last executing test programs:

10.145132041s ago: executing program 1 (id=860):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000001c0), 0x318, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001700), 0xfffffffffffffe50}, 0x48)

9.27255119s ago: executing program 1 (id=866):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000300), 0xfffffffffffffffd, 0x2e44)
dup3(r2, r1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

9.030795195s ago: executing program 1 (id=867):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r1, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./control\x00', 0x210000, &(0x7f0000000200)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@nolazytime}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f00000002c0)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x2)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8502, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448de, 0x0)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000080)={0xa})
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0xfffffffffffffff7})
r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
setns(r4, 0x2000000)

5.924406263s ago: executing program 1 (id=890):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000005c0)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a40)=""/4033, 0xfc1}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000001b40)=""/111, 0x6f}, {&(0x7f0000001bc0)=""/4112, 0x1010}, {&(0x7f0000002d00)=""/293, 0x125}, {&(0x7f0000002e40)=""/88, 0x58}, {&(0x7f0000002ec0)=""/245, 0xf5}, {&(0x7f0000002fc0)=""/155, 0x9b}], 0x8}, 0x6}, {{0x0, 0x0, 0x0}, 0xc00}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x10060, 0x0)

5.897796796s ago: executing program 1 (id=892):
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x9, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xff, 0x200000000008b}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x71)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="7bb6ec", 0x3}], 0x1, 0xfffffffd, 0x3, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000280)=@file={0x0, '.\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000300), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0)
clock_getres(0x8, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000380), 0x1, 0x181842)
ioctl$int_in(r4, 0x5452, &(0x7f00000003c0)=0x94)
clock_gettime(0x0, &(0x7f0000000400)={<r5=>0x0, <r6=>0x0})
clock_gettime(0x0, &(0x7f0000000440))
clock_gettime(0x0, &(0x7f0000000480))
clock_gettime(0x7, &(0x7f0000000340))
write$evdev(r4, &(0x7f0000000680)=[{{0x0, 0x2710}, 0x10, 0x4, 0x9}, {{r5, r6/1000+10000}, 0x11, 0x3, 0x9}, {{0x77359400}, 0x3, 0x2, 0x7ff}, {{0x77359400}, 0x1f, 0x5, 0x1}, {{}, 0x14, 0x5, 0x2}], 0x78)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x400, 0x100)
fchmodat(r7, 0x0, 0x84)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x12, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, &(0x7f00000005c0)=""/163)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
fsetxattr$security_selinux(r8, &(0x7f0000000740), &(0x7f0000000780)='system_u:object_r:fonts_t:s0\x00', 0x1d, 0x1)

4.584700251s ago: executing program 0 (id=896):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400", @ANYBLOB="0000000000000000280012"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000007, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000000206010a00000000000000000000000005000500020000000900020073797a3000000000280004000000feff"], 0x3c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4.535376666s ago: executing program 2 (id=897):
socket$tipc(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
syz_open_dev$loop(0x0, 0x6b, 0x901)
setitimer(0x1, 0x0, &(0x7f0000000400))
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000440)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c)
sendmmsg$inet6(r3, &(0x7f00000004c0), 0x40000000000017d, 0x888)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x0)
sched_getattr(r0, 0x0, 0x0, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000500)=<r4=>0x0)
timer_gettime(r4, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x3)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000040)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x28005)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000201902ccff700000000000002000005"], 0x14}, 0x1, 0x0, 0x0, 0xcc811}, 0x40040)
socket$inet_udp(0x2, 0x2, 0x0)

4.125307508s ago: executing program 0 (id=900):
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./bus\x00', 0x82)
mount$overlay(0x0, &(0x7f00000005c0)='./bus\x00', &(0x7f0000000600), 0x0, &(0x7f0000000640)={[], [{@obj_role={'obj_role', 0x3d, '[)@){#-/{\\\'\\*.'}}]})
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000740))
mount_setattr(0xffffffffffffffff, &(0x7f0000000700)='./bus/file0\x00', 0x9800, &(0x7f0000000780)={0x100086, 0x80, 0x100000, {r0}}, 0x20)

4.10230333s ago: executing program 4 (id=901):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000300), 0xfffffffffffffffd, 0x2e44)
dup3(r2, r1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.021131798s ago: executing program 4 (id=902):
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r1, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./control\x00', 0x210000, &(0x7f0000000200)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@nolazytime}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f00000002c0)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
renameat2(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x2)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8502, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448de, 0x0)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000080)={0xa})
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffd, 0xfffffffffffffff7})
r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
setns(r4, 0x2000000)

4.020987588s ago: executing program 0 (id=903):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000005c0)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a40)=""/4033, 0xfc1}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000001b40)=""/111, 0x6f}, {&(0x7f0000001bc0)=""/4112, 0x1010}, {&(0x7f0000002d00)=""/293, 0x125}, {&(0x7f0000002e40)=""/88, 0x58}, {&(0x7f0000002ec0)=""/245, 0xf5}, {&(0x7f0000002fc0)=""/155, 0x9b}], 0x8}, 0x6}, {{0x0, 0x0, 0x0}, 0xc00}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x10060, 0x0)

4.020632778s ago: executing program 0 (id=904):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4020e504, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000e40)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000ec0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000001000), 0x318, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sendmsg(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001100)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)
mount$9p_tcp(&(0x7f0000001180), &(0x7f00000011c0)='.\x00', &(0x7f0000001200), 0x8010, &(0x7f0000001240)=ANY=[@ANYBLOB='trans=tcp,port=0x00000p0000004m22,privp'])
write(r1, &(0x7f0000000a80)="1100000010000000ffffffffffffff9700000000", 0x14)

3.937621707s ago: executing program 3 (id=905):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, &(0x7f0000001f40))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000001f80)=ANY=[@ANYBLOB="12015002000000083512148040000102030109026900b6f007000e080b0102010f200809040000000101"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000f00)=<r3=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000f40)={{r1}, r3, 0x4, @unused=[0x7f, 0x1, 0x9, 0x2], @name="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"})
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c)
socket$netlink(0x10, 0x3, 0x0)
io_pgetevents(0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000840))
getpid()
r4 = syz_open_dev$usbfs(0x0, 0x76, 0x160341)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, 0x0)

3.636040148s ago: executing program 2 (id=906):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000240)=0xfffffffa, 0x4)
bind$inet(r0, &(0x7f0000001940)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001a80)=0x193a, 0x4)

3.579615704s ago: executing program 2 (id=907):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4020e504, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000e40)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000001000), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000001040), 0x10106, 0x2, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sendmsg(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001100)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)
mount$9p_tcp(&(0x7f0000001180), &(0x7f00000011c0)='.\x00', &(0x7f0000001200), 0x8010, &(0x7f0000001240)=ANY=[@ANYBLOB='trans=tcp,port=0x00000p0000004m22,privp'])
ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7)
write(r1, &(0x7f0000000a80)="1100000010000000ffffffffffffff9700000000", 0x14)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)

3.176296075s ago: executing program 0 (id=908):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000940), 0x4)
setsockopt$inet6_buf(r0, 0x29, 0xd0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x0, <r2=>0x0}, 0x6)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=r2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xf, &(0x7f0000000a00)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0)
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="1201000200000010f3044d0700000000000109022400010000500009040005030300000009210000090122180009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_read_part_table(0x5e3, &(0x7f00000000c0)="$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")
syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = timerfd_create(0x0, 0x800)
timerfd_settime(r5, 0x3, &(0x7f00000006c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r5, &(0x7f0000000700)=[{&(0x7f0000000780)=""/10, 0xa}], 0x1)
syz_usb_control_io$hid(r3, 0x0, 0x0)

2.771535276s ago: executing program 2 (id=909):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000fdffffff00"/28], 0x50)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000000500)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
recvmsg(r2, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000008c0)='GPL\x00', 0x4, 0xc3, &(0x7f0000000900)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000a00), 0x8, 0x10, &(0x7f0000000a40), 0x10}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="ab00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r5}, &(0x7f0000000b80), &(0x7f0000000bc0)=r1}, 0x20)
sendmsg$inet(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)='>', 0x20000281}], 0x1}, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000cc0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000dc0)={"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"})
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f00000011c0)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f00003e1000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000001240)={[0x3ffff9, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x0, 0x0, 0x0, 0x1, 0x8, 0x5, 0x101, 0x100000002], 0x4, 0x290fc4})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)

2.770901646s ago: executing program 1 (id=919):
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x9, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xff, 0x200000000008b}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x71)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="7bb6ec", 0x3}], 0x1, 0xfffffffd, 0x3, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000280)=@file={0x0, '.\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000300), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0)
clock_getres(0x8, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000380), 0x1, 0x181842)
ioctl$int_in(r4, 0x5452, &(0x7f00000003c0)=0x94)
clock_gettime(0x0, &(0x7f0000000400)={<r5=>0x0, <r6=>0x0})
clock_gettime(0x0, &(0x7f0000000440))
clock_gettime(0x0, &(0x7f0000000480))
clock_gettime(0x7, &(0x7f0000000340))
write$evdev(r4, &(0x7f0000000680)=[{{0x0, 0x2710}, 0x10, 0x4, 0x9}, {{r5, r6/1000+10000}, 0x11, 0x3, 0x9}, {{0x77359400}, 0x3, 0x2, 0x7ff}, {{0x77359400}, 0x1f, 0x5, 0x1}, {{}, 0x14, 0x5, 0x2}], 0x78)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x400, 0x100)
fchmodat(r7, 0x0, 0x84)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x12, 0xffffffffffffffff, 0x0)
mincore(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, &(0x7f00000005c0)=""/163)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
fsetxattr$security_selinux(r8, &(0x7f0000000740), &(0x7f0000000780)='system_u:object_r:fonts_t:s0\x00', 0x1d, 0x1)

2.63456257s ago: executing program 3 (id=910):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400", @ANYBLOB="0000000000000000280012"], 0x48}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000007, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000000206010a00000000000000000000000005000500020000000900020073797a3000000000280004000000feff"], 0x3c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.814799985s ago: executing program 2 (id=911):
socket$tipc(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
syz_open_dev$loop(0x0, 0x6b, 0x901)
setitimer(0x1, 0x0, &(0x7f0000000400))
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000440)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c)
sendmmsg$inet6(r3, &(0x7f00000004c0), 0x40000000000017d, 0x888)

1.814554725s ago: executing program 3 (id=912):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x1, 0x7fd, 0xd, 0x8009}, 'syz0\x00', 0x40})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000300), 0xfffffffffffffffd, 0x2e44)
dup3(r2, r1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.770681359s ago: executing program 3 (id=913):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000026000200feffffffbd0310000000000095002000000000006916000000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee61e00bf150000000000000f5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233bff7f0000000000009fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874c9a0c6c04b96360d6f499d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f4205ebf9a98a0d9f18135cb1d8d567c3436fa697b72c3b0200000000000079c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff68e84d7b130906f17f6aa075a257310f2d92cb1d1e16468949f5675262ee318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0fde97a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1ff01000000000000bdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee807fc081e004ffb7d3104af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5e8bac16e79da9c2444420900000000000000f888a94365b99b72796fca1b922fc9aefaf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837beeedba483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c794846e403950bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be05a40fde69c350e59f11f1d26a4d04d8c8b2c4a4d23ec931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f64705f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680f346ff0ffbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705116b2f4fc20d4e93882bdd6ccea97f3a08d3565b0000000000000000000000000000d35fb97c2d7a9374294dcec3da3df9a13c4fc63b00426682534d894caee0b963a3"], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001700), 0xfffffffffffffe50}, 0x48)

1.747445101s ago: executing program 4 (id=914):
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./bus\x00', 0x82)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000740))
mount_setattr(0xffffffffffffffff, &(0x7f0000000700)='./bus/file0\x00', 0x9800, &(0x7f0000000780)={0x100086, 0x80, 0x100000, {r0}}, 0x20)

1.17159955s ago: executing program 4 (id=915):
openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00')
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x101042, 0x15)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.119763296s ago: executing program 4 (id=916):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4020e504, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000e40)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000ec0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001000), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000001040), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
sendmsg(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001100)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)
mount$9p_tcp(&(0x7f0000001180), &(0x7f00000011c0)='.\x00', &(0x7f0000001200), 0x8010, &(0x7f0000001240)=ANY=[@ANYBLOB='trans=tcp,port=0x00000p0000004m22,privp'])

892.013749ms ago: executing program 3 (id=917):
r0 = socket$tipc(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000340), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
syz_open_dev$loop(0x0, 0x6b, 0x901)
setitimer(0x1, 0x0, &(0x7f0000000400))
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000440)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c)
sendmmsg$inet6(r4, &(0x7f00000004c0), 0x40000000000017d, 0x888)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x0)
sched_getattr(r1, 0x0, 0x0, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000500)=<r5=>0x0)
timer_gettime(r5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2000006}, 0x3}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000040)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x28005)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000201902ccff700000000000002000005"], 0x14}, 0x1, 0x0, 0x0, 0xcc811}, 0x40040)
socket$inet_udp(0x2, 0x2, 0x0)

871.463711ms ago: executing program 0 (id=918):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4020e504, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000e40)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000ec0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000001000), 0x318, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sendmsg(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001100)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)
mount$9p_tcp(&(0x7f0000001180), &(0x7f00000011c0)='.\x00', &(0x7f0000001200), 0x8010, &(0x7f0000001240)=ANY=[@ANYBLOB='trans=tcp,port=0x00000p0000004m22,privp'])
write(r1, &(0x7f0000000a80)="1100000010000000ffffffffffffff9700000000", 0x14)

868.293011ms ago: executing program 2 (id=920):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4020e504, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000e40)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000001000), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000001040), 0x10106, 0x2, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
sendmsg(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001100)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)
mount$9p_tcp(&(0x7f0000001180), &(0x7f00000011c0)='.\x00', &(0x7f0000001200), 0x8010, &(0x7f0000001240)=ANY=[@ANYBLOB='trans=tcp,port=0x00000p0000004m22,privp'])
ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7)
write(r1, &(0x7f0000000a80)="1100000010000000ffffffffffffff9700000000", 0x14)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)

78.809872ms ago: executing program 4 (id=921):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000001c0), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001700), 0xfffffffffffffe50}, 0x48)

0s ago: executing program 3 (id=922):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000fdffffff00"/28], 0x50)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000000500)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
recvmsg(r2, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f00000008c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000900)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000a00), 0x366, 0x10, &(0x7f0000000a40), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="ab00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r5}, &(0x7f0000000b80), &(0x7f0000000bc0)=r1}, 0x20)
sendmsg$inet(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)='>', 0x20000281}], 0x1}, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000cc0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000dc0)={"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"})
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f00000011c0)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f00003e1000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000001240)={[0x3ffff9, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85ff, 0x101, 0x0, 0x0, 0x0, 0x1, 0x8, 0x5, 0x101, 0x100000002], 0x4, 0x290fc4})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
close(r1)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

