last executing test programs:

18.777156756s ago: executing program 4 (id=1963):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000380)="ca091cc2e088", 0xffe3)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x23c, &(0x7f0000000600)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
sysinfo(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00')
setgroups(0x0, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f00000005c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x25, 0x1, 0x0)

14.61418995s ago: executing program 4 (id=1970):
syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x24000000)
r4 = socket(0x10, 0x2, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)
getsockopt$inet_tcp_int(r5, 0x6, 0x15, 0x0, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, 0x0, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8042, 0xf3b7db288574cadf)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21af00, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, 0x2b, 0xb, 0x20000000, 0x0, {0x7}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x30004}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)

12.497013999s ago: executing program 0 (id=1972):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@map, r0, 0x2f, 0x2020}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, <r2=>0x0}, 0x8)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r2, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f003a1dc7624ec0362f6eaeb01b37c21df3a55ff1df5210264b710a5c95b29f025c52fa28a2232717e5f2ebde7dbaa85d86d34000cbd4f5077595a8f0ead5d08a8fe2080690feb20c24c5dddf439d13215ae9446fed680f80ec3c94308166cada185807d1d19b8d224fdd92a14a14", @ANYRES32=r3, @ANYBLOB, @ANYRES64=0x0], 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r8, 0x0, 0x27, 0x0, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, 0x0, 0x4000000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newnexthop={0x34, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x4}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x9e}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24000154}, 0x24008080)

12.36817347s ago: executing program 4 (id=1973):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

11.309101015s ago: executing program 0 (id=1975):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
sendto$inet(r4, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
unshare(0x40020000)

11.202177943s ago: executing program 4 (id=1977):
syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f000000df00)={[{@nodiscard}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@grpjquota}, {@noflush_merge}, {@nocheckpoint_merge}, {@acl}, {@gc_merge}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@background_gc_off}, {@checkpoint_diasble}]}, 0x4, 0x550c, &(0x7f00000089c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000809, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x1c0)
lstat(&(0x7f0000000200)='./file3\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

10.140650098s ago: executing program 0 (id=1981):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
io_setup(0x6, &(0x7f0000000680))

9.965886442s ago: executing program 0 (id=1982):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1408400, &(0x7f0000000080)=ANY=[], 0x85, 0x68b, &(0x7f0000000800)="$eJzs3c1vHGcdB/DvbDabbCipmyZtgiolaiRARE3sWCmYSwNCKIcKVeXA2UqcxMomDY6L3ApBeClce8gfUA6+cUBI3CPKhQvcevWxEoJLLzWnRTM7u16/22nqtcPnU43nmXnmeeb3/HbedrfRBvi/de1Cmo9T5NqFNxfK5aXFyc7S4uTdfjnJkSSNpNmbpfi82+1+nFxNb8qZcmXdXbG69/vP90uPZqfe/uSzpU97S816qrZvrG+3Ww/rKeeSHKrnT6u/69v1d3S77orBCMuEne8nDkbtcJJu5d+Pemt++vfnBjVD2hu13vbIBw6AonffXGcsOVaf6OVzQO+u2LtnH2gPRx0AAAAA7IHnl7OchRwfdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwkNS//1/UU6NfPpei//v/rXpd6vL+cnZ3mz/+suIAAAAAAAAAgD10djnLWcjx/nK3qL7zf7VaOFn9/UrezYPMZC4Xs5DpzGc+c5lIMjbUUWthen5+bmLQsv9/BqxveXnDlpe3CfRIPW8/jVEDAAAAAAAAwEHzebfb3XKDX+fayvf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHxTJod6smk72y2NpNJMcTdIqt3uY/LNfPqjOvJY8HnUQAAAA8AV0d7jd88tZzkKOD9oV1Xv+l6r3/Ufzbu5lPrOZTyczuVF9FtB7199YWpzsLC1O3i2n9f1+7z+7CrfqMb3PHjbe8+lqi3ZuZrZaczHX806K4kYaVcvS6X48G8f1qzKm4o2ewzuM7EY9L0f+YT1fq7mrsW5qlx+mjFUZOTzIyHgdW5mNF7bOxC5fnbV7mkhjEOzJNXtaM4hVOX9jh/s7Vs/L8fxuk5yPxtpMXB46+l7aOufJN/7yx5/c7ty7c/vmgwv7Z0g7c6ie964r7fWZmBzKxMvPcibWGa8ycWqwfC0/zI9zIefyVuYym59lOvOZybn8oCpN18dzMXTKD2WqMdT11VU7emu7SFr1Edp7sVbHlG1ierVqezyz+VHeyY3M5PXqv8uZyLdzJVcyNfQKn9rBlbaxyVnf/eqGwZ//Zl1oJ/l9Pa/cekrX1ydW5vWFobwOX3PHqrrhNStZOrGL+1E/S3/aOpTm1+pCuY/fZPXhMlprMzExlIkXt87EH6rLyoPOvTtzt6fv72x3Jz6sC+V59MG+ukuUx8uJwXPB6qOjrHuxV1c9gwznq1V/49Jr11hXd2pQ1ztTH256prbqZ7j1PV2u6l7esG6yqjs9VLf2easzeB466F/+ADyzPmglx751rNX+V/sf7Y/av23fbr959PtHvnPklVYO/+3wd5vjh77eeKX4cz7KL1be/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE/uwXvv35nudGbm1hS63e4vN6k6yIX+z5nt4U7PPJeMasitJPsj8//tdrv1mmI/xLN1oVs6ku4TNv9rkp1t3EyyUdXZ0Sdhi4uGH4CCZ8Kl+bv3Lz147/3XZu9O35q5NXNv6sqVqfGpK69PXro525kZ7/0ddZTAl2Hlpj/qSAAAAAAAAAAAAICd2ot/TrD53o/u5VABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+rahTQfp8jE+MXxcnlpcbJTTv3yypbNJI0kxc+T4uPkanpTxoa6Kzbbz6PZqbc/+Wzp05W+mv3tG1u125mH9ZRzSQ7V86fV3/Uv3F8xGGGZsPP9xMGo/S8AAP//fgkLLw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="e9", 0x1}], 0x1, 0x7fff, 0x0, 0x0)

9.141552928s ago: executing program 0 (id=1984):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40)

8.713303582s ago: executing program 4 (id=1986):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000800)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.274585538s ago: executing program 0 (id=1988):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fallocate(r0, 0x0, 0x80, 0x10000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)=ANY=[], 0x29)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)

7.204719773s ago: executing program 32 (id=1988):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fallocate(r0, 0x0, 0x80, 0x10000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)=ANY=[], 0x29)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)

7.028886897s ago: executing program 2 (id=1991):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
sendto$inet(r4, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
unshare(0x40020000)

6.802462555s ago: executing program 1 (id=1992):
socket(0x2, 0x80805, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
close(0x3)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1039}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
write(r2, 0x0, 0x0)
close(0x3)

6.220415142s ago: executing program 1 (id=1994):
openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r1}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x8230}, 0x3})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
preadv(r5, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)

6.220191612s ago: executing program 3 (id=1995):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
write$dsp(r0, &(0x7f0000000440)="02", 0x1)
close(r0)

6.054714355s ago: executing program 2 (id=1996):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000000), 0xe)

5.934738525s ago: executing program 3 (id=1997):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000440)={0x40, 0x10, 0x3, "cba01f"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0})

5.845973092s ago: executing program 2 (id=1998):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fallocate(r0, 0x0, 0x80, 0x10000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)

5.725252541s ago: executing program 4 (id=1999):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c000280180002"], 0xec}}, 0x0)

5.724303822s ago: executing program 2 (id=2000):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x1, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}})

4.656661327s ago: executing program 33 (id=1999):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c000280180002"], 0xec}}, 0x0)

4.610542801s ago: executing program 2 (id=2002):
syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x20c142)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)

4.535619977s ago: executing program 1 (id=2003):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000140)={[{@acl}, {@heartbeat_none}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0x6b2}}, {@acl}, {@localflocks}, {@coherency_full}, {@noacl}]}, 0x1, 0x4450, &(0x7f0000008900)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ftruncate(r0, 0x491d)
lseek(r0, 0x0, 0x3)

4.396857088s ago: executing program 3 (id=2004):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x1, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)

4.24236645s ago: executing program 3 (id=2005):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
sendto$inet(r4, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
unshare(0x40020000)

3.409837847s ago: executing program 3 (id=2006):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0x8)
preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000040)=""/46, 0x2e}], 0x2, 0x4b5, 0x1, 0x12)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2.528020008s ago: executing program 1 (id=2007):
openat(0xffffffffffffff9c, 0x0, 0x143082, 0x58)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = syz_io_uring_setup(0x24ff, &(0x7f0000000440)={0x0, 0xf36b, 0x10100, 0x3, 0x155}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000f00)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1})
io_uring_enter(r4, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])

2.383739349s ago: executing program 2 (id=2008):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000800)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.105695882s ago: executing program 1 (id=2009):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000680)={0x0, <r1=>0x0}}, 0x10)
connect$rds(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r1, 0x0, 0x10}, 0xc)
close(r2)
r3 = socket$kcm(0x2, 0x3, 0x2)
recvmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
close(r3)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

205.123003ms ago: executing program 1 (id=2010):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000180)={[{@discard_async}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18)
io_setup(0x3ff, 0x0)
gettid()
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082)
read(r1, &(0x7f0000000100)=""/140, 0x8c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x117, @tick, 0x0, {0x0, 0x3}, 0xff, 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, 0x0)
syz_mount_image$udf(&(0x7f0000001000), &(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="005190ee291f6d8f56a3f13e29ffde000026a8e453b68805b475693f96aa95cbd8c2c8c252ea5f5e06f2fc70d1665986feca7b04ec15a173cc7cd79f293406ec4c3f4be0afca2575b5ed1c3d9f713b9a076ce935a0f5663e5cb782e12c749d577411973289113755e22980bedacddb7881170909b6bf00cc920616988e3d63ab848d"], 0x1, 0xffb, &(0x7f00000010c0)="$eJzs3U1sHOd5B/DnHS5FUg7qtR0rTpUW67SpZcVxKUqKWcsopIglEFSwCVPMoUANr8SVsjBFLkiqkYN+qD3kkF7oS4v01AJJE+REoEAPQQ++FbkUPOTUk9PYhoHCxR4stEUBsZjdd8WlJJuCKX5I/v0A8T+cfd7ZmRWe3dnFvpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+8QdnRo+lvd4LAGA3vTz96uiY138A+Ew57/0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABbS1HETyLFazfa6fXO713D55rzV6/NTEzefdhI6owc6NSX/4aPjR0/cfLrL4z38pPH329fjFemz5+pnV240lpsLC01Zmsz882LC7ONe97Cdsff7mjnAahdeePq7KVLS7Wx549vuvla9f2hRw5VT40ffnaiVzszMTk53VdTGfzU936HdP82xUPkQBTxv5Hih8UHqR4RRWy/F7Z47thpI1Ep+69zEDMTk50DmWvW55fLG6d6jVCJqPYNOt3rkV3oxW05HXG9/H8qd/hoeXjTrfpi/cJcozZVX1xuLjcX5qdSd2/L46lFEeMpohUR7aG93nn2m8Eo4peR4sMftNOFiBjo9cFXX55+dXRs6w1UdmEnP+Zuq4MRa8UD0LOwTw1FEa9FisdWR+Ni7qtO27wb8UyZz0VcLfPtFCtlvhSRyieIIxE3vJ7AA60SRfx1pPjoVDvN9nq/c1557lu1b85fWuir7Z1XPvDvD3aTcxP2seEoot4542+nT/9hFwAAAAAAAAAAAACwO4p4K1I8/YsjqRX9c0qb85dr5+sX5rrfCu5997+WR62vr69XUzdHc07lbOVcybmacy1nO2e1yONzTuVs5VzJuZpzLWc7Z3Ugj885lbOVcyXnas61nO2c1Uoen3MqZyvnSs7VnGs523s05xEAAAAAAAAAAAAAAAAAAICH10gU8beR4sf/9Sed60pH57r0j54aP/Ubn+u/ZvxTW2ynrH0+In5W3Ns1eQ/ka41PpamUih04MGBLw1HEn+Xr//3lXu8MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwLxRRxAuR4js/b6dIEXE64vXo5jtDe713AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAvRhORdyIFH/zh8Od39eKiD+KiJvrN9cj/mf95vr9ttdHDAAAAAAAAAAAAAAAAAAAAPtQKuJfI8WPD7dTNSKuVd8feuRQ9dT44WcnBmIgUlnSX//K9PkztbMLV1qLjaWlxmxtZr55cWG2ca93N3yuOX/12szE5I4czJZGdnj/R4bPLrTeXGxe/vbyXW8/OHzmwtLyYv3i3W+OkahE1PrXHO3s8MzEZGen55r1+c7QqXSvewwAAAAAAAAAAAAAAAAAAMCDYDAV8XeR4q3xn9yad17pzvmv3F77o5ciirw8keef35qG3vm7Ab/W+bsB3eVHT42/+Jtf7l++65T1o50J9bWZicnJ6b7VlcE7S4fz/Y5u75CBrOz/1yPFGz+tpafzus39P3Cr9kd/utHv12/f0Mf0/Hb7/7G+deV9plTEk5Hi8L88FU939vNg3PE3M3LdX0WKb9z8Uq6LA2Xdl/Ptj3d+Dl9qzjVGy9p/jhSPNjbXfiXXPrFRe+yeH1h4AJT9/0+R4tXvrd7qjdz/uQM3ura//389Pzv0zgd2qv8f71tXzff7W/fn0OEzb+nN775Rn5trLFqwYMHCrYW9fmYCdlp5/v9vkeL65L/fer+bz/8/1/1t4/3/f//5xvn/i7dvaIfO/5/oW/difjcyWIkYXr7SGjwUMbz05ne/1rxSv9y43Jg/OX7i5PjvnXhhfPBA7739xtK2Hyp46JT9/4+R4uz3fxq/k9dtfv9/98//Dt6+oR3q/8/3rTu46f3Ktg8dPvPK/l+LFH9Rfzueyes+6fO/3ud9R/KHcCO9G3eo/5/sW1fLP470rTsyEOFDeQAAAAAAAAAAPqtSKuK383za0S3m034lUnzv95/LdelQWXc6317t/Bx+eWH+a2fm5hYu1pfrF+YatelW/WKjHPtspPjPD7+Uxxad+bW9+cbdOb4bc3GfjBRvHe/Vdufi9r6b+PmN2mNl7c8ixYmTm2t732N6cqN2rKz9v0jx/drdaw9t1B4va38VKVZu1nq1B8vasVz7hY3a5y8uzM3uwH8LAOyowVTER5HiH56opN7r2718//+OF70d+v7vF/rWze7SfOVtP6gAAAAAAAAAAAAAAAAAsE2DqYg/jhRnj/39rbn8m+f/9a4Dvnn+3+2udeb5VTvX//+45U8z/696fw4TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCimK+N1I8dqNdnpnqPy9a/hcc/7qtZmJybsPG0mdkQOd+vLf8LGx4ydOfv2F8V5+8vj77YvxyvT5M7WzC1dai42lpcZsbWa+eXFhtnHPW9ju+Nsd7TwAtStvXJ29dGmpNvb88U03X6u+P/TIoeqp8cPPTvRqZyYmJ6f7aiqDn/re75Du36Z4iByIIq5Hih8WH6RfDkUUsf1e2OK5Y6eNRKXsv85BzExMdg5krlmfXy5vnOo1QiWi2jfodK9HdqEXt+V0xPWIKModPloe3nSrvli/MNeoTdUXl5vLzYX5qdTd2/J4alHEeIpoRUR7aK93nv1mMIr4dqT48Aft9B9DEQO9Pvjqy9Ovjo5tvYHKLuzkx9xtdTBirXgAehb2qaEo4r1I8djqaPxqqNtXnbZ5N+KZMp+LuFrm2ylWynwpIpVPEEcibng9gQdaJYp4PFJ8dKqd3h3Kvd85rzz3rdo35y8t9NX2zisf+PcHu8m5CfvYcBTxQeeMv53e83oOAAAAAAAAAAAAAPtcEU9Fiqd/cSR15ofemlPanL9cO1+/MNf9Wn/vu/+1PGp9fX29mro5mnMqZyvnSs7VnGs52zmrRR6fcypnK+dKztWcaznbOasDeXzOqZytnCs5V3Ou5WznrFby+JxTOVs5V3Ku5lzL2d6jOY8AAAAAAAAAAAAAAAAAADz8iijipUjxnZ+30/pQ9/qyr0c333E9IHio/X8AAAD//7rgW9Y=")
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200080c0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)
syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000980)={[{@lazytime}, {@noload}, {@dioread_nolock}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@auto_da_alloc}, {@delalloc}], [{@permit_directio}, {@fowner_gt}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, 'nobh'}}, {@euid_eq}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, '\x9d\n\x97\xa0ez\x8c\xfc\xe0k\xce\x8aKB\x10\xe8\xef\xfe\xca\xc1\xeeQ\xb8Z.\x00\x85\xf0wK\b\xe9LN\xc5D\t\xbf,\x9c=1\x89\x0f\x1b~\x02\xb0g\xf0\aL\xe4z01\xd5*D1\xd8\xee\x002P\x87\xd2\x02\x13\xfaL\xeb\xedt\xd7\x9e\x16\xafM\x95`ke)\xc5\x1a\x85\xd6\x85\x83~\x16\xb5^#'}}]}, 0x1, 0x655, &(0x7f000001b700)="$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")
socketpair$unix(0x1, 0x5, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x4)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080))

