last executing test programs:

5m6.75671873s ago: executing program 1 (id=914):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, 0x0, 0x2042, 0x19d)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r4 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000180), 0x5, 0x40)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000000)={0x0, 0x10004, 0x1008, 0x1})

5m0.724441608s ago: executing program 1 (id=922):
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000380), 0x651, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000100000000000000070e000006000000000000024000000000000000"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/module/hid_steam/parameters/lizard_mode\x00', 0x2, 0x0)
write(r1, &(0x7f00000007c0)='0\n', 0x2)
close(r1)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000840)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x16, 0x3, 0x28de, 0x1302, 0x0, 0x0, "05010905a1018542150026ff007508953509018102c0"}}, 0x12a)
write$UHID_INPUT2(r2, &(0x7f00000009c0)={0xc, {0x34, 'B\x00@\x00'/52}}, 0x3a)
nanosleep(&(0x7f0000000a00)={0x0, 0x1dcd6500}, 0x0)
write$UHID_INPUT2(r2, &(0x7f0000000a40)={0xc, {0x36, 'B\x00'/53}}, 0x3e)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01864c1, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
mount(0x0, &(0x7f0000000480)='./sec\x00', &(0x7f00000004c0)='securityfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write(r3, &(0x7f0000000540)='<kernel> /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain=<kernel> /new', 0x5d)
read(r3, 0x0, 0x0)

4m58.936073532s ago: executing program 1 (id=925):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

4m56.402575054s ago: executing program 1 (id=929):
r0 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5)
socket$pppoe(0x18, 0x1, 0x0)
fchdir(r1)
r2 = syz_open_procfs(r0, &(0x7f00000001c0)='coredump_filter\x00')
pread64(r2, 0x0, 0x0, 0x4)

4m53.904272516s ago: executing program 1 (id=930):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

4m49.66863914s ago: executing program 1 (id=939):
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000280))
dup(0xffffffffffffffff)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x109402, 0x0)
r2 = io_uring_setup(0x1, &(0x7f00000002c0)={0x0, 0x0, 0x3800})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x2, &(0x7f0000001580)={&(0x7f00000015c0), 0x1000}, &(0x7f0000001600)={&(0x7f0000001640), 0x1000, 0x1}}, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./sys/fs/orangefs/op_timeout_secs\x00', 0x1, 0x0)
write(r3, &(0x7f0000001640)="5fca", 0x2)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001780), 0x42, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f00000017c0)=0x4)
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r2, 0x24, &(0x7f0000001680)={0x0, 0x1, '\x00', @zc_export={r2}}, 0x0)

4m33.575742606s ago: executing program 32 (id=939):
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000280))
dup(0xffffffffffffffff)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x109402, 0x0)
r2 = io_uring_setup(0x1, &(0x7f00000002c0)={0x0, 0x0, 0x3800})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x2, &(0x7f0000001580)={&(0x7f00000015c0), 0x1000}, &(0x7f0000001600)={&(0x7f0000001640), 0x1000, 0x1}}, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./sys/fs/orangefs/op_timeout_secs\x00', 0x1, 0x0)
write(r3, &(0x7f0000001640)="5fca", 0x2)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001780), 0x42, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f00000017c0)=0x4)
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r2, 0x24, &(0x7f0000001680)={0x0, 0x1, '\x00', @zc_export={r2}}, 0x0)

3m47.663575904s ago: executing program 0 (id=1026):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xdf}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x5c}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

3m46.312364568s ago: executing program 0 (id=1027):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r3, &(0x7f0000000640)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019640)=0x80000000000003)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000019680), 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000019700), 0x88b02, 0x0)
write$P9_RSTATu(r4, &(0x7f0000019740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x230)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000198c0)={0x0, 0x0, &(0x7f0000019900)={0x0}}, 0x0)
mq_open(0x0, 0x8c2, 0x30, 0x0)

3m43.963587375s ago: executing program 0 (id=1029):
r0 = syz_clone(0x200000, 0x0, 0x36, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
fchdir(r1)
mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r2 = syz_open_procfs(r0, &(0x7f00000001c0)='coredump_filter\x00')
pread64(r2, 0x0, 0x0, 0x4)

3m35.300190039s ago: executing program 0 (id=1040):
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffec, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0)
socketpair(0x2a, 0x2, 0x1, &(0x7f0000000340))
syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d0003000000008000000000000000000000070000000000000008000000000040000500"], 0x78)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)
r1 = gettid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3ff, 0x0, 0x9, 0x1cf, 0x1, r1})
r2 = gettid()
timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000280))
timer_create(0x1, &(0x7f0000000800)={0x0, 0x16, 0x4, @thr={&(0x7f00000002c0)="e56bca1892532abbe85aa1e51dab16ccabd874b1d38f1e209189148902841d34949da5783aef3256079edfad55c96fbffce3a71a084d81a7960ff39815a15c31896ad996557fd89848e8c087e06bbbd8c3c659f1cc9e67123699f212de793e", 0xfffffffffffffffe}}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
socket$kcm(0x10, 0x2, 0x4)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141102)
writev(r3, &(0x7f0000000680)=[{&(0x7f00000006c0)="94", 0xf000}, {0x0}], 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xb, &(0x7f0000000900)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000a40)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a80)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x30, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}}, 0x2)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0x58, &(0x7f0000000d00)}, 0x10)

3m28.458746656s ago: executing program 0 (id=1046):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20101, 0x0)
ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x800, 0x0, 0xffffffff, 0x1000000})
r1 = syz_open_dev$swradio(&(0x7f0000001400), 0x1, 0x2)
dup(r1)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xe958})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000001480)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000014c0)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000001500)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000001540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000001580), 0x0, 0x0)
read$msr(r6, &(0x7f0000003c40)=""/102392, 0x18ff8)
sched_setaffinity(r5, 0x2, &(0x7f000001cc40)=0x80000000000003)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f000001cc80), 0x400000000a882, 0x0)
dup(r7)
sendto$inet6(r2, &(0x7f00000012c0)='X', 0x1, 0x0, &(0x7f0000001300)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
semctl$SETVAL(0x0, 0xff7f0000, 0x10, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f0000001340)=[{&(0x7f0000001380)="480000001400190d09004beafd0d8c560a84476080ffe00600004e23590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

3m26.561933283s ago: executing program 0 (id=1049):
syz_open_procfs(0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000d00), 0xff7f)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r2, &(0x7f00000004c0)=ANY=[], 0x102)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

3m10.234861574s ago: executing program 33 (id=1049):
syz_open_procfs(0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000d00), 0xff7f)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r2, &(0x7f00000004c0)=ANY=[], 0x102)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

20.786391541s ago: executing program 2 (id=1301):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa6)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r2, &(0x7f0000000500)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x47, &(0x7f0000019500)=0x7)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000019580)={0x0, 0x18, 0xfa00, {0x1002, 0x0, 0x106, 0x4}}, 0x20)
mount$overlay(0x0, &(0x7f00000195c0)='./file0\x00', &(0x7f0000019600), 0x0, &(0x7f0000019640)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000019680)='./file0\x00', 0x0, 0xd5)
openat$cgroup_ro(r3, &(0x7f00000196c0)='cpu.stat\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)

14.183174143s ago: executing program 4 (id=1308):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x80041)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102)
writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)="94", 0xf000}, {0x0}], 0x2)
write$binfmt_misc(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0xc804, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn'])
umount2(&(0x7f0000000580)='./file0\x00', 0x1)

12.65716112s ago: executing program 3 (id=1309):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r3, &(0x7f00000077c0)=""/102392, 0x18ff8)
futex(0x0, 0x10b, 0x2, 0x0, 0x0, 0x0)
sched_setaffinity(r2, 0x47, &(0x7f0000020800)=0x7)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0xc000)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r6}, &(0x7f0000000b00), 0x0}, 0x20)
write(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

10.864516344s ago: executing program 3 (id=1310):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0)
listen(r0, 0xd)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01000000000000004000010000001c000180060001000200000008000300ac1414b60800060003"], 0x30}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x2000}}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800)

10.324750687s ago: executing program 5 (id=1312):
syz_open_dev$loop(&(0x7f0000000240), 0x440, 0x888e2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x3, 0x4, 0x2a, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x10000000, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x2, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0xea, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xca, 0x8, 0x40000, 0x0, 0xa1, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x401, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x7, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x8001, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0xfffffffe, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000880)='R', 0x1}], 0x1)
syncfs(r0)
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000980)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa017e000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000a00), 0x0, 0x0)
read$msr(r3, &(0x7f0000000a40)=""/102392, 0x18ff8)
read$FUSE(r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000019a80)={0x0, 0x0, &(0x7f0000019ac0)={&(0x7f0000019b00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c000200"], 0x20}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000019b40)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

8.717973146s ago: executing program 4 (id=1313):
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1860, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x0, 0x1, 0x80, "0e6a6051035f5a22f39ca600", 0x3231564e})

8.536344351s ago: executing program 4 (id=1314):
r0 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x20000)
ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000900)={'\x00', 0x23f5, 0xdd33, 0x1, 0xffffffffffffffff, 0x6})
ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0)

8.364020955s ago: executing program 5 (id=1315):
r0 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x20000)
ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0)

7.640297253s ago: executing program 4 (id=1316):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r3, &(0x7f00000077c0)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000020800)=0x7)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7.36749052s ago: executing program 5 (id=1317):
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000b40)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000bc0)={0x42, 0x1, 0x2, 0xf5ff}, 0x10)
socketpair(0x28, 0x1, 0x7, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008094}, 0x48094)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r5, &(0x7f0000000c40)=""/102392, 0x18ff8)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)

7.274730872s ago: executing program 2 (id=1318):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="620ad0ff45002c00620ad4ff00000000620ad8ff40060000620adcff7f000001620ae0ff7f000001620ae4ff12345678620ae8ff11223344620aecff00000000620af0ff60021000620af4ff00000000620af8ff02040000620afcff00000000bfa100000000000007010000d0ffffffbfa200000000000007020000e4ffffffb70300001800000085000000cc000000b70000000200000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000740)="0000000000010000000000020800", 0x0, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.016740163s ago: executing program 3 (id=1319):
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r3, &(0x7f00000077c0)=""/102392, 0x18ff8)
futex(0x0, 0x10b, 0x2, 0x0, 0x0, 0x0)
sched_setaffinity(r2, 0x47, &(0x7f0000020800)=0x7)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0xc000)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r6}, &(0x7f0000000b00), 0x0}, 0x20)
write(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

