last executing test programs:

5.955128894s ago: executing program 3 (id=327):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x883e, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

5.533773085s ago: executing program 3 (id=329):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0", 0x2, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)={r1}, &(0x7f00000000c0)=0x8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d)
sendfile(r2, r3, 0x0, 0x1000004)
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0)

4.68453301s ago: executing program 3 (id=336):
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)

4.398607933s ago: executing program 3 (id=342):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0) (async)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fff0000)
ioctl$TCFLSH(r0, 0x400455c8, 0x8000000001) (async)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc1)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x6, 0x5}}, './file0\x00'})
ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x8140, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) (async)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) (async)
r6 = syz_io_uring_setup(0x37b3, &(0x7f0000000140)={0x0, 0x4d3b, 0x0, 0x1, 0x100}, 0x0, 0x0)
syz_io_uring_setup(0x5a55, &(0x7f00000000c0)={0x0, 0xf94b, 0x40, 0x3, 0x39a, 0x0, r6}, 0x0, 0x0) (async)
mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x8000000000000000, 0x20476, 0x4000000000000000, 0xfffffffffffffffc, 0x3, 0x0, 0xfefb}) (async)
fchown(r7, 0xee01, 0x0) (async)
read$nci(r5, &(0x7f0000001040)=""/110, 0x6e)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030a000000000700000000000002000100000000000000020d00000000030006000000000002004e21000000800000000000000000030005003200000002000000ac14140000000000000000001b37a4d87db1e0f34e6ffd7ccf14b6ec82c46bd7c856ae1418f2"], 0x50}, 0x1, 0x7}, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x34, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x34}}, 0x0) (async)
r10 = socket$isdn_base(0x22, 0x3, 0x0)
accept4(r10, 0x0, 0x0, 0x80800)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.684604637s ago: executing program 1 (id=358):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0)
mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0)

2.637377574s ago: executing program 1 (id=359):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000ec0)={0x14, &(0x7f0000000e00)={0x20, 0x21, 0x6d, {0x6d, 0x22, "8986717d918bfeb84df9a0d284ba915aa12de103859303123047f0b011ce8579915a93c1c148c4482804c22d6969fd2681ce5df0696dfdf96ed019814b1ae812e3089bf9751bd2189ffafb063556e2bb65fdc96530fde7d9955d9ef810f11ecfcb8b336951c4fee61c31af"}}, &(0x7f0000000000)=ANY=[@ANYBLOB="0003440300000001040008000000000000"]}, &(0x7f0000001100)={0x34, &(0x7f0000000f00)={0x20, 0x18, 0xd0, "51af9154ac759838591d0c5130075779923961df9696de5b12f10aeb49eba3b94357b83a5cdd8df291c603210393f24ad54156a8e64b88cc04562b77e327c6b086b66cc54d793a8a735b5f95d41104447023ce332694bb97668506ce111938b3cfc354a47962870db4e123a8969416f5d0356b267bda79e158c3f9df55dca2acd93970dfef84b89887f2caea714c1478c225564558573659d4334d15acd764e75d0f65fc9ba7c4435f1cc2e0042aeb2f5006335f4b6be30c50d32767070579241dbcce5ab4083045385cbfa9355ed6ab"}, &(0x7f0000001000)={0x0, 0xa, 0x1}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x8b}, &(0x7f0000001200)={0x20, 0x0, 0xf1, {0xef, "a406b083694e6ec51cceb7cc5a8c6535fe93a160487cb53deeb9f79d6c76e8c79b05e18e7551fcc98eb40372dbd6478ecf2302cb7e40c8c598b70039a69a90c3e68b3c4e2ffb94d946da7367f6b8526352fd70701f4cc385acfd2818e9f12afa81e3b6044dfe86244bd91a8f326c9daf7294a9fb3ac4659eda0f2125d04a2aefe81bee0fc1131a354fe39f881e5db18b6cc50491025d6cb2cddc56d773c92b00708c240248a536b6d7ce41c8ad76dae0b8183e9ffae66fc9a5aee182eb9faf954ce09e0e0c299f505a7889562c05ebc4668b5c07924a40aaf0a885e23c5f58a6823e1d7b8ea4e6d926e4f07de58a9f"}}, &(0x7f0000001080)={0x20, 0x1, 0x1, 0xf2}, &(0x7f00000010c0)={0x20, 0x0, 0x1, 0xfb}}) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async, rerun: 32)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x18}], 0x1}], 0x1, 0x0) (async)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x8, 0x1) (async, rerun: 64)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x13}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) (rerun: 64)
recvmsg(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) (async, rerun: 32)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r3 = syz_usb_connect$uac1(0x5, 0x11e, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10c, 0x3, 0x1, 0xa, 0xb0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x6}, [@feature_unit={0xf, 0x24, 0x6, 0x2, 0x4, 0x4, [0x4, 0x5, 0xa, 0xa], 0x4}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0xff, 0x7, "7278b5"}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x3, 0x6, [0x2, 0x2, 0x7, 0x5, 0x5, 0x4], 0x4}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0xc3, "74a2f2"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x300, 0x6, 0x1, 0xe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x4, 0x7}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0x9, 0x8, "", 'z'}, @as_header={0x7, 0x24, 0x1, 0x33, 0x1}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x0, 0x1, "97523ad4975b1284"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x11, 0x3, 0x60, 0x1, "f842"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0xb, 0x7f, 'L\n'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x0, 0x3, {0x7, 0x25, 0x1, 0x82, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0x2, 0xa5, "a495", 'z|'}, @as_header={0x7, 0x24, 0x1, 0x7, 0x1}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xb9, 0x7, 0xc4, "a08b"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x6, 0x25}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7aef, 0x9, 0x1, "178bdc9b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x5, 0x7, {0x7, 0x25, 0x1, 0x2, 0x69, 0xa}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x9, 0x4, 0x1, 0xff, 0x10}, 0x33, &(0x7f0000000480)=ANY=[@ANYBLOB="050f3300030b10019efc27630004000220100a05a5100000000007000000ff000f100b00000000000000000900000000000000"], 0x4, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x72, &(0x7f0000000580)=@string={0x72, 0x3, "0a71b1b9f70e55b13f553de80c1476a87bae984de74d423c9ce4ce397d32f196acf71f0fa1c2d91b04fe24c53f7ebb34f422d83809d4fb52f03d4a9f8f8044dd49739cc5be0bd4a599e7ae75b2a4af7f9cc4f7eba888aebd137f7c74016067ccde384c933da1bbf862d2d9fff4bf69ae"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x860}}, {0xe, &(0x7f0000000600)=@string={0xe, 0x3, "aa1be51d37c5ba91a37a77f4"}}]}) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close_range(r4, 0xffffffffffffffff, 0x0) (async)
syz_usb_control_io(r3, &(0x7f00000008c0)={0x2c, &(0x7f0000000780)={0x0, 0x5, 0x90, {0x90, 0x2, "7b67c7fbc8700e8e805b864e43784dcc1c3bd4454ebc5b974a2788d313b9326b37241bafbd284a3dc9ec3e12fe0ed7f452291bd153f293990262cab84709a52bf04db48a98923125b157cb28d3f37c60d14a2372e599871c7f0ed2433e32bb7eb36c2dd9f1f1a42316da4308f68e2078ab2a8a45972ad719d052653db5e33fbdcfd1dad9fd2c8754212d0d33d098"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, &(0x7f0000000700)={0x0, 0xf, 0x33, {0x5, 0xf, 0x33, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1d, "a1c85a265dc2af7116bec142d0ffceba"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "36f928f61f5b3745cb2d3d3b7b62063d"}, @ptm_cap={0x3}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x1, 0xfd, 0x8b, "cb18b0b0", "1e8180b9"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x8, 0x4, 0x1, 0x2}}}, &(0x7f0000000d40)={0x84, &(0x7f0000000900)={0x40, 0x10, 0x58, "1d0071e9a0b3b9031d70dd4239592e627c73162fc8162cdf2af13e089cc6ee8532c0738d4cc7fbbe290c7526674a7bcb68e23c1f91ad1f09a8906b7aaaaf089e431731ad295cb7991c39c654d0871d0b15981ffb44361441"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x2852158c6f87b516, 0x2}}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0xa7fa}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000b00)={0x40, 0xb, 0x2, "5882"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000c00)={0x40, 0x19, 0x2, '60'}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x6}}) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, &(0x7f0000000200)=0x20) (async, rerun: 32)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x300, 0x8000005, 0x590f, 0x9})
ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000002580)={{0x1, 0x100, 0x84, 0xc51, 0x3, 0x1}, 0x2ed, [0x8, 0x2, 0x2, 0xfc, 0x2, 0x4, 0x101, 0x4, 0x4, 0x2, 0x5, 0x101, 0xffffffff, 0x6000, 0x7, 0xfffff192, 0x7, 0x8, 0x8, 0x10000, 0x800, 0x4, 0x6165, 0x7fff, 0x3, 0x2, 0x7, 0x5, 0x5, 0x9, 0x5, 0x6, 0xfffffff7, 0x0, 0x11, 0x1, 0xfffff800, 0x4, 0xffff0000, 0x400, 0xfbc, 0x10001, 0x4, 0x4, 0xfffffff8, 0x100, 0x1, 0x0, 0xdb, 0x40, 0xf91, 0x6, 0xe, 0xfffffff9, 0xfffff800, 0x8, 0xd, 0x3, 0x9, 0xd0e6, 0x2, 0x3, 0x9, 0x1, 0x8, 0x1b, 0xd, 0x3, 0x4, 0x3, 0x8, 0x2, 0x5, 0x2, 0x8, 0x12a, 0x10, 0x4, 0x0, 0xc, 0x80000001, 0xbad3, 0x1, 0x5935, 0x5, 0x3, 0xe6f, 0xfffffffb, 0x32, 0x86a, 0x3ff, 0x7fffffff, 0x4, 0x9, 0x8, 0x7f, 0x7, 0xffff, 0x9e5, 0x9, 0x5, 0x10001, 0x51, 0x9, 0x7, 0x5, 0x0, 0x2, 0x6, 0x3a, 0x86, 0x4, 0x62, 0x0, 0x9, 0x4, 0x0, 0x40, 0x7, 0x8, 0x1, 0x100, 0x8, 0xffff279a, 0x1, 0x3, 0x800, 0x38d, 0x4, 0x3, 0x4, 0x400, 0xba, 0xf4b, 0x800, 0x5, 0x1, 0x7, 0x538, 0x1, 0xfffffff9, 0x6, 0x6, 0x101, 0xff, 0x0, 0xfff, 0x1, 0xe1fd, 0x10001, 0xffffffe6, 0x1, 0x2, 0x3, 0x1, 0x9, 0x1, 0x10001, 0x3bb35299, 0x1, 0x3, 0x5, 0x2, 0x7, 0x0, 0xfffffff8, 0x100, 0x8, 0x5, 0xea61, 0x3, 0x2, 0x3, 0x5, 0x8, 0x1, 0x3cc5, 0x5, 0x10000, 0x10000, 0x10001, 0xc76f, 0x8, 0x7fffffff, 0x7fffffff, 0x0, 0x80, 0x1, 0x7, 0x100, 0x0, 0x4, 0x5, 0x0, 0x7, 0xfff, 0xfffffffa, 0x7, 0x3, 0x1, 0x0, 0xfffffffe, 0x8001, 0x0, 0x5, 0x9, 0x80000001, 0x2, 0x2, 0x401, 0xffffff15, 0x2, 0x80000001, 0x7, 0x4, 0x5, 0xb, 0x7ff, 0x9, 0x4, 0x6, 0x5, 0x571, 0x6, 0x8, 0x9, 0x7, 0x7ff, 0xda, 0x3, 0x3ae, 0x46b, 0x101, 0x6287c68f, 0x4, 0x401, 0x40, 0x7fff, 0xb129, 0x5, 0x70, 0x3ff, 0xfffffff2, 0x2, 0xffff9161, 0x9, 0x9, 0xd8, 0x1, 0xf327, 0x4, 0xdf, 0x3, 0x9, 0xa54, 0x8, 0x3ff, 0x100, 0xfff, 0x6, 0x76be43d5, 0x9, 0x26c, 0x3, 0x3ff, 0x1, 0x101, 0x70ce, 0x2, 0xe27, 0x6, 0xccb, 0x2, 0x7, 0x77a, 0x8, 0x7f, 0x5, 0x22b, 0x3ff, 0x3ff, 0x8, 0x80, 0x80000001, 0x7, 0x3, 0x0, 0x5, 0x1, 0x7, 0x8, 0xfffffffe, 0x101, 0x10, 0x0, 0x0, 0x8, 0x4, 0x1c6, 0x1, 0x80, 0x5, 0x1, 0x1, 0x1, 0x8000, 0x3, 0xff5367b0, 0x5, 0xf, 0x7, 0x6, 0x3, 0xdea1, 0x7, 0x8, 0x9, 0x9, 0x571e9b67, 0x1, 0x80, 0x1, 0x5, 0xc, 0x1, 0x1, 0x7, 0xfff, 0x4, 0x8, 0x4, 0xffff3353, 0x10000, 0x5, 0x10001, 0x8, 0x7, 0xe6, 0xfffffff9, 0x4, 0xffffffff, 0x4, 0x2, 0x3, 0x6e, 0xa8ee, 0xffff, 0x6, 0x80000000, 0xfc27, 0x3, 0x9, 0x6, 0xc5b, 0x1, 0x3, 0x1, 0x2, 0x2, 0x5, 0x8, 0x5, 0x4, 0x5, 0x5, 0xe162, 0x8, 0x8001, 0x800, 0x3, 0x8, 0x5, 0xa0, 0x101, 0x5, 0x0, 0x100, 0x6, 0x8, 0x0, 0x3, 0x2, 0x6600, 0x5, 0xdb2, 0xec58, 0x3ff, 0x80000000, 0xffff81f6, 0xe, 0x9, 0x7265, 0x8, 0x100, 0x4, 0x7c, 0x1de9, 0x6, 0x4, 0xfffffffe, 0x1, 0x2, 0x1, 0xfffffff7, 0x2, 0xff, 0xf, 0x8, 0x9f, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x9, 0x63, 0x401, 0xc, 0x5, 0x9, 0x3, 0x5eea000, 0x3, 0x0, 0x5, 0x0, 0x200, 0x9e, 0x879, 0x1, 0xace, 0x80000001, 0x9, 0x8, 0x1, 0x6, 0x2, 0xc, 0xb, 0x8, 0x7ff, 0x0, 0x5, 0x4, 0x40, 0x7, 0x3, 0x0, 0x10, 0x3a, 0x9, 0x2, 0x2, 0x8000, 0xa, 0x9, 0x1, 0x3, 0x6, 0x3, 0xfffffffd, 0x800, 0x91, 0x7fff, 0x1, 0x25, 0xa988, 0x5f9, 0x2000200, 0x3, 0x200, 0x2, 0xf1, 0x9, 0x401, 0x0, 0x6, 0xfffffffd, 0x7, 0x401, 0x7, 0x8, 0x10, 0x4, 0x8001, 0x9, 0x0, 0x4, 0x98, 0x2, 0x7, 0x92, 0x8, 0x2, 0x7, 0xc, 0x80, 0x234, 0x8, 0x9, 0xc, 0x81, 0xfffffffb, 0x7, 0x4, 0x9, 0xc, 0x3, 0x3, 0x2, 0x80, 0x4, 0x9, 0x10001, 0x1, 0xb92f, 0x2, 0x6, 0x9, 0x200, 0x4, 0x2, 0x4aa7570d, 0x7, 0x5, 0x3, 0x10, 0x7, 0x85e8, 0x3, 0x7, 0x6, 0x14, 0x3, 0xffff, 0x70000000, 0x7fffffff, 0x1, 0xfffffffe, 0x1, 0x6, 0x5000, 0x3, 0x8, 0x6, 0x3, 0x4, 0x5, 0x0, 0x9, 0x200, 0x4, 0x81, 0x42, 0x3, 0xffff876d, 0x5, 0x9, 0x10000, 0xff, 0x5, 0x3, 0x1000, 0x80, 0xc4d, 0x6, 0x7, 0x1, 0x3e3c3083, 0x4a2, 0x80000001, 0x758, 0x4, 0x7, 0x8001, 0x1, 0x8, 0x3, 0x4, 0xf73d, 0x7, 0x9, 0x4, 0xfffff33c, 0x1, 0x6, 0xd, 0x5, 0x1, 0xf8d5, 0x4db9, 0x4, 0x1, 0x0, 0x1, 0x1ff, 0x2, 0x5, 0xb, 0x5f1, 0xfffffff7, 0x12, 0x7fffffff, 0x2, 0xff, 0x2, 0xfffffffd, 0xffff49f9, 0x7, 0x7140d5af, 0xffff18a3, 0x0, 0x0, 0x3d86, 0xf8, 0x4, 0x8001, 0x8001, 0xffffffff, 0xc04, 0x6, 0x3, 0x7f, 0xe2a, 0xffff0000, 0x96, 0x2, 0xa5, 0x9, 0x40, 0x8001, 0x4, 0x7, 0x0, 0xc192, 0x8e3, 0xfffff801, 0x32a21960, 0x4, 0x9, 0x6, 0x1, 0xd, 0x3, 0x8, 0xffffffff, 0xfff, 0xa16, 0x5, 0xfffffff4, 0x2, 0x200, 0xe, 0xe4d0, 0x1, 0x0, 0x8, 0x1, 0x71d1, 0xc, 0x80000001, 0x1, 0x7f, 0xb6, 0x4, 0x3590896e, 0xfff, 0x9, 0x3, 0x4, 0x6, 0x1, 0x10001, 0x0, 0x7, 0x1, 0x6, 0xffffffff, 0x8, 0x3, 0x58de, 0x20000, 0x2, 0xfffffff8, 0x5, 0x4, 0xc, 0x9, 0x845c, 0xffff0bbd, 0x2, 0x400, 0x7, 0xfffffff9, 0x1, 0x3, 0x2, 0x6, 0x5, 0x0, 0x1, 0x2, 0x10001, 0xffffffff, 0xf, 0x4, 0x8, 0x69, 0x8401, 0xfffffff5, 0xc0, 0x800, 0x283, 0x30000, 0xff, 0x9, 0x2, 0x9, 0x8, 0x6, 0x4, 0x6, 0x7, 0x5, 0xd, 0x9, 0xec0, 0x8, 0x3, 0x80, 0xfffffffc, 0x400, 0x4, 0x80000000, 0x3, 0x32fe28e2, 0xe2, 0x5, 0x80000001, 0x8, 0x8, 0x80e1, 0x2, 0x2, 0xfffffffa, 0x1, 0x1, 0x31f, 0xffff, 0xa, 0x100, 0xffff, 0x80, 0x8, 0x2, 0x4, 0x1583, 0x7, 0x3, 0x1, 0x0, 0x2, 0x1, 0x1, 0x32, 0x5, 0x5, 0xd4b9, 0x4, 0x8, 0x37, 0x4b3, 0xffff27a2, 0xbd4e, 0x7ff, 0x8001, 0x3, 0x5, 0x8, 0x3, 0xfffffff7, 0x5, 0xcb11, 0x6, 0x9, 0xdda, 0x0, 0x0, 0xffffffff, 0x3, 0x4, 0x1, 0x7, 0xfffffffb, 0x9, 0x3, 0x1, 0x10001, 0x4, 0x6, 0x4, 0x8, 0xe, 0x3, 0xfffffffa, 0x8000, 0x8, 0x6, 0x0, 0x1, 0x0, 0x7ff, 0x4, 0x81, 0x7fffffff, 0x8000, 0x9, 0x5, 0x6, 0x7ff, 0x1, 0x7, 0x1, 0x1, 0xffff, 0xab01, 0xc, 0x40, 0x8, 0x1, 0x8, 0x66a, 0x7ff, 0x1, 0x1, 0x2, 0x4, 0x0, 0x7, 0x7fff, 0x32ff4687, 0x757e, 0x7, 0x81, 0xe65c, 0x7, 0x4, 0x0, 0x8, 0x0, 0x7, 0x10, 0x3, 0x1000, 0x4, 0x0, 0x4, 0x2, 0x7fb5, 0x29, 0x2, 0x1, 0x81, 0xe, 0x8000, 0xffffffff, 0x6, 0x2, 0xd, 0x1, 0xcd9, 0x3, 0x400, 0x2, 0xa, 0xba, 0x3fc00000, 0x12, 0x4, 0x2, 0x800, 0x8f5, 0x0, 0xf, 0xddd3, 0x6, 0x3b0, 0x8, 0xce, 0x10000, 0x62, 0x3, 0x4, 0x0, 0xa, 0x8, 0x4, 0x5, 0x74ad, 0x0, 0xfff, 0xfffffff8, 0xe, 0x3ff, 0x6, 0xfffffff9, 0xd17, 0x9, 0x1, 0x0, 0x0, 0x100, 0x2, 0x1, 0x3, 0xfffffff0, 0x7, 0xffff, 0xffffff21, 0x3116, 0x1, 0xc, 0x0, 0x6, 0x3, 0x2, 0x8, 0x1, 0x1, 0x7, 0x0, 0x8, 0xfff, 0x7, 0x9, 0x3, 0x6, 0x0, 0x0, 0x3, 0x7, 0x1, 0x7, 0x4, 0x80, 0xff, 0x3, 0x9b, 0x8001, 0x0, 0x3, 0x7fffffff, 0x86, 0x3, 0x0, 0x3, 0x3, 0x0, 0x3, 0x0, 0x4, 0x0, 0x1ff, 0xea, 0x91eb, 0x6, 0x4, 0xf4, 0x3, 0x6, 0x2, 0x401, 0x3, 0xac1, 0x6, 0x0, 0xe, 0x1, 0x6f1, 0x9, 0x6, 0x6, 0x1, 0x1, 0x59e, 0xfb4, 0xfae, 0xb3a, 0x9, 0x5, 0x3, 0x80000000, 0x8, 0x200, 0x40, 0x1, 0xd, 0x7fffffff, 0x7, 0x7fffffff, 0x0, 0x10000, 0xffffffff, 0x4, 0x8, 0x3, 0x4d5a, 0x0, 0x9, 0x6, 0xffffffff, 0x2, 0x1, 0x9, 0x1ff, 0x5, 0x8, 0x4, 0x10001, 0x7, 0x1, 0x10001]})

