2087f78a25f7179981ab408c2b3ffb5856280f30b5896a61c4fad4415ea7fe10eeb8b361bb1f47efda99ee7366d267d648c95a8484e57159fad865936dd1ee7cd93dacc76200e43f690268994336e5eb2fe14f5a9c2e92151de59ab65072982688039d116bab1fe28ab5ccc7022bbab6f7f9e88d7f49db9751a2f2b8c7d68d008cf532f0ce3d59c7d56981ae48a39d6d725ac8ed4937700a6d1d18e0e9b509efed31cd5c3478e222f09bac3b684e2e78b8ceb082d9f80f014f97bab3c24973dda6362fc08bdd91ac43966e0e5c3878656569dedb4c0c6406a2f3e1265e615da83d767aee384d4224ab913b0837914849244089808765bfc0dc7a32fc639a7100d228f1b3a1e85454729cb5b97174774022502414ed9600e1c857052b4ef3d1724b97f832616d8a53649d924bb9d097b8d2809429223733d4c1a1250cd343fc4f3ab822892157cfd0587ad5332950b0f964e15f30aada973a86b347a2fc77aa49924ce8ab177e74af764897055cb1888d0c9bfce562975fb45172105c1a616f34d547a0954f2deb68a42ceb34aa3cc65e5c001ccaeb7d03f34e5396455c53e641076deb6cf7832cd1319a0404e906d282dd6d718a85e8c92b854e3b8a1cf2a3f548654cb2a064b291e9c29ce26821f251731eeaabf9d8eab0389efe1a30e8a32ddbdf3eaa34a9cb839b6bc11f8108035d6feb5d2348bb5c571afe40aeeee9ddfe777534c32c4e653feb568c8e06502a96c2e935463ce8c3ffccb6c35dd52e135c677df2f15e594b1f288c8a576923842c983b5830dfecc58fece4399e8778d0a21e19e73b9307c755e62440a1538704bb7d35056113d50fe5270ceb15c5a20ed1715c6b7537b27418d5c74f62d2f7c00071a18d9e2471d039aa5a99f5bd5ad27735b00da7f4ba872a5e4fe5773e7237a7fe2fcc357ab087d63109c0490698b9af9bf8c78ecbdfbc6cf5a6fcd97c423f062246b8879b89984ac6dc405487713d6a866a8edd2595cb43e142054db5d7a9abff30f2bc0c8bfc0444dc8b54b8f5227f56a61fb8e94390b019ba3d36bdde562578a4bc87d1a4a43890b45caac48ae7e09f2d4781ac2ade4cf2c739a8ed1d5296cd38080ecb3b4fa4c7960a5ed78a3dc0cce2a9b113de9507962ab51f964d8388b646493f0db26ffe0319a2e8c8c6cbb1931319907e2211611127ec613fdfb1f4e2a79a6ea152c893d01920a43bd497e6e46ee8a74978397271dcc65c9a3ce22121a571490b38a43c6fdae28e56b46a1ba869e3eefbbed544c73c9643d64513b4f7c9e92fef388f48db734cc8bb2ac1725010a8ed8d3a80e051064cf9a9c7821e80eb396269530a33204d49e951269bd1530af1dff600391e836dd1ad161ffe3a06835fe174855a2cb5f1ae2faf150c7ef3afd631e9f7e4a031201135918f437e7f7370fb25ed46df13afff899aa41f5d836401b40b0e75d5c294b935a1a71dc55e00b7dd7a7556638b2e41569b9102aafc09eab8637dcd297754887270d9dba0efb79ea399fe8edd968434f608497b6f57f4f08dd8d9460b69c42933e0dc142bacf046624bca893c6f61c6db4b0dde397a277ac6bd0682b3fa6c9726f4566b5ad019b525900d67f639453a9b7aad9959af1496cfa25657ccc8fa325ba1dad0f246f0aab3dbc13eb228f0db2dbca6f731cedf057c27a68e757d1c14a05fcfe63eb75571ccc28d2fb7ed4c1c029ba898f37afc606124dd7bdffa6fa02cd121270d72d0a92651d639d3691d538ef7e88723fa042b54abfbafa86cab78eca1d6bd0aaebfd540f261ce15a9f17927ce4b3edf7746f23cdad25a4c8600897bdbd9aa41a44bebad4da3494ca202f940a6df01a43fdceddd7335b947b5906c072e454d01ebfeb5f7346f82120602b9416793593256ff6087f72abe9887c3caf2c45e6ee404047cc2228d01d6cfb67efdced8bca358f481f29d2a077bf3a90ab3e8ad949b6172363601fcbb4a49f4bb7eb13227384d89cac9042514fe20fe54c0e90e265f9ff843a48212446ad67be30b127d9c7415609118e5ed325fda15620b0d7eabe9e9694db6cef03a5e8e9db05074e7b6caada00ccb350c0f9184a3a8a64f7dd9caa8ec457ba9c919ebbaecfe06e14b3ccf7766cfa4d5271b01100f6129d41b9d7efde3240a8d3b447b2bb964340763491d1b47ad628b83422f2bf6fb12ef4069cfbaa0b95b9fd5158a89dff9eaa267ab0d5ca62be1ad76c1dcaa83a00f50a51908278fce6262cd627f4953b00b1c3ab430a1b230afef291fb33217384ad0bb11c8a5c7fa96653e09d248875d5596e3bbf25815b887d0a862c47b78ec2094dc9e0ab410d1fc67f38d929a350fa654fb4890955c3aa9b3df26329ed2772c489cd306ffec2d54c782f2ab8255e46d0a546d7e4480762c7dc81dbe3f0fafc3d726a949645bc2dce36f19a1b1a0e0ad18dbb81611543ffacd51a424bb25c4b4a6d04286d452c5acd8ad0248d6bf4f2353d8d778df4fbbe7c1f195d2e5fd389fd1b24d73c0122a9b6613e94401fb3d2dc0cb4d6c5e035f5ba10ba0b1874059b3f3eda1f0729d047fffab3b3f7b47f986cb8843d4cc2b01de291bb51ffa29fcdb0bc9752dddf5cc7db7e75a3af9fe02a7f7d7d9130c42d46a5e1275df1ab24061e1d93552f087032301bd4ec9b4ab4ef6960f8a891f9804c568cf7a8fe2d203292f4135503e43b2f62b19e514d764c992ffa670cde791fe4532113b3323064c3dfb91fd348f5b436f1935e12c354813decf91cf3a065064148f862b8a7f4d48b8bb69486182b15298a97faedd64adfd6e9c83da024df64e5006fadb1d4acc64d95abd671998478a31f7789bfe2976a475e6de1880009f2bd9c1ed9b23373b8038218a28676122e44e0a166c6c4ec8f85b1d7e3652d4613b0088a863c35963f63aac7ca526d5abba2e4beb6a2f5f4790ceabaaa85f907f68498bff4ccfe313ee49049542ecc10196bba742f7600ce820de164898fc849daaa194c2f86a3a5b27d6b39556c6f6305d6195a28da1887ee647c53af650aa9de98ea653ec6ab0afce2e46ffdf4529c8f3a4aa8e4a045fdcbca590da4e81f66a25607cfcf69f9877741a3818bea85da5f4511294808496e3115868afd2aee6cffb228828f913437d92e489d16a650200e6c95289587411dca2efac776b90874b3923310c441a5650ce924b3a9e8e131fe2a643848d75524a72b9c4934dfc65c2f13e011dbb3ac0a092ed02c9d5086c2df3e35cc4992d892b988a8c9f087cf7d75f521627c49b6bfe9ccf71b6c79abea74e1e6fa24a25644a111f065492b67b15a6778fe0102555140c37aeee218cb2662c30e68e48237f22474211dc1e222c7cf968ad3d15dd5d3588029053bc691eaf3910b57e06fa656788f8a20101a4ca558bfe6d366414e1e232ea35773b68fdbf1dd939e18357a2ba3699b68ad49b603ba72cb05f9e342e5ca7c87f15f82c87c2d7dd47c727e08dab2f6be2012bcaeb3210526388739b36d754f331ae02c325e9e30cefc6f2adce926438f4146a8a0d06d65f88cd193b561505c220d1c7a9d43a41644d26211b8f1fe3ce48cc087620015524c78ec7b07b9e886e5bc1c7dd57a9320a73f249f082d48f628ed203eb68c0428379885f186ad1d453f3c4f08b2e4a7ff8d1b5053939696d39535bb905810d0745094abf84e1c9236bcc6d6e3b0e05579df01bee399bf999e315c77e221bde3fee2e81b18f6f0f5a78cc4a438f4510baf37f09a964a645909580c6b690ca49afc1b92941605e6b9225655727e7408483c7d9d765b36c72b0de84edc6cbe855f899d876a1667b90f33b3ef97795ad06e75e6fa7cf9b1c5f3ace0118028cca32647ca04031523bb571e30138d821fb4893a5f4f139fc1a2d2f1a2e280ebd611f689950cc31a35d9cb0ab28c3598442f0ab70edc2d1791812ca96ac7f63ce03f99abe5133b5b993033a2bd6f764562c145267b948035ea38ce6e11e2e70be9d42dbca336d059d6e15c91943f93705ec5f99951cc20c60e50db170cb5f5577d6677db10525df5b8a080ba863e1e9cc1573b34ac996b001df5482e80f1a69c3fdff4368bbab56aeea3ee69cbceacfda501fc19cb2c7af3aab0799e707d4b73b66a472c11b43a515533315024c4861653808681f63f35ea5ba6f7aa879f81da2fce6fc03b7f9fcbac768ba6fbcb66a79320496df2810aa2098b2d305175d1ba402a66f949b75852cd09461cb11cd71112c034329fab73aa6c9b4ae23e402eda2777736f0ec59161bee4d1764915990fc6c7ee8a27ad413d45d84366735fd6ec9cffa1d6bc07c070fd5cfdb49ac949bfb80dbd6e28579144354c26f2c3d02b25f883c76c5f02ce34a35f880289f10f1a698804fbb81261ad42fc25ebd2dae73341cb2af2262360d5285eadfd25292f939b217dbbae726316e7b6dc644647c6809dd7a987ad991473ba057b2eeb9d6e7b17d3009b75af5abd9836991656eb0d638aa92a33b2511d01a0c8f5b8dac086fe585d6ad5486107cde8eb06c686e054df2724f4d615a2388307eddcb3715e8232bb84484ec1f962388a4515bc0273ae8865771f2c550d9a0092ff32baf5f5adc60b4cd99eeae44da3b726129e291d85e3b5adbc4fc533c2799026bea037b1bea3e26fb4f10d8420c729e9f2b9c52582579425518b1291c4a9f6550cf6560bd931bc0a7588d039007135f008ddc51bf21562df5488722c6db5ff8d6a570550534bd982be26bb73a290d775512ae409dde52b60119a087b2d97870e07d77808732c624c8338cf533af257550817c41b660fd334cd63cfe9cefd461b599ad3bd8c2842e3fd251c2dceffab88748c10d2a85850458fa4d24608309ff4c72e56ea5c6b2884427b00d3182c517bdf026ed0180365cf397a27a657c06d68a68d05a47d16366259a17081a35679501c5ca518fac212afbad309776450dc78afe08baf70548a6191eb58d00044b00b9da337416963305379eb522435a3d6e8773763af33d9633c2fb28ffa1d1d2087d04540b98cee725130ef70ac50cd3eb58fee852bcc1678de93430d1c33ce3424865d6b27c6195b2304be3f298bce7b7c0dbafa9c2c05d59611f333e6d6d9514a6fa998342b7ac24df1ccec4cd46174a8ec9a407d18a3ad19ea394849b97370ca757b374ff50f2c04223f408fc3384e5409"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xa}]}, 0x1038}, 0x1, 0x0, 0x0, 0x10d18b099b02eebe}, 0x40080)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffc}, {0x2}, 0x70bd2c, 0x3504, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
write$fb(r2, &(0x7f0000000200)="1e9e375276699e60a8408bff79042c9e64b324e28be7ed8bbd3f774accecd4cb241aede0ea063a85f45d5cf57e07fa14931295124b2f836334fd87768f", 0x3d)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x7)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r7, @ANYRES64=r3], 0x0)

8.379867433s ago: executing program 1 (id=1894):
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) (fail_nth: 7)

7.859170849s ago: executing program 1 (id=1896):
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000002c0), 0x7, 0x6080)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2004}], 0x1, 0x0, 0x0, 0x0)

7.486678832s ago: executing program 6 (id=1897):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x2, 0x2813, {r2, r3/1000+60000}, {0x77359400}, {0x3, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x0, 0x1}, 0x1f, 0x2, 0x0, 0x0, "8b93ea766f9cddfa3ab1e6225a4e789ec60168c0aa359e78b147600971eca1e99965eb7a060a5a9393460b3f0d0d35b3e33ea4be3898b148e6c6f1cbdcc03eb0"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40089)
recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/155, 0x9b}, {&(0x7f00000002c0)=""/70, 0x46}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/50, 0x32}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)}], 0x6, &(0x7f0000000580)=""/156, 0x9c}, 0xfa30}, {{&(0x7f0000000640)=@ax25={{0x3, @default}, [@remote, @remote, @null, @null, @rose, @bcast, @null, @bcast]}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000006c0)=""/81, 0x51}, {&(0x7f0000000740)=""/217, 0xd9}, {&(0x7f0000000840)=""/129, 0x81}, {&(0x7f0000000900)=""/130, 0x82}, {&(0x7f00000009c0)=""/105, 0x69}, {&(0x7f0000000a40)=""/195, 0xc3}, {&(0x7f0000000b40)=""/57, 0x39}], 0x7, &(0x7f0000000c00)=""/42, 0x2a}, 0x4}, {{0x0, 0x0, &(0x7f0000000c40)}, 0x7fff}, {{&(0x7f0000000c80)=@caif=@util, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000d00)=""/162, 0xa2}, {&(0x7f0000000dc0)=""/51, 0x33}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x3, &(0x7f0000001e40)=""/135, 0x87}, 0xe}, {{&(0x7f0000001f00)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001f80)=""/196, 0xc4}, {&(0x7f0000002080)=""/23, 0x17}, {&(0x7f00000020c0)=""/140, 0x8c}, {&(0x7f0000002180)=""/233, 0xe9}, {&(0x7f0000002280)=""/22, 0x16}, {&(0x7f00000022c0)=""/240, 0xf0}], 0x6}, 0x2}], 0x5, 0x102, &(0x7f0000002580)={0x0, 0x3938700})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002600), r4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000026c0)={'ip6_vti0\x00', &(0x7f0000002640)={'ip6_vti0\x00', <r6=>r1, 0x4, 0x1, 0x4, 0xb, 0x60, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast1, 0x10, 0x7800, 0x8, 0xc}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000028c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002880)={&(0x7f0000002700)={0x180, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40c0}, 0x40044)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002900)={0x1d, r1}, 0x10, &(0x7f00000029c0)={&(0x7f0000002940)={0x1, 0x0, 0x3, {0x77359400}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x2b, 0x1, 0x0, 0x0, "c97f4dd872d0f4aaa5125ad184b3d3ab30dd01dec8f419c5af342d1e208bada16dd84066ee35c95a1df470106363948e276e79ae7bb4a12e4b54088eae915b3a"}}, 0x80}, 0x1, 0x0, 0x0, 0x24000010}, 0x2000c080)
read$FUSE(0xffffffffffffffff, &(0x7f0000002a40)={0x2020}, 0x2020)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000004a80)={<r7=>0x0, 0x2, 0x30, 0x100000000000000, 0x8001}, &(0x7f0000004ac0)=0x18)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000004b00)={r7, 0x6b, "38c2682c6cf86c4ea1de5bafa6bee1ee3d81bf7ae5084ad9edff01f9b08a43a395de4c6559c3d0b8e24b5d3c04a45a44e05cc0a4fb77fa9dedd4f0ed9d26ab7a2ee93458978acd707995bad0c978c0bbfc05a08dbc8cfd32adeb5c501654e70fed96c8919a498e04f7bdec"}, &(0x7f0000004b80)=0x73)
socket$kcm(0x29, 0x5, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000004bc0)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "2c03fe391147f3aebcc681da9b79302abf5a4a9dc45506d281df6bce7a1d5a74", 0x8, 0x3, 0x10001, 0x8}, 0x3c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCGSTAMPNS(r8, 0x8907, &(0x7f0000004c00))
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000004c40)={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, @local, 0x3, 0xfff9, 0x3, 0x100, 0x9, 0x880020, r1})
ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40084146, &(0x7f0000004cc0)=0x400)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f0000004dc0)={&(0x7f0000004d00)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f0000004d80)={&(0x7f0000004d40)={0x28, 0x1411, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40081)
sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000004f40)={&(0x7f0000004e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004f00)={&(0x7f0000004e40)={0x84, 0x0, 0x504, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FAMILY={0x5, 0xd, 0x10}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40090}, 0x810)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000005080)={&(0x7f0000004f80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005040)={&(0x7f0000004fc0)={0x50, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000080)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000005100), r9)
sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f00000051c0)={&(0x7f00000050c0), 0xc, &(0x7f0000005180)={&(0x7f0000005140)={0x24, r11, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x10}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x44004)
r12 = add_key$fscrypt_v1(&(0x7f0000005200), &(0x7f0000005240)={'fscrypt:', @desc1}, &(0x7f0000005280)={0x0, "0bab12f53767822c230a4566903be62cc17668cad3efe7bfbadd8871b2d50b0cc7feb617c6822136c44180ee130ab904a4c3943a37d6beaa15f387cd2eeee73a", 0x3e}, 0x48, 0xffffffffffffffff)
r13 = add_key$user(&(0x7f0000005300), &(0x7f0000005340)={'syz', 0x2}, &(0x7f0000005380)="1b288b2bb160455e384ffad58708578b2aa4571d0d36320aefda433b50f55b8fbd9ff4b0bd33962448db508201700a57e30460561fbf8b255308e40b46aecf6f802afcccce925d177c4815e714e791cc4b24f73d3ddcd7681c111ac829cb17b435d8c102c3bc5502e8e23ed8ea6d631e5f74aa6694d11ef33776e42b512a4c84108c6eef9b74092f3d404beec051e7dc5f4e60669c4757cbe0e856c291a4c0f101596afcab5e3a0df63717c0203678ecde06bb0bb0148be44017e0624b09381a6ebd84b274110ddf20910526", 0xcc, 0xfffffffffffffffc)
keyctl$dh_compute(0x17, &(0x7f0000005600)={r12, r13}, &(0x7f0000005640)=""/4096, 0x1000, 0x0)

7.348563977s ago: executing program 6 (id=1898):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc")
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)

6.897236882s ago: executing program 1 (id=1901):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040))
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000480)={0x0, 0x3f, "00fa00"})
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\v'], 0x0, 0x0, 0x0, 0x0}, 0x0)

5.731077195s ago: executing program 7 (id=1906):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x0, 0xc1, 0x7f, 0xc}}]}}]}}, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185)

4.871920238s ago: executing program 1 (id=1907):
io_submit(0x0, 0xfffffffffffffd52, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x40, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x2f, 0xb9e02c7ea3376920, @mcast2, @private0, [@hopopts]}}}}}}, 0x76)
io_submit(0x0, 0xfffffffffffffd52, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async)
userfaultfd(0x80001) (async)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x40, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x2f, 0xb9e02c7ea3376920, @mcast2, @private0, [@hopopts]}}}}}}, 0x76) (async)