5.872325726s ago: executing program 2 (id=1320):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000026c0)={0xffffffffffffffff, 0x5, 0x50, 0x0, &(0x7f0000002740)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002900)="b2", 0x1}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x4000000)
read(0xffffffffffffffff, &(0x7f0000002940)=""/68, 0x44)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002a40)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @binary="01000000"}]}, 0x1c}}, 0x4000080)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002a80)=ANY=[], 0x0)
socket$netlink(0x10, 0x3, 0x0)
fsopen(0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002ac0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002b00)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f0000002b80), 0x2, 0x141102)
dup(0xffffffffffffffff)
writev(r1, &(0x7f0000002bc0)=[{&(0x7f0000002c00)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002cc0)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000002d00), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002d40), r2)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002e00)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002f00)=ANY=[], 0x8c}}, 0x4081)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)

4.404076412s ago: executing program 3 (id=1321):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f000000a300), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f000000a340)={0x0, 0x0, &(0x7f000000a380)={&(0x7f000000a500)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x2c}}, 0x0)

4.361387033s ago: executing program 4 (id=1322):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000680)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000700), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000840)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xb0}}}, &(0x7f0000000880)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xed82, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x800, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

4.164279228s ago: executing program 2 (id=1323):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffa9}, {0x8, 0x8e}}]}, 0x4c}}, 0x0)

3.444271196s ago: executing program 2 (id=1324):
syz_open_dev$loop(&(0x7f0000000240), 0x440, 0x888e2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000280)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x3, 0x4, 0x2a, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x10000000, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x2, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0xea, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xca, 0x8, 0x40000, 0x0, 0xa1, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x401, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x7, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x8001, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0xfffffffe, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000880)='R', 0x1}], 0x1)
syncfs(r0)
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000980)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000009c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa017e000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000a00), 0x0, 0x0)
read$msr(r4, &(0x7f0000000a40)=""/102392, 0x18ff8)
read$FUSE(r4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000019a80)={0x0, 0x0, &(0x7f0000019ac0)={&(0x7f0000019b00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c000200"], 0x20}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000019b40)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

1.764354267s ago: executing program 2 (id=1325):
r0 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x20000)
ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0)

1.702382978s ago: executing program 5 (id=1326):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010)

1.180274941s ago: executing program 5 (id=1327):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0)
listen(r0, 0xd)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01000000000000004000010000001c000180060001000200000008000300ac1414b60800060003"], 0x30}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x2000}}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800)

913.694238ms ago: executing program 3 (id=1328):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0x1260, 0x80000000200000c)

202.757085ms ago: executing program 5 (id=1329):
r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/net/afs/sysname\x00', 0x0, 0x23)
pread64(r0, &(0x7f0000000900)=""/26, 0xfdef, 0xff)

244.18µs ago: executing program 4 (id=1330):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x1a)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000002c0)=0x405, 0x4)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./sys_sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2)
pipe2$9p(0x0, 0x4000)
shutdown(0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={<r4=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, r4, 0x1}}, 0x48)
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000004740)={0x12, 0x6, 0xfa00, {0x0, r4}}, 0x18)
mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB="2373797a313a73797a311b11fb4484385d510222"], &(0x7f0000000100)='./mnt/trace_pipe\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="666c6f6352aab3ab854b9b7f6175746f63656c6c2c666c6f636b3d64796e2c666c6f636b3d810000006c2c6613b9f057be333719c43a9d6c6f756b3d737472696319e307c8d5b393dc0e8b742c666c6f636b3d776f743d072e2c647374656d5f"])
read(r1, &(0x7f0000000740)=""/16384, 0x4000)
write$binfmt_script(r0, 0x0, 0x0)

0s ago: executing program 3 (id=1331):
mkdir(&(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write(r0, &(0x7f0000000540)='/dev/ram0,6', 0xb)

kernel console output (not intermixed with test programs):