2.432383587s ago: executing program 1 (id=362):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000980), 0xe)
listen(r1, 0x0) (async)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = dup2(r3, r2)
close_range(r4, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000020e000/0x2000)=nil, 0x4100, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x24600, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r5, 0x5000)

2.083965362s ago: executing program 3 (id=364):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002040))
syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x68)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000500)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xfffffffffffffffd, {0xfffffffffffffffd, 0x200, 0x0, {0x6, 0x0, 0x0, 0x5, 0x0, 0x2000000006, 0x200, 0xbaa4, 0x5, 0x8000, 0x0, r4, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=<r6=>0x0)
setreuid(r4, r6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r9 = socket$netlink(0x10, 0x3, 0x0)
writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1)
setsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000000)={'syzkaller0\x00', @random='\x00\x00\x00@\x00'})

1.848558692s ago: executing program 1 (id=367):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0)
fadvise64(r1, 0x65f, 0x2, 0x5)
mmap(&(0x7f0000634000/0x4000)=nil, 0x4000, 0x3000001, 0x50, r1, 0x45809000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x204200, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0x10})
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x80)
mlock(&(0x7f00002a3000/0x3000)=nil, 0x3000)

1.704516887s ago: executing program 1 (id=368):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x883e, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

1.683153422s ago: executing program 3 (id=369):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0)
syz_usb_connect(0x5, 0x107, &(0x7f0000000b80)={{0x12, 0x1, 0x110, 0xe5, 0xd1, 0xfe, 0xff, 0x5c6, 0x9010, 0x3c0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf5, 0x1, 0x1, 0x0, 0x30, 0x81, [{{0x9, 0x4, 0x5, 0x1, 0x2, 0x43, 0x73, 0x91, 0x2, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "ce08"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x40, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0xde}, @dmm={0x7, 0x24, 0x14, 0xf, 0x81}]}], [{{0x9, 0x5, 0x80, 0x10, 0x8, 0x2, 0x81, 0x6, [@generic={0x81, 0x3, "055caebf40b574d31b8c9b2e32188c7a1ee2304a8c04374224d8cf18e11b6825ee52353ff08d1df67baa35c4e0e0431baf7fef22dad53579593b699edb1e010e700e0877a747959b38b3c27c6f04d24478634cc4c2d9d834b3c8a0755508bae20d0fcbb4aa8a96b8620049a59a5b28db13d41def38a2a2a199c6ece5169584"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x9, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x8000}, @generic={0x14, 0x2, "564f4da5484cb0f21bc98464ac1f3cd0ab4f"}]}}]}}]}}]}}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

1.641143919s ago: executing program 2 (id=370):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
poll(&(0x7f0000000080)=[{r2}], 0x1, 0xc)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, 0x0)
dup(0xffffffffffffffff)
r3 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)
shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

1.557193423s ago: executing program 0 (id=371):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)

1.415766802s ago: executing program 1 (id=372):
ioprio_set$pid(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x20001, 0x0, [0x4, 0x3, 0x26c36db8, 0x1, 0x2, 0x7fff, 0x7f, 0xdc]})
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x269, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0xaf, 0x2, 0x3, 0x1, 0x49e3b9d0eed6083c, 0x5, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0x70f}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x80, 0x9, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xb, 0xf, 0xb}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x9, 0x80, 0xfb, 0x8, 0x3}, 0x29, &(0x7f00000000c0)={0x5, 0xf, 0x29, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x8, 0x40}, @wireless={0xb, 0x10, 0x1, 0x8, 0x60, 0x5, 0x0, 0x8, 0xa}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc, 0xd, 0x8, 0x4, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x6, 0xfffd}]}, 0x9, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40c}}, {0xe7, &(0x7f00000001c0)=@string={0xe7, 0x3, "48f816ad7ea4e36bbb965e5f9a196236d2638e409c7c9f19623abd96ac220f7d44236fd9f8c01af40a70b786ab10b79640992953cff176be4757845d7b8e29aa239eedb6f1e857a28a36499a3d9ba41d9e0e0303d49e2b2b8c650ffd246e3acb592609541bc914bb2d670340b0f639f63a1dbe79429034b8fc8b3633dd8b6c545f8f7736f934d532ed69dc6707df7e3a4f6673fc252a52e8ddb44c604f08fbfb36fa92fc56379978dc6d86640501cbd355dc9342f7f8a206cd0b948973a286cc1307ec8de9f48373662fb20bf8c805f5e4b04aebd376ba40df700b35f95c9955213d56002a"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x455}}, {0x9b, &(0x7f0000000700)=@string={0x9b, 0x3, "31b7198b499b848401c58b5b79a82be757aa5af747c79343982a2d8b36ab32ad253da13a2726ee1aece946b4b7039cb4e935e065d9de745d52d72dcccc55ea2fbbcdcd245ed36228fa766cdcb6800f85378f9bfbbc221c07c10ba06169854c6a050102980b1f1d1c736c1c564347a6fa1ebb1dcd2348650c9749023a0a1d46347ab640c76c58b47c4f2b2d1cff5ea0de6bf29d622ef2cae3a4"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x480a}}, {0xe9, &(0x7f0000000400)=@string={0xe9, 0x3, "a4e92ce3fc8a9049788ef1daf261cbdd27b99394d074ac97da833e587dcf883b2a8783a42d83c9ce268422c5b2c49c5fb88ad6cce2e632eeadb420fe190fae842bd7ebbe20faaed6810f06f5d92b7864bc58adfbae4b13f62f0ff1566c6ceddeeef8c334c478c266561c25dc20a3fa3c5a338a639918cac17444e5949bee171f62846513f6bc8eea5adf1ee822a96f8b23868f48817f67bbf3b70fba89367992c20db440d7efd36925aee909655cab9a908b34f5ee0260c0adb16baf95238b11f27a9d8829408778bab64295631baf803cef8bd8b3d2cbb66fa67e795eadfbb94ac261c74754df"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x439}}, {0x74, &(0x7f0000000680)=@string={0x74, 0x3, "0db7f4e07895466d54a5b1123a29ad8d87cb1a2923e3cf6ea9fc8cb6431588719fa14bdcc86822ef7bb9b31a4524cee41d4f977e8624a3043f43b00c30c47ac45f7a5ce2713ddfefed42d25719190f7a1a097f8d9045a7b80009d927fc61b6b50049565c4d2c9e8e0f408ab0fbab63e92a0a"}}]})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioprio_get$pid(0x3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x80a80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000)
r4 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x8, 0x0, &(0x7f0000000180)=0x17)

1.375969916s ago: executing program 0 (id=373):
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x900)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.324657849s ago: executing program 2 (id=374):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000956000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="f30fc7b08e00660f388007f00fc15500790966b8f17f00000f23d00f21f866350000000b0f23f8440f20c066350b000000440f22c00f0966b8010000000f01c16766c74424009c0000006766c7442402060000006766c744240600000000670f011c240f01c4", 0x66}], 0x1, 0x2, &(0x7f0000019200)=[@efer={0x2, 0x2000}, @cstype0={0x4, 0x3}], 0x2)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a)

1.244531373s ago: executing program 0 (id=375):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
getpid()
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_SETINTERFACE(r2, 0x41045508, &(0x7f0000000080))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r3)
sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x410)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020)
r6 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300)
read$FUSE(r6, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020)
syz_pidfd_open(r7, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002040))
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r8, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000002880)=0x1, 0x4)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000000)={'syzkaller0\x00', @random="e80300"})

822.587881ms ago: executing program 2 (id=376):
creat(&(0x7f0000001380)='./file0\x00', 0x80)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x80) (async)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) (async)