4.391100452s ago: executing program 6 (id=1908):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="dc0100001600010026bd7000fddbdf2500000000000000000000000000000000000000000000000000000000000000004e2000004e210000020000a03a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000010000000000000004d233000000ff020000000000000000000000000001bfc5ffffffffffff020000000000000004000000000000000300000000000000ff0f0000000000009e0c00000000000003000000000000000000000200000000030000000000000003000000000000000900000000000000070000000000780b0000070000000500000028bd7000ff3400000800010d72000000000000001000000006000000e4000600e0"], 0x1dc}}, 0x4000010)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000100)={0x9, 0xce2, 0x6, 0x99, 0x5, "220329ccf8fff800", 0x4, 0x1000})
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d)
ioctl$TCXONC(r2, 0x540a, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="dc0100001600010026bd7000fddbdf2500000000000000000000000000000000000000000000000000000000000000004e2000004e210000020000a03a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000010000000000000004d233000000ff020000000000000000000000000001bfc5ffffffffffff020000000000000004000000000000000300000000000000ff0f0000000000009e0c00000000000003000000000000000000000200000000030000000000000003000000000000000900000000000000070000000000780b0000070000000500000028bd7000ff3400000800010d72000000000000001000000006000000e4000600e0"], 0x1dc}}, 0x4000010) (async)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000100)={0x9, 0xce2, 0x6, 0x99, 0x5, "220329ccf8fff800", 0x4, 0x1000}) (async)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) (async)
ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) (async)
ioctl$TCXONC(r2, 0x540a, 0x2) (async)

4.258973465s ago: executing program 6 (id=1909):
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x3, @multicast2}, 0x7)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80801, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) (async)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x9, 0x20, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) (async)
syz_usb_connect$uac1(0x3, 0xa5, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001000000206b1d010140000102030109029300030100a0f60904000000010120000a24010800040201020d240702040008b546d4035dde0724070205000605240405240c2402030001040907007f7f090401"], 0x0)

4.18961987s ago: executing program 6 (id=1910):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x88)
r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='cgroup.max.descendants\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x10000a006)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x853, 0x148, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x49, 0x0, 0x1, {0x22, 0xa4}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x8, 0xa4, {0xa4, 0x21, "645b72cd6074f3c131c3a3d4f6ee1713e1b1454d38e4526ebab9f82d4ef628b78bb2e54bf6b570299f82852135af5276104fd540a58df1dbd4611dd5033674d810c150b240f99b92d6edee6d26fff0b2d1d2429205f62cea491c4f4bfc4cbddea44e16169ae1183b86e97f3553b87ae162acd28b3e78539ddc6756032ad509ee344b7fbf98ed2dc1d42e00049f2eca7c42efbb099e5566bd41b9c7004697b9258310"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.68401962s ago: executing program 7 (id=1911):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000002640)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000024c0)={@fd={0x66642a85, 0x0, r2, 0x0, 0xf0ffffff}, @fda={0x66646185, 0xa, 0x2, 0xe}, @fda={0x66646185, 0x4, 0x1, 0x2}}, &(0x7f0000002540)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0})

2.627197423s ago: executing program 4 (id=1912):
syz_open_dev$video4linux(&(0x7f0000001380), 0x0, 0x0) (async)
r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x980001, 0x0, '\x00', @p_u32=0x0}})
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="481059671332377243eb10f29650362b880205a7ce98624b33021b6037dda661c9365384c5d36fcd2447c8b5aa89757549b86cc29667864b7c52585096c8446bbf2547695f7c5bf650b1c2c732db3c1e06dff9e032ba594ee1074627094b7629df2bf0cdb80a5d57465c007fbbc02e3a191038a6352f7527b442db727f1f734db743bab2ebbc1a677f1a4891d3dc3faafd23c83ddc31967b8874dabb8f27666141050e7161c5fef4666d65a4cd5e1bfd6fe1f6fcde4d3e693d1d1a0c1d6dc1a4e355", 0xc2}, {}, {&(0x7f0000000040)="d645e9a910a09c148af06a862c317a185d484449ceed33724d7facc6343b45491a57df0270", 0x25}], 0x3, 0x7, 0x1, 0x1a)

2.56728018s ago: executing program 7 (id=1913):
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) (fail_nth: 9)

2.531296893s ago: executing program 4 (id=1914):
r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fadvise64(r0, 0xfffffffffffffffd, 0x5ff7, 0x3)
socket$packet(0x11, 0x2, 0x300)
ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000001040), r1)
r2 = syz_open_dev$evdev(&(0x7f0000001080), 0x1, 0x244000)
ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f00000010c0)=0xc)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000001100), &(0x7f0000001140)=0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), r1)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4005)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r1)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000013c0)={'syztnl0\x00', &(0x7f0000001340)={'syztnl0\x00', <r7=>0x0, 0x4, 0x1, 0x4, 0x1, 0xa, @remote, @private0, 0x8000, 0x10, 0x9, 0x1ff}})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001400)={'geneve0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001440)={'wg1\x00', <r9=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001480)=<r10=>0x0, &(0x7f00000014c0)=0x4)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000015c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x68, r6, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x1)
r12 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001600), 0x2001, 0x0)
ioctl$GIO_CMAP(r12, 0x4b70, &(0x7f0000001640))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001680)={{0x1, 0x1, 0x18, <r13=>r11}, './file0\x00'})
write$cgroup_int(r13, &(0x7f00000016c0)=0x100, 0x12)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001740), r13)
sendmsg$TIPC_NL_LINK_RESET_STATS(r13, &(0x7f0000001980)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001780)={0x198, r14, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @local, 0x400}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffa822}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "9f3105e7dca4cd26b6c50622ce092524814f78b7ede87cd1"}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x59bc}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000040)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001a00)={'batadv_slave_0\x00', <r15=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0xa8, r6, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000080}, 0x8880)
lseek(r3, 0x4, 0x4)

2.483106159s ago: executing program 6 (id=1915):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="206d79d35a8908000203617c6e753916ea57a28379d62c9f1d083f0f4a39dd2a4b3366d1c8c2961540276aa5333e86819b158f56b83c8502e038cecd04eac92ce2e4b944897d2f37cc3fcc83639eae579098c4b80751fc58bad38268e8329b95a24daaca8d18ec31a541e5ae9bdd8e2b29012231fbea949d709fbf3361836749694a40f19b0910ebe3cb89ee2162ac0a15de23967bc5cfe89890505a2b2fd324a8082b3e1d9beadf2de3312179a017520aeae241e5a8960a36170a80d30c2b8d3cbf6e1651fb13d4"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201005a191c3a1040206882d68d0102030109021b000101ff000009041402010b54bb00090582024000000000"], 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x80, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a", 0x35}], 0x1}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x400000)
ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000240))
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540), 0x0, 0x5, 0x0, 0x0, r6})
syz_usb_connect$uac1(0x1, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="050f7200016d100187bd055e52c7f4723f337d6dbece1dc34bf55cf20e33b24299973f4327e477997a4c87b6e1aaa400428738f950f43124602f8f12b5643e7bfeec15a9ef99def4334c8b56884e569920c256b83eeb992e93d88d8c037ff730c0acd9a188486f78f3d915a527b2cf46865a"]})
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

2.388154225s ago: executing program 7 (id=1916):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x10)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000000))
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000240)=0x46, 0x4)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000200)=0xab, 0x4)

2.102128704s ago: executing program 4 (id=1917):
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x38, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x38}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsetxattr$security_capability(r3, &(0x7f0000000080), 0x0, 0x0, 0x3)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f00000027c0))
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})

2.001871795s ago: executing program 7 (id=1918):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
close_range(r1, r1, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendto$inet6(r1, 0x0, 0xfffffffffffffd89, 0x0, &(0x7f000005ffe4)={0xa, 0x4e25, 0x0, @loopback}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a23d053a39fe5f1cf000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000020900020073797a310000000008000440000000020900020073797a31000000000900020073797a31000000000900020073797a30000000000900010073797a3100000000140000001100010000000000000000000100005dce23317100000000"], 0xe4}, 0x1, 0x0, 0x0, 0x24000844}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x20}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

1.979927117s ago: executing program 7 (id=1919):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x0, 0xc1, 0x7f, 0xc}}]}}]}}, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185)

1.744999703s ago: executing program 1 (id=1920):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8380, 0x1850, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x2, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x18, &(0x7f0000000100)={0x40, 0xe, 0x5, {0x5, 0x31, '\x00\t\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x333, 0x40000001, 0x0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
write(r1, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r2, &(0x7f0000003680)={0x2020}, 0x2020)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x245, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0x200, 0x9c, 0x1, {0x22, 0x2df}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x3, 0x8}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x5, 0x1, 0x4, 0x40, 0x7}, 0x5f, &(0x7f0000000140)={0x5, 0xf, 0x5f, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "b31cb57d163ac452efacc04dd2feb8be"}, @generic={0x46, 0x10, 0x4, "42cd52f31b0dcfaa71b6e5caa0772896b88d9a16425f7b0c032dd8ba059a31cb432a3cbd01bb2610cf3e4381ed291efbd4771b90b55a6a43fd0ca79e3354c7725c91c4"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x280a}}]})

1.51763843s ago: executing program 4 (id=1921):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000001c0)=0x1, 0x4)
syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e20, @empty}, 0x50, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='wlan1\x00', 0x8, 0x3, 0xa})
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)

1.394976615s ago: executing program 4 (id=1922):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x8})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000200)='\xa7q\x18\f\xb6%\xfd\xec\xfc\x14\xd4\fX\xa7\x00\xbfd\xff\x8f,\xe6OZ\x1b\xcc\rU\x00\x8at\xa37\ne\xa6\x83\x9b\x94nC\x82\xc0\x18\x89MR\xf7\xd24\x18E\x8d\xd3\xd4N~\xa9#\xdf\xf1\x01\xa8;\xa4\x7f\xa5V\x94\x15?\xb3\xa4\x0e\xd5\xad\xbc\xe3\x13K{\xd4\xf0{\xddx\xc6\x1c\xe0%\x1d\x81*T\xbe\nV\x82\xddd.\n/d\xe9\xb5\x064\x98\xee<']}, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000760500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
acct(&(0x7f0000000080)='./file1\x00')
acct(&(0x7f0000000000)='./file1\x00')
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x5783, 0xefa6, 0x0, 0x3}, 'syz1\x00', 0x4d})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x17)

1.233823043s ago: executing program 4 (id=1923):
r0 = openat$sequencer(0xffffff9c, &(0x7f0000004700), 0x0, 0x0)
ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000004740)={"f3a992c5f0640ce3df762062bc2a6b18c8f7b5ffabec44e38f218d52e570"}) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x10, 0x9, 0x0, 0xdf, 0x8, 0x22b8, 0x2d9a, 0xbfdc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb, 0x7, 0x30, 0x7, [{{0x9, 0x4, 0x3e, 0x0, 0x0, 0x31, 0xc5, 0xe8, 0x4}}]}}]}}, 0x0)

0s ago: executing program 1 (id=1924):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}, 0x1, 0x7f00}, 0x0)

kernel console output (not intermixed with test programs):