mfd 0-0001: could not read Retu revision: -5
[  536.256123][ T7059] retu-mfd: probe of 0-0001 failed with error -5
[  536.263086][ T7059] i2c i2c-0: new_device: Instantiated device retu at 0x01
[  537.926092][ T7074] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  537.935409][ T7074] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  541.233221][ T7093] futex_wake_op: syz.3.346 tries to shift op by 144; fix this program
[  541.259228][ T7093] futex_wake_op: syz.3.346 tries to shift op by 144; fix this program
[  542.740649][ T7106] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  542.749943][ T7106] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  543.873436][ T7111] jffs2: notice: (7111) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  548.372070][ T7121] overlayfs: overlapping lowerdir path
[  555.387143][ T7143] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  555.396391][ T7143] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  557.954178][ T5882] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  559.326242][ T5882] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  559.344220][ T5882] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.404152][ T5882] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  559.435272][ T5882] usb 4-1: config 0 interface 0 has no altsetting 0
[  559.482056][ T5882] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  559.492472][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.503362][ T5882] usb 4-1: config 0 descriptor??
[  559.512967][ T5882] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count
[  561.583387][ T5882] usbhid 4-1:0.0: can't add hid device: -71
[  561.614372][ T5882] usbhid: probe of 4-1:0.0 failed with error -71
[  561.634994][ T5882] usb 4-1: USB disconnect, device number 7
[  562.869209][ T7173] usb usb7: usbfs: process 7173 (syz.1.368) did not claim interface 0 before use
[  562.966955][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  562.973411][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  563.519968][ T7174] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  563.600270][ T7174] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  573.130721][ T7201] futex_wake_op: syz.2.373 tries to shift op by 144; fix this program
[  573.139138][ T7201] futex_wake_op: syz.2.373 tries to shift op by 144; fix this program
[  573.540455][ T7210] ptp ptp0: guarantee physical clock free running
[  573.550605][ T7210] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  574.461782][ T7214] usb usb7: usbfs: process 7214 (syz.0.380) did not claim interface 0 before use
[  576.410765][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  580.016076][ T7258] usb usb7: usbfs: process 7258 (syz.3.391) did not claim interface 0 before use
[  580.844846][ T5792] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  582.572891][ T5792] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  583.571821][ T5792] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  583.617892][ T5792] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  584.144108][ T5792] usb 1-1: config 0 interface 0 has no altsetting 0
[  584.150809][ T5792] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  584.184127][ T5792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.203578][ T5792] usb 1-1: config 0 descriptor??
[  584.224309][ T5792] usb 1-1: can't set config #0, error -71
[  584.244888][ T5792] usb 1-1: USB disconnect, device number 13
[  585.567969][ T7290] random: crng reseeded on system resumption
[  587.541786][ T7296] usb usb7: usbfs: process 7296 (syz.3.400) did not claim interface 0 before use
[  588.730544][   T27] audit: type=1800 audit(2000000015.190:32): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.402" name="queue_mode" dev="configfs" ino=12743 res=0 errno=0
[  591.211059][ T7314] ptp ptp0: guarantee physical clock free running
[  591.220837][ T7314] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  592.751667][ T7326] usb usb7: usbfs: process 7326 (syz.1.411) did not claim interface 0 before use
[  593.115272][   T27] audit: type=1800 audit(2000000001.910:33): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.414" name="queue_mode" dev="configfs" ino=12820 res=0 errno=0
[  596.229901][ T7341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.413'.
[  604.281257][ T7364] No source specified
[  608.227589][ T7376] syz.0.427 (7376) used greatest stack depth: 20824 bytes left
[  610.834252][   T27] audit: type=1800 audit(2000000019.560:34): pid=7395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.426" name="queue_mode" dev="configfs" ino=11912 res=0 errno=0
[  612.065540][ T7403] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  612.075549][ T7403] Bluetooth: ISO socket layer initialized
[  614.778611][ T7426] overlayfs: overlapping lowerdir path
[  615.791921][ T5792] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  616.070086][ T7429] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  616.079854][ T7429] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4
[  616.090848][ T7429] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s
[  616.105662][ T7429] syz.2.440 (7429) used greatest stack depth: 17416 bytes left
[  616.124651][   T27] audit: type=1800 audit(2000000024.860:35): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.440" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0
[  616.375716][ T7432] netlink: 'syz.0.436': attribute type 13 has an invalid length.
[  616.484076][ T5792] usb 4-1: device not accepting address 9, error -71
[  616.627500][   T27] audit: type=1807 audit(2000000025.410:36): UNKNOWN=measu res=0
[  616.745631][   T27] audit: type=1802 audit(2000000025.420:37): pid=7438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.444" res=0 errno=0
[  619.117220][   T27] audit: type=1800 audit(2000000027.910:38): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.446" name="queue_mode" dev="configfs" ino=12023 res=0 errno=0
[  619.663617][ T7434] ima: policy update failed
[  619.717481][   T27] audit: type=1802 audit(2000000028.470:39): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.444" res=0 errno=0
[  622.023966][ T7469] overlayfs: overlapping lowerdir path
[  623.124104][ T5806] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  623.254021][   T27] audit: type=1800 audit(2000000032.040:40): pid=7477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.456" name="queue_mode" dev="configfs" ino=12980 res=0 errno=0
[  623.356200][ T5806] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  623.370394][ T5806] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  623.382356][ T5806] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  623.423193][ T5806] usb 2-1: config 0 interface 0 has no altsetting 0
[  623.500494][ T5806] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  623.607808][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.735674][ T5806] usb 2-1: config 0 descriptor??
[  623.972836][ T5806] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count
[  625.993160][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  626.003099][ T5806] usbhid 2-1:0.0: can't add hid device: -71
[  626.009298][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  626.034669][ T5806] usbhid: probe of 2-1:0.0 failed with error -71
[  626.060193][ T5806] usb 2-1: USB disconnect, device number 5
[  628.148368][ T5086] Bluetooth: hci0: Zero size dump init pkt
[  628.324829][   T27] audit: type=1800 audit(2000000037.120:41): pid=7509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.466" name="queue_mode" dev="configfs" ino=14472 res=0 errno=0
[  629.534061][ T7518] futex_wake_op: syz.1.468 tries to shift op by 144; fix this program
[  629.542454][ T7518] futex_wake_op: syz.1.468 tries to shift op by 144; fix this program
[  629.792874][ T7526] usb usb7: usbfs: process 7526 (syz.2.469) did not claim interface 0 before use
[  632.091730][   T27] audit: type=1800 audit(2000000040.880:42): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.480" name="queue_mode" dev="configfs" ino=14538 res=0 errno=0
[  632.337623][ T7563] usb usb7: usbfs: process 7563 (syz.0.481) did not claim interface 0 before use
[  634.580318][ T7574] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  635.810768][ T7585] syzkaller0: entered promiscuous mode
[  635.828589][ T7585] syzkaller0: entered allmulticast mode
[  638.310175][ T7609] ptp ptp0: guarantee physical clock free running
[  638.322261][ T7609] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  638.607235][   T27] audit: type=1800 audit(2000000000.290:43): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.495" name="queue_mode" dev="configfs" ino=13973 res=0 errno=0
[  641.914334][ T5806] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  642.126085][ T5806] usb 4-1: config index 0 descriptor too short (expected 8192, got 18)
[  642.145459][ T5882] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  642.159827][ T5806] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  642.185055][ T5806] usb 4-1: config 0 has no interfaces?
[  642.205553][ T5806] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  642.224197][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.246632][ T5806] usb 4-1: Product: syz
[  642.250888][ T5806] usb 4-1: Manufacturer: syz
[  642.269054][ T5806] usb 4-1: SerialNumber: syz
[  642.289572][ T5806] usb 4-1: config 0 descriptor??
[  642.356517][ T5882] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  642.369745][ T5882] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  642.379914][ T5882] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  642.393701][ T5882] usb 1-1: config 0 interface 0 has no altsetting 0
[  642.401160][ T5882] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  642.410685][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.492253][ T7654] ptp ptp0: guarantee physical clock free running
[  642.504257][ T7654] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  642.545978][ T5882] usb 1-1: config 0 descriptor??
[  642.868306][ T5882] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[  645.138669][ T5882] usbhid 1-1:0.0: can't add hid device: -71
[  645.180599][ T5882] usbhid: probe of 1-1:0.0 failed with error -71
[  645.281912][ T5882] usb 1-1: USB disconnect, device number 14
[  645.318901][ T7640] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  645.387349][ T7660] ip_tables: iptables: counters copy to user failed while replacing table
[  645.477862][ T5806] usb 4-1: USB disconnect, device number 11
[  645.687913][   T27] audit: type=1800 audit(2000000003.200:44): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.513" name="queue_mode" dev="configfs" ino=14808 res=0 errno=0
[  647.109175][ T7682] overlayfs: overlapping lowerdir path
[  648.434049][ T5792] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  650.694468][ T5792] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  650.725680][ T5792] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  650.743965][ T5792] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  650.757262][ T5792] usb 2-1: config 0 interface 0 has no altsetting 0
[  650.765148][ T5792] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  650.774672][ T5792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  650.791156][ T5792] usb 2-1: config 0 descriptor??
[  650.816082][ T5792] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count
[  652.517754][ T5792] usbhid 2-1:0.0: can't add hid device: -71
[  652.523827][ T5792] usbhid: probe of 2-1:0.0 failed with error -71
[  652.533144][ T5792] usb 2-1: USB disconnect, device number 6
[  652.923801][ T7714] ptp ptp0: guarantee physical clock free running
[  652.934164][ T7714] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  654.366227][ T7722] overlayfs: overlapping lowerdir path
[  660.378745][ T7742] futex_wake_op: syz.0.530 tries to shift op by 144; fix this program
[  660.387238][ T7742] futex_wake_op: syz.0.530 tries to shift op by 144; fix this program
[  661.179386][ T5792] hid-generic 0003:28DE:1302.0002: unknown main item tag 0x0
[  661.195923][ T5792] hid-generic 0003:28DE:1302.0002: unknown main item tag 0x0
[  661.203548][ T5792] hid-generic 0003:28DE:1302.0002: unknown main item tag 0x0
[  661.247968][ T5792] hid-generic 0003:28DE:1302.0002: unbalanced collection at end of report description
[  661.324187][ T5792] hid-generic: probe of 0003:28DE:1302.0002 failed with error -22
[  666.438580][ T7807] overlayfs: overlapping lowerdir path
[  673.668289][ T7865] overlayfs: overlapping lowerdir path
[  675.005328][ T5861] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  675.234739][ T5861] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  675.252225][ T5861] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  675.288225][ T5861] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  675.342208][ T5861] usb 3-1: config 0 interface 0 has no altsetting 0
[  675.374066][ T5861] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  675.424177][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.488966][ T5861] usb 3-1: config 0 descriptor??
[  675.813333][ T5861] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[  678.033639][ T5861] usbhid 3-1:0.0: can't add hid device: -71
[  678.090612][ T5861] usbhid: probe of 3-1:0.0 failed with error -71