709.490844ms ago: executing program 2 (id=377):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002040))
syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x68)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000500)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xfffffffffffffffd, {0xfffffffffffffffd, 0x200, 0x0, {0x6, 0x0, 0x0, 0x5, 0x0, 0x2000000006, 0x200, 0xbaa4, 0x5, 0x8000, 0x0, r4, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=<r6=>0x0)
setreuid(r4, r6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r9 = socket$netlink(0x10, 0x3, 0x0)
writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1)
setsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000000)={'syzkaller0\x00', @random='\x00\x00\x00@\x00'})

436.553079ms ago: executing program 0 (id=378):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000002480)={0x8, {"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", 0x1000}}, 0x101a)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100000000000000000000000000000000002200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}})

259.884873ms ago: executing program 2 (id=379):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002040))
syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x68)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000500)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xfffffffffffffffd, {0xfffffffffffffffd, 0x200, 0x0, {0x6, 0x0, 0x0, 0x5, 0x0, 0x2000000006, 0x200, 0xbaa4, 0x5, 0x8000, 0x0, r5, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=<r7=>0x0)
setreuid(r5, r7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0)
r8 = socket$inet(0x2, 0x2, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r10 = socket$netlink(0x10, 0x3, 0x0)
writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1)
setsockopt$inet_mreqsrc(r8, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

257.623362ms ago: executing program 0 (id=380):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000080)={@val={0x8, 0xf7}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x5c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "a98313ba90c97a1af46238ac79c8bdf7a158357f1c7f34ee", "b2af68feed78eb160685c16126466571c3b82646e4d8257645d67249f5825468"}}}}, 0x6a)

3.964602ms ago: executing program 2 (id=381):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x3, 0x800}, @val={0x2, 0x0, 0x0, 0x4, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xc0, 0x13ff, 0x0, 0x7f, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x3, 0xb, 0x0, 0x0, 0x9a, 0x8, {0x27, 0x4, 0x1, 0x38, 0x8, 0x67, 0x2, 0x8, 0x5c, 0x800, @rand_addr=0x64010102, @loopback, {[@noop, @generic={0x18, 0xb, "ba78943df14f3bd4bc"}, @timestamp_prespec={0x44, 0x14, 0x77, 0x3, 0x4, [{@local, 0x8}, {@multicast2, 0x3}]}, @rr={0x7, 0xf, 0xb0, [@remote, @empty, @loopback]}, @ssrr={0x89, 0xb, 0x29, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3c}]}, @end, @timestamp_prespec={0x44, 0x4c, 0x8c, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x81}, {@loopback, 0x7}, {@multicast2, 0xfffffff2}, {@multicast1, 0x7}, {@broadcast, 0x8}, {@multicast2, 0x4b}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x9}, {@loopback}, {@multicast1, 0x9}]}, @end]}}, "709eff8c6dbee139"}}}, 0xce)