0s ago: executing program 3 (id=2011):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c500000005000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES8=r3, @ANYRES16=r0, @ANYRES16=r1], 0xfffffeb7)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[])
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x44b, 0x0, 0xfffffffd, {0x7a, 0x0, 0x0, 0x0, 0x500, 0x44}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)

kernel console output (not intermixed with test programs):

80126][ T8922] MPTCP: addr_signal error, rm_addr=1
[  216.898186][ T4324] m920x_read = error: -19
[  216.908862][ T4324] dvb-usb: error while querying for an remote control event.
[  216.932533][ T1106] vhci_hcd: vhci_device speed not set
[  217.032788][ T4324] m920x_read = error: -19
[  217.038341][ T4324] dvb-usb: error while querying for an remote control event.
[  217.062700][ T4324] usb 2-1: USB disconnect, device number 8
[  217.120788][ T5160] usb 3-1: 2:1 : format type 0 is detected, processed as PCM
[  217.150660][ T4258] m920x_read = error: -19
[  217.155269][ T4258] dvb-usb: error while querying for an remote control event.
[  217.270446][ T1335] gspca_stk1135: reg_w 0x352 err -71
[  217.276861][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  217.293788][ T1335] gspca_stk1135: Sensor write failed
[  217.306925][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  217.323957][ T1335] gspca_stk1135: Sensor write failed
[  217.329602][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  217.346600][ T1335] gspca_stk1135: Sensor read failed
[  217.356754][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  217.365424][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'.
[  217.379095][ T1335] gspca_stk1135: Sensor read failed
[  217.385873][ T1335] gspca_stk1135: Detected sensor type unknown (0x0)
[  217.397921][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  217.410126][ T1335] gspca_stk1135: Sensor read failed
[  217.416339][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  217.430858][ T1335] gspca_stk1135: Sensor read failed
[  217.438117][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  217.445817][ T1335] gspca_stk1135: Sensor write failed
[  217.453019][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  217.459850][ T1335] gspca_stk1135: Sensor write failed
[  217.478552][ T1335] stk1135: probe of 4-1:0.0 failed with error -71
[  217.502449][ T1335] usb 4-1: USB disconnect, device number 8
[  217.508509][ T4324] m920x_read = error: -19
[  217.513494][ T4324] dvb-usb: error while querying for an remote control event.
[  217.642011][ T5142] m920x_read = error: -19
[  217.646502][ T5142] dvb-usb: error while querying for an remote control event.
[  217.770310][ T1335] m920x_read = error: -19
[  217.774827][ T1335] dvb-usb: error while querying for an remote control event.
[  217.860383][ T4324] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  217.900536][ T1106] m920x_read = error: -19
[  217.904958][ T1106] dvb-usb: error while querying for an remote control event.
[  218.000598][ T5160] usb 3-1: current rate 9338581 is different from the runtime rate 9338507
[  218.038686][ T1106] m920x_read = error: -19
[  218.056516][ T1106] dvb-usb: error while querying for an remote control event.
[  218.132522][ T4324] usb 1-1: Using ep0 maxpacket: 8
[  218.205606][ T1106] m920x_read = error: -19
[  218.219564][ T1106] dvb-usb: error while querying for an remote control event.
[  218.286579][ T5160] usb 3-1: USB disconnect, device number 11
[  218.362367][ T4242] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  218.371965][ T1106] m920x_read = error: -19
[  218.377454][ T4242] Bluetooth: hci4: Injecting HCI hardware error event
[  218.379485][ T1106] dvb-usb: error while querying for an remote control event.
[  218.396726][ T4197] Bluetooth: hci4: hardware error 0x00
[  218.434012][ T4324] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  218.458550][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.487420][ T4324] usb 1-1: Product: syz
[  218.502689][ T4324] usb 1-1: Manufacturer: syz
[  218.507340][ T4324] usb 1-1: SerialNumber: syz
[  218.556118][ T1106] m920x_read = error: -19
[  218.586676][ T4324] usb 1-1: config 0 descriptor??
[  218.592067][ T1106] dvb-usb: error while querying for an remote control event.
[  218.602679][ T7290] udevd[7290]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  218.700925][ T5160] m920x_read = error: -19
[  218.705510][ T5160] dvb-usb: error while querying for an remote control event.
[  218.850336][ T1106] m920x_read = error: -19
[  218.856405][ T1106] dvb-usb: error while querying for an remote control event.
[  218.900682][ T4324] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  219.000306][ T1106] m920x_read = error: -19
[  219.004872][ T1106] dvb-usb: error while querying for an remote control event.
[  219.136927][ T1106] m920x_read = error: -19
[  219.142339][ T1106] dvb-usb: error while querying for an remote control event.
[  219.176702][ T8998] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  219.250352][ T1106] m920x_read = error: -19
[  219.254854][ T1106] dvb-usb: error while querying for an remote control event.
[  219.414862][ T1106] m920x_read = error: -19
[  219.419352][ T1106] dvb-usb: error while querying for an remote control event.
[  219.550978][ T1106] m920x_read = error: -19
[  219.555565][ T1106] dvb-usb: error while querying for an remote control event.
[  219.701809][ T1106] m920x_read = error: -19
[  219.706403][ T1106] dvb-usb: error while querying for an remote control event.
[  219.851025][ T1106] m920x_read = error: -19
[  219.855516][ T1106] dvb-usb: error while querying for an remote control event.
[  219.910301][ T8303] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  220.010403][ T1106] m920x_read = error: -19
[  220.019112][ T1106] dvb-usb: error while querying for an remote control event.
[  220.152262][ T1106] m920x_read = error: -19
[  220.156841][ T1106] dvb-usb: error while querying for an remote control event.
[  220.241184][ T4242] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  220.250354][ T4324] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  220.285712][ T4324] usb 1-1: USB disconnect, device number 11
[  220.302193][ T1106] m920x_read = error: -19
[  220.306582][ T1106] dvb-usb: error while querying for an remote control event.
[  220.327476][ T8303] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  220.340530][ T8303] usb 3-1: config 0 has no interface number 0
[  220.347018][ T8303] usb 3-1: config 0 interface 1 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  220.365885][ T8303] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.379681][ T8303] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  220.395731][ T8303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.406200][ T8303] usb 3-1: config 0 descriptor??
[  220.440381][ T1335] m920x_read = error: -19
[  220.445100][ T1335] dvb-usb: error while querying for an remote control event.
[  220.462832][ T8303] usbhid 3-1:0.1: couldn't find an input interrupt endpoint
[  220.530664][ T4242] usb 5-1: Using ep0 maxpacket: 32
[  220.560987][ T4324] m920x_read = error: -19
[  220.565831][ T4324] dvb-usb: error while querying for an remote control event.
[  220.610279][ T1106] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  220.675669][ T4242] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping
[  220.687056][ T4242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  220.699506][ T4242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  220.744500][ T5142] m920x_read = error: -19
[  220.748884][ T5142] dvb-usb: error while querying for an remote control event.
[  220.860400][ T1106] usb 2-1: Using ep0 maxpacket: 8
[  220.867257][ T4258] m920x_read = error: -19
[  220.872026][ T4258] dvb-usb: error while querying for an remote control event.
[  220.919080][ T4242] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  220.956439][ T4242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.965042][ T4242] usb 5-1: Product: syz
[  220.969270][ T4242] usb 5-1: Manufacturer: syz
[  220.974451][ T4242] usb 5-1: SerialNumber: syz
[  220.981658][ T4242] usb 5-1: config 0 descriptor??
[  220.990309][ T5142] m920x_read = error: -19
[  220.994820][ T5142] dvb-usb: error while querying for an remote control event.
[  221.110374][ T4258] m920x_read = error: -19
[  221.114845][ T4258] dvb-usb: error while querying for an remote control event.
[  221.140869][ T1106] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  221.158767][ T1106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.167799][ T1106] usb 2-1: Product: syz
[  221.178250][ T1106] usb 2-1: Manufacturer: syz
[  221.183428][ T1106] usb 2-1: SerialNumber: syz
[  221.241326][ T4258] m920x_read = error: -19
[  221.245724][ T4258] dvb-usb: error while querying for an remote control event.
[  221.394709][ T9043] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  221.401563][ T9043] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  221.409793][ T9043] vhci_hcd vhci_hcd.0: Device attached
[  221.510051][ T1106] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  221.524926][ T9047] 8021q: adding VLAN 0 to HW filter on device batadv1
[  221.840410][ T4242] usb 33-1: new high-speed USB device number 6 using vhci_hcd
[  222.097159][ T9044] vhci_hcd: connection reset by peer
[  222.106620][ T4277] vhci_hcd: stop threads
[  222.124164][ T4277] vhci_hcd: release socket
[  222.161964][ T4277] vhci_hcd: disconnect device
[  222.619282][ T1106] m920x_read = error: -19
[  222.623939][ T1106] dvb-usb: error while querying for an remote control event.
[  222.640299][ T1106] usb 3-1: USB disconnect, device number 12
[  222.728390][ T5142] usb 5-1: USB disconnect, device number 10
[  222.742816][ T4258] m920x_read = error: -19
[  222.747359][ T4258] dvb-usb: error while querying for an remote control event.
[  222.856903][ T9059] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  222.865388][ T4258] m920x_read = error: -19
[  222.869840][ T4258] dvb-usb: error while querying for an remote control event.
[  222.894142][ T9059] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  223.000536][ T5142] m920x_read = error: -19
[  223.005119][ T5142] dvb-usb: error while querying for an remote control event.
[  223.038879][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1774'.
[  223.150299][ T1106] m920x_read = error: -19
[  223.154882][ T1106] dvb-usb: error while querying for an remote control event.
[  223.301105][ T8303] usb 2-1: USB disconnect, device number 9
[  223.301660][ T1106] m920x_read = error: -19
[  223.310103][ T8303] usblp0: removed
[  223.350281][ T5142] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  223.366107][ T1106] dvb-usb: error while querying for an remote control event.
[  223.521452][ T1106] m920x_read = error: -19
[  223.531455][ T1106] dvb-usb: error while querying for an remote control event.
[  223.610326][ T5142] usb 3-1: Using ep0 maxpacket: 16
[  223.677794][ T1106] m920x_read = error: -19
[  223.710988][ T1106] dvb-usb: error while querying for an remote control event.
[  223.746273][ T9098] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  223.753021][ T9098] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  223.762328][ T5142] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  223.775530][ T9098] vhci_hcd vhci_hcd.0: Device attached
[  223.813140][ T9098] 8021q: adding VLAN 0 to HW filter on device batadv1
[  223.843630][ T5142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  223.972755][ T5142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  224.079742][ T5142] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  224.186651][ T5142] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  224.418211][ T4324] m920x_read = error: -19
[  224.422993][ T4324] dvb-usb: error while querying for an remote control event.
[  224.453457][ T4277] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[  224.501198][ T5142] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  224.521094][ T9099] vhci_hcd: connection closed
[  224.521693][  T154] vhci_hcd: stop threads
[  224.535588][ T5142] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  224.615977][ T5142] usb 3-1: Manufacturer: syz
[  224.637817][  T154] vhci_hcd: release socket
[  224.696522][  T154] vhci_hcd: disconnect device
[  224.765729][ T5142] usb 3-1: config 0 descriptor??
[  225.042990][ T4324] m920x_read = error: -19
[  225.047383][ T4324] dvb-usb: error while querying for an remote control event.
[  225.190943][ T4324] m920x_read = error: -19
[  225.195363][ T4324] dvb-usb: error while querying for an remote control event.
[  225.280469][ T5142] rc_core: IR keymap rc-hauppauge not found
[  225.290318][ T5142] Registered IR keymap rc-empty
[  225.295591][ T5142] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  225.344665][ T4258] m920x_read = error: -19
[  225.349247][ T4258] dvb-usb: error while querying for an remote control event.
[  225.370337][ T5142] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  225.411696][ T5142] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  225.433364][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1786'.
[  225.455131][ T5142] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9
[  225.488698][ T4258] m920x_read = error: -19
[  225.501240][ T4258] dvb-usb: error while querying for an remote control event.
[  225.518158][ T5142] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  225.551379][ T5142] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  225.586451][ T5142] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  225.632250][ T5142] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  225.655382][ T4258] m920x_read = error: -19
[  225.659858][ T4258] dvb-usb: error while querying for an remote control event.
[  225.681320][ T5142] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  225.740255][ T5142] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  225.770356][ T5142] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  225.812026][ T5142] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  225.831964][ T4258] m920x_read = error: -19
[  225.836419][ T4258] dvb-usb: error while querying for an remote control event.
[  225.860883][ T5142] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  225.901265][ T5142] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  225.971980][ T5142] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  226.004280][ T5142] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  226.056588][ T5142] m920x_read = error: -19
[  226.073831][ T5142] dvb-usb: error while querying for an remote control event.
[  226.212661][ T4258] m920x_read = error: -19
[  226.217379][ T4258] dvb-usb: error while querying for an remote control event.
[  226.345809][ T5142] m920x_read = error: -19
[  226.352229][ T5142] dvb-usb: error while querying for an remote control event.
[  226.356751][ T8299] usb 3-1: USB disconnect, device number 13
[  226.480533][ T1335] m920x_read = error: -19
[  226.484978][ T1335] dvb-usb: error while querying for an remote control event.
[  226.540272][ T5142] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  226.620321][ T4258] m920x_read = error: -19
[  226.624859][ T4258] dvb-usb: error while querying for an remote control event.
[  226.778797][ T4258] m920x_read = error: -19
[  226.869198][ T9156] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  226.875987][ T9156] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  226.884710][ T9156] vhci_hcd vhci_hcd.0: Device attached
[  226.902237][ T9159] 8021q: adding VLAN 0 to HW filter on device batadv1
[  226.920339][ T5142] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.010878][ T4242] vhci_hcd: vhci_device speed not set
[  227.230380][ T8303] usb 37-1: new high-speed USB device number 4 using vhci_hcd
[  227.567555][ T9157] vhci_hcd: connection reset by peer
[  227.573813][  T154] vhci_hcd: stop threads
[  227.578765][  T154] vhci_hcd: release socket
[  227.637764][  T154] vhci_hcd: disconnect device
[  227.869148][ T4258] dvb-usb: error while querying for an remote control event.
[  228.088240][ T5142] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  228.098074][ T5142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.117809][ T5142] usb 1-1: config 0 descriptor??
[  228.162555][ T5142] pwc: Askey VC010 type 2 USB webcam detected.
[  228.200428][ T4258] m920x_read = error: -19
[  228.204963][ T4258] dvb-usb: error while querying for an remote control event.
[  228.247780][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1798'.
[  228.321812][ T9169] print_req_error: 25 callbacks suppressed
[  228.321832][ T9169] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.360306][ T4258] m920x_read = error: -19
[  228.369645][ T4258] dvb-usb: error while querying for an remote control event.
[  228.377287][ T9169] FAT-fs (loop3): unable to read boot sector
[  228.510441][ T4258] m920x_read = error: -19
[  228.515000][ T4258] dvb-usb: error while querying for an remote control event.
[  228.600298][ T4641] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  228.600298][ T5142] pwc: recv_control_msg error -32 req 02 val 2b00
[  228.641606][ T4258] m920x_read = error: -19
[  228.646680][ T4258] dvb-usb: error while querying for an remote control event.
[  228.670337][ T5142] pwc: recv_control_msg error -32 req 02 val 2700
[  228.720717][ T5142] pwc: recv_control_msg error -32 req 02 val 2c00
[  228.737244][ T8299] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  228.760340][ T5142] pwc: recv_control_msg error -32 req 04 val 1000
[  228.790295][ T1335] m920x_read = error: -19
[  228.794681][ T1335] dvb-usb: error while querying for an remote control event.
[  228.802625][ T5142] pwc: recv_control_msg error -32 req 04 val 1300
[  228.840326][ T5142] pwc: recv_control_msg error -32 req 04 val 1400
[  228.875695][ T4641] usb 3-1: Using ep0 maxpacket: 8
[  228.881107][ T5142] pwc: recv_control_msg error -32 req 02 val 2000
[  228.920303][ T5142] pwc: recv_control_msg error -32 req 02 val 2100
[  228.930702][ T1335] m920x_read = error: -19
[  228.935118][ T1335] dvb-usb: error while querying for an remote control event.
[  228.960380][ T5142] pwc: recv_control_msg error -32 req 04 val 1500
[  229.010402][ T5142] pwc: recv_control_msg error -32 req 02 val 2500
[  229.022573][ T8299] usb 5-1: Using ep0 maxpacket: 32
[  229.030554][ T4641] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  229.038921][ T4641] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  229.051062][ T4641] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  229.054990][ T5142] pwc: recv_control_msg error -32 req 02 val 2400
[  229.061002][ T4641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.067104][ T1335] m920x_read = error: -19
[  229.089314][ T1335] dvb-usb: error while querying for an remote control event.
[  229.106764][ T5142] pwc: recv_control_msg error -32 req 02 val 2600
[  229.110199][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1807'.
[  229.211065][ T1335] m920x_read = error: -19
[  229.215466][ T1335] dvb-usb: error while querying for an remote control event.
[  229.360288][ T1335] m920x_read = error: -19