0000000000000001
[  450.365046][T12128] R13: 00007f66547e6038 R14: 00007f66547e5fa0 R15: 00007fffd3b3e2e8
[  450.365085][T12128]  </TASK>
[  450.399308][T12116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.402818][  T980] m920x_read = error: -19
[  450.419183][T12116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.582294][ T5891] usb 5-1: new full-speed USB device number 64 using dummy_hcd
[  450.590971][  T980] dvb-usb: error while querying for an remote control event.
[  450.608089][ T5892] dvb-usb: error while querying for an remote control event.
[  450.650158][ T5892] usb 6-1: USB disconnect, device number 38
[  450.708644][  T980] m920x_read = error: -19
[  450.713211][  T980] dvb-usb: error while querying for an remote control event.
[  450.720902][T11604] m920x_read = error: -19
[  450.725282][T11604] dvb-usb: error while querying for an remote control event.
[  450.748057][ T5891] usb 5-1: device descriptor read/64, error -71
[  450.786459][ T5921] usb 7-1: USB disconnect, device number 30
[  450.840396][ T5892] m920x_read = error: -19
[  450.846562][ T5892] dvb-usb: error while querying for an remote control event.
[  450.859901][ T5891] usb usb5-port1: attempt power cycle
[  450.874095][ T5892] m920x_read = error: -19
[  450.885870][ T5892] dvb-usb: error while querying for an remote control event.
[  450.978596][ T5892] m920x_read = error: -19
[  450.983027][ T5892] dvb-usb: error while querying for an remote control event.
[  451.008079][ T5892] m920x_read = error: -19
[  451.012665][ T5892] dvb-usb: error while querying for an remote control event.
[  451.098123][T11604] m920x_read = error: -19
[  451.102612][T11604] dvb-usb: error while querying for an remote control event.
[  451.129034][T11604] m920x_read = error: -19
[  451.133459][T11604] dvb-usb: error while querying for an remote control event.
[  451.168019][ T5892] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  451.208090][ T5891] usb 5-1: new full-speed USB device number 65 using dummy_hcd
[  451.218097][   T10] m920x_read = error: -19
[  451.222486][   T10] dvb-usb: error while querying for an remote control event.
[  451.230960][ T5891] usb 5-1: device descriptor read/8, error -71
[  451.249424][   T10] m920x_read = error: -19
[  451.253976][   T10] dvb-usb: error while querying for an remote control event.
[  451.288026][ T5921] usb 7-1: new full-speed USB device number 31 using dummy_hcd
[  451.328372][ T5892] usb 2-1: Using ep0 maxpacket: 8
[  451.338133][   T10] m920x_read = error: -19
[  451.342530][   T10] dvb-usb: error while querying for an remote control event.
[  451.358254][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  451.372498][   T10] m920x_read = error: -19
[  451.376906][   T10] dvb-usb: error while querying for an remote control event.
[  451.384996][ T5892] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  451.394331][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.408754][ T5892] usb 2-1: config 0 descriptor??
[  451.425710][ T5892] gspca_main: vc032x-2.14.0 probing 046d:0892
[  451.450090][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  451.464222][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  451.475241][   T10] m920x_read = error: -19
[  451.475271][   T10] dvb-usb: error while querying for an remote control event.
[  451.488008][ T5891] usb 5-1: new full-speed USB device number 66 using dummy_hcd
[  451.500031][   T10] m920x_read = error: -19
[  451.504507][   T10] dvb-usb: error while querying for an remote control event.
[  451.528046][ T5921] usb 7-1: New USB device found, idVendor=0fb8, idProduct=1109, bcdDevice= 0.00
[  451.537182][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.549614][ T5891] usb 5-1: device descriptor read/8, error -71
[  451.557201][ T5921] usb 7-1: config 0 descriptor??
[  451.580124][T12139] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  451.590148][   T10] m920x_read = error: -19
[  451.594781][   T10] dvb-usb: error while querying for an remote control event.
[  451.628240][   T10] m920x_read = error: -19
[  451.632711][   T10] dvb-usb: error while querying for an remote control event.
[  451.660831][ T5891] usb usb5-port1: unable to enumerate USB device
[  451.725272][T12158] FAULT_INJECTION: forcing a failure.
[  451.725272][T12158] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  451.739035][T12158] CPU: 1 UID: 0 PID: 12158 Comm: syz.5.1807 Not tainted syzkaller #0 PREEMPT(full) 
[  451.739067][T12158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  451.739085][T12158] Call Trace:
[  451.739095][T12158]  <TASK>
[  451.739106][T12158]  dump_stack_lvl+0x189/0x250
[  451.739143][T12158]  ? __pfx____ratelimit+0x10/0x10
[  451.739179][T12158]  ? __pfx_dump_stack_lvl+0x10/0x10
[  451.739207][T12158]  ? __pfx__printk+0x10/0x10
[  451.739248][T12158]  should_fail_ex+0x414/0x560
[  451.739289][T12158]  _copy_from_user+0x2d/0xb0
[  451.739319][T12158]  __copy_msghdr+0x3c5/0x5b0
[  451.739358][T12158]  ___sys_sendmsg+0x1a5/0x2a0
[  451.739392][T12158]  ? __pfx____sys_sendmsg+0x10/0x10
[  451.739467][T12158]  ? __fget_files+0x2a/0x420
[  451.739494][T12158]  ? __fget_files+0x3a0/0x420
[  451.739529][T12158]  __x64_sys_sendmsg+0x19b/0x260
[  451.739564][T12158]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  451.739605][   T10] m920x_read = error: -19
[  451.739608][T12158]  ? __pfx_ksys_write+0x10/0x10
[  451.739636][T12158]  ? do_syscall_64+0xbe/0xfa0
[  451.739662][T12158]  do_syscall_64+0xfa/0xfa0
[  451.739684][T12158]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.739707][T12158]  ? clear_bhb_loop+0x60/0xb0
[  451.739740][T12158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.739765][T12158] RIP: 0033:0x7f188558f6c9
[  451.739791][T12158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  451.739813][T12158] RSP: 002b:00007f1886356038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  451.739849][T12158] RAX: ffffffffffffffda RBX: 00007f18857e5fa0 RCX: 00007f188558f6c9
[  451.739868][T12158] RDX: 0000000000000000 RSI: 000020000000b8c0 RDI: 0000000000000004
[  451.739885][T12158] RBP: 00007f1886356090 R08: 0000000000000000 R09: 0000000000000000
[  451.739902][T12158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.739918][T12158] R13: 00007f18857e6038 R14: 00007f18857e5fa0 R15: 00007ffdee884b48
[  451.739957][T12158]  </TASK>
[  451.913990][T12160] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1808'.
[  451.915889][ T5891] m920x_read = error: -19
[  451.937464][T12137] netlink: 'syz.1.1801': attribute type 1 has an invalid length.
[  451.940185][ T5891] dvb-usb: error while querying for an remote control event.
[  451.973057][T12137] netlink: 'syz.1.1801': attribute type 3 has an invalid length.
[  451.986672][T12137] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1801'.
[  451.991786][   T10] dvb-usb: error while querying for an remote control event.
[  452.038460][ T5892] gspca_vc032x: reg_w err -71
[  452.043807][ T5892] vc032x 2-1:0.0: probe with driver vc032x failed with error -71
[  452.050051][T12139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.052676][   T10] m920x_read = error: -19
[  452.065870][   T10] dvb-usb: error while querying for an remote control event.
[  452.080787][T12139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.089391][ T5892] usb 2-1: USB disconnect, device number 22
[  452.108215][   T10] m920x_read = error: -19
[  452.112806][   T10] dvb-usb: error while querying for an remote control event.
[  452.128947][ T5921] usbhid 7-1:0.0: can't add hid device: -71
[  452.155230][ T5921] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  452.178044][   T10] m920x_read = error: -19
[  452.182645][   T10] dvb-usb: error while querying for an remote control event.
[  452.206350][ T5921] usb 7-1: USB disconnect, device number 31
[  452.249762][   T10] m920x_read = error: -19
[  452.264509][   T10] dvb-usb: error while querying for an remote control event.
[  452.318122][   T10] m920x_read = error: -19
[  452.322605][   T10] dvb-usb: error while querying for an remote control event.
[  452.388093][   T10] m920x_read = error: -19
[  452.397946][   T10] dvb-usb: error while querying for an remote control event.
[  452.408080][ T5864] usb 6-1: new low-speed USB device number 39 using dummy_hcd
[  452.438090][   T10] m920x_read = error: -19
[  452.446440][   T10] dvb-usb: error while querying for an remote control event.
[  452.508886][ T5892] m920x_read = error: -19
[  452.513404][ T5892] dvb-usb: error while querying for an remote control event.
[  452.529567][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1812'.
[  452.538517][ T5864] usb 6-1: device descriptor read/64, error -71
[  452.568506][ T5892] m920x_read = error: -19
[  452.572930][ T5892] dvb-usb: error while querying for an remote control event.
[  452.628048][ T5892] m920x_read = error: -19
[  452.632510][ T5892] dvb-usb: error while querying for an remote control event.
[  452.698012][ T5892] m920x_read = error: -19
[  452.702518][ T5892] dvb-usb: error while querying for an remote control event.
[  452.748783][ T5892] m920x_read = error: -19
[  452.753253][ T5892] dvb-usb: error while querying for an remote control event.
[  452.780927][ T5864] usb 6-1: new low-speed USB device number 40 using dummy_hcd
[  452.818828][ T5892] m920x_read = error: -19
[  452.823244][ T5892] dvb-usb: error while querying for an remote control event.
[  452.878217][ T5892] m920x_read = error: -19
[  452.882698][ T5892] dvb-usb: error while querying for an remote control event.
[  452.890339][   T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  452.930009][ T5864] usb 6-1: device descriptor read/64, error -71
[  452.949251][ T5892] m920x_read = error: -19
[  452.954010][ T5892] dvb-usb: error while querying for an remote control event.
[  452.975443][T12182] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1814'.
[  453.018043][ T5892] m920x_read = error: -19
[  453.022477][ T5892] dvb-usb: error while querying for an remote control event.
[  453.049439][ T5864] usb usb6-port1: attempt power cycle
[  453.068062][ T5892] m920x_read = error: -19
[  453.072477][ T5892] dvb-usb: error while querying for an remote control event.
[  453.080575][   T10] usb 2-1: Using ep0 maxpacket: 8
[  453.097079][   T10] usb 2-1: config index 0 descriptor too short (expected 241, got 203)
[  453.107939][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  453.121749][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  453.136488][   T10] usb 2-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da
[  453.145931][ T5892] m920x_read = error: -19
[  453.149180][ T5921] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  453.151273][ T5892] dvb-usb: error while querying for an remote control event.
[  453.167103][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.179087][   T10] usb 2-1: config 0 descriptor??
[  453.208089][   T10] m920x_read = error: -19
[  453.212522][   T10] dvb-usb: error while querying for an remote control event.
[  453.254791][T12186] FAULT_INJECTION: forcing a failure.
[  453.254791][T12186] name failslab, interval 1, probability 0, space 0, times 0
[  453.269989][T12186] CPU: 0 UID: 0 PID: 12186 Comm: syz.6.1816 Not tainted syzkaller #0 PREEMPT(full) 
[  453.270018][T12186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  453.270032][T12186] Call Trace:
[  453.270041][T12186]  <TASK>
[  453.270052][T12186]  dump_stack_lvl+0x189/0x250
[  453.270086][T12186]  ? __pfx____ratelimit+0x10/0x10
[  453.270120][T12186]  ? __pfx_dump_stack_lvl+0x10/0x10
[  453.270148][T12186]  ? __pfx__printk+0x10/0x10
[  453.270181][T12186]  ? __pfx___might_resched+0x10/0x10
[  453.270206][T12186]  ? fs_reclaim_acquire+0x7d/0x100
[  453.270243][T12186]  should_fail_ex+0x414/0x560
[  453.270284][T12186]  should_failslab+0xa8/0x100
[  453.270320][T12186]  kmem_cache_alloc_node_noprof+0x8c/0x710
[  453.270351][T12186]  ? __alloc_skb+0x112/0x2d0
[  453.270387][T12186]  __alloc_skb+0x112/0x2d0
[  453.270422][T12186]  alloc_skb_with_frags+0xca/0x890
[  453.270460][T12186]  ? save_netdev_trace_buffer+0x4b5/0x5a0
[  453.270495][T12186]  sock_alloc_send_pskb+0x84d/0x980
[  453.270537][T12186]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  453.270565][T12186]  ? dev_getfirstbyhwtype+0x24/0x290
[  453.270592][T12186]  ? dev_getfirstbyhwtype+0x24/0x290
[  453.270616][T12186]  ? dev_getfirstbyhwtype+0x24/0x290
[  453.270643][T12186]  ? dev_getfirstbyhwtype+0x250/0x290
[  453.270681][T12186]  dgram_sendmsg+0x3fe/0xe80
[  453.270716][T12186]  ? __pfx_dgram_sendmsg+0x10/0x10
[  453.270749][T12186]  ? __lock_acquire+0xab9/0xd20
[  453.270771][T12186]  ? aa_sock_msg_perm+0xf1/0x1d0
[  453.270803][T12186]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  453.270834][T12186]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  453.270865][T12186]  __sock_sendmsg+0x21c/0x270
[  453.270895][T12186]  ____sys_sendmsg+0x505/0x870
[  453.270935][T12186]  ? __pfx_____sys_sendmsg+0x10/0x10
[  453.270979][T12186]  ? import_iovec+0x74/0xa0
[  453.271012][T12186]  ___sys_sendmsg+0x21f/0x2a0
[  453.271061][T12186]  ? __pfx____sys_sendmsg+0x10/0x10
[  453.271132][T12186]  ? __fget_files+0x2a/0x420
[  453.271159][T12186]  ? __fget_files+0x3a0/0x420
[  453.271195][T12186]  __x64_sys_sendmsg+0x19b/0x260
[  453.271232][T12186]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  453.271276][T12186]  ? __pfx_ksys_write+0x10/0x10
[  453.271302][T12186]  ? do_syscall_64+0xbe/0xfa0
[  453.271329][T12186]  do_syscall_64+0xfa/0xfa0
[  453.271352][T12186]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.271374][T12186]  ? clear_bhb_loop+0x60/0xb0
[  453.271402][T12186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.271425][T12186] RIP: 0033:0x7f4afd18f6c9
[  453.271446][T12186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  453.271465][T12186] RSP: 002b:00007f4afe0a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  453.271489][T12186] RAX: ffffffffffffffda RBX: 00007f4afd3e5fa0 RCX: 00007f4afd18f6c9
[  453.271507][T12186] RDX: 0000000000000000 RSI: 000020000000b8c0 RDI: 0000000000000004
[  453.271521][T12186] RBP: 00007f4afe0a3090 R08: 0000000000000000 R09: 0000000000000000
[  453.271536][T12186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  453.271550][T12186] R13: 00007f4afd3e6038 R14: 00007f4afd3e5fa0 R15: 00007fff000ab3c8
[  453.271585][T12186]  </TASK>
[  453.328018][ T5921] usb 5-1: Using ep0 maxpacket: 8
[  453.329690][   T10] m920x_read = error: -19
[  453.374593][ T5921] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  453.380348][   T10] dvb-usb: error while querying for an remote control event.
[  453.391005][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.391036][ T5921] usb 5-1: Product: syz
[  453.391052][ T5921] usb 5-1: Manufacturer: syz
[  453.414869][ T5891] m920x_read = error: -19
[  453.421778][ T5864] usb 6-1: new low-speed USB device number 41 using dummy_hcd
[  453.427460][ T5891] dvb-usb: error while querying for an remote control event.
[  453.447615][T12177] syzkaller1: entered promiscuous mode
[  453.558390][ T5891] m920x_read = error: -19
[  453.583200][ T5921] usb 5-1: SerialNumber: syz
[  453.590378][   T10] m920x_read = error: -19
[  453.609487][ T5864] usb 6-1: device descriptor read/8, error -71
[  453.615097][T12188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  453.649261][T12177] syzkaller1: entered allmulticast mode
[  453.656679][   T10] dvb-usb: error while querying for an remote control event.
[  453.703006][ T5891] dvb-usb: error while querying for an remote control event.
[  453.717583][T12188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  453.753187][T12177] netlink: 'syz.1.1812': attribute type 16 has an invalid length.
[  453.786542][T12177] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1812'.
[  453.818057][   T10] m920x_read = error: -19
[  453.822563][   T10] dvb-usb: error while querying for an remote control event.
[  453.830208][ T5891] m920x_read = error: -19
[  453.834594][ T5891] dvb-usb: error while querying for an remote control event.
[  453.858064][ T5864] usb 6-1: new low-speed USB device number 42 using dummy_hcd
[  453.878837][ T5864] usb 6-1: device descriptor read/8, error -71
[  453.891858][ T5932] usb 2-1: USB disconnect, device number 23
[  453.938066][ T5891] m920x_read = error: -19
[  453.942738][ T5891] dvb-usb: error while querying for an remote control event.
[  453.950460][ T5892] m920x_read = error: -19
[  453.955041][ T5892] dvb-usb: error while querying for an remote control event.
[  453.998111][   T10] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  454.032971][ T5864] usb usb6-port1: unable to enumerate USB device
[  454.080451][ T5891] m920x_read = error: -19
[  454.084868][ T5891] dvb-usb: error while querying for an remote control event.
[  454.092541][ T5892] m920x_read = error: -19
[  454.096914][ T5892] dvb-usb: error while querying for an remote control event.
[  454.170952][ T5921] mxuport 5-1:254.0: Direct firmware load for moxa/moxa-1450.fw failed with error -2
[  454.184166][ T5921] mxuport 5-1:254.0: Falling back to sysfs fallback for: moxa/moxa-1450.fw
[  454.199646][   T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  454.207692][   T10] usb 7-1: config 0 has no interface number 0
[  454.214437][ T5892] m920x_read = error: -19
[  454.219251][   T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  454.230300][ T5892] dvb-usb: error while querying for an remote control event.
[  454.237803][ T5892] m920x_read = error: -19
[  454.242720][   T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  454.254545][ T5892] dvb-usb: error while querying for an remote control event.
[  454.262076][   T10] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  454.271361][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.282728][   T10] usb 7-1: config 0 descriptor??
[  454.348155][ T5892] m920x_read = error: -19
[  454.352665][ T5892] dvb-usb: error while querying for an remote control event.
[  454.388033][ T5892] m920x_read = error: -19
[  454.392546][ T5892] dvb-usb: error while querying for an remote control event.
[  454.480194][ T5891] m920x_read = error: -19
[  454.484652][ T5891] dvb-usb: error while querying for an remote control event.
[  454.511931][ T5892] m920x_read = error: -19
[  454.516366][ T5892] dvb-usb: error while querying for an remote control event.
[  454.530511][T12190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  454.548615][T12190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  454.558938][T12190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  454.568312][T12190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  454.648055][ T5892] m920x_read = error: -19
[  454.652658][ T5892] dvb-usb: error while querying for an remote control event.
[  454.660599][ T5891] m920x_read = error: -19
[  454.665030][ T5891] dvb-usb: error while querying for an remote control event.
[  454.788301][ T5892] m920x_read = error: -19
[  454.792707][ T5892] dvb-usb: error while querying for an remote control event.
[  454.800551][T11604] m920x_read = error: -19
[  454.804918][T11604] dvb-usb: error while querying for an remote control event.
[  454.821850][   T10] input: HID 04d9:a055 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:04D9:A055.0023/input/input39
[  454.878119][ T5891] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  454.928019][   T10] holtek_kbd 0003:04D9:A055.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.6-1/input1
[  454.940609][T11604] m920x_read = error: -19
[  454.944988][T11604] dvb-usb: error while querying for an remote control event.
[  454.952660][ T5892] m920x_read = error: -19
[  454.957042][ T5892] dvb-usb: error while querying for an remote control event.
[  454.997051][ T5864] usb 7-1: USB disconnect, device number 32
[  455.048333][ T5891] usb 2-1: Using ep0 maxpacket: 16
[  455.062219][ T5891] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  455.071439][ T5891] usb 2-1: config 0 has no interface number 0
[  455.079011][T11604] m920x_read = error: -19
[  455.085578][ T5891] usb 2-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=79.9a
[  455.096551][T11604] dvb-usb: error while querying for an remote control event.
[  455.104653][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.113011][ T5892] m920x_read = error: -19
[  455.117410][ T5892] dvb-usb: error while querying for an remote control event.
[  455.125759][ T5891] usb 2-1: Product: syz
[  455.130716][ T5891] usb 2-1: Manufacturer: syz
[  455.135496][ T5891] usb 2-1: SerialNumber: syz
[  455.144650][ T5891] usb 2-1: config 0 descriptor??
[  455.241310][ T5892] m920x_read = error: -19
[  455.246133][ T5892] dvb-usb: error while querying for an remote control event.
[  455.253898][T11604] m920x_read = error: -19
[  455.258669][T11604] dvb-usb: error while querying for an remote control event.
[  455.352545][T12195] netlink: 'syz.1.1818': attribute type 10 has an invalid length.
[  455.361772][T12195] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.369706][T12195] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.377800][ T5892] m920x_read = error: -19
[  455.382470][ T5892] dvb-usb: error while querying for an remote control event.
[  455.391267][   T10] m920x_read = error: -19
[  455.395057][T12195] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.395788][   T10] dvb-usb: error while querying for an remote control event.