0s ago: executing program 0 (id=382):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
shutdown(r0, 0x1) (fail_nth: 1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts.
[   63.194878][ T5820] cgroup: Unknown subsys name 'net'
[   63.306052][ T5820] cgroup: Unknown subsys name 'cpuset'
[   63.314400][ T5820] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   64.675641][ T5820] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.244576][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.252160][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.260776][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.268978][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.278437][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.286374][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.297658][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   68.308910][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.317144][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   68.322812][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.331876][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.339200][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.339275][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   68.340326][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.361437][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.364117][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.376859][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.384637][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.389633][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   68.399948][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   68.688445][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   68.928536][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.936412][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.943848][ T5829] bridge_slave_0: entered allmulticast mode
[   68.950781][ T5829] bridge_slave_0: entered promiscuous mode
[   68.983867][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.990988][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.008333][ T5829] bridge_slave_1: entered allmulticast mode
[   69.015377][ T5829] bridge_slave_1: entered promiscuous mode
[   69.038038][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   69.100369][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   69.146266][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.160402][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.213493][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   69.262536][ T5829] team0: Port device team_slave_0 added
[   69.300135][ T5829] team0: Port device team_slave_1 added
[   69.365383][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.372524][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.380122][ T5831] bridge_slave_0: entered allmulticast mode
[   69.387294][ T5831] bridge_slave_0: entered promiscuous mode
[   69.410087][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.417143][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.443277][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.455834][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.463057][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.470168][ T5831] bridge_slave_1: entered allmulticast mode
[   69.477177][ T5831] bridge_slave_1: entered promiscuous mode
[   69.494182][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.501301][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.508732][ T5832] bridge_slave_0: entered allmulticast mode
[   69.515681][ T5832] bridge_slave_0: entered promiscuous mode
[   69.524312][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.531440][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.538754][ T5832] bridge_slave_1: entered allmulticast mode
[   69.546666][ T5832] bridge_slave_1: entered promiscuous mode
[   69.564848][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.571785][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.598068][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.656968][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.669519][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.690894][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.698372][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.705967][ T5830] bridge_slave_0: entered allmulticast mode
[   69.712984][ T5830] bridge_slave_0: entered promiscuous mode
[   69.721057][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.728878][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.736048][ T5830] bridge_slave_1: entered allmulticast mode
[   69.743257][ T5830] bridge_slave_1: entered promiscuous mode
[   69.761130][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.803880][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.854514][ T5831] team0: Port device team_slave_0 added
[   69.890862][ T5829] hsr_slave_0: entered promiscuous mode
[   69.897157][ T5829] hsr_slave_1: entered promiscuous mode
[   69.906106][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.918543][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.928820][ T5831] team0: Port device team_slave_1 added
[   69.950971][ T5832] team0: Port device team_slave_0 added
[   69.981755][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.990504][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.016879][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.029379][ T5832] team0: Port device team_slave_1 added
[   70.062063][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.069066][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.095496][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.130537][ T5830] team0: Port device team_slave_0 added
[   70.146487][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.153988][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.180240][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.226304][ T5830] team0: Port device team_slave_1 added
[   70.232842][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.239759][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.266443][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.327004][ T5831] hsr_slave_0: entered promiscuous mode
[   70.333698][ T5836] Bluetooth: hci0: command tx timeout
[   70.334179][ T5831] hsr_slave_1: entered promiscuous mode
[   70.345953][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   70.351727][ T5831] Cannot create hsr debugfs directory
[   70.399285][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.407956][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.434262][ T5836] Bluetooth: hci1: command tx timeout
[   70.440477][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.492935][ T5836] Bluetooth: hci2: command tx timeout
[   70.500869][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.508192][ T5836] Bluetooth: hci3: command tx timeout
[   70.511885][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.540036][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.570695][ T5832] hsr_slave_0: entered promiscuous mode
[   70.577008][ T5832] hsr_slave_1: entered promiscuous mode
[   70.583656][ T5832] debugfs: 'hsr0' already exists in 'hsr'
[   70.589379][ T5832] Cannot create hsr debugfs directory
[   70.715906][ T5830] hsr_slave_0: entered promiscuous mode
[   70.722535][ T5830] hsr_slave_1: entered promiscuous mode
[   70.728537][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   70.734728][ T5830] Cannot create hsr debugfs directory
[   70.919462][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.959673][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.977399][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.010987][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.074654][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.094139][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   71.119744][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   71.130455][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   71.216170][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.253220][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.281079][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.300858][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[   71.307669][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[   71.323614][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.348799][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.375054][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.385658][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.396793][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.415627][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.461561][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   71.485530][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.515731][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.523056][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.578224][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   71.587474][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.594632][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.616761][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.623897][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.670462][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.677554][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.754776][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.767402][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.808271][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   71.844645][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.851794][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.886492][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   71.946133][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.953291][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.966259][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.973406][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.989171][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.996320][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.199210][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.266856][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.343774][ T5829] veth0_vlan: entered promiscuous mode
[   72.398901][ T5829] veth1_vlan: entered promiscuous mode
[   72.414642][ T5836] Bluetooth: hci0: command tx timeout
[   72.431750][ T5831] veth0_vlan: entered promiscuous mode
[   72.461035][ T5831] veth1_vlan: entered promiscuous mode
[   72.492902][ T5836] Bluetooth: hci1: command tx timeout
[   72.538510][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.561646][ T5829] veth0_macvtap: entered promiscuous mode
[   72.573680][ T5836] Bluetooth: hci3: command tx timeout
[   72.576551][ T5845] Bluetooth: hci2: command tx timeout
[   72.590140][ T5829] veth1_macvtap: entered promiscuous mode
[   72.624125][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.641227][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.657586][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.669776][ T5831] veth0_macvtap: entered promiscuous mode
[   72.699182][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.709379][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.724068][ T5831] veth1_macvtap: entered promiscuous mode
[   72.732487][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.743180][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.787118][ T5830] veth0_vlan: entered promiscuous mode
[   72.819519][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.829116][ T5830] veth1_vlan: entered promiscuous mode
[   72.846526][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.889651][  T802] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.917323][ T5832] veth0_vlan: entered promiscuous mode
[   72.934230][  T802] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.959802][  T802] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.969261][  T802] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.982299][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.987841][ T5832] veth1_vlan: entered promiscuous mode
[   72.995858][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.084473][  T802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.092307][  T802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.097321][ T5830] veth0_macvtap: entered promiscuous mode
[   73.120869][ T5830] veth1_macvtap: entered promiscuous mode
[   73.129447][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.146497][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.178765][ T5832] veth0_macvtap: entered promiscuous mode
[   73.204108][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.221902][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   73.237818][ T5832] veth1_macvtap: entered promiscuous mode
[   73.260904][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.271923][  T802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.282081][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.291162][  T802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.315087][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.350995][  T802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.371653][  T802] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.401278][  T802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.423076][  T802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.462015][ T5918] netlink: 'syz.2.3': attribute type 4 has an invalid length.
[   73.463156][ T5845] Bluetooth: Unknown BR/EDR signaling command 0x0d
[   73.476366][ T5845] Bluetooth: Wrong link type (-22)
[   73.481675][ T5845] Bluetooth: Unknown BR/EDR signaling command 0x10
[   73.488342][ T5845] Bluetooth: Wrong link type (-22)
[   73.499605][  T802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.509739][  T802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.520343][ T5921] netlink: 'syz.2.3': attribute type 4 has an invalid length.
[   73.545247][  T802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.566708][  T802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.633960][ T5918] syzkaller0: refused to change device tx_queue_len
[   73.741491][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.763698][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.923699][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.942848][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.982699][  T802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.990528][  T802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.126305][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.148385][ T5930] fuseblk: Bad value for 'rootmode'
[   74.153417][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.370252][ T5941] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET)
[   74.401355][ T5941] syzkaller1: entered promiscuous mode
[   74.418684][ T5941] syzkaller1: entered allmulticast mode
[   74.461552][ T5943] syzkaller1: entered promiscuous mode
[   74.489298][ T5943] syzkaller1: entered allmulticast mode
[   74.495147][ T5845] Bluetooth: hci0: command tx timeout
[   74.582698][ T5845] Bluetooth: hci1: command tx timeout
[   74.653029][ T5845] Bluetooth: hci2: command tx timeout
[   74.662675][ T5845] Bluetooth: hci3: command tx timeout
[   74.730676][ T5947] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure
[   74.761282][ T5952] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10'.
[   74.773208][ T5950] syzkaller0: refused to change device tx_queue_len
[   74.969719][ T5958] loop8: detected capacity change from 0 to 7
[   75.003229][ T5958] Dev loop8: unable to read RDB block 7
[   75.009427][ T5956] syzkaller1: entered promiscuous mode
[   75.022102][ T5958]  loop8: unable to read partition table
[   75.029041][ T5956] syzkaller1: entered allmulticast mode
[   75.034197][ T5958] loop8: partition table beyond EOD, truncated
[   75.052764][ T5958] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[   75.091479][ T5956] syzkaller1: left promiscuous mode
[   75.098242][ T5956] syzkaller1: left allmulticast mode
[   75.522106][ T5975] syzkaller1: entered promiscuous mode
[   75.538552][ T5975] syzkaller1: entered allmulticast mode
[   75.629686][ T5845] Bluetooth: Unknown BR/EDR signaling command 0x0d
[   75.631454][ T5980] netlink: 'syz.3.19': attribute type 4 has an invalid length.
[   75.642659][ T5845] Bluetooth: Wrong link type (-22)
[   75.649257][ T5845] Bluetooth: Unknown BR/EDR signaling command 0x10
[   75.657066][ T5845] Bluetooth: Wrong link type (-22)
[   75.681466][ T5980] netlink: 'syz.3.19': attribute type 4 has an invalid length.
[   75.685645][ T5983] syzkaller1: entered promiscuous mode
[   75.695643][ T5983] syzkaller1: entered allmulticast mode
[   75.761653][ T5980] syzkaller0: refused to change device tx_queue_len
[   75.822496][ T5985] netlink: 44 bytes leftover after parsing attributes in process `syz.2.22'.
[   75.894395][ T5989] loop8: detected capacity change from 0 to 7
[   75.902294][ T5989] Dev loop8: unable to read RDB block 7
[   75.909290][ T5989]  loop8: unable to read partition table
[   75.915700][ T5989] loop8: partition table beyond EOD, truncated
[   75.922808][ T5989] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[   76.195644][ T6000] /dev/rnullb0: Can't open blockdev
[   76.572981][ T5845] Bluetooth: hci0: command tx timeout
[   76.632884][ T5879] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   76.653040][ T5845] Bluetooth: hci1: command tx timeout
[   76.723737][ T6013] syzkaller1: entered promiscuous mode
[   76.729217][ T6013] syzkaller1: entered allmulticast mode
[   76.734989][ T5845] Bluetooth: hci3: command tx timeout
[   76.735037][ T5845] Bluetooth: hci2: command tx timeout
[   76.808102][ T5879] usb 1-1: config 1 has an invalid interface number: 6 but max is 2
[   76.832716][ T5879] usb 1-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config
[   76.851462][ T5879] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   76.873849][ T5879] usb 1-1: config 1 has no interface number 1
[   76.883281][ T5836] Bluetooth: Unknown BR/EDR signaling command 0x0d
[   76.889327][ T5879] usb 1-1: config 1 interface 6 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   76.890147][ T5836] Bluetooth: Wrong link type (-22)
[   76.906628][ T5879] usb 1-1: config 1 interface 6 has no altsetting 0
[   76.909648][ T5836] Bluetooth: Unknown BR/EDR signaling command 0x10
[   76.919582][ T5879] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   76.921945][ T5836] Bluetooth: Wrong link type (-22)
[   76.936237][ T6018] netlink: 'syz.3.34': attribute type 4 has an invalid length.
[   76.943962][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.951963][ T5879] usb 1-1: Product: Ч
[   76.962111][ T5879] usb 1-1: Manufacturer: 쟒䧎꟮懾僡䵶❢꤫⡥坜뵦趪퐭䔌铓ț応⦱嶌云
[   76.981375][ T6020] syzkaller1: entered promiscuous mode
[   76.989653][ T6020] syzkaller1: entered allmulticast mode
[   76.992740][ T6018] netlink: 'syz.3.34': attribute type 4 has an invalid length.
[   77.000048][ T5879] usb 1-1: SerialNumber: syz
[   77.028241][ T6018] syzkaller0: refused to change device tx_queue_len
[   77.206548][ T6025] netlink: 44 bytes leftover after parsing attributes in process `syz.3.37'.
[   77.221795][ T6023] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   77.382698][ T6027] hfs: unable to load iocharset "io#harset"
[   77.440630][ T6002] Mount JFS Failure: -22
[   77.449379][ T5879] usb 1-1: 0:2 : does not exist
[   77.477703][ T6029] hfs: unable to load iocharset "io#harset"
[   77.493881][ T5879] usb 1-1: USB disconnect, device number 2
[   77.642700][ T5924] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   77.731493][ T6036] FAULT_INJECTION: forcing a failure.
[   77.731493][ T6036] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   77.752658][ T6036] CPU: 1 UID: 0 PID: 6036 Comm: syz.2.39 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[   77.752680][ T6036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   77.752696][ T6036] Call Trace:
[   77.752703][ T6036]  <TASK>
[   77.752709][ T6036]  dump_stack_lvl+0x189/0x250
[   77.752735][ T6036]  ? __pfx____ratelimit+0x10/0x10
[   77.752757][ T6036]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.752775][ T6036]  ? __pfx__printk+0x10/0x10
[   77.752806][ T6036]  should_fail_ex+0x414/0x560
[   77.752835][ T6036]  _copy_to_user+0x31/0xb0
[   77.752853][ T6036]  simple_read_from_buffer+0xe1/0x170
[   77.752880][ T6036]  proc_fail_nth_read+0x1df/0x250
[   77.752899][ T6036]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   77.752919][ T6036]  ? rw_verify_area+0x258/0x650
[   77.752937][ T6036]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   77.752954][ T6036]  vfs_read+0x200/0x980
[   77.752976][ T6036]  ? __pfx___mutex_lock+0x10/0x10
[   77.752996][ T6036]  ? __pfx_vfs_read+0x10/0x10