[  229.360428][ T8299] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  229.364963][ T1335] dvb-usb: error while querying for an remote control event.
[  229.382160][ T5142] pwc: recv_control_msg error -32 req 02 val 2800
[  229.390124][ T8299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.407879][ T8299] usb 5-1: Product: syz
[  229.419078][ T8299] usb 5-1: Manufacturer: syz
[  229.420490][ T5142] pwc: recv_control_msg error -32 req 04 val 1100
[  229.424092][ T8299] usb 5-1: SerialNumber: syz
[  229.456462][ T8299] usb 5-1: config 0 descriptor??
[  229.482314][ T5142] pwc: Registered as video103.
[  229.488510][ T5142] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10
[  229.503737][ T8299] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  229.510637][ T1335] m920x_read = error: -19
[  229.515477][ T1335] dvb-usb: error while querying for an remote control event.
[  229.630577][ T8291] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  229.671830][ T1335] m920x_read = error: -19
[  229.676387][ T1335] dvb-usb: error while querying for an remote control event.
[  229.734791][ T1335] usb 1-1: USB disconnect, device number 12
[  229.820304][ T4258] m920x_read = error: -19
[  229.824798][ T4258] dvb-usb: error while querying for an remote control event.
[  229.950821][ T4258] m920x_read = error: -19
[  229.960487][ T4258] dvb-usb: error while querying for an remote control event.
[  230.011218][ T8291] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  230.030193][ T8291] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.050210][ T8291] usb 2-1: config 0 interface 0 has no altsetting 0
[  230.057174][ T8291] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  230.080263][ T8291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.080543][ T4258] m920x_read = error: -19
[  230.092808][ T8291] usb 2-1: config 0 descriptor??
[  230.109356][ T4258] dvb-usb: error while querying for an remote control event.
[  230.223717][ T4258] m920x_read = error: -19
[  230.228115][ T4258] dvb-usb: error while querying for an remote control event.
[  230.352418][ T4258] m920x_read = error: -19
[  230.357214][ T4258] dvb-usb: error while querying for an remote control event.
[  230.367014][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1811'.
[  230.491596][ T4258] m920x_read = error: -19
[  230.496658][ T4258] dvb-usb: error while querying for an remote control event.
[  230.583714][ T8291] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0
[  230.610415][ T8291] hid-steam 0003:28DE:1102.0006: unknown main item tag 0x0
[  230.622870][ T8291] hid-steam 0003:28DE:1102.0006: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0
[  230.626641][ T1335] m920x_read = error: -19
[  230.650470][ T1335] dvb-usb: error while querying for an remote control event.
[  230.658765][ T8291] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0
[  230.718192][ T8291] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0
[  230.760262][ T1335] m920x_read = error: -19
[  230.764786][ T1335] dvb-usb: error while querying for an remote control event.
[  230.768130][ T8291] hid-steam 0003:28DE:1102.0007: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0
[  230.841471][ T9226] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  230.882047][ T1335] m920x_read = error: -19
[  230.888756][ T1335] dvb-usb: error while querying for an remote control event.
[  230.906675][ T8291] hid-steam 0003:28DE:1102.0006: Steam Controller 'XXXXXXXXXX' connected
[  230.926800][ T8291] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0006/input/input11
[  231.010306][ T1335] m920x_read = error: -19
[  231.011182][ T8291] usb 2-1: USB disconnect, device number 10
[  231.020505][ T1335] dvb-usb: error while querying for an remote control event.
[  231.150358][ T1335] m920x_read = error: -19
[  231.154972][ T1335] dvb-usb: error while querying for an remote control event.
[  231.167491][ T8291] hid-steam 0003:28DE:1102.0006: Steam Controller 'XXXXXXXXXX' disconnected
[  231.204069][ T9232] fido_id[9232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  231.285693][ T4258] usb 3-1: USB disconnect, device number 14
[  231.301114][ T5142] m920x_read = error: -19
[  231.305920][ T5142] dvb-usb: error while querying for an remote control event.
[  231.469961][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'.
[  231.481319][ T5142] m920x_read = error: -19
[  231.485704][ T5142] dvb-usb: error while querying for an remote control event.
[  231.520341][ T1335] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  231.624116][ T4258] m920x_read = error: -19
[  231.629042][ T4258] dvb-usb: error while querying for an remote control event.
[  231.760281][ T4258] m920x_read = error: -19
[  231.764766][ T4258] dvb-usb: error while querying for an remote control event.
[  231.785153][ T1335] usb 1-1: Using ep0 maxpacket: 8
[  231.911193][ T1335] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  231.964320][ T1335] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  232.078596][ T1335] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  232.207116][ T1335] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  232.323714][ T1335] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  232.350575][ T8303] vhci_hcd: vhci_device speed not set
[  232.402466][ T1335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.552311][ T4258] m920x_read = error: -19
[  232.557442][ T4258] dvb-usb: error while querying for an remote control event.
[  232.690039][ T9262] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  232.707262][ T9264] overlayfs: unrecognized mount option "verity=on" or missing value
[  232.744959][ T5142] m920x_read = error: -19
[  232.754838][ T5142] dvb-usb: error while querying for an remote control event.
[  232.814255][ T1335] usb 1-1: GET_CAPABILITIES returned 0
[  232.823105][ T1335] usbtmc 1-1:16.0: can't read capabilities
[  232.891216][ T1335] m920x_read = error: -19
[  232.896503][ T1335] dvb-usb: error while querying for an remote control event.
[  232.930373][ T4258] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  233.016283][ T8299] gspca_stk1135: reg_w 0x353 err -71
[  233.022855][ T8299] gspca_stk1135: serial bus timeout: status=0x00
[  233.029211][ T8299] gspca_stk1135: Sensor write failed
[  233.030252][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  233.046205][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  233.048401][ T8299] gspca_stk1135: serial bus timeout: status=0x00
[  233.055493][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  233.062125][ T8299] gspca_stk1135: Sensor write failed
[  233.071529][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  233.076790][ T8299] gspca_stk1135: serial bus timeout: status=0x00
[  233.086326][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  233.086370][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  233.086406][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  233.086442][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  233.086474][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  233.086504][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  233.086537][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  233.086570][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  233.101690][ T8299] gspca_stk1135: Sensor read failed
[  233.102625][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  233.112527][ T8299] gspca_stk1135: serial bus timeout: status=0x00
[  233.121168][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  233.136132][ T8299] gspca_stk1135: Sensor read failed
[  233.139666][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  233.149042][ T8299] gspca_stk1135: Detected sensor type unknown (0x0)
[  233.158125][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2
[  233.168292][ T8299] gspca_stk1135: serial bus timeout: status=0x00
[  233.176060][ T1335] m920x_read = error: -19
[  233.212395][ T8299] gspca_stk1135: Sensor read failed
[  233.240704][ T1335] dvb-usb: error while querying for an remote control event.
[  233.276128][ T1335] usb 1-1: USB disconnect, device number 13
[  233.308648][ T8299] gspca_stk1135: serial bus timeout: status=0x00
[  233.332157][ T8299] gspca_stk1135: Sensor read failed
[  233.340890][ T8299] gspca_stk1135: serial bus timeout: status=0x00
[  233.361777][ T4324] m920x_read = error: -19
[  233.366257][ T4324] dvb-usb: error while querying for an remote control event.
[  233.368125][ T8299] gspca_stk1135: Sensor write failed
[  233.388062][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'.
[  233.390449][ T4258] usb 2-1: Using ep0 maxpacket: 32
[  233.405261][ T8299] gspca_stk1135: serial bus timeout: status=0x00
[  233.418339][ T8299] gspca_stk1135: Sensor write failed
[  233.426258][ T8299] stk1135: probe of 5-1:0.0 failed with error -71
[  233.444010][ T8299] usb 5-1: USB disconnect, device number 11
[  233.490745][ T1335] m920x_read = error: -19
[  233.495483][ T1335] dvb-usb: error while querying for an remote control event.
[  233.539894][ T4258] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  233.620510][ T4324] m920x_read = error: -19
[  233.626195][ T4324] dvb-usb: error while querying for an remote control event.
[  233.710755][ T4258] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  233.720428][ T4258] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  233.731004][ T4258] usb 2-1: Product: syz
[  233.740329][ T4258] usb 2-1: Manufacturer: syz
[  233.745543][ T4258] usb 2-1: SerialNumber: syz
[  233.766150][ T8291] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  233.769764][ T4258] usb 2-1: config 0 descriptor??
[  233.783297][ T1335] m920x_read = error: -19
[  233.787790][ T1335] dvb-usb: error while querying for an remote control event.
[  233.800559][ T9258] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  233.900533][ T4324] m920x_read = error: -19
[  233.905125][ T4324] dvb-usb: error while querying for an remote control event.
[  234.021511][ T4324] m920x_read = error: -19
[  234.026239][ T4324] dvb-usb: error while querying for an remote control event.
[  234.080359][ T1335] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  234.141710][ T4324] m920x_read = error: -19
[  234.147599][ T4324] dvb-usb: error while querying for an remote control event.
[  234.161751][ T8291] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  234.172577][ T8291] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  234.260383][ T4324] m920x_read = error: -19
[  234.268615][ T4324] dvb-usb: error while querying for an remote control event.
[  234.320413][ T1335] usb 1-1: Using ep0 maxpacket: 32
[  234.352029][ T8291] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  234.370321][ T8291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.378467][ T8291] usb 3-1: Product: syz
[  234.380607][ T4324] m920x_read = error: -19
[  234.388724][ T4324] dvb-usb: error while querying for an remote control event.
[  234.390185][ T8291] usb 3-1: Manufacturer: syz
[  234.420257][ T8291] usb 3-1: SerialNumber: syz
[  234.429515][ T8291] usb 3-1: config 0 descriptor??
[  234.450532][ T9279] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  234.458139][ T9279] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  234.514092][ T4324] m920x_read = error: -19
[  234.518744][ T4324] dvb-usb: error while querying for an remote control event.
[  234.599448][ T9309] fuse: Bad value for 'fd'
[  234.607888][ T1335] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  234.624239][ T9309] process 'syz.3.1845' launched './file0' with NULL argv: empty string added
[  234.636914][ T1335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.649909][ T1335] usb 1-1: Product: syz
[  234.664082][ T1335] usb 1-1: Manufacturer: syz
[  234.678186][ T1335] usb 1-1: SerialNumber: syz
[  234.695928][ T1335] usb 1-1: config 0 descriptor??
[  234.703025][ T9279] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  234.708512][ T4324] m920x_read = error: -19
[  234.714742][ T4324] dvb-usb: error while querying for an remote control event.
[  234.721833][ T9279] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  234.742490][ T1335] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  234.845344][ T4324] m920x_read = error: -19
[  234.853644][ T4324] dvb-usb: error while querying for an remote control event.
[  234.980432][ T4324] m920x_read = error: -19
[  234.985292][ T4324] dvb-usb: error while querying for an remote control event.
[  235.115889][ T4324] m920x_read = error: -19
[  235.120664][ T4324] dvb-usb: error while querying for an remote control event.
[  235.216335][ T4324] usb 2-1: USB disconnect, device number 11
[  235.253080][ T5142] m920x_read = error: -19
[  235.257469][ T5142] dvb-usb: error while querying for an remote control event.
[  235.469561][ T5142] m920x_read = error: -19
[  235.474242][ T5142] dvb-usb: error while querying for an remote control event.
[  235.616230][ T9333] 9pnet_virtio: no channels available for device syz
[  236.001265][ T8291] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  236.181321][ T8291] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08
[  236.244229][ T8291] usb 3-1: USB disconnect, device number 15
[  236.284722][ T8291] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet
[  236.307642][ T5142] m920x_read = error: -19
[  236.312664][ T5142] dvb-usb: error while querying for an remote control event.
[  236.430308][ T5142] m920x_read = error: -19
[  236.434886][ T5142] dvb-usb: error while querying for an remote control event.
[  236.462676][ T9338] loop4: detected capacity change from 0 to 1024
[  236.510390][ T4324] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  236.550334][ T5142] m920x_read = error: -19
[  236.554908][ T5142] dvb-usb: error while querying for an remote control event.
[  236.628978][ T9338] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  236.680265][ T5142] m920x_read = error: -19
[  236.684770][ T5142] dvb-usb: error while querying for an remote control event.
[  236.778395][ T4324] usb 2-1: Using ep0 maxpacket: 16
[  236.814909][ T5142] m920x_read = error: -19
[  236.832158][ T5142] dvb-usb: error while querying for an remote control event.
[  236.930537][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.979457][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.107216][ T4324] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  237.117229][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.136025][ T4324] usb 2-1: config 0 descriptor??
[  237.239895][ T1106] m920x_read = error: -19
[  237.246960][ T1106] dvb-usb: error while querying for an remote control event.
[  237.437396][ T4258] m920x_read = error: -19
[  237.648006][ T1335] gspca_stk1135: reg_w 0x203 err -110
[  237.969371][ T4258] dvb-usb: error while querying for an remote control event.
[  237.980262][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  237.986691][ T1335] gspca_stk1135: Sensor write failed
[  238.406016][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.439862][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.448089][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  238.454949][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.464839][ T1335] gspca_stk1135: Sensor write failed
[  238.475001][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.482805][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  238.499699][ T1335] gspca_stk1135: Sensor read failed
[  238.505477][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.513988][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  238.523412][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.539836][ T1335] gspca_stk1135: Sensor read failed
[  238.553818][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.568619][ T1335] gspca_stk1135: Detected sensor type unknown (0x0)
[  238.575962][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.584550][ T9341] loop2: detected capacity change from 0 to 32768
[  238.586002][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  238.600351][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.607868][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.617487][ T1335] gspca_stk1135: Sensor read failed
[  238.623072][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  238.629578][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.637995][ T1335] gspca_stk1135: Sensor read failed
[  238.646148][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  238.653016][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.660989][ T1335] gspca_stk1135: Sensor write failed
[  238.666405][ T1335] gspca_stk1135: serial bus timeout: status=0x00
[  238.673812][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.682032][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.689872][ T1335] gspca_stk1135: Sensor write failed
[  238.695739][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.703710][ T1335] stk1135: probe of 1-1:0.0 failed with error -110
[  238.725998][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.780220][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.805773][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.814265][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.821979][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.840529][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.848644][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.862757][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.878618][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.886993][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.901357][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.909022][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.925066][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.935002][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.950591][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.973023][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  238.999452][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.014606][ T9376] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20006