509][ T1438] device team_slave_1 entered promiscuous mode
[   56.007149][ T1438] device veth0_to_batadv entered promiscuous mode
[   56.014936][ T1438] device batadv_slave_0 entered promiscuous mode
[   56.029324][ T1438] device veth1_to_batadv entered promiscuous mode
[   56.031265][ T1461] 9pnet_fd: p9_fd_create_tcp (1461): problem connecting socket to 127.0.0.1
[   56.051859][ T1438] device batadv_slave_1 entered promiscuous mode
[   56.059939][ T1438] device xfrm0 entered promiscuous mode
[   56.066302][ T1438] device veth0_to_hsr entered promiscuous mode
[   56.074128][ T1438] device hsr_slave_0 entered promiscuous mode
[   56.081971][ T1438] device veth1_to_hsr entered promiscuous mode
[   56.090069][ T1438] device hsr_slave_1 entered promiscuous mode
[   56.097968][ T1438] device veth1_virt_wifi entered promiscuous mode
[   56.106338][ T1438] device veth0_virt_wifi entered promiscuous mode
[   56.114824][ T1438] device veth1_vlan entered promiscuous mode
[   56.125030][ T1438] device vlan0 entered promiscuous mode
[   56.133035][ T1438] device vlan1 entered promiscuous mode
[   56.141752][ T1438] device veth0_macvtap entered promiscuous mode
[   56.150197][ T1438] device macsec0 entered promiscuous mode
[   56.177764][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   56.206679][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.250166][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   56.254461][  T309] usb 2-1: USB disconnect, device number 6
[   56.288254][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.304997][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.315220][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.327733][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.338395][  T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   57.196654][ T1487] loop3: detected capacity change from 0 to 8192
[   57.248564][ T1487]  loop3: p1 p2 p3 p4
[   57.258030][ T1487] loop3: p1 start 65792 is beyond EOD, truncated
[   57.264750][ T1487] loop3: p2 size 590592 extends beyond EOD, truncated
[   57.272472][ T1487] loop3: p3 start 524042 is beyond EOD, truncated
[   57.279960][ T1487] loop3: p4 start 131072 is beyond EOD, truncated
[   57.299440][ T1487] x_tables: duplicate underflow at hook 2
[   57.455186][ T1495] can0: slcan on ptm0.
[   57.487744][ T1494] can0 (unregistered): slcan off ptm0.
[   57.706515][ T1469] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   57.896536][ T1469] usb 5-1: Using ep0 maxpacket: 16
[   57.902822][ T1469] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.914166][ T1469] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.924489][ T1469] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   57.937927][ T1469] usb 5-1: config 0 interface 0 has no altsetting 0
[   57.944654][ T1469] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[   57.954474][ T1469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.112677][ T1469] usb 5-1: config 0 descriptor??
[   58.296550][ T1444] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   58.370250][ T1546] loop2: detected capacity change from 0 to 8192
[   58.407079][ T1546]  loop2: p1 p2 p3 p4
[   58.411257][ T1546] loop2: p1 start 65792 is beyond EOD, truncated
[   58.417876][ T1546] loop2: p2 size 590592 extends beyond EOD, truncated
[   58.425429][ T1546] loop2: p3 start 524042 is beyond EOD, truncated
[   58.431972][ T1546] loop2: p4 start 131072 is beyond EOD, truncated
[   58.442957][ T1546] x_tables: duplicate underflow at hook 2
[   58.470699][  T324] udevd[324]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   58.482165][ T1444] usb 1-1: unable to get BOS descriptor or descriptor too short
[   58.496309][ T1444] usb 1-1: not running at top speed; connect to a high speed hub
[   58.510316][ T1444] usb 1-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[   58.519306][ T1444] usb 1-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[   58.536189][ T1493] loop4: detected capacity change from 0 to 2048
[   58.543361][ T1444] usb 1-1: config 240 has 1 interface, different from the descriptor's value: 182
[   58.554803][ T1444] usb 1-1: string descriptor 0 read error: -22
[   58.561104][ T1444] usb 1-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   58.570196][ T1444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.580199][ T1444] usb 1-1: cannot find UAC_HEADER
[   58.586842][ T1444] snd-usb-audio: probe of 1-1:240.0 failed with error -22
[   58.597059][ T1493]  loop4: p1 < > p3 < > p4 < >
[   58.602139][ T1493] loop4: partition table partially beyond EOD, truncated
[   58.609701][ T1493] loop4: p1 start 3405774849 is beyond EOD, truncated
[   58.617033][ T1493] loop4: p3 start 4284289 is beyond EOD, truncated
[   58.624852][  T392] udevd[392]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   58.627505][ T1551] No source specified
[   58.650037][ T1469] hid-generic 0003:04F3:074D.0004: failed to start in urb: -90
[   58.658463][ T1469] input: HID 04f3:074d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04F3:074D.0004/input/input8
[   58.676545][ T1469] hid-generic 0003:04F3:074D.0004: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.4-1/input0
[   58.722801][ T1556] input: syz0 as /devices/virtual/input/input9
[   58.739656][   T28] audit: type=1400 audit(1793175256.165:196): avc:  denied  { append } for  pid=1555 comm="syz.1.433" name="event3" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   58.781655][ T1537] netlink: 104 bytes leftover after parsing attributes in process `syz.0.426'.
[   58.793806][ T1537] netlink: 'syz.0.426': attribute type 27 has an invalid length.
[   58.804206][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   58.821991][  T309] usb 1-1: USB disconnect, device number 5
[   59.138785][ T1573] can0: slcan on ptm0.
[   59.167095][ T1572] can0 (unregistered): slcan off ptm0.
[   59.857178][ T1611] No source specified
[   60.892441][ T1615] loop2: detected capacity change from 0 to 8192
[   60.948738][ T1615]  loop2: p1 p2 p3 p4
[   60.954021][ T1615] loop2: p1 start 65792 is beyond EOD, truncated
[   60.968249][ T1615] loop2: p2 size 590592 extends beyond EOD, truncated
[   60.976958][ T1615] loop2: p3 start 524042 is beyond EOD, truncated
[   60.983445][ T1615] loop2: p4 start 131072 is beyond EOD, truncated
[   61.002660][ T1615] x_tables: duplicate underflow at hook 2
[   61.034548][ T1617] input: syz0 as /devices/virtual/input/input10
[   61.826524][ T1451] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   62.008064][ T1451] usb 3-1: unable to get BOS descriptor or descriptor too short
[   62.016203][ T1451] usb 3-1: not running at top speed; connect to a high speed hub
[   62.025166][ T1451] usb 3-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[   62.034169][ T1451] usb 3-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[   62.044495][ T1451] usb 3-1: config 240 has 1 interface, different from the descriptor's value: 182
[   62.056022][ T1451] usb 3-1: string descriptor 0 read error: -22
[   62.062294][ T1451] usb 3-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   62.071387][ T1451] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.081722][ T1451] usb 3-1: cannot find UAC_HEADER
[   62.088358][ T1451] snd-usb-audio: probe of 3-1:240.0 failed with error -22
[   62.103656][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   62.283061][ T1632] netlink: 104 bytes leftover after parsing attributes in process `syz.2.450'.
[   62.292615][ T1632] netlink: 'syz.2.450': attribute type 27 has an invalid length.
[   62.302236][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   62.318683][ T1451] usb 3-1: USB disconnect, device number 6
[   62.395068][ T1638] can0: slcan on ptm0.
[   62.436928][ T1637] can0 (unregistered): slcan off ptm0.
[   62.779676][ T1667] No source specified
[   62.842218][ T1673] input: syz0 as /devices/virtual/input/input11
[   62.873564][ T1671] loop3: detected capacity change from 0 to 8192
[   62.918257][ T1671]  loop3: p1 p2 p3 p4
[   62.932470][ T1671] loop3: p1 start 65792 is beyond EOD, truncated
[   62.940378][ T1671] loop3: p2 size 590592 extends beyond EOD, truncated
[   62.964214][ T1671] loop3: p3 start 524042 is beyond EOD, truncated
[   62.975783][ T1671] loop3: p4 start 131072 is beyond EOD, truncated
[   63.017567][ T1671] x_tables: duplicate underflow at hook 2
[   64.116571][  T309] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   64.298327][  T309] usb 2-1: unable to get BOS descriptor or descriptor too short
[   64.307135][  T309] usb 2-1: not running at top speed; connect to a high speed hub
[   64.316001][  T309] usb 2-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[   64.325884][  T309] usb 2-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[   64.336819][  T309] usb 2-1: config 240 has 1 interface, different from the descriptor's value: 182
[   64.349577][  T309] usb 2-1: string descriptor 0 read error: -22
[   64.356050][  T309] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   64.365957][  T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.381482][  T309] usb 2-1: cannot find UAC_HEADER
[   64.409950][  T309] snd-usb-audio: probe of 2-1:240.0 failed with error -22
[   64.461321][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   64.588920][ T1705] netlink: 104 bytes leftover after parsing attributes in process `syz.1.467'.
[   64.607787][ T1705] netlink: 'syz.1.467': attribute type 27 has an invalid length.
[   64.631337][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   64.736287][ T1451] usb 2-1: USB disconnect, device number 7
[   64.862618][ T1713] loop2: detected capacity change from 0 to 1024
[   64.891090][ T1713] EXT4-fs: Ignoring removed bh option
[   64.907647][ T1713] EXT4-fs: Ignoring removed bh option
[   64.928679][ T1713] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   64.941542][   T43] Bluetooth: hci0: Frame reassembly failed (-84)
[   65.336579][ T1451] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   65.405780][ T1727] loop1: detected capacity change from 0 to 8192
[   65.466867][ T1727]  loop1: p1 p2 p3 p4
[   65.471186][ T1727] loop1: p1 start 65792 is beyond EOD, truncated
[   65.477679][ T1727] loop1: p2 size 590592 extends beyond EOD, truncated
[   65.485139][ T1727] loop1: p3 start 524042 is beyond EOD, truncated
[   65.491792][ T1727] loop1: p4 start 131072 is beyond EOD, truncated
[   65.501839][ T1727] x_tables: duplicate underflow at hook 2
[   65.526570][ T1451] usb 4-1: Using ep0 maxpacket: 16
[   65.534064][ T1451] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.552067][ T1451] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.563483][  T393] udevd[393]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[   65.573759][ T1451] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   65.586770][ T1451] usb 4-1: config 0 interface 0 has no altsetting 0
[   65.593451][ T1451] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[   65.602702][ T1451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.611574][ T1451] usb 4-1: config 0 descriptor??
[   65.816530][  T585] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   65.996557][  T585] usb 2-1: Using ep0 maxpacket: 16
[   66.002909][  T585] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.013925][  T585] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.023726][  T585] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   66.036614][  T585] usb 2-1: config 0 interface 0 has no altsetting 0
[   66.043304][  T585] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[   66.049385][ T1720] loop3: detected capacity change from 0 to 2048
[   66.058757][  T585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.068538][  T585] usb 2-1: config 0 descriptor??
[   66.106893][ T1720]  loop3: p1 < > p3 < > p4 < >
[   66.111728][ T1720] loop3: partition table partially beyond EOD, truncated
[   66.119011][ T1720] loop3: p1 start 3405774849 is beyond EOD, truncated
[   66.125873][ T1720] loop3: p3 start 4284289 is beyond EOD, truncated
[   66.137515][ T1451] hid-generic 0003:04F3:074D.0005: failed to start in urb: -90
[   66.145918][ T1451] input: HID 04f3:074d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04F3:074D.0005/input/input12
[   66.193792][ T1451] hid-generic 0003:04F3:074D.0005: input,hiddev97,hidraw1: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.3-1/input0
[   66.483088][ T1731] loop1: detected capacity change from 0 to 2048
[   66.537044][ T1731]  loop1: p1 < > p3 < > p4 < >
[   66.541931][ T1731] loop1: partition table partially beyond EOD, truncated
[   66.549287][ T1731] loop1: p1 start 3405774849 is beyond EOD, truncated
[   66.556980][ T1731] loop1: p3 start 4284289 is beyond EOD, truncated
[   66.578973][  T585] hid-generic 0003:04F3:074D.0006: failed to start in urb: -90
[   66.587947][  T585] input: HID 04f3:074d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F3:074D.0006/input/input13
[   66.956511][  T485] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   66.956709][ T1192] Bluetooth: hci0: command 0x1003 tx timeout
[   66.969021][ T1713] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[   66.992167][  T290] EXT4-fs (loop2): unmounting filesystem.
[   67.113780][ T1749] 9pnet_fd: p9_fd_create_tcp (1749): problem connecting socket to 127.0.0.1
[   68.176544][   T39] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   68.378286][   T39] usb 3-1: unable to get BOS descriptor or descriptor too short
[   68.386688][   T39] usb 3-1: not running at top speed; connect to a high speed hub
[   68.395333][   T39] usb 3-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[   68.404643][   T39] usb 3-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[   68.415159][   T39] usb 3-1: config 240 has 1 interface, different from the descriptor's value: 182
[   68.428015][   T39] usb 3-1: string descriptor 0 read error: -22
[   68.434222][   T39] usb 3-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   68.443372][   T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.453304][   T39] usb 3-1: cannot find UAC_HEADER
[   68.460173][   T39] snd-usb-audio: probe of 3-1:240.0 failed with error -22
[   68.473741][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   68.654566][ T1757] netlink: 104 bytes leftover after parsing attributes in process `syz.2.484'.
[   68.664016][ T1757] netlink: 'syz.2.484': attribute type 27 has an invalid length.
[   68.673662][ T1757] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   68.690993][ T1451] usb 3-1: USB disconnect, device number 7
[   69.117042][ T1493] hid-generic 0003:04F3:074D.0004: timeout initializing reports
[   69.132326][  T585] hid-generic 0003:04F3:074D.0006: input,hiddev98,hidraw2: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.1-1/input0
[   69.167934][ T1451] usb 5-1: USB disconnect, device number 3
[   69.175796][ T1469] usb 4-1: USB disconnect, device number 5
[   69.215213][  T585] usb 2-1: USB disconnect, device number 8
[   69.849970][ T1771] fido_id[1771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   70.034997][ T1791] 9pnet_fd: p9_fd_create_tcp (1791): problem connecting socket to 127.0.0.1
[   70.055692][ T1793] 9pnet_fd: p9_fd_create_tcp (1793): problem connecting socket to 127.0.0.1
[   71.076525][ T1451] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   71.126507][   T24] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[   71.266512][ T1451] usb 2-1: Using ep0 maxpacket: 16
[   71.272845][ T1451] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.284017][ T1451] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.293944][ T1451] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   71.306882][ T1451] usb 2-1: config 0 interface 0 has no altsetting 0
[   71.313534][ T1451] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[   71.322763][ T1451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.328956][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[   71.338767][ T1451] usb 2-1: config 0 descriptor??
[   71.346768][   T24] usb 4-1: not running at top speed; connect to a high speed hub
[   71.365451][   T24] usb 4-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[   71.379349][   T24] usb 4-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[   71.390219][   T24] usb 4-1: config 240 has 1 interface, different from the descriptor's value: 182
[   71.410144][   T24] usb 4-1: string descriptor 0 read error: -22
[   71.416366][   T24] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   71.425529][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.435471][   T24] usb 4-1: cannot find UAC_HEADER
[   71.442863][   T24] snd-usb-audio: probe of 4-1:240.0 failed with error -22
[   71.457831][  T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   71.546587][  T309] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   71.642665][ T1816] netlink: 104 bytes leftover after parsing attributes in process `syz.3.502'.
[   71.652530][ T1816] netlink: 'syz.3.502': attribute type 27 has an invalid length.
[   71.662459][ T1816] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   71.876813][  T309] usb 3-1: unable to get BOS descriptor or descriptor too short
[   71.921307][  T309] usb 3-1: not running at top speed; connect to a high speed hub
[   71.967727][ T1814] loop1: detected capacity change from 0 to 2048
[   72.003339][   T24] usb 4-1: USB disconnect, device number 6
[   72.010738][  T309] usb 3-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[   72.068903][  T309] usb 3-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[   72.097957][ T1814]  loop1: p1 < > p3 < > p4 < >
[   72.104060][ T1814] loop1: partition table partially beyond EOD, truncated
[   72.111595][ T1814] loop1: p1 start 3405774849 is beyond EOD, truncated
[   72.118906][  T309] usb 3-1: config 240 has 1 interface, different from the descriptor's value: 182
[   72.129576][ T1814] loop1: p3 start 4284289 is beyond EOD, truncated
[   72.134574][ T1451] hid-generic 0003:04F3:074D.0007: failed to start in urb: -90
[   72.140741][  T309] usb 3-1: string descriptor 0 read error: -22
[   72.157347][ T1451] input: HID 04f3:074d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F3:074D.0007/input/input14
[   72.170887][  T309] usb 3-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   72.180699][ T1451] hid-generic 0003:04F3:074D.0007: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.1-1/input0
[   72.198041][  T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.231709][  T309] usb 3-1: cannot find UAC_HEADER
[   72.248807][  T309] snd-usb-audio: probe of 3-1:240.0 failed with error -22
[   72.259170][  T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   72.432327][ T1818] netlink: 104 bytes leftover after parsing attributes in process `syz.2.503'.
[   72.441833][ T1818] netlink: 'syz.2.503': attribute type 27 has an invalid length.
[   72.451367][ T1818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   72.484555][ T1451] usb 3-1: USB disconnect, device number 8
[   72.619507][ T1849] 9pnet_fd: p9_fd_create_tcp (1849): problem connecting socket to 127.0.0.1
[   72.654281][ T1851] 9pnet_fd: p9_fd_create_tcp (1851): problem connecting socket to 127.0.0.1