[  455.403166][T12195] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.403658][T12195] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.413869][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1818'.
[  455.418463][T12195] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.453843][T12195] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  455.467439][T12201] bridge_slave_1: left allmulticast mode
[  455.473441][T12195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.473907][T12195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.491762][T12201] bridge_slave_1: left promiscuous mode
[  455.497632][T12201] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.507518][T12201] bridge_slave_0: left allmulticast mode
[  455.514885][T12201] bridge_slave_0: left promiscuous mode
[  455.522648][T12201] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.528492][ T5892] m920x_read = error: -19
[  455.534344][ T5892] dvb-usb: error while querying for an remote control event.
[  455.542464][ T5912] m920x_read = error: -19
[  455.546848][ T5912] dvb-usb: error while querying for an remote control event.
[  455.588081][T12201] bond0: (slave bridge0): Releasing backup interface
[  455.609913][   T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  455.658151][ T5892] m920x_read = error: -19
[  455.662793][ T5892] dvb-usb: error while querying for an remote control event.
[  455.670698][ T5912] m920x_read = error: -19
[  455.675797][ T5912] dvb-usb: error while querying for an remote control event.
[  455.732561][ T5891] quatech2 2-1:0.188: Quatech 2nd gen USB to Serial Driver converter detected
[  455.748058][ T5891] usb 2-1: qt2_attach - failed to power on unit: -71
[  455.764525][ T5891] quatech2 2-1:0.188: probe with driver quatech2 failed with error -71
[  455.777637][ T5891] usb 2-1: USB disconnect, device number 24
[  455.788414][   T10] usb 6-1: Using ep0 maxpacket: 8
[  455.796137][   T10] usb 6-1: config index 0 descriptor too short (expected 241, got 203)
[  455.810031][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.820876][ T5912] m920x_read = error: -19
[  455.825284][ T5912] dvb-usb: error while querying for an remote control event.
[  455.833734][ T5892] m920x_read = error: -19
[  455.841844][ T5892] dvb-usb: error while querying for an remote control event.
[  455.850332][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  455.863801][   T10] usb 6-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da
[  455.870394][ T5932] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  455.873318][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.906467][   T10] usb 6-1: config 0 descriptor??
[  455.969079][   T10] m920x_read = error: -19
[  455.974439][   T10] dvb-usb: error while querying for an remote control event.
[  455.982215][ T5891] m920x_read = error: -19
[  455.987725][ T5891] dvb-usb: error while querying for an remote control event.
[  456.078205][ T5932] usb 7-1: Using ep0 maxpacket: 8
[  456.087048][ T5932] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  456.108116][ T5932] usb 7-1: config 179 has no interface number 0
[  456.114463][ T5932] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  456.143064][   T10] m920x_read = error: -19
[  456.144489][T12200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.147479][   T10] dvb-usb: error while querying for an remote control event.
[  456.167985][ T5892] m920x_read = error: -19
[  456.168404][ T5932] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  456.172455][ T5892] dvb-usb: error while querying for an remote control event.
[  456.198423][T12200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  456.247663][ T5864] usb 6-1: USB disconnect, device number 43
[  456.254036][ T5932] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  456.281637][ T5891] m920x_read = error: -19
[  456.286242][ T5891] dvb-usb: error while querying for an remote control event.
[  456.306517][ T5932] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  456.328617][ T5891] m920x_read = error: -19
[  456.340443][ T5932] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  456.341739][ T5891] dvb-usb: error while querying for an remote control event.
[  456.367978][ T5932] usb 7-1: config 179 interface 65 has no altsetting 0
[  456.385391][ T5932] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  456.408142][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.418762][ T5891] m920x_read = error: -19
[  456.428867][ T5891] dvb-usb: error while querying for an remote control event.
[  456.490039][ T5932] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input40
[  456.508102][ T5891] m920x_read = error: -19
[  456.512581][ T5891] dvb-usb: error while querying for an remote control event.
[  456.558201][ T5180] input input40: unable to receive magic message: -110
[  456.571528][   T10] m920x_read = error: -19
[  456.589053][   T10] dvb-usb: error while querying for an remote control event.
[  456.620776][ T5180] input input40: unable to receive magic message: -32
[  456.644950][ T5180] input input40: unable to receive magic message: -32
[  456.658657][ T5891] m920x_read = error: -19
[  456.663213][ T5891] dvb-usb: error while querying for an remote control event.
[  456.683350][T12205] pim6reg1: entered promiscuous mode
[  456.688878][T12205] pim6reg1: entered allmulticast mode
[  456.721068][ T5891] m920x_read = error: -19
[  456.725620][ T5891] dvb-usb: error while querying for an remote control event.
[  456.734878][ T5180] input input40: unable to receive magic message: -32
[  456.755953][ T5180] input input40: unable to receive magic message: -32
[  456.768049][ T5180] input input40: unable to receive magic message: -32
[  456.809488][ T5891] m920x_read = error: -19
[  456.813905][ T5891] dvb-usb: error while querying for an remote control event.
[  456.824153][   T10] usb 7-1: USB disconnect, device number 33
[  456.824220][    C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  456.862474][ T5892] m920x_read = error: -19
[  456.866886][ T5892] dvb-usb: error while querying for an remote control event.
[  456.988012][ T5892] m920x_read = error: -19
[  456.992427][ T5892] dvb-usb: error while querying for an remote control event.
[  457.000510][ T5912] m920x_read = error: -19
[  457.004892][ T5912] dvb-usb: error while querying for an remote control event.
[  457.083876][T12235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.094997][T12235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.148245][   T10] m920x_read = error: -19
[  457.152933][   T10] dvb-usb: error while querying for an remote control event.
[  457.160748][ T5912] m920x_read = error: -19
[  457.165152][ T5912] dvb-usb: error while querying for an remote control event.
[  457.278193][ T5912] m920x_read = error: -19
[  457.282638][ T5912] dvb-usb: error while querying for an remote control event.
[  457.290894][   T10] m920x_read = error: -19
[  457.295334][   T10] dvb-usb: error while querying for an remote control event.
[  457.308126][ T5925] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  457.318153][ T5932] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  457.408104][   T10] m920x_read = error: -19
[  457.418244][   T10] dvb-usb: error while querying for an remote control event.
[  457.434651][   T10] m920x_read = error: -19
[  457.448019][   T10] dvb-usb: error while querying for an remote control event.
[  457.458345][ T5925] usb 6-1: Using ep0 maxpacket: 32
[  457.467098][ T5925] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  457.476186][ T5925] usb 6-1: config 0 has no interface number 0
[  457.482888][ T5925] usb 6-1: config 0 interface 12 has no altsetting 0
[  457.490907][ T5932] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  457.501789][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0
[  457.508866][ T5932] usb 2-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.00
[  457.518127][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.526873][ T5925] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  457.537269][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.546797][ T5932] usb 2-1: config 0 descriptor??
[  457.548217][   T10] m920x_read = error: -19
[  457.552183][ T5925] usb 6-1: Product: syz
[  457.566582][   T10] dvb-usb: error while querying for an remote control event.
[  457.567418][ T5925] usb 6-1: Manufacturer: syz
[  457.574448][ T5912] m920x_read = error: -19
[  457.580137][ T5925] usb 6-1: SerialNumber: syz
[  457.587734][ T5912] dvb-usb: error while querying for an remote control event.
[  457.598645][ T5925] usb 6-1: config 0 descriptor??
[  457.607462][ T5925] f81534 6-1:0.12: required endpoints missing
[  457.688151][ T5871] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  457.690931][ T5912] m920x_read = error: -19
[  457.700200][ T5912] dvb-usb: error while querying for an remote control event.
[  457.707669][ T5912] m920x_read = error: -19
[  457.712161][ T5912] dvb-usb: error while querying for an remote control event.
[  457.773159][ T5932] usbhid 2-1:0.0: can't add hid device: -71
[  457.779399][ T5932] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  457.790332][ T5932] usb 2-1: USB disconnect, device number 25
[  457.808042][ T5912] m920x_read = error: -19
[  457.811767][ T5925] usb 6-1: USB disconnect, device number 44
[  457.812677][ T5912] dvb-usb: error while querying for an remote control event.
[  457.830075][   T10] m920x_read = error: -19
[  457.834500][   T10] dvb-usb: error while querying for an remote control event.
[  457.848358][ T5871] usb 7-1: Using ep0 maxpacket: 16
[  457.856027][ T5871] usb 7-1: config 0 has an invalid interface number: 64 but max is 0
[  457.868013][ T5871] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  457.880163][ T5871] usb 7-1: config 0 has no interface number 0
[  457.886306][ T5871] usb 7-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b
[  457.895446][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.906297][ T5871] usb 7-1: config 0 descriptor??
[  457.916880][ T5871] uvcvideo 7-1:0.64: Found UVC 0.00 device <unnamed> (0bd3:05f4)
[  457.925343][ T5871] uvcvideo 7-1:0.64: No valid video chain found.
[  457.948185][   T10] m920x_read = error: -19
[  457.952633][   T10] dvb-usb: error while querying for an remote control event.
[  457.960678][ T5912] m920x_read = error: -19
[  457.965045][ T5912] dvb-usb: error while querying for an remote control event.
[  458.078485][ T5912] m920x_read = error: -19
[  458.082898][ T5912] dvb-usb: error while querying for an remote control event.
[  458.090499][ T5892] m920x_read = error: -19
[  458.094866][ T5892] dvb-usb: error while querying for an remote control event.
[  458.181754][ T5925] usb 7-1: USB disconnect, device number 34
[  458.209426][ T5892] m920x_read = error: -19
[  458.213908][ T5892] dvb-usb: error while querying for an remote control event.
[  458.223755][ T5912] m920x_read = error: -19
[  458.229417][ T5912] dvb-usb: error while querying for an remote control event.
[  458.338047][ T5892] m920x_read = error: -19
[  458.342475][ T5892] dvb-usb: error while querying for an remote control event.
[  458.351089][ T5912] m920x_read = error: -19
[  458.355470][ T5912] dvb-usb: error while querying for an remote control event.
[  458.457615][T12248] random: crng reseeded on system resumption
[  458.469579][ T5912] m920x_read = error: -19
[  458.473996][ T5912] dvb-usb: error while querying for an remote control event.
[  458.481846][ T5892] m920x_read = error: -19
[  458.486214][ T5892] dvb-usb: error while querying for an remote control event.
[  458.588163][ T5912] m920x_read = error: -19
[  458.592624][ T5912] dvb-usb: error while querying for an remote control event.
[  458.600615][ T5892] m920x_read = error: -19
[  458.605006][ T5892] dvb-usb: error while querying for an remote control event.
[  458.638044][ T5932] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  458.718239][   T10] m920x_read = error: -19
[  458.722664][   T10] dvb-usb: error while querying for an remote control event.
[  458.730355][ T5891] m920x_read = error: -19
[  458.734745][ T5891] dvb-usb: error while querying for an remote control event.
[  458.772293][T12251] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0
[  458.779604][T12251] binder: 12250:12251 ioctl 4018620d 200000004a80 returned -1
[  458.789030][ T5932] usb 2-1: Using ep0 maxpacket: 8
[  458.796764][ T5932] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15
[  458.806247][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xED, changing to 0x8D
[  458.818005][ T5892] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  458.819401][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  458.840701][ T5932] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  458.861201][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.870606][ T5932] usb 2-1: Product: syz
[  458.875224][ T5932] usb 2-1: Manufacturer: syz
[  458.878678][ T5891] m920x_read = error: -19
[  458.880035][ T5932] usb 2-1: SerialNumber: syz
[  458.892495][  T980] m920x_read = error: -19
[  458.896971][  T980] dvb-usb: error while querying for an remote control event.
[  458.906255][ T5932] usb 2-1: config 0 descriptor??
[  458.908681][ T5891] dvb-usb: error while querying for an remote control event.
[  458.928924][ T5932] powermate 2-1:0.0: probe with driver powermate failed with error -5
[  458.989901][ T5892] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  459.002005][ T5892] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  459.012935][ T5892] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  459.022657][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  459.030900][ T5891] m920x_read = error: -19
[  459.035708][ T5892] usb 6-1: SerialNumber: syz
[  459.040903][ T5891] dvb-usb: error while querying for an remote control event.
[  459.048585][  T980] m920x_read = error: -19
[  459.052958][  T980] dvb-usb: error while querying for an remote control event.
[  459.126655][  T980] usb 2-1: USB disconnect, device number 26
[  459.180045][ T5891] m920x_read = error: -19
[  459.184661][ T5891] dvb-usb: error while querying for an remote control event.
[  459.193084][   T10] m920x_read = error: -19
[  459.198763][   T10] dvb-usb: error while querying for an remote control event.
[  459.308232][ T5891] m920x_read = error: -19
[  459.312788][ T5891] dvb-usb: error while querying for an remote control event.
[  459.323103][   T10] m920x_read = error: -19
[  459.327559][   T10] dvb-usb: error while querying for an remote control event.
[  459.458452][   T10] m920x_read = error: -19
[  459.462980][   T10] dvb-usb: error while querying for an remote control event.
[  459.470542][ T5891] m920x_read = error: -19
[  459.474946][ T5891] dvb-usb: error while querying for an remote control event.
[  459.598037][ T5891] m920x_read = error: -19
[  459.602533][ T5891] dvb-usb: error while querying for an remote control event.
[  459.610284][   T10] m920x_read = error: -19
[  459.614665][   T10] dvb-usb: error while querying for an remote control event.
[  459.658226][ T5932] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  459.728662][ T5891] m920x_read = error: -19
[  459.733124][ T5891] dvb-usb: error while querying for an remote control event.
[  459.741344][   T10] m920x_read = error: -19
[  459.745758][   T10] dvb-usb: error while querying for an remote control event.
[  459.808136][ T5932] usb 7-1: Using ep0 maxpacket: 16
[  459.817166][ T5932] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  459.831383][ T5932] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  459.841595][ T5932] usb 7-1: config 0 interface 0 has no altsetting 0
[  459.848387][ T5932] usb 7-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  459.857519][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.868196][ T5891] m920x_read = error: -19
[  459.872858][ T5891] dvb-usb: error while querying for an remote control event.
[  459.873447][ T5932] usb 7-1: config 0 descriptor??
[  459.880689][  T980] m920x_read = error: -19
[  459.897980][  T980] dvb-usb: error while querying for an remote control event.
[  459.948001][   T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  460.009782][  T980] m920x_read = error: -19
[  460.014223][  T980] dvb-usb: error while querying for an remote control event.
[  460.022203][ T5891] m920x_read = error: -19
[  460.026616][ T5891] dvb-usb: error while querying for an remote control event.
[  460.111273][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  460.133095][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  460.143235][ T5891] m920x_read = error: -19
[  460.147647][ T5891] dvb-usb: error while querying for an remote control event.
[  460.155380][  T980] m920x_read = error: -19
[  460.160300][  T980] dvb-usb: error while querying for an remote control event.
[  460.170371][   T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  460.180998][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  460.198104][   T10] usb 2-1: SerialNumber: syz
[  460.269204][ T5891] m920x_read = error: -19
[  460.273830][ T5891] dvb-usb: error while querying for an remote control event.
[  460.281596][  T980] m920x_read = error: -19
[  460.291754][  T980] dvb-usb: error while querying for an remote control event.
[  460.331983][ T5932] zeroplus 0003:0C12:0005.0024: collection stack underflow
[  460.342140][ T5932] zeroplus 0003:0C12:0005.0024: item 0 4 0 12 parsing failed
[  460.351075][ T5932] zeroplus 0003:0C12:0005.0024: parse failed
[  460.357214][ T5932] zeroplus 0003:0C12:0005.0024: probe with driver zeroplus failed with error -22
[  460.398291][  T980] m920x_read = error: -19
[  460.403160][  T980] dvb-usb: error while querying for an remote control event.
[  460.418373][  T980] m920x_read = error: -19
[  460.423017][  T980] dvb-usb: error while querying for an remote control event.
[  460.518147][  T980] m920x_read = error: -19
[  460.534392][T12259] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1840'.
[  460.543932][  T980] dvb-usb: error while querying for an remote control event.
[  460.551703][ T5891] m920x_read = error: -19
[  460.556335][ T5891] dvb-usb: error while querying for an remote control event.
[  460.668305][ T5891] m920x_read = error: -19
[  460.672860][ T5891] dvb-usb: error while querying for an remote control event.
[  460.680536][  T980] m920x_read = error: -19
[  460.684972][  T980] dvb-usb: error while querying for an remote control event.
[  460.798668][T12261] loop6: detected capacity change from 0 to 91
[  460.808197][ T5891] m920x_read = error: -19
[  460.812757][ T5891] dvb-usb: error while querying for an remote control event.
[  460.820048][T12261] Buffer I/O error on dev loop6, logical block 11, async page read
[  460.820586][  T980] m920x_read = error: -19
[  460.847720][T12261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  460.857803][T12261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.889256][  T980] dvb-usb: error while querying for an remote control event.
[  460.894082][ T5932] usb 7-1: USB disconnect, device number 35
[  460.912456][   T10] usb 2-1: 0:2 : does not exist
[  460.962810][   T10] usb 2-1: USB disconnect, device number 27
[  460.993304][ T6236] udevd[6236]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  461.000292][  T980] m920x_read = error: -19
[  461.014978][  T980] dvb-usb: error while querying for an remote control event.
[  461.024356][ T5891] m920x_read = error: -19
[  461.033592][ T5891] dvb-usb: error while querying for an remote control event.
[  461.148193][ T5891] m920x_read = error: -19
[  461.152687][ T5891] dvb-usb: error while querying for an remote control event.
[  461.161063][  T980] m920x_read = error: -19
[  461.165483][  T980] dvb-usb: error while querying for an remote control event.
[  461.278582][  T980] m920x_read = error: -19
[  461.283177][  T980] dvb-usb: error while querying for an remote control event.
[  461.290837][   T10] m920x_read = error: -19
[  461.295281][   T10] dvb-usb: error while querying for an remote control event.
[  461.408888][   T10] m920x_read = error: -19
[  461.413303][   T10] dvb-usb: error while querying for an remote control event.
[  461.420972][  T980] m920x_read = error: -19
[  461.425529][  T980] dvb-usb: error while querying for an remote control event.
[  461.538357][  T980] m920x_read = error: -19
[  461.542837][  T980] dvb-usb: error while querying for an remote control event.
[  461.550465][   T10] m920x_read = error: -19
[  461.555269][   T10] dvb-usb: error while querying for an remote control event.
[  461.708688][  T980] m920x_read = error: -19
[  461.713097][  T980] dvb-usb: error while querying for an remote control event.
[  461.720831][   T10] m920x_read = error: -19
[  461.725246][   T10] dvb-usb: error while querying for an remote control event.
[  461.809494][ T5932] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  461.838032][   T10] m920x_read = error: -19
[  461.842442][   T10] dvb-usb: error while querying for an remote control event.
[  461.850077][ T5891] m920x_read = error: -19
[  461.854496][ T5891] dvb-usb: error while querying for an remote control event.
[  461.888033][  T980] usb 7-1: new full-speed USB device number 36 using dummy_hcd
[  461.948041][ T5932] usb 2-1: device descriptor read/64, error -71