[  239.030310][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.055654][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.084881][ T9376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  239.100474][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.120474][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.129022][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.168456][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.217252][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.248702][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.289068][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.318241][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.360551][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.398593][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.411519][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.420472][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.428253][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.436385][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.444223][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.452290][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.460002][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.468969][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.486025][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.568171][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  239.992774][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.035384][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.064359][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.098303][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.137286][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.179699][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.209778][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.228002][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.240120][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.290017][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.321488][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.329008][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.395029][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.421709][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.454675][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.485263][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.513938][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.543970][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.574216][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.603858][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.634449][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.663377][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.682463][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.703872][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.743831][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.861854][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.879033][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  240.896904][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.299468][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.341638][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.380483][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.422512][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.462183][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.501473][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.544968][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.690774][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.698404][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.710389][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.718900][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.732348][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.748139][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.778582][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.807097][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.832593][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.850066][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.858365][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.874080][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.891816][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.900275][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.908037][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.916336][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.925028][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.932603][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.940295][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.948247][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.955857][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.963445][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.971117][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.978736][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  241.986355][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.014000][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.022141][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.029646][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.037366][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.045129][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.052772][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.061501][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.070001][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.077633][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.085423][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.093161][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.101158][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.109764][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.159339][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.177644][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.185909][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.193906][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.208493][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.216237][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.224892][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.233637][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.241264][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.248903][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.256550][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.264174][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.272646][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.281327][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.289097][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.296708][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.305613][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.313150][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.321171][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.329970][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.337629][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.345485][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.353220][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.362732][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.370686][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.378285][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.385979][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.394305][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.402882][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.410719][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.418404][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.426269][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.434992][ T4324] hid-generic 0003:0458:5012.0008: unknown main item tag 0x0
[  242.457391][ T4324] hid-generic 0003:0458:5012.0008: hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0
[  242.485839][ T5160] m920x_read = error: -19
[  242.490500][ T5160] dvb-usb: error while querying for an remote control event.
[  242.541998][ T5160] usb 1-1: USB disconnect, device number 14
[  242.596183][ T9341] XFS (loop2): Mounting V5 Filesystem
[  242.610776][ T8291] usb 2-1: USB disconnect, device number 12
[  242.637182][ T5142] m920x_read = error: -19
[  242.641990][ T5142] dvb-usb: error while querying for an remote control event.
[  242.679789][ T9409] fido_id[9409]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  242.722432][ T9341] XFS (loop2): log mount failed
[  242.790495][ T1335] m920x_read = error: -19
[  242.794891][ T1335] dvb-usb: error while querying for an remote control event.
[  242.981290][ T1335] m920x_read = error: -19
[  242.985787][ T1335] dvb-usb: error while querying for an remote control event.
[  243.122267][ T1335] m920x_read = error: -19
[  243.140493][ T1335] dvb-usb: error while querying for an remote control event.
[  243.272701][ T5142] m920x_read = error: -19
[  243.277244][ T5142] dvb-usb: error while querying for an remote control event.
[  243.420429][ T5142] m920x_read = error: -19
[  243.424913][ T5142] dvb-usb: error while querying for an remote control event.
[  243.523142][ T9424] loop0: detected capacity change from 0 to 32768
[  243.570432][ T9424] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1871 (9424)
[  243.623918][ T9424] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  243.624028][ T9424] BTRFS info (device loop0): force zlib compression, level 3
[  243.624050][ T9424] BTRFS info (device loop0): force clearing of disk cache
[  243.624066][ T9424] BTRFS info (device loop0): setting nodatasum
[  243.624085][ T9424] BTRFS info (device loop0): allowing degraded mounts
[  243.624103][ T9424] BTRFS info (device loop0): disabling free space tree
[  243.624119][ T9424] BTRFS info (device loop0): has skinny extents
[  243.710368][ T1335] m920x_read = error: -19
[  243.710395][ T1335] dvb-usb: error while querying for an remote control event.
[  243.822644][ T5142] m920x_read = error: -19
[  243.822662][ T5142] dvb-usb: error while querying for an remote control event.
[  243.930561][ T5142] m920x_read = error: -19
[  243.930588][ T5142] dvb-usb: error while querying for an remote control event.
[  243.949782][ T9424] BTRFS info (device loop0): enabling ssd optimizations
[  243.955437][ T9424] BTRFS info (device loop0): clearing free space tree
[  243.955930][ T9424] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  243.955987][ T9424] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  244.000236][ T1335] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[  244.042259][ T5142] m920x_read = error: -19
[  244.042276][ T5142] dvb-usb: error while querying for an remote control event.
[  244.150523][ T5142] m920x_read = error: -19
[  244.349054][ T5142] dvb-usb: error while querying for an remote control event.
[  244.360554][ T1335] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  244.477829][ T1335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.502128][ T1335] usb 3-1: config 0 descriptor??
[  244.598217][   T26] audit: type=1400 audit(1756456925.074:2): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9423 comm="syz.0.1871"
[  244.617184][ T4258] m920x_read = error: -19
[  244.653620][ T4258] dvb-usb: error while querying for an remote control event.
[  245.082084][ T4258] m920x_read = error: -19
[  245.130470][ T4258] dvb-usb: error while querying for an remote control event.
[  245.272269][ T4258] m920x_read = error: -19
[  245.310658][ T4258] dvb-usb: error while querying for an remote control event.
[  245.744690][    T7] m920x_read = error: -19
[  245.749306][    T7] dvb-usb: error while querying for an remote control event.
[  245.891076][    T7] m920x_read = error: -19
[  245.897844][    T7] dvb-usb: error while querying for an remote control event.
[  245.961752][ T9453] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  246.023467][    T7] m920x_read = error: -19
[  246.028268][    T7] dvb-usb: error while querying for an remote control event.
[  246.119394][ T9461] loop0: detected capacity change from 0 to 256
[  246.181684][    T7] m920x_read = error: -19
[  246.186827][ T9461] exfat: Unknown parameter 'zero_size_dir'
[  246.200532][    T7] dvb-usb: error while querying for an remote control event.
[  246.331707][    T7] m920x_read = error: -19
[  246.336190][    T7] dvb-usb: error while querying for an remote control event.
[  246.425920][ T9465] loop0: detected capacity change from 0 to 64
[  246.474181][ T9467] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.500489][    T7] m920x_read = error: -19
[  246.508956][    T7] dvb-usb: error while querying for an remote control event.
[  246.521398][ T9467] tipc: Resetting bearer <eth:syzkaller0>
[  246.559064][ T9466] tipc: Disabling bearer <eth:syzkaller0>
[  246.625049][ T9465] Trying to free block not in datazone
[  246.630388][    T7] m920x_read = error: -19
[  246.635947][    T7] dvb-usb: error while querying for an remote control event.
[  246.650894][ T9470] Trying to free block not in datazone
[  246.704613][ T9470] minix_free_inode: bit 5 already cleared
[  246.714120][ T9472] loop1: detected capacity change from 0 to 512
[  246.792941][    T7] m920x_read = error: -19
[  246.797926][    T7] dvb-usb: error while querying for an remote control event.
[  246.831131][ T1335] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  246.865931][ T1335] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  246.898596][ T1335] asix: probe of 3-1:0.0 failed with error -71
[  246.899040][ T9472] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  246.908754][ T1335] usb 3-1: USB disconnect, device number 16
[  246.922055][ T9456] loop4: detected capacity change from 0 to 32768
[  246.954480][    T7] m920x_read = error: -19
[  246.960034][    T7] dvb-usb: error while querying for an remote control event.
[  246.991357][ T9472] EXT4-fs (loop1): shut down requested (2)
[  247.081312][    T7] m920x_read = error: -19
[  247.088918][    T7] dvb-usb: error while querying for an remote control event.
[  247.265525][ T9456] XFS (loop4): Mounting V5 Filesystem
[  247.289400][ T9492] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.1884'.
[  247.320304][    T7] m920x_read = error: -19
[  247.324792][    T7] dvb-usb: error while querying for an remote control event.
[  247.435411][ T9456] XFS (loop4): Ending clean mount
[  247.450346][    T7] m920x_read = error: -19
[  247.456487][    T7] dvb-usb: error while querying for an remote control event.
[  247.497552][ T9498] loop2: detected capacity change from 0 to 512
[  247.664851][    T7] m920x_read = error: -19
[  247.685639][    T7] dvb-usb: error while querying for an remote control event.
[  247.698279][ T9498] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  247.710723][ T9498] UDF-fs: Scanning with blocksize 512 failed
[  247.722696][ T9498] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  247.745596][ T9498] UDF-fs: Scanning with blocksize 1024 failed
[  247.767269][ T9498] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  247.783602][ T9500] ptrace attach of "./syz-executor exec"[4185] was attempted by "./syz-executor exec"[9500]
[  247.811799][    T7] m920x_read = error: -19
[  247.816632][    T7] dvb-usb: error while querying for an remote control event.
[  247.829241][ T9498] UDF-fs: Scanning with blocksize 2048 failed
[  247.851314][ T9498] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  247.889705][ T9498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  247.950343][    T7] m920x_read = error: -19
[  247.954950][    T7] dvb-usb: error while querying for an remote control event.
[  247.987782][   T26] audit: type=1804 audit(1756456928.464:3): pid=9498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1885" name="/newroot/406/file0/bus" dev="loop2" ino=42 res=1 errno=0
[  248.070448][ T5148] m920x_read = error: -19
[  248.075310][ T5148] dvb-usb: error while querying for an remote control event.
[  248.200320][    T7] m920x_read = error: -19
[  248.205108][    T7] dvb-usb: error while querying for an remote control event.
[  248.330519][    T7] m920x_read = error: -19
[  248.335141][    T7] dvb-usb: error while querying for an remote control event.
[  248.378166][ T9507] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  248.460423][    T7] m920x_read = error: -19
[  248.464910][    T7] dvb-usb: error while querying for an remote control event.
[  248.621292][ T1335] m920x_read = error: -19
[  248.625847][ T1335] dvb-usb: error while querying for an remote control event.
[  248.781033][ T1335] m920x_read = error: -19
[  248.785428][ T1335] dvb-usb: error while querying for an remote control event.
[  248.816671][ T9514] loop2: detected capacity change from 0 to 2048
[  248.837168][ T9493] loop1: detected capacity change from 0 to 32768
[  248.905904][ T9514] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  248.940494][ T1335] m920x_read = error: -19
[  248.945143][ T1335] dvb-usb: error while querying for an remote control event.
[  249.067722][ T9493] XFS (loop1): Mounting V5 Filesystem
[  249.140920][ T1335] m920x_read = error: -19
[  249.145347][ T1335] dvb-usb: error while querying for an remote control event.
[  249.221731][ T9525] loop0: detected capacity change from 0 to 16
[  249.287313][ T9493] XFS (loop1): Ending clean mount
[  249.313279][ T9493] XFS (loop1): Quotacheck needed: Please wait.
[  249.352812][ T9525] erofs: (device loop0): mounted with root inode @ nid 36.
[  249.389907][ T1335] m920x_read = error: -19
[  249.420278][ T1335] dvb-usb: error while querying for an remote control event.
[  249.461555][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1891'.
[  249.523584][ T9493] XFS (loop1): Quotacheck: Done.
[  249.548095][ T9525] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  249.557091][ T9525] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  249.562252][ T1335] m920x_read = error: -19
[  249.566017][ T9525] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  249.579107][ T9525] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  249.583622][ T1335] dvb-usb: error while querying for an remote control event.
[  249.674965][ T9534] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  249.715967][ T9534] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -23 in[64, 4032] out[1851]
[  249.733628][ T1335] m920x_read = error: -19
[  249.738097][ T1335] dvb-usb: error while querying for an remote control event.
[  249.796443][ T9534] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[  249.857317][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1891'.
[  249.891688][ T1335] m920x_read = error: -19
[  249.896351][ T1335] dvb-usb: error while querying for an remote control event.
[  250.052450][ T1335] m920x_read = error: -19
[  250.057007][ T1335] dvb-usb: error while querying for an remote control event.
[  250.061090][ T9535] XFS (loop1): User initiated shutdown received.
[  250.080767][ T9535] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:481).  Shutting down filesystem.
[  250.173675][ T9535] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  250.198898][ T9548] fuse: Bad value for 'fd'
[  250.200586][ T1335] m920x_read = error: -19
[  250.212378][ T4185] XFS (loop4): Unmounting Filesystem
[  250.230260][ T1335] dvb-usb: error while querying for an remote control event.
[  250.344015][ T5148] m920x_read = error: -19
[  250.348653][ T5148] dvb-usb: error while querying for an remote control event.
[  250.376631][ T4183] XFS (loop1): Unmounting Filesystem
[  251.065110][    T7] m920x_read = error: -19
[  251.069599][    T7] dvb-usb: error while querying for an remote control event.
[  251.126091][ T9557] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  251.191152][ T5148] m920x_read = error: -19
[  251.195569][ T5148] dvb-usb: error while querying for an remote control event.
[  251.330338][ T5148] m920x_read = error: -19
[  251.334873][ T5148] dvb-usb: error while querying for an remote control event.
[  252.360655][    T7] m920x_read = error: -19
[  252.365534][    T7] dvb-usb: error while querying for an remote control event.
[  252.481041][ T5138] m920x_read = error: -19
[  252.496982][ T5138] dvb-usb: error while querying for an remote control event.
[  252.549653][ T9546] loop0: detected capacity change from 0 to 32768
[  252.609028][ T9562] sctp: [Deprecated]: syz.1.1900 (pid 9562) Use of int in max_burst socket option.