[   77.753015][ T6036]  ? __fget_files+0x2a/0x420
[   77.753041][ T6036]  ? __fget_files+0x3a0/0x420
[   77.753060][ T6036]  ? __fget_files+0x2a/0x420
[   77.753096][ T6036]  ksys_read+0x145/0x250
[   77.753118][ T6036]  ? __pfx_ksys_read+0x10/0x10
[   77.753134][ T6036]  ? rcu_is_watching+0x15/0xb0
[   77.753156][ T6036]  ? do_syscall_64+0xbe/0x3b0
[   77.753180][ T6036]  do_syscall_64+0xfa/0x3b0
[   77.753200][ T6036]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.753219][ T6036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.753235][ T6036]  ? clear_bhb_loop+0x60/0xb0
[   77.753255][ T6036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.753271][ T6036] RIP: 0033:0x7fafe558d33c
[   77.753289][ T6036] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   77.753302][ T6036] RSP: 002b:00007fafe64a0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   77.753320][ T6036] RAX: ffffffffffffffda RBX: 00007fafe57b5fa0 RCX: 00007fafe558d33c
[   77.753332][ T6036] RDX: 000000000000000f RSI: 00007fafe64a00a0 RDI: 0000000000000004
[   77.753342][ T6036] RBP: 00007fafe64a0090 R08: 0000000000000000 R09: 0000000000000000
[   77.753350][ T6036] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002
[   77.753358][ T6036] R13: 0000000000000000 R14: 00007fafe57b5fa0 R15: 00007ffc4ede2c08
[   77.753383][ T6036]  </TASK>
[   78.068480][ T5924] usb 4-1: Using ep0 maxpacket: 8
[   78.076080][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   78.087256][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[   78.099115][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   78.108973][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   78.126593][ T5924] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[   78.135663][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.143717][ T5924] usb 4-1: Product: syz
[   78.147876][ T5924] usb 4-1: Manufacturer: syz
[   78.152468][ T5924] usb 4-1: SerialNumber: syz
[   78.160832][ T5924] usb 4-1: config 0 descriptor??
[   78.179820][ T5924] imon:imon_find_endpoints: no valid input (IR) endpoint found
[   78.180018][ T6041] loop8: detected capacity change from 0 to 7
[   78.189399][ T5924] imon 4-1:0.0: unable to initialize intf0, err -19
[   78.200375][ T5924] imon:imon_probe: failed to initialize context!
[   78.207597][ T5924] imon 4-1:0.0: unable to register, err -19
[   78.229081][ T5842] Dev loop8: unable to read RDB block 7
[   78.239879][ T5842]  loop8: unable to read partition table
[   78.246622][ T5842] loop8: partition table beyond EOD, truncated
[   78.257522][ T6041] Dev loop8: unable to read RDB block 7
[   78.272881][ T6041]  loop8: unable to read partition table
[   78.278713][ T6041] loop8: partition table beyond EOD, truncated
[   78.285135][ T6041] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[   78.397399][ T5879] usb 4-1: USB disconnect, device number 2
[   78.670590][ T6052] syzkaller1: entered promiscuous mode
[   78.682528][ T6052] syzkaller1: entered allmulticast mode
[   78.730181][ T5836] Bluetooth: Unknown BR/EDR signaling command 0x0d
[   78.738354][ T5836] Bluetooth: Wrong link type (-22)
[   78.743731][ T5836] Bluetooth: Unknown BR/EDR signaling command 0x10
[   78.750240][ T5836] Bluetooth: Wrong link type (-22)
[   78.756745][ T6054] netlink: 'syz.0.46': attribute type 4 has an invalid length.
[   78.771037][ T6054] netlink: 'syz.0.46': attribute type 4 has an invalid length.
[   78.802033][ T6054] syzkaller0: refused to change device tx_queue_len
[   79.189947][ T6064] FAULT_INJECTION: forcing a failure.
[   79.189947][ T6064] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   79.223895][ T6064] CPU: 1 UID: 0 PID: 6064 Comm: syz.3.53 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[   79.223918][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   79.223928][ T6064] Call Trace:
[   79.223935][ T6064]  <TASK>
[   79.223942][ T6064]  dump_stack_lvl+0x189/0x250
[   79.223964][ T6064]  ? __pfx____ratelimit+0x10/0x10
[   79.223984][ T6064]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.224000][ T6064]  ? __pfx__printk+0x10/0x10
[   79.224030][ T6064]  should_fail_ex+0x414/0x560
[   79.224058][ T6064]  _copy_to_user+0x31/0xb0
[   79.224077][ T6064]  simple_read_from_buffer+0xe1/0x170
[   79.224104][ T6064]  proc_fail_nth_read+0x1df/0x250
[   79.224123][ T6064]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   79.224142][ T6064]  ? rw_verify_area+0x258/0x650
[   79.224158][ T6064]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   79.224175][ T6064]  vfs_read+0x200/0x980
[   79.224198][ T6064]  ? __pfx___mutex_lock+0x10/0x10
[   79.224220][ T6064]  ? __pfx_vfs_read+0x10/0x10
[   79.224239][ T6064]  ? __fget_files+0x2a/0x420
[   79.224265][ T6064]  ? __fget_files+0x3a0/0x420
[   79.224283][ T6064]  ? __fget_files+0x2a/0x420
[   79.224312][ T6064]  ksys_read+0x145/0x250
[   79.224333][ T6064]  ? __pfx_ksys_read+0x10/0x10
[   79.224348][ T6064]  ? rcu_is_watching+0x15/0xb0
[   79.224369][ T6064]  ? do_syscall_64+0xbe/0x3b0
[   79.224392][ T6064]  do_syscall_64+0xfa/0x3b0
[   79.224409][ T6064]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.224427][ T6064]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.224441][ T6064]  ? clear_bhb_loop+0x60/0xb0
[   79.224459][ T6064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.224474][ T6064] RIP: 0033:0x7f1c6b18d33c
[   79.224487][ T6064] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   79.224500][ T6064] RSP: 002b:00007f1c6bf83030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   79.224517][ T6064] RAX: ffffffffffffffda RBX: 00007f1c6b3b5fa0 RCX: 00007f1c6b18d33c
[   79.224528][ T6064] RDX: 000000000000000f RSI: 00007f1c6bf830a0 RDI: 0000000000000004
[   79.224539][ T6064] RBP: 00007f1c6bf83090 R08: 0000000000000000 R09: 0000000000000000
[   79.224549][ T6064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   79.224558][ T6064] R13: 0000000000000000 R14: 00007f1c6b3b5fa0 R15: 00007ffce56144f8
[   79.224587][ T6064]  </TASK>
[   79.581509][ T6073] syzkaller0: refused to change device tx_queue_len
[   79.758107][ T5836] Bluetooth: Unknown BR/EDR signaling command 0x0d
[   79.764782][ T5836] Bluetooth: Wrong link type (-22)
[   79.769995][ T5836] Bluetooth: Unknown BR/EDR signaling command 0x10
[   79.777412][ T6079] syzkaller1: entered promiscuous mode
[   79.777430][ T6079] syzkaller1: entered allmulticast mode
[   79.788111][ T6077] netlink: 'syz.1.58': attribute type 4 has an invalid length.
[   79.788923][ T5836] Bluetooth: Wrong link type (-22)
[   79.839973][ T6077] netlink: 'syz.1.58': attribute type 4 has an invalid length.
[   79.857589][ T6077] syzkaller0: refused to change device tx_queue_len
[   79.882879][ T6081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.59'.
[   79.971428][ T6085] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[   80.169927][ T6093] syzkaller1: entered promiscuous mode
[   80.175561][ T6093] syzkaller1: entered allmulticast mode
[   80.193125][   T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   80.235801][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.62'.
[   80.333028][ T5924] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   80.354131][   T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   80.365707][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   80.377000][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   80.387022][   T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   80.399950][   T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   80.409138][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.419660][   T43] usb 3-1: config 0 descriptor??
[   80.507618][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.520459][ T5924] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   80.529535][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.539762][ T5924] usb 1-1: config 0 descriptor??
[   80.936353][ T6088] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   80.943103][ T6088] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   80.956878][ T5924] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[   80.964604][ T6088] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   80.974095][ T5924] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5
[   80.978786][ T6088] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   81.006454][ T6088] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   81.021804][ T6088] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   81.031749][ T6088] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   81.039506][ T6088] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   81.049274][ T6088] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   81.068180][ T6088] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   81.075055][ T6088] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   81.099791][ T6088] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   81.101545][ T5924] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[   81.151324][ T6083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.179947][ T6083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.203791][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.212518][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.258596][   T43] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   81.308876][ T6099] usb usb8: usbfs: process 6099 (syz.3.65) did not claim interface 0 before use
[   81.312382][   T43] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   81.334758][   T43] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   81.343644][   T43] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   81.350680][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'.
[   81.351225][   T43] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   81.370259][   T43] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   81.381916][ T6101] qnx4: no qnx4 filesystem (no root dir).
[   81.398613][ T6099] =======================================================
[   81.398613][ T6099] WARNING: The mand mount option has been deprecated and
[   81.398613][ T6099]          and is ignored by this kernel. Remove the mand
[   81.398613][ T6099]          option from the mount to silence this warning.
[   81.398613][ T6099] =======================================================
[   81.400214][   T43] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   81.446463][   T43] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   81.450561][ T6083] netlink: 'syz.2.61': attribute type 33 has an invalid length.
[   81.462418][ T6083] netlink: 160 bytes leftover after parsing attributes in process `syz.2.61'.
[   81.484914][   T43] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   81.497822][   T43] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   81.515350][ T6108] sg_read: process 42 (syz.1.66) changed security contexts after opening file descriptor, this is not allowed.
[   81.527902][   T43] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   81.528349][ T6099] XFS (rnullb0): Invalid superblock magic number
[   81.559463][    T9] cfg80211: failed to load regulatory.db
[   81.583021][   T43] usb 3-1: USB disconnect, device number 3
[   81.591626][ T6101] netlink: 'syz.1.66': attribute type 4 has an invalid length.
[   81.609135][ T6101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'.
[   81.698922][    T9] usb 1-1: USB disconnect, device number 3
[   81.717457][ T6109] fido_id[6109]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   82.173899][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[   82.201111][ T5836] Bluetooth: hci2: ACL packet for unknown connection handle 200
[   82.203003][ T6125] netlink: 'syz.3.71': attribute type 4 has an invalid length.
[   82.281542][ T6130] netlink: 'syz.3.71': attribute type 4 has an invalid length.
[   82.483821][ T5879] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   82.645485][ T5879] usb 2-1: config index 0 descriptor too short (expected 69, got 36)
[   82.658647][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   82.688075][ T5879] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[   82.704781][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.724976][ T5879] usb 2-1: Product: syz
[   82.729152][ T5879] usb 2-1: Manufacturer: syz
[   82.751256][ T5879] usb 2-1: SerialNumber: syz
[   82.779622][ T5879] usb 2-1: config 0 descriptor??
[   82.788155][ T6145] FAT-fs (rnullb0): bogus number of reserved sectors
[   82.803990][ T5879] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[   82.811098][ T6145] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   82.880926][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'.
[   82.918530][ T6149] Can't find a SQUASHFS superblock on rnullb0
[   82.935819][ T6147] syzkaller1: entered promiscuous mode
[   82.941621][ T6147] syzkaller1: entered allmulticast mode
[   83.055131][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout
[   83.055144][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[   83.133194][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[   83.204116][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.233040][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.255582][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.270268][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.284065][ T6129] netlink: 60 bytes leftover after parsing attributes in process `syz.1.72'.
[   83.294794][ T6129] netlink: 60 bytes leftover after parsing attributes in process `syz.1.72'.
[   83.323763][ T6129] netlink: 60 bytes leftover after parsing attributes in process `syz.1.72'.
[   83.337769][ T5879] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71
[   83.352734][ T5924] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   83.352995][ T5879] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71
[   83.382744][  T983] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   83.394017][ T5879] usb 2-1: USB disconnect, device number 2
[   83.502653][ T5924] usb 3-1: Using ep0 maxpacket: 16
[   83.510073][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.521480][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.531985][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   83.546732][ T5924] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   83.556514][  T983] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   83.566382][  T983] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.577562][  T983] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[   83.586568][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.595136][  T983] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.609682][ T5924] usb 3-1: config 0 descriptor??
[   83.617717][  T983] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   83.627038][  T983] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   83.638133][  T983] usb 4-1: Product: syz
[   83.642383][  T983] usb 4-1: Manufacturer: syz
[   83.654956][  T983] cdc_wdm 4-1:1.0: skipping garbage
[   83.660303][  T983] cdc_wdm 4-1:1.0: skipping garbage
[   83.671723][  T983] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[   83.678192][  T983] cdc_wdm 4-1:1.0: Unknown control protocol
[   84.083507][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'.
[   84.125050][ T5924] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[   84.153053][ T5924] microsoft 0003:045E:07DA.0003: no inputs found
[   84.153188][ T5879] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   84.168636][ T5924] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway
[   84.186419][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE
[   84.201526][    T9] usb 4-1: USB disconnect, device number 3
[   84.254968][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[   84.333916][ T5879] usb 1-1: device descriptor read/64, error -71
[   84.501483][    T9] usb 3-1: USB disconnect, device number 4
[   84.593134][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   84.734562][ T6176] loop8: detected capacity change from 0 to 7
[   84.736025][ T5879] usb 1-1: device descriptor read/64, error -71
[   84.771144][ T6176] Dev loop8: unable to read RDB block 7
[   84.785437][ T6176]  loop8: unable to read partition table
[   84.791776][ T6176] loop8: partition table beyond EOD, truncated
[   84.807123][ T6176] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[   84.864310][ T5879] usb usb1-port1: attempt power cycle
[   84.955411][ T6180] kvm: kvm [6179]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf
[   84.967790][ T6180] overlayfs: failed to resolve './file1': -2
[   84.985123][ T6180] syzkaller1: entered promiscuous mode
[   85.001326][ T6180] syzkaller1: entered allmulticast mode
[   85.133103][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[   85.139239][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout
[   85.157291][ T6188] geneve0: entered promiscuous mode
[   85.162681][ T6188] geneve0: entered allmulticast mode
[   85.213482][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout
[   85.223307][ T5879] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   85.243962][ T5879] usb 1-1: device descriptor read/8, error -71
[   85.283073][ T5916] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   85.405326][ T6196] syzkaller1: entered promiscuous mode
[   85.410823][ T6196] syzkaller1: entered allmulticast mode
[   85.444331][ T5916] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   85.453197][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.473120][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[   85.482116][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.495636][ T5879] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   85.505118][ T5916] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   85.514409][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   85.532679][ T5879] usb 1-1: device descriptor read/8, error -71
[   85.542713][ T5916] usb 4-1: Product: syz
[   85.546873][ T5916] usb 4-1: Manufacturer: syz
[   85.571502][ T5916] cdc_wdm 4-1:1.0: skipping garbage
[   85.576820][ T5916] cdc_wdm 4-1:1.0: skipping garbage
[   85.595964][ T5916] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[   85.601937][ T5916] cdc_wdm 4-1:1.0: Unknown control protocol
[   85.645439][ T5879] usb usb1-port1: unable to enumerate USB device
[   85.669341][ T6200] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   85.683369][ T6200] syzkaller1: entered promiscuous mode
[   85.688838][ T6200] syzkaller1: entered allmulticast mode
[   85.968025][ T6205] loop8: detected capacity change from 0 to 7
[   85.981616][ T5847] Dev loop8: unable to read RDB block 7
[   86.003617][ T5847]  loop8: unable to read partition table
[   86.004629][ T6186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.014521][ T5847] loop8: partition table beyond EOD, truncated
[   86.030111][ T6186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.041231][ T6205] Dev loop8: unable to read RDB block 7
[   86.047428][ T6205]  loop8: unable to read partition table
[   86.054661][ T6205] loop8: partition table beyond EOD, truncated
[   86.060850][ T6205] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[   86.128506][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE
[   86.189741][ T5879] usb 4-1: USB disconnect, device number 4
[   86.209626][ T5836] Bluetooth: hci1: ACL packet for unknown connection handle 200
[   86.210816][ T6211] netlink: 'syz.1.100': attribute type 4 has an invalid length.
[   86.232824][ T6211] netlink: 'syz.1.100': attribute type 4 has an invalid length.
[   86.245307][ T6211] syzkaller0: refused to change device tx_queue_len
[   86.255799][ T5916] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   86.332786][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout
[   86.361130][ T6213] syzkaller1: entered promiscuous mode
[   86.367377][ T6213] syzkaller1: entered allmulticast mode
[   86.417333][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.428388][ T5916] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   86.438701][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.449586][ T5916] usb 3-1: config 0 descriptor??
[   86.761718][ T6222] netlink: 44 bytes leftover after parsing attributes in process `syz.3.104'.
[   86.820853][ T6224] /dev/rnullb0: Can't open blockdev
[   86.896827][ T5916] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[   86.933160][ T5916] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input6
[   87.006335][ T6229] TCP: TCP_TX_DELAY enabled
[   87.066428][ T5916] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[   87.102885][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.138764][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.159552][ T6230] syzkaller1: entered promiscuous mode
[   87.193435][ T6230] syzkaller1: entered allmulticast mode
[   87.213133][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[   87.219212][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout
[   87.298616][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout
[   87.493781][    T9] usb 3-1: USB disconnect, device number 5
[   87.627407][ T6237] loop8: detected capacity change from 0 to 7
[   87.648077][ T6237] Dev loop8: unable to read RDB block 7
[   87.663718][ T6237]  loop8: unable to read partition table
[   87.673367][ T6237] loop8: partition table beyond EOD, truncated
[   87.698205][ T6237] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[   87.728383][ T5836] Bluetooth: hci1: ACL packet for unknown connection handle 200
[   87.737812][ T6239] netlink: 'syz.1.110': attribute type 4 has an invalid length.
[   87.761027][ T6239] netlink: 'syz.1.110': attribute type 4 has an invalid length.
[   87.781863][ T6239] syzkaller0: refused to change device tx_queue_len
[   87.935911][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'.
[   87.957913][ T6243] ntfs3(rnullb0): Primary boot signature is not NTFS.
[   87.988297][ T6243] ntfs3(rnullb0): Alternative boot signature is not NTFS.
[   87.998867][ T6245] netlink: 44 bytes leftover after parsing attributes in process `syz.3.113'.
[   88.122209][ T6249] IPVS: Unknown mcast interface: nicvf0
[   88.152599][ T6250] IPVS: Unknown mcast interface: nicvf0
[   88.160803][ T6249] @: renamed from vlan0 (while UP)
[   88.262747][  T983] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   88.428602][  T983] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[   88.449909][  T983] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   88.465930][  T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   88.473047][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   88.477132][  T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   88.498659][  T983] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   88.498704][  T983] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   88.498723][  T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.510178][  T983] usb 1-1: config 0 descriptor??
[   88.510900][ T6247] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   88.628591][ T5836] Bluetooth: hci0: ACL packet for unknown connection handle 200
[   88.639977][ T6263] netlink: 'syz.2.120': attribute type 4 has an invalid length.
[   88.644581][    T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   88.654122][ T6263] netlink: 'syz.2.120': attribute type 4 has an invalid length.
[   88.657086][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.676369][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[   88.683828][ T6263] syzkaller0: refused to change device tx_queue_len
[   88.685766][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.705811][    T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   88.714933][    T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   88.723017][    T9] usb 4-1: Product: syz
[   88.727178][    T9] usb 4-1: Manufacturer: syz
[   88.738249][    T9] cdc_wdm 4-1:1.0: skipping garbage
[   88.747921][    T9] cdc_wdm 4-1:1.0: skipping garbage
[   88.754926][    T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[   88.760831][    T9] cdc_wdm 4-1:1.0: Unknown control protocol
[   89.054899][  T983] usbhid 1-1:0.0: can't add hid device: -71
[   89.060913][  T983] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   89.077458][ T6272] loop8: detected capacity change from 0 to 7
[   89.103570][  T983] usb 1-1: USB disconnect, device number 8
[   89.109668][ T6272] Dev loop8: unable to read RDB block 7
[   89.144666][ T6272]  loop8: unable to read partition table
[   89.151029][ T6272] loop8: partition table beyond EOD, truncated
[   89.171474][ T6272] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[   89.238800][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE
[   89.289268][    T9] usb 4-1: USB disconnect, device number 5
[   89.353669][ T6280] syzkaller1: entered promiscuous mode
[   89.359279][ T6280] syzkaller1: entered allmulticast mode
[   89.382636][   T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   89.510626][ T6282] netlink: 44 bytes leftover after parsing attributes in process `syz.2.127'.
[   89.545200][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.577262][   T43] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   89.609091][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.653572][   T43] usb 2-1: config 0 descriptor??
[   89.686062][ T6288] Zero length message leads to an empty skb
[   89.816282][ T5836] Bluetooth: hci0: ACL packet for unknown connection handle 200
[   89.837831][ T6290] netlink: 'syz.2.130': attribute type 4 has an invalid length.
[   89.853081][ T6290] netlink: 'syz.2.130': attribute type 4 has an invalid length.
[   89.915241][ T6290] syzkaller0: refused to change device tx_queue_len
[   90.085357][   T43] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[   90.124688][   T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input7
[   90.180097][ T6299] loop8: detected capacity change from 0 to 7
[   90.191594][ T6299] Dev loop8: unable to read RDB block 7
[   90.207249][ T6299]  loop8: unable to read partition table
[   90.220576][ T6299] loop8: partition table beyond EOD, truncated
[   90.229403][ T6299] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[   90.269478][   T43] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[   90.283427][ T6274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.305821][ T6274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.550471][ T6309] mmap: syz.2.136 (6309) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   90.632499][ T6311] syzkaller1: entered promiscuous mode
[   90.640922][ T6311] syzkaller1: entered allmulticast mode
[   90.663487][  T983] usb 2-1: USB disconnect, device number 3
[   90.813757][   T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   90.991768][   T43] usb 1-1: Using ep0 maxpacket: 16
[   91.012345][   T43] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[   91.023778][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.031784][   T43] usb 1-1: Product: syz
[   91.036461][   T43] usb 1-1: Manufacturer: syz
[   91.041054][   T43] usb 1-1: SerialNumber: syz
[   91.049258][   T43] usb 1-1: config 0 descriptor??
[   91.256480][ T6305] netlink: 'syz.0.135': attribute type 8 has an invalid length.
[   91.316835][   T43] speedtch 1-1:0.0: speedtch_bind: data interface not found!
[   91.325912][   T43] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[   91.340211][   T43] usb 1-1: USB disconnect, device number 9
[  132.738996][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  132.745418][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  154.749110][ T6337] NILFS (rnullb0): couldn't find nilfs on the device
[  154.787268][ T6337] syzkaller1: entered promiscuous mode
[  154.793372][ T6337] syzkaller1: entered allmulticast mode
[  154.800422][ T6336] syzkaller1: entered promiscuous mode
[  154.818898][ T6336] syzkaller1: entered allmulticast mode
[  154.906200][ T5836] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  154.908190][ T6345] netlink: 'syz.0.146': attribute type 4 has an invalid length.
[  154.934423][ T6345] netlink: 'syz.0.146': attribute type 4 has an invalid length.
[  154.990287][ T6345] syzkaller0: refused to change device tx_queue_len
[  155.000478][ T6347] loop8: detected capacity change from 0 to 7
[  155.015128][ T6347] Dev loop8: unable to read RDB block 7
[  155.021343][ T6347]  loop8: unable to read partition table
[  155.065057][ T6347] loop8: partition table beyond EOD, truncated
[  155.091474][ T6347] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  155.190299][ T5836] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  155.198564][ T6353] netlink: 'syz.1.149': attribute type 4 has an invalid length.
[  155.253394][ T6357] netlink: 'syz.1.149': attribute type 4 has an invalid length.
[  155.317397][ T6353] syzkaller0: refused to change device tx_queue_len
[  155.522636][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  155.546595][ T6370] netlink: 'syz.1.153': attribute type 12 has an invalid length.
[  155.684082][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.695137][    T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  155.704462][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.715144][    T9] usb 4-1: config 0 descriptor??
[  155.782733][ T5916] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  155.863192][ T5879] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  155.944665][ T5916] usb 1-1: config 8 has an invalid interface number: 196 but max is 0
[  155.953045][ T5916] usb 1-1: config 8 has no interface number 0
[  155.960267][ T5916] usb 1-1: config 8 interface 196 has no altsetting 0
[  155.967201][ T5916] usb 1-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=e5.59
[  155.976309][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.015247][ T5879] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[  156.023517][ T5879] usb 2-1: config 0 has no interface number 0
[  156.031646][ T5879] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  156.042139][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.050285][ T5879] usb 2-1: Product: syz
[  156.054598][ T5879] usb 2-1: Manufacturer: syz
[  156.059201][ T5879] usb 2-1: SerialNumber: syz
[  156.067032][ T5879] usb 2-1: config 0 descriptor??
[  156.128779][    T9] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[  156.144789][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0006/input/input8
[  156.211543][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'.
[  156.226172][ T5916] usb 1-1: string descriptor 0 read error: -71
[  156.267995][ T5916] quatech2 1-1:8.196: Quatech 2nd gen USB to Serial Driver converter detected
[  156.294198][ T5916] usb 1-1: qt2_attach - failed to power on unit: -71
[  156.297555][ T6375] vxfs: WRONG superblock magic 00000000 at 1
[  156.301138][ T5916] quatech2 1-1:8.196: probe with driver quatech2 failed with error -71
[  156.311237][ T6375] vxfs: WRONG superblock magic 00000000 at 8
[  156.326833][ T6375] vxfs: can't find superblock.
[  156.328931][    T9] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  156.350399][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.361111][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.405230][ T5916] usb 1-1: USB disconnect, device number 10
[  156.504579][ T5879] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected
[  156.527234][ T5879] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81
[  156.558591][ T6380] NILFS (rnullb0): couldn't find nilfs on the device
[  156.562701][ T5879] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1
[  156.582019][ T6380] syzkaller1: entered promiscuous mode
[  156.589422][ T6380] syzkaller1: entered allmulticast mode
[  156.591431][ T5879] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2
[  156.608696][ T5879] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  156.634320][ T5879] usb 2-1: USB disconnect, device number 4
[  156.658889][ T5879] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  156.677048][ T5879] keyspan 2-1:0.133: device disconnected
[  156.698759][ T5916] usb 4-1: USB disconnect, device number 6
[  156.848104][ T6382] syzkaller1: entered promiscuous mode
[  156.857452][ T6382] syzkaller1: entered allmulticast mode
[  157.021259][ T6386] loop8: detected capacity change from 0 to 7
[  157.032434][ T6386] Dev loop8: unable to read RDB block 7
[  157.040606][ T6386]  loop8: unable to read partition table
[  157.046719][ T6386] loop8: partition table beyond EOD, truncated
[  157.053718][ T6386] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  157.139511][ T5836] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  157.141303][ T6388] netlink: 'syz.2.160': attribute type 4 has an invalid length.
[  157.189841][ T6388] netlink: 'syz.2.160': attribute type 4 has an invalid length.
[  157.217009][ T6388] syzkaller0: refused to change device tx_queue_len
[  157.316655][ T5836] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  157.327184][ T6392] netlink: 'syz.3.161': attribute type 4 has an invalid length.
[  157.335654][ T6392] netlink: 'syz.3.161': attribute type 4 has an invalid length.
[  157.354372][ T6392] syzkaller0: refused to change device tx_queue_len
[  157.598843][ T6408] NILFS (rnullb0): couldn't find nilfs on the device
[  157.620989][ T6408] syzkaller1: entered promiscuous mode
[  157.627835][ T6408] syzkaller1: entered allmulticast mode
[  157.785030][ T6413] loop8: detected capacity change from 0 to 7
[  157.792412][ T6413] Dev loop8: unable to read RDB block 7
[  157.798827][ T6413]  loop8: unable to read partition table
[  157.805065][ T6413] loop8: partition table beyond EOD, truncated
[  157.811373][ T6413] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  158.071064][ T5836] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  158.081220][ T6421] netlink: 'syz.3.173': attribute type 4 has an invalid length.
[  158.102444][ T6421] syzkaller0: refused to change device tx_queue_len
[  158.196182][ T6423] FAT-fs (rnullb0): bogus number of reserved sectors
[  158.203494][ T6423] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  158.212402][ T6425] netlink: 60 bytes leftover after parsing attributes in process `syz.3.174'.
[  158.226966][ T5916] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  158.236640][ T6424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.174'.
[  158.245981][ T6425] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  158.268899][ T6424] fuse: Bad value for 'group_id'
[  158.278744][ T6424] fuse: Bad value for 'group_id'
[  158.384055][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.386873][ T6427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.175'.
[  158.402592][ T5916] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  158.410232][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.175'.
[  158.473448][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.509545][ T5916] usb 1-1: config 0 descriptor??
[  158.826801][ T6445] loop8: detected capacity change from 0 to 7
[  158.835451][ T6373] Dev loop8: unable to read RDB block 7
[  158.841047][ T6373]  loop8: unable to read partition table
[  158.849519][ T6373] loop8: partition table beyond EOD, truncated
[  158.857721][ T6445] Dev loop8: unable to read RDB block 7
[  158.867103][ T6445]  loop8: unable to read partition table
[  158.877266][ T6445] loop8: partition table beyond EOD, truncated
[  158.892757][ T6445] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  158.952313][ T5916] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  158.988274][ T5916] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0007/input/input9
[  159.134362][ T6418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.153765][ T6418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.162657][ T5916] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  159.265983][ T5845] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  159.305550][ T6452] syzkaller0: refused to change device tx_queue_len
[  159.515476][ T5916] usb 1-1: USB disconnect, device number 11
[  159.660859][ T6465] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  159.666572][ T6464] /dev/sg0: Can't lookup blockdev
[  159.768080][ T6467] loop8: detected capacity change from 0 to 7
[  159.779984][ T6467] Dev loop8: unable to read RDB block 7
[  159.785972][ T6467]  loop8: unable to read partition table
[  159.798401][ T6467] loop8: partition table beyond EOD, truncated
[  159.805075][ T6467] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  159.965677][ T5845] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  159.967350][ T6473] validate_nla: 3 callbacks suppressed
[  159.967363][ T6473] netlink: 'syz.3.192': attribute type 4 has an invalid length.
[  160.056824][ T6473] netlink: 'syz.3.192': attribute type 4 has an invalid length.
[  160.107350][ T6473] syzkaller0: refused to change device tx_queue_len
[  160.498272][ T6494] loop8: detected capacity change from 0 to 7
[  160.525814][ T6373] Dev loop8: unable to read RDB block 7
[  160.533877][ T6373]  loop8: unable to read partition table
[  160.539882][ T6373] loop8: partition table beyond EOD, truncated
[  160.553397][ T6494] Dev loop8: unable to read RDB block 7
[  160.558976][ T6494]  loop8: unable to read partition table
[  160.589893][ T6494] loop8: partition table beyond EOD, truncated
[  160.598998][ T6496] XFS (rnullb0): Invalid superblock magic number
[  160.612758][ T6494] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  161.016356][ T5845] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  161.018129][ T6519] netlink: 'syz.2.204': attribute type 4 has an invalid length.
[  161.039575][ T6519] netlink: 'syz.2.204': attribute type 4 has an invalid length.
[  161.054838][ T6519] syzkaller0: refused to change device tx_queue_len
[  161.243887][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.270574][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.305063][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.333104][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.341848][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.358763][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.379447][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.390278][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.405522][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.419154][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.505574][   T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  161.631091][ T6543] loop8: detected capacity change from 0 to 7
[  161.640090][ T6543] Dev loop8: unable to read RDB block 7
[  161.649739][ T6543]  loop8: unable to read partition table
[  161.681444][ T6543] loop8: partition table beyond EOD, truncated
[  161.721082][ T6543] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  161.757080][ T6550] /dev/rnullb0: Can't open blockdev
[  161.840053][ T6550] syzkaller1: entered promiscuous mode
[  161.849681][ T6550] syzkaller1: entered allmulticast mode
[  161.988766][ T5845] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  162.025279][ T6556] netlink: 'syz.0.216': attribute type 4 has an invalid length.
[  162.050379][ T6562] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  162.074817][ T6556] netlink: 'syz.0.216': attribute type 4 has an invalid length.
[  162.119455][ T6556] syzkaller0: refused to change device tx_queue_len
[  162.124610][ T6562] Error validating options; rc = [-22]
[  162.305857][ T6569] syzkaller1: entered promiscuous mode
[  162.322663][ T6569] syzkaller1: entered allmulticast mode
[  162.480182][ T6578] loop8: detected capacity change from 0 to 7
[  162.487258][ T6578] Dev loop8: unable to read RDB block 7
[  162.497974][ T6578]  loop8: unable to read partition table
[  162.512090][ T6578] loop8: partition table beyond EOD, truncated
[  162.519516][ T6578] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  162.589227][ T6580] /dev/rnullb0: Can't open blockdev
[  162.643114][   T43] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  162.686995][ T6584] /dev/rnullb0: Can't open blockdev
[  162.704968][ T6584] syzkaller1: entered promiscuous mode
[  162.710509][ T6584] syzkaller1: entered allmulticast mode
[  162.826003][   T43] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.837645][   T43] usb 1-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.860080][   T43] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  162.864876][ T6590] /dev/rnullb0: Can't open blockdev
[  162.882407][   T43] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  162.891954][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.962297][ T5845] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  162.964557][ T6592] netlink: 'syz.1.230': attribute type 4 has an invalid length.
[  162.981288][ T6592] netlink: 'syz.1.230': attribute type 4 has an invalid length.
[  162.998555][ T6592] syzkaller0: refused to change device tx_queue_len
[  163.258138][ T6596] NILFS (nbd2): device size too small
[  163.382721][  T983] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  163.492391][ T6601] loop8: detected capacity change from 0 to 7
[  163.509592][ T6601] Dev loop8: unable to read RDB block 7
[  163.528262][ T6601]  loop8: unable to read partition table
[  163.544932][ T6601] loop8: partition table beyond EOD, truncated
[  163.553110][ T6601] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  163.600322][  T983] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  163.615133][  T983] usb 2-1: config 0 has no interface number 0
[  163.633216][  T983] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  163.646327][  T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.700934][  T983] usb 2-1: Product: syz
[  163.712650][  T983] usb 2-1: Manufacturer: syz
[  163.723993][  T983] usb 2-1: SerialNumber: syz
[  163.750155][  T983] usb 2-1: config 0 descriptor??