[  678.124275][ T5861] usb 3-1: USB disconnect, device number 14
[  679.099446][ T7906] futex_wake_op: syz.1.554 tries to shift op by 144; fix this program
[  679.165016][ T7906] futex_wake_op: syz.1.554 tries to shift op by 144; fix this program
[  686.941896][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  686.949143][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  688.014019][   T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  689.602606][   T23] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  689.614393][   T23] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  689.624859][   T23] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  689.638064][   T23] usb 4-1: config 0 interface 0 has no altsetting 0
[  689.644982][   T23] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  689.655132][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.684779][   T23] usb 4-1: config 0 descriptor??
[  689.702481][   T23] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count
[  691.746650][   T23] usbhid 4-1:0.0: can't add hid device: -71
[  691.766724][   T23] usbhid: probe of 4-1:0.0 failed with error -71
[  691.827353][   T23] usb 4-1: USB disconnect, device number 12
[  692.293991][ T5863] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  693.497541][ T5863] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  693.523999][ T5863] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  693.533833][ T5863] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  693.554004][ T5863] usb 1-1: config 0 interface 0 has no altsetting 0
[  693.560668][ T5863] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  693.594277][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.624934][ T5863] usb 1-1: config 0 descriptor??
[  693.649712][ T5863] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[  696.244013][ T5863] usbhid 1-1:0.0: can't add hid device: -71
[  696.253805][ T5863] usbhid: probe of 1-1:0.0 failed with error -71
[  696.283416][ T5863] usb 1-1: USB disconnect, device number 15
[  699.924154][ T5863] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  700.496386][ T8008] overlayfs: overlapping lowerdir path
[  701.628295][ T5863] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  701.639408][ T5863] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  701.690104][ T5863] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  701.723794][ T5863] usb 3-1: config 0 interface 0 has no altsetting 0
[  701.744314][ T5863] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  701.753420][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.818388][ T5863] usb 3-1: config 0 descriptor??
[  701.828486][ T5863] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[  703.634052][ T5863] usbhid 3-1:0.0: can't add hid device: -71
[  703.641300][ T5863] usbhid: probe of 3-1:0.0 failed with error -71
[  703.684503][ T5863] usb 3-1: USB disconnect, device number 15
[  703.964040][ T7443] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  704.195774][ T7443] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  704.213961][ T7443] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  704.258015][ T7443] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  704.341286][ T7443] usb 1-1: config 0 interface 0 has no altsetting 0
[  704.354819][ T7443] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  704.403347][ T7443] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.430152][ T7443] usb 1-1: config 0 descriptor??
[  704.491056][ T7443] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[  706.275176][ T7443] usbhid 1-1:0.0: can't add hid device: -71
[  706.281210][ T7443] usbhid: probe of 1-1:0.0 failed with error -71
[  706.304610][ T7443] usb 1-1: USB disconnect, device number 16
[  708.253978][ T8032] overlayfs: overlapping lowerdir path
[  714.675597][ T8054] usb usb7: usbfs: process 8054 (syz.1.591) did not claim interface 0 before use
[  716.824415][ T5860] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  717.044133][   T23] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  717.066588][ T5860] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  717.088490][ T5860] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  717.113276][ T5860] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  717.143542][ T5860] usb 2-1: config 0 interface 0 has no altsetting 0
[  717.178202][ T5860] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  717.244484][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.254321][   T23] usb 1-1: Using ep0 maxpacket: 32
[  717.286644][ T5860] usb 2-1: config 0 descriptor??
[  717.307810][ T5860] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count
[  717.326209][   T23] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  717.354015][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.444374][   T23] gspca_main: nw80x-2.14.0 probing 055f:d001
[  719.394895][   T23] gspca_nw80x: reg_w err -110
[  719.399855][   T23] nw80x: probe of 1-1:3.0 failed with error -110
[  719.407018][ T5860] usbhid 2-1:0.0: can't add hid device: -71
[  719.413086][ T5860] usbhid: probe of 2-1:0.0 failed with error -71
[  719.438954][ T5860] usb 2-1: USB disconnect, device number 7
[  720.877744][   T23] usb 1-1: USB disconnect, device number 17
[  721.547374][ T8086] ptp ptp0: guarantee physical clock free running
[  721.558143][ T8086] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  722.449165][ T8094] usb usb7: usbfs: process 8094 (syz.3.605) did not claim interface 0 before use
[  726.949195][ T8109] overlayfs: overlapping lowerdir path
[  733.488269][ T8134] usb usb7: usbfs: process 8134 (syz.0.615) did not claim interface 0 before use
[  735.276064][ T8154] No source specified
[  735.937585][ T8153] ptp ptp0: guarantee physical clock free running
[  735.945349][ T8153] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  741.002477][ T8174] usb usb7: usbfs: process 8174 (syz.3.627) did not claim interface 0 before use
[  743.102605][ T8189] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  743.193744][ T8189] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  743.257644][ T8189] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  743.835730][ T8188] No source specified
[  743.843480][ T5863] IPVS: starting estimator thread 0...
[  743.944099][ T8191] IPVS: using max 19 ests per chain, 45600 per kthread
[  747.088430][ T8210] usb usb7: usbfs: process 8210 (syz.3.636) did not claim interface 0 before use
[  747.344930][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  747.351463][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  747.532756][   T27] audit: type=1800 audit(2000000011.580:45): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.637" name="c_chmask" dev="configfs" ino=16752 res=0 errno=0
[  747.844118][   T27] audit: type=1800 audit(2000000011.690:46): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.637" name="UDC" dev="configfs" ino=16756 res=0 errno=0
[  747.969961][ T8208] configfs-gadget.g1 gadget.0: afunc_bind:1261 Error!
[  748.293245][ T8208] udc dummy_udc.0: failed to start g1: -19
[  748.420564][ T8208] UDC core: g1: couldn't find an available UDC or it's busy
[  749.134784][ T5891] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  749.150537][ T8227] No source specified
[  750.657973][ T5863] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  750.704017][ T5891] usb 1-1: Using ep0 maxpacket: 32
[  750.745629][ T5891] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  750.758767][ T5891] usb 1-1: config 0 interface 0 has no altsetting 0
[  750.771219][ T5891] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  750.781027][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.789478][ T5891] usb 1-1: Product: syz
[  750.793700][ T5891] usb 1-1: Manufacturer: syz
[  750.798539][ T5891] usb 1-1: SerialNumber: syz
[  750.823857][ T5891] usb 1-1: config 0 descriptor??
[  750.842361][ T5891] gs_usb 1-1:0.0: Required endpoints not found
[  750.939325][ T5863] usb 4-1: Using ep0 maxpacket: 32
[  750.969131][ T5891] usb 1-1: USB disconnect, device number 18
[  751.008431][ T5863] usb 4-1: config 3 has an invalid interface number: 79 but max is 0
[  751.037017][ T5863] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  751.069454][ T5863] usb 4-1: config 3 has no interface number 0
[  751.083681][ T5863] usb 4-1: config 3 interface 79 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  751.119885][ T5863] usb 4-1: config 3 interface 79 has no altsetting 0
[  751.160760][ T5863] usb 4-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=fc.21
[  751.193330][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.221396][ T5863] usb 4-1: Product: syz
[  751.239319][ T5863] usb 4-1: Manufacturer: syz
[  751.258205][ T5863] usb 4-1: SerialNumber: syz
[  751.521397][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  751.571980][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  751.906598][ T8246] usb usb7: usbfs: process 8246 (syz.0.647) did not claim interface 0 before use
[  752.812877][ T5863] kobil_sct 4-1:3.79: required endpoints missing
[  752.826565][ T5863] usb 4-1: USB disconnect, device number 13
[  755.744181][ T5863] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  757.449345][ T5863] usb 4-1: device descriptor read/all, error -71
[  758.135385][ T8273] overlayfs: overlapping lowerdir path
[  759.217244][ T8279] usb usb7: usbfs: process 8279 (syz.0.657) did not claim interface 0 before use
[  759.706343][ T8283] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  759.774288][ T7443] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  759.994589][ T7443] usb 2-1: Using ep0 maxpacket: 32
[  760.006943][ T7443] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  760.074732][ T7443] usb 2-1: config 0 interface 0 has no altsetting 0
[  760.094968][ T7443] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  760.504810][ T7443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.513052][ T7443] usb 2-1: Product: syz
[  760.520401][ T7443] usb 2-1: Manufacturer: syz
[  760.575993][ T7443] usb 2-1: SerialNumber: syz
[  761.023433][ T7443] usb 2-1: config 0 descriptor??
[  761.035984][ T7443] gs_usb 2-1:0.0: Required endpoints not found
[  764.143462][ T5860] usb 2-1: USB disconnect, device number 8
[  764.624252][ T5863] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  764.994057][ T5863] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  765.028340][ T5863] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  765.073974][ T5863] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  765.223900][ T5863] usb 1-1: config 0 interface 0 has no altsetting 0
[  765.230754][ T5863] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  765.263894][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  765.323669][ T5863] usb 1-1: config 0 descriptor??
[  765.395343][ T5863] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[  767.203851][ T5863] usbhid 1-1:0.0: can't add hid device: -71
[  767.224051][ T5863] usbhid: probe of 1-1:0.0 failed with error -71
[  767.255399][ T5863] usb 1-1: USB disconnect, device number 19
[  767.651903][ T8330] usb usb7: usbfs: process 8330 (syz.1.668) did not claim interface 0 before use
[  767.936336][ T8336] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  768.706049][ T8345] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  768.744291][ T5806] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  769.004199][ T5806] usb 2-1: Using ep0 maxpacket: 32
[  769.043478][ T5806] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  769.107653][ T5806] usb 2-1: config 0 interface 0 has no altsetting 0
[  769.146046][ T5806] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  769.183687][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.225484][ T5806] usb 2-1: Product: syz
[  769.240141][ T5806] usb 2-1: Manufacturer: syz
[  769.245420][ T5806] usb 2-1: SerialNumber: syz
[  769.261623][ T5806] usb 2-1: config 0 descriptor??
[  769.276736][ T5806] gs_usb 2-1:0.0: Required endpoints not found
[  769.393665][ T8354] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  770.783990][ T5891] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  772.601785][ T5863] usb 2-1: USB disconnect, device number 9
[  772.692299][ T8371] futex_wake_op: syz.3.678 tries to shift op by 144; fix this program
[  772.807172][ T8371] futex_wake_op: syz.3.678 tries to shift op by 144; fix this program
[  772.828618][ T5891] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  772.851782][ T5891] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  772.864129][ T5891] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  772.877695][ T5891] usb 1-1: config 0 interface 0 has no altsetting 0
[  772.884618][ T5891] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  772.893815][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.918895][ T5891] usb 1-1: config 0 descriptor??
[  772.926626][ T8378] usb usb7: usbfs: process 8378 (syz.1.681) did not claim interface 0 before use
[  772.957540][ T5891] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[  774.890603][ T5891] usbhid 1-1:0.0: can't add hid device: -71
[  774.897649][ T5891] usbhid: probe of 1-1:0.0 failed with error -71
[  774.926673][ T5891] usb 1-1: USB disconnect, device number 20