[  252.609028][ T9562] Use struct sctp_assoc_value instead
[  252.624246][ T5138] m920x_read = error: -19
[  252.628614][ T5138] dvb-usb: error while querying for an remote control event.
[  252.800396][ T9546] XFS (loop0): Mounting V5 Filesystem
[  252.851715][    T7] m920x_read = error: -19
[  252.856205][    T7] dvb-usb: error while querying for an remote control event.
[  252.913937][ T9546] XFS (loop0): Ending clean mount
[  252.926133][ T9546] XFS (loop0): Quotacheck needed: Please wait.
[  253.063917][ T5148] m920x_read = error: -19
[  253.068534][ T5148] dvb-usb: error while querying for an remote control event.
[  253.076497][ T9546] XFS (loop0): Quotacheck: Done.
[  253.100215][    T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  253.150372][ T9546] overlayfs: missing 'lowerdir'
[  253.261847][ T5138] m920x_read = error: -19
[  253.266251][ T5138] dvb-usb: error while querying for an remote control event.
[  253.762912][ T4184] XFS (loop0): Unmounting Filesystem
[  253.797588][ T9590] loop1: detected capacity change from 0 to 2048
[  253.850426][    T7] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  253.867413][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.930478][    T7] usb 3-1: config 0 descriptor??
[  253.937421][ T5148] m920x_read = error: -19
[  253.942587][ T5148] dvb-usb: error while querying for an remote control event.
[  253.969075][ T9590] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  254.046472][ T9590] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.085957][ T5148] m920x_read = error: -19
[  254.090726][ T5148] dvb-usb: error while querying for an remote control event.
[  254.240364][ T5148] m920x_read = error: -19
[  254.244928][ T5148] dvb-usb: error while querying for an remote control event.
[  254.378799][ T9596] ODEBUG: Out of memory. ODEBUG disabled
[  254.415270][ T5148] m920x_read = error: -19
[  254.420070][ T5148] dvb-usb: error while querying for an remote control event.
[  254.430372][    T7] hackrf 3-1:0.0: Board ID: 00
[  254.435166][    T7] hackrf 3-1:0.0: Firmware version: ´8¾8d5#)Æ@lmÐ@ÿʽ*(
[  254.489183][    T7] hackrf 3-1:0.0: Registered as swradio24
[  254.515241][    T7] hackrf 3-1:0.0: Registered as swradio25
[  254.531010][    T7] hackrf 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  254.619442][    T7] m920x_read = error: -19
[  254.635984][    T7] dvb-usb: error while querying for an remote control event.
[  254.691332][ T8291] usb 3-1: USB disconnect, device number 17
[  254.932977][ T5148] m920x_read = error: -19
[  254.937593][ T5148] dvb-usb: error while querying for an remote control event.
[  255.571394][    T7] m920x_read = error: -19
[  255.575756][    T7] dvb-usb: error while querying for an remote control event.
[  255.711826][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  255.718385][ T5148] m920x_read = error: -19
[  255.723205][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  255.730735][ T5148] dvb-usb: error while querying for an remote control event.
[  255.860411][    T7] m920x_read = error: -19
[  255.864877][    T7] dvb-usb: error while querying for an remote control event.
[  256.070882][ T5148] m920x_read = error: -19
[  256.075474][ T5148] dvb-usb: error while querying for an remote control event.
[  256.125037][ T9606] loop0: detected capacity change from 0 to 32768
[  256.190469][ T5148] m920x_read = error: -19
[  256.197875][ T5148] dvb-usb: error while querying for an remote control event.
[  256.340619][ T5148] m920x_read = error: -19
[  256.345590][ T5148] dvb-usb: error while querying for an remote control event.
[  256.378398][ T9606] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  256.527807][ T5148] m920x_read = error: -19
[  256.532707][ T5148] dvb-usb: error while querying for an remote control event.
[  257.026372][ T5148] m920x_read = error: -19
[  257.030825][ T5148] dvb-usb: error while querying for an remote control event.
[  257.043261][ T1109] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  257.065359][   T26] audit: type=1800 audit(1756456937.554:4): pid=9606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1910" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  257.140297][ T5148] m920x_read = error: -19
[  257.144729][ T5148] dvb-usb: error while querying for an remote control event.
[  257.230702][ T9622] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1914'.
[  257.320429][ T5148] m920x_read = error: -19
[  257.324959][ T5148] dvb-usb: error while querying for an remote control event.
[  257.450291][ T5148] m920x_read = error: -19
[  257.454803][ T5148] dvb-usb: error while querying for an remote control event.
[  257.550434][ T1109] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.579109][ T1109] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  257.638302][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.656936][ T5148] m920x_read = error: -19
[  257.820225][ T5148] dvb-usb: error while querying for an remote control event.
[  257.827304][ T1109] usb 3-1: config 0 descriptor??
[  258.786881][ T5148] m920x_read = error: -19
[  258.800299][ T5148] dvb-usb: error while querying for an remote control event.
[  258.801736][ T1109] pwc: Askey VC010 type 2 USB webcam detected.
[  258.949494][ T4184] ocfs2: Unmounting device (7,0) on (node local)
[  258.950364][ T1109] pwc: recv_control_msg error -32 req 02 val 2b00
[  259.042125][ T1109] pwc: recv_control_msg error -32 req 02 val 2700
[  259.156217][ T5148] m920x_read = error: -19
[  259.167069][ T5148] dvb-usb: error while querying for an remote control event.
[  259.185031][ T1109] pwc: recv_control_msg error -32 req 02 val 2c00
[  259.250698][ T1109] pwc: recv_control_msg error -32 req 04 val 1000
[  259.324106][ T9641] loop4: detected capacity change from 0 to 512
[  259.391260][ T1109] pwc: recv_control_msg error -32 req 04 val 1300
[  259.580569][ T1109] pwc: recv_control_msg error -32 req 04 val 1400
[  259.680689][ T9641] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1918: bg 0: block 288: padding at end of block bitmap is not set
[  259.699917][ T9641] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem
[  259.718749][ T9641] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1918: attempt to clear invalid blocks 1024 len 1
[  259.735103][ T9641] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1918: invalid indirect mapped block 1819239214 (level 0)
[  259.757055][ T9641] EXT4-fs (loop4): 1 truncate cleaned up
[  259.763131][ T9641] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  259.839954][ T5148] m920x_read = error: -19
[  259.844682][ T5148] dvb-usb: error while querying for an remote control event.
[  259.970279][ T1109] pwc: recv_control_msg error -32 req 02 val 2000
[  260.001116][ T5138] m920x_read = error: -19
[  260.005592][ T5138] dvb-usb: error while querying for an remote control event.
[  260.020363][ T1109] pwc: recv_control_msg error -32 req 02 val 2100
[  260.080322][ T1109] pwc: recv_control_msg error -32 req 04 val 1500
[  260.130466][ T1109] pwc: recv_control_msg error -32 req 02 val 2500
[  260.140234][ T5148] m920x_read = error: -19
[  260.144717][ T5148] dvb-usb: error while querying for an remote control event.
[  260.195851][ T1109] pwc: recv_control_msg error -32 req 02 val 2400
[  260.244601][ T9649] loop0: detected capacity change from 0 to 64
[  260.251652][ T1109] pwc: recv_control_msg error -32 req 02 val 2600
[  260.280392][ T5148] m920x_read = error: -19
[  260.289238][ T5148] dvb-usb: error while querying for an remote control event.
[  260.441800][ T1335] m920x_read = error: -19
[  260.446207][ T1335] dvb-usb: error while querying for an remote control event.
[  260.570354][ T1109] pwc: recv_control_msg error -32 req 02 val 2800
[  260.630486][ T1335] m920x_read = error: -19
[  260.630555][ T1335] dvb-usb: error while querying for an remote control event.
[  260.740597][ T1335] m920x_read = error: -19
[  260.740667][ T1335] dvb-usb: error while querying for an remote control event.
[  260.850493][ T1335] m920x_read = error: -19
[  260.850585][ T1335] dvb-usb: error while querying for an remote control event.
[  260.851559][ T9660] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  260.960715][ T1335] m920x_read = error: -19
[  260.960784][ T1335] dvb-usb: error while querying for an remote control event.
[  261.088628][ T1335] m920x_read = error: -19
[  261.088657][ T1335] dvb-usb: error while querying for an remote control event.
[  261.190245][ T1335] m920x_read = error: -19
[  261.190272][ T1335] dvb-usb: error while querying for an remote control event.
[  261.293249][ T1109] pwc: recv_control_msg error -71 req 04 val 1100
[  261.300654][ T1335] m920x_read = error: -19
[  261.300677][ T1335] dvb-usb: error while querying for an remote control event.
[  261.324722][ T1109] pwc: recv_control_msg error -71 req 04 val 1200
[  261.325590][ T1109] pwc: Registered as video103.
[  261.326226][ T1109] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12
[  261.330109][ T1109] usb 3-1: USB disconnect, device number 18
[  261.410298][ T1335] m920x_read = error: -19
[  261.410324][ T1335] dvb-usb: error while querying for an remote control event.
[  261.624169][ T9673] loop2: detected capacity change from 0 to 32768
[  261.661528][ T5138] m920x_read = error: -19
[  261.661545][ T5138] dvb-usb: error while querying for an remote control event.
[  261.691846][ T9673] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1924 (9673)
[  261.771590][ T1335] m920x_read = error: -19
[  261.771617][ T1335] dvb-usb: error while querying for an remote control event.
[  261.798017][ T9673] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  261.798078][ T9673] BTRFS info (device loop2): force zlib compression, level 3
[  261.798100][ T9673] BTRFS info (device loop2): force clearing of disk cache
[  261.798119][ T9673] BTRFS info (device loop2): setting nodatasum
[  261.798140][ T9673] BTRFS info (device loop2): allowing degraded mounts
[  261.798158][ T9673] BTRFS info (device loop2): disabling free space tree
[  261.798174][ T9673] BTRFS info (device loop2): has skinny extents
[  261.809722][ T9676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  261.809810][ T9676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.880353][ T1335] m920x_read = error: -19
[  262.134363][ T9676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  262.199764][ T9676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.253320][ T9673] BTRFS info (device loop2): enabling ssd optimizations
[  262.261956][ T9673] BTRFS info (device loop2): clearing free space tree
[  262.269111][ T9673] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  262.279481][ T9673] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  262.340374][ T1335] dvb-usb: error while querying for an remote control event.
[  262.491580][ T5148] m920x_read = error: -19
[  262.496061][ T5148] dvb-usb: error while querying for an remote control event.
[  262.600445][   T26] audit: type=1400 audit(1756456943.084:5): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9670 comm="syz.2.1924"
[  262.690240][ T5148] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  262.781880][ T1335] m920x_read = error: -19
[  262.843657][ T1335] dvb-usb: error while querying for an remote control event.
[  263.020750][ T5138] m920x_read = error: -19
[  263.025470][ T5138] dvb-usb: error while querying for an remote control event.
[  263.231043][ T9676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  263.250517][ T9676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.300390][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.373570][ T5148] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  263.459804][ T5148] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  263.523288][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.577438][ T5148] usb 2-1: config 0 descriptor??
[  263.607840][ T5138] m920x_read = error: -19
[  263.616096][ T5138] dvb-usb: error while querying for an remote control event.
[  263.743133][ T9676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  263.780463][ T9676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.152928][ T5148] hid-picolcd 0003:04D8:C002.0009: No report with id 0x11 found
[  264.265312][ T4326] m920x_read = error: -19
[  264.282619][ T4326] dvb-usb: error while querying for an remote control event.
[  264.345734][ T5547] usb 2-1: USB disconnect, device number 13
[  264.400448][ T5132] m920x_read = error: -19
[  264.404888][ T5132] dvb-usb: error while querying for an remote control event.
[  264.441096][ T4326] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  264.545114][ T5132] m920x_read = error: -19
[  264.573948][ T5132] dvb-usb: error while querying for an remote control event.
[  264.674855][ T9676] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  264.687865][ T9676] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.720356][ T5138] m920x_read = error: -19
[  264.727814][ T5138] dvb-usb: error while querying for an remote control event.
[  264.766857][ T9676] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  264.780460][ T4326] usb 5-1: Using ep0 maxpacket: 16
[  264.836628][ T9676] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.900546][ T4326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.942521][ T9676] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  264.970257][ T4326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.055044][ T9676] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.075247][ T4326] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  265.130412][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.373547][ T9676] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  265.649469][ T4326] usb 5-1: config 0 descriptor??
[  265.656129][ T5138] m920x_read = error: -19
[  265.661187][ T5138] dvb-usb: error while querying for an remote control event.
[  265.680849][ T9676] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.835184][ T1335] m920x_read = error: -19
[  265.840683][ T1335] dvb-usb: error while querying for an remote control event.
[  265.952096][ T5138] m920x_read = error: -19
[  265.960273][ T5138] dvb-usb: error while querying for an remote control event.
[  266.100377][ T5138] m920x_read = error: -19
[  266.104799][ T5138] dvb-usb: error while querying for an remote control event.
[  266.250374][ T5138] m920x_read = error: -19
[  266.255376][ T5138] dvb-usb: error while querying for an remote control event.
[  266.274092][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.324729][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.358423][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.396136][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.440719][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.482506][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.529828][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.565118][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.601367][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.639673][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.669316][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.693616][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.727340][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.777657][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.828397][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.857221][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.898477][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.936299][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  266.966532][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.004833][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.046028][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.094397][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.150349][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.200317][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.238319][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.296720][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.330390][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.381187][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.426959][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.466008][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.496541][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.529664][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.557933][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.628940][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.670332][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.705085][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.743131][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.773554][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.815018][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.855551][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.906237][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  267.956964][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.007651][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.038036][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.101401][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.160288][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.183917][ T9738] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  268.213459][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.262660][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.336196][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.378758][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.391176][ T9734] loop4: detected capacity change from 0 to 32768