[   73.646536][ T1444] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   73.838303][ T1444] usb 1-1: unable to get BOS descriptor or descriptor too short
[   73.850149][ T1444] usb 1-1: not running at top speed; connect to a high speed hub
[   73.871867][ T1444] usb 1-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[   73.893703][ T1444] usb 1-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[   73.922795][ T1444] usb 1-1: config 240 has 1 interface, different from the descriptor's value: 182
[   73.945817][ T1444] usb 1-1: string descriptor 0 read error: -22
[   73.958961][ T1444] usb 1-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   73.980991][ T1444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.004432][ T1444] usb 1-1: cannot find UAC_HEADER
[   74.015292][ T1444] snd-usb-audio: probe of 1-1:240.0 failed with error -22
[   74.448927][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   74.484164][ T1865] netlink: 104 bytes leftover after parsing attributes in process `syz.0.518'.
[   74.498575][ T1865] netlink: 'syz.0.518': attribute type 27 has an invalid length.
[   74.539573][ T1865] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   74.621818][   T24] usb 1-1: USB disconnect, device number 6
[   74.996518][  T309] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[   75.137789][ T1891] FAULT_INJECTION: forcing a failure.
[   75.137789][ T1891] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   75.150961][ T1891] CPU: 0 PID: 1891 Comm: syz.0.527 Not tainted syzkaller #0
[   75.158283][ T1891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   75.168376][ T1891] Call Trace:
[   75.171674][ T1891]  <TASK>
[   75.174618][ T1891]  __dump_stack+0x21/0x24
[   75.178989][  T309] usb 3-1: unable to get BOS descriptor or descriptor too short
[   75.178986][ T1891]  dump_stack_lvl+0x110/0x170
[   75.179012][ T1891]  ? __cfi_dump_stack_lvl+0x8/0x8
[   75.187435][  T309] usb 3-1: not running at top speed; connect to a high speed hub
[   75.191328][ T1891]  ? __kasan_check_write+0x14/0x20
[   75.199876][  T309] usb 3-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[   75.204097][ T1891]  ? _raw_spin_lock_irqsave+0xc2/0x130
[   75.210031][  T309] usb 3-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[   75.218101][ T1891]  dump_stack+0x15/0x24
[   75.218128][ T1891]  should_fail_ex+0x3bf/0x510
[   75.218153][ T1891]  should_fail+0xb/0x10
[   75.224607][  T309] usb 3-1: config 240 has 1 interface, different from the descriptor's value: 182
[   75.233874][ T1891]  should_fail_usercopy+0x1a/0x20
[   75.233904][ T1891]  _copy_from_user+0x1e/0xc0
[   75.233922][ T1891]  do_ipv6_setsockopt+0x30d/0x3bd0
[   75.242060][  T309] usb 3-1: string descriptor 0 read error: -22
[   75.242775][ T1891]  ? __cfi_do_ipv6_setsockopt+0x10/0x10
[   75.247721][  T309] usb 3-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   75.256158][ T1891]  ? is_bpf_text_address+0x177/0x190
[   75.262065][  T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.265818][ T1891]  ? kernel_text_address+0xa0/0xd0
[   75.281278][  T309] usb 3-1: cannot find UAC_HEADER
[   75.282660][ T1891]  ? __kernel_text_address+0xd/0x30
[   75.300173][  T309] snd-usb-audio: probe of 3-1:240.0 failed with error -22
[   75.304986][ T1891]  ? unwind_get_return_address+0x4d/0x90
[   75.305020][ T1891]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   75.339252][ T1891]  ? arch_stack_walk+0xfc/0x150
[   75.339447][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   75.344136][ T1891]  ? stack_trace_save+0xa6/0xf0
[   75.364800][ T1891]  ? __stack_depot_save+0x36/0x490
[   75.369955][ T1891]  ? avc_has_perm_noaudit+0x390/0x490
[   75.375376][ T1891]  ? memcpy+0x56/0x70
[   75.379380][ T1891]  ? avc_has_perm_noaudit+0x30a/0x490
[   75.384790][ T1891]  ? _parse_integer+0x2a/0x40
[   75.389492][ T1891]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[   75.395232][ T1891]  ? kstrtouint_from_user+0x113/0x170
[   75.400624][ T1891]  ? avc_has_perm+0x163/0x250
[   75.405330][ T1891]  ? __cfi_avc_has_perm+0x10/0x10
[   75.410406][ T1891]  ? __kasan_check_write+0x14/0x20
[   75.415533][ T1891]  ? proc_fail_nth_write+0x180/0x200
[   75.420832][ T1891]  ? irqentry_exit+0x37/0x40
[   75.425453][ T1891]  ? sysvec_apic_timer_interrupt+0x64/0xc0
[   75.431270][ T1891]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   75.437435][ T1891]  ? __cfi_udpv6_setsockopt+0x10/0x10
[   75.442829][ T1891]  ipv6_setsockopt+0x59/0x1a0
[   75.447529][ T1891]  udpv6_setsockopt+0x92/0xb0
[   75.452232][ T1891]  sock_common_setsockopt+0xb1/0xc0
[   75.457433][ T1891]  ? __cfi_sock_common_setsockopt+0x10/0x10
[   75.463345][ T1891]  __sys_setsockopt+0x2ff/0x4e0
[   75.468232][ T1891]  ? __cfi___sys_setsockopt+0x10/0x10
[   75.473627][ T1891]  ? ksys_write+0x1fa/0x260
[   75.478144][ T1891]  ? __cfi_ksys_write+0x10/0x10
[   75.483017][ T1891]  __x64_sys_setsockopt+0xbf/0xd0
[   75.488086][ T1891]  x64_sys_call+0x124/0x9a0
[   75.492615][ T1891]  do_syscall_64+0x4c/0xa0
[   75.494447][ T1885] netlink: 104 bytes leftover after parsing attributes in process `syz.2.525'.
[   75.497054][ T1891]  ? clear_bhb_loop+0x30/0x80
[   75.497084][ T1891]  ? clear_bhb_loop+0x30/0x80
[   75.511973][ T1885] netlink: 'syz.2.525': attribute type 27 has an invalid length.
[   75.515392][ T1891]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   75.529050][ T1891] RIP: 0033:0x7f56b019f559
[   75.532434][ T1885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   75.533498][ T1891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   75.560360][ T1891] RSP: 002b:00007f56b10ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   75.568803][ T1891] RAX: ffffffffffffffda RBX: 00007f56b0425fa0 RCX: 00007f56b019f559
[   75.576811][   T24] usb 3-1: USB disconnect, device number 9
[   75.576813][ T1891] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000003
[   75.576833][ T1891] RBP: 00007f56b10ea090 R08: 0000000000000108 R09: 0000000000000000
[   75.598608][ T1891] R10: 0000200000002b40 R11: 0000000000000246 R12: 0000000000000001
[   75.606626][ T1891] R13: 00007f56b0426038 R14: 00007f56b0425fa0 R15: 00007ffd76551798
[   75.614633][ T1891]  </TASK>
[   75.740471][ T1895] 9pnet_fd: p9_fd_create_tcp (1895): problem connecting socket to 127.0.0.1
[   75.812829][ T1898] 9pnet_fd: p9_fd_create_tcp (1898): problem connecting socket to 127.0.0.1
[   76.207636][ T1915] loop4: detected capacity change from 0 to 256
[   76.221466][ T1915] =======================================================
[   76.221466][ T1915] WARNING: The mand mount option has been deprecated and
[   76.221466][ T1915]          and is ignored by this kernel. Remove the mand
[   76.221466][ T1915]          option from the mount to silence this warning.
[   76.221466][ T1915] =======================================================
[   76.257930][ T1915] exfat: Bad value for 'uid'
[   76.267341][ T1915] loop4: detected capacity change from 0 to 512
[   76.284644][ T1915] EXT4-fs: Ignoring removed oldalloc option
[   76.301965][ T1915] EXT4-fs (loop4): Test dummy encryption mode enabled
[   76.324392][ T1915] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   76.335187][   T28] audit: type=1400 audit(1793175273.765:197): avc:  denied  { mounton } for  pid=1914 comm="syz.4.535" path="/128/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   76.358671][   T28] audit: type=1400 audit(1793175273.765:198): avc:  denied  { read } for  pid=1914 comm="syz.4.535" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   76.382229][   T28] audit: type=1400 audit(1793175273.765:199): avc:  denied  { open } for  pid=1914 comm="syz.4.535" path="/128/file0/file0/file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   76.416332][ T1915] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   76.432144][   T28] audit: type=1400 audit(1793175273.765:200): avc:  denied  { create } for  pid=1914 comm="syz.4.535" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   76.457556][   T28] audit: type=1400 audit(1793175273.885:201): avc:  denied  { mounton } for  pid=1914 comm="syz.4.535" path="/128/file0/proc" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   76.481444][ T1915] syz.4.535 uses obsolete (PF_INET,SOCK_PACKET)
[   76.508467][ T1923] loop3: detected capacity change from 0 to 512
[   76.516657][   T28] audit: type=1400 audit(1793175273.945:202): avc:  denied  { ioctl } for  pid=1914 comm="syz.4.535" path="/128/file0/file0/file0" dev="overlay" ino=13 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   76.564166][   T28] audit: type=1400 audit(1793175273.985:203): avc:  denied  { unlink } for  pid=289 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   76.587021][ T1923] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.536: inode #1: comm syz.3.536: iget: illegal inode #
[   76.603245][  T289] EXT4-fs (loop4): unmounting filesystem.
[   76.609642][   T28] audit: type=1400 audit(1793175274.035:204): avc:  denied  { rmdir } for  pid=289 comm="syz-executor" name="proc" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   76.610041][ T1923] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.536: error while reading EA inode 1 err=-117
[   76.653112][ T1923] EXT4-fs (loop3): 1 orphan inode deleted
[   76.659013][ T1923] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   76.927863][   T28] audit: type=1400 audit(1793175274.355:205): avc:  denied  { read write } for  pid=1929 comm="syz.4.538" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   76.998567][ T1923] ext4: Unknown parameter 'xœģÜĶoå'
[   77.013241][ T1923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.536'.
[   77.035813][   T28] audit: type=1400 audit(1793175274.385:206): avc:  denied  { open } for  pid=1929 comm="syz.4.538" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   77.101755][  T287] EXT4-fs (loop3): unmounting filesystem.
[   77.234352][ T1937] 9pnet_fd: p9_fd_create_tcp (1937): problem connecting socket to 127.0.0.1
[   77.402816][ T1949] loop2: detected capacity change from 0 to 16
[   77.428289][ T1949] erofs: (device loop2): mounted with root inode @ nid 36.
[   77.729616][  T585] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   77.919549][  T585] usb 1-1: unable to get BOS descriptor or descriptor too short
[   77.929897][ T1962] 9pnet_fd: p9_fd_create_tcp (1962): problem connecting socket to 127.0.0.1
[   77.939711][  T585] usb 1-1: not running at top speed; connect to a high speed hub
[   77.951353][  T585] usb 1-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[   77.962538][  T585] usb 1-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[   77.973325][  T585] usb 1-1: config 240 has 1 interface, different from the descriptor's value: 182
[   77.986588][  T585] usb 1-1: string descriptor 0 read error: -22
[   77.997899][  T585] usb 1-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   78.030521][  T585] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.085546][  T585] usb 1-1: cannot find UAC_HEADER
[   78.106383][  T585] snd-usb-audio: probe of 1-1:240.0 failed with error -22
[   78.147096][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   78.901263][ T1967] FAULT_INJECTION: forcing a failure.
[   78.901263][ T1967] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   78.914410][ T1967] CPU: 1 PID: 1967 Comm: syz.3.549 Not tainted syzkaller #0
[   78.921715][ T1967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   78.931773][ T1967] Call Trace:
[   78.935052][ T1967]  <TASK>
[   78.937996][ T1967]  __dump_stack+0x21/0x24
[   78.942334][ T1967]  dump_stack_lvl+0x110/0x170
[   78.947020][ T1967]  ? __cfi_dump_stack_lvl+0x8/0x8
[   78.952059][ T1967]  dump_stack+0x15/0x24
[   78.956226][ T1967]  should_fail_ex+0x3bf/0x510
[   78.960919][ T1967]  should_fail+0xb/0x10
[   78.965080][ T1967]  should_fail_usercopy+0x1a/0x20
[   78.970111][ T1967]  _copy_from_user+0x1e/0xc0
[   78.974721][ T1967]  __sys_bpf+0x2a0/0x850
[   78.978971][ T1967]  ? bpf_link_show_fdinfo+0x330/0x330
[   78.984360][ T1967]  ? preempt_schedule_irq+0xca/0x120
[   78.989651][ T1967]  ? raw_irqentry_exit_cond_resched+0x29/0x30
[   78.995743][ T1967]  ? fpregs_restore_userregs+0x128/0x260
[   79.001391][ T1967]  __x64_sys_bpf+0x7c/0x90
[   79.005831][ T1967]  x64_sys_call+0x488/0x9a0
[   79.010343][ T1967]  do_syscall_64+0x4c/0xa0
[   79.014765][ T1967]  ? clear_bhb_loop+0x30/0x80
[   79.019457][ T1967]  ? clear_bhb_loop+0x30/0x80
[   79.024145][ T1967]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   79.030050][ T1967] RIP: 0033:0x7f0e6a19f559
[   79.034474][ T1967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   79.054084][ T1967] RSP: 002b:00007f0e6b0d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   79.062498][ T1967] RAX: ffffffffffffffda RBX: 00007f0e6a426180 RCX: 00007f0e6a19f559
[   79.070495][ T1967] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[   79.078477][ T1967] RBP: 00007f0e6b0d9090 R08: 0000000000000000 R09: 0000000000000000
[   79.086554][ T1967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   79.094532][ T1967] R13: 00007f0e6a426218 R14: 00007f0e6a426180 R15: 00007ffe6bb7c458
[   79.102518][ T1967]  </TASK>
[   79.128175][ T1951] netlink: 104 bytes leftover after parsing attributes in process `syz.0.545'.
[   79.139531][ T1951] netlink: 'syz.0.545': attribute type 27 has an invalid length.
[   79.155015][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   79.298470][ T1968] usb 1-1: USB disconnect, device number 7
[   79.833807][ T1986] 9pnet_fd: p9_fd_create_tcp (1986): problem connecting socket to 127.0.0.1
[   80.823125][ T2015] loop2: detected capacity change from 0 to 256
[   81.061634][ T2023] 9pnet_fd: p9_fd_create_tcp (2023): problem connecting socket to 127.0.0.1
[   81.076106][ T2025] loop0: detected capacity change from 0 to 256
[   81.738364][   T28] kauditd_printk_skb: 10 callbacks suppressed
[   81.738381][   T28] audit: type=1400 audit(1793175279.165:217): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   81.796833][ T2022] FAULT_INJECTION: forcing a failure.
[   81.796833][ T2022] name failslab, interval 1, probability 0, space 0, times 0
[   81.816539][ T2022] CPU: 0 PID: 2022 Comm: syz.0.561 Not tainted syzkaller #0
[   81.823883][ T2022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   81.833966][ T2022] Call Trace:
[   81.837265][ T2022]  <TASK>
[   81.840228][ T2022]  __dump_stack+0x21/0x24
[   81.844566][ T2022]  dump_stack_lvl+0x110/0x170
[   81.849248][ T2022]  ? __cfi_dump_stack_lvl+0x8/0x8
[   81.854277][ T2022]  ? kernfs_put+0x315/0x480
[   81.858795][ T2022]  ? kmem_cache_free+0x12d/0x300
[   81.863755][ T2022]  dump_stack+0x15/0x24
[   81.867966][ T2022]  should_fail_ex+0x3bf/0x510
[   81.872680][ T2022]  __should_failslab+0xac/0xf0
[   81.877467][ T2022]  should_failslab+0x9/0x20
[   81.881988][ T2022]  __kmem_cache_alloc_node+0x3d/0x2d0
[   81.887376][ T2022]  ? kobject_uevent_env+0x286/0x720
[   81.892595][ T2022]  ? __cfi_dev_uevent_name+0x10/0x10
[   81.897893][ T2022]  ? kobject_uevent_env+0x286/0x720
[   81.903108][ T2022]  kmalloc_trace+0x29/0xb0
[   81.907533][ T2022]  ? __cfi_dev_uevent_name+0x10/0x10
[   81.912836][ T2022]  kobject_uevent_env+0x286/0x720
[   81.917878][ T2022]  kobject_uevent+0x1d/0x30
[   81.922400][ T2022]  device_del+0xcda/0xe50
[   81.926747][ T2022]  ? __cfi_device_del+0x10/0x10
[   81.931623][ T2022]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   81.937448][ T2022]  device_unregister+0x15/0x40
[   81.942228][ T2022]  wakeup_source_sysfs_remove+0x3b/0x40
[   81.947805][ T2022]  wakeup_source_unregister+0x170/0x190
[   81.953370][ T2022]  ep_remove_epi+0x1ff/0x290
[   81.957975][ T2022]  ep_remove+0x370/0x530
[   81.962232][ T2022]  ep_clear_and_put+0x1d6/0x320
[   81.967103][ T2022]  ep_eventpoll_release+0x48/0x60
[   81.972157][ T2022]  ? __cfi_ep_eventpoll_release+0x10/0x10
[   81.977894][ T2022]  __fput+0x1fd/0x8f0
[   81.981893][ T2022]  ____fput+0x15/0x20
[   81.985889][ T2022]  task_work_run+0x1e1/0x250
[   81.990502][ T2022]  ? __cfi_task_work_run+0x10/0x10
[   81.995624][ T2022]  ? task_work_add+0x263/0x330
[   82.000405][ T2022]  ? __cfi_task_work_add+0x10/0x10
[   82.005537][ T2022]  get_signal+0x12e8/0x1700
[   82.010062][ T2022]  ? fput+0x15b/0x1a0
[   82.014061][ T2022]  ? do_epoll_wait+0x1686/0x1710
[   82.019035][ T2022]  ? __cfi_get_signal+0x10/0x10
[   82.023925][ T2022]  arch_do_signal_or_restart+0xd1/0x11c0
[   82.029577][ T2022]  ? ep_destroy_wakeup_source+0x50/0x50
[   82.035145][ T2022]  ? __cfi_vfs_write+0x10/0x10
[   82.039922][ T2022]  ? __cfi_ep_autoremove_wake_function+0x10/0x10
[   82.046267][ T2022]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[   82.052439][ T2022]  ? __cfi___x64_sys_epoll_wait+0x10/0x10
[   82.058181][ T2022]  exit_to_user_mode_loop+0x7a/0xb0
[   82.063395][ T2022]  exit_to_user_mode_prepare+0x87/0xd0
[   82.068888][ T2022]  syscall_exit_to_user_mode+0x1a/0x30
[   82.074364][ T2022]  do_syscall_64+0x58/0xa0
[   82.078789][ T2022]  ? clear_bhb_loop+0x30/0x80
[   82.083477][ T2022]  ? clear_bhb_loop+0x30/0x80
[   82.088170][ T2022]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   82.094076][ T2022] RIP: 0033:0x7f56b019f559
[   82.098501][ T2022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.118127][ T2022] RSP: 002b:00007f56b10a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8
[   82.126552][ T2022] RAX: fffffffffffffffc RBX: 00007f56b0426180 RCX: 00007f56b019f559
[   82.134549][ T2022] RDX: 0000000000000001 RSI: 0000200000002600 RDI: 0000000000000003
[   82.142532][ T2022] RBP: 00007f56b10a8090 R08: 0000000000000000 R09: 0000000000000000
[   82.150515][ T2022] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001
[   82.158491][ T2022] R13: 00007f56b0426218 R14: 00007f56b0426180 R15: 00007ffd76551798
[   82.166479][ T2022]  </TASK>
[   82.176693][ T1451] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   82.190489][ T2031] 9pnet_fd: p9_fd_create_tcp (2031): problem connecting socket to 127.0.0.1
[   82.368082][ T1451] usb 5-1: unable to get BOS descriptor or descriptor too short
[   82.378398][ T1451] usb 5-1: not running at top speed; connect to a high speed hub
[   82.391425][ T1451] usb 5-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[   82.405827][ T1451] usb 5-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[   82.426228][ T1451] usb 5-1: config 240 has 1 interface, different from the descriptor's value: 182
[   82.458249][ T1451] usb 5-1: string descriptor 0 read error: -22
[   82.464659][ T1451] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   82.474005][ T1451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.494465][ T1451] usb 5-1: cannot find UAC_HEADER
[   82.511657][ T1451] snd-usb-audio: probe of 5-1:240.0 failed with error -22
[   82.524287][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   82.557562][ T1814] hid-generic 0003:04F3:074D.0007: timeout initializing reports
[   82.586748][ T1451] usb 2-1: USB disconnect, device number 9
[   82.698407][ T2028] netlink: 104 bytes leftover after parsing attributes in process `syz.4.563'.
[   82.731434][ T2051] loop1: detected capacity change from 0 to 512