[  776.180286][ T8386] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  777.782892][ T8398] FAULT_INJECTION: forcing a failure.
[  777.782892][ T8398] name failslab, interval 1, probability 0, space 0, times 0
[  777.797436][ T8398] CPU: 0 PID: 8398 Comm: syz.0.684 Not tainted syzkaller #0
[  777.804782][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  777.814879][ T8398] Call Trace:
[  777.818187][ T8398]  <TASK>
[  777.821176][ T8398]  dump_stack_lvl+0x18c/0x250
[  777.825915][ T8398]  ? show_regs_print_info+0x20/0x20
[  777.831155][ T8398]  ? load_image+0x420/0x420
[  777.835736][ T8398]  ? __might_sleep+0xe0/0xe0
[  777.840377][ T8398]  ? __lock_acquire+0x7eb0/0x7eb0
[  777.845465][ T8398]  should_fail_ex+0x394/0x4c0
[  777.850228][ T8398]  should_failslab+0x9/0x20
[  777.854791][ T8398]  slab_pre_alloc_hook+0x59/0x300
[  777.859858][ T8398]  kmem_cache_alloc+0x5a/0x2c0
[  777.864664][ T8398]  ? vm_area_dup+0x27/0x270
[  777.869249][ T8398]  vm_area_dup+0x27/0x270
[  777.873622][ T8398]  __split_vma+0x1a8/0xc20
[  777.878115][ T8398]  ? init_vma_prep+0x160/0x160
[  777.882938][ T8398]  ? mmap_write_unlock+0x160/0x160
[  777.888116][ T8398]  ? split_vma+0x8f/0x110
[  777.892489][ T8398]  mbind_range+0x448/0x710
[  777.896942][ T8398]  __se_sys_mbind+0x5ca/0x7c0
[  777.901655][ T8398]  ? __ia32_sys_get_robust_list+0x110/0x110
[  777.907595][ T8398]  ? __x64_sys_mbind+0xf0/0xf0
[  777.912434][ T8398]  ? lock_chain_count+0x20/0x20
[  777.917321][ T8398]  ? __x64_sys_mbind+0x21/0xf0
[  777.922135][ T8398]  do_syscall_64+0x55/0xb0
[  777.926610][ T8398]  ? clear_bhb_loop+0x40/0x90
[  777.931344][ T8398]  ? clear_bhb_loop+0x40/0x90
[  777.936062][ T8398]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  777.941991][ T8398] RIP: 0033:0x7f3fefb9e1d9
[  777.946440][ T8398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  777.966082][ T8398] RSP: 002b:00007f3ff0998028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  777.974540][ T8398] RAX: ffffffffffffffda RBX: 00007f3fefe25fa0 RCX: 00007f3fefb9e1d9
[  777.982572][ T8398] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000200000009000
[  777.990569][ T8398] RBP: 00007f3fefc35888 R08: 0000000000000000 R09: 0000000000000000
[  777.998570][ T8398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  778.006660][ T8398] R13: 00007f3fefe26038 R14: 00007f3fefe25fa0 R15: 00007ffefab6a928
[  778.014668][ T8398]  </TASK>
[  778.071691][ T8400] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  778.834605][ T8413] usb usb7: usbfs: process 8413 (syz.1.692) did not claim interface 0 before use
[  779.694111][ T5806] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  779.914276][ T5806] usb 3-1: Using ep0 maxpacket: 32
[  779.955516][ T5806] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  779.969571][ T8418] ptp ptp0: guarantee physical clock free running
[  779.979043][ T8418] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  780.033250][ T5806] usb 3-1: config 0 interface 0 has no altsetting 0
[  780.093367][ T5806] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  781.043919][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.104012][ T5806] usb 3-1: Product: syz
[  781.108338][ T5806] usb 3-1: Manufacturer: syz
[  781.113038][ T5806] usb 3-1: SerialNumber: syz
[  781.149388][ T5806] usb 3-1: config 0 descriptor??
[  781.186641][ T5806] gs_usb 3-1:0.0: Required endpoints not found
[  781.463356][ T5863] usb 3-1: USB disconnect, device number 16
[  782.798376][ T8432] overlayfs: overlapping lowerdir path
[  785.885776][ T8441] No source specified
[  787.370880][ T8455] usb usb7: usbfs: process 8455 (syz.2.701) did not claim interface 0 before use
[  788.386054][ T8466] ptp ptp0: guarantee physical clock free running
[  788.405355][ T8466] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  788.514011][ T5806] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  789.876068][ T5806] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  789.904659][ T5806] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  789.931736][ T5806] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  789.960381][ T5806] usb 4-1: config 0 interface 0 has no altsetting 0
[  789.967526][ T5806] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  789.986405][ T5806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.027976][ T5863] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  790.151177][ T5806] usb 4-1: config 0 descriptor??
[  790.164660][ T5806] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count
[  790.374049][ T5863] usb 2-1: Using ep0 maxpacket: 32
[  790.640997][ T5863] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  792.840025][ T5806] usbhid 4-1:0.0: can't add hid device: -71
[  792.849147][ T5863] usb 2-1: config 0 interface 0 has no altsetting 0
[  792.855798][ T5806] usbhid: probe of 4-1:0.0 failed with error -71
[  792.881413][ T5806] usb 4-1: USB disconnect, device number 16
[  793.039256][ T8480] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  793.427488][ T5863] usb 2-1: string descriptor 0 read error: -71
[  793.544313][ T5863] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  793.553402][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.619345][ T5863] usb 2-1: config 0 descriptor??
[  793.634629][ T5863] usb 2-1: can't set config #0, error -71
[  793.665219][ T5863] usb 2-1: USB disconnect, device number 10
[  793.924062][ T5806] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  794.137051][ T5806] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  794.168144][ T8489] usb usb7: usbfs: process 8489 (syz.1.713) did not claim interface 0 before use
[  794.205935][ T5806] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  794.244230][ T5806] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  794.257676][ T5806] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  794.288785][ T5806] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  794.299115][ T5806] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  794.314196][ T5806] usb 3-1: New USB device found, idVendor=7dcc, idProduct=676e, bcdDevice=77.db
[  794.323500][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  794.341232][ T5806] usb 3-1: config 0 descriptor??
[  795.828784][ T8496] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  795.967827][ T5891] usb 3-1: USB disconnect, device number 17
[  796.679581][ T8502] No source specified
[  798.244088][ T5861] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  799.862520][ T5861] usb 3-1: device descriptor read/all, error -71
[  800.004998][ T5863] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  800.244224][ T5863] usb 4-1: Using ep0 maxpacket: 32
[  800.251599][ T5863] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  800.270393][ T5863] usb 4-1: config 0 interface 0 has no altsetting 0
[  800.296463][ T5863] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  800.306609][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.337832][ T8528] usb usb7: usbfs: process 8528 (syz.0.723) did not claim interface 0 before use
[  800.614236][ T5863] usb 4-1: Product: syz
[  800.625037][ T5863] usb 4-1: Manufacturer: syz
[  800.631964][ T5863] usb 4-1: SerialNumber: syz
[  800.649047][ T5863] usb 4-1: config 0 descriptor??
[  800.656561][ T5863] gs_usb 4-1:0.0: Required endpoints not found
[  804.474354][ T7443] usb 4-1: USB disconnect, device number 17
[  804.853668][ T8548] No source specified
[  805.594281][ T8549] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  808.724478][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  808.734285][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  809.033218][ T8569] usb usb7: usbfs: process 8569 (syz.3.733) did not claim interface 0 before use
[  809.305184][ T8568] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  810.227597][ T8576] No source specified
[  811.044212][ T8580] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  812.694281][ T5891] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  812.899434][ T5891] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  812.911150][ T5891] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  812.921168][ T5891] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  812.938570][ T5891] usb 1-1: config 0 interface 0 has no altsetting 0
[  812.945676][ T5891] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  812.959632][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.972586][ T8612] usb usb7: usbfs: process 8612 (syz.3.743) did not claim interface 0 before use
[  813.001914][ T5891] usb 1-1: config 0 descriptor??
[  813.033787][ T5891] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[  815.064016][ T8583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  815.074013][ T5891] usbhid 1-1:0.0: can't add hid device: -71
[  815.080074][ T5891] usbhid: probe of 1-1:0.0 failed with error -71
[  815.118901][ T5891] usb 1-1: USB disconnect, device number 21
[  816.266150][ T8623] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  817.774808][ T8634] usb usb7: usbfs: process 8634 (syz.2.752) did not claim interface 0 before use
[  820.471635][ T5891] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  820.696559][ T5891] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  821.521876][ T5891] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  821.542733][ T5891] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  821.569988][ T5891] usb 3-1: config 0 interface 0 has no altsetting 0
[  821.579929][ T5891] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  821.599572][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  821.615141][ T5891] usb 3-1: config 0 descriptor??
[  821.764586][ T5891] usb 3-1: can't set config #0, error -71
[  821.795381][ T5891] usb 3-1: USB disconnect, device number 20
[  821.886770][ T8658] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  824.740452][ T8678] usb usb7: usbfs: process 8678 (syz.1.761) did not claim interface 0 before use
[  826.783355][ T8692] devtmpfs: Unknown parameter '/'
[  828.397797][ T8701] usb usb7: usbfs: process 8701 (syz.1.772) did not claim interface 0 before use
[  836.900691][ T8739] overlayfs: overlapping lowerdir path
[  842.704028][ T5086] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11
[  843.980526][ T8774] overlayfs: overlapping lowerdir path
[  846.775714][ T8784] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  851.435705][ T8810] Zero length message leads to an empty skb
[  851.965756][ T8816] ptp ptp0: guarantee physical clock free running
[  851.975785][ T8816] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  853.961846][ T8825] input: syz0 as /devices/virtual/input/input48
[  854.006208][ T8826] ip_tables: iptables: counters copy to user failed while replacing table
[  854.368299][ T5863] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  855.188458][ T8833] overlayfs: overlapping lowerdir path
[  855.630688][ T5863] usb 1-1: Using ep0 maxpacket: 16
[  855.648742][ T5863] usb 1-1: no configurations
[  855.653588][ T5863] usb 1-1: can't read configurations, error -22
[  855.833976][ T5863] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  856.057988][ T5863] usb 1-1: Using ep0 maxpacket: 16
[  856.074852][ T5863] usb 1-1: device descriptor read/all, error -71
[  856.101606][ T5863] usb usb1-port1: attempt power cycle
[  860.743416][ T8851] sctp: failed to load transform for md5: -2
[  861.684140][ T5861] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  862.325325][ T5861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  862.409032][ T5861] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  862.521872][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  862.645814][ T5861] as10x_usb: device has been detected
[  862.673137][ T5861] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  862.993353][ T8879] No source specified
[  863.734741][ T5861] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  864.046401][ T5861] as10x_usb: error during firmware upload part1
[  864.053389][ T5861] Registered device Abilis Systems DVB-Titan
[  864.057384][ T5861] usb 2-1: USB disconnect, device number 11
[  866.036904][ T8887] overlayfs: overlapping lowerdir path
[  867.067358][ T5861] Unregistered device Abilis Systems DVB-Titan
[  867.069126][ T5861] as10x_usb: device has been disconnected
[  867.219618][ T8893] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  870.255589][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  870.263076][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  870.422301][ T8920] No source specified
[  874.229425][ T8932] overlayfs: overlapping lowerdir path
[  877.465146][ T8946] No source specified
[  880.031602][ T8952] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  884.187067][ T8986] No source specified
[  885.970221][ T8992] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  891.933945][ T9028] sctp: failed to load transform for md5: -2
[  894.234255][ T5792] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  894.424254][ T5792] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  894.453983][ T5792] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  894.474291][ T5792] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  894.497388][ T5792] usb 3-1: config 0 interface 0 has no altsetting 0