[  268.413840][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.468604][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.547047][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.626287][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.694886][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.780291][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.830055][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.849280][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.859434][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.879697][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.897015][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.908204][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.920196][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.928038][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.940336][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  268.990321][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.022226][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.050344][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.079494][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.102179][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.130312][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.157443][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.177623][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.216319][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.236634][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.263207][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.290271][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.308026][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.328345][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.355836][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.379089][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.399358][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.407326][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.420225][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.427882][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.435675][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.443547][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.453139][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.463436][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.472017][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.479988][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.488929][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.507623][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.527973][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.547866][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.566900][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.590279][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.619017][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.648826][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.679298][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.699564][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.730038][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.760276][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.778103][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.798372][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.820279][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.849090][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.910306][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.941825][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.969834][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  269.979998][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.002791][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.019455][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.037192][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.062866][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.086129][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.113778][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.148149][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.190683][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.246552][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.274668][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.300193][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.320276][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.327769][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.360567][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.367976][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.416365][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.450353][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.488522][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.510368][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.517806][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.560540][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.578252][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.606545][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.624420][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.660278][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.693209][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.730237][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.750274][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.768145][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.795716][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.840320][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.878322][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.911668][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.959973][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  270.992661][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  271.020995][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  271.036314][ T9758] loop1: detected capacity change from 0 to 32768
[  271.044234][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  271.055092][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  271.089019][ T9758] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1940 (9758)
[  271.124140][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  271.174856][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  271.222189][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  271.242297][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  271.249748][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  271.257854][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  271.267670][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  271.275521][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  271.283321][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  271.303457][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  271.330197][ T4326] hid-generic 0003:0458:5012.000A: unknown main item tag 0x0
[  271.348477][ T4326] hid-generic 0003:0458:5012.000A: hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0
[  271.432611][ T4326] usb 5-1: USB disconnect, device number 12
[  271.505678][ T5132] m920x_read = error: -19
[  271.510046][ T5132] dvb-usb: error while querying for an remote control event.
[  271.578077][ T9759] fido_id[9759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  271.586005][ T9734] XFS (loop4): Mounting V5 Filesystem
[  271.660239][ T4258] m920x_read = error: -19
[  271.664811][ T4258] dvb-usb: error while querying for an remote control event.
[  271.675664][ T9734] XFS (loop4): log mount failed
[  271.695685][ T9758] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  271.746423][ T9758] BTRFS info (device loop1): force clearing of disk cache
[  271.830260][ T1335] m920x_read = error: -19
[  271.834843][ T1335] dvb-usb: error while querying for an remote control event.
[  271.880378][ T9758] BTRFS info (device loop1): enabling auto defrag
[  271.890271][ T4258] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  271.980346][ T9758] BTRFS info (device loop1): max_inline at 0
[  271.986510][ T9758] BTRFS info (device loop1): enabling disk space caching
[  272.031707][ T4326] m920x_read = error: -19
[  272.036274][ T4326] dvb-usb: error while querying for an remote control event.
[  272.038134][ T9758] BTRFS info (device loop1): disk space caching is enabled
[  272.148882][ T9769] loop2: detected capacity change from 0 to 16
[  272.156906][ T9765] 8021q: adding VLAN 0 to HW filter on device batadv1
[  272.173810][ T9764] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  272.180461][ T9764] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  272.191287][ T9764] vhci_hcd vhci_hcd.0: Device attached
[  272.222426][ T9758] BTRFS info (device loop1): has skinny extents
[  272.230335][ T4326] m920x_read = error: -19
[  272.234767][ T4326] dvb-usb: error while querying for an remote control event.
[  272.293839][ T9767] vhci_hcd: connection closed
[  272.294226][  T144] vhci_hcd: stop threads
[  272.310434][ T9769] erofs: (device loop2): mounted with root inode @ nid 36.
[  272.328550][  T144] vhci_hcd: release socket
[  272.335952][  T144] vhci_hcd: disconnect device
[  272.370395][ T4326] m920x_read = error: -19
[  272.375773][ T4326] dvb-usb: error while querying for an remote control event.
[  272.400316][ T1335] vhci_hcd: vhci_device speed not set
[  272.452010][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'.
[  272.466326][ T9769] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  272.475451][ T9769] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  272.484553][ T9769] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  272.493528][ T9769] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  272.502717][ T4326] m920x_read = error: -19
[  272.503529][ T9784] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  272.507486][ T4326] dvb-usb: error while querying for an remote control event.
[  272.527872][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'.
[  272.568340][ T9784] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -23 in[64, 4032] out[1851]
[  272.585762][ T9784] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[  272.631508][ T4326] m920x_read = error: -19
[  272.638257][ T4326] dvb-usb: error while querying for an remote control event.
[  272.666304][ T9758] BTRFS info (device loop1): enabling ssd optimizations
[  272.677520][ T9758] BTRFS info (device loop1): clearing free space tree
[  272.919258][ T4326] m920x_read = error: -19
[  272.924006][ T4326] dvb-usb: error while querying for an remote control event.
[  272.933691][ T9758] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  272.956371][ T9758] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  275.569375][ T4326] m920x_read = error: -19
[  275.575043][ T4326] dvb-usb: error while querying for an remote control event.
[  275.847848][ T5138] m920x_read = error: -19
[  275.852521][ T5138] dvb-usb: error while querying for an remote control event.
[  276.486462][ T4258] m920x_read = error: -19
[  276.492372][ T4258] dvb-usb: error while querying for an remote control event.
[  276.601471][ T4258] m920x_read = error: -19
[  276.605848][ T4258] dvb-usb: error while querying for an remote control event.
[  276.629804][ T9815] tipc: Cannot configure node identity twice
[  276.760365][ T4258] m920x_read = error: -19
[  276.768482][ T4258] dvb-usb: error while querying for an remote control event.
[  276.920272][ T4258] m920x_read = error: -19
[  276.924674][ T4258] dvb-usb: error while querying for an remote control event.
[  277.071479][ T4258] m920x_read = error: -19
[  277.076551][ T4258] dvb-usb: error while querying for an remote control event.
[  277.768340][ T4258] m920x_read = error: -19
[  277.780233][ T4258] dvb-usb: error while querying for an remote control event.
[  277.900293][ T4258] m920x_read = error: -19
[  277.904706][ T4258] dvb-usb: error while querying for an remote control event.
[  278.030267][ T4258] m920x_read = error: -19
[  278.035239][ T4258] dvb-usb: error while querying for an remote control event.
[  278.931018][ T4258] m920x_read = error: -19
[  278.935413][ T4258] dvb-usb: error while querying for an remote control event.
[  279.066324][ T1335] m920x_read = error: -19
[  279.070921][ T1335] dvb-usb: error while querying for an remote control event.
[  279.260292][ T1335] m920x_read = error: -19
[  279.265166][ T1335] dvb-usb: error while querying for an remote control event.
[  279.411285][ T4326] m920x_read = error: -19
[  279.417595][ T4326] dvb-usb: error while querying for an remote control event.
[  279.560251][ T4326] m920x_read = error: -19
[  279.567254][ T4326] dvb-usb: error while querying for an remote control event.
[  279.640216][ T1335] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  279.700268][ T4326] m920x_read = error: -19
[  279.705546][ T4326] dvb-usb: error while querying for an remote control event.
[  279.851124][ T4326] m920x_read = error: -19
[  279.855837][ T4326] dvb-usb: error while querying for an remote control event.
[  280.030433][ T1335] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  280.053812][ T1335] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  280.084361][ T1335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.125142][ T1335] usb 2-1: config 0 descriptor??
[  280.306702][ T4326] m920x_read = error: -19
[  280.311367][ T4326] dvb-usb: error while querying for an remote control event.
[  280.323385][ T9852] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  280.330258][ T9852] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  280.352393][ T1335] pwc: Askey VC010 type 2 USB webcam detected.
[  280.416482][ T9852] vhci_hcd vhci_hcd.0: Device attached
[  280.441802][ T4326] m920x_read = error: -19
[  280.446466][ T4326] dvb-usb: error while querying for an remote control event.
[  280.534340][ T9853] 8021q: adding VLAN 0 to HW filter on device batadv1
[  280.640251][ T4326] m920x_read = error: -19
[  280.644737][ T4326] dvb-usb: error while querying for an remote control event.
[  280.690372][ T8283] usb 33-1: new high-speed USB device number 8 using vhci_hcd
[  280.703563][ T9855] vhci_hcd: connection closed
[  280.703847][ T6093] vhci_hcd: stop threads
[  280.733874][ T6093] vhci_hcd: release socket
[  280.765242][ T6093] vhci_hcd: disconnect device
[  280.780385][ T1335] pwc: recv_control_msg error -32 req 02 val 2b00
[  280.801210][ T4326] m920x_read = error: -19
[  280.805718][ T4326] dvb-usb: error while querying for an remote control event.
[  280.840307][ T1335] pwc: recv_control_msg error -32 req 02 val 2700
[  280.900266][ T1335] pwc: recv_control_msg error -32 req 02 val 2c00
[  280.951734][ T4326] m920x_read = error: -19
[  280.956169][ T4326] dvb-usb: error while querying for an remote control event.
[  280.964284][ T1335] pwc: recv_control_msg error -32 req 04 val 1000
[  281.030260][ T1335] pwc: recv_control_msg error -32 req 04 val 1300
[  281.110273][ T1335] pwc: recv_control_msg error -32 req 04 val 1400
[  281.150579][ T1335] pwc: recv_control_msg error -32 req 02 val 2000
[  281.160410][ T4326] m920x_read = error: -19
[  281.164859][ T4326] dvb-usb: error while querying for an remote control event.
[  281.200306][ T1335] pwc: recv_control_msg error -32 req 02 val 2100
[  281.250269][ T1335] pwc: recv_control_msg error -32 req 04 val 1500
[  281.300320][ T1335] pwc: recv_control_msg error -32 req 02 val 2500
[  281.308469][ T4326] m920x_read = error: -19
[  281.313675][ T4326] dvb-usb: error while querying for an remote control event.
[  281.340312][ T1335] pwc: recv_control_msg error -32 req 02 val 2400
[  281.390505][ T1335] pwc: recv_control_msg error -32 req 02 val 2600
[  281.460273][ T4258] m920x_read = error: -19
[  281.464832][ T4258] dvb-usb: error while querying for an remote control event.
[  281.650372][ T1335] pwc: recv_control_msg error -32 req 02 val 2800
[  281.744570][ T9862] loop0: detected capacity change from 0 to 512
[  282.460463][ T9862] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1961: bg 0: block 288: padding at end of block bitmap is not set
[  282.475830][ T9862] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem
[  282.485826][ T9862] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1961: attempt to clear invalid blocks 1024 len 1
[  282.499936][ T9862] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1961: invalid indirect mapped block 1819239214 (level 0)
[  282.515082][ T9862] EXT4-fs (loop0): 1 truncate cleaned up
[  282.520776][ T9862] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  282.574186][ T4258] m920x_read = error: -19
[  282.578839][ T4258] dvb-usb: error while querying for an remote control event.
[  282.710320][ T1335] pwc: recv_control_msg error -71 req 04 val 1100
[  282.739857][ T1335] pwc: recv_control_msg error -71 req 04 val 1200
[  282.765335][ T1335] pwc: Registered as video103.
[  282.781867][ T1335] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13
[  282.847035][ T1335] usb 2-1: USB disconnect, device number 14
[  282.956918][ T9870] loop4: detected capacity change from 0 to 128
[  282.967831][ T5132] m920x_read = error: -19
[  282.973537][ T5132] dvb-usb: error while querying for an remote control event.
[  284.016233][ T9858] loop2: detected capacity change from 0 to 40427
[  284.044192][ T9870] EXT4-fs warning (device loop4): ext4_fill_super:3980: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  284.079845][ T9410] udevd[9410]: incorrect jbd checksum on /dev/loop4
[  284.132518][ T5132] m920x_read = error: -19
[  284.136996][ T5132] dvb-usb: error while querying for an remote control event.
[  284.202452][ T9877] loop1: detected capacity change from 0 to 64
[  284.209067][ T9870] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  284.350345][ T1335] m920x_read = error: -19
[  284.354823][ T1335] dvb-usb: error while querying for an remote control event.
[  284.481360][ T9411] udevd[9411]: incorrect jbd checksum on /dev/loop4
[  284.521599][ T1335] m920x_read = error: -19
[  284.526016][ T1335] dvb-usb: error while querying for an remote control event.
[  284.590064][ T9411] udevd[9411]: incorrect jbd checksum on /dev/loop4
[  284.686266][ T1335] m920x_read = error: -19
[  284.690826][ T1335] dvb-usb: error while querying for an remote control event.
[  284.800296][ T5132] m920x_read = error: -19
[  284.804688][ T5132] dvb-usb: error while querying for an remote control event.
[  284.878287][   T26] audit: type=1800 audit(1756456965.364:6): pid=9878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1965" name="file1" dev="loop1" ino=5 res=0 errno=0
[  284.980289][ T5132] m920x_read = error: -19
[  284.984810][ T5132] dvb-usb: error while querying for an remote control event.
[  285.060252][ T1335] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  285.142617][ T9868] loop0: detected capacity change from 0 to 32768
[  285.271535][ T5132] m920x_read = error: -19
[  285.300007][ T5132] dvb-usb: error while querying for an remote control event.
[  285.680316][ T1335] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  285.848865][ T9868] (syz.0.1962,9868,0):ocfs2_initialize_super:2313 ERROR: status = -12
[  286.413658][ T1335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.450327][ T9868] (syz.0.1962,9868,0):ocfs2_fill_super:1177 ERROR: status = -12
[  286.709537][ T8283] vhci_hcd: vhci_device speed not set
[  286.715779][ T9885] delete_channel: no stack
[  286.742820][ T1335] usb 3-1: Product: syz
[  286.751812][ T1335] usb 3-1: Manufacturer: syz
[  286.806987][ T1335] usb 3-1: SerialNumber: syz
[  286.966989][ T1335] usb 3-1: config 0 descriptor??
[  288.901195][ T4258] m920x_read = error: -19
[  288.908214][ T4258] dvb-usb: error while querying for an remote control event.
[  288.940285][ T1335] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  289.041555][ T5138] m920x_read = error: -19
[  289.046403][ T5138] dvb-usb: error while querying for an remote control event.
[  289.442542][ T5138] m920x_read = error: -19
[  289.453762][ T5138] dvb-usb: error while querying for an remote control event.
[  290.079664][ T5138] m920x_read = error: -19
[  290.084362][ T5138] dvb-usb: error while querying for an remote control event.
[  290.180479][ T1335] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  290.210338][ T1335] usb 3-1: USB disconnect, device number 20
[  290.239447][ T4326] m920x_read = error: -19
[  290.244800][ T4326] dvb-usb: error while querying for an remote control event.
[  290.430779][ T5132] m920x_read = error: -19
[  290.435360][ T5132] dvb-usb: error while querying for an remote control event.
[  290.550259][ T4326] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  290.685773][ T5132] m920x_read = error: -19
[  290.740511][ T5132] dvb-usb: error while querying for an remote control event.