[  461.968412][ T5891] m920x_read = error: -19
[  461.972917][ T5891] dvb-usb: error while querying for an remote control event.
[  461.981666][   T10] m920x_read = error: -19
[  461.986081][   T10] dvb-usb: error while querying for an remote control event.
[  462.060292][  T980] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[  462.069400][  T980] usb 7-1: config 0 has no interface number 0
[  462.078404][  T980] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  462.087559][  T980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.095804][  T980] usb 7-1: Product: syz
[  462.100275][   T10] m920x_read = error: -19
[  462.104678][   T10] dvb-usb: error while querying for an remote control event.
[  462.112290][  T980] usb 7-1: Manufacturer: syz
[  462.116957][  T980] usb 7-1: SerialNumber: syz
[  462.121757][ T5891] m920x_read = error: -19
[  462.126186][ T5891] dvb-usb: error while querying for an remote control event.
[  462.136747][  T980] usb 7-1: config 0 descriptor??
[  462.198106][ T5932] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  462.238735][ T5891] m920x_read = error: -19
[  462.243128][ T5891] dvb-usb: error while querying for an remote control event.
[  462.250786][   T10] m920x_read = error: -19
[  462.255217][   T10] dvb-usb: error while querying for an remote control event.
[  462.328123][ T5932] usb 2-1: device descriptor read/64, error -71
[  462.368122][   T10] m920x_read = error: -19
[  462.372980][   T10] dvb-usb: error while querying for an remote control event.
[  462.380692][ T5891] m920x_read = error: -19
[  462.385106][ T5891] dvb-usb: error while querying for an remote control event.
[  462.441479][ T5932] usb usb2-port1: attempt power cycle
[  462.508095][ T5891] m920x_read = error: -19
[  462.512582][ T5891] dvb-usb: error while querying for an remote control event.
[  462.520205][   T10] m920x_read = error: -19
[  462.524616][   T10] dvb-usb: error while querying for an remote control event.
[  462.638155][ T5891] m920x_read = error: -19
[  462.642748][ T5891] dvb-usb: error while querying for an remote control event.
[  462.650386][   T10] m920x_read = error: -19
[  462.654817][   T10] dvb-usb: error while querying for an remote control event.
[  462.752744][  T980] asix 7-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  462.763476][  T980] asix 7-1:0.251: probe with driver asix failed with error -524
[  462.771641][   T10] m920x_read = error: -19
[  462.776054][   T10] dvb-usb: error while querying for an remote control event.
[  462.780375][ T5932] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  462.783851][ T5891] m920x_read = error: -19
[  462.783878][ T5891] dvb-usb: error while querying for an remote control event.
[  462.828676][ T5932] usb 2-1: device descriptor read/8, error -71
[  462.899310][   T10] m920x_read = error: -19
[  462.903699][   T10] dvb-usb: error while querying for an remote control event.
[  462.911385][  T980] m920x_read = error: -19
[  462.915802][  T980] dvb-usb: error while querying for an remote control event.
[  462.955094][  T980] usb 7-1: USB disconnect, device number 36
[  463.028227][   T10] m920x_read = error: -19
[  463.032719][   T10] dvb-usb: error while querying for an remote control event.
[  463.040360][ T5891] m920x_read = error: -19
[  463.044786][ T5891] dvb-usb: error while querying for an remote control event.
[  463.068019][ T5932] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  463.089964][ T5932] usb 2-1: device descriptor read/8, error -71
[  463.158060][  T980] m920x_read = error: -19
[  463.162467][  T980] dvb-usb: error while querying for an remote control event.
[  463.170100][  T980] m920x_read = error: -19
[  463.174498][  T980] dvb-usb: error while querying for an remote control event.
[  463.199158][ T5932] usb usb2-port1: unable to enumerate USB device
[  463.278846][  T980] m920x_read = error: -19
[  463.283314][  T980] dvb-usb: error while querying for an remote control event.
[  463.291031][ T5891] m920x_read = error: -19
[  463.295819][ T5891] dvb-usb: error while querying for an remote control event.
[  463.418444][ T5891] m920x_read = error: -19
[  463.422876][ T5891] dvb-usb: error while querying for an remote control event.
[  463.431134][  T980] m920x_read = error: -19
[  463.435552][  T980] dvb-usb: error while querying for an remote control event.
[  463.551791][  T980] m920x_read = error: -19
[  463.556266][  T980] dvb-usb: error while querying for an remote control event.
[  463.563883][ T5891] m920x_read = error: -19
[  463.578273][ T5891] dvb-usb: error while querying for an remote control event.
[  463.614643][T12278] FAULT_INJECTION: forcing a failure.
[  463.614643][T12278] name failslab, interval 1, probability 0, space 0, times 0
[  463.627475][T12278] CPU: 1 UID: 0 PID: 12278 Comm: syz.6.1849 Not tainted syzkaller #0 PREEMPT(full) 
[  463.627507][T12278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  463.627522][T12278] Call Trace:
[  463.627531][T12278]  <TASK>
[  463.627541][T12278]  dump_stack_lvl+0x189/0x250
[  463.627582][T12278]  ? __pfx____ratelimit+0x10/0x10
[  463.627622][T12278]  ? __pfx_dump_stack_lvl+0x10/0x10
[  463.627650][T12278]  ? __pfx__printk+0x10/0x10
[  463.627673][T12278]  ? __pfx___might_resched+0x10/0x10
[  463.627692][T12278]  ? fs_reclaim_acquire+0x7d/0x100
[  463.627731][T12278]  should_fail_ex+0x414/0x560
[  463.627770][T12278]  should_failslab+0xa8/0x100
[  463.627808][T12278]  kmem_cache_alloc_noprof+0x88/0x700
[  463.627838][T12278]  ? getname_flags+0xb8/0x540
[  463.627872][T12278]  getname_flags+0xb8/0x540
[  463.627902][T12278]  __x64_sys_mknod+0x79/0xa0
[  463.627937][T12278]  do_syscall_64+0xfa/0xfa0
[  463.627958][T12278]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.627981][T12278]  ? clear_bhb_loop+0x60/0xb0
[  463.628007][T12278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  463.628029][T12278] RIP: 0033:0x7f4afd18f6c9
[  463.628049][T12278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  463.628069][T12278] RSP: 002b:00007f4afe0a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  463.628095][T12278] RAX: ffffffffffffffda RBX: 00007f4afd3e5fa0 RCX: 00007f4afd18f6c9
[  463.628112][T12278] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000000080
[  463.628125][T12278] RBP: 00007f4afe0a3090 R08: 0000000000000000 R09: 0000000000000000
[  463.628139][T12278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  463.628154][T12278] R13: 00007f4afd3e6038 R14: 00007f4afd3e5fa0 R15: 00007fff000ab3c8
[  463.628179][T12278]  </TASK>
[  463.689433][  T980] m920x_read = error: -19
[  463.818190][ T5891] m920x_read = error: -19
[  463.822651][ T5891] dvb-usb: error while querying for an remote control event.
[  463.864431][  T980] dvb-usb: error while querying for an remote control event.
[  463.948552][  T980] m920x_read = error: -19
[  463.953217][  T980] dvb-usb: error while querying for an remote control event.
[  463.988217][  T980] m920x_read = error: -19
[  463.992747][  T980] dvb-usb: error while querying for an remote control event.
[  464.071519][   T10] m920x_read = error: -19
[  464.076076][   T10] dvb-usb: error while querying for an remote control event.
[  464.088748][ T5892] usb 6-1: 0:2 : does not exist
[  464.108088][ T5892] m920x_read = error: -19
[  464.112911][ T5892] dvb-usb: error while querying for an remote control event.
[  464.198560][ T5892] m920x_read = error: -19
[  464.202967][ T5892] dvb-usb: error while querying for an remote control event.
[  464.228094][ T5892] m920x_read = error: -19
[  464.232512][ T5892] dvb-usb: error while querying for an remote control event.
[  464.319634][ T5892] m920x_read = error: -19
[  464.324070][ T5892] dvb-usb: error while querying for an remote control event.
[  464.348153][ T5892] m920x_read = error: -19
[  464.352602][ T5892] dvb-usb: error while querying for an remote control event.
[  464.440645][ T5892] m920x_read = error: -19
[  464.445616][ T5892] dvb-usb: error while querying for an remote control event.
[  464.469234][ T5892] m920x_read = error: -19
[  464.473665][ T5892] dvb-usb: error while querying for an remote control event.
[  464.558116][ T5892] m920x_read = error: -19
[  464.562556][ T5892] dvb-usb: error while querying for an remote control event.
[  464.588698][ T5892] m920x_read = error: -19
[  464.593194][ T5892] dvb-usb: error while querying for an remote control event.
[  464.678777][ T5892] m920x_read = error: -19
[  464.683343][ T5892] dvb-usb: error while querying for an remote control event.
[  464.708184][  T980] m920x_read = error: -19
[  464.712568][  T980] dvb-usb: error while querying for an remote control event.
[  464.798269][  T980] m920x_read = error: -19
[  464.802696][  T980] dvb-usb: error while querying for an remote control event.
[  464.828245][ T5892] usb 7-1: new full-speed USB device number 37 using dummy_hcd
[  464.836464][  T980] m920x_read = error: -19
[  464.841457][  T980] dvb-usb: error while querying for an remote control event.
[  464.918570][  T980] m920x_read = error: -19
[  464.922969][  T980] dvb-usb: error while querying for an remote control event.
[  464.958236][  T980] m920x_read = error: -19
[  464.962682][  T980] dvb-usb: error while querying for an remote control event.
[  465.000436][ T5892] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  465.012168][   T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  465.019871][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  465.034311][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 255, setting to 64
[  465.045480][  T980] m920x_read = error: -19
[  465.049974][  T980] dvb-usb: error while querying for an remote control event.
[  465.057450][ T5892] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  465.066822][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.078107][ T5892] usb 7-1: config 0 descriptor??
[  465.083441][  T980] m920x_read = error: -19
[  465.085187][T12286] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  465.088068][  T980] dvb-usb: error while querying for an remote control event.
[  465.111061][ T5892] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input41
[  465.127129][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.135375][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.144122][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.152359][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.158125][   T10] usb 2-1: device descriptor read/64, error -71
[  465.159822][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.166040][  T980] m920x_read = error: -19
[  465.173370][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.184826][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.187686][  T980] dvb-usb: error while querying for an remote control event.
[  465.192549][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.207225][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.209125][T11604] m920x_read = error: -19
[  465.215092][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.226749][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.229503][T11604] dvb-usb: error while querying for an remote control event.
[  465.234280][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.249946][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.257934][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.265312][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.272696][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.280067][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.287388][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.294689][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.302020][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.309348][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.316707][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.324028][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.331390][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.338784][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.347470][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.355403][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.358134][T11604] m920x_read = error: -19
[  465.362933][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.374465][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.381516][ T5180] usb 7-1: control msg error: -71
[  465.381821][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.389261][T11604] dvb-usb: error while querying for an remote control event.
[  465.394228][    C1] usb 7-1: pegasus_irq - usb_submit_urb failed with result -1
[  465.402141][  T980] m920x_read = error: -19
[  465.414232][  T980] dvb-usb: error while querying for an remote control event.
[  465.423013][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.427099][   T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  465.430823][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.441512][ T5180] usb 7-1: control msg error: -71
[  465.446130][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.457441][    C1] usb 7-1: pegasus_irq - usb_submit_urb failed with result -1
[  465.470148][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.477530][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.485049][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.492523][    C1] usb 7-1: pegasus_irq - nonzero urb status received: -71
[  465.495642][ T5892] usb 7-1: USB disconnect, device number 37
[  465.499676][    C1] usb 7-1: pegasus_irq - usb_submit_urb failed with result -19
[  465.500173][ T5180] usb 7-1: control msg error: -71
[  465.539172][T11604] m920x_read = error: -19
[  465.543599][T11604] dvb-usb: error while querying for an remote control event.
[  465.556046][  T980] m920x_read = error: -19
[  465.560833][   T10] usb 2-1: device descriptor read/64, error -71
[  465.568831][  T980] dvb-usb: error while querying for an remote control event.
[  465.678121][T11604] m920x_read = error: -19
[  465.682508][T11604] dvb-usb: error while querying for an remote control event.
[  465.690579][   T10] usb usb2-port1: attempt power cycle
[  465.697833][  T980] m920x_read = error: -19
[  465.702268][  T980] dvb-usb: error while querying for an remote control event.
[  465.828110][ T5892] m920x_read = error: -19
[  465.832558][ T5892] dvb-usb: error while querying for an remote control event.
[  465.840113][  T980] m920x_read = error: -19
[  465.844478][  T980] dvb-usb: error while querying for an remote control event.
[  465.958053][ T5892] m920x_read = error: -19
[  465.962581][ T5892] dvb-usb: error while querying for an remote control event.
[  465.971129][  T980] m920x_read = error: -19
[  465.975556][  T980] dvb-usb: error while querying for an remote control event.
[  466.028100][   T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  466.048739][   T10] usb 2-1: device descriptor read/8, error -71
[  466.088274][  T980] m920x_read = error: -19
[  466.092691][  T980] dvb-usb: error while querying for an remote control event.
[  466.100304][ T5892] m920x_read = error: -19
[  466.104709][ T5892] dvb-usb: error while querying for an remote control event.
[  466.178082][ T5932] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  466.231884][ T5892] m920x_read = error: -19
[  466.236450][ T5892] dvb-usb: error while querying for an remote control event.
[  466.244554][  T980] m920x_read = error: -19
[  466.248983][  T980] dvb-usb: error while querying for an remote control event.
[  466.298079][   T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  466.318636][   T10] usb 2-1: device descriptor read/8, error -71
[  466.329580][ T5932] usb 7-1: config index 0 descriptor too short (expected 65183, got 72)
[  466.340608][ T5932] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  466.349916][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.358008][ T5932] usb 7-1: Product: syz
[  466.362190][ T5932] usb 7-1: Manufacturer: syz
[  466.368222][ T5932] usb 7-1: SerialNumber: syz
[  466.368441][  T980] m920x_read = error: -19
[  466.377420][  T980] dvb-usb: error while querying for an remote control event.
[  466.384408][ T5932] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  466.385223][ T5892] m920x_read = error: -19
[  466.400482][ T5892] dvb-usb: error while querying for an remote control event.
[  466.407405][ T5933] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  466.430238][   T10] usb usb2-port1: unable to enumerate USB device
[  466.508029][   T10] m920x_read = error: -19
[  466.512532][   T10] dvb-usb: error while querying for an remote control event.
[  466.520158][ T5892] m920x_read = error: -19
[  466.524538][ T5892] dvb-usb: error while querying for an remote control event.
[  466.622473][T12290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.631514][T12290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.641718][T12290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.650525][ T5892] m920x_read = error: -19
[  466.657279][T12290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.665166][ T5892] dvb-usb: error while querying for an remote control event.
[  466.673066][   T10] m920x_read = error: -19
[  466.675647][T12290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.677440][   T10] dvb-usb: error while querying for an remote control event.
[  466.694945][T12290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.718684][ T5932] usb 7-1: USB disconnect, device number 38
[  466.778126][ T5892] m920x_read = error: -19
[  466.782543][ T5892] dvb-usb: error while querying for an remote control event.
[  466.790343][ T5892] m920x_read = error: -19
[  466.794718][ T5892] dvb-usb: error while querying for an remote control event.
[  466.898455][ T5892] m920x_read = error: -19
[  466.902946][ T5892] dvb-usb: error while querying for an remote control event.
[  466.910595][   T10] m920x_read = error: -19
[  466.915021][   T10] dvb-usb: error while querying for an remote control event.
[  467.028676][   T10] m920x_read = error: -19
[  467.033074][   T10] dvb-usb: error while querying for an remote control event.
[  467.041251][ T5892] m920x_read = error: -19
[  467.045642][ T5892] dvb-usb: error while querying for an remote control event.
[  467.158173][ T5892] m920x_read = error: -19
[  467.162568][ T5892] dvb-usb: error while querying for an remote control event.
[  467.170218][  T980] m920x_read = error: -19
[  467.174602][  T980] dvb-usb: error while querying for an remote control event.
[  467.289109][  T980] m920x_read = error: -19
[  467.293559][  T980] dvb-usb: error while querying for an remote control event.
[  467.301168][ T5892] m920x_read = error: -19
[  467.305597][ T5892] dvb-usb: error while querying for an remote control event.
[  467.419079][ T5892] m920x_read = error: -19
[  467.423512][ T5892] dvb-usb: error while querying for an remote control event.
[  467.431800][  T980] m920x_read = error: -19
[  467.436318][  T980] dvb-usb: error while querying for an remote control event.
[  467.508484][ T5933] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  467.515589][ T5933] ath9k_htc: Failed to initialize the device
[  467.522398][ T5932] usb 7-1: ath9k_htc: USB layer deinitialized
[  467.539109][  T980] m920x_read = error: -19
[  467.543705][  T980] dvb-usb: error while querying for an remote control event.
[  467.551372][ T5892] m920x_read = error: -19
[  467.555899][ T5892] dvb-usb: error while querying for an remote control event.
[  467.658137][ T5892] m920x_read = error: -19
[  467.662755][ T5892] dvb-usb: error while querying for an remote control event.
[  467.671199][  T980] m920x_read = error: -19
[  467.676666][  T980] dvb-usb: error while querying for an remote control event.
[  467.720626][T12295] binder: BINDER_SET_CONTEXT_MGR already set
[  467.726678][T12295] binder: 12294:12295 ioctl 4018620d 200000000040 returned -16
[  467.734917][T12295] binder: BINDER_SET_CONTEXT_MGR already set
[  467.741691][T12295] binder: 12294:12295 ioctl 4018620d 200000000040 returned -16
[  467.796106][  T980] m920x_read = error: -19
[  467.802680][  T980] dvb-usb: error while querying for an remote control event.
[  467.811828][ T5892] m920x_read = error: -19
[  467.816427][ T5892] dvb-usb: error while querying for an remote control event.
[  467.838207][ T5932] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  467.887724][T12302] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1859'.
[  467.928110][ T5892] m920x_read = error: -19
[  467.932662][ T5892] dvb-usb: error while querying for an remote control event.
[  467.940556][  T980] m920x_read = error: -19
[  467.944966][  T980] dvb-usb: error while querying for an remote control event.
[  467.988282][ T5932] usb 7-1: Using ep0 maxpacket: 32
[  467.997975][ T5932] usb 7-1: config index 0 descriptor too short (expected 241, got 72)
[  468.007867][ T5932] usb 7-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da
[  468.017039][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.029168][ T5932] usb 7-1: config 0 descriptor??
[  468.049684][ T5932] mos7840 7-1:0.0: missing endpoints
[  468.058753][  T980] m920x_read = error: -19
[  468.063341][  T980] dvb-usb: error while querying for an remote control event.
[  468.071023][   T10] m920x_read = error: -19
[  468.075431][   T10] dvb-usb: error while querying for an remote control event.