[  894.514038][ T5792] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  894.537518][ T5792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.566243][ T5792] usb 3-1: config 0 descriptor??
[  894.587093][ T5792] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[  896.337806][ T5792] usbhid 3-1:0.0: can't add hid device: -71
[  896.362304][ T5792] usbhid: probe of 3-1:0.0 failed with error -71
[  896.379498][ T5792] usb 3-1: USB disconnect, device number 21
[  896.908662][ T9061] ptp ptp0: guarantee physical clock free running
[  896.931765][ T9061] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  900.036449][ T9076] FAULT_INJECTION: forcing a failure.
[  900.036449][ T9076] name failslab, interval 1, probability 0, space 0, times 0
[  900.053407][ T9076] CPU: 0 PID: 9076 Comm: syz.3.859 Not tainted syzkaller #0
[  900.060774][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  900.070870][ T9076] Call Trace:
[  900.074186][ T9076]  <TASK>
[  900.077147][ T9076]  dump_stack_lvl+0x18c/0x250
[  900.081884][ T9076]  ? show_regs_print_info+0x20/0x20
[  900.087130][ T9076]  ? load_image+0x420/0x420
[  900.091648][ T9076]  ? __might_sleep+0xe0/0xe0
[  900.096264][ T9076]  ? __lock_acquire+0x7eb0/0x7eb0
[  900.101300][ T9076]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  900.107296][ T9076]  should_fail_ex+0x394/0x4c0
[  900.111997][ T9076]  should_failslab+0x9/0x20
[  900.116513][ T9076]  slab_pre_alloc_hook+0x59/0x300
[  900.121550][ T9076]  ? lockdep_hardirqs_on+0x98/0x150
[  900.126762][ T9076]  kmem_cache_alloc+0x5a/0x2c0
[  900.131533][ T9076]  ? taskstats_exit+0x14d/0xce0
[  900.136410][ T9076]  taskstats_exit+0x14d/0xce0
[  900.141121][ T9076]  ? sysctl_delayacct+0x220/0x220
[  900.146154][ T9076]  ? rcu_read_lock_any_held+0xb4/0x140
[  900.151616][ T9076]  ? rcu_read_lock_bh_held+0x100/0x100
[  900.157084][ T9076]  do_exit+0x8fc/0x2530
[  900.161275][ T9076]  ? put_task_struct+0xc0/0xc0
[  900.166056][ T9076]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  900.172039][ T9076]  ? get_signal+0x100e/0x1390
[  900.176752][ T9076]  ? lock_chain_count+0x20/0x20
[  900.181611][ T9076]  ? _raw_spin_lock_irq+0xbb/0xf0
[  900.186656][ T9076]  do_group_exit+0x22d/0x2f0
[  900.191262][ T9076]  ? lockdep_hardirqs_on+0x98/0x150
[  900.196477][ T9076]  get_signal+0x12a6/0x1390
[  900.200997][ T9076]  arch_do_signal_or_restart+0xc2/0x7b0
[  900.206603][ T9076]  ? __ia32_sys_get_robust_list+0x110/0x110
[  900.212500][ T9076]  ? get_sigframe_size+0x20/0x20
[  900.217489][ T9076]  ? exit_to_user_mode_loop+0x3b/0x110
[  900.222957][ T9076]  exit_to_user_mode_loop+0x70/0x110
[  900.228245][ T9076]  exit_to_user_mode_prepare+0xee/0x180
[  900.233792][ T9076]  syscall_exit_to_user_mode+0x1a/0x50
[  900.239291][ T9076]  do_syscall_64+0x61/0xb0
[  900.243706][ T9076]  ? clear_bhb_loop+0x40/0x90
[  900.248431][ T9076]  ? clear_bhb_loop+0x40/0x90
[  900.253117][ T9076]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  900.259019][ T9076] RIP: 0033:0x7f976eb9e1d9
[  900.263475][ T9076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  900.283105][ T9076] RSP: 002b:00007f976fa510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  900.291530][ T9076] RAX: fffffffffffffe00 RBX: 00007f976ee25fa8 RCX: 00007f976eb9e1d9
[  900.299507][ T9076] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f976ee25fa8
[  900.307485][ T9076] RBP: 00007f976ee25fa0 R08: 0000000000000000 R09: 0000000000000000
[  900.315510][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  900.323488][ T9076] R13: 00007f976ee26038 R14: 00007fffc8c2a7a0 R15: 00007fffc8c2a888
[  900.331491][ T9076]  </TASK>
[  902.894034][ T5863] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  903.106031][ T5863] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  903.129117][ T5863] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  903.169480][ T5863] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  903.212854][ T5863] usb 3-1: config 0 interface 0 has no altsetting 0
[  903.243234][ T5863] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  903.280062][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.461744][ T5863] usb 3-1: config 0 descriptor??
[  903.687540][ T5863] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[  905.589918][ T5863] usbhid 3-1:0.0: can't add hid device: -71
[  905.596037][ T5863] usbhid: probe of 3-1:0.0 failed with error -71
[  905.604935][ T5863] usb 3-1: USB disconnect, device number 22
[  907.356553][ T9110] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  910.299426][ T9133] ptp ptp0: guarantee physical clock free running
[  910.309051][ T9133] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  912.676743][ T5863] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  913.727338][ T9150] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  913.973147][ T5863] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  915.694292][ T5863] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  915.724103][ T5863] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  915.761551][ T5863] usb 4-1: config 0 interface 0 has no altsetting 0
[  915.778485][ T5863] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  915.801075][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  915.842150][ T5863] usb 4-1: config 0 descriptor??
[  916.162368][ T5863] usb 4-1: can't set config #0, error -71
[  916.175263][ T5863] usb 4-1: USB disconnect, device number 18
[  918.268569][ T9171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.892'.
[  924.924080][ T9188] sctp: failed to load transform for md5: -2
[  925.864618][ T9200] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  927.294267][ T9207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.894'.
[  927.943901][ T5863] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  928.169805][ T5863] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  928.193884][ T5863] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  928.220284][ T5863] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  928.247664][ T5863] usb 1-1: config 0 interface 0 has no altsetting 0
[  928.261024][ T5863] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  928.305956][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.344639][ T5863] usb 1-1: config 0 descriptor??
[  928.364710][ T5863] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[  929.694860][ T5863] usbhid 1-1:0.0: can't add hid device: -71
[  929.700913][ T5863] usbhid: probe of 1-1:0.0 failed with error -71
[  929.767073][ T5863] usb 1-1: USB disconnect, device number 25
[  931.702592][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  931.709112][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  934.001452][ T9233] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  934.090815][ T9233] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  934.143947][ T9233] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  936.058104][ T9237] sctp: failed to load transform for md5: -2
[  937.554236][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.907'.
[  938.161246][ T5825] Bluetooth: hci1: command 0x0406 tx timeout
[  938.914173][ T5891] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  939.114583][ T5891] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  939.144031][ T5891] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  939.165178][ T5891] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  939.198717][ T5891] usb 1-1: config 0 interface 0 has no altsetting 0
[  939.209996][ T5891] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  939.233983][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.254930][ T5891] usb 1-1: config 0 descriptor??
[  939.278518][ T5891] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[  940.273007][ T5882] hid-generic 0003:28DE:1302.0003: unknown main item tag 0x0
[  940.291464][ T5882] hid-generic 0003:28DE:1302.0003: unknown main item tag 0x0
[  940.325890][ T5882] hid-generic 0003:28DE:1302.0003: unknown main item tag 0x0
[  940.353882][ T5882] hid-generic 0003:28DE:1302.0003: unbalanced collection at end of report description
[  940.426562][ T5882] hid-generic: probe of 0003:28DE:1302.0003 failed with error -22
[  942.470042][ T5891] usbhid 1-1:0.0: can't add hid device: -71
[  942.476214][ T5891] usbhid: probe of 1-1:0.0 failed with error -71
[  942.486812][ T5891] usb 1-1: USB disconnect, device number 26
[  943.894142][ T9291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.917'.
[  945.959733][ T9303] ptp ptp0: guarantee physical clock free running
[  945.969655][ T9303] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  946.870681][ T7443] hid-generic 0003:28DE:1302.0004: unknown main item tag 0x0
[  946.889062][ T7443] hid-generic 0003:28DE:1302.0004: unknown main item tag 0x0
[  946.934026][ T7443] hid-generic 0003:28DE:1302.0004: unknown main item tag 0x0
[  948.428135][ T7443] hid-generic 0003:28DE:1302.0004: unbalanced collection at end of report description
[  948.489168][ T7443] hid-generic: probe of 0003:28DE:1302.0004 failed with error -22
[  949.694215][ T9319] sctp: failed to load transform for md5: -2
[  950.656310][   T23] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  950.896220][   T23] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  950.914064][   T23] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  950.943923][   T23] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  950.978479][   T23] usb 3-1: config 0 interface 0 has no altsetting 0
[  951.089240][   T23] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  951.098427][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.118222][   T23] usb 3-1: config 0 descriptor??
[  951.138884][   T23] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[  953.514006][   T23] usbhid 3-1:0.0: can't add hid device: -71
[  953.701737][   T23] usbhid: probe of 3-1:0.0 failed with error -71
[  953.826016][   T23] usb 3-1: USB disconnect, device number 23
[  953.948184][ T9350] ptp ptp0: guarantee physical clock free running
[  953.955549][ T9350] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  957.874440][ T5863] hid-generic 0003:28DE:1302.0005: unknown main item tag 0x0
[  957.888129][ T5863] hid-generic 0003:28DE:1302.0005: unknown main item tag 0x0
[  957.898380][ T5863] hid-generic 0003:28DE:1302.0005: unknown main item tag 0x0
[  957.910824][ T5863] hid-generic 0003:28DE:1302.0005: unbalanced collection at end of report description
[  957.923194][ T5863] hid-generic: probe of 0003:28DE:1302.0005 failed with error -22
[  962.314654][ T5086] Bluetooth: hci1: command 0x0406 tx timeout
[  962.324126][ T5863] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  962.526913][ T5863] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  962.557533][ T5863] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  962.592251][ T5863] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  962.639583][ T5863] usb 4-1: config 0 interface 0 has no altsetting 0
[  962.661761][ T5863] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  962.678818][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  962.699727][ T5863] usb 4-1: config 0 descriptor??
[  962.732299][ T5863] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count
[  966.263359][ T5863] usbhid 4-1:0.0: can't add hid device: -71
[  966.277528][ T5863] usbhid: probe of 4-1:0.0 failed with error -71
[  966.332493][ T5863] usb 4-1: USB disconnect, device number 19
[  966.563455][  T174] hid-generic 0003:28DE:1302.0006: unknown main item tag 0x0
[  966.615919][  T174] hid-generic 0003:28DE:1302.0006: unknown main item tag 0x0
[  966.814019][  T174] hid-generic 0003:28DE:1302.0006: unknown main item tag 0x0
[  966.969652][  T174] hid-generic 0003:28DE:1302.0006: unbalanced collection at end of report description
[  967.166988][  T174] hid-generic: probe of 0003:28DE:1302.0006 failed with error -22
[  968.103878][ T9426] UHID_CREATE from different security context by process 798 (syz.3.953), this is not allowed.
[  970.936343][ T9441] sctp: [Deprecated]: syz.2.954 (pid 9441) Use of int in max_burst socket option.
[  970.936343][ T9441] Use struct sctp_assoc_value instead
[  970.952760][ T9441] sctp: [Deprecated]: syz.2.954 (pid 9441) Use of struct sctp_assoc_value in delayed_ack socket option.
[  970.952760][ T9441] Use struct sctp_sack_info instead
[  971.094000][ T5860] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  971.913717][ T5860] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  971.925599][ T5860] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  971.936142][ T5860] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  971.975498][ T5860] usb 4-1: config 0 interface 0 has no altsetting 0
[  971.984157][ T5860] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  971.995010][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.007426][ T5860] usb 4-1: config 0 descriptor??
[  972.027021][ T5860] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count
[  973.864949][   T27] audit: type=1800 audit(2000000019.910:47): pid=9448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.960" name="file1" dev="sda1" ino=2044 res=0 errno=0
[  973.884975][ T5860] usbhid 4-1:0.0: can't add hid device: -71
[  973.890965][ T5860] usbhid: probe of 4-1:0.0 failed with error -71