[   82.740502][ T1469] usb 5-1: USB disconnect, device number 4
[   82.788069][ T2051] overlayfs: failed to resolve './file0': -2
[   82.920755][ T2056] loop2: detected capacity change from 0 to 256
[   84.033971][ T2068] FAULT_INJECTION: forcing a failure.
[   84.033971][ T2068] name failslab, interval 1, probability 0, space 0, times 0
[   84.046801][ T2068] CPU: 1 PID: 2068 Comm: syz.1.575 Not tainted syzkaller #0
[   84.054132][ T2068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   84.064223][ T2068] Call Trace:
[   84.067522][ T2068]  <TASK>
[   84.070475][ T2068]  __dump_stack+0x21/0x24
[   84.074875][ T2068]  dump_stack_lvl+0x110/0x170
[   84.079583][ T2068]  ? __cfi_dump_stack_lvl+0x8/0x8
[   84.084651][ T2068]  ? __kasan_check_write+0x14/0x20
[   84.089794][ T2068]  dump_stack+0x15/0x24
[   84.093978][ T2068]  should_fail_ex+0x3bf/0x510
[   84.098686][ T2068]  __should_failslab+0xac/0xf0
[   84.103494][ T2068]  should_failslab+0x9/0x20
[   84.108027][ T2068]  kmem_cache_alloc_node+0x42/0x330
[   84.113288][ T2068]  ? __alloc_skb+0xe8/0x4a0
[   84.117829][ T2068]  ? _raw_spin_lock_bh+0x94/0xf0
[   84.122806][ T2068]  __alloc_skb+0xe8/0x4a0
[   84.127184][ T2068]  bcm_can_tx+0x208/0x9c0
[   84.131556][ T2068]  ? __cfi__copy_from_iter+0x10/0x10
[   84.136896][ T2068]  ? bcm_free_op_work+0x170/0x170
[   84.141986][ T2068]  ? hrtimer_try_to_cancel+0x1f6/0x500
[   84.147495][ T2068]  bcm_tx_setup+0xde9/0x1b30
[   84.152143][ T2068]  bcm_sendmsg+0x240/0x640
[   84.156601][ T2068]  ? __cfi_bcm_sendmsg+0x10/0x10
[   84.161587][ T2068]  ? check_preempt_wakeup+0x619/0xbe0
[   84.167000][ T2068]  ? security_socket_sendmsg+0x93/0xb0
[   84.172494][ T2068]  ? __cfi_bcm_sendmsg+0x10/0x10
[   84.177471][ T2068]  ____sys_sendmsg+0x5fb/0x9c0
[   84.182294][ T2068]  ? __sys_sendmsg_sock+0x40/0x40
[   84.187361][ T2068]  ? import_iovec+0x7c/0xb0
[   84.191890][ T2068]  ___sys_sendmsg+0x2a2/0x360
[   84.196593][ T2068]  ? __sys_sendmsg+0x290/0x290
[   84.201382][ T2068]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[   84.206864][ T2068]  ? proc_create_net_single+0x11c/0x170
[   84.212449][ T2068]  ? __fdget+0x19c/0x220
[   84.216714][ T2068]  __x64_sys_sendmsg+0x20d/0x2e0
[   84.221679][ T2068]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   84.227188][ T2068]  ? __kasan_check_write+0x14/0x20
[   84.232317][ T2068]  ? fpregs_restore_userregs+0x128/0x260
[   84.237948][ T2068]  ? switch_fpu_return+0xe/0x10
[   84.242811][ T2068]  x64_sys_call+0x171/0x9a0
[   84.247333][ T2068]  do_syscall_64+0x4c/0xa0
[   84.251749][ T2068]  ? clear_bhb_loop+0x30/0x80
[   84.256432][ T2068]  ? clear_bhb_loop+0x30/0x80
[   84.261139][ T2068]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   84.267034][ T2068] RIP: 0033:0x7f38a379f559
[   84.271448][ T2068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.293222][ T2068] RSP: 002b:00007f38a4672028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   84.301638][ T2068] RAX: ffffffffffffffda RBX: 00007f38a3a25fa0 RCX: 00007f38a379f559
[   84.309605][ T2068] RDX: 0000000000008001 RSI: 0000200000000440 RDI: 0000000000000004
[   84.317573][ T2068] RBP: 00007f38a3836b20 R08: 0000000000000000 R09: 0000000000000000
[   84.325537][ T2068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.333512][ T2068] R13: 00007f38a3a26038 R14: 00007f38a3a25fa0 R15: 00007ffedba31b68
[   84.341507][ T2068]  </TASK>
[   84.507691][ T2085] 9pnet_fd: p9_fd_create_tcp (2085): problem connecting socket to 127.0.0.1
[   84.527168][ T2083] loop4: detected capacity change from 0 to 512
[   84.534715][ T2083] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   84.561175][ T2088] 9pnet_fd: p9_fd_create_tcp (2088): problem connecting socket to 127.0.0.1
[   84.577117][ T2083] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   84.587888][ T2083] EXT4-fs (loop4): invalid inodes per group: 1
[   84.587888][ T2083] 
[   84.668814][ T2091] FAULT_INJECTION: forcing a failure.
[   84.668814][ T2091] name failslab, interval 1, probability 0, space 0, times 0
[   84.676652][ T1469] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   84.681638][ T2091] CPU: 0 PID: 2091 Comm: syz.4.583 Not tainted syzkaller #0
[   84.696318][ T2091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   84.706401][ T2091] Call Trace:
[   84.709702][ T2091]  <TASK>
[   84.712657][ T2091]  __dump_stack+0x21/0x24
[   84.717012][ T2091]  dump_stack_lvl+0x110/0x170
[   84.721713][ T2091]  ? __cfi_dump_stack_lvl+0x8/0x8
[   84.726767][ T2091]  ? put_dec+0xd7/0xe0
[   84.730891][ T2091]  dump_stack+0x15/0x24
[   84.735074][ T2091]  should_fail_ex+0x3bf/0x510
[   84.739786][ T2091]  __should_failslab+0xac/0xf0
[   84.744586][ T2091]  should_failslab+0x9/0x20
[   84.749140][ T2091]  slab_pre_alloc_hook+0x30/0x1d0
[   84.754223][ T2091]  kmem_cache_alloc_lru+0x49/0x280
[   84.759368][ T2091]  ? __d_alloc+0x34/0x6d0
[   84.763731][ T2091]  __d_alloc+0x34/0x6d0
[   84.767922][ T2091]  d_alloc_parallel+0xe2/0x1280
[   84.772822][ T2091]  ? memcpy+0x56/0x70
[   84.776829][ T2091]  ? avc_has_perm_noaudit+0x30a/0x490
[   84.782232][ T2091]  ? lockref_put_return+0x152/0x1d0
[   84.787456][ T2091]  ? __cfi_d_alloc_parallel+0x10/0x10
[   84.792854][ T2091]  ? __kasan_check_write+0x14/0x20
[   84.798013][ T2091]  ? rwsem_read_trylock+0x2af/0x640
[   84.803252][ T2091]  __lookup_slow+0x14f/0x410
[   84.807875][ T2091]  ? lookup_one_len+0x2e0/0x2e0
[   84.812770][ T2091]  ? down_read+0xa6/0xf0
[   84.817038][ T2091]  ? __cfi_down_read+0x10/0x10
[   84.821840][ T2091]  lookup_slow+0x57/0x70
[   84.826119][ T2091]  link_path_walk+0x984/0xeb0
[   84.830820][ T2091]  ? handle_lookup_down+0x130/0x130
[   84.836047][ T2091]  path_openat+0x27f/0x2f30
[   84.840623][ T2091]  ? slab_post_alloc_hook+0x4f/0x2d0
[   84.845943][ T2091]  ? kmem_cache_alloc+0x166/0x320
[   84.850994][ T2091]  ? getname_flags+0xba/0x510
[   84.855708][ T2091]  ? getname+0x19/0x20
[   84.859797][ T2091]  ? do_sys_openat2+0xeb/0x820
[   84.864579][ T2091]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   84.870654][ T2091]  ? do_filp_open+0x420/0x420
[   84.875435][ T2091]  do_filp_open+0x1ee/0x420
[   84.880040][ T2091]  ? __cfi_do_filp_open+0x10/0x10
[   84.885078][ T2091]  ? __cfi_kfree_link+0x10/0x10
[   84.889948][ T2091]  ? alloc_fd+0x4c1/0x570
[   84.894291][ T2091]  do_sys_openat2+0x15e/0x820
[   84.898999][ T2091]  ? __se_sys_futex+0x136/0x310
[   84.903879][ T2091]  ? do_sys_open+0xe0/0xe0
[   84.908309][ T2091]  ? __this_cpu_preempt_check+0x13/0x20
[   84.913887][ T2091]  ? xfd_validate_state+0x70/0x150
[   84.919008][ T2091]  __x64_sys_openat+0x136/0x160
[   84.923871][ T2091]  x64_sys_call+0x783/0x9a0
[   84.928381][ T2091]  do_syscall_64+0x4c/0xa0
[   84.932819][ T2091]  ? clear_bhb_loop+0x30/0x80
[   84.937507][ T2091]  ? clear_bhb_loop+0x30/0x80
[   84.942235][ T2091]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   84.948138][ T2091] RIP: 0033:0x7f8d0f95fd8e
[   84.952578][ T2091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   84.972193][ T2091] RSP: 002b:00007f8d107b6f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   84.980609][ T2091] RAX: ffffffffffffffda RBX: 00007f8d107b76c0 RCX: 00007f8d0f95fd8e
[   84.988695][ T2091] RDX: 0000000000000002 RSI: 00007f8d0fa3641a RDI: ffffffffffffff9c
[   84.996673][ T2091] RBP: 00007f8d0fa36b20 R08: 0000000000000000 R09: 0000000000000000
[   85.004651][ T2091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.012626][ T2091] R13: 00007f8d0fc26038 R14: 00007f8d0fc25fa0 R15: 00007ffe05cef6f8
[   85.020613][ T2091]  </TASK>
[   85.023867][ T1469] usb 2-1: Using ep0 maxpacket: 16
[   85.037113][ T1469] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.067780][ T1469] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.077881][ T1469] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   85.091005][ T1469] usb 2-1: config 0 interface 0 has no altsetting 0
[   85.097908][ T1469] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[   85.107316][ T1469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.124084][ T1469] usb 2-1: config 0 descriptor??
[   85.382848][ T2099] FAULT_INJECTION: forcing a failure.
[   85.382848][ T2099] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   85.396121][ T2099] CPU: 1 PID: 2099 Comm: syz.3.587 Not tainted syzkaller #0
[   85.396776][ T1451] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   85.403435][ T2099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   85.420954][ T2099] Call Trace:
[   85.424258][ T2099]  <TASK>
[   85.427230][ T2099]  __dump_stack+0x21/0x24
[   85.431607][ T2099]  dump_stack_lvl+0x110/0x170
[   85.436309][ T2099]  ? __cfi_dump_stack_lvl+0x8/0x8
[   85.441363][ T2099]  ? __futex_queue+0x175/0x300
[   85.446156][ T2099]  dump_stack+0x15/0x24
[   85.450337][ T2099]  should_fail_ex+0x3bf/0x510
[   85.455036][ T2099]  should_fail+0xb/0x10
[   85.459188][ T2099]  should_fail_usercopy+0x1a/0x20
[   85.464213][ T2099]  _copy_from_user+0x1e/0xc0
[   85.468815][ T2099]  ___sys_sendmsg+0x1c3/0x360
[   85.473530][ T2099]  ? __sys_sendmsg+0x290/0x290
[   85.478306][ T2099]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[   85.483762][ T2099]  ? proc_create_net_single+0x11c/0x170
[   85.489330][ T2099]  ? __fdget+0x19c/0x220
[   85.493572][ T2099]  __x64_sys_sendmsg+0x20d/0x2e0
[   85.498520][ T2099]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   85.503987][ T2099]  ? __kasan_check_write+0x14/0x20
[   85.509100][ T2099]  ? fpregs_restore_userregs+0x128/0x260
[   85.514775][ T2099]  ? switch_fpu_return+0xe/0x10
[   85.519641][ T2099]  x64_sys_call+0x171/0x9a0
[   85.524144][ T2099]  do_syscall_64+0x4c/0xa0
[   85.528558][ T2099]  ? clear_bhb_loop+0x30/0x80
[   85.533240][ T2099]  ? clear_bhb_loop+0x30/0x80
[   85.537915][ T2099]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   85.543832][ T2099] RIP: 0033:0x7f0e6a19f559
[   85.548270][ T2099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.567888][ T2099] RSP: 002b:00007f0e6b11b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   85.576302][ T2099] RAX: ffffffffffffffda RBX: 00007f0e6a425fa0 RCX: 00007f0e6a19f559
[   85.584273][ T2099] RDX: 0000000000008001 RSI: 0000200000000440 RDI: 0000000000000005
[   85.592251][ T2099] RBP: 00007f0e6a236b20 R08: 0000000000000000 R09: 0000000000000000
[   85.600217][ T2099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.608179][ T2099] R13: 00007f0e6a426038 R14: 00007f0e6a425fa0 R15: 00007ffe6bb7c458
[   85.616160][ T2099]  </TASK>
[   85.628017][ T1451] usb 5-1: unable to get BOS descriptor or descriptor too short
[   85.630229][ T2079] loop1: detected capacity change from 0 to 2048
[   85.644652][ T1451] usb 5-1: not running at top speed; connect to a high speed hub
[   85.673427][ T1451] usb 5-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[   85.682424][ T1451] usb 5-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[   85.693021][ T1451] usb 5-1: config 240 has 1 interface, different from the descriptor's value: 182
[   85.702986][ T2079]  loop1: p1 < > p3 < > p4 < >
[   85.707991][ T2079] loop1: partition table partially beyond EOD, truncated
[   85.716086][ T2079] loop1: p1 start 3405774849 is beyond EOD, truncated
[   85.720877][ T1451] usb 5-1: string descriptor 0 read error: -22
[   85.724838][ T2079] loop1: p3 start 4284289 is beyond EOD, truncated
[   85.735875][ T1451] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   85.753721][ T1451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.765152][ T1469] hid-generic 0003:04F3:074D.0008: failed to start in urb: -90
[   85.781364][ T1469] input: HID 04f3:074d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F3:074D.0008/input/input15
[   85.782302][ T1451] usb 5-1: cannot find UAC_HEADER
[   85.812234][ T1469] hid-generic 0003:04F3:074D.0008: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.1-1/input0
[   85.827727][ T1451] snd-usb-audio: probe of 5-1:240.0 failed with error -22
[   85.841016][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   85.984217][ T2094] netlink: 104 bytes leftover after parsing attributes in process `syz.4.584'.
[   85.994879][ T1469] usb 5-1: USB disconnect, device number 5
[   86.846332][ T2132] FAULT_INJECTION: forcing a failure.
[   86.846332][ T2132] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   86.859472][ T2132] CPU: 1 PID: 2132 Comm: syz.0.594 Not tainted syzkaller #0
[   86.866785][ T2132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   86.876853][ T2132] Call Trace:
[   86.880143][ T2132]  <TASK>
[   86.883087][ T2132]  __dump_stack+0x21/0x24
[   86.887435][ T2132]  dump_stack_lvl+0x110/0x170
[   86.892133][ T2132]  ? __cfi_dump_stack_lvl+0x8/0x8
[   86.897169][ T2132]  dump_stack+0x15/0x24
[   86.901350][ T2132]  should_fail_ex+0x3bf/0x510
[   86.906045][ T2132]  should_fail+0xb/0x10
[   86.910223][ T2132]  should_fail_usercopy+0x1a/0x20
[   86.915267][ T2132]  _copy_from_user+0x1e/0xc0
[   86.919883][ T2132]  __sys_bpf+0x2a0/0x850
[   86.924152][ T2132]  ? bpf_link_show_fdinfo+0x330/0x330
[   86.929547][ T2132]  ? fpregs_restore_userregs+0x128/0x260
[   86.935198][ T2132]  __x64_sys_bpf+0x7c/0x90
[   86.939625][ T2132]  x64_sys_call+0x488/0x9a0
[   86.944174][ T2132]  do_syscall_64+0x4c/0xa0
[   86.948615][ T2132]  ? clear_bhb_loop+0x30/0x80
[   86.953324][ T2132]  ? clear_bhb_loop+0x30/0x80
[   86.958019][ T2132]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   86.963913][ T2132] RIP: 0033:0x7f56b019f559
[   86.968327][ T2132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.987946][ T2132] RSP: 002b:00007f56b10a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   86.996375][ T2132] RAX: ffffffffffffffda RBX: 00007f56b0426180 RCX: 00007f56b019f559
[   87.004353][ T2132] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[   87.012327][ T2132] RBP: 00007f56b10a8090 R08: 0000000000000000 R09: 0000000000000000
[   87.020306][ T2132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   87.028293][ T2132] R13: 00007f56b0426218 R14: 00007f56b0426180 R15: 00007ffd76551798
[   87.036278][ T2132]  </TASK>
[   87.369176][ T2140] 9pnet_fd: p9_fd_create_tcp (2140): problem connecting socket to 127.0.0.1
[   87.416689][ T2142] 9pnet_fd: p9_fd_create_tcp (2142): problem connecting socket to 127.0.0.1
[   87.592234][   T28] audit: type=1400 audit(1793175285.015:218): avc:  denied  { mount } for  pid=2146 comm="syz.4.599" name="/" dev="ramfs" ino=29490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   87.896525][   T19] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   88.088241][   T19] usb 5-1: unable to get BOS descriptor or descriptor too short
[   88.097579][   T19] usb 5-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config
[   88.107959][   T19] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   88.118948][   T19] usb 5-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[   88.128094][   T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.136187][   T19] usb 5-1: Product: į€Œ
[   88.140468][   T19] usb 5-1: Manufacturer: ą°Œ
[   88.145146][   T19] usb 5-1: SerialNumber: į ‰
[   88.381119][   T19] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to g@b4.vu
[   88.392168][   T19] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[   88.409296][   T19] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[   88.429290][   T19] usb 5-1: USB disconnect, device number 6
[   88.648103][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   88.987963][ T2169] loop4: detected capacity change from 0 to 512
[   88.997807][ T2169] EXT4-fs (loop4): orphan cleanup on readonly fs
[   89.004364][ T2169] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.605: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[   89.019609][ T2169] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.4.605: ea_inode dec ref err=-117
[   89.032470][ T2169] EXT4-fs (loop4): 1 orphan inode deleted
[   89.038395][ T2169] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   89.104971][  T289] EXT4-fs (loop4): unmounting filesystem.
[   89.396507][   T19] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[   89.598429][   T19] usb 5-1: unable to get BOS descriptor or descriptor too short
[   89.606671][   T19] usb 5-1: not running at top speed; connect to a high speed hub
[   89.631997][   T19] usb 5-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[   89.643029][   T19] usb 5-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[   89.653350][   T19] usb 5-1: config 240 has 1 interface, different from the descriptor's value: 182
[   89.910217][   T19] usb 5-1: string descriptor 0 read error: -22
[   89.916548][   T19] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   89.925665][   T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.935823][   T19] usb 5-1: cannot find UAC_HEADER
[   89.943020][   T19] snd-usb-audio: probe of 5-1:240.0 failed with error -22
[   89.957429][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   90.138538][ T2172] netlink: 104 bytes leftover after parsing attributes in process `syz.4.606'.
[   90.148753][  T297] usb 5-1: USB disconnect, device number 7
[   90.416933][ T2185] 9pnet_fd: p9_fd_create_tcp (2185): problem connecting socket to 127.0.0.1
[   90.651161][ T2194] 9pnet_fd: p9_fd_create_tcp (2194): problem connecting socket to 127.0.0.1
[   90.977711][ T2206] FAULT_INJECTION: forcing a failure.
[   90.977711][ T2206] name failslab, interval 1, probability 0, space 0, times 0
[   90.990410][ T2206] CPU: 1 PID: 2206 Comm: syz.3.616 Not tainted syzkaller #0
[   90.997710][ T2206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   91.007758][ T2206] Call Trace:
[   91.011027][ T2206]  <TASK>
[   91.013949][ T2206]  __dump_stack+0x21/0x24
[   91.018281][ T2206]  dump_stack_lvl+0x110/0x170
[   91.022959][ T2206]  ? __cfi_dump_stack_lvl+0x8/0x8
[   91.027997][ T2206]  dump_stack+0x15/0x24
[   91.032171][ T2206]  should_fail_ex+0x3bf/0x510
[   91.036869][ T2206]  ? getname_flags+0xba/0x510
[   91.041574][ T2206]  __should_failslab+0xac/0xf0
[   91.046369][ T2206]  should_failslab+0x9/0x20
[   91.050896][ T2206]  kmem_cache_alloc+0x3b/0x320
[   91.055681][ T2206]  getname_flags+0xba/0x510
[   91.060207][ T2206]  getname+0x19/0x20
[   91.064127][ T2206]  do_sys_openat2+0xeb/0x820
[   91.068743][ T2206]  ? do_sys_open+0xe0/0xe0
[   91.073187][ T2206]  ? do_user_addr_fault+0x9a5/0x1030
[   91.078517][ T2206]  __x64_sys_openat+0x136/0x160
[   91.083413][ T2206]  x64_sys_call+0x783/0x9a0
[   91.087946][ T2206]  do_syscall_64+0x4c/0xa0
[   91.092385][ T2206]  ? clear_bhb_loop+0x30/0x80
[   91.097080][ T2206]  ? clear_bhb_loop+0x30/0x80
[   91.101782][ T2206]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   91.107699][ T2206] RIP: 0033:0x7f0e6a15fd8e
[   91.112127][ T2206] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   91.131758][ T2206] RSP: 002b:00007f0e6b0f9ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   91.140194][ T2206] RAX: ffffffffffffffda RBX: 00007f0e6b0fa6c0 RCX: 00007f0e6a15fd8e
[   91.148191][ T2206] RDX: 0000000000000000 RSI: 00007f0e6a235cf2 RDI: ffffffffffffff9c
[   91.156188][ T2206] RBP: 00007f0e6b0fa090 R08: 0000000000000000 R09: 0000000000000000