[  468.188193][   T10] m920x_read = error: -19
[  468.192600][   T10] dvb-usb: error while querying for an remote control event.
[  468.200635][  T980] m920x_read = error: -19
[  468.205027][  T980] dvb-usb: error while querying for an remote control event.
[  468.248516][ T5932] usb 7-1: USB disconnect, device number 39
[  468.318161][  T980] m920x_read = error: -19
[  468.322597][  T980] dvb-usb: error while querying for an remote control event.
[  468.330390][   T10] m920x_read = error: -19
[  468.334778][   T10] dvb-usb: error while querying for an remote control event.
[  468.448142][   T10] m920x_read = error: -19
[  468.452568][   T10] dvb-usb: error while querying for an remote control event.
[  468.460216][  T980] m920x_read = error: -19
[  468.464622][  T980] dvb-usb: error while querying for an remote control event.
[  468.579179][  T980] m920x_read = error: -19
[  468.583622][  T980] dvb-usb: error while querying for an remote control event.
[  468.591552][   T10] m920x_read = error: -19
[  468.595999][   T10] dvb-usb: error while querying for an remote control event.
[  468.700815][   T10] m920x_read = error: -19
[  468.705373][   T10] dvb-usb: error while querying for an remote control event.
[  468.713255][  T980] m920x_read = error: -19
[  468.714648][T12307] netlink: 'syz.1.1861': attribute type 2 has an invalid length.
[  468.719562][  T980] dvb-usb: error while querying for an remote control event.
[  468.732006][T12307] netlink: 'syz.1.1861': attribute type 9 has an invalid length.
[  468.741288][T12307] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1861'.
[  468.839814][   T10] m920x_read = error: -19
[  468.844512][   T10] dvb-usb: error while querying for an remote control event.
[  468.859347][  T980] m920x_read = error: -19
[  468.868471][  T980] dvb-usb: error while querying for an remote control event.
[  468.963142][T12315] FAULT_INJECTION: forcing a failure.
[  468.963142][T12315] name failslab, interval 1, probability 0, space 0, times 0
[  468.976576][T12315] CPU: 0 UID: 0 PID: 12315 Comm: syz.6.1865 Not tainted syzkaller #0 PREEMPT(full) 
[  468.976609][T12315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  468.976624][T12315] Call Trace:
[  468.976637][T12315]  <TASK>
[  468.976648][T12315]  dump_stack_lvl+0x189/0x250
[  468.976685][T12315]  ? __pfx____ratelimit+0x10/0x10
[  468.976720][T12315]  ? __pfx_dump_stack_lvl+0x10/0x10
[  468.976748][T12315]  ? __pfx__printk+0x10/0x10
[  468.976781][T12315]  ? __pfx___might_resched+0x10/0x10
[  468.976812][T12315]  should_fail_ex+0x414/0x560
[  468.976853][T12315]  should_failslab+0xa8/0x100
[  468.976890][T12315]  kmem_cache_alloc_lru_noprof+0x8d/0x6e0
[  468.976921][T12315]  ? __d_alloc+0x36/0x7a0
[  468.976955][T12315]  __d_alloc+0x36/0x7a0
[  468.976989][T12315]  d_alloc_parallel+0xe1/0x1610
[  468.977029][T12315]  ? __lock_acquire+0xab9/0xd20
[  468.977062][T12315]  ? __lock_acquire+0xab9/0xd20
[  468.977084][T12315]  ? __pfx_d_alloc_parallel+0x10/0x10
[  468.977119][T12315]  ? __raw_spin_lock_init+0x45/0x100
[  468.977152][T12315]  ? __init_waitqueue_head+0xa9/0x150
[  468.977186][T12315]  __lookup_slow+0x116/0x3d0
[  468.977215][T12315]  ? __pfx___lookup_slow+0x10/0x10
[  468.977251][T12315]  ? down_read+0x1ad/0x2e0
[  468.977273][T12315]  lookup_one_unlocked+0x127/0x250
[  468.977302][T12315]  ovl_lookup_single+0x318/0xe10
[  468.977344][T12315]  ? __pfx_ovl_lookup_single+0x10/0x10
[  468.977379][T12315]  ovl_lookup_layer+0x377/0x450
[  468.977413][T12315]  ovl_lookup+0x471/0x1bc0
[  468.977437][T12315]  ? percpu_ref_get_many+0x19/0x140
[  468.977467][T12315]  ? __memcg_slab_post_alloc_hook+0x517/0x7d0
[  468.977509][T12315]  ? __pfx_ovl_lookup+0x10/0x10
[  468.977528][T12315]  ? do_raw_spin_lock+0x121/0x290
[  468.977562][T12315]  ? do_raw_spin_unlock+0x122/0x240
[  468.977590][T12315]  ? _raw_spin_unlock+0x28/0x50
[  468.977614][T12315]  ? d_alloc+0x144/0x190
[  468.977639][T12315]  lookup_one_qstr_excl+0x131/0x360
[  468.977668][T12315]  filename_create+0x224/0x3c0
[  468.977701][T12315]  ? __pfx_filename_create+0x10/0x10
[  468.977737][T12315]  do_mknodat+0x184/0x530
[  468.977766][T12315]  ? __pfx_do_mknodat+0x10/0x10
[  468.977791][T12315]  ? getname_flags+0x1e5/0x540
[  468.977816][T12315]  __x64_sys_mknod+0x8c/0xa0
[  468.977845][T12315]  do_syscall_64+0xfa/0xfa0
[  468.977871][T12315]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.977892][T12315]  ? clear_bhb_loop+0x60/0xb0
[  468.977920][T12315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.977941][T12315] RIP: 0033:0x7f4afd18f6c9
[  468.977962][T12315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  468.977980][T12315] RSP: 002b:00007f4afe0a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  468.978004][T12315] RAX: ffffffffffffffda RBX: 00007f4afd3e5fa0 RCX: 00007f4afd18f6c9
[  468.978020][T12315] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000000080
[  468.978035][T12315] RBP: 00007f4afe0a3090 R08: 0000000000000000 R09: 0000000000000000
[  468.978049][T12315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  468.978063][T12315] R13: 00007f4afd3e6038 R14: 00007f4afd3e5fa0 R15: 00007fff000ab3c8
[  468.978099][T12315]  </TASK>
[  469.301724][  T980] m920x_read = error: -19
[  469.306202][  T980] dvb-usb: error while querying for an remote control event.
[  469.314121][  T980] m920x_read = error: -19
[  469.318546][  T980] dvb-usb: error while querying for an remote control event.
[  469.418499][   T10] m920x_read = error: -19
[  469.422932][   T10] dvb-usb: error while querying for an remote control event.
[  469.430848][   T10] m920x_read = error: -19
[  469.435240][   T10] dvb-usb: error while querying for an remote control event.
[  469.538597][  T980] m920x_read = error: -19
[  469.543424][  T980] dvb-usb: error while querying for an remote control event.
[  469.551072][  T980] m920x_read = error: -19
[  469.555459][  T980] dvb-usb: error while querying for an remote control event.
[  469.582760][ T5933] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  469.668537][  T980] m920x_read = error: -19
[  469.673016][  T980] dvb-usb: error while querying for an remote control event.
[  469.680619][   T10] m920x_read = error: -19
[  469.685084][   T10] dvb-usb: error while querying for an remote control event.
[  469.767968][ T5933] usb 2-1: Using ep0 maxpacket: 8
[  469.774617][ T5933] usb 2-1: config index 0 descriptor too short (expected 241, got 203)
[  469.783057][ T5933] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  469.793352][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  469.806372][ T5933] usb 2-1: New USB device found, idVendor=2357, idProduct=0109, bcdDevice=bd.da
[  469.808266][   T10] m920x_read = error: -19
[  469.815561][ T5932] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  469.820462][  T980] m920x_read = error: -19
[  469.827480][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.832060][   T10] dvb-usb: error while querying for an remote control event.
[  469.846183][ T5933] usb 2-1: config 0 descriptor??
[  469.855276][  T980] dvb-usb: error while querying for an remote control event.
[  469.968289][   T10] m920x_read = error: -19
[  469.972738][   T10] dvb-usb: error while querying for an remote control event.
[  469.985209][  T980] m920x_read = error: -19
[  469.989739][  T980] dvb-usb: error while querying for an remote control event.
[  470.000437][ T5932] usb 7-1: config index 0 descriptor too short (expected 45, got 36)
[  470.008903][ T5932] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  470.020625][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  470.031677][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  470.042925][ T5932] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  470.057476][ T5932] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  470.066952][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.070061][T12313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.078641][ T5932] usb 7-1: config 0 descriptor??
[  470.094983][T12313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.099691][T12326] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  470.110695][   T10] m920x_read = error: -19
[  470.115117][   T10] dvb-usb: error while querying for an remote control event.
[  470.122293][ T5933] usb 2-1: USB disconnect, device number 36
[  470.123647][  T980] m920x_read = error: -19
[  470.139929][  T980] dvb-usb: error while querying for an remote control event.
[  470.248216][   T10] m920x_read = error: -19
[  470.248252][   T10] dvb-usb: error while querying for an remote control event.
[  470.278121][   T10] m920x_read = error: -19
[  470.282563][   T10] dvb-usb: error while querying for an remote control event.
[  470.358150][   T10] m920x_read = error: -19
[  470.364042][   T10] dvb-usb: error while querying for an remote control event.
[  470.398485][  T980] m920x_read = error: -19
[  470.402901][  T980] dvb-usb: error while querying for an remote control event.
[  470.478382][  T980] m920x_read = error: -19
[  470.482802][  T980] dvb-usb: error while querying for an remote control event.
[  470.518324][  T980] m920x_read = error: -19
[  470.522911][  T980] dvb-usb: error while querying for an remote control event.
[  470.548533][T12344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.551076][ T5932] plantronics 0003:047F:FFFF.0025: reserved main item tag 0xd
[  470.569333][T12344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.590459][ T5932] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  470.611026][  T980] m920x_read = error: -19
[  470.615994][  T980] dvb-usb: error while querying for an remote control event.
[  470.638763][ T5932] usb 7-1: USB disconnect, device number 40
[  470.644969][  T980] m920x_read = error: -19
[  470.658245][  T980] dvb-usb: error while querying for an remote control event.
[  470.711663][T12346] fido_id[12346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  470.737388][  T980] m920x_read = error: -19
[  470.742301][  T980] dvb-usb: error while querying for an remote control event.
[  470.778231][  T980] m920x_read = error: -19
[  470.790548][  T980] dvb-usb: error while querying for an remote control event.
[  470.869788][T12352] FAULT_INJECTION: forcing a failure.
[  470.869788][T12352] name failslab, interval 1, probability 0, space 0, times 0
[  470.873064][  T980] m920x_read = error: -19
[  470.885354][T12352] CPU: 1 UID: 0 PID: 12352 Comm: syz.6.1876 Not tainted syzkaller #0 PREEMPT(full) 
[  470.885391][T12352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  470.885407][T12352] Call Trace:
[  470.885418][T12352]  <TASK>
[  470.885431][T12352]  dump_stack_lvl+0x189/0x250
[  470.885474][T12352]  ? __pfx____ratelimit+0x10/0x10
[  470.885515][T12352]  ? __pfx_dump_stack_lvl+0x10/0x10
[  470.885546][T12352]  ? __pfx__printk+0x10/0x10
[  470.885585][T12352]  ? __pfx___might_resched+0x10/0x10
[  470.885620][T12352]  should_fail_ex+0x414/0x560
[  470.885667][T12352]  should_failslab+0xa8/0x100
[  470.885709][T12352]  __kmalloc_noprof+0xdf/0x800
[  470.885744][T12352]  ? ovl_lookup+0x5f7/0x1bc0
[  470.885782][T12352]  ovl_lookup+0x5f7/0x1bc0
[  470.885825][T12352]  ? __memcg_slab_post_alloc_hook+0x517/0x7d0
[  470.885883][T12352]  ? __pfx_ovl_lookup+0x10/0x10
[  470.885910][T12352]  ? do_raw_spin_lock+0x121/0x290
[  470.885960][T12352]  ? do_raw_spin_unlock+0x122/0x240
[  470.885999][T12352]  ? _raw_spin_unlock+0x28/0x50
[  470.886034][T12352]  ? d_alloc+0x144/0x190
[  470.886091][T12352]  lookup_one_qstr_excl+0x131/0x360
[  470.886135][T12352]  filename_create+0x224/0x3c0
[  470.886181][T12352]  ? __pfx_filename_create+0x10/0x10
[  470.886231][T12352]  do_mknodat+0x184/0x530
[  470.886269][T12352]  ? __pfx_do_mknodat+0x10/0x10
[  470.886313][T12352]  ? getname_flags+0x1e5/0x540
[  470.886348][T12352]  __x64_sys_mknod+0x8c/0xa0
[  470.886388][T12352]  do_syscall_64+0xfa/0xfa0
[  470.886415][T12352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.886441][T12352]  ? clear_bhb_loop+0x60/0xb0
[  470.886473][T12352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.886496][T12352] RIP: 0033:0x7f4afd18f6c9
[  470.886525][T12352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  470.886547][T12352] RSP: 002b:00007f4afe0a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  470.886573][T12352] RAX: ffffffffffffffda RBX: 00007f4afd3e5fa0 RCX: 00007f4afd18f6c9
[  470.886592][T12352] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000000080
[  470.886609][T12352] RBP: 00007f4afe0a3090 R08: 0000000000000000 R09: 0000000000000000
[  470.886626][T12352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.886640][T12352] R13: 00007f4afd3e6038 R14: 00007f4afd3e5fa0 R15: 00007fff000ab3c8
[  470.886682][T12352]  </TASK>
[  471.129586][ T5892] m920x_read = error: -19
[  471.133988][ T5892] dvb-usb: error while querying for an remote control event.
[  471.141634][  T980] dvb-usb: error while querying for an remote control event.
[  471.234883][T12350] syzkaller1: entered promiscuous mode
[  471.240655][T12350] syzkaller1: entered allmulticast mode
[  471.248019][  T980] m920x_read = error: -19
[  471.252422][  T980] dvb-usb: error while querying for an remote control event.
[  471.259979][   T10] m920x_read = error: -19
[  471.264370][   T10] dvb-usb: error while querying for an remote control event.
[  471.378101][  T980] m920x_read = error: -19
[  471.382555][  T980] dvb-usb: error while querying for an remote control event.
[  471.390599][   T10] m920x_read = error: -19
[  471.395012][   T10] dvb-usb: error while querying for an remote control event.
[  471.437994][ T5871] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  471.508828][  T980] m920x_read = error: -19
[  471.513240][  T980] dvb-usb: error while querying for an remote control event.
[  471.521007][   T10] m920x_read = error: -19
[  471.525390][   T10] dvb-usb: error while querying for an remote control event.
[  471.589218][ T5871] usb 7-1: Using ep0 maxpacket: 32
[  471.598219][ T5871] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  471.606605][ T5871] usb 7-1: config 0 has no interface number 0
[  471.613202][ T5871] usb 7-1: config 0 interface 12 has no altsetting 0
[  471.638434][ T5871] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  471.648061][  T980] m920x_read = error: -19
[  471.648351][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.652488][  T980] dvb-usb: error while querying for an remote control event.
[  471.660850][ T5871] usb 7-1: Product: syz
[  471.660874][ T5871] usb 7-1: Manufacturer: syz
[  471.660892][ T5871] usb 7-1: SerialNumber: syz
[  471.665163][ T5871] usb 7-1: config 0 descriptor??
[  471.669529][ T5892] m920x_read = error: -19
[  471.689379][ T5871] f81534 7-1:0.12: required endpoints missing
[  471.702154][ T5892] dvb-usb: error while querying for an remote control event.
[  471.818058][ T5892] m920x_read = error: -19
[  471.822479][ T5892] dvb-usb: error while querying for an remote control event.
[  471.830286][  T980] m920x_read = error: -19
[  471.834679][  T980] dvb-usb: error while querying for an remote control event.
[  471.891750][ T5933] usb 7-1: USB disconnect, device number 41
[  471.948058][  T980] m920x_read = error: -19
[  471.952783][  T980] dvb-usb: error while querying for an remote control event.
[  471.962337][ T5892] m920x_read = error: -19
[  471.971641][ T5892] dvb-usb: error while querying for an remote control event.
[  472.078101][ T5892] m920x_read = error: -19
[  472.082617][ T5892] dvb-usb: error while querying for an remote control event.
[  472.090252][  T980] m920x_read = error: -19
[  472.094751][  T980] dvb-usb: error while querying for an remote control event.
[  472.218522][  T980] m920x_read = error: -19
[  472.222930][  T980] dvb-usb: error while querying for an remote control event.
[  472.230546][ T5892] m920x_read = error: -19
[  472.234905][ T5892] dvb-usb: error while querying for an remote control event.
[  472.348754][ T5892] m920x_read = error: -19
[  472.353195][ T5892] dvb-usb: error while querying for an remote control event.
[  472.360882][  T980] m920x_read = error: -19
[  472.365242][  T980] dvb-usb: error while querying for an remote control event.
[  472.478187][   T10] m920x_read = error: -19
[  472.482631][   T10] dvb-usb: error while querying for an remote control event.
[  472.490438][T11604] m920x_read = error: -19
[  472.494956][T11604] dvb-usb: error while querying for an remote control event.
[  472.608397][T11604] m920x_read = error: -19
[  472.616000][T11604] dvb-usb: error while querying for an remote control event.
[  472.625751][   T10] m920x_read = error: -19
[  472.644180][   T10] dvb-usb: error while querying for an remote control event.
[  472.759214][T11604] m920x_read = error: -19
[  472.763757][T11604] dvb-usb: error while querying for an remote control event.
[  472.774494][ T5892] m920x_read = error: -19
[  472.779779][ T5892] dvb-usb: error while querying for an remote control event.
[  472.868171][   T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  472.888237][ T5892] m920x_read = error: -19
[  472.892770][ T5892] dvb-usb: error while querying for an remote control event.
[  472.900327][T11604] m920x_read = error: -19
[  472.904699][T11604] dvb-usb: error while querying for an remote control event.
[  472.998098][   T10] usb 2-1: device descriptor read/64, error -71
[  473.018190][T11604] m920x_read = error: -19
[  473.022950][T11604] dvb-usb: error while querying for an remote control event.
[  473.030592][ T5892] m920x_read = error: -19
[  473.035032][ T5892] dvb-usb: error while querying for an remote control event.
[  473.048264][ T5871] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  473.148157][ T5892] m920x_read = error: -19
[  473.152604][ T5892] dvb-usb: error while querying for an remote control event.
[  473.160251][T11604] m920x_read = error: -19
[  473.164668][T11604] dvb-usb: error while querying for an remote control event.
[  473.198041][ T5871] usb 7-1: Using ep0 maxpacket: 8
[  473.205687][ T5871] usb 7-1: config index 0 descriptor too short (expected 241, got 203)
[  473.214366][ T5871] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  473.224692][ T5871] usb 7-1: config 0 interface 0 altsetting 230 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  473.239508][ T5871] usb 7-1: config 0 interface 0 has no altsetting 0
[  473.246216][ T5871] usb 7-1: New USB device found, idVendor=2157, idProduct=0109, bcdDevice=bd.da
[  473.248062][   T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  473.255368][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.273776][ T5871] usb 7-1: config 0 descriptor??
[  473.288073][T11604] m920x_read = error: -19
[  473.292634][T11604] dvb-usb: error while querying for an remote control event.
[  473.300402][ T5892] m920x_read = error: -19
[  473.304817][ T5892] dvb-usb: error while querying for an remote control event.
[  473.398250][   T10] usb 2-1: device descriptor read/64, error -71
[  473.418094][ T5892] m920x_read = error: -19
[  473.422580][ T5892] dvb-usb: error while querying for an remote control event.
[  473.430217][T11604] m920x_read = error: -19
[  473.434929][T11604] dvb-usb: error while querying for an remote control event.
[  473.484050][T12374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.493235][T12374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.502699][T11604] usb 7-1: USB disconnect, device number 42
[  473.512373][   T10] usb usb2-port1: attempt power cycle
[  473.554383][ T5892] m920x_read = error: -19
[  473.568460][ T5892] dvb-usb: error while querying for an remote control event.
[  473.578419][ T5892] m920x_read = error: -19
[  473.582834][ T5892] dvb-usb: error while querying for an remote control event.
[  473.656307][T12378] syzkaller1: entered promiscuous mode
[  473.662240][T12378] syzkaller1: entered allmulticast mode
[  473.705503][  T980] m920x_read = error: -19
[  473.711320][ T5892] m920x_read = error: -19
[  473.715832][ T5892] dvb-usb: error while querying for an remote control event.
[  473.724152][  T980] dvb-usb: error while querying for an remote control event.
[  473.839379][  T980] m920x_read = error: -19
[  473.844554][  T980] dvb-usb: error while querying for an remote control event.
[  473.857083][ T5892] m920x_read = error: -19
[  473.867110][ T5892] dvb-usb: error while querying for an remote control event.
[  473.875443][   T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  473.918738][   T10] usb 2-1: device descriptor read/8, error -71
[  473.948255][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  473.961649][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  473.971438][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  473.981498][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  473.989869][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  474.008794][ T5892] m920x_read = error: -19
[  474.016224][ T5892] dvb-usb: error while querying for an remote control event.
[  474.023884][  T980] m920x_read = error: -19
[  474.029675][  T980] dvb-usb: error while querying for an remote control event.
[  474.138119][  T980] m920x_read = error: -19
[  474.142526][  T980] dvb-usb: error while querying for an remote control event.
[  474.148503][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  474.151585][ T5892] m920x_read = error: -19