[  973.971759][ T5860] usb 4-1: USB disconnect, device number 20
[  977.224883][ T9469] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  977.234335][ T9469] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  977.242898][ T9469] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  977.253544][ T9469] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  977.264625][ T9469] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  977.271962][ T9469] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  977.675109][ T5859] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.876785][ T5859] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  978.125693][ T5859] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  978.436672][ T5859] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  978.450010][ T9475] No source specified
[  978.553590][ T9480] afs: Unknown parameter 'flocRª³«…K›autocell'
[  979.354252][ T5086] Bluetooth: hci0: command tx timeout
[  979.369246][ T9467] chnl_net:caif_netlink_parms(): no params data found
[  979.818809][ T9467] bridge0: port 1(bridge_slave_0) entered blocking state
[  979.841859][ T9467] bridge0: port 1(bridge_slave_0) entered disabled state
[  979.859436][ T9467] bridge_slave_0: entered allmulticast mode
[  979.879532][ T9467] bridge_slave_0: entered promiscuous mode
[  980.129263][ T9495] ptp ptp0: guarantee physical clock free running
[  980.156785][ T9495] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  980.313128][ T9467] bridge0: port 2(bridge_slave_1) entered blocking state
[  980.333551][ T9467] bridge0: port 2(bridge_slave_1) entered disabled state
[  980.356133][ T9467] bridge_slave_1: entered allmulticast mode
[  980.402881][ T9467] bridge_slave_1: entered promiscuous mode
[  980.655833][ T9467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  980.707015][ T9467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  980.863900][ T5891] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  980.916301][ T9467] team0: Port device team_slave_0 added
[  980.924806][ T9467] team0: Port device team_slave_1 added
[  981.183133][ T5891] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  981.639677][ T9469] Bluetooth: hci0: command tx timeout
[  981.820690][ T5891] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  981.946709][ T5891] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  982.114072][ T5891] usb 3-1: config 0 interface 0 has no altsetting 0
[  982.120783][ T5891] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  982.261359][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  982.289269][ T5891] usb 3-1: config 0 descriptor??
[  982.304449][ T9467] batman_adv: batadv0: Adding interface: batadv_slave_0
[  982.319671][ T9467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  982.347035][ T9528] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  983.808473][ T5891] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[  983.823955][ T9469] Bluetooth: hci0: command tx timeout
[  983.870148][ T9467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  983.914899][ T5891] usbhid 3-1:0.0: can't add hid device: -71
[  983.936182][ T9467] batman_adv: batadv0: Adding interface: batadv_slave_1
[  983.943169][ T9467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  983.981820][ T5891] usbhid: probe of 3-1:0.0 failed with error -71
[  984.024320][ T5891] usb 3-1: USB disconnect, device number 24
[  984.045463][ T9467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  984.242606][ T9467] hsr_slave_0: entered promiscuous mode
[  984.264959][ T9467] hsr_slave_1: entered promiscuous mode
[  984.271365][ T9467] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  984.293876][ T9467] Cannot create hsr debugfs directory
[  984.649379][ T9545] No source specified
[  985.899484][ T9469] Bluetooth: hci0: command tx timeout
[  987.943860][ T9469] Bluetooth: hci0: command tx timeout
[  988.217639][ T5859] hsr_slave_0: left promiscuous mode
[  988.239943][ T5859] hsr_slave_1: left promiscuous mode
[  988.247472][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  988.266278][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  988.281363][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  988.289303][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  988.303169][ T5859] bridge_slave_1: left allmulticast mode
[  988.312273][ T5859] bridge_slave_1: left promiscuous mode
[  988.322390][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  988.341309][ T5859] bridge_slave_0: left allmulticast mode
[  988.347745][ T5859] bridge_slave_0: left promiscuous mode
[  988.360136][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  988.387277][ T5859] veth1_macvtap: left promiscuous mode
[  988.393330][ T5859] veth0_macvtap: left promiscuous mode
[  988.402464][ T5859] veth1_vlan: left promiscuous mode
[  988.413068][ T5859] veth0_vlan: left promiscuous mode
[  989.244803][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  989.267534][ T5861] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  989.292386][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  989.332739][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  989.371136][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  989.481284][ T5861] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  989.497913][ T5861] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  989.508283][ T5861] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  989.521562][ T5861] usb 3-1: config 0 interface 0 has no altsetting 0
[  989.528325][ T5861] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  989.537961][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.552078][ T5861] usb 3-1: config 0 descriptor??
[  989.565564][ T5861] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[  989.771647][ T5859] bond0 (unregistering): Released all slaves
[  991.381824][ T5861] usbhid 3-1:0.0: can't add hid device: -71
[  991.401646][ T5861] usbhid: probe of 3-1:0.0 failed with error -71
[  991.426175][ T5861] usb 3-1: USB disconnect, device number 25
[  991.636401][ T9467] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  991.752944][ T9467] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  991.759053][ T9590] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[  991.775167][ T9467] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  991.793101][ T9467] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  992.183819][ T9467] 8021q: adding VLAN 0 to HW filter on device bond0
[  992.262229][ T9467] 8021q: adding VLAN 0 to HW filter on device team0
[  992.332529][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state
[  992.339889][ T8442] bridge0: port 1(bridge_slave_0) entered forwarding state
[  992.419896][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state
[  992.427101][ T7311] bridge0: port 2(bridge_slave_1) entered forwarding state
[  993.038778][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  993.048835][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  993.192389][ T9467] 8021q: adding VLAN 0 to HW filter on device batadv0
[  994.024486][ T9620] overlayfs: overlapping lowerdir path
[  996.379762][ T9467] veth0_vlan: entered promiscuous mode
[  996.440993][ T9467] veth1_vlan: entered promiscuous mode
[  996.527044][ T9467] veth0_macvtap: entered promiscuous mode
[  996.560152][ T9467] veth1_macvtap: entered promiscuous mode
[  996.605908][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  996.627898][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  996.640651][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  996.666518][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  996.695287][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  996.723916][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  996.767363][ T9467] batman_adv: batadv0: Interface activated: batadv_slave_0
[  996.817653][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  996.844705][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  996.859578][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  996.870536][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  996.886180][ T9467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  996.900367][ T9467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  996.912495][ T9467] batman_adv: batadv0: Interface activated: batadv_slave_1
[  996.940333][ T9467] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  996.964580][ T9467] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  996.976831][ T9467] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  996.991631][ T9467] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  998.617817][ T5882] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  998.694711][ T7311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  998.711651][ T7311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  998.809106][ T5859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  998.825401][ T5859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  998.859261][ T5882] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  998.895165][ T5882] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  998.913943][ T5882] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  998.928292][ T5882] usb 4-1: config 0 interface 0 has no altsetting 0
[  998.935876][ T5882] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  998.945371][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  998.970272][ T5882] usb 4-1: config 0 descriptor??
[  998.996128][ T5882] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count
[  999.626982][ T9670] overlayfs: overlapping lowerdir path
[ 1000.798344][ T5860] hid-generic 0003:28DE:1302.0007: unknown main item tag 0x0
[ 1000.809024][ T5860] hid-generic 0003:28DE:1302.0007: unknown main item tag 0x0
[ 1000.946738][ T5860] hid-generic 0003:28DE:1302.0007: unknown main item tag 0x0
[ 1000.968767][ T5882] usbhid 4-1:0.0: can't add hid device: -71
[ 1000.976559][ T5860] hid-generic 0003:28DE:1302.0007: unbalanced collection at end of report description
[ 1000.991700][ T5882] usbhid: probe of 4-1:0.0 failed with error -71
[ 1001.009220][ T5860] hid-generic: probe of 0003:28DE:1302.0007 failed with error -22
[ 1001.027058][ T5882] usb 4-1: USB disconnect, device number 21
[ 1005.919116][ T9697] sctp: failed to load transform for md5: -2
[ 1009.074050][ T5861] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1009.248914][ T9746] ptp ptp0: guarantee physical clock free running
[ 1009.267363][ T9746] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1009.443235][ T5861] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1009.483438][ T5861] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1009.537995][ T5861] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1009.570543][ T5860] hid-generic 0003:28DE:1302.0008: unknown main item tag 0x0
[ 1009.602518][ T5860] hid-generic 0003:28DE:1302.0008: unknown main item tag 0x0
[ 1009.623593][ T5861] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1009.727832][ T5860] hid-generic 0003:28DE:1302.0008: unknown main item tag 0x0
[ 1009.736028][ T5861] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1009.769482][ T5860] hid-generic 0003:28DE:1302.0008: unbalanced collection at end of report description
[ 1009.782484][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.800262][ T5860] hid-generic: probe of 0003:28DE:1302.0008 failed with error -22
[ 1009.828159][ T5861] usb 5-1: config 0 descriptor??
[ 1009.842111][ T5861] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count
[ 1010.860711][ T5861] usbhid 5-1:0.0: can't add hid device: -71
[ 1010.884772][ T5861] usbhid: probe of 5-1:0.0 failed with error -71
[ 1010.903247][ T5861] usb 5-1: USB disconnect, device number 2
[ 1011.608886][ T9769] netlink: 'syz.2.1014': attribute type 1 has an invalid length.
[ 1011.618601][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'.
[ 1019.223893][ T5792] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1020.750479][ T5792] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1020.807828][ T5792] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1020.826754][ T5792] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1020.869460][ T5792] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1020.904447][ T5792] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1020.937968][ T5792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1020.960374][ T5792] usb 3-1: config 0 descriptor??
[ 1020.968946][ T5792] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[ 1021.877648][ T5792] usbhid 3-1:0.0: can't add hid device: -71
[ 1021.887230][ T5792] usbhid: probe of 3-1:0.0 failed with error -71
[ 1021.897097][ T5792] usb 3-1: USB disconnect, device number 26
[ 1024.556287][ T5863] hid-generic 0003:28DE:1302.0009: unknown main item tag 0x0
[ 1024.564252][ T5863] hid-generic 0003:28DE:1302.0009: unknown main item tag 0x0
[ 1024.571696][ T5863] hid-generic 0003:28DE:1302.0009: unknown main item tag 0x0
[ 1024.579675][ T5863] hid-generic 0003:28DE:1302.0009: unbalanced collection at end of report description
[ 1024.614380][ T5863] hid-generic: probe of 0003:28DE:1302.0009 failed with error -22