[   91.164177][ T2206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.172161][ T2206] R13: 0000000000000000 R14: 00007f0e6a426090 R15: 00007ffe6bb7c458
[   91.180152][ T2206]  </TASK>
[   91.977732][ T2222] loop4: detected capacity change from 0 to 8192
[   92.102739][ T2225] x_tables: duplicate underflow at hook 2
[   92.169129][ T2222]  loop4: p1 p2 p3 p4
[   92.173262][ T2222] loop4: p1 start 65792 is beyond EOD, truncated
[   92.179870][ T2222] loop4: p2 size 590592 extends beyond EOD, truncated
[   92.194150][ T2222] loop4: p3 start 524042 is beyond EOD, truncated
[   92.200841][ T2222] loop4: p4 start 131072 is beyond EOD, truncated
[   92.296517][ T1230] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   92.339336][ T2227] loop4: detected capacity change from 0 to 1024
[   92.348195][ T2227] EXT4-fs: Ignoring removed bh option
[   92.353930][ T2227] EXT4-fs: Ignoring removed bh option
[   92.378614][ T2227] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   92.391063][  T311] Bluetooth: hci0: Frame reassembly failed (-84)
[   92.398087][   T43] Bluetooth: hci1: Frame reassembly failed (-84)
[   92.476519][ T1230] usb 4-1: Using ep0 maxpacket: 16
[   92.485840][ T1230] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.496822][ T1230] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.506597][ T1230] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   92.519457][ T1230] usb 4-1: config 0 interface 0 has no altsetting 0
[   92.526129][ T1230] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[   92.535219][ T1230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.544328][ T1230] usb 4-1: config 0 descriptor??
[   92.670949][ T2237] input: syz0 as /devices/virtual/input/input16
[   92.958027][ T2218] loop3: detected capacity change from 0 to 2048
[   92.986511][   T19] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[   93.006855][ T2218]  loop3: p1 < > p3 < > p4 < >
[   93.011701][ T2218] loop3: partition table partially beyond EOD, truncated
[   93.019003][ T2218] loop3: p1 start 3405774849 is beyond EOD, truncated
[   93.025830][ T2218] loop3: p3 start 4284289 is beyond EOD, truncated
[   93.035997][ T1230] hid-generic 0003:04F3:074D.0009: failed to start in urb: -90
[   93.044544][ T1230] input: HID 04f3:074d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04F3:074D.0009/input/input17
[   93.057945][ T1230] hid-generic 0003:04F3:074D.0009: input,hiddev97,hidraw1: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.3-1/input0
[   93.167952][   T19] usb 3-1: unable to get BOS descriptor or descriptor too short
[   93.176023][   T19] usb 3-1: not running at top speed; connect to a high speed hub
[   93.184522][   T19] usb 3-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[   93.193413][   T19] usb 3-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[   93.203691][   T19] usb 3-1: config 240 has 1 interface, different from the descriptor's value: 182
[   93.215973][   T19] usb 3-1: string descriptor 0 read error: -22
[   93.222208][   T19] usb 3-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   93.231280][   T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.244152][   T19] usb 3-1: cannot find UAC_HEADER
[   93.250748][   T19] snd-usb-audio: probe of 3-1:240.0 failed with error -22
[   93.261963][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   93.445964][ T2243] netlink: 104 bytes leftover after parsing attributes in process `syz.2.630'.
[   93.456022][   T19] usb 3-1: USB disconnect, device number 10
[   94.396559][  T486] Bluetooth: hci1: command 0x1003 tx timeout
[   94.396553][  T485] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   94.396592][ T1192] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   94.402710][  T486] Bluetooth: hci0: command 0x1003 tx timeout
[   94.420957][ T2227] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   94.441306][  T289] EXT4-fs (loop4): unmounting filesystem.
[   95.997228][ T2079] hid-generic 0003:04F3:074D.0008: timeout initializing reports
[   96.042148][ T1968] usb 4-1: USB disconnect, device number 7
[   96.110565][ T1451] usb 2-1: USB disconnect, device number 10
[   96.210260][ T2271] 9pnet_fd: p9_fd_create_tcp (2271): problem connecting socket to 127.0.0.1
[   96.245491][ T2278] input: syz0 as /devices/virtual/input/input18
[   96.333376][  T310] Bluetooth: hci0: Frame reassembly failed (-84)
[   96.341337][ T2290] 9pnet_fd: p9_fd_create_tcp (2290): problem connecting socket to 127.0.0.1
[   96.626551][ T1451] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[   96.818051][ T1451] usb 2-1: unable to get BOS descriptor or descriptor too short
[   96.826165][ T1451] usb 2-1: not running at top speed; connect to a high speed hub
[   96.834663][ T1451] usb 2-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[   96.843598][ T1451] usb 2-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[   96.853906][ T1451] usb 2-1: config 240 has 1 interface, different from the descriptor's value: 182
[   96.865795][ T1451] usb 2-1: string descriptor 0 read error: -22
[   96.872064][ T1451] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   96.881179][ T1451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.891279][ T1451] usb 2-1: cannot find UAC_HEADER
[   96.898015][ T1451] snd-usb-audio: probe of 2-1:240.0 failed with error -22
[   96.910996][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   97.092874][ T2282] netlink: 104 bytes leftover after parsing attributes in process `syz.1.642'.
[   97.103354][ T1968] usb 2-1: USB disconnect, device number 11
[   97.641833][ T2309] 9pnet_fd: p9_fd_create_tcp (2309): problem connecting socket to 127.0.0.1
[   97.976512][ T1968] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   98.186496][ T1968] usb 1-1: Using ep0 maxpacket: 16
[   98.192878][ T1968] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.215871][ T1968] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.235917][ T1968] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   98.269203][ T1968] usb 1-1: config 0 interface 0 has no altsetting 0
[   98.284658][ T1968] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[   98.304518][ T1968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.323416][ T1968] usb 1-1: config 0 descriptor??
[   98.396515][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[   98.402598][ T1192] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   98.419136][ T2333] 9pnet_fd: p9_fd_create_tcp (2333): problem connecting socket to 127.0.0.1
[   98.756987][ T2316] loop0: detected capacity change from 0 to 2048
[   98.826972][ T2316]  loop0: p1 < > p3 < > p4 < >
[   98.831895][ T2316] loop0: partition table partially beyond EOD, truncated
[   98.839274][ T2316] loop0: p1 start 3405774849 is beyond EOD, truncated
[   98.846067][ T2316] loop0: p3 start 4284289 is beyond EOD, truncated
[   98.870658][ T1968] hid-generic 0003:04F3:074D.000A: failed to start in urb: -90
[   98.891764][ T1968] input: HID 04f3:074d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04F3:074D.000A/input/input20
[   98.945457][ T1968] hid-generic 0003:04F3:074D.000A: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.0-1/input0
[   99.035430][ T2344] 9pnet_fd: p9_fd_create_tcp (2344): problem connecting socket to 127.0.0.1
[   99.246532][ T1451] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[   99.428134][ T1451] usb 5-1: unable to get BOS descriptor or descriptor too short
[   99.439710][ T1451] usb 5-1: not running at top speed; connect to a high speed hub
[   99.448634][ T1451] usb 5-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[   99.457637][ T1451] usb 5-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[   99.467988][ T1451] usb 5-1: config 240 has 1 interface, different from the descriptor's value: 182
[   99.479848][ T1451] usb 5-1: string descriptor 0 read error: -22
[   99.486356][ T1451] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[   99.495543][ T1451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.523584][ T1451] usb 5-1: cannot find UAC_HEADER
[   99.544410][ T1451] snd-usb-audio: probe of 5-1:240.0 failed with error -22
[   99.558141][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   99.678947][ T1451] usb 1-1: USB disconnect, device number 8
[   99.729176][ T2343] netlink: 104 bytes leftover after parsing attributes in process `syz.4.660'.
[   99.740673][ T1444] usb 5-1: USB disconnect, device number 8
[  101.029815][ T2384] 9pnet_fd: p9_fd_create_tcp (2384): problem connecting socket to 127.0.0.1
[  101.249663][ T2402] 9pnet_fd: p9_fd_create_tcp (2402): problem connecting socket to 127.0.0.1
[  101.916516][ T1192] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  101.917310][  T486] Bluetooth: hci0: command 0x1003 tx timeout
[  102.086564][   T19] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  102.276540][   T19] usb 1-1: Using ep0 maxpacket: 16
[  102.283533][   T19] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.294583][   T19] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.304378][   T19] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  102.317122][   T39] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  102.324860][ T1451] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  102.332386][   T19] usb 1-1: config 0 interface 0 has no altsetting 0
[  102.339218][   T19] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  102.348392][   T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.370342][   T19] usb 1-1: config 0 descriptor??
[  102.498400][   T39] usb 2-1: unable to get BOS descriptor or descriptor too short
[  102.506712][   T39] usb 2-1: not running at top speed; connect to a high speed hub
[  102.535810][   T39] usb 2-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[  102.576396][   T39] usb 2-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[  102.621714][   T39] usb 2-1: config 240 has 1 interface, different from the descriptor's value: 182
[  102.669614][   T39] usb 2-1: string descriptor 0 read error: -22
[  102.698763][   T39] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  102.743320][   T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.797305][   T39] usb 2-1: cannot find UAC_HEADER
[  102.835694][   T39] snd-usb-audio: probe of 2-1:240.0 failed with error -22
[  102.857028][ T2405] loop0: detected capacity change from 0 to 2048
[  102.873084][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  102.890039][ T1451] usb 5-1: Using ep0 maxpacket: 16
[  102.897203][ T1451] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.912144][ T1451] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.922145][ T1451] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  102.922526][ T2405]  loop0: p1 < > p3 < > p4 < >
[  102.934999][ T1451] usb 5-1: config 0 interface 0 has no altsetting 0
[  102.946434][ T1451] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  102.955822][ T1451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.960429][ T2405] loop0: partition table partially beyond EOD, truncated
[  102.972729][ T1451] usb 5-1: config 0 descriptor??
[  102.979268][ T2405] loop0: p1 start 3405774849 is beyond EOD, truncated
[  102.988074][ T2405] loop0: p3 start 4284289 is beyond EOD, truncated
[  102.996023][ T2409] netlink: 104 bytes leftover after parsing attributes in process `syz.1.683'.
[  103.006252][  T433] usb 2-1: USB disconnect, device number 12
[  103.014991][  T102]  loop0: p1 < > p3 < > p4 < >
[  103.020031][  T102] loop0: partition table partially beyond EOD, truncated
[  103.027532][  T102] loop0: p1 start 3405774849 is beyond EOD, truncated
[  103.034370][  T102] loop0: p3 start 4284289 is beyond EOD, truncated
[  103.046717][   T19] hid-generic 0003:04F3:074D.000B: failed to start in urb: -90
[  103.068647][   T19] input: HID 04f3:074d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04F3:074D.000B/input/input23
[  103.083148][   T19] hid-generic 0003:04F3:074D.000B: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.0-1/input0
[  103.398452][ T2437] 9pnet_fd: p9_fd_create_tcp (2437): problem connecting socket to 127.0.0.1
[  103.407812][ T2407] loop4: detected capacity change from 0 to 2048
[  103.447173][ T2407]  loop4: p1 < > p3 < > p4 < >
[  103.452312][ T2407] loop4: partition table partially beyond EOD, truncated
[  103.459930][ T2407] loop4: p1 start 3405774849 is beyond EOD, truncated
[  103.466997][ T2407] loop4: p3 start 4284289 is beyond EOD, truncated
[  103.491221][ T1451] hid-generic 0003:04F3:074D.000C: failed to start in urb: -90
[  103.505551][ T1451] input: HID 04f3:074d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04F3:074D.000C/input/input25
[  103.527995][ T1451] hid-generic 0003:04F3:074D.000C: input,hiddev97,hidraw1: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.4-1/input0
[  103.859697][  T433] usb 1-1: USB disconnect, device number 9
[  103.975720][ T2447] 9pnet_fd: p9_fd_create_tcp (2447): problem connecting socket to 127.0.0.1
[  104.372807][ T2452] loop2: detected capacity change from 0 to 1024
[  104.380715][ T2452] EXT4-fs: Ignoring removed bh option
[  104.386527][ T2452] EXT4-fs: Ignoring removed bh option
[  104.429162][ T2452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  104.460444][  T311] Bluetooth: hci0: Frame reassembly failed (-84)
[  104.467071][  T311] Bluetooth: hci0: Frame reassembly failed (-84)
[  105.262588][   T39] usb 5-1: USB disconnect, device number 9
[  105.866517][   T39] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  105.891587][ T2484] 9pnet_fd: p9_fd_create_tcp (2484): problem connecting socket to 127.0.0.1
[  105.906541][  T433] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  106.058077][   T39] usb 5-1: unable to get BOS descriptor or descriptor too short
[  106.066184][   T39] usb 5-1: not running at top speed; connect to a high speed hub
[  106.074753][   T39] usb 5-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[  106.083761][   T39] usb 5-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[  106.094093][  T433] usb 2-1: Using ep0 maxpacket: 16
[  106.099313][   T39] usb 5-1: config 240 has 1 interface, different from the descriptor's value: 182
[  106.110155][  T433] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.121088][  T433] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.130877][  T433] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  106.143799][  T433] usb 2-1: config 0 interface 0 has no altsetting 0
[  106.150464][  T433] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  106.159682][  T433] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.167923][   T39] usb 5-1: string descriptor 0 read error: -22
[  106.174113][   T39] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  106.183463][   T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.191792][  T433] usb 2-1: config 0 descriptor??
[  106.199645][   T39] usb 5-1: cannot find UAC_HEADER
[  106.206415][   T39] snd-usb-audio: probe of 5-1:240.0 failed with error -22
[  106.221379][  T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  106.402835][   T19] usb 5-1: USB disconnect, device number 10
[  106.476536][ T1192] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  106.476578][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[  106.488882][ T2452] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  106.511441][  T290] EXT4-fs (loop2): unmounting filesystem.
[  106.606691][ T2481] loop1: detected capacity change from 0 to 2048
[  106.657206][ T2481]  loop1: p1 < > p3 < > p4 < >
[  106.662067][ T2481] loop1: partition table partially beyond EOD, truncated
[  106.676815][ T2481] loop1: p1 start 3405774849 is beyond EOD, truncated
[  106.689350][ T2481] loop1: p3 start 4284289 is beyond EOD, truncated
[  106.714992][  T433] hid-generic 0003:04F3:074D.000D: failed to start in urb: -90
[  106.728294][  T433] input: HID 04f3:074d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F3:074D.000D/input/input27
[  106.742188][  T433] hid-generic 0003:04F3:074D.000D: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.1-1/input0
[  106.981974][ T2499] 9pnet_fd: p9_fd_create_tcp (2499): problem connecting socket to 127.0.0.1
[  107.286168][ T2507] loop3: detected capacity change from 0 to 8192
[  107.347108][ T2507]  loop3: p1 p2 p3 p4
[  107.352921][ T2507] loop3: p1 start 65792 is beyond EOD, truncated
[  107.371813][ T2507] loop3: p2 size 590592 extends beyond EOD, truncated
[  107.383826][ T2507] loop3: p3 start 524042 is beyond EOD, truncated
[  107.391325][ T2507] loop3: p4 start 131072 is beyond EOD, truncated
[  107.401871][ T2507] x_tables: duplicate underflow at hook 2
[  107.528406][  T433] usb 2-1: USB disconnect, device number 13
[  107.736543][ T1469] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  107.976832][ T1469] usb 4-1: Using ep0 maxpacket: 16
[  107.985990][ T1469] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.006074][ T1469] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.020495][ T2521] loop0: detected capacity change from 0 to 1024
[  108.027426][ T1469] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  108.058580][ T2521] EXT4-fs: Ignoring removed bh option
[  108.064475][ T2521] EXT4-fs: Ignoring removed bh option
[  108.253842][ T1469] usb 4-1: config 0 interface 0 has no altsetting 0
[  108.339323][ T1469] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  108.361690][ T2521] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  108.382068][ T1469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.402622][ T1469] usb 4-1: config 0 descriptor??
[  108.408782][    T8] Bluetooth: hci0: Frame reassembly failed (-84)
[  109.125843][ T2513] loop3: detected capacity change from 0 to 2048
[  109.177512][ T2513]  loop3: p1 < > p3 < > p4 < >
[  109.182493][ T2513] loop3: partition table partially beyond EOD, truncated
[  109.190312][ T2513] loop3: p1 start 3405774849 is beyond EOD, truncated
[  109.197405][ T2513] loop3: p3 start 4284289 is beyond EOD, truncated
[  109.222852][ T1469] hid-generic 0003:04F3:074D.000E: failed to start in urb: -90
[  109.233672][ T1469] input: HID 04f3:074d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04F3:074D.000E/input/input29
[  109.255956][ T1469] hid-generic 0003:04F3:074D.000E: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.3-1/input0
[  109.647465][ T2545] loop4: detected capacity change from 0 to 8192
[  109.697480][ T2545]  loop4: p1 p2 p3 p4
[  109.702486][ T2545] loop4: p1 start 65792 is beyond EOD, truncated
[  109.711100][ T2551] x_tables: duplicate underflow at hook 2
[  109.717048][ T2545] loop4: p2 size 590592 extends beyond EOD, truncated
[  109.727883][ T2545] loop4: p3 start 524042 is beyond EOD, truncated
[  109.734551][ T2545] loop4: p4 start 131072 is beyond EOD, truncated
[  109.837029][  T393] udevd[393]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  110.095270][   T19] usb 4-1: USB disconnect, device number 8
[  110.396535][  T486] Bluetooth: hci0: command 0x1003 tx timeout
[  110.406513][ T1192] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  110.412970][ T2521] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  110.455049][  T286] EXT4-fs (loop0): unmounting filesystem.
[  110.538315][ T2569] 9pnet_fd: p9_fd_create_tcp (2569): problem connecting socket to 127.0.0.1