[  474.163360][   T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  474.177728][ T5892] dvb-usb: error while querying for an remote control event.
[  474.208081][   T10] usb 2-1: device descriptor read/8, error -71
[  474.288155][ T5892] m920x_read = error: -19
[  474.292734][ T5892] dvb-usb: error while querying for an remote control event.
[  474.300510][  T980] m920x_read = error: -19
[  474.314226][  T980] dvb-usb: error while querying for an remote control event.
[  474.323139][   T10] usb usb2-port1: unable to enumerate USB device
[  474.438117][   T10] m920x_read = error: -19
[  474.442534][   T10] dvb-usb: error while querying for an remote control event.
[  474.450810][  T980] m920x_read = error: -19
[  474.455637][  T980] dvb-usb: error while querying for an remote control event.
[  474.555845][T12383] chnl_net:caif_netlink_parms(): no params data found
[  474.568088][   T10] m920x_read = error: -19
[  474.572507][   T10] dvb-usb: error while querying for an remote control event.
[  474.580850][  T980] m920x_read = error: -19
[  474.585245][  T980] dvb-usb: error while querying for an remote control event.
[  474.658857][T12383] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.667753][T12383] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.675635][T12383] bridge_slave_0: entered allmulticast mode
[  474.683433][T12383] bridge_slave_0: entered promiscuous mode
[  474.692852][T12383] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.700237][T12383] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.707554][T12383] bridge_slave_1: entered allmulticast mode
[  474.708148][   T10] m920x_read = error: -19
[  474.716412][T12383] bridge_slave_1: entered promiscuous mode
[  474.719071][   T10] dvb-usb: error while querying for an remote control event.
[  474.732071][  T980] m920x_read = error: -19
[  474.736893][  T980] dvb-usb: error while querying for an remote control event.
[  474.768612][T12383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  474.781488][T12383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.820012][T12383] team0: Port device team_slave_0 added
[  474.831515][T12383] team0: Port device team_slave_1 added
[  474.848050][  T980] m920x_read = error: -19
[  474.852665][  T980] dvb-usb: error while querying for an remote control event.
[  474.860519][   T10] m920x_read = error: -19
[  474.865288][   T10] dvb-usb: error while querying for an remote control event.
[  474.885889][T12383] batman_adv: batadv0: Adding interface: batadv_slave_0
[  474.893173][T12383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  474.919534][T12383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.933590][T12383] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.941242][T12383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  474.991017][   T10] m920x_read = error: -19
[  474.995708][T12383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  475.003100][   T10] dvb-usb: error while querying for an remote control event.
[  475.013997][ T5892] m920x_read = error: -19
[  475.018676][T12402] binder: BINDER_SET_CONTEXT_MGR already set
[  475.024705][T12402] binder: 12401:12402 ioctl 4018620d 200000004a80 returned -16
[  475.032586][ T5892] dvb-usb: error while querying for an remote control event.
[  475.065276][T12383] hsr_slave_0: entered promiscuous mode
[  475.073546][T12383] hsr_slave_1: entered promiscuous mode
[  475.080228][T12383] debugfs: 'hsr0' already exists in 'hsr'
[  475.086018][T12383] Cannot create hsr debugfs directory
[  475.148040][   T10] m920x_read = error: -19
[  475.152729][   T10] dvb-usb: error while querying for an remote control event.
[  475.160453][ T5892] m920x_read = error: -19
[  475.164845][ T5892] dvb-usb: error while querying for an remote control event.
[  475.285553][T12383] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  475.293041][ T5892] m920x_read = error: -19
[  475.297433][ T5892] dvb-usb: error while querying for an remote control event.
[  475.299789][T12383] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  475.305405][   T10] m920x_read = error: -19
[  475.316002][   T10] dvb-usb: error while querying for an remote control event.
[  475.325224][T12383] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  475.338353][T12383] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  475.420040][   T10] m920x_read = error: -19
[  475.427318][   T10] dvb-usb: error while querying for an remote control event.
[  475.429480][T12383] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.441786][ T5892] m920x_read = error: -19
[  475.446210][ T5892] dvb-usb: error while querying for an remote control event.
[  475.462105][T12383] 8021q: adding VLAN 0 to HW filter on device team0
[  475.482545][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.489807][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.510154][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.517400][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.579726][ T5892] m920x_read = error: -19
[  475.590551][ T5892] dvb-usb: error while querying for an remote control event.
[  475.600326][   T10] m920x_read = error: -19
[  475.605484][   T10] dvb-usb: error while querying for an remote control event.
[  475.728545][   T10] m920x_read = error: -19
[  475.732974][   T10] dvb-usb: error while querying for an remote control event.
[  475.741952][ T5892] m920x_read = error: -19
[  475.765518][ T5892] dvb-usb: error while querying for an remote control event.
[  475.811777][T12383] 8021q: adding VLAN 0 to HW filter on device batadv0
[  475.812988][T12415] FAULT_INJECTION: forcing a failure.
[  475.812988][T12415] name failslab, interval 1, probability 0, space 0, times 0
[  475.856843][T12415] CPU: 0 UID: 0 PID: 12415 Comm: syz.1.1894 Not tainted syzkaller #0 PREEMPT(full) 
[  475.856876][T12415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  475.856890][T12415] Call Trace:
[  475.856900][T12415]  <TASK>
[  475.856908][T12415]  dump_stack_lvl+0x189/0x250
[  475.856942][T12415]  ? __pfx____ratelimit+0x10/0x10
[  475.856975][T12415]  ? __pfx_dump_stack_lvl+0x10/0x10
[  475.857001][T12415]  ? __pfx__printk+0x10/0x10
[  475.857032][T12415]  ? __pfx___might_resched+0x10/0x10
[  475.857061][T12415]  should_fail_ex+0x414/0x560
[  475.857099][T12415]  should_failslab+0xa8/0x100
[  475.857134][T12415]  __kmalloc_noprof+0xdf/0x800
[  475.857162][T12415]  ? kfree+0x4d/0x6e0
[  475.857184][T12415]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  475.857220][T12415]  tomoyo_realpath_from_path+0xe3/0x5d0
[  475.857251][T12415]  ? tomoyo_domain+0xd8/0x130
[  475.857285][T12415]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  475.857309][T12415]  tomoyo_path_number_perm+0x1e8/0x5a0
[  475.857337][T12415]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  475.857400][T12415]  ? do_raw_spin_unlock+0x122/0x240
[  475.857446][T12415]  ? _raw_spin_unlock+0x28/0x50
[  475.857477][T12415]  ? __pfx_current_check_access_path+0x10/0x10
[  475.857514][T12415]  tomoyo_path_mknod+0x142/0x190
[  475.857548][T12415]  ? __pfx_tomoyo_path_mknod+0x10/0x10
[  475.857583][T12415]  ? __pfx_filename_create+0x10/0x10
[  475.857621][T12415]  security_path_mknod+0x17e/0x3a0
[  475.857652][T12415]  do_mknodat+0x2b6/0x530
[  475.857687][T12415]  ? __pfx_do_mknodat+0x10/0x10
[  475.857718][T12415]  ? getname_flags+0x1e5/0x540
[  475.857748][T12415]  __x64_sys_mknod+0x8c/0xa0
[  475.857783][T12415]  do_syscall_64+0xfa/0xfa0
[  475.857806][T12415]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.857829][T12415]  ? clear_bhb_loop+0x60/0xb0
[  475.857860][T12415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.857879][T12415] RIP: 0033:0x7f665458f6c9
[  475.857898][T12415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  475.857934][T12415] RSP: 002b:00007f6655447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  475.857957][T12415] RAX: ffffffffffffffda RBX: 00007f66547e5fa0 RCX: 00007f665458f6c9
[  475.857974][T12415] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000000080
[  475.857988][T12415] RBP: 00007f6655447090 R08: 0000000000000000 R09: 0000000000000000
[  475.858002][T12415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  475.858014][T12415] R13: 00007f66547e6038 R14: 00007f66547e5fa0 R15: 00007fffd3b3e2e8
[  475.858049][T12415]  </TASK>
[  476.124500][ T5892] m920x_read = error: -19
[  476.129069][ T5892] dvb-usb: error while querying for an remote control event.
[  476.136574][ T5892] m920x_read = error: -19
[  476.141018][ T5892] dvb-usb: error while querying for an remote control event.
[  476.193450][ T5823] Bluetooth: hci1: command tx timeout
[  476.234992][T12415] ERROR: Out of memory at tomoyo_realpath_from_path.
[  476.243010][ T5892] m920x_read = error: -19
[  476.247487][ T5892] dvb-usb: error while querying for an remote control event.
[  476.260820][ T5892] m920x_read = error: -19
[  476.265316][ T5892] dvb-usb: error while querying for an remote control event.
[  476.359453][ T5892] m920x_read = error: -19
[  476.363884][ T5892] dvb-usb: error while querying for an remote control event.
[  476.378063][ T5892] m920x_read = error: -19
[  476.382557][ T5892] dvb-usb: error while querying for an remote control event.
[  476.478065][ T5892] m920x_read = error: -19
[  476.482587][ T5892] dvb-usb: error while querying for an remote control event.
[  476.498002][ T5892] m920x_read = error: -19
[  476.502236][T12383] veth0_vlan: entered promiscuous mode
[  476.510169][ T5892] dvb-usb: error while querying for an remote control event.
[  476.530277][T12383] veth1_vlan: entered promiscuous mode
[  476.579576][T12383] veth0_macvtap: entered promiscuous mode
[  476.591392][T12383] veth1_macvtap: entered promiscuous mode
[  476.602458][ T5892] m920x_read = error: -19
[  476.610676][ T5892] dvb-usb: error while querying for an remote control event.
[  476.633037][   T10] m920x_read = error: -19
[  476.634540][T12383] batman_adv: batadv0: Interface activated: batadv_slave_0
[  476.637445][   T10] dvb-usb: error while querying for an remote control event.
[  476.692886][T12383] batman_adv: batadv0: Interface activated: batadv_slave_1
[  476.713035][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  476.734642][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.744014][ T5892] m920x_read = error: -19
[  476.754834][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.756345][ T5892] dvb-usb: error while querying for an remote control event.
[  476.776158][   T10] m920x_read = error: -19
[  476.783181][   T10] dvb-usb: error while querying for an remote control event.
[  476.784726][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.898876][ T5892] m920x_read = error: -19
[  476.900488][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.903504][ T5892] dvb-usb: error while querying for an remote control event.
[  476.929606][T11604] m920x_read = error: -19
[  476.933534][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.934138][T11604] dvb-usb: error while querying for an remote control event.
[  476.985373][ T5995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.005829][ T5995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.092362][   T10] m920x_read = error: -19
[  477.110845][   T10] dvb-usb: error while querying for an remote control event.
[  477.119268][T11604] m920x_read = error: -19
[  477.119335][ T5932] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  477.140659][T11604] dvb-usb: error while querying for an remote control event.
[  477.148675][T12435] fuse: Unknown parameter 'group_Ô'
[  477.268129][T11604] m920x_read = error: -19
[  477.274601][T11604] dvb-usb: error while querying for an remote control event.
[  477.296532][T11604] m920x_read = error: -19
[  477.303506][T11604] dvb-usb: error while querying for an remote control event.
[  477.310698][ T5932] usb 7-1: config index 0 descriptor too short (expected 65183, got 72)
[  477.330630][ T5932] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  477.340783][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.350926][ T5932] usb 7-1: Product: syz
[  477.355159][ T5932] usb 7-1: Manufacturer: syz
[  477.360083][ T5932] usb 7-1: SerialNumber: syz
[  477.371788][ T5932] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  477.388509][ T5925] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  477.398128][T11604] m920x_read = error: -19
[  477.402711][T11604] dvb-usb: error while querying for an remote control event.
[  477.418094][T11604] m920x_read = error: -19
[  477.422693][T11604] dvb-usb: error while querying for an remote control event.
[  477.518071][T11604] m920x_read = error: -19
[  477.522566][T11604] dvb-usb: error while querying for an remote control event.
[  477.538091][T11604] m920x_read = error: -19
[  477.542623][T11604] dvb-usb: error while querying for an remote control event.
[  477.558147][ T5932] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  477.600177][T12431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.609184][T12431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.619285][T12431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.629564][T12431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.638063][T11604] m920x_read = error: -19
[  477.643336][T11604] dvb-usb: error while querying for an remote control event.
[  477.670799][T11604] m920x_read = error: -19
[  477.675531][T11604] dvb-usb: error while querying for an remote control event.
[  477.759820][ T5892] m920x_read = error: -19
[  477.775953][ T5892] dvb-usb: error while querying for an remote control event.
[  477.810199][ T5892] m920x_read = error: -19
[  477.817246][ T5892] dvb-usb: error while querying for an remote control event.
[  477.859393][ T5864] usb 7-1: USB disconnect, device number 43
[  477.887994][ T5932] usb 2-1: Using ep0 maxpacket: 8
[  477.895477][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.908311][ T5892] m920x_read = error: -19
[  477.912706][ T5892] dvb-usb: error while querying for an remote control event.
[  477.918583][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  477.945820][ T5932] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[  477.958294][T11604] m920x_read = error: -19
[  477.962711][T11604] dvb-usb: error while querying for an remote control event.
[  477.965676][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.983573][T12445] FAULT_INJECTION: forcing a failure.
[  477.983573][T12445] name failslab, interval 1, probability 0, space 0, times 0
[  477.999926][T12445] CPU: 1 UID: 0 PID: 12445 Comm: syz.4.1903 Not tainted syzkaller #0 PREEMPT(full) 
[  477.999957][T12445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  477.999972][T12445] Call Trace:
[  477.999982][T12445]  <TASK>
[  477.999993][T12445]  dump_stack_lvl+0x189/0x250
[  478.000029][T12445]  ? __pfx____ratelimit+0x10/0x10
[  478.000065][T12445]  ? __pfx_dump_stack_lvl+0x10/0x10
[  478.000094][T12445]  ? __pfx__printk+0x10/0x10
[  478.000128][T12445]  ? __pfx___might_resched+0x10/0x10
[  478.000153][T12445]  ? fs_reclaim_acquire+0x7d/0x100
[  478.000193][T12445]  should_fail_ex+0x414/0x560
[  478.000234][T12445]  should_failslab+0xa8/0x100
[  478.000271][T12445]  __kmalloc_noprof+0xdf/0x800
[  478.000302][T12445]  ? tomoyo_encode+0x28b/0x550
[  478.000337][T12445]  tomoyo_encode+0x28b/0x550
[  478.000380][T12445]  tomoyo_realpath_from_path+0x58d/0x5d0
[  478.000423][T12445]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  478.000449][T12445]  tomoyo_path_number_perm+0x1e8/0x5a0
[  478.000476][T12445]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  478.000543][T12445]  ? do_raw_spin_unlock+0x122/0x240
[  478.000581][T12445]  ? _raw_spin_unlock+0x28/0x50
[  478.000613][T12445]  ? __pfx_current_check_access_path+0x10/0x10
[  478.000651][T12445]  tomoyo_path_mknod+0x142/0x190
[  478.000687][T12445]  ? __pfx_tomoyo_path_mknod+0x10/0x10
[  478.000723][T12445]  ? __pfx_filename_create+0x10/0x10
[  478.000763][T12445]  security_path_mknod+0x17e/0x3a0
[  478.000807][T12445]  do_mknodat+0x2b6/0x530
[  478.000854][T12445]  ? __pfx_do_mknodat+0x10/0x10
[  478.000887][T12445]  ? getname_flags+0x1e5/0x540
[  478.000919][T12445]  __x64_sys_mknod+0x8c/0xa0
[  478.000955][T12445]  do_syscall_64+0xfa/0xfa0
[  478.000980][T12445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.001004][T12445]  ? clear_bhb_loop+0x60/0xb0
[  478.001031][T12445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.001052][T12445] RIP: 0033:0x7f37b238f6c9
[  478.001073][T12445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  478.001093][T12445] RSP: 002b:00007f37b32c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  478.001115][T12445] RAX: ffffffffffffffda RBX: 00007f37b25e5fa0 RCX: 00007f37b238f6c9
[  478.001132][T12445] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000000080
[  478.001146][T12445] RBP: 00007f37b32c9090 R08: 0000000000000000 R09: 0000000000000000
[  478.001160][T12445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  478.001172][T12445] R13: 00007f37b25e6038 R14: 00007f37b25e5fa0 R15: 00007fff4b62ec28
[  478.001209][T12445]  </TASK>
[  478.001233][T12445] ERROR: Out of memory at tomoyo_realpath_from_path.
[  478.088120][T11604] m920x_read = error: -19
[  478.094935][ T5932] usb 2-1: config 0 descriptor??
[  478.124690][T11604] dvb-usb: error while querying for an remote control event.
[  478.286359][ T5892] m920x_read = error: -19
[  478.290829][ T5892] dvb-usb: error while querying for an remote control event.
[  478.300982][ T5823] Bluetooth: hci1: command tx timeout
[  478.408547][T11604] m920x_read = error: -19
[  478.412969][T11604] dvb-usb: error while querying for an remote control event.
[  478.468383][ T5925] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  478.475590][ T5925] ath9k_htc: Failed to initialize the device
[  478.482496][ T5864] usb 7-1: ath9k_htc: USB layer deinitialized
[  478.500414][T11604] m920x_read = error: -19
[  478.504949][T11604] dvb-usb: error while querying for an remote control event.
[  478.541509][ T5932] uclogic 0003:5543:0004.0026: unknown main item tag 0x0
[  478.548852][ T5932] uclogic 0003:5543:0004.0026: unknown main item tag 0x0
[  478.558998][ T5932] uclogic 0003:5543:0004.0026: unknown main item tag 0x0
[  478.561342][T11604] m920x_read = error: -19
[  478.566086][ T5932] uclogic 0003:5543:0004.0026: unknown main item tag 0x0
[  478.571467][T11604] dvb-usb: error while querying for an remote control event.
[  478.578281][ T5932] uclogic 0003:5543:0004.0026: unknown main item tag 0x0
[  478.592676][ T5932] uclogic 0003:5543:0004.0026: unknown main item tag 0x0
[  478.600058][ T5932] uclogic 0003:5543:0004.0026: unknown main item tag 0x0
[  478.607141][ T5932] uclogic 0003:5543:0004.0026: unknown main item tag 0x0
[  478.614449][ T5932] uclogic 0003:5543:0004.0026: unknown main item tag 0x0
[  478.621860][ T5932] uclogic 0003:5543:0004.0026: unknown main item tag 0x0
[  478.631234][T11604] m920x_read = error: -19
[  478.634892][ T5932] uclogic 0003:5543:0004.0026: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.1-1/input0
[  478.638278][T11604] dvb-usb: error while querying for an remote control event.
[  478.698301][T11604] m920x_read = error: -19
[  478.702725][T11604] dvb-usb: error while querying for an remote control event.
[  478.746512][ T5932] usb 2-1: USB disconnect, device number 41
[  478.758061][T11604] m920x_read = error: -19
[  478.762465][T11604] dvb-usb: error while querying for an remote control event.
[  478.798066][ T5864] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  478.829046][T11604] m920x_read = error: -19
[  478.833552][T11604] dvb-usb: error while querying for an remote control event.
[  478.879017][T11604] m920x_read = error: -19
[  478.883423][T11604] dvb-usb: error while querying for an remote control event.
[  478.948330][ T5864] usb 7-1: Using ep0 maxpacket: 32
[  478.951075][T11604] m920x_read = error: -19
[  478.956864][ T5864] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  478.965521][T11604] dvb-usb: error while querying for an remote control event.
[  478.975995][ T5864] usb 7-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=d2.a2
[  478.986447][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.994758][ T5864] usb 7-1: Product: syz
[  478.999254][ T5864] usb 7-1: Manufacturer: syz
[  479.003885][ T5864] usb 7-1: SerialNumber: syz
[  479.008840][T11604] m920x_read = error: -19
[  479.012952][ T5864] usb 7-1: config 0 descriptor??
[  479.013215][T11604] dvb-usb: error while querying for an remote control event.
[  479.031087][ T5864] mos7840 7-1:0.0: required endpoints missing
[  479.078521][T11604] m920x_read = error: -19
[  479.082936][T11604] dvb-usb: error while querying for an remote control event.
[  479.128648][T11604] m920x_read = error: -19
[  479.133083][T11604] dvb-usb: error while querying for an remote control event.
[  479.198084][T11604] m920x_read = error: -19
[  479.202483][T11604] dvb-usb: error while querying for an remote control event.
[  479.232498][T11604] usb 7-1: USB disconnect, device number 44
[  479.248083][   T10] m920x_read = error: -19
[  479.252492][   T10] dvb-usb: error while querying for an remote control event.
[  479.318936][ T5892] m920x_read = error: -19
[  479.323346][ T5892] dvb-usb: error while querying for an remote control event.
[  479.378071][ T5892] m920x_read = error: -19
[  479.382497][ T5892] dvb-usb: error while querying for an remote control event.