[  163.768336][ T5845] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  163.781903][ T6604] netlink: 'syz.2.236': attribute type 4 has an invalid length.
[  163.796047][ T6604] netlink: 'syz.2.236': attribute type 4 has an invalid length.
[  164.011363][ T6611] /dev/rnullb0: Can't open blockdev
[  164.439329][  T983] usb 2-1: Found UVC 0.08 device syz (046d:0823)
[  164.467600][  T983] usb 2-1: No valid video chain found.
[  164.481912][  T983] usb 2-1: USB disconnect, device number 5
[  164.582732][ T5924] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  164.757761][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.769360][ T5924] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  164.781672][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.797393][ T5924] usb 3-1: config 0 descriptor??
[  165.195264][ T6622] /dev/rnullb0: Can't open blockdev
[  165.241793][ T5924] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[  165.291411][ T5924] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input10
[  165.426833][   T43] usbhid 1-1:8.0: can't add hid device: -71
[  165.432157][ T6617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.442039][ T6617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.473400][   T43] usbhid 1-1:8.0: probe with driver usbhid failed with error -71
[  165.537266][   T43] usb 1-1: USB disconnect, device number 13
[  165.572990][ T5924] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  165.772925][ T5916] usb 3-1: USB disconnect, device number 6
[  165.792279][ T5845] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  165.806299][ T6638] netlink: 'syz.0.245': attribute type 4 has an invalid length.
[  165.816259][ T6638] netlink: 'syz.0.245': attribute type 4 has an invalid length.
[  165.927731][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'.
[  165.948727][ T6640] NILFS (rnullb0): couldn't find nilfs on the device
[  165.978567][ T6642] NILFS (rnullb0): couldn't find nilfs on the device
[  166.094405][ T6645] NILFS (rnullb0): couldn't find nilfs on the device
[  166.163662][ T6646] fuseblk: Bad value for 'group_id'
[  166.168889][ T6646] fuseblk: Bad value for 'group_id'
[  166.597823][ T6661] netlink: 44 bytes leftover after parsing attributes in process `syz.3.253'.
[  166.682259][ T6663] syzkaller1: entered promiscuous mode
[  166.688239][ T6663] syzkaller1: entered allmulticast mode
[  166.711971][ T5845] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  166.721787][ T6665] netlink: 'syz.3.255': attribute type 4 has an invalid length.
[  166.729755][  T983] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  166.732098][ T6665] netlink: 'syz.3.255': attribute type 4 has an invalid length.
[  166.882687][  T983] usb 3-1: Using ep0 maxpacket: 8
[  166.905953][  T983] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d
[  166.915210][  T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.923536][  T983] usb 3-1: Product: syz
[  166.927768][  T983] usb 3-1: Manufacturer: syz
[  166.932361][  T983] usb 3-1: SerialNumber: syz
[  166.939288][  T983] usb 3-1: config 0 descriptor??
[  166.955963][  T983] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32
[  166.981064][ T6671] netlink: 60 bytes leftover after parsing attributes in process `syz.3.257'.
[  166.992202][ T6669] netlink: 60 bytes leftover after parsing attributes in process `syz.3.257'.
[  167.057379][ T6674] NILFS (rnullb0): couldn't find nilfs on the device
[  167.159394][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.187312][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.220978][  T983] usb 3-1: USB disconnect, device number 7
[  167.554122][ T5879] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  167.717369][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.728448][ T5879] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  167.737763][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.754396][ T5879] usb 4-1: config 0 descriptor??
[  168.165776][ T5879] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[  168.179742][ T5879] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0009/input/input11
[  168.273257][ T5879] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  169.372651][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout
[  169.375265][ T6680] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  170.305303][ T6680] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  170.311532][ T6680] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  170.320056][ T6680] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  170.358879][ T5879] usb 4-1: USB disconnect, device number 7
[  170.454073][ T6691] Can't find a SQUASHFS superblock on rnullb0
[  170.609582][ T5845] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  170.623905][ T6698] netlink: 'syz.1.266': attribute type 4 has an invalid length.
[  170.634116][ T6698] netlink: 'syz.1.266': attribute type 4 has an invalid length.
[  170.649797][ T6698] syzkaller0: refused to change device tx_queue_len
[  170.681527][ T6702] NILFS (rnullb0): couldn't find nilfs on the device
[  170.961342][ T5845] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  170.963831][ T6710] netlink: 'syz.0.271': attribute type 4 has an invalid length.
[  171.300816][ T3514] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  171.312932][ T5879] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  171.452664][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout
[  171.474099][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.485094][ T5879] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  171.494177][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.511564][ T5879] usb 2-1: config 0 descriptor??
[  171.562855][   T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  171.712650][   T43] usb 1-1: Using ep0 maxpacket: 32
[  171.719585][   T43] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  171.728014][   T43] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  171.739146][   T43] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  171.750502][   T43] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  171.767964][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  171.779120][   T43] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  171.788593][   T43] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  171.797204][   T43] usb 1-1: Product: syz
[  171.801497][   T43] usb 1-1: Manufacturer: syz
[  171.806355][   T43] usb 1-1: SerialNumber: syz
[  171.815264][   T43] usb 1-1: config 0 descriptor??
[  171.824431][   T43] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  171.835515][   T43] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  171.930663][ T5879] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor
[  171.946839][ T5879] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000A/input/input12
[  172.044615][ T5879] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  172.164711][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.190486][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.210406][ T6737] netlink: 'syz.2.278': attribute type 10 has an invalid length.
[  172.230011][ T6737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.278'.
[  172.251228][ T6737] geneve0: left promiscuous mode
[  172.259988][ T6737] geneve0: left allmulticast mode
[  172.286452][ T6737] team0: Port device geneve0 added
[  172.296262][ T6741] NILFS (rnullb0): couldn't find nilfs on the device
[  172.332940][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout
[  172.455931][ T6746] loop8: detected capacity change from 0 to 7
[  172.483870][ T6746] Dev loop8: unable to read RDB block 7
[  172.493434][ T6746]  loop8: unable to read partition table
[  172.496583][ T5845] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  172.499252][ T6746] loop8: partition table beyond EOD, truncated
[  172.513805][ T6748] netlink: 'syz.3.282': attribute type 4 has an invalid length.
[  172.514481][ T6746] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  172.560533][ T5879] usb 2-1: USB disconnect, device number 6
[  172.640033][ T6750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.680262][ T6750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.962989][ T5916] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  173.050398][ T6761] overlayfs: failed to resolve './file0': -2
[  173.127449][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  173.146693][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  173.159444][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  173.173580][ T5916] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  173.187255][ T5916] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  173.197435][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.221978][ T5916] usb 3-1: config 0 descriptor??
[  173.228206][ T6751] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  173.505319][ T5879] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  173.682809][ T5879] usb 2-1: Using ep0 maxpacket: 16
[  173.701152][ T5879] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  173.718174][ T5916] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max
[  173.726998][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.756330][ T5879] usb 2-1: config 0 descriptor??
[  173.802714][ T5916] plantronics 0003:047F:FFFF.000B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  173.817304][ T6771] can: request_module (can-proto-0) failed.
[  173.821754][ T5879] gspca_main: sonixj-2.14.0 probing 0471:0327
[  173.983311][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.994845][   T30] audit: type=1800 audit(1751561825.004:2): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.283" name="/" dev="fuse" ino=1 res=0 errno=0
[  173.994966][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.057376][ T5879] gspca_sonixj: reg_r err -71
[  174.060747][   T30] audit: type=1800 audit(1751561825.034:3): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.283" name="/" dev="fuse" ino=1 res=0 errno=0
[  174.065537][ T5879] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  174.151608][ T5879] usb 2-1: USB disconnect, device number 7
[  174.189632][ T6782] /dev/rnullb0: Can't open blockdev
[  174.271407][ T6784] loop8: detected capacity change from 0 to 7
[  174.279579][ T6373] Dev loop8: unable to read RDB block 7
[  174.285887][ T6373]  loop8: unable to read partition table
[  174.289656][   T43] usb 1-1: USB disconnect, device number 14
[  174.291565][    C1] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[  174.291714][ T6373] loop8: partition table beyond EOD, truncated
[  174.317857][   T43] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  174.360116][ T6784] Dev loop8: unable to read RDB block 7
[  174.380263][ T6784]  loop8: unable to read partition table
[  174.390716][ T6784] loop8: partition table beyond EOD, truncated
[  174.398586][ T6784] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  174.428515][ T5836] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  174.441027][ T6786] netlink: 'syz.3.292': attribute type 4 has an invalid length.
[  174.729797][ T6797] syzkaller1: entered promiscuous mode
[  174.743895][ T6797] syzkaller1: entered allmulticast mode
[  174.804406][ T6801] netlink: 'syz.0.297': attribute type 4 has an invalid length.
[  174.812150][ T5836] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  174.812479][ T6801] netlink: 'syz.0.297': attribute type 4 has an invalid length.
[  174.836739][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'.
[  174.848853][ T6803] process 'syz.3.298' launched './file2' with NULL argv: empty string added
[  174.908885][ T6803] C: renamed from team_slave_0 (while UP)
[  174.918864][ T6803] netlink: 152 bytes leftover after parsing attributes in process `syz.3.298'.
[  174.933828][ T6803] ./file2: Can't lookup blockdev
[  175.004112][ T6809] NILFS (rnullb0): couldn't find nilfs on the device
[  175.038797][ T6810] FAT-fs (rnullb0): bogus number of reserved sectors
[  175.059245][ T6810] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  175.207765][ T5836] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  175.217383][ T6818] netlink: 'syz.3.303': attribute type 4 has an invalid length.
[  175.244655][ T6821] loop8: detected capacity change from 0 to 7
[  175.253043][ T6821] Dev loop8: unable to read RDB block 7
[  175.258704][ T6821]  loop8: unable to read partition table
[  175.265892][ T6821] loop8: partition table beyond EOD, truncated
[  175.272134][ T6821] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  175.462764][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout
[  175.562671][ T5879] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  175.682173][    T9] usb 3-1: USB disconnect, device number 8
[  175.723200][ T5879] usb 2-1: Using ep0 maxpacket: 8
[  175.763856][ T5879] usb 2-1: config index 0 descriptor too short (expected 4096, got 18)
[  175.781857][ T5836] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  175.791619][ T6833] netlink: 'syz.0.308': attribute type 4 has an invalid length.
[  175.801623][ T6833] netlink: 'syz.0.308': attribute type 4 has an invalid length.
[  175.819333][ T5879] usb 2-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5
[  175.832227][ T6835] syzkaller1: entered promiscuous mode
[  175.832864][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.848263][ T5879] usb 2-1: Product: syz
[  175.852443][ T5879] usb 2-1: Manufacturer: syz
[  175.857269][ T6835] syzkaller1: entered allmulticast mode
[  175.863894][ T5879] usb 2-1: SerialNumber: syz
[  175.873677][ T5879] usb 2-1: config 0 descriptor??
[  175.891469][ T5879] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected.
[  176.017372][ T6839] syz.2.311: attempt to access beyond end of device
[  176.017372][ T6839] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  176.067940][ T6839] hpfs: hpfs_map_sector(): read error
[  176.103457][ T6841] loop8: detected capacity change from 0 to 7
[  176.122375][ T6841] Dev loop8: unable to read RDB block 7
[  176.122498][ T6843] /dev/rnullb0: Can't open blockdev
[  176.129949][ T6841]  loop8: unable to read partition table
[  176.149952][ T6841] loop8: partition table beyond EOD, truncated
[  176.170081][ T6841] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  176.240473][ T6845] netlink: 'syz.2.314': attribute type 4 has an invalid length.
[  176.261904][ T5836] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  176.952696][ T5916] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  177.120544][ T6868] netlink: 44 bytes leftover after parsing attributes in process `syz.0.322'.
[  177.149320][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.163568][ T5916] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  177.173572][ T5836] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  177.191801][ T6866] netlink: 'syz.3.321': attribute type 4 has an invalid length.
[  177.202204][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.211001][ T6866] netlink: 'syz.3.321': attribute type 4 has an invalid length.
[  177.236203][ T5916] usb 3-1: config 0 descriptor??
[  177.288016][ T6870] loop8: detected capacity change from 0 to 7
[  177.296559][ T6870] Dev loop8: unable to read RDB block 7
[  177.302277][ T6870]  loop8: unable to read partition table
[  177.310078][ T6870] loop8: partition table beyond EOD, truncated
[  177.317755][ T6870] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  177.497339][ T6872] /dev/rnullb0: Can't open blockdev
[  177.532901][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout
[  177.563499][ T6874] netlink: 'syz.0.325': attribute type 4 has an invalid length.
[  177.571248][ T5836] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  177.677148][ T5916] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor
[  177.732304][ T5916] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000C/input/input13
[  177.872348][ T6860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.913530][ T6860] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.934957][ T5916] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  178.208951][ T6885] /dev/rnullb0: Can't open blockdev
[  178.229813][ T5879] pwc: Failed to set LED on/off time (-71)
[  178.245892][ T5879] pwc: send_video_command error -71
[  178.269265][ T5879] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  178.289787][ T5879] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  178.292635][   T43] usb 3-1: USB disconnect, device number 9
[  178.331804][ T5879] usb 2-1: USB disconnect, device number 8
[  178.587699][ T6893] netlink: 44 bytes leftover after parsing attributes in process `syz.0.331'.
[  178.702361][ T6891] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[  178.728181][ T6895] devtmpfs: Cannot enable quota on remount
[  178.738437][ T6891] UDF-fs: Scanning with blocksize 4096 failed
[  178.772178][ T5836] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  178.789116][ T6897] netlink: 'syz.1.333': attribute type 4 has an invalid length.
[  178.834982][ T6897] netlink: 'syz.1.333': attribute type 4 has an invalid length.
[  178.964082][ T5836] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  179.326109][ T6918] netlink: 44 bytes leftover after parsing attributes in process `syz.0.340'.
[  179.484056][ T6925] pim6reg1: entered allmulticast mode
[  179.520987][   T30] audit: type=1800 audit(1751561830.524:4): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.343" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  179.561311][   T43] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[  179.615888][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout
[  179.671778][ T5845] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  179.678056][ T6933] netlink: 'syz.2.346': attribute type 4 has an invalid length.
[  179.691650][ T6933] netlink: 'syz.2.346': attribute type 4 has an invalid length.
[  179.724129][   T43] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  179.733875][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.747043][   T43] usb 2-1: config 0 descriptor??
[  179.814676][ T5845] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  180.054051][ T6944] exFAT-fs (rnullb0): invalid boot record signature
[  180.060807][ T6944] exFAT-fs (rnullb0): failed to read boot sector
[  180.067289][ T6944] exFAT-fs (rnullb0): failed to recognize exfat type
[  180.173180][ T6948] netlink: 19 bytes leftover after parsing attributes in process `syz.2.350'.
[  180.244342][   T43] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  180.281768][   T43] asix 2-1:0.0: probe with driver asix failed with error -71
[  180.323180][   T43] usb 2-1: USB disconnect, device number 9
[  180.459929][ T6953] loop8: detected capacity change from 0 to 7
[  180.467509][ T6953] Dev loop8: unable to read RDB block 7
[  180.474540][ T6953]  loop8: unable to read partition table
[  180.480374][ T6953] loop8: partition table beyond EOD, truncated
[  180.487836][ T6953] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  180.556403][ T6955] netlink: 44 bytes leftover after parsing attributes in process `syz.1.353'.
[  180.687034][ T5845] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  180.696466][ T6959] netlink: 'syz.0.355': attribute type 4 has an invalid length.
[  180.707455][ T6959] netlink: 'syz.0.355': attribute type 4 has an invalid length.
[  180.866745][ T5845] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  181.290071][ T6980] FAULT_INJECTION: forcing a failure.
[  181.290071][ T6980] name failslab, interval 1, probability 0, space 0, times 0
[  181.319018][ T6980] CPU: 0 UID: 0 PID: 6980 Comm: syz.2.361 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[  181.319040][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  181.319050][ T6980] Call Trace:
[  181.319057][ T6980]  <TASK>
[  181.319064][ T6980]  dump_stack_lvl+0x189/0x250
[  181.319095][ T6980]  ? __pfx____ratelimit+0x10/0x10
[  181.319117][ T6980]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.319135][ T6980]  ? __pfx__printk+0x10/0x10
[  181.319159][ T6980]  ? __pfx___might_resched+0x10/0x10
[  181.319175][ T6980]  ? fs_reclaim_acquire+0x7d/0x100
[  181.319200][ T6980]  should_fail_ex+0x414/0x560
[  181.319229][ T6980]  should_failslab+0xa8/0x100
[  181.319251][ T6980]  __kmalloc_noprof+0xcb/0x4f0
[  181.319267][ T6980]  ? kfree+0x4d/0x440
[  181.319281][ T6980]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  181.319305][ T6980]  tomoyo_realpath_from_path+0xe3/0x5d0
[  181.319330][ T6980]  ? tomoyo_domain+0xd9/0x130
[  181.319355][ T6980]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  181.319378][ T6980]  tomoyo_path_number_perm+0x1e8/0x5a0
[  181.319404][ T6980]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  181.319445][ T6980]  ? __lock_acquire+0xab9/0xd20
[  181.319488][ T6980]  ? __fget_files+0x2a/0x420
[  181.319512][ T6980]  ? __fget_files+0x2a/0x420