[  110.777134][ T1469] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  110.957062][ T1469] usb 2-1: Using ep0 maxpacket: 16
[  110.964248][ T1469] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.976041][ T1469] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.986238][ T1469] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  110.999346][ T1469] usb 2-1: config 0 interface 0 has no altsetting 0
[  111.006121][ T1469] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  111.015606][ T1469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.029955][ T1469] usb 2-1: config 0 descriptor??
[  111.446973][ T2568] loop1: detected capacity change from 0 to 2048
[  111.497224][ T2568]  loop1: p1 < > p3 < > p4 < >
[  111.502100][ T2568] loop1: partition table partially beyond EOD, truncated
[  111.509830][ T2568] loop1: p1 start 3405774849 is beyond EOD, truncated
[  111.517030][ T2568] loop1: p3 start 4284289 is beyond EOD, truncated
[  111.545869][ T1469] hid-generic 0003:04F3:074D.000F: failed to start in urb: -90
[  111.560469][ T1469] input: HID 04f3:074d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F3:074D.000F/input/input30
[  111.581357][ T1469] hid-generic 0003:04F3:074D.000F: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.1-1/input0
[  111.606503][  T433] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  111.727518][ T2590] 9pnet_fd: p9_fd_create_tcp (2590): problem connecting socket to 127.0.0.1
[  111.817218][  T433] usb 1-1: unable to get BOS descriptor or descriptor too short
[  111.825409][  T433] usb 1-1: not running at top speed; connect to a high speed hub
[  111.834205][  T433] usb 1-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[  111.889017][  T433] usb 1-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[  111.899712][  T433] usb 1-1: config 240 has 1 interface, different from the descriptor's value: 182
[  111.922272][  T433] usb 1-1: string descriptor 0 read error: -22
[  111.934060][  T433] usb 1-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  111.943405][  T433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.965294][  T433] usb 1-1: cannot find UAC_HEADER
[  111.982752][  T433] snd-usb-audio: probe of 1-1:240.0 failed with error -22
[  111.994285][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  112.165204][ T1451] usb 1-1: USB disconnect, device number 10
[  112.244307][ T2602] loop3: detected capacity change from 0 to 1024
[  112.253914][ T2602] EXT4-fs: Ignoring removed bh option
[  112.259465][ T2602] EXT4-fs: Ignoring removed bh option
[  112.268211][ T2602] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  112.279977][    T8] Bluetooth: hci0: Frame reassembly failed (-84)
[  112.405864][ T1451] usb 2-1: USB disconnect, device number 14
[  112.456578][   T19] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  112.646629][   T19] usb 3-1: Using ep0 maxpacket: 16
[  112.653364][   T19] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.664631][   T19] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.681443][   T19] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  112.700500][   T19] usb 3-1: config 0 interface 0 has no altsetting 0
[  112.707790][   T19] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  112.717131][   T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.726881][   T19] usb 3-1: config 0 descriptor??
[  113.144990][ T2600] loop2: detected capacity change from 0 to 2048
[  113.208156][ T2600]  loop2: p1 < > p3 < > p4 < >
[  113.213062][ T2600] loop2: partition table partially beyond EOD, truncated
[  113.229592][ T2600] loop2: p1 start 3405774849 is beyond EOD, truncated
[  113.244640][ T2600] loop2: p3 start 4284289 is beyond EOD, truncated
[  113.270275][   T19] hid-generic 0003:04F3:074D.0010: failed to start in urb: -90
[  113.279560][   T19] input: HID 04f3:074d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04F3:074D.0010/input/input31
[  113.294237][   T19] hid-generic 0003:04F3:074D.0010: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.2-1/input0
[  113.511542][ T2632] 9pnet_fd: p9_fd_create_tcp (2632): problem connecting socket to 127.0.0.1
[  114.324732][  T486] Bluetooth: hci0: command 0x1003 tx timeout
[  114.325761][ T1192] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  114.546632][ T2602] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  114.666065][ T1469] usb 3-1: USB disconnect, device number 11
[  114.708524][  T287] EXT4-fs (loop3): unmounting filesystem.
[  114.805634][ T2657] 9pnet_fd: p9_fd_create_tcp (2657): problem connecting socket to 127.0.0.1
[  114.831688][ T2660] input: syz0 as /devices/virtual/input/input32
[  115.016490][  T433] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  115.207900][  T433] usb 1-1: unable to get BOS descriptor or descriptor too short
[  115.218913][  T433] usb 1-1: not running at top speed; connect to a high speed hub
[  115.236594][  T433] usb 1-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[  115.252108][  T433] usb 1-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[  115.273339][  T433] usb 1-1: config 240 has 1 interface, different from the descriptor's value: 182
[  115.296156][  T433] usb 1-1: string descriptor 0 read error: -22
[  115.306925][  T433] usb 1-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  115.324781][  T433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.345862][  T433] usb 1-1: cannot find UAC_HEADER
[  115.359380][  T433] snd-usb-audio: probe of 1-1:240.0 failed with error -22
[  115.374324][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  115.546342][ T2654] netlink: 104 bytes leftover after parsing attributes in process `syz.0.756'.
[  115.563587][  T398] usb 1-1: USB disconnect, device number 11
[  115.819746][ T2676] 9pnet_fd: p9_fd_create_tcp (2676): problem connecting socket to 127.0.0.1
[  115.956523][ T1451] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  116.134291][ T2681] loop0: detected capacity change from 0 to 8192
[  116.140768][ T1451] usb 2-1: Using ep0 maxpacket: 16
[  116.147173][ T1451] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.158502][ T1451] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.168294][ T1451] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  116.181409][ T1451] usb 2-1: config 0 interface 0 has no altsetting 0
[  116.181467][ T2681]  loop0: p1 p2 p3 p4
[  116.192185][ T1451] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  116.201566][ T2681] loop0: p1 start 65792 is beyond EOD, truncated
[  116.208076][ T1451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.216765][ T2681] loop0: p2 size 590592 extends beyond EOD, truncated
[  116.226859][ T2681] loop0: p3 start 524042 is beyond EOD, 
[  116.226880][ T1451] usb 2-1: config 0 descriptor??
[  116.238037][ T2681] truncated
[  116.241257][ T2681] loop0: p4 start 131072 is beyond EOD, truncated
[  116.252609][ T2681] x_tables: duplicate underflow at hook 2
[  116.279672][  T393] udevd[393]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  116.685058][ T2692] input: syz0 as /devices/virtual/input/input33
[  116.738112][ T2673] loop1: detected capacity change from 0 to 2048
[  116.747498][ T2673]  loop1: p1 < > p3 < > p4 < >
[  116.752326][ T2673] loop1: partition table partially beyond EOD, truncated
[  116.760486][ T2673] loop1: p1 start 3405774849 is beyond EOD, truncated
[  116.767591][ T2673] loop1: p3 start 4284289 is beyond EOD, truncated
[  117.021180][ T2705] 9pnet_fd: p9_fd_create_tcp (2705): problem connecting socket to 127.0.0.1
[  117.123243][ T1451] hid-generic 0003:04F3:074D.0011: failed to start in urb: -90
[  117.131798][ T1451] input: HID 04f3:074d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F3:074D.0011/input/input34
[  117.148028][ T1451] hid-generic 0003:04F3:074D.0011: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.1-1/input0
[  117.249877][ T2714] loop2: detected capacity change from 0 to 256
[  117.256557][ T2714] exfat: Unknown parameter 'discar«ļuf8'
[  117.296973][  T393] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  117.888234][ T2727] 9pnet_fd: p9_fd_create_tcp (2727): problem connecting socket to 127.0.0.1
[  117.927943][ T1469] usb 2-1: USB disconnect, device number 15
[  118.026498][   T19] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  118.117591][ T2730] loop1: detected capacity change from 0 to 8192
[  118.225483][ T2730]  loop1: p1 p2 p3 p4
[  118.230386][ T2730] loop1: p1 start 65792 is beyond EOD, truncated
[  118.237264][ T2730] loop1: p2 size 590592 extends beyond EOD, truncated
[  118.245026][ T2730] loop1: p3 start 524042 is beyond EOD, truncated
[  118.251823][ T2730] loop1: p4 start 131072 is beyond EOD, truncated
[  118.267808][   T19] usb 4-1: unable to get BOS descriptor or descriptor too short
[  118.279205][   T19] usb 4-1: not running at top speed; connect to a high speed hub
[  118.287621][ T2730] x_tables: duplicate underflow at hook 2
[  118.308931][   T19] usb 4-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[  118.338257][   T19] usb 4-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[  118.361799][   T19] usb 4-1: config 240 has 1 interface, different from the descriptor's value: 182
[  118.391708][   T19] usb 4-1: string descriptor 0 read error: -22
[  118.439074][   T19] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  118.497934][   T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.570557][   T19] usb 4-1: cannot find UAC_HEADER
[  118.599978][  T393] udevd[393]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  118.626269][   T19] snd-usb-audio: probe of 4-1:240.0 failed with error -22
[  118.650889][  T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  118.688495][ T2744] 9pnet_fd: p9_fd_create_tcp (2744): problem connecting socket to 127.0.0.1
[  118.768192][ T2723] netlink: 104 bytes leftover after parsing attributes in process `syz.3.774'.
[  118.790557][   T19] usb 4-1: USB disconnect, device number 9
[  119.256015][ T2750] input: syz0 as /devices/virtual/input/input35
[  119.410706][   T28] audit: type=1400 audit(1793175316.835:219): avc:  denied  { mounton } for  pid=2753 comm="syz.3.785" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  119.581914][ T2773] 9pnet_fd: p9_fd_create_tcp (2773): problem connecting socket to 127.0.0.1
[  119.626557][ T1469] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  119.746550][   T39] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  119.828509][ T1469] usb 5-1: unable to get BOS descriptor or descriptor too short
[  119.977998][ T1469] usb 5-1: not running at top speed; connect to a high speed hub
[  119.996514][   T39] usb 1-1: Using ep0 maxpacket: 16
[  120.011394][ T1469] usb 5-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[  120.020965][   T39] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.034630][ T1469] usb 5-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[  120.046315][   T39] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.057094][ T1469] usb 5-1: config 240 has 1 interface, different from the descriptor's value: 182
[  120.067201][   T39] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  120.094051][   T39] usb 1-1: config 0 interface 0 has no altsetting 0
[  120.103795][ T1469] usb 5-1: string descriptor 0 read error: -22
[  120.110505][   T39] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  120.120774][ T1469] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  120.130692][   T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.139314][ T1469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.152411][   T39] usb 1-1: config 0 descriptor??
[  120.164215][ T1469] usb 5-1: cannot find UAC_HEADER
[  120.171539][ T1469] snd-usb-audio: probe of 5-1:240.0 failed with error -22
[  120.185209][  T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  120.373868][ T1451] usb 5-1: USB disconnect, device number 11
[  120.574235][ T2771] loop0: detected capacity change from 0 to 2048
[  120.627107][ T2771]  loop0: p1 < > p3 < > p4 < >
[  120.632393][ T2771] loop0: partition table partially beyond EOD, truncated
[  120.642622][ T2785] loop3: detected capacity change from 0 to 8192
[  120.649351][ T2771] loop0: p1 start 3405774849 is beyond EOD, truncated
[  120.664507][ T2771] loop0: p3 start 4284289 is beyond EOD, truncated
[  120.679841][   T39] hid-generic 0003:04F3:074D.0012: failed to start in urb: -90
[  120.695633][   T39] input: HID 04f3:074d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04F3:074D.0012/input/input36
[  120.707540][ T2785]  loop3: p1 p2 p3 p4
[  120.713199][   T39] hid-generic 0003:04F3:074D.0012: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.0-1/input0
[  120.717280][ T2785] loop3: p1 start 65792 is beyond EOD, truncated
[  120.751918][ T2785] loop3: p2 size 590592 extends beyond EOD, truncated
[  120.769203][ T2785] loop3: p3 start 524042 is beyond EOD, truncated
[  120.783319][ T2785] loop3: p4 start 131072 is beyond EOD, truncated
[  120.816381][ T2785] x_tables: duplicate underflow at hook 2
[  120.885851][  T393] udevd[393]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  121.430981][ T2804] input: syz0 as /devices/virtual/input/input37
[  121.646505][ T1444] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  121.745089][ T1451] usb 1-1: USB disconnect, device number 12
[  121.838026][ T1444] usb 3-1: unable to get BOS descriptor or descriptor too short
[  121.849885][ T1444] usb 3-1: not running at top speed; connect to a high speed hub
[  121.864739][ T1444] usb 3-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[  121.876865][ T1444] usb 3-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[  121.887237][ T1444] usb 3-1: config 240 has 1 interface, different from the descriptor's value: 182
[  121.897770][ T2814] 9pnet_fd: p9_fd_create_tcp (2814): problem connecting socket to 127.0.0.1
[  121.908249][ T1444] usb 3-1: string descriptor 0 read error: -22
[  121.914500][ T1444] usb 3-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  121.923672][ T1444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.937042][ T1444] usb 3-1: cannot find UAC_HEADER
[  121.944946][ T1444] snd-usb-audio: probe of 3-1:240.0 failed with error -22
[  121.953939][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  122.003444][ T2822] 9pnet_fd: p9_fd_create_tcp (2822): problem connecting socket to 127.0.0.1
[  122.137728][ T2802] netlink: 104 bytes leftover after parsing attributes in process `syz.2.795'.
[  122.147829][ T1469] usb 3-1: USB disconnect, device number 12
[  122.636526][ T1444] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  122.730322][ T2836] input: syz0 as /devices/virtual/input/input38
[  122.816577][ T1444] usb 2-1: Using ep0 maxpacket: 16
[  122.818551][ T2833] loop2: detected capacity change from 0 to 1024
[  123.628853][ T2833] EXT4-fs: Ignoring removed bh option
[  123.634370][ T2833] EXT4-fs: Ignoring removed bh option
[  123.662602][ T1444] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.673896][ T1444] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.683715][ T1444] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  123.696614][ T1444] usb 2-1: config 0 interface 0 has no altsetting 0
[  123.697860][ T2833] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  123.703246][ T1444] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  123.703270][ T1444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.729898][   T43] Bluetooth: hci0: Frame reassembly failed (-84)
[  123.736815][ T1444] usb 2-1: config 0 descriptor??
[  123.806540][ T1451] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  124.016498][ T1451] usb 5-1: Using ep0 maxpacket: 16
[  124.022955][ T1451] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.034092][ T1451] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.043893][ T1451] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  124.056945][ T1451] usb 5-1: config 0 interface 0 has no altsetting 0
[  124.063642][ T1451] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  124.073108][ T1451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.086913][ T1451] usb 5-1: config 0 descriptor??
[  124.153316][ T2827] loop1: detected capacity change from 0 to 2048
[  124.197250][ T2827]  loop1: p1 < > p3 < > p4 < >
[  124.202235][ T2827] loop1: partition table partially beyond EOD, truncated
[  124.209977][ T2827] loop1: p1 start 3405774849 is beyond EOD, truncated
[  124.217093][ T2827] loop1: p3 start 4284289 is beyond EOD, truncated
[  124.249921][ T1444] hid-generic 0003:04F3:074D.0013: failed to start in urb: -90
[  124.265282][ T1444] input: HID 04f3:074d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F3:074D.0013/input/input39
[  124.281354][ T1444] hid-generic 0003:04F3:074D.0013: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.1-1/input0
[  124.505210][ T2838] loop4: detected capacity change from 0 to 2048
[  124.567584][ T2838]  loop4: p1 < > p3 < > p4 < >
[  124.575675][ T1469] usb 2-1: USB disconnect, device number 16
[  124.581908][ T2838] loop4: partition table partially beyond EOD, truncated
[  124.603385][ T2838] loop4: p1 start 3405774849 is beyond EOD, truncated
[  124.610629][ T2838] loop4: p3 start 4284289 is beyond EOD, truncated
[  124.628281][  T102]  loop4: p1 < > p3 < > p4 < >
[  124.633155][  T102] loop4: partition table partially beyond EOD, truncated
[  124.640716][  T102] loop4: p1 start 3405774849 is beyond EOD, truncated
[  124.647713][  T102] loop4: p3 start 4284289 is beyond EOD, truncated
[  124.657702][ T1451] hid-generic 0003:04F3:074D.0014: failed to start in urb: -90
[  124.666047][ T1451] input: HID 04f3:074d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04F3:074D.0014/input/input40
[  124.679475][ T1451] hid-generic 0003:04F3:074D.0014: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.4-1/input0
[  125.295134][ T2868] overlayfs: unrecognized mount option "obj_role=[)@){#-/{\'\*." or missing value
[  125.580273][ T2876] 9pnet_fd: p9_fd_create_tcp (2876): problem connecting socket to 127.0.0.1
[  125.596656][ T1469] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  125.605808][ T2879] input: syz0 as /devices/virtual/input/input41
[  125.643001][   T19] usb 5-1: USB disconnect, device number 12
[  126.000745][ T1192] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  126.008381][ T2833] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  126.077983][ T1469] usb 2-1: unable to get BOS descriptor or descriptor too short
[  126.092709][ T1469] usb 2-1: not running at top speed; connect to a high speed hub
[  126.108227][  T290] EXT4-fs (loop2): unmounting filesystem.
[  126.119976][ T1469] usb 2-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[  126.131650][ T2889] loop0: detected capacity change from 0 to 8192
[  126.138859][ T1469] usb 2-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[  126.167181][ T1469] usb 2-1: config 240 has 1 interface, different from the descriptor's value: 182
[  126.185640][ T1469] usb 2-1: string descriptor 0 read error: -22
[  126.196137][ T1469] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  126.206981][ T2889]  loop0: p1 p2 p3 p4