[  479.438953][ T5925] m920x_read = error: -19
[  479.443525][ T5925] dvb-usb: error while querying for an remote control event.
[  479.498119][T11604] m920x_read = error: -19
[  479.502566][T11604] dvb-usb: error while querying for an remote control event.
[  479.558038][ T5925] m920x_read = error: -19
[  479.562448][ T5925] dvb-usb: error while querying for an remote control event.
[  479.618263][ T5892] m920x_read = error: -19
[  479.622810][ T5892] dvb-usb: error while querying for an remote control event.
[  479.679112][ T5933] m920x_read = error: -19
[  479.683743][ T5933] dvb-usb: error while querying for an remote control event.
[  479.739127][ T5892] m920x_read = error: -19
[  479.743806][ T5892] dvb-usb: error while querying for an remote control event.
[  479.793558][T12457] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1908'.
[  479.803176][ T5933] m920x_read = error: -19
[  479.805202][T12457] unsupported nla_type 224
[  479.807734][ T5933] dvb-usb: error while querying for an remote control event.
[  479.824285][T12459] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1908'.
[  479.868129][T11604] m920x_read = error: -19
[  479.872554][T11604] dvb-usb: error while querying for an remote control event.
[  479.908940][ T5925] m920x_read = error: -19
[  479.913356][ T5925] dvb-usb: error while querying for an remote control event.
[  479.999091][T11604] m920x_read = error: -19
[  480.003612][T11604] dvb-usb: error while querying for an remote control event.
[  480.028153][ T5925] m920x_read = error: -19
[  480.032554][ T5925] dvb-usb: error while querying for an remote control event.
[  480.128098][T11604] m920x_read = error: -19
[  480.132572][T11604] dvb-usb: error while querying for an remote control event.
[  480.148150][ T5933] m920x_read = error: -19
[  480.152679][ T5933] dvb-usb: error while querying for an remote control event.
[  480.248063][ T5925] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  480.248102][T11604] m920x_read = error: -19
[  480.260246][T11604] dvb-usb: error while querying for an remote control event.
[  480.268192][ T5933] m920x_read = error: -19
[  480.272585][ T5933] dvb-usb: error while querying for an remote control event.
[  480.308362][ T5823] Bluetooth: hci1: command tx timeout
[  480.368142][T11604] m920x_read = error: -19
[  480.372629][T11604] dvb-usb: error while querying for an remote control event.
[  480.388281][ T5864] m920x_read = error: -19
[  480.392903][ T5864] dvb-usb: error while querying for an remote control event.
[  480.403170][ T5925] usb 7-1: Using ep0 maxpacket: 16
[  480.413127][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  480.424287][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  480.434168][ T5925] usb 7-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00
[  480.443591][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.454571][ T5925] usb 7-1: config 0 descriptor??
[  480.488075][T11604] m920x_read = error: -19
[  480.492557][T11604] dvb-usb: error while querying for an remote control event.
[  480.529756][ T5864] m920x_read = error: -19
[  480.534384][ T5864] dvb-usb: error while querying for an remote control event.
[  480.608705][T11604] m920x_read = error: -19
[  480.613201][T11604] dvb-usb: error while querying for an remote control event.
[  480.648138][ T5864] m920x_read = error: -19
[  480.652577][ T5864] dvb-usb: error while querying for an remote control event.
[  480.730697][T11604] m920x_read = error: -19
[  480.735636][T11604] dvb-usb: error while querying for an remote control event.
[  480.768099][ T5864] m920x_read = error: -19
[  480.772547][ T5864] dvb-usb: error while querying for an remote control event.
[  480.848891][T11604] m920x_read = error: -19
[  480.853429][T11604] dvb-usb: error while querying for an remote control event.
[  480.872956][ T5925] topre 0003:0853:0148.0027: item fetching failed at offset 8/164
[  480.881966][ T5925] topre 0003:0853:0148.0027: probe with driver topre failed with error -22
[  480.890829][ T5933] m920x_read = error: -19
[  480.895253][ T5933] dvb-usb: error while querying for an remote control event.
[  480.968225][T11604] m920x_read = error: -19
[  480.973813][T11604] dvb-usb: error while querying for an remote control event.
[  481.018261][ T5933] m920x_read = error: -19
[  481.022657][ T5933] dvb-usb: error while querying for an remote control event.
[  481.067067][ T5933] usb 7-1: USB disconnect, device number 45
[  481.088207][T11604] m920x_read = error: -19
[  481.092638][T11604] dvb-usb: error while querying for an remote control event.
[  481.138288][ T5864] m920x_read = error: -19
[  481.142813][ T5864] dvb-usb: error while querying for an remote control event.
[  481.208208][T11604] m920x_read = error: -19
[  481.212681][T11604] dvb-usb: error while querying for an remote control event.
[  481.270187][ T5933] m920x_read = error: -19
[  481.274923][ T5933] dvb-usb: error while querying for an remote control event.
[  481.328472][T11604] m920x_read = error: -19
[  481.332950][T11604] dvb-usb: error while querying for an remote control event.
[  481.388387][ T5933] m920x_read = error: -19
[  481.393047][ T5933] dvb-usb: error while querying for an remote control event.
[  481.450783][ T5892] m920x_read = error: -19
[  481.455506][ T5892] dvb-usb: error while querying for an remote control event.
[  481.516917][ T5864] m920x_read = error: -19
[  481.528561][ T5864] dvb-usb: error while querying for an remote control event.
[  481.568111][ T5892] m920x_read = error: -19
[  481.577962][ T5892] dvb-usb: error while querying for an remote control event.
[  481.638321][ T5864] m920x_read = error: -19
[  481.658266][ T5864] dvb-usb: error while querying for an remote control event.
[  481.690790][T12474] FAULT_INJECTION: forcing a failure.
[  481.690790][T12474] name failslab, interval 1, probability 0, space 0, times 0
[  481.715928][T12474] CPU: 1 UID: 0 PID: 12474 Comm: syz.7.1913 Not tainted syzkaller #0 PREEMPT(full) 
[  481.715960][T12474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  481.715975][T12474] Call Trace:
[  481.715985][T12474]  <TASK>
[  481.715994][T12474]  dump_stack_lvl+0x189/0x250
[  481.716039][T12474]  ? __pfx____ratelimit+0x10/0x10
[  481.716073][T12474]  ? __pfx_dump_stack_lvl+0x10/0x10
[  481.716099][T12474]  ? __pfx__printk+0x10/0x10
[  481.716131][T12474]  ? __pfx___might_resched+0x10/0x10
[  481.716163][T12474]  should_fail_ex+0x414/0x560
[  481.716203][T12474]  should_failslab+0xa8/0x100
[  481.716239][T12474]  kmem_cache_alloc_lru_noprof+0x8d/0x6e0
[  481.716268][T12474]  ? ovl_alloc_inode+0x2c/0xa0
[  481.716316][T12474]  ? __pfx_ovl_alloc_inode+0x10/0x10
[  481.716339][T12474]  ovl_alloc_inode+0x2c/0xa0
[  481.716364][T12474]  ? __pfx_ovl_alloc_inode+0x10/0x10
[  481.716383][T12474]  alloc_inode+0x6a/0x1b0
[  481.716408][T12474]  new_inode+0x22/0x170
[  481.716438][T12474]  ovl_new_inode+0x1c/0x50
[  481.716465][T12474]  ovl_create_object+0x155/0x3b0
[  481.716498][T12474]  ? __pfx_ovl_permission+0x10/0x10
[  481.716524][T12474]  ? __pfx_ovl_create_object+0x10/0x10
[  481.716554][T12474]  ? make_vfsgid+0x49/0xa0
[  481.716589][T12474]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  481.716621][T12474]  ? inode_permission+0x149/0x470
[  481.716646][T12474]  ? bpf_lsm_inode_mknod+0x9/0x20
[  481.716675][T12474]  ? security_inode_mknod+0xc2/0x360
[  481.716710][T12474]  vfs_mknod+0x3da/0x430
[  481.716750][T12474]  do_mknodat+0x3c7/0x530
[  481.716787][T12474]  ? __pfx_do_mknodat+0x10/0x10
[  481.716819][T12474]  ? getname_flags+0x1e5/0x540
[  481.716848][T12474]  __x64_sys_mknod+0x8c/0xa0
[  481.716882][T12474]  do_syscall_64+0xfa/0xfa0
[  481.716905][T12474]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.716927][T12474]  ? clear_bhb_loop+0x60/0xb0
[  481.716954][T12474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.716973][T12474] RIP: 0033:0x7f5bce98f6c9
[  481.716993][T12474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  481.717021][T12474] RSP: 002b:00007f5bcf83f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  481.717046][T12474] RAX: ffffffffffffffda RBX: 00007f5bcebe5fa0 RCX: 00007f5bce98f6c9
[  481.717062][T12474] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000000080
[  481.717077][T12474] RBP: 00007f5bcf83f090 R08: 0000000000000000 R09: 0000000000000000
[  481.717091][T12474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  481.717104][T12474] R13: 00007f5bcebe6038 R14: 00007f5bcebe5fa0 R15: 00007ffc94fe94a8
[  481.717139][T12474]  </TASK>
[  481.719438][T11604] m920x_read = error: -19
[  481.768373][ T5933] m920x_read = error: -19
[  481.795088][T11604] dvb-usb: error while querying for an remote control event.
[  481.802379][ T5933] dvb-usb: error while querying for an remote control event.
[  481.919243][  T980] m920x_read = error: -19
[  482.013717][T11604] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  482.026124][  T980] dvb-usb: error while querying for an remote control event.
[  482.038231][ T5925] m920x_read = error: -19
[  482.042646][ T5925] dvb-usb: error while querying for an remote control event.
[  482.138366][  T980] m920x_read = error: -19
[  482.142952][  T980] dvb-usb: error while querying for an remote control event.
[  482.168060][ T5925] m920x_read = error: -19
[  482.172905][ T5925] dvb-usb: error while querying for an remote control event.
[  482.180354][T11604] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  482.180410][T11604] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  482.180439][T11604] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.216599][T11604] usb 7-1: config 0 descriptor??
[  482.268291][  T980] m920x_read = error: -19
[  482.272996][  T980] dvb-usb: error while querying for an remote control event.
[  482.338032][ T5925] m920x_read = error: -19
[  482.344404][ T5925] dvb-usb: error while querying for an remote control event.
[  482.389599][ T5823] Bluetooth: hci1: command tx timeout
[  482.392401][  T980] m920x_read = error: -19
[  482.400216][  T980] dvb-usb: error while querying for an remote control event.
[  482.458392][ T5925] m920x_read = error: -19
[  482.462800][ T5925] dvb-usb: error while querying for an remote control event.
[  482.528682][  T980] m920x_read = error: -19
[  482.533125][  T980] dvb-usb: error while querying for an remote control event.
[  482.578078][ T5925] m920x_read = error: -19
[  482.582521][ T5925] dvb-usb: error while querying for an remote control event.
[  482.651972][ T5891] m920x_read = error: -19
[  482.662019][ T5891] dvb-usb: error while querying for an remote control event.
[  482.688632][  T980] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  482.700572][ T5925] m920x_read = error: -19
[  482.705539][ T5925] dvb-usb: error while querying for an remote control event.
[  482.774870][ T5891] Process accounting resumed
[  482.785062][T12492] input: syz1 as /devices/virtual/input/input43
[  482.788625][ T5891] m920x_read = error: -19
[  482.805500][ T5891] dvb-usb: error while querying for an remote control event.
[  482.821962][ T5925] m920x_read = error: -19
[  482.826816][ T5925] dvb-usb: error while querying for an remote control event.
[  482.836165][T12478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  482.845771][T12478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.861429][T12491] Process accounting resumed
[  482.862504][T12478] netlink: 'syz.6.1915': attribute type 13 has an invalid length.
[  482.869566][  T980] usb 2-1: config 0 interface 0 has no altsetting 0
[  482.876099][T12478] netlink: 'syz.6.1915': attribute type 4 has an invalid length.
[  482.889229][T12478] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1915'.
[  482.894201][  T980] usb 2-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00
[  482.920930][ T5891] m920x_read = error: -19
[  482.925373][ T5891] dvb-usb: error while querying for an remote control event.
[  482.933157][  T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.948248][ T5925] m920x_read = error: -19
[  482.958395][ T5925] dvb-usb: error while querying for an remote control event.
[  482.959336][  T980] usb 2-1: config 0 descriptor??
[  483.078905][ T5925] m920x_read = error: -19
[  483.083350][ T5925] dvb-usb: error while querying for an remote control event.
[  483.098175][ T5891] m920x_read = error: -19
[  483.102625][ T5891] dvb-usb: error while querying for an remote control event.
[  483.199094][ T5925] m920x_read = error: -19
[  483.203532][ T5925] dvb-usb: error while querying for an remote control event.
[  483.228063][ T5891] m920x_read = error: -19
[  483.232571][ T5891] dvb-usb: error while querying for an remote control event.
[  483.318811][ T5925] m920x_read = error: -19
[  483.323269][ T5925] dvb-usb: error while querying for an remote control event.
[  483.358104][ T5891] m920x_read = error: -19
[  483.362832][ T5891] dvb-usb: error while querying for an remote control event.
[  483.398937][  T980] betop 0003:8380:1850.0028: hidraw0: USB HID v0.01 Device [HID 8380:1850] on usb-dummy_hcd.1-1/input0
[  483.410350][  T980] betop 0003:8380:1850.0028: no inputs found
[  483.438123][ T5925] m920x_read = error: -19
[  483.442536][ T5925] dvb-usb: error while querying for an remote control event.
[  483.490617][  T980] m920x_read = error: -19
[  483.495434][  T980] dvb-usb: error while querying for an remote control event.
[  483.558092][ T5933] m920x_read = error: -19
[  483.562493][ T5933] dvb-usb: error while querying for an remote control event.
[  483.601335][T12488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.610529][T12488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  483.618082][  T980] m920x_read = error: -19
[  483.623509][ T5933] usb 2-1: USB disconnect, device number 42
[  483.633273][  T980] dvb-usb: error while querying for an remote control event.
[  483.678446][ T5925] m920x_read = error: -19
[  483.682922][ T5925] dvb-usb: error while querying for an remote control event.
[  483.758161][  T980] m920x_read = error: -19
[  483.762789][  T980] dvb-usb: error while querying for an remote control event.
[  483.799621][ T5925] m920x_read = error: -19
[  483.804099][ T5925] dvb-usb: error while querying for an remote control event.
[  483.878694][  T980] m920x_read = error: -19
[  483.883293][  T980] dvb-usb: error while querying for an remote control event.
[  483.918135][ T5925] m920x_read = error: -19
[  483.922626][ T5925] dvb-usb: error while querying for an remote control event.
[  483.998120][  T980] m920x_read = error: -19
[  484.002582][  T980] dvb-usb: error while querying for an remote control event.
[  484.038161][ T5925] m920x_read = error: -19
[  484.042736][ T5925] dvb-usb: error while querying for an remote control event.
[  484.128211][  T980] m920x_read = error: -19
[  484.132913][  T980] dvb-usb: error while querying for an remote control event.
[  484.158497][ T5925] m920x_read = error: -19
[  484.162939][ T5925] dvb-usb: error while querying for an remote control event.
[  484.204039][T12497] ------------[ cut here ]------------
[  484.210095][T12497] WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x88f/0xcb0, CPU#0: syz.1.1924/12497
[  484.221554][T12497] Modules linked in:
[  484.225544][T12497] CPU: 0 UID: 0 PID: 12497 Comm: syz.1.1924 Not tainted syzkaller #0 PREEMPT(full) 
[  484.235196][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  484.245406][T12497] RIP: 0010:nsproxy_ns_active_get+0x88f/0xcb0
[  484.251703][T12497] Code: 00 e8 75 3f 77 ff eb 0c e8 6e 3f 77 ff eb 05 e8 67 3f 77 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 3f 77 ff 90 <0f> 0b 90 e9 ee f7 ff ff e8 44 3f 77 ff 90 0f 0b 90 e9 12 f8 ff ff
[  484.271726][T12497] RSP: 0018:ffffc9000afb7d40 EFLAGS: 00010283
[  484.278323][T12497] RAX: ffffffff824a202e RBX: ffff88807b4de548 RCX: 0000000000080000
[  484.286621][T12497] RDX: ffffc9000b9ba000 RSI: 0000000000000944 RDI: 0000000000000945
[  484.293100][ T5925] m920x_read = error: -19
[  484.295171][T12497] RBP: ffffc9000afb7e01 R08: ffff88807de43cbb R09: 1ffff1100fbc8797
[  484.299702][ T5925] dvb-usb: error while querying for an remote control event.
[  484.307231][T12497] R10: dffffc0000000000 R11: ffffed100fbc8798 R12: dffffc0000000000
[  484.307261][T12497] R13: 0000000000000000 R14: ffff88807de43cb8 R15: ffff88807de43c00
[  484.331541][T12497] FS:  00007f66554476c0(0000) GS:ffff888125a82000(0000) knlGS:0000000000000000
[  484.340692][T12497] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  484.347368][T12497] CR2: 00007f6655446f98 CR3: 000000003472c000 CR4: 00000000003526f0
[  484.355503][T12497] Call Trace:
[  484.358949][T12497]  <TASK>
[  484.362423][T12497]  switch_task_namespaces+0x3e/0x110
[  484.367789][T12497]  __se_sys_setns+0x784/0x17d0
[  484.372722][T12497]  ? __pfx_do_sys_openat2+0x10/0x10
[  484.378111][T12497]  ? __pfx___se_sys_setns+0x10/0x10
[  484.383411][T12497]  ? do_syscall_64+0xbe/0xfa0
[  484.388559][T12497]  do_syscall_64+0xfa/0xfa0
[  484.393213][T12497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.399614][T12497]  ? clear_bhb_loop+0x60/0xb0
[  484.404525][T12497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.410568][T12497] RIP: 0033:0x7f6654590ef7
[  484.417161][T12497] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  484.436957][T12497] RSP: 002b:00007f6655446fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134
[  484.445553][T12497] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6654590ef7
[  484.453645][T12497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9
[  484.454087][ T5925] m920x_read = error: -19
[  484.461722][T12497] RBP: 00007f6654611f91 R08: 0000000000000000 R09: 0000000000000000
[  484.461744][T12497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  484.461761][T12497] R13: 00007f66547e6038 R14: 00007f66547e5fa0 R15: 00007fffd3b3e2e8
[  484.491420][T12497]  </TASK>
[  484.494529][T12497] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  484.501864][T12497] CPU: 0 UID: 0 PID: 12497 Comm: syz.1.1924 Not tainted syzkaller #0 PREEMPT(full) 
[  484.511382][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  484.521516][T12497] Call Trace:
[  484.524861][T12497]  <TASK>
[  484.527819][T12497]  dump_stack_lvl+0x99/0x250
[  484.532464][T12497]  ? __asan_memcpy+0x40/0x70
[  484.537258][T12497]  ? __pfx_dump_stack_lvl+0x10/0x10
[  484.542484][T12497]  ? __pfx__printk+0x10/0x10
[  484.547107][T12497]  vpanic+0x237/0x6d0
[  484.551118][T12497]  ? __pfx_vpanic+0x10/0x10
[  484.555635][T12497]  ? is_bpf_text_address+0x292/0x2b0
[  484.560982][T12497]  ? is_bpf_text_address+0x26/0x2b0
[  484.566206][T12497]  panic+0xb9/0xc0
[  484.569976][T12497]  ? __pfx_panic+0x10/0x10
[  484.574423][T12497]  __warn+0x318/0x4d0
[  484.578603][T12497]  ? nsproxy_ns_active_get+0x88f/0xcb0
[  484.584366][T12497]  ? nsproxy_ns_active_get+0x88f/0xcb0
[  484.589844][T12497]  report_bug+0x2be/0x4f0
[  484.594212][T12497]  ? nsproxy_ns_active_get+0x88f/0xcb0
[  484.599824][T12497]  ? nsproxy_ns_active_get+0x88f/0xcb0
[  484.605320][T12497]  ? nsproxy_ns_active_get+0x891/0xcb0
[  484.610798][T12497]  handle_bug+0x84/0x160
[  484.615064][T12497]  exc_invalid_op+0x1a/0x50
[  484.619583][T12497]  asm_exc_invalid_op+0x1a/0x20
[  484.624449][T12497] RIP: 0010:nsproxy_ns_active_get+0x88f/0xcb0
[  484.630534][T12497] Code: 00 e8 75 3f 77 ff eb 0c e8 6e 3f 77 ff eb 05 e8 67 3f 77 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 52 3f 77 ff 90 <0f> 0b 90 e9 ee f7 ff ff e8 44 3f 77 ff 90 0f 0b 90 e9 12 f8 ff ff
[  484.650156][T12497] RSP: 0018:ffffc9000afb7d40 EFLAGS: 00010283
[  484.656333][T12497] RAX: ffffffff824a202e RBX: ffff88807b4de548 RCX: 0000000000080000
[  484.664352][T12497] RDX: ffffc9000b9ba000 RSI: 0000000000000944 RDI: 0000000000000945
[  484.672337][T12497] RBP: ffffc9000afb7e01 R08: ffff88807de43cbb R09: 1ffff1100fbc8797
[  484.680413][T12497] R10: dffffc0000000000 R11: ffffed100fbc8798 R12: dffffc0000000000
[  484.688505][T12497] R13: 0000000000000000 R14: ffff88807de43cb8 R15: ffff88807de43c00
[  484.696519][T12497]  ? nsproxy_ns_active_get+0x88e/0xcb0
[  484.703183][T12497]  switch_task_namespaces+0x3e/0x110
[  484.708512][T12497]  __se_sys_setns+0x784/0x17d0
[  484.713314][T12497]  ? __pfx_do_sys_openat2+0x10/0x10
[  484.718550][T12497]  ? __pfx___se_sys_setns+0x10/0x10
[  484.723857][T12497]  ? do_syscall_64+0xbe/0xfa0
[  484.728552][T12497]  do_syscall_64+0xfa/0xfa0
[  484.733070][T12497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.739148][T12497]  ? clear_bhb_loop+0x60/0xb0
[  484.743846][T12497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.749783][T12497] RIP: 0033:0x7f6654590ef7
[  484.754337][T12497] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  484.774058][T12497] RSP: 002b:00007f6655446fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134
[  484.782567][T12497] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6654590ef7
[  484.790740][T12497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9
[  484.798820][T12497] RBP: 00007f6654611f91 R08: 0000000000000000 R09: 0000000000000000
[  484.807000][T12497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  484.815280][T12497] R13: 00007f66547e6038 R14: 00007f66547e5fa0 R15: 00007fffd3b3e2e8
[  484.823391][T12497]  </TASK>
[  484.826728][T12497] Kernel Offset: disabled
[  484.831091][T12497] Rebooting in 86400 seconds..