[  181.319531][ T6980]  ? __fget_files+0x3a0/0x420
[  181.319550][ T6980]  ? __fget_files+0x2a/0x420
[  181.319575][ T6980]  security_file_ioctl+0xcb/0x2d0
[  181.319600][ T6980]  __se_sys_ioctl+0x47/0x170
[  181.319620][ T6980]  do_syscall_64+0xfa/0x3b0
[  181.319639][ T6980]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.319658][ T6980]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.319674][ T6980]  ? clear_bhb_loop+0x60/0xb0
[  181.319694][ T6980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.319709][ T6980] RIP: 0033:0x7fafe558e929
[  181.319731][ T6980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.319744][ T6980] RSP: 002b:00007fafe64a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  181.319761][ T6980] RAX: ffffffffffffffda RBX: 00007fafe57b5fa0 RCX: 00007fafe558e929
[  181.319773][ T6980] RDX: 0000200000000000 RSI: 0000000000008943 RDI: 0000000000000004
[  181.319783][ T6980] RBP: 00007fafe64a0090 R08: 0000000000000000 R09: 0000000000000000
[  181.319792][ T6980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  181.319802][ T6980] R13: 0000000000000000 R14: 00007fafe57b5fa0 R15: 00007ffc4ede2c08
[  181.319830][ T6980]  </TASK>
[  181.319836][ T6980] ERROR: Out of memory at tomoyo_realpath_from_path.
[  181.462729][ T5836] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  181.469033][ T5845] Bluetooth: hci4: command 0x1003 tx timeout
[  181.703039][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout
[  181.750505][ T5836] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  181.756999][ T6990] netlink: 'syz.3.364': attribute type 4 has an invalid length.
[  181.803782][ T6990] netlink: 'syz.3.364': attribute type 4 has an invalid length.
[  181.874799][ T6990] syzkaller0: refused to change device tx_queue_len
[  181.910031][ T6994] loop8: detected capacity change from 0 to 7
[  181.919196][ T6992] netlink: 'syz.0.366': attribute type 4 has an invalid length.
[  181.927694][ T5836] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  181.936330][ T6994] Dev loop8: unable to read RDB block 7
[  181.941120][ T6992] netlink: 'syz.0.366': attribute type 4 has an invalid length.
[  181.941939][ T6994]  loop8: unable to read partition table
[  181.960620][ T6994] loop8: partition table beyond EOD, truncated
[  181.966998][ T6994] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  182.195263][   T30] audit: type=1800 audit(1751561833.204:5): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.370" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  182.284250][ T7007] hpfs: Bad magic ... probably not HPFS
[  182.292607][   T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  182.375577][ T7011] netlink: 88 bytes leftover after parsing attributes in process `syz.0.373'.
[  182.449555][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.463807][   T43] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  182.473815][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.486443][   T43] usb 4-1: config 0 descriptor??
[  182.552740][ T5924] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  182.734288][ T5924] usb 2-1: Using ep0 maxpacket: 32
[  182.748070][ T5924] usb 2-1: config 1 interface 0 altsetting 175 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  182.772796][ T5924] usb 2-1: config 1 interface 0 has no altsetting 0
[  182.794752][ T5924] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.40
[  182.804158][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.812167][ T5924] usb 2-1: Product: ѕ
[  182.832552][ T5924] usb 2-1: Manufacturer: 괖ꑾ毣隻彞ᦚ㙢插䂎粜ᦟ㩢隽⊬紏⍄샸瀊蚷Ⴋ隷饀匩빶均嶄蹻ꨩ鸣뛭ꉗ㚊驉鬽ᶤພ̃黔⬫斌ﴏ渤쬺♙吉줛묔札䀃ᴺ禾遂렴诼㌶话呬轟㙷㓹㋕槭柜㩾晏ﱳ⨥득恌ࡏﯻ喝ﲒ㝖碙淜撆ą폋䊓ڢ்覔ꉳ첆ܓ跬玃⽦ல죸냤盓䂺烟㔋峹喙㴡V
[  182.876213][ T5924] usb 2-1: SerialNumber: 뜱謙魉蒄씁宋꡹꩗읇䎓⪘謭ꬶ괲㴥㪡☧᫮둆η뒜㗩无嵴흒찭嗌⿪춻Ⓧ퍞⡢盺肶蔏輷ﮛ⊼ܜு憠蕩橌ą頂Ἃᰝ汳嘜䝃益묞총䠣౥䦗㨂ᴊ㑆뙺은塬粴⭏ᰭ廿抝
[  182.905228][   T43] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor
[  182.938669][   T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000D/input/input14
[  182.961957][ T7020] omfs: Invalid superblock (0)
[  182.968395][ T7020] omfs: Invalid superblock (0)
[  183.072435][   T43] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  183.107126][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.128120][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.178631][ T5836] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  183.204305][ T7022] netlink: 'syz.2.377': attribute type 4 has an invalid length.
[  183.210317][ T5924] usbhid 2-1:1.0: can't add hid device: -71
[  183.230117][ T5924] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  183.263712][ T7024] netlink: 'syz.2.377': attribute type 4 has an invalid length.
[  183.269287][ T5924] usb 2-1: USB disconnect, device number 10
[  183.297994][ T7022] syzkaller0: refused to change device tx_queue_len
[  183.348260][ T7027] loop8: detected capacity change from 0 to 7
[  183.363749][ T7027] Dev loop8: unable to read RDB block 7
[  183.369377][ T7027]  loop8: unable to read partition table
[  183.376469][ T7027] loop8: partition table beyond EOD, truncated
[  183.384464][ T7027] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  183.509552][    T9] usb 4-1: USB disconnect, device number 8
[  183.526171][ T5836] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  183.536327][ T7029] netlink: 'syz.2.379': attribute type 4 has an invalid length.
[  183.567899][ T7029] netlink: 'syz.2.379': attribute type 4 has an invalid length.
[  183.573855][ T7031] syzkaller1: entered promiscuous mode
[  183.587213][ T7031] syzkaller1: entered allmulticast mode
[  183.807357][ T7039] FAULT_INJECTION: forcing a failure.
[  183.807357][ T7039] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  183.820417][    C0] ==================================================================
[  183.820431][    C0] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x23d/0x6c0
[  183.820457][    C0] Write of size 8 at addr ffff88807b4ebfc0 by task syz.0.382/7039
[  183.820473][    C0] 
[  183.820482][    C0] CPU: 0 UID: 0 PID: 7039 Comm: syz.0.382 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[  183.820522][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  183.820532][    C0] Call Trace:
[  183.820539][    C0]  <IRQ>
[  183.820546][    C0]  dump_stack_lvl+0x189/0x250
[  183.820566][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  183.820584][    C0]  ? rcu_is_watching+0x15/0xb0
[  183.820600][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.820619][    C0]  ? rcu_is_watching+0x15/0xb0
[  183.820634][    C0]  ? lock_release+0x4b/0x3e0
[  183.820658][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  183.820676][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  183.820695][    C0]  print_report+0xd2/0x2b0
[  183.820716][    C0]  ? flush_tlb_func+0x23d/0x6c0
[  183.820734][    C0]  kasan_report+0x118/0x150
[  183.820755][    C0]  ? flush_tlb_func+0x23d/0x6c0
[  183.820777][    C0]  kasan_check_range+0x2b0/0x2c0
[  183.820796][    C0]  flush_tlb_func+0x23d/0x6c0
[  183.820821][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  183.820838][    C0]  ? sched_clock_cpu+0x74/0x430
[  183.820854][    C0]  ? rcu_is_watching+0x15/0xb0
[  183.820869][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  183.820889][    C0]  __flush_smp_call_function_queue+0x370/0xaa0
[  183.820907][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  183.820928][    C0]  __sysvec_call_function_single+0xa8/0x3d0
[  183.820949][    C0]  sysvec_call_function_single+0x9e/0xc0
[  183.820969][    C0]  </IRQ>
[  183.820975][    C0]  <TASK>
[  183.820981][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  183.820998][    C0] RIP: 0010:console_flush_all+0x7f7/0xc40
[  183.821019][    C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24
[  183.821033][    C0] RSP: 0018:ffffc9000c77f6e0 EFLAGS: 00000293
[  183.821048][    C0] RAX: 1ffffffff1d78ef3 RBX: ffffffff8ebc7798 RCX: ffff88802a699e00
[  183.821060][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  183.821070][    C0] RBP: ffffc9000c77f830 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6
[  183.821083][    C0] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: dffffc0000000000
[  183.821095][    C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ebc7740
[  183.821115][    C0]  ? console_flush_all+0x13a/0xc40
[  183.821136][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  183.821159][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  183.821181][    C0]  console_unlock+0xc4/0x270
[  183.821198][    C0]  ? __pfx_console_unlock+0x10/0x10
[  183.821215][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  183.821237][    C0]  vprintk_emit+0x5b7/0x7a0
[  183.821254][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  183.821270][    C0]  ? number+0x91/0xf60
[  183.821291][    C0]  _printk+0xcf/0x120
[  183.821307][    C0]  ? __pfx____ratelimit+0x10/0x10
[  183.821327][    C0]  ? __pfx__printk+0x10/0x10
[  183.821349][    C0]  should_fail_ex+0x3f5/0x560
[  183.821376][    C0]  _copy_to_user+0x31/0xb0
[  183.821392][    C0]  simple_read_from_buffer+0xe1/0x170
[  183.821415][    C0]  proc_fail_nth_read+0x1df/0x250
[  183.821430][    C0]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  183.821446][    C0]  ? rw_verify_area+0x258/0x650
[  183.821463][    C0]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  183.821477][    C0]  vfs_read+0x200/0x980
[  183.821496][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  183.821523][    C0]  ? __pfx_vfs_read+0x10/0x10
[  183.821542][    C0]  ? __fget_files+0x2a/0x420
[  183.821565][    C0]  ? __fget_files+0x3a0/0x420
[  183.821586][    C0]  ? __fget_files+0x2a/0x420
[  183.821610][    C0]  ksys_read+0x145/0x250
[  183.821624][    C0]  ? __fget_files+0x3a0/0x420
[  183.821645][    C0]  ? __pfx_ksys_read+0x10/0x10
[  183.821665][    C0]  ? do_syscall_64+0xbe/0x3b0
[  183.821688][    C0]  do_syscall_64+0xfa/0x3b0
[  183.821707][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  183.821725][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.821738][    C0]  ? clear_bhb_loop+0x60/0xb0
[  183.821754][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.821767][    C0] RIP: 0033:0x7f714698d33c
[  183.821779][    C0] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  183.821790][    C0] RSP: 002b:00007f714785d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  183.821806][    C0] RAX: ffffffffffffffda RBX: 00007f7146bb6080 RCX: 00007f714698d33c
[  183.821817][    C0] RDX: 000000000000000f RSI: 00007f714785d0a0 RDI: 0000000000000003
[  183.821826][    C0] RBP: 00007f714785d090 R08: 0000000000000000 R09: 0000000000000000
[  183.821836][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.821845][    C0] R13: 0000000000000001 R14: 00007f7146bb6080 R15: 00007ffdc38cefc8
[  183.821860][    C0]  </TASK>
[  183.821865][    C0] 
[  183.821877][    C0] Allocated by task 5829:
[  183.821886][    C0]  kasan_save_track+0x3e/0x80
[  183.821902][    C0]  __kasan_slab_alloc+0x6c/0x80
[  183.821917][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  183.821933][    C0]  copy_mm+0xdb/0x4b0
[  183.821948][    C0]  copy_process+0x1706/0x3c00
[  183.821963][    C0]  kernel_clone+0x21e/0x870
[  183.821978][    C0]  __x64_sys_clone+0x18b/0x1e0
[  183.821995][    C0]  do_syscall_64+0xfa/0x3b0
[  183.822013][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.822028][    C0] 
[  183.822032][    C0] Freed by task 7038:
[  183.822040][    C0]  kasan_save_track+0x3e/0x80
[  183.822052][    C0]  kasan_save_free_info+0x46/0x50
[  183.822072][    C0]  __kasan_slab_free+0x62/0x70
[  183.822087][    C0]  kmem_cache_free+0x18f/0x400
[  183.822103][    C0]  exit_mm+0x1da/0x2c0
[  183.822119][    C0]  do_exit+0x648/0x2300
[  183.822137][    C0]  do_group_exit+0x21c/0x2d0
[  183.822154][    C0]  get_signal+0x1286/0x1340
[  183.822174][    C0]  arch_do_signal_or_restart+0x9a/0x750
[  183.822195][    C0]  exit_to_user_mode_loop+0x75/0x110
[  183.822217][    C0]  do_syscall_64+0x2bd/0x3b0
[  183.822236][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.822251][    C0] 
[  183.822256][    C0] The buggy address belongs to the object at ffff88807b4eb5c0
[  183.822256][    C0]  which belongs to the cache mm_struct of size 2584
[  183.822270][    C0] The buggy address is located 2560 bytes inside of
[  183.822270][    C0]  freed 2584-byte region [ffff88807b4eb5c0, ffff88807b4ebfd8)
[  183.822286][    C0] 
[  183.822291][    C0] The buggy address belongs to the physical page:
[  183.822298][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b4e8
[  183.822314][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  183.822328][    C0] memcg:ffff8880259fed81
[  183.822336][    C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  183.822359][    C0] page_type: f5(slab)
[  183.822374][    C0] raw: 00fff00000000040 ffff88801a84bb40 0000000000000000 dead000000000001
[  183.822389][    C0] raw: 0000000000000000 00000000000b000b 00000000f5000000 ffff8880259fed81
[  183.822405][    C0] head: 00fff00000000040 ffff88801a84bb40 0000000000000000 dead000000000001
[  183.822420][    C0] head: 0000000000000000 00000000000b000b 00000000f5000000 ffff8880259fed81
[  183.822435][    C0] head: 00fff00000000003 ffffea0001ed3a01 00000000ffffffff 00000000ffffffff
[  183.822449][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  183.822458][    C0] page dumped because: kasan: bad access detected
[  183.822470][    C0] page_owner tracks the page as allocated
[  183.822477][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5360, tgid 5360 (udevd), ts 33751227679, free_ts 30345412333
[  183.822504][    C0]  post_alloc_hook+0x240/0x2a0
[  183.822528][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  183.822547][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  183.822566][    C0]  alloc_pages_mpol+0x232/0x4a0
[  183.822583][    C0]  allocate_slab+0x8a/0x370
[  183.822603][    C0]  ___slab_alloc+0xbeb/0x1410
[  183.822622][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  183.822637][    C0]  mm_alloc+0x23/0xd0
[  183.822646][    C0]  alloc_bprm+0x378/0x5b0
[  183.822660][    C0]  do_execveat_common+0x1b3/0x6a0
[  183.822676][    C0]  __x64_sys_execve+0x94/0xb0
[  183.822690][    C0]  do_syscall_64+0xfa/0x3b0
[  183.822709][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.822723][    C0] page last free pid 5221 tgid 5221 stack trace:
[  183.822732][    C0]  __free_frozen_pages+0xb80/0xd80
[  183.822750][    C0]  __put_partials+0x156/0x1a0
[  183.822766][    C0]  put_cpu_partial+0x17c/0x250
[  183.822783][    C0]  __slab_free+0x2d5/0x3c0
[  183.822802][    C0]  qlist_free_all+0x97/0x140
[  183.822816][    C0]  kasan_quarantine_reduce+0x148/0x160
[  183.822830][    C0]  __kasan_slab_alloc+0x22/0x80
[  183.822845][    C0]  __kmalloc_cache_noprof+0x1be/0x3d0
[  183.822862][    C0]  kernfs_fop_open+0x397/0xca0
[  183.822879][    C0]  do_dentry_open+0xdf0/0x1970
[  183.822901][    C0]  vfs_open+0x3b/0x340
[  183.822920][    C0]  path_openat+0x2ee5/0x3830
[  183.822936][    C0]  do_filp_open+0x1fa/0x410
[  183.822950][    C0]  do_sys_openat2+0x121/0x1c0
[  183.822964][    C0]  __x64_sys_openat+0x138/0x170
[  183.822978][    C0]  do_syscall_64+0xfa/0x3b0
[  183.822996][    C0] 
[  183.823000][    C0] Memory state around the buggy address:
[  183.823009][    C0]  ffff88807b4ebe80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.823020][    C0]  ffff88807b4ebf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.823030][    C0] >ffff88807b4ebf80: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc
[  183.823038][    C0]                                            ^
[  183.823048][    C0]  ffff88807b4ec000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  183.823059][    C0]  ffff88807b4ec080: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.823068][    C0] ==================================================================
[  183.823084][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  183.823097][    C0] CPU: 0 UID: 0 PID: 7039 Comm: syz.0.382 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) 
[  183.823117][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  183.823126][    C0] Call Trace:
[  183.823133][    C0]  <IRQ>
[  183.823141][    C0]  dump_stack_lvl+0x99/0x250
[  183.823160][    C0]  ? __asan_memcpy+0x40/0x70
[  183.823174][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.823192][    C0]  ? __pfx__printk+0x10/0x10
[  183.823215][    C0]  panic+0x2db/0x790
[  183.823232][    C0]  ? __pfx_panic+0x10/0x10
[  183.823250][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  183.823269][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  183.823288][    C0]  ? print_memory_metadata+0x314/0x400
[  183.823312][    C0]  ? flush_tlb_func+0x23d/0x6c0
[  183.823332][    C0]  check_panic_on_warn+0x89/0xb0
[  183.823353][    C0]  ? flush_tlb_func+0x23d/0x6c0
[  183.823372][    C0]  end_report+0x78/0x160
[  183.823390][    C0]  kasan_report+0x129/0x150
[  183.823409][    C0]  ? flush_tlb_func+0x23d/0x6c0
[  183.823430][    C0]  kasan_check_range+0x2b0/0x2c0
[  183.823451][    C0]  flush_tlb_func+0x23d/0x6c0
[  183.823475][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  183.823494][    C0]  ? sched_clock_cpu+0x74/0x430
[  183.823510][    C0]  ? rcu_is_watching+0x15/0xb0
[  183.823535][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  183.823555][    C0]  __flush_smp_call_function_queue+0x370/0xaa0
[  183.823574][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[  183.823595][    C0]  __sysvec_call_function_single+0xa8/0x3d0
[  183.823617][    C0]  sysvec_call_function_single+0x9e/0xc0
[  183.823637][    C0]  </IRQ>
[  183.823644][    C0]  <TASK>
[  183.823651][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  183.823668][    C0] RIP: 0010:console_flush_all+0x7f7/0xc40
[  183.823689][    C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24
[  183.823702][    C0] RSP: 0018:ffffc9000c77f6e0 EFLAGS: 00000293
[  183.823716][    C0] RAX: 1ffffffff1d78ef3 RBX: ffffffff8ebc7798 RCX: ffff88802a699e00
[  183.823728][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  183.823738][    C0] RBP: ffffc9000c77f830 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6
[  183.823749][    C0] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: dffffc0000000000
[  183.823762][    C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ebc7740
[  183.823782][    C0]  ? console_flush_all+0x13a/0xc40
[  183.823803][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  183.823825][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  183.823847][    C0]  console_unlock+0xc4/0x270
[  183.823865][    C0]  ? __pfx_console_unlock+0x10/0x10
[  183.823883][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  183.823903][    C0]  vprintk_emit+0x5b7/0x7a0
[  183.823921][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  183.823938][    C0]  ? number+0x91/0xf60
[  183.823958][    C0]  _printk+0xcf/0x120
[  183.823973][    C0]  ? __pfx____ratelimit+0x10/0x10
[  183.823992][    C0]  ? __pfx__printk+0x10/0x10
[  183.824014][    C0]  should_fail_ex+0x3f5/0x560
[  183.824040][    C0]  _copy_to_user+0x31/0xb0
[  183.824056][    C0]  simple_read_from_buffer+0xe1/0x170
[  183.824075][    C0]  proc_fail_nth_read+0x1df/0x250
[  183.824091][    C0]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  183.824108][    C0]  ? rw_verify_area+0x258/0x650
[  183.824126][    C0]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  183.824142][    C0]  vfs_read+0x200/0x980
[  183.824162][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  183.824182][    C0]  ? __pfx_vfs_read+0x10/0x10
[  183.824201][    C0]  ? __fget_files+0x2a/0x420
[  183.824225][    C0]  ? __fget_files+0x3a0/0x420
[  183.824245][    C0]  ? __fget_files+0x2a/0x420
[  183.824270][    C0]  ksys_read+0x145/0x250
[  183.824288][    C0]  ? __fget_files+0x3a0/0x420
[  183.824309][    C0]  ? __pfx_ksys_read+0x10/0x10
[  183.824330][    C0]  ? do_syscall_64+0xbe/0x3b0
[  183.824352][    C0]  do_syscall_64+0xfa/0x3b0
[  183.824373][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  183.824392][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.824407][    C0]  ? clear_bhb_loop+0x60/0xb0
[  183.824423][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.824438][    C0] RIP: 0033:0x7f714698d33c
[  183.824452][    C0] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  183.824465][    C0] RSP: 002b:00007f714785d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  183.824483][    C0] RAX: ffffffffffffffda RBX: 00007f7146bb6080 RCX: 00007f714698d33c
[  183.824497][    C0] RDX: 000000000000000f RSI: 00007f714785d0a0 RDI: 0000000000000003
[  183.824508][    C0] RBP: 00007f714785d090 R08: 0000000000000000 R09: 0000000000000000
[  183.824525][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.824535][    C0] R13: 0000000000000001 R14: 00007f7146bb6080 R15: 00007ffdc38cefc8
[  183.824554][    C0]  </TASK>
[  183.824779][    C0] Kernel Offset: disabled