[  126.215714][ T2889] loop0: p1 start 65792 is beyond EOD, truncated
[  126.233635][ T2889] loop0: p2 size 590592 extends beyond EOD, truncated
[  126.235749][ T1469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.252905][ T2889] loop0: p3 start 524042 is beyond EOD, truncated
[  126.259442][ T2889] loop0: p4 start 131072 is beyond EOD, truncated
[  126.268190][ T1469] usb 2-1: cannot find UAC_HEADER
[  126.290590][ T2889] x_tables: duplicate underflow at hook 2
[  126.297578][ T1469] snd-usb-audio: probe of 2-1:240.0 failed with error -22
[  126.309429][  T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  126.367547][ T2898] overlayfs: unrecognized mount option "obj_role=[)@){#-/{\'\*." or missing value
[  126.754124][ T2872] netlink: 104 bytes leftover after parsing attributes in process `syz.1.816'.
[  126.833473][ T1444] usb 2-1: USB disconnect, device number 17
[  126.853384][ T2908] input: syz0 as /devices/virtual/input/input42
[  126.893662][ T2910] 9pnet_fd: p9_fd_create_tcp (2910): problem connecting socket to 127.0.0.1
[  126.976562][   T19] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  127.166492][   T19] usb 3-1: Using ep0 maxpacket: 16
[  127.173373][   T19] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.184438][   T19] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.194311][   T19] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  127.207245][   T19] usb 3-1: config 0 interface 0 has no altsetting 0
[  127.214029][   T19] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  127.223197][   T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.244973][   T19] usb 3-1: config 0 descriptor??
[  127.286952][  T309] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  127.496517][  T309] usb 5-1: Using ep0 maxpacket: 16
[  127.503219][  T309] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.529967][  T309] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.556035][  T309] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  127.584590][  T309] usb 5-1: config 0 interface 0 has no altsetting 0
[  127.604854][  T309] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  127.614373][  T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.625094][  T309] usb 5-1: config 0 descriptor??
[  127.710962][ T2896] loop2: detected capacity change from 0 to 2048
[  127.719921][ T2926] overlayfs: unrecognized mount option "obj_role=[)@){#-/{\'\*." or missing value
[  127.777910][ T2896]  loop2: p1 < > p3 < > p4 < >
[  127.786794][ T2896] loop2: partition table partially beyond EOD, truncated
[  127.807975][ T2896] loop2: p1 start 3405774849 is beyond EOD, truncated
[  127.815097][ T2896] loop2: p3 start 4284289 is beyond EOD, truncated
[  127.819137][ T2924] loop1: detected capacity change from 0 to 1024
[  127.851373][ T2929] overlayfs: unrecognized mount option "obj_role=[)@){#-/{\'\*." or missing value
[  127.853753][ T2924] EXT4-fs: Ignoring removed bh option
[  127.867396][ T2924] EXT4-fs: Ignoring removed bh option
[  127.900593][   T19] hid-generic 0003:04F3:074D.0015: failed to start in urb: -90
[  127.911616][ T2929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'.
[  127.926090][   T19] input: HID 04f3:074d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04F3:074D.0015/input/input43
[  127.944948][ T2924] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  127.967258][   T19] hid-generic 0003:04F3:074D.0015: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.2-1/input0
[  128.075768][ T2915] loop4: detected capacity change from 0 to 2048
[  128.188499][ T2915]  loop4: p1 < > p3 < > p4 < >
[  128.193405][ T2915] loop4: partition table partially beyond EOD, truncated
[  128.206803][ T2915] loop4: p1 start 3405774849 is beyond EOD, truncated
[  128.215606][ T2915] loop4: p3 start 4284289 is beyond EOD, truncated
[  128.225093][   T19] usb 3-1: USB disconnect, device number 13
[  128.234730][ T2942] input: syz0 as /devices/virtual/input/input44
[  128.272035][  T309] hid-generic 0003:04F3:074D.0016: failed to start in urb: -90
[  128.299967][  T309] input: HID 04f3:074d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04F3:074D.0016/input/input45
[  128.374212][  T309] hid-generic 0003:04F3:074D.0016: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.4-1/input0
[  128.649256][ T2952] 9pnet_fd: p9_fd_create_tcp (2952): problem connecting socket to 127.0.0.1
[  129.066524][  T309] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  129.079799][   T24] usb 5-1: USB disconnect, device number 13
[  129.248065][  T309] usb 3-1: unable to get BOS descriptor or descriptor too short
[  129.256219][  T309] usb 3-1: not running at top speed; connect to a high speed hub
[  129.265092][  T309] usb 3-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[  129.274178][  T309] usb 3-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[  129.284679][  T309] usb 3-1: config 240 has 1 interface, different from the descriptor's value: 182
[  129.296890][  T309] usb 3-1: string descriptor 0 read error: -22
[  129.303165][  T309] usb 3-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  129.312573][  T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.327455][  T309] usb 3-1: cannot find UAC_HEADER
[  129.338009][  T309] snd-usb-audio: probe of 3-1:240.0 failed with error -22
[  129.347356][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  129.528054][ T2959] netlink: 104 bytes leftover after parsing attributes in process `syz.2.845'.
[  129.538198][  T309] usb 3-1: USB disconnect, device number 14
[  129.855882][ T2974] loop0: detected capacity change from 0 to 8192
[  129.907502][ T2974]  loop0: p1 p2 p3 p4
[  129.917477][ T2974] loop0: p1 start 65792 is beyond EOD, truncated
[  129.928890][ T2974] loop0: p2 size 590592 extends beyond EOD, truncated
[  129.936416][ T2974] loop0: p3 start 524042 is beyond EOD, truncated
[  129.943014][ T2974] loop0: p4 start 131072 is beyond EOD, truncated
[  129.956410][ T2974] x_tables: duplicate underflow at hook 2
[  129.996532][ T2924] Bluetooth: hci0: Opcode 0x0c20 failed: -110
[  130.012056][ T2978] input: syz0 as /devices/virtual/input/input46
[  130.054272][  T393] udevd[393]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  130.098970][  T288] EXT4-fs (loop1): unmounting filesystem.
[  130.127237][ T2989] 9pnet_fd: p9_fd_create_tcp (2989): problem connecting socket to 127.0.0.1
[  130.205398][ T2999] 9pnet_fd: p9_fd_create_tcp (2999): problem connecting socket to 127.0.0.1
[  130.626504][ T1968] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  130.806500][ T1968] usb 3-1: Using ep0 maxpacket: 16
[  130.812966][ T1968] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.824017][ T1968] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.833835][ T1968] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  130.846720][ T1968] usb 3-1: config 0 interface 0 has no altsetting 0
[  130.853386][ T1968] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  130.862526][ T1968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.879332][ T1968] usb 3-1: config 0 descriptor??
[  131.206581][ T2937] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  131.236512][  T297] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  131.315924][ T3002] loop2: detected capacity change from 0 to 2048
[  131.367881][ T3002]  loop2: p1 < > p3 < > p4 < >
[  131.372752][ T3002] loop2: partition table partially beyond EOD, truncated
[  131.381273][ T3002] loop2: p1 start 3405774849 is beyond EOD, truncated
[  131.385705][ T3020] input: syz0 as /devices/virtual/input/input47
[  131.396515][ T2937] usb 4-1: Using ep0 maxpacket: 16
[  131.403374][ T2937] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.409285][ T3002] loop2: p3 start 4284289 is beyond EOD, 
[  131.418464][  T297] usb 1-1: unable to get BOS descriptor or descriptor too short
[  131.420634][ T3002] truncated
[  131.435770][  T297] usb 1-1: not running at top speed; connect to a high speed hub
[  131.444879][ T2937] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.445159][  T324] udevd[324]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[  131.466187][  T297] usb 1-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[  131.521901][  T297] usb 1-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[  131.537853][ T1968] hid-generic 0003:04F3:074D.0017: failed to start in urb: -90
[  131.549357][ T1968] input: HID 04f3:074d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04F3:074D.0017/input/input48
[  131.561000][ T2937] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  131.579181][  T297] usb 1-1: config 240 has 1 interface, different from the descriptor's value: 182
[  131.589760][ T2937] usb 4-1: config 0 interface 0 has no altsetting 0
[  131.599216][ T2937] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  131.611936][ T2937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.612559][  T297] usb 1-1: string descriptor 0 read error: -22
[  131.627744][ T1968] hid-generic 0003:04F3:074D.0017: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.2-1/input0
[  131.643000][ T2937] usb 4-1: config 0 descriptor??
[  131.669910][  T297] usb 1-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  131.733629][  T297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.783910][  T297] usb 1-1: cannot find UAC_HEADER
[  131.800953][  T297] snd-usb-audio: probe of 1-1:240.0 failed with error -22
[  131.828466][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  131.847889][ T1444] usb 3-1: USB disconnect, device number 15
[  131.990096][ T3016] netlink: 104 bytes leftover after parsing attributes in process `syz.0.865'.
[  132.002976][   T19] usb 1-1: USB disconnect, device number 13
[  132.049655][ T3022] loop1: detected capacity change from 0 to 1024
[  132.069513][ T3022] EXT4-fs: Ignoring removed bh option
[  132.080276][ T3010] loop3: detected capacity change from 0 to 2048
[  132.080918][ T3022] EXT4-fs: Ignoring removed bh option
[  132.118359][ T3022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  132.127765][ T3010]  loop3: p1 < > p3 < > p4 < >
[  132.132990][ T3010] loop3: partition table partially beyond EOD, truncated
[  132.140668][ T3010] loop3: p1 start 3405774849 is beyond EOD, truncated
[  132.148625][ T3010] loop3: p3 start 4284289 is beyond EOD, truncated
[  132.168677][ T2937] hid-generic 0003:04F3:074D.0018: failed to start in urb: -90
[  132.179291][ T2937] input: HID 04f3:074d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04F3:074D.0018/input/input49
[  132.199518][ T2937] hid-generic 0003:04F3:074D.0018: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.3-1/input0
[  132.487290][ T1444] usb 4-1: USB disconnect, device number 10
[  132.638198][ T3038] loop0: detected capacity change from 0 to 8192
[  132.686812][ T3038]  loop0: p1 p2 p3 p4
[  132.691112][ T3038] loop0: p1 start 65792 is beyond EOD, truncated
[  132.697761][ T3038] loop0: p2 size 590592 extends beyond EOD, truncated
[  132.705075][ T3038] loop0: p3 start 524042 is beyond EOD, truncated
[  132.712301][ T3038] loop0: p4 start 131072 is beyond EOD, truncated
[  132.730435][ T3038] x_tables: duplicate underflow at hook 2
[  132.763910][  T393] udevd[393]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  132.811980][ T3047] 9pnet_fd: p9_fd_create_tcp (3047): problem connecting socket to 127.0.0.1
[  133.034683][ T3052] 9pnet_fd: p9_fd_create_tcp (3052): problem connecting socket to 127.0.0.1
[  133.599279][ T3063] input: syz0 as /devices/virtual/input/input50
[  134.156525][  T486] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  134.179382][ T3078] loop3: detected capacity change from 0 to 8192
[  134.226865][ T3078]  loop3: p1 p2 p3 p4
[  134.231186][ T3078] loop3: p1 start 65792 is beyond EOD, truncated
[  134.237834][ T3078] loop3: p2 size 590592 extends beyond EOD, truncated
[  134.245183][ T3078] loop3: p3 start 524042 is beyond EOD, truncated
[  134.251899][ T3078] loop3: p4 start 131072 is beyond EOD, truncated
[  134.258438][   T19] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  134.267105][ T3078] x_tables: duplicate underflow at hook 2
[  134.276564][ T1795] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  134.304781][  T393] udevd[393]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  134.446514][   T19] usb 3-1: Using ep0 maxpacket: 16
[  134.452812][   T19] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.468013][ T1795] usb 5-1: unable to get BOS descriptor or descriptor too short
[  134.476118][ T1795] usb 5-1: not running at top speed; connect to a high speed hub
[  134.492377][   T19] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.493308][ T1795] usb 5-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[  134.508778][   T19] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  134.514491][ T1795] usb 5-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[  134.526538][   T19] usb 3-1: config 0 interface 0 has no altsetting 0
[  134.535361][ T1795] usb 5-1: config 240 has 1 interface, different from the descriptor's value: 182
[  134.542791][   T19] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  134.559199][   T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.564190][ T1795] usb 5-1: string descriptor 0 read error: -22
[  134.573552][ T1795] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  134.582818][ T1795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.591035][ T3022] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  134.597009][   T19] usb 3-1: config 0 descriptor??
[  134.611901][ T1795] usb 5-1: cannot find UAC_HEADER
[  134.614384][ T3093] overlayfs: unrecognized mount option "obj_role=[)@){#-/{\'\*." or missing value
[  134.628507][ T1795] snd-usb-audio: probe of 5-1:240.0 failed with error -22
[  134.637082][ T3091] 9pnet_fd: p9_fd_create_tcp (3091): problem connecting socket to 127.0.0.1
[  134.653300][  T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  134.673783][ T3095] input: syz0 as /devices/virtual/input/input51
[  134.696223][  T288] EXT4-fs (loop1): unmounting filesystem.
[  134.820126][ T3073] netlink: 104 bytes leftover after parsing attributes in process `syz.4.881'.
[  134.832867][ T3104] 9pnet_fd: p9_fd_create_tcp (3104): problem connecting socket to 127.0.0.1
[  134.843724][ T1444] usb 5-1: USB disconnect, device number 14
[  135.079308][ T3071] loop2: detected capacity change from 0 to 2048
[  135.128668][ T3071]  loop2: p1 < > p3 < > p4 < >
[  135.139510][ T3071] loop2: partition table partially beyond EOD, truncated
[  135.149469][ T3071] loop2: p1 start 3405774849 is beyond EOD, truncated
[  135.156400][ T3071] loop2: p3 start 4284289 is beyond EOD, truncated
[  135.264590][   T19] hid-generic 0003:04F3:074D.0019: failed to start in urb: -90
[  135.288533][   T19] input: HID 04f3:074d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04F3:074D.0019/input/input52
[  135.328540][   T19] hid-generic 0003:04F3:074D.0019: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.2-1/input0
[  136.056326][ T2937] usb 3-1: USB disconnect, device number 16
[  136.071136][ T3118] loop3: detected capacity change from 0 to 8192
[  136.124492][ T3118]  loop3: p1 p2 p3 p4
[  136.129566][ T3118] loop3: p1 start 65792 is beyond EOD, truncated
[  136.136410][ T3118] loop3: p2 size 590592 extends beyond EOD, truncated
[  136.145130][ T3118] loop3: p3 start 524042 is beyond EOD, truncated
[  136.151856][ T3118] loop3: p4 start 131072 is beyond EOD, truncated
[  136.165958][ T3118] x_tables: duplicate underflow at hook 2
[  136.464800][  T393] udevd[393]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  136.542738][ T3131] input: syz0 as /devices/virtual/input/input53
[  136.558263][ T3135] overlayfs: unrecognized mount option "obj_role=[)@){#-/{\'\*." or missing value
[  136.657561][ T3137] loop4: detected capacity change from 0 to 1024
[  136.665834][ T3143] 9pnet_fd: p9_fd_create_tcp (3143): problem connecting socket to 127.0.0.1
[  136.667663][ T3137] EXT4-fs: Ignoring removed bh option
[  136.680749][ T3137] EXT4-fs: Ignoring removed bh option
[  136.698077][ T3137] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  136.710261][    T8] Bluetooth: hci0: Frame reassembly failed (-84)
[  136.956654][ T1444] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  137.114980][ T3155] 9pnet_fd: p9_fd_create_tcp (3155): problem connecting socket to 127.0.0.1
[  137.158552][ T1444] usb 4-1: unable to get BOS descriptor or descriptor too short
[  137.167203][ T1444] usb 4-1: not running at top speed; connect to a high speed hub
[  137.176019][ T1444] usb 4-1: config 240 has too many interfaces: 182, using maximum allowed: 32
[  137.185192][ T1444] usb 4-1: config 240 has an invalid descriptor of length 0, skipping remainder of the config
[  137.195660][ T1444] usb 4-1: config 240 has 1 interface, different from the descriptor's value: 182
[  137.207951][ T1444] usb 4-1: string descriptor 0 read error: -22
[  137.214337][ T1444] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40
[  137.223547][ T1444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.260012][ T1444] usb 4-1: cannot find UAC_HEADER
[  137.284191][ T1444] snd-usb-audio: probe of 4-1:240.0 failed with error -22
[  137.297737][  T393] udevd[393]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:240.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  137.453611][ T3146] netlink: 104 bytes leftover after parsing attributes in process `syz.3.905'.
[  137.463942][   T19] usb 4-1: USB disconnect, device number 11
[  137.716501][ T1444] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  137.926507][ T1444] usb 1-1: Using ep0 maxpacket: 16
[  137.932779][ T1444] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.943715][ T1444] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.953720][ T1444] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  137.966642][ T1444] usb 1-1: config 0 interface 0 has no altsetting 0
[  137.973384][ T1444] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  137.983718][ T1444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.007727][ T1444] usb 1-1: config 0 descriptor??
[  138.438292][ T3158] loop0: detected capacity change from 0 to 2048
[  138.477586][ T3158]  loop0: p1 < > p3 < > p4 < >
[  138.482578][ T3158] loop0: partition table partially beyond EOD, truncated
[  138.490614][ T3158] loop0: p1 start 3405774849 is beyond EOD, truncated
[  138.497574][ T3158] loop0: p3 start 4284289 is beyond EOD, truncated
[  138.519259][ T1444] hid-generic 0003:04F3:074D.001A: failed to start in urb: -90
[  138.529565][ T1444] input: HID 04f3:074d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04F3:074D.001A/input/input54
[  138.548683][ T1444] hid-generic 0003:04F3:074D.001A: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.0-1/input0
[  138.716756][  T486] Bluetooth: hci0: command 0x1003 tx timeout
[  138.716805][ T1192] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  138.729458][ T3137] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  138.877209][  T289] EXT4-fs (loop4): unmounting filesystem.
[  139.617163][ T3190] 9pnet_fd: p9_fd_create_tcp (3190): problem connecting socket to 127.0.0.1
[  139.718381][  T297] usb 1-1: USB disconnect, device number 14