[  290.960442][ T4326] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  290.984735][ T4326] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  291.020155][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.088434][ T4326] usb 2-1: config 0 descriptor??
[  291.131197][ T4258] m920x_read = error: -19
[  291.135773][ T4258] dvb-usb: error while querying for an remote control event.
[  291.146241][ T4326] pwc: Askey VC010 type 2 USB webcam detected.
[  291.350050][ T4258] m920x_read = error: -19
[  291.354867][ T4258] dvb-usb: error while querying for an remote control event.
[  291.469040][ T9914] loop4: detected capacity change from 0 to 40427
[  291.490287][ T4258] m920x_read = error: -19
[  291.497045][ T4258] dvb-usb: error while querying for an remote control event.
[  291.541364][ T9936] loop0: detected capacity change from 0 to 1024
[  291.582989][ T4326] pwc: recv_control_msg error -32 req 02 val 2b00
[  291.595150][ T9914] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff
[  291.620356][ T4258] m920x_read = error: -19
[  291.624749][ T4258] dvb-usb: error while querying for an remote control event.
[  291.640291][ T9914] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7
[  291.650382][ T4326] pwc: recv_control_msg error -32 req 02 val 2700
[  291.705108][ T9914] F2FS-fs (loop4): invalid crc value
[  291.720466][ T4326] pwc: recv_control_msg error -32 req 02 val 2c00
[  291.740656][ T4258] m920x_read = error: -19
[  291.745332][ T4258] dvb-usb: error while querying for an remote control event.
[  291.760267][ T4326] pwc: recv_control_msg error -32 req 04 val 1000
[  291.768266][ T9914] F2FS-fs (loop4): Found nat_bits in checkpoint
[  291.820355][ T4326] pwc: recv_control_msg error -32 req 04 val 1300
[  291.860554][ T4326] pwc: recv_control_msg error -32 req 04 val 1400
[  291.902987][ T4258] m920x_read = error: -19
[  291.907602][ T4258] dvb-usb: error while querying for an remote control event.
[  291.930389][ T4326] pwc: recv_control_msg error -32 req 02 val 2000
[  291.981164][ T4326] pwc: recv_control_msg error -32 req 02 val 2100
[  292.040683][ T5138] m920x_read = error: -19
[  292.045082][ T5138] dvb-usb: error while querying for an remote control event.
[  292.052903][ T4326] pwc: recv_control_msg error -32 req 04 val 1500
[  292.060317][ T9938] loop0: detected capacity change from 1024 to 64
[  292.074239][ T9914] F2FS-fs (loop4): Start checkpoint disabled!
[  292.086221][ T9936] attempt to access beyond end of device
[  292.086221][ T9936] loop0: rw=2049, want=352, limit=64
[  292.120537][ T4326] pwc: recv_control_msg error -32 req 02 val 2500
[  292.154059][ T9914] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  292.200387][ T5138] m920x_read = error: -19
[  292.204941][ T4326] pwc: recv_control_msg error -32 req 02 val 2400
[  292.211979][ T5138] dvb-usb: error while querying for an remote control event.
[  292.270288][ T4326] pwc: recv_control_msg error -32 req 02 val 2600
[  292.330521][ T5138] m920x_read = error: -19
[  292.335028][ T5138] dvb-usb: error while querying for an remote control event.
[  292.498620][ T1106] m920x_read = error: -19
[  292.503102][ T1106] dvb-usb: error while querying for an remote control event.
[  292.548747][ T9914] F2FS-fs (loop4) : inject kmalloc in f2fs_kmalloc of f2fs_getxattr+0x1181/0x1430
[  292.561222][ T4326] pwc: recv_control_msg error -32 req 02 val 2800
[  292.632484][ T1335] m920x_read = error: -19
[  292.636904][ T1335] dvb-usb: error while querying for an remote control event.
[  292.738026][ T4185] F2FS-fs (loop4): access invalid blkaddr:4043309056
[  292.759891][ T4185] CPU: 1 PID: 4185 Comm: syz-executor Not tainted syzkaller #0
[  292.767634][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  292.777804][ T4185] Call Trace:
[  292.781103][ T4185]  <TASK>
[  292.784053][ T4185]  dump_stack_lvl+0x168/0x230
[  292.788901][ T4185]  ? show_regs_print_info+0x20/0x20
[  292.794500][ T4185]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  292.800360][ T4185]  ? __se_sys_getdents64+0xe5/0x260
[  292.805913][ T4185]  ? unlock_page+0x17c/0x1f0
[  292.810399][ T1106] m920x_read = error: -19
[  292.810641][ T4185]  f2fs_is_valid_blkaddr+0xc7e/0x1250
[  292.815426][ T1106] dvb-usb: error while querying for an remote control event.
[  292.820422][ T4185]  f2fs_map_blocks+0xbd0/0x3310
[  292.820488][ T4185]  ? f2fs_force_buffered_io+0x680/0x680
[  292.838398][ T4185]  ? xa_load+0x286/0x2a0
[  292.842793][ T4185]  f2fs_mpage_readpages+0xc53/0x21f0
[  292.848220][ T4185]  ? dquot_release_reservation_block+0xa0/0xa0
[  292.854397][ T4185]  ? _raw_spin_unlock+0x40/0x40
[  292.859378][ T4185]  ? f2fs_is_compress_backend_ready+0x99/0x120
[  292.865786][ T4185]  ? f2fs_readahead+0x163/0x2f0
[  292.870841][ T4185]  ? f2fs_set_data_page_dirty+0xad0/0xad0
[  292.876583][ T4185]  read_pages+0x165/0x920
[  292.880950][ T4185]  ? page_cache_ra_unbounded+0x930/0x930
[  292.886620][ T4185]  ? add_to_page_cache_lru+0x2a8/0x4a0
[  292.892201][ T4185]  page_cache_ra_unbounded+0x830/0x930
[  292.897798][ T4185]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[  292.904429][ T4185]  f2fs_readdir+0x471/0xd40
[  292.908990][ T4185]  ? f2fs_fill_dentries+0xce0/0xce0
[  292.914225][ T4185]  ? end_current_label_crit_section+0x14b/0x170
[  292.920863][ T4185]  ? preempt_count_add+0x8d/0x190
[  292.926114][ T4185]  ? down_read_killable+0x1ce/0x340
[  292.931439][ T4185]  ? fsnotify_perm+0x254/0x560
[  292.936414][ T4185]  iterate_dir+0x218/0x560
[  292.940947][ T4185]  ? f2fs_fill_dentries+0xce0/0xce0
[  292.946361][ T4185]  __se_sys_getdents64+0xe5/0x260
[  292.951447][ T4185]  ? __x64_sys_getdents64+0x80/0x80
[  292.956678][ T4185]  ? filldir+0x720/0x720
[  292.960322][ T1106] m920x_read = error: -19
[  292.961119][ T4185]  ? vtime_user_exit+0x2dc/0x400
[  292.965455][ T1106] dvb-usb: error while querying for an remote control event.
[  292.970381][ T4185]  ? lockdep_hardirqs_on+0x94/0x140
[  292.970410][ T4185]  do_syscall_64+0x4c/0xa0
[  292.987823][ T4185]  ? clear_bhb_loop+0x30/0x80
[  292.992625][ T4185]  ? clear_bhb_loop+0x30/0x80
[  292.997338][ T4185]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  293.003260][ T4185] RIP: 0033:0x7f975fdbe553
[  293.007795][ T4185] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 82 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[  293.035709][ T4185] RSP: 002b:00007fff27880168 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  293.044258][ T4185] RAX: ffffffffffffffda RBX: 000055556878a600 RCX: 00007f975fdbe553
[  293.052671][ T4185] RDX: 0000000000008000 RSI: 000055556878a600 RDI: 0000000000000005
[  293.061205][ T4185] RBP: 000055556878a5d4 R08: 0000000000000000 R09: 0000000000000000
[  293.069545][ T4185] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[  293.077636][ T4185] R13: 0000000000000010 R14: 000055556878a5d0 R15: 00007fff27882420
[  293.085658][ T4185]  </TASK>
[  293.090728][ T1106] m920x_read = error: -19
[  293.099177][ T5956] attempt to access beyond end of device
[  293.099177][ T5956] loop0: rw=1, want=208, limit=64
[  293.104598][ T1106] dvb-usb: error while querying for an remote control event.
[  293.118881][ T4326] pwc: recv_control_msg error -71 req 04 val 1200
[  293.156277][ T5956] buffer_io_error: 25 callbacks suppressed
[  293.156414][ T5956] Buffer I/O error on dev loop0, logical block 103, lost async page write
[  293.164141][ T4326] pwc: Registered as video103.
[  293.331517][ T4185] attempt to access beyond end of device
[  293.331517][ T4185] loop4: rw=524288, want=45072, limit=40427
[  293.483897][ T4185] attempt to access beyond end of device
[  293.483897][ T4185] loop4: rw=0, want=45072, limit=40427
[  293.519565][ T5956] attempt to access beyond end of device
[  293.519565][ T5956] loop0: rw=1, want=210, limit=64
[  293.588204][ T5956] Buffer I/O error on dev loop0, logical block 104, lost async page write
[  293.642140][ T5956] attempt to access beyond end of device
[  293.642140][ T5956] loop0: rw=1, want=212, limit=64
[  293.649952][ T4326] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14
[  293.674050][ T5956] Buffer I/O error on dev loop0, logical block 105, lost async page write
[  293.710540][ T5956] attempt to access beyond end of device
[  293.710540][ T5956] loop0: rw=1, want=214, limit=64
[  293.748690][ T5956] Buffer I/O error on dev loop0, logical block 106, lost async page write
[  293.814033][  T154] attempt to access beyond end of device
[  293.814033][  T154] loop4: rw=2049, want=40992, limit=40427
[  293.826278][ T4326] usb 2-1: USB disconnect, device number 15
[  293.831830][ T5956] attempt to access beyond end of device
[  293.831830][ T5956] loop0: rw=1, want=270, limit=64
[  293.880172][ T5956] Buffer I/O error on dev loop0, logical block 134, lost async page write
[  293.892770][ T1106] m920x_read = error: -19
[  293.897186][ T1106] dvb-usb: error while querying for an remote control event.
[  293.926612][ T5956] attempt to access beyond end of device
[  293.926612][ T5956] loop0: rw=1, want=272, limit=64
[  293.951583][ T9948] loop1: detected capacity change from 0 to 128
[  293.992016][ T5956] Buffer I/O error on dev loop0, logical block 135, lost async page write
[  294.001854][ T5956] Buffer I/O error on dev loop0, logical block 136, lost async page write
[  294.011018][ T5956] Buffer I/O error on dev loop0, logical block 140, lost async page write
[  294.024111][ T5956] Buffer I/O error on dev loop0, logical block 141, lost async page write
[  294.033214][ T5956] Buffer I/O error on dev loop0, logical block 142, lost async page write
[  294.124679][ T4184] syz-executor (4184) used greatest stack depth: 20608 bytes left
[  294.151217][ T4258] m920x_read = error: -19
[  294.155871][ T4258] dvb-usb: error while querying for an remote control event.
[  294.302777][ T4185] bond0: (slave syz_tun): Releasing backup interface
[  294.314824][ T4258] m920x_read = error: -19
[  294.370169][ T4258] dvb-usb: error while querying for an remote control event.
[  294.491948][ T1106] m920x_read = error: -19
[  294.496433][ T1106] dvb-usb: error while querying for an remote control event.
[  294.713009][ T4258] m920x_read = error: -19
[  294.717403][ T4258] dvb-usb: error while querying for an remote control event.
[  295.451950][ T4258] m920x_read = error: -19
[  295.456347][ T4258] dvb-usb: error while querying for an remote control event.
[  295.574287][ T9953] chnl_net:caif_netlink_parms(): no params data found
[  295.610283][ T1335] m920x_read = error: -19
[  295.614687][ T1335] dvb-usb: error while querying for an remote control event.
[  295.800710][ T1335] m920x_read = error: -19
[  295.805359][ T1335] dvb-usb: error while querying for an remote control event.
[  296.741292][ T1335] Bluetooth: hci1: command 0x0409 tx timeout
[  296.851393][ T4258] m920x_read = error: -19
[  296.855925][ T4258] dvb-usb: error while querying for an remote control event.
[  296.961015][ T9953] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.000238][ T9953] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.005478][ T4258] m920x_read = error: -19
[  297.021538][ T9953] device bridge_slave_0 entered promiscuous mode
[  297.030058][ T4258] dvb-usb: error while querying for an remote control event.
[  297.064487][ T9953] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.093135][ T9953] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.151157][ T9953] device bridge_slave_1 entered promiscuous mode
[  297.180197][ T4258] m920x_read = error: -19
[  297.184581][ T4258] dvb-usb: error while querying for an remote control event.
[  297.263155][ T9953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.325938][ T4258] m920x_read = error: -19
[  297.337791][ T4258] dvb-usb: error while querying for an remote control event.
[  297.365361][ T9953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.764282][ T9953] team0: Port device team_slave_0 added
[  297.887831][ T9953] team0: Port device team_slave_1 added
[  298.031580][ T4258] m920x_read = error: -19
[  298.036876][ T4258] dvb-usb: error while querying for an remote control event.
[  298.081478][ T9953] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.120344][ T9953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.142900][ T9994] loop1: detected capacity change from 0 to 32768
[  298.155289][ T4258] m920x_read = error: -19
[  298.159655][ T4258] dvb-usb: error while querying for an remote control event.
[  298.173493][ T9953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.211344][ T9953] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.241048][ T9994] JBD2: Ignoring recovery information on journal
[  298.290273][ T4258] m920x_read = error: -19
[  298.294882][ T4258] dvb-usb: error while querying for an remote control event.
[  298.302703][ T9953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.329576][ T9953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  298.392984][ T9995] chnl_net:caif_netlink_parms(): no params data found
[  298.411529][ T1106] m920x_read = error: -19
[  298.416004][ T1106] dvb-usb: error while querying for an remote control event.
[  298.478970][ T9953] device hsr_slave_0 entered promiscuous mode
[  298.492279][ T9994] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  298.520618][ T9953] device hsr_slave_1 entered promiscuous mode
[  298.540262][ T4258] m920x_read = error: -19
[  298.545083][ T4258] dvb-usb: error while querying for an remote control event.
[  298.559640][ T9953] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  298.630401][ T9953] Cannot create hsr debugfs directory
[  298.751399][ T4258] Bluetooth: hci1: command 0x041b tx timeout
[  298.758640][ T4258] m920x_read = error: -19
[  298.770325][ T4258] dvb-usb: error while querying for an remote control event.
[  298.900319][ T1106] m920x_read = error: -19
[  298.904710][ T1106] dvb-usb: error while querying for an remote control event.
[  299.029068][ T4183] ocfs2: Unmounting device (7,1) on (node local)
[  299.079240][ T9995] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.086893][ T1335] m920x_read = error: -19
[  299.089792][ T9995] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.091675][ T1335] dvb-usb: error while querying for an remote control event.
[  299.108178][ T9995] device bridge_slave_0 entered promiscuous mode
[  299.150381][ T1106] Bluetooth: hci2: command 0x0409 tx timeout
[  299.162247][ T9995] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.181122][ T9995] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.202063][ T9995] device bridge_slave_1 entered promiscuous mode
[  299.211312][ T4258] m920x_read = error: -19
[  299.215697][ T4258] dvb-usb: error while querying for an remote control event.
[  299.380295][ T1335] m920x_read = error: -19
[  299.385005][ T1335] dvb-usb: error while querying for an remote control event.
[  299.461386][ T4629] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  300.003073][ T4629] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  300.341833][ T1335] m920x_read = error: -19
[  300.346236][ T1335] dvb-usb: error while querying for an remote control event.
[  300.405927][ T4629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.420329][ T4629] usb 3-1: Product: syz
[  300.427789][ T4629] usb 3-1: Manufacturer: syz
[  300.435288][ T4629] usb 3-1: SerialNumber: syz
[  300.446567][ T4629] usb 3-1: config 0 descriptor??
[  300.462355][ T1106] m920x_read = error: -19
[  300.471362][ T1106] dvb-usb: error while querying for an remote control event.
[  300.584185][ T9995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.594051][ T1106] m920x_read = error: -19
[  300.598393][ T1106] dvb-usb: error while querying for an remote control event.
[  300.613478][ T9995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.674385][ T9995] team0: Port device team_slave_0 added
[  300.698305][ T9995] team0: Port device team_slave_1 added
[  300.710305][ T4629] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  300.730311][ T1106] m920x_read = error: -19
[  300.734701][ T1106] dvb-usb: error while querying for an remote control event.
[  300.779515][ T4283] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.827212][ T9995] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.830378][ T2332] Bluetooth: hci1: command 0x040f tx timeout
[  300.834727][ T9995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.870311][ T1106] m920x_read = error: -19
[  300.874783][ T1106] dvb-usb: error while querying for an remote control event.
[  300.883063][ T9995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.904986][ T4283] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.920870][ T9995] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.930002][ T9995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.973713][ T9995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.996826][ T4283] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.007733][ T1106] m920x_read = error: -19
[  301.012657][ T1106] dvb-usb: error while querying for an remote control event.
[  301.072586][ T9995] device hsr_slave_0 entered promiscuous mode
[  301.079540][ T9995] device hsr_slave_1 entered promiscuous mode
[  301.087684][ T9995] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  301.096316][ T9995] Cannot create hsr debugfs directory
[  301.106741][ T4283] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.142204][ T1106] m920x_read = error: -19
[  301.146792][ T1106] dvb-usb: error while querying for an remote control event.
[  301.230237][ T1106] Bluetooth: hci2: command 0x041b tx timeout
[  301.267413][ T1335] m920x_read = error: -19
[  301.272093][ T1335] dvb-usb: error while querying for an remote control event.
[  301.381095][ T1335] m920x_read = error: -19
[  301.385767][ T1335] dvb-usb: error while querying for an remote control event.
[  301.457352][ T9953] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  301.511255][ T9953] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  301.520929][ T4258] m920x_read = error: -19
[  301.525582][ T4258] dvb-usb: error while querying for an remote control event.
[  301.547004][ T4283] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  301.566085][ T4283] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.650408][ T4258] m920x_read = error: -19
[  301.655182][ T4258] dvb-usb: error while querying for an remote control event.
[  301.731526][ T4283] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  301.750553][ T4283] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.772788][ T9953] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  301.792136][    C1] ==================================================================
[  301.800656][    C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490
[  301.808338][    C1] Read of size 2 at addr ffff888060dde42a by task syz.3.2011/10029
[  301.816256][    C1] 
[  301.818598][    C1] CPU: 1 PID: 10029 Comm: syz.3.2011 Not tainted syzkaller #0
[  301.826240][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  301.836397][    C1] Call Trace:
[  301.839698][    C1]  <IRQ>
[  301.842645][    C1]  dump_stack_lvl+0x168/0x230
[  301.847449][    C1]  ? show_regs_print_info+0x20/0x20
[  301.852693][    C1]  ? _printk+0xcc/0x110
[  301.856962][    C1]  ? rose_timer_expiry+0x470/0x490
[  301.862359][    C1]  ? load_image+0x3b0/0x3b0
[  301.867100][    C1]  print_address_description+0x60/0x2d0
[  301.872789][    C1]  ? rose_timer_expiry+0x470/0x490
[  301.878012][    C1]  kasan_report+0xdf/0x130
[  301.882467][    C1]  ? rose_timer_expiry+0x470/0x490
[  301.887630][    C1]  rose_timer_expiry+0x470/0x490
[  301.892594][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  301.897682][    C1]  call_timer_fn+0x16c/0x530
[  301.902318][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  301.907759][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  301.913794][    C1]  ? __run_timers+0x7c0/0x7c0
[  301.918602][    C1]  ? rcu_is_watching+0x11/0xa0
[  301.923387][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  301.928696][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  301.934039][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  301.939202][    C1]  __run_timers+0x525/0x7c0
[  301.943829][    C1]  ? detach_timer+0x2b0/0x2b0
[  301.948784][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  301.954797][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  301.959672][    C1]  ? ktime_get_real_ts64+0x420/0x420
[  301.964983][    C1]  run_timer_softirq+0x63/0xf0
[  301.971802][    C1]  handle_softirqs+0x328/0x820
[  301.976624][    C1]  ? __irq_exit_rcu+0x12f/0x220
[  301.981557][    C1]  ? do_softirq+0x200/0x200
[  301.986199][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  301.991437][    C1]  __irq_exit_rcu+0x12f/0x220
[  301.996315][    C1]  ? irq_exit_rcu+0x20/0x20
[  302.001031][    C1]  irq_exit_rcu+0x5/0x20
[  302.005687][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  302.011371][    C1]  </IRQ>
[  302.014325][    C1]  <TASK>
[  302.017388][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  302.023613][    C1] RIP: 0010:finish_lock_switch+0x134/0x280
[  302.029450][    C1] Code: be ff ff ff ff e8 ec 7c 55 08 85 c0 74 4a 4d 85 ff 75 66 0f 1f 44 00 00 48 89 df e8 46 e7 5e 08 e8 71 75 2a 00 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 d9 0f fe ff 43 80 3c
[  302.049202][    C1] RSP: 0018:ffffc900046bf2c8 EFLAGS: 00000282
[  302.055298][    C1] RAX: d5e82f49fa5fc600 RBX: ffff8880b913a300 RCX: d5e82f49fa5fc600
[  302.063393][    C1] RDX: dffffc0000000000 RSI: ffffffff8a0b1620 RDI: ffffffff8a59a240
[  302.071380][    C1] RBP: 1ffff1101722760b R08: dffffc0000000000 R09: ffffed1017227461
[  302.079376][    C1] R10: ffffed1017227461 R11: 1ffff11017227460 R12: 1ffff110172275b9
[  302.087457][    C1] R13: dffffc0000000000 R14: ffff8880b913adc8 R15: 0000000000000000
[  302.095468][    C1]  finish_task_switch+0x12f/0x640
[  302.100625][    C1]  ? __switch_to_asm+0x34/0x60
[  302.105553][    C1]  __schedule+0x11c3/0x4390
[  302.110189][    C1]  ? release_firmware_map_entry+0x190/0x190
[  302.116182][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  302.122181][    C1]  ? lock_chain_count+0x20/0x20
[  302.127183][    C1]  schedule+0x11b/0x1e0
[  302.131368][    C1]  schedule_timeout+0x97/0x280
[  302.135274][ T4258] m920x_read = error: -19
[  302.136232][    C1]  ? console_conditional_schedule+0x40/0x40
[  302.143540][ T4258] dvb-usb: error while querying for an remote control event.
[  302.146542][    C1]  ? __lock_acquire+0x7c60/0x7c60
[  302.159392][    C1]  ? rcu_lock_release+0x9/0x20
[  302.164191][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[  302.169417][    C1]  unix_wait_for_peer+0x1e5/0x2e0
[  302.174467][    C1]  ? unix_find_other+0x820/0x820
[  302.180205][    C1]  ? do_raw_spin_lock+0x11d/0x280
[  302.185250][    C1]  ? init_wait_entry+0xd0/0xd0
[  302.190029][    C1]  ? __rwlock_init+0x140/0x140
[  302.194792][    C1]  ? skb_copy_datagram_from_iter+0x5ea/0x6a0
[  302.200781][    C1]  ? bpf_lsm_unix_may_send+0x5/0x10
[  302.206191][    C1]  unix_dgram_sendmsg+0x106f/0x1890
[  302.211766][    C1]  ? unix_dgram_poll+0x660/0x660
[  302.217263][    C1]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  302.223749][    C1]  ? aa_sock_msg_perm+0x94/0x150
[  302.229106][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  302.234571][    C1]  ? security_socket_sendmsg+0x7c/0xa0
[  302.240059][    C1]  ? unix_dgram_poll+0x660/0x660
[  302.245107][    C1]  ____sys_sendmsg+0x5a2/0x8c0
[  302.249900][    C1]  ? memset+0x1e/0x40
[  302.254196][    C1]  ? __sys_sendmsg_sock+0x30/0x30
[  302.259327][    C1]  ? rcu_is_watching+0x11/0xa0
[  302.264111][    C1]  ? import_iovec+0x6f/0xa0
[  302.268726][    C1]  ___sys_sendmsg+0x1f0/0x260
[  302.273421][    C1]  ? __sys_sendmsg+0x250/0x250
[  302.278253][    C1]  ? __might_fault+0xb3/0x110
[  302.282940][    C1]  __sys_sendmmsg+0x27c/0x4a0
[  302.287647][    C1]  ? __ia32_sys_sendmsg+0x80/0x80
[  302.292709][    C1]  ? __context_tracking_exit+0x4c/0x80
[  302.298258][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  302.301677][ T4326] m920x_read = error: -19
[  302.304241][    C1]  ? lock_chain_count+0x20/0x20
[  302.312888][ T4326] dvb-usb: error while querying for an remote control event.
[  302.313806][    C1]  ? vtime_user_exit+0x2dc/0x400
[  302.326207][    C1]  __x64_sys_sendmmsg+0x9c/0xb0
[  302.331082][    C1]  do_syscall_64+0x4c/0xa0
[  302.335586][    C1]  ? clear_bhb_loop+0x30/0x80
[  302.340263][    C1]  ? clear_bhb_loop+0x30/0x80
[  302.345048][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  302.350956][    C1] RIP: 0033:0x7f05de058be9
[  302.355578][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.376131][    C1] RSP: 002b:00007f05dc2c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  302.384648][    C1] RAX: ffffffffffffffda RBX: 00007f05de27ffa0 RCX: 00007f05de058be9
[  302.392627][    C1] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000005
[  302.400823][    C1] RBP: 00007f05de0dbe19 R08: 0000000000000000 R09: 0000000000000000
[  302.408988][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  302.417137][    C1] R13: 00007f05de280038 R14: 00007f05de27ffa0 R15: 00007ffc0a47bab8
[  302.425247][    C1]  </TASK>
[  302.428442][    C1] 
[  302.430843][    C1] Allocated by task 9726:
[  302.435378][    C1]  __kasan_kmalloc+0xb5/0xf0
[  302.439967][    C1]  __alloc_skb+0x22c/0x750
[  302.444674][    C1]  alloc_uevent_skb+0x7d/0x230
[  302.449445][    C1]  kobject_uevent_net_broadcast+0x17e/0x530
[  302.450632][ T4326] m920x_read = error: -19
[  302.455415][    C1]  kobject_uevent_env+0x556/0x890
[  302.464874][    C1]  net_rx_queue_update_kobjects+0x221/0x490
[  302.466732][ T4326] dvb-usb: error while querying for an remote control event.
[  302.470875][    C1]  netdev_register_kobject+0x223/0x310
[  302.470898][    C1]  register_netdevice+0x1019/0x16b0
[  302.470917][    C1]  __ip_tunnel_create+0x2bf/0x380
[  302.470934][    C1]  ip_tunnel_init_net+0x232/0x6b0
[  302.470950][    C1]  vti_init_net+0x2b/0xf0
[  302.470967][    C1]  ops_init+0x357/0x600
[  302.508143][    C1]  setup_net+0x38d/0x9f0
[  302.512396][    C1]  copy_net_ns+0x348/0x5b0
[  302.516827][    C1]  create_new_namespaces+0x3d3/0x6f0
[  302.522126][    C1]  copy_namespaces+0x37d/0x3e0
[  302.526972][    C1]  copy_process+0x180f/0x3e00
[  302.531655][    C1]  kernel_clone+0x219/0x930
[  302.536148][    C1]  __x64_sys_clone+0x170/0x1c0
[  302.540923][    C1]  do_syscall_64+0x4c/0xa0
[  302.545446][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  302.551553][    C1] 
[  302.553906][    C1] Last potentially related work creation:
[  302.559652][    C1]  kasan_save_stack+0x35/0x60
[  302.564551][    C1]  kasan_record_aux_stack+0xb8/0x100
[  302.569846][    C1]  kvfree_call_rcu+0x10a/0x7c0
[  302.574730][    C1]  __ipv6_dev_mc_dec+0x2bf/0x320
[  302.579792][    C1]  ipv6_mc_destroy_dev+0x32e/0x590
[  302.584911][    C1]  addrconf_ifdown+0x1480/0x1970
[  302.589853][    C1]  addrconf_notify+0x445/0xf00
[  302.594747][    C1]  raw_notifier_call_chain+0xcb/0x160
[  302.600283][    C1]  unregister_netdevice_many+0xf57/0x18f0
[  302.601734][ T4326] m920x_read = error: -19
[  302.606039][    C1]  vti6_exit_batch_net+0x3c6/0x410
[  302.615491][    C1]  cleanup_net+0x77b/0xb80
[  302.617220][ T4326] dvb-usb: error while querying for an remote control event.
[  302.619925][    C1]  process_one_work+0x863/0x1000
[  302.619947][    C1]  worker_thread+0xaa8/0x12a0
[  302.637124][    C1]  kthread+0x436/0x520
[  302.641214][    C1]  ret_from_fork+0x1f/0x30
[  302.645722][    C1] 
[  302.648224][    C1] The buggy address belongs to the object at ffff888060dde400
[  302.648224][    C1]  which belongs to the cache kmalloc-512 of size 512
[  302.662601][    C1] The buggy address is located 42 bytes inside of
[  302.662601][    C1]  512-byte region [ffff888060dde400, ffff888060dde600)
[  302.675975][    C1] The buggy address belongs to the page:
[  302.681990][    C1] page:ffffea0001837700 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888060dde400 pfn:0x60ddc
[  302.693568][    C1] head:ffffea0001837700 order:2 compound_mapcount:0 compound_pincount:0
[  302.702259][    C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  302.710443][    C1] raw: 00fff00000010200 ffffea00007dde08 ffffea00017dd808 ffff888016841c80
[  302.719317][    C1] raw: ffff888060dde400 000000000010000b 00000001ffffffff 0000000000000000
[  302.728252][    C1] page dumped because: kasan: bad access detected
[  302.734751][    C1] page_owner tracks the page as allocated
[  302.740821][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4184, ts 56115391521, free_ts 17897498284
[  302.750774][ T4326] m920x_read = error: -19
[  302.760187][    C1]  get_page_from_freelist+0x1b77/0x1c60
[  302.760219][    C1]  __alloc_pages+0x1e1/0x470
[  302.760236][    C1]  new_slab+0xc0/0x4b0
[  302.772231][ T4326] dvb-usb: error while querying for an remote control event.
[  302.774960][    C1]  ___slab_alloc+0x81e/0xdf0
[  302.774982][    C1]  __kmalloc+0x1cd/0x330
[  302.774997][    C1]  __register_sysctl_table+0xa1f/0x1230
[  302.775017][    C1]  neigh_sysctl_register+0x9a1/0xa80
[  302.775035][    C1]  devinet_sysctl_register+0xa8/0x1f0
[  302.812594][    C1]  inetdev_init+0x28c/0x4d0
[  302.817190][    C1]  inetdev_event+0x280/0x1360
[  302.822266][    C1]  raw_notifier_call_chain+0xcb/0x160
[  302.827743][    C1]  register_netdevice+0x1275/0x16b0
[  302.833145][    C1]  veth_newlink+0x8ed/0xda0
[  302.837773][    C1]  rtnl_newlink+0x114c/0x17d0
[  302.842448][    C1]  rtnetlink_rcv_msg+0x9b9/0xe60
[  302.847400][    C1]  netlink_rcv_skb+0x1e0/0x430
[  302.852351][    C1] page last free stack trace:
[  302.857134][    C1]  free_unref_page_prepare+0x637/0x6c0
[  302.862818][    C1]  free_unref_page+0x94/0x280
[  302.867582][    C1]  free_contig_range+0x96/0xf0
[  302.872337][    C1]  destroy_args+0x100/0xa20
[  302.876859][    C1]  debug_vm_pgtable+0x318/0x370
[  302.881799][    C1]  do_one_initcall+0x1ee/0x680
[  302.886659][    C1]  do_initcall_level+0x137/0x1f0
[  302.891673][    C1]  do_initcalls+0x4b/0x90
[  302.895989][    C1]  kernel_init_freeable+0x3ce/0x560
[  302.901184][    C1]  kernel_init+0x19/0x1b0
[  302.901783][ T4326] m920x_read = error: -19
[  302.905557][    C1]  ret_from_fork+0x1f/0x30
[  302.905580][    C1] 
[  302.905586][    C1] Memory state around the buggy address:
[  302.905598][    C1]  ffff888060dde300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  302.917932][ T4326] dvb-usb: error while querying for an remote control event.
[  302.922735][    C1]  ffff888060dde380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  302.922749][    C1] >ffff888060dde400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  302.922758][    C1]                                   ^
[  302.922777][    C1]  ffff888060dde480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  302.922789][    C1]  ffff888060dde500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  302.922798][    C1] ==================================================================
[  302.922805][    C1] Disabling lock debugging due to kernel taint
[  302.922857][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  302.922867][    C1] CPU: 1 PID: 10029 Comm: syz.3.2011 Tainted: G    B             syzkaller #0
[  302.922885][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  302.922895][    C1] Call Trace:
[  302.935529][ T4326] Bluetooth: hci1: command 0x0419 tx timeout
[  302.938305][    C1]  <IRQ>
[  302.938315][    C1]  dump_stack_lvl+0x168/0x230
[  303.003543][T10027] loop1: detected capacity change from 0 to 32768
[  303.007577][    C1]  ? show_regs_print_info+0x20/0x20
[  303.007607][    C1]  ? load_image+0x3b0/0x3b0
[  303.007632][    C1]  panic+0x2c9/0x7f0
[  303.033223][ T4326] m920x_read = error: -19
[  303.035710][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  303.042534][ T4326] dvb-usb: error while querying for an remote control event.
[  303.047870][    C1]  ? _raw_spin_unlock_irqrestore+0xa5/0x100
[  303.047898][    C1]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  303.086624][    C1]  ? _raw_spin_unlock+0x40/0x40
[  303.091491][    C1]  ? print_memory_metadata+0x314/0x400
[  303.097130][    C1]  ? rose_timer_expiry+0x470/0x490
[  303.102586][    C1]  check_panic_on_warn+0x80/0xa0
[  303.107675][    C1]  ? rose_timer_expiry+0x470/0x490
[  303.113391][    C1]  end_report+0x6d/0xf0
[  303.117579][    C1]  kasan_report+0x102/0x130
[  303.122097][    C1]  ? rose_timer_expiry+0x470/0x490
[  303.127543][    C1]  rose_timer_expiry+0x470/0x490
[  303.132630][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  303.137745][    C1]  call_timer_fn+0x16c/0x530
[  303.142421][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  303.147462][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  303.153528][    C1]  ? __run_timers+0x7c0/0x7c0
[  303.158239][    C1]  ? rcu_is_watching+0x11/0xa0
[  303.163000][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  303.168194][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  303.173379][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  303.178489][    C1]  __run_timers+0x525/0x7c0
[  303.182740][ T4326] m920x_read = error: -19
[  303.182997][    C1]  ? detach_timer+0x2b0/0x2b0
[  303.187639][ T4326] dvb-usb: error while querying for an remote control event.
[  303.192158][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  303.192185][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  303.210990][    C1]  ? ktime_get_real_ts64+0x420/0x420
[  303.216485][    C1]  run_timer_softirq+0x63/0xf0
[  303.221366][    C1]  handle_softirqs+0x328/0x820
[  303.226328][    C1]  ? __irq_exit_rcu+0x12f/0x220
[  303.231204][    C1]  ? do_softirq+0x200/0x200
[  303.235915][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  303.241292][    C1]  __irq_exit_rcu+0x12f/0x220
[  303.245970][    C1]  ? irq_exit_rcu+0x20/0x20
[  303.250687][    C1]  irq_exit_rcu+0x5/0x20
[  303.254941][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  303.260587][    C1]  </IRQ>
[  303.263533][    C1]  <TASK>
[  303.266512][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  303.272608][    C1] RIP: 0010:finish_lock_switch+0x134/0x280
[  303.278446][    C1] Code: be ff ff ff ff e8 ec 7c 55 08 85 c0 74 4a 4d 85 ff 75 66 0f 1f 44 00 00 48 89 df e8 46 e7 5e 08 e8 71 75 2a 00 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 d9 0f fe ff 43 80 3c
[  303.298456][    C1] RSP: 0018:ffffc900046bf2c8 EFLAGS: 00000282
[  303.305192][    C1] RAX: d5e82f49fa5fc600 RBX: ffff8880b913a300 RCX: d5e82f49fa5fc600
[  303.313569][    C1] RDX: dffffc0000000000 RSI: ffffffff8a0b1620 RDI: ffffffff8a59a240
[  303.321882][    C1] RBP: 1ffff1101722760b R08: dffffc0000000000 R09: ffffed1017227461
[  303.330102][    C1] R10: ffffed1017227461 R11: 1ffff11017227460 R12: 1ffff110172275b9
[  303.331254][ T4326] m920x_read = error: -19
[  303.338277][    C1] R13: dffffc0000000000 R14: ffff8880b913adc8 R15: 0000000000000000
[  303.338302][    C1]  finish_task_switch+0x12f/0x640
[  303.338329][    C1]  ? __switch_to_asm+0x34/0x60
[  303.344816][ T4326] dvb-usb: error while querying for an remote control event.
[  303.350726][    C1]  __schedule+0x11c3/0x4390
[  303.350762][    C1]  ? release_firmware_map_entry+0x190/0x190
[  303.350780][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  303.358116][ T4326] Bluetooth: hci2: command 0x040f tx timeout
[  303.361096][    C1]  ? lock_chain_count+0x20/0x20
[  303.361125][    C1]  schedule+0x11b/0x1e0
[  303.361143][    C1]  schedule_timeout+0x97/0x280
[  303.361160][    C1]  ? console_conditional_schedule+0x40/0x40
[  303.361179][    C1]  ? __lock_acquire+0x7c60/0x7c60
[  303.361197][    C1]  ? rcu_lock_release+0x9/0x20
[  303.361218][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[  303.361237][    C1]  unix_wait_for_peer+0x1e5/0x2e0
[  303.361258][    C1]  ? unix_find_other+0x820/0x820
[  303.361273][    C1]  ? do_raw_spin_lock+0x11d/0x280
[  303.361289][    C1]  ? init_wait_entry+0xd0/0xd0
[  303.361309][    C1]  ? __rwlock_init+0x140/0x140
[  303.361323][    C1]  ? skb_copy_datagram_from_iter+0x5ea/0x6a0
[  303.361345][    C1]  ? bpf_lsm_unix_may_send+0x5/0x10
[  303.361365][    C1]  unix_dgram_sendmsg+0x106f/0x1890
[  303.361391][    C1]  ? unix_dgram_poll+0x660/0x660
[  303.475184][    C1]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  303.481791][    C1]  ? aa_sock_msg_perm+0x94/0x150
[  303.482591][ T4326] m920x_read = error: -19
[  303.487034][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  303.487063][    C1]  ? security_socket_sendmsg+0x7c/0xa0
[  303.487082][    C1]  ? unix_dgram_poll+0x660/0x660
[  303.491889][ T4326] dvb-usb: error while querying for an remote control event.
[  303.497167][    C1]  ____sys_sendmsg+0x5a2/0x8c0
[  303.497200][    C1]  ? memset+0x1e/0x40
[  303.524059][    C1]  ? __sys_sendmsg_sock+0x30/0x30
[  303.529082][    C1]  ? rcu_is_watching+0x11/0xa0
[  303.533838][    C1]  ? import_iovec+0x6f/0xa0
[  303.538658][    C1]  ___sys_sendmsg+0x1f0/0x260
[  303.543348][    C1]  ? __sys_sendmsg+0x250/0x250
[  303.548290][    C1]  ? __might_fault+0xb3/0x110
[  303.553341][    C1]  __sys_sendmmsg+0x27c/0x4a0
[  303.558116][    C1]  ? __ia32_sys_sendmsg+0x80/0x80
[  303.563685][    C1]  ? __context_tracking_exit+0x4c/0x80
[  303.569589][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  303.575707][    C1]  ? lock_chain_count+0x20/0x20
[  303.580583][    C1]  ? vtime_user_exit+0x2dc/0x400
[  303.585556][    C1]  __x64_sys_sendmmsg+0x9c/0xb0
[  303.590445][    C1]  do_syscall_64+0x4c/0xa0
[  303.594995][    C1]  ? clear_bhb_loop+0x30/0x80
[  303.599757][    C1]  ? clear_bhb_loop+0x30/0x80
[  303.604433][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  303.610458][    C1] RIP: 0033:0x7f05de058be9
[  303.615188][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.633758][ T4326] m920x_read = error: -19
[  303.635307][    C1] RSP: 002b:00007f05dc2c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  303.635335][    C1] RAX: ffffffffffffffda RBX: 00007f05de27ffa0 RCX: 00007f05de058be9
[  303.639975][ T4326] dvb-usb: error while querying for an remote control event.
[  303.648579][    C1] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000005
[  303.648595][    C1] RBP: 00007f05de0dbe19 R08: 0000000000000000 R09: 0000000000000000
[  303.648607][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  303.648618][    C1] R13: 00007f05de280038 R14: 00007f05de27ffa0 R15: 00007ffc0a47bab8
[  303.696409][    C1]  </TASK>
[  303.699773][    C1] Kernel Offset: disabled
[  303.704211][    C1] Rebooting in 86400 seconds..