[  140.095053][ T3200] 9pnet_fd: p9_fd_create_tcp (3200): problem connecting socket to 127.0.0.1
[  140.124330][ T3203] 9pnet_fd: p9_fd_create_tcp (3203): problem connecting socket to 127.0.0.1
[  140.796466][    C0] ==================================================================
[  140.804581][    C0] BUG: KASAN: use-after-free in __run_timers+0x341/0x9b0
[  140.811641][    C0] Write of size 8 at addr ffff888136408a00 by task syz.4.921/3209
[  140.819465][    C0] 
[  140.821804][    C0] CPU: 0 PID: 3209 Comm: syz.4.921 Not tainted syzkaller #0
[  140.829106][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  140.839179][    C0] Call Trace:
[  140.842452][    C0]  <IRQ>
[  140.845285][    C0]  __dump_stack+0x21/0x24
[  140.849607][    C0]  dump_stack_lvl+0x110/0x170
[  140.854277][    C0]  ? __cfi_dump_stack_lvl+0x8/0x8
[  140.859293][    C0]  ? __cfi_trigger_load_balance+0x10/0x10
[  140.865013][    C0]  ? __run_timers+0x341/0x9b0
[  140.869690][    C0]  print_address_description+0x71/0x200
[  140.875232][    C0]  print_report+0x4a/0x60
[  140.879573][    C0]  kasan_report+0x122/0x150
[  140.884074][    C0]  ? __run_timers+0x341/0x9b0
[  140.888937][    C0]  __asan_report_store8_noabort+0x17/0x20
[  140.894651][    C0]  __run_timers+0x341/0x9b0
[  140.899150][    C0]  ? sched_clock_cpu+0x6e/0x260
[  140.903995][    C0]  ? calc_index+0x200/0x200
[  140.908495][    C0]  ? kvm_sched_clock_read+0x18/0x40
[  140.913699][    C0]  run_timer_softirq+0x6a/0xf0
[  140.918458][    C0]  handle_softirqs+0x1dd/0x5f0
[  140.923217][    C0]  __irq_exit_rcu+0x52/0xf0
[  140.927714][    C0]  irq_exit_rcu+0x9/0x10
[  140.931947][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  140.937577][    C0]  </IRQ>
[  140.940499][    C0]  <TASK>
[  140.943420][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  140.949407][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80
[  140.955815][    C0] Code: c0 db 0d 87 e8 2c fa b4 fc 4c 89 f7 48 83 3d b1 c8 0b 02 00 74 30 e8 9e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 06 84 4a fc 65 8b 05 97 5a 00 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[  140.975498][    C0] RSP: 0018:ffffc9000f8bf5c0 EFLAGS: 00000206
[  140.981600][    C0] RAX: 0000000000000001 RBX: 0000000000000a02 RCX: dffffc0000000000
[  140.989585][    C0] RDX: ffffc9000dcff678 RSI: 0000000000000a02 RDI: 0000000000000001
[  140.997547][    C0] RBP: ffffc9000f8bf5d0 R08: ffff88811b7d8007 R09: 1ffff110236fb000
[  141.005510][    C0] R10: dffffc0000000000 R11: ffffed10236fb001 R12: ffff888121699800
[  141.013487][    C0] R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000000
[  141.021491][    C0]  __wake_up_sync_key+0x17b/0x2b0
[  141.026618][    C0]  ? __cfi___wake_up_sync_key+0x10/0x10
[  141.032188][    C0]  ? __skb_try_recv_datagram+0x3dc/0x4d0
[  141.037827][    C0]  ? __cfi_sk_busy_loop_end+0x10/0x10
[  141.043194][    C0]  __unix_dgram_recvmsg+0x4b5/0xd90
[  141.048384][    C0]  ? __cfi___unix_dgram_recvmsg+0x10/0x10
[  141.054098][    C0]  ? exc_page_fault+0x5e/0xb0
[  141.058788][    C0]  unix_dgram_recvmsg+0xc7/0xe0
[  141.063637][    C0]  ? __cfi_unix_dgram_recvmsg+0x10/0x10
[  141.069269][    C0]  ____sys_recvmsg+0x2d6/0x5c0
[  141.074024][    C0]  ? __sys_recvmsg_sock+0x50/0x50
[  141.079037][    C0]  ? import_iovec+0x7c/0xb0
[  141.083528][    C0]  ___sys_recvmsg+0x210/0x590
[  141.088204][    C0]  ? __sys_recvmsg+0x290/0x290
[  141.092965][    C0]  ? cgroup_rstat_updated+0xf0/0x360
[  141.098246][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  141.104395][    C0]  ? do_recvmmsg+0x3ff/0x7e0
[  141.109001][    C0]  do_recvmmsg+0x370/0x7e0
[  141.113429][    C0]  ? __sys_recvmmsg+0x290/0x290
[  141.118288][    C0]  ? _raw_spin_lock_irq+0x95/0xf0
[  141.123312][    C0]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  141.129228][    C0]  ? __set_current_blocked+0x208/0x230
[  141.134700][    C0]  ? __fget_files+0x2d1/0x330
[  141.139375][    C0]  __x64_sys_recvmmsg+0x195/0x250
[  141.144400][    C0]  ? __kasan_check_write+0x14/0x20
[  141.149505][    C0]  ? __cfi___x64_sys_recvmmsg+0x10/0x10
[  141.155045][    C0]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  141.161105][    C0]  x64_sys_call+0x3e7/0x9a0
[  141.165602][    C0]  do_syscall_64+0x4c/0xa0
[  141.170093][    C0]  ? clear_bhb_loop+0x30/0x80
[  141.174767][    C0]  ? clear_bhb_loop+0x30/0x80
[  141.179433][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  141.185318][    C0] RIP: 0033:0x7f8d0f99f559
[  141.189724][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.209320][    C0] RSP: 002b:00007f8d10796028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  141.217725][    C0] RAX: ffffffffffffffda RBX: 00007f8d0fc26090 RCX: 00007f8d0f99f559
[  141.225861][    C0] RDX: 0000000000010106 RSI: 0000200000000200 RDI: 0000000000000005
[  141.233835][    C0] RBP: 00007f8d0fa36b20 R08: 0000000000000000 R09: 0000000000000000
[  141.241801][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  141.249772][    C0] R13: 00007f8d0fc26128 R14: 00007f8d0fc26090 R15: 00007ffe05cef6f8
[  141.257749][    C0]  </TASK>
[  141.260768][    C0] 
[  141.263083][    C0] Allocated by task 3137:
[  141.267399][    C0]  kasan_set_track+0x4b/0x70
[  141.272001][    C0]  kasan_save_alloc_info+0x1f/0x30
[  141.277104][    C0]  __kasan_kmalloc+0x95/0xb0
[  141.281689][    C0]  __kmalloc+0xb4/0x1e0
[  141.285837][    C0]  hci_alloc_dev_priv+0x27/0x1bd0
[  141.290876][    C0]  hci_uart_tty_ioctl+0x3c4/0xa70
[  141.295908][    C0]  tty_ioctl+0x8ef/0xc60
[  141.300173][    C0]  __se_sys_ioctl+0x12f/0x1b0
[  141.304872][    C0]  __x64_sys_ioctl+0x7b/0x90
[  141.309462][    C0]  x64_sys_call+0x58b/0x9a0
[  141.313961][    C0]  do_syscall_64+0x4c/0xa0
[  141.318373][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  141.324275][    C0] 
[  141.326605][    C0] Freed by task 3137:
[  141.330574][    C0]  kasan_set_track+0x4b/0x70
[  141.335158][    C0]  kasan_save_free_info+0x2b/0x40
[  141.340178][    C0]  ____kasan_slab_free+0x132/0x180
[  141.345283][    C0]  __kasan_slab_free+0x11/0x20
[  141.350056][    C0]  slab_free_freelist_hook+0xc2/0x190
[  141.355434][    C0]  __kmem_cache_free+0xb7/0x1b0
[  141.360281][    C0]  kfree+0x6f/0xf0
[  141.363994][    C0]  hci_release_dev+0x12a3/0x13b0
[  141.368924][    C0]  bt_host_release+0x82/0x90
[  141.373520][    C0]  device_release+0xa4/0x1d0
[  141.378107][    C0]  kobject_put+0x19d/0x280
[  141.382517][    C0]  put_device+0x1f/0x30
[  141.386663][    C0]  hci_dev_cmd+0x279/0x740
[  141.391077][    C0]  hci_sock_ioctl+0x41e/0x7f0
[  141.395744][    C0]  sock_do_ioctl+0x114/0x330
[  141.400333][    C0]  sock_ioctl+0x475/0x700
[  141.404652][    C0]  __se_sys_ioctl+0x12f/0x1b0
[  141.409322][    C0]  __x64_sys_ioctl+0x7b/0x90
[  141.413904][    C0]  x64_sys_call+0x58b/0x9a0
[  141.418404][    C0]  do_syscall_64+0x4c/0xa0
[  141.422807][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  141.428693][    C0] 
[  141.431006][    C0] Last potentially related work creation:
[  141.436722][    C0]  kasan_save_stack+0x3a/0x60
[  141.441402][    C0]  __kasan_record_aux_stack+0xb6/0xc0
[  141.446763][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[  141.452562][    C0]  insert_work+0x51/0x300
[  141.456883][    C0]  __queue_work+0x9d0/0xd50
[  141.461384][    C0]  queue_work_on+0xde/0x150
[  141.465883][    C0]  __hci_cmd_sync_sk+0xaa8/0xd80
[  141.470824][    C0]  hci_cmd_sync_status+0x53/0x120
[  141.475840][    C0]  hci_dev_cmd+0x642/0x740
[  141.480251][    C0]  hci_sock_ioctl+0x41e/0x7f0
[  141.484920][    C0]  sock_do_ioctl+0x114/0x330
[  141.489499][    C0]  sock_ioctl+0x475/0x700
[  141.493904][    C0]  __se_sys_ioctl+0x12f/0x1b0
[  141.498574][    C0]  __x64_sys_ioctl+0x7b/0x90
[  141.503152][    C0]  x64_sys_call+0x58b/0x9a0
[  141.507648][    C0]  do_syscall_64+0x4c/0xa0
[  141.512050][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  141.517937][    C0] 
[  141.520260][    C0] Second to last potentially related work creation:
[  141.526830][    C0]  kasan_save_stack+0x3a/0x60
[  141.531499][    C0]  __kasan_record_aux_stack+0xb6/0xc0
[  141.536863][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[  141.542673][    C0]  insert_work+0x51/0x300
[  141.546993][    C0]  __queue_work+0x9d0/0xd50
[  141.551489][    C0]  queue_work_on+0xde/0x150
[  141.555993][    C0]  hci_cmd_timeout+0x191/0x200
[  141.560748][    C0]  process_one_work+0x717/0xc30
[  141.565588][    C0]  worker_thread+0xa4d/0x11d0
[  141.570253][    C0]  kthread+0x281/0x320
[  141.574313][    C0]  ret_from_fork+0x1f/0x30
[  141.578720][    C0] 
[  141.581030][    C0] The buggy address belongs to the object at ffff888136408000
[  141.581030][    C0]  which belongs to the cache kmalloc-8k of size 8192
[  141.595066][    C0] The buggy address is located 2560 bytes inside of
[  141.595066][    C0]  8192-byte region [ffff888136408000, ffff88813640a000)
[  141.608500][    C0] 
[  141.610812][    C0] The buggy address belongs to the physical page:
[  141.617213][    C0] page:ffffea0004d90200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x136408
[  141.627463][    C0] head:ffffea0004d90200 order:3 compound_mapcount:0 compound_pincount:0
[  141.635875][    C0] flags: 0x4000000000010200(slab|head|zone=1)
[  141.641941][    C0] raw: 4000000000010200 ffffea00046f9200 dead000000000004 ffff888100043500
[  141.650510][    C0] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000
[  141.659075][    C0] page dumped because: kasan: bad access detected
[  141.665486][    C0] page_owner tracks the page as allocated
[  141.671183][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2670, tgid 2668 (syz.3.760), ts 115698963828, free_ts 115390448566
[  141.693832][    C0]  post_alloc_hook+0x1f5/0x210
[  141.698590][    C0]  prep_new_page+0x1c/0x110
[  141.703114][    C0]  get_page_from_freelist+0x2ca9/0x2d20
[  141.708687][    C0]  __alloc_pages+0x1fa/0x610
[  141.713381][    C0]  alloc_slab_page+0x6e/0xf0
[  141.717965][    C0]  new_slab+0x98/0x3e0
[  141.722027][    C0]  ___slab_alloc+0x70f/0xb70
[  141.726628][    C0]  __slab_alloc+0x5e/0xa0
[  141.730959][    C0]  __kmem_cache_alloc_node+0x204/0x2d0
[  141.736438][    C0]  __kmalloc_node+0xa2/0x1e0
[  141.741021][    C0]  kvmalloc_node+0x28a/0x460
[  141.745606][    C0]  kvm_dev_ioctl_get_cpuid+0x206/0x780
[  141.751071][    C0]  kvm_arch_dev_ioctl+0x3d3/0x890
[  141.756090][    C0]  kvm_dev_ioctl+0xd6/0x1200
[  141.760668][    C0]  __se_sys_ioctl+0x12f/0x1b0
[  141.765336][    C0]  __x64_sys_ioctl+0x7b/0x90
[  141.769932][    C0] page last free stack trace:
[  141.774589][    C0]  free_unref_page_prepare+0x81b/0x820
[  141.780044][    C0]  free_unref_page+0x93/0x530
[  141.784718][    C0]  __free_pages+0x67/0x100
[  141.789155][    C0]  __free_slab+0xc7/0x1a0
[  141.793472][    C0]  __unfreeze_partials+0x15a/0x190
[  141.798569][    C0]  put_cpu_partial+0xa9/0x100
[  141.803234][    C0]  __slab_free+0x1c4/0x280
[  141.807681][    C0]  ___cache_free+0xbf/0xd0
[  141.812088][    C0]  qlist_free_all+0xc6/0x140
[  141.816667][    C0]  kasan_quarantine_reduce+0x14a/0x170
[  141.822119][    C0]  __kasan_slab_alloc+0x24/0x80
[  141.826963][    C0]  slab_post_alloc_hook+0x4f/0x2d0
[  141.832074][    C0]  kmem_cache_alloc_node+0x179/0x330
[  141.837368][    C0]  __alloc_skb+0xe8/0x4a0
[  141.841704][    C0]  alloc_skb_with_frags+0xa8/0x620
[  141.846808][    C0]  sock_alloc_send_pskb+0x87f/0x9a0
[  141.851999][    C0] 
[  141.854312][    C0] Memory state around the buggy address:
[  141.859940][    C0]  ffff888136408900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.868022][    C0]  ffff888136408980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.876071][    C0] >ffff888136408a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.884146][    C0]                    ^
[  141.888199][    C0]  ffff888136408a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.896259][    C0]  ffff888136408b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.904303][    C0] ==================================================================
[  141.912349][    C0] Disabling lock debugging due to kernel taint
[  141.918569][    C1] sched: RT throttling activated
[  141.918600][    C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  141.935276][    C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  141.943717][    C0] CPU: 0 PID: 3209 Comm: syz.4.921 Tainted: G    B              syzkaller #0
[  141.952488][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  141.962546][    C0] RIP: 0010:__queue_work+0x582/0xd50
[  141.967848][    C0] Code: b4 00 00 00 e8 0f 5a 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 2d fa b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 f0 f4 6e 00 49 8b 3e e8 c8 f5 b9 03
[  141.987458][    C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046
[  141.993550][    C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888117ebe540
[  142.001534][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  142.009530][    C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: 00000000fffffffb
[  142.017648][    C0] R10: dffffc0000000000 R11: ffffed1026c81139 R12: ffff8881364089c8
[  142.025656][    C0] R13: ffff888132ec5800 R14: 0000000000000000 R15: 000000007fffffff
[  142.033645][    C0] FS:  00007f8d107966c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  142.042585][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  142.049180][    C0] CR2: 000020000023e030 CR3: 0000000118bbf000 CR4: 00000000003506b0
[  142.057949][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  142.065930][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  142.074693][    C0] Call Trace:
[  142.077982][    C0]  <IRQ>
[  142.080840][    C0]  delayed_work_timer_fn+0x61/0x80
[  142.085973][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  142.091797][    C0]  call_timer_fn+0x46/0x2a0
[  142.096317][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  142.102147][    C0]  __run_timers+0x672/0x9b0
[  142.106676][    C0]  ? calc_index+0x200/0x200
[  142.111200][    C0]  ? kvm_sched_clock_read+0x18/0x40
[  142.116417][    C0]  run_timer_softirq+0x6a/0xf0
[  142.121200][    C0]  handle_softirqs+0x1dd/0x5f0
[  142.125994][    C0]  __irq_exit_rcu+0x52/0xf0
[  142.130508][    C0]  irq_exit_rcu+0x9/0x10
[  142.134765][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  142.140415][    C0]  </IRQ>
[  142.143353][    C0]  <TASK>
[  142.146294][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  142.152304][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80
[  142.158736][    C0] Code: c0 db 0d 87 e8 2c fa b4 fc 4c 89 f7 48 83 3d b1 c8 0b 02 00 74 30 e8 9e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 06 84 4a fc 65 8b 05 97 5a 00 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[  142.178352][    C0] RSP: 0018:ffffc9000f8bf5c0 EFLAGS: 00000206
[  142.184433][    C0] RAX: 0000000000000001 RBX: 0000000000000a02 RCX: dffffc0000000000
[  142.192407][    C0] RDX: ffffc9000dcff678 RSI: 0000000000000a02 RDI: 0000000000000001
[  142.200382][    C0] RBP: ffffc9000f8bf5d0 R08: ffff88811b7d8007 R09: 1ffff110236fb000
[  142.208399][    C0] R10: dffffc0000000000 R11: ffffed10236fb001 R12: ffff888121699800
[  142.216393][    C0] R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000000
[  142.224415][    C0]  __wake_up_sync_key+0x17b/0x2b0
[  142.229455][    C0]  ? __cfi___wake_up_sync_key+0x10/0x10
[  142.235025][    C0]  ? __skb_try_recv_datagram+0x3dc/0x4d0
[  142.240674][    C0]  ? __cfi_sk_busy_loop_end+0x10/0x10
[  142.246071][    C0]  __unix_dgram_recvmsg+0x4b5/0xd90
[  142.251325][    C0]  ? __cfi___unix_dgram_recvmsg+0x10/0x10
[  142.257836][    C0]  ? exc_page_fault+0x5e/0xb0
[  142.262546][    C0]  unix_dgram_recvmsg+0xc7/0xe0
[  142.267412][    C0]  ? __cfi_unix_dgram_recvmsg+0x10/0x10
[  142.272972][    C0]  ____sys_recvmsg+0x2d6/0x5c0
[  142.277744][    C0]  ? __sys_recvmsg_sock+0x50/0x50
[  142.282780][    C0]  ? import_iovec+0x7c/0xb0
[  142.287308][    C0]  ___sys_recvmsg+0x210/0x590
[  142.292015][    C0]  ? __sys_recvmsg+0x290/0x290
[  142.296785][    C0]  ? cgroup_rstat_updated+0xf0/0x360
[  142.302085][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  142.308257][    C0]  ? do_recvmmsg+0x3ff/0x7e0
[  142.312848][    C0]  do_recvmmsg+0x370/0x7e0
[  142.317277][    C0]  ? __sys_recvmmsg+0x290/0x290
[  142.322138][    C0]  ? _raw_spin_lock_irq+0x95/0xf0
[  142.327178][    C0]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[  142.333093][    C0]  ? __set_current_blocked+0x208/0x230
[  142.338584][    C0]  ? __fget_files+0x2d1/0x330
[  142.343296][    C0]  __x64_sys_recvmmsg+0x195/0x250
[  142.348349][    C0]  ? __kasan_check_write+0x14/0x20
[  142.353474][    C0]  ? __cfi___x64_sys_recvmmsg+0x10/0x10
[  142.359030][    C0]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  142.365119][    C0]  x64_sys_call+0x3e7/0x9a0
[  142.369648][    C0]  do_syscall_64+0x4c/0xa0
[  142.374101][    C0]  ? clear_bhb_loop+0x30/0x80
[  142.378811][    C0]  ? clear_bhb_loop+0x30/0x80
[  142.383504][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  142.389421][    C0] RIP: 0033:0x7f8d0f99f559
[  142.393842][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.413458][    C0] RSP: 002b:00007f8d10796028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  142.421890][    C0] RAX: ffffffffffffffda RBX: 00007f8d0fc26090 RCX: 00007f8d0f99f559
[  142.429864][    C0] RDX: 0000000000010106 RSI: 0000200000000200 RDI: 0000000000000005
[  142.437838][    C0] RBP: 00007f8d0fa36b20 R08: 0000000000000000 R09: 0000000000000000
[  142.445820][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  142.453798][    C0] R13: 00007f8d0fc26128 R14: 00007f8d0fc26090 R15: 00007ffe05cef6f8
[  142.461781][    C0]  </TASK>
[  142.464836][    C0] Modules linked in:
[  142.468742][    C0] ---[ end trace 0000000000000000 ]---
[  142.474202][    C0] RIP: 0010:__queue_work+0x582/0xd50
[  142.479503][    C0] Code: b4 00 00 00 e8 0f 5a 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 2d fa b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 f0 f4 6e 00 49 8b 3e e8 c8 f5 b9 03
[  142.499111][    C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046
[  142.505182][    C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888117ebe540
[  142.513157][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  142.521133][    C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: 00000000fffffffb
[  142.529105][    C0] R10: dffffc0000000000 R11: ffffed1026c81139 R12: ffff8881364089c8
[  142.537081][    C0] R13: ffff888132ec5800 R14: 0000000000000000 R15: 000000007fffffff
[  142.545057][    C0] FS:  00007f8d107966c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  142.553991][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  142.560576][    C0] CR2: 000020000023e030 CR3: 0000000118bbf000 CR4: 00000000003506b0
[  142.568554][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  142.576546][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  142.584543][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[  142.592291][    C0] Kernel Offset: disabled
[  142.596616][    C0] Rebooting in 86400 seconds..