[ 1026.686919][ T9872] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1028.701880][ T9891] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1028.747688][ T9891] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1028.782713][ T9891] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1029.713918][ T5860] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1029.994369][ T5860] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1030.047502][ T5860] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1030.077728][ T5860] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1030.111471][ T5860] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1030.133655][ T5860] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1030.174375][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1030.215213][ T5860] usb 4-1: config 0 descriptor??
[ 1030.245595][ T5860] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count
[ 1031.213912][ T5860] usbhid 4-1:0.0: can't add hid device: -71
[ 1031.219959][ T5860] usbhid: probe of 4-1:0.0 failed with error -71
[ 1031.286115][ T5860] usb 4-1: USB disconnect, device number 22
[ 1031.570353][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'.
[ 1031.613796][ T9469] Bluetooth: hci0: command tx timeout
[ 1031.936098][ T9908] vivid-000: disconnect
[ 1031.942027][ T9908] vivid-000: reconnect
[ 1032.572778][ T5860] hid-generic 0003:28DE:1302.000A: unknown main item tag 0x0
[ 1032.620734][ T5860] hid-generic 0003:28DE:1302.000A: unknown main item tag 0x0
[ 1032.746150][ T5860] hid-generic 0003:28DE:1302.000A: unknown main item tag 0x0
[ 1033.007166][ T5860] hid-generic 0003:28DE:1302.000A: unbalanced collection at end of report description
[ 1033.017799][ T5860] hid-generic: probe of 0003:28DE:1302.000A failed with error -22
[ 1033.571800][ T9933] overlayfs: overlapping lowerdir path
[ 1037.509237][ T9941] ptp ptp0: guarantee physical clock free running
[ 1037.637736][ T9941] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1037.705427][ T9944] device-mapper: ioctl: only supply one of name or uuid, cmd(4)
[ 1040.893948][ T5882] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1041.110835][ T5882] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1041.157007][ T5882] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1041.181056][ T5882] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1041.257846][ T5882] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1041.264866][ T5882] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1041.382149][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1041.458487][ T9971] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1041.513907][ T5882] usb 4-1: config 0 descriptor??
[ 1041.538221][ T5882] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count
[ 1043.380376][ T5882] usbhid 4-1:0.0: can't add hid device: -71
[ 1043.400735][ T5882] usbhid: probe of 4-1:0.0 failed with error -71
[ 1043.442947][ T5882] usb 4-1: USB disconnect, device number 23
[ 1044.201565][ T9987] overlayfs: overlapping lowerdir path
[ 1045.195749][ T9985] printk: console [ttyS0] disabled
[ 1045.310867][ T9991] printk: console [ttyS0] enabled
[ 1045.544708][ T9993] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1046.954138][ T5792] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[ 1047.196764][ T5792] usb 5-1: not running at top speed; connect to a high speed hub
[ 1047.206075][ T5792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1047.223838][ T5792] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[ 1047.264432][ T5792] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[ 1047.284016][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1047.292292][ T5792] usb 5-1: Product: syz
[ 1047.313846][ T5792] usb 5-1: Manufacturer: syz
[ 1047.324297][ T5792] usb 5-1: SerialNumber: syz
[ 1047.346461][ T5792] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected
[ 1047.385102][ T5792] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81
[ 1047.411264][ T5792] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88
[ 1047.450554][ T5792] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[ 1047.451690][  T971] hid-generic 0003:28DE:1302.000B: unknown main item tag 0x0
[ 1047.489509][  T971] hid-generic 0003:28DE:1302.000B: unknown main item tag 0x0
[ 1047.504484][ T5792] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[ 1047.513864][  T971] hid-generic 0003:28DE:1302.000B: unknown main item tag 0x0
[ 1047.542394][  T971] hid-generic 0003:28DE:1302.000B: unbalanced collection at end of report description
[ 1047.560187][  T971] hid-generic: probe of 0003:28DE:1302.000B failed with error -22
[ 1047.577006][ T5792] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[ 1047.614235][ T5792] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[ 1047.658887][ T5792] usb 5-1: USB disconnect, device number 3
[ 1047.688541][ T5792] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[ 1047.737483][ T5792] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[ 1047.786381][ T5792] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[ 1047.813376][ T5792] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[ 1047.845841][ T5792] keyspan 5-1:1.0: device disconnected
[ 1050.364580][ T5863] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1051.286583][ T5863] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1051.416256][ T5863] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1051.516702][ T5863] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1051.622300][ T5863] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1051.682023][ T5863] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1051.751527][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.485733][ T5863] usb 4-1: config 0 descriptor??
[ 1053.692305][T10037] overlayfs: overlapping lowerdir path
[ 1054.732616][ T5863] usb 4-1: can't set config #0, error -71
[ 1054.744444][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.772235][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.449639][ T5863] usb 4-1: USB disconnect, device number 24
[ 1057.638059][T10029] syz.0.1049 (10029): drop_caches: 2
[ 1058.195347][ T5792] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1058.370674][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1058.385784][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1058.394659][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1058.410035][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1058.419323][ T5792] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1058.430075][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1058.437258][ T5792] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[ 1058.451196][ T5792] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1058.462056][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1058.470262][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1058.477809][ T5792] usb 5-1: Product: syz
[ 1058.482343][ T5792] usb 5-1: Manufacturer: syz
[ 1058.487408][ T5792] usb 5-1: SerialNumber: syz
[ 1058.495761][ T5792] usb 5-1: config 0 descriptor??
[ 1058.502856][T10053] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1058.516821][T10053] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1058.732630][T10053] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1058.775108][T10053] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1059.206006][ T5792] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[ 1059.257809][T10073] binder: 10072:10073 ioctl c0306201 200000000b40 returned -14
[ 1059.745633][T10058] chnl_net:caif_netlink_parms(): no params data found
[ 1059.872000][ T5792] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[ 1060.554493][ T5086] Bluetooth: hci4: command tx timeout
[ 1060.689592][ T8442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1062.080574][ T8442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1062.210249][ T5792] usb 5-1: USB disconnect, device number 4
[ 1062.373949][ T5086] Bluetooth: hci2: ACL packet for unknown connection handle 201
[ 1062.556162][ T8442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1062.633930][ T5086] Bluetooth: hci4: command tx timeout
[ 1062.836997][ T8442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1062.897585][T10058] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1062.916506][T10058] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1062.939578][T10058] bridge_slave_0: entered allmulticast mode
[ 1062.992838][T10058] bridge_slave_0: entered promiscuous mode
[ 1063.042988][T10058] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1063.065577][T10058] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1063.085372][T10058] bridge_slave_1: entered allmulticast mode
[ 1063.109325][T10058] bridge_slave_1: entered promiscuous mode
[ 1063.223837][T10058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1063.255957][T10058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1063.360000][T10058] team0: Port device team_slave_0 added
[ 1063.393471][T10058] team0: Port device team_slave_1 added
[ 1063.401544][T10104] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1064.847036][ T9469] Bluetooth: hci4: command tx timeout
[ 1065.133925][ T5861] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1065.334461][T10058] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1065.337115][ T5861] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1065.373034][ T5861] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1065.382483][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1065.393467][ T5861] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1065.422427][ T5861] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1065.443902][ T5861] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1065.492886][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.501036][T10058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1065.515265][T10058] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1065.524711][ T5861] usb 5-1: config 0 descriptor??
[ 1065.543941][ T5861] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count
[ 1065.553497][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1065.653994][T10058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1066.873911][ T9469] Bluetooth: hci4: command tx timeout
[ 1067.327893][ T5861] usbhid 5-1:0.0: can't add hid device: -71
[ 1067.349056][T10058] hsr_slave_0: entered promiscuous mode
[ 1067.364149][ T5861] usbhid: probe of 5-1:0.0 failed with error -71
[ 1067.508795][ T5861] usb 5-1: USB disconnect, device number 5
[ 1067.584385][T10058] hsr_slave_1: entered promiscuous mode
[ 1067.663342][ T8442] netdevsim netdevsim120 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1069.123298][T10141] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1069.158364][T10141] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1069.914543][ T5792] IPVS: starting estimator thread 0...
[ 1070.073964][T10143] IPVS: using max 20 ests per chain, 48000 per kthread
[ 1070.185327][T10058] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1070.275426][T10058] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1070.589264][T10058] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1070.662802][T10058] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1071.383551][T10058] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1071.491307][T10058] 8021q: adding VLAN 0 to HW filter on device team0
[ 1071.538579][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1071.545800][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1071.609209][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1071.616433][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1075.481771][T10058] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1077.971058][ T8442] hsr_slave_0: left promiscuous mode
[ 1078.070886][ T8442] hsr_slave_1: left promiscuous mode
[ 1078.184046][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1078.191476][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1078.255884][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1078.303872][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1078.372274][ T8442] bridge_slave_1: left allmulticast mode
[ 1078.378571][ T8442] bridge_slave_1: left promiscuous mode
[ 1078.414735][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1078.484687][ T8442] bridge_slave_0: left allmulticast mode
[ 1078.490473][ T8442] bridge_slave_0: left promiscuous mode
[ 1078.524002][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1078.665498][ T8442] veth1_macvtap: left promiscuous mode
[ 1078.671098][ T8442] veth0_macvtap: left promiscuous mode
[ 1078.684065][ T8442] veth1_vlan: left promiscuous mode
[ 1078.689449][ T8442] veth0_vlan: left promiscuous mode
[ 1079.668630][ T5861] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1079.855657][ T5861] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1079.872055][ T5861] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1079.895083][ T5861] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1079.924081][ T5861] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1079.944377][ T5861] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1079.964946][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1079.977223][ T5861] usb 5-1: config 0 descriptor??
[ 1079.987126][ T5861] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count
[ 1087.125282][ T5861] usbhid 5-1:0.0: can't add hid device: -32
[ 1087.131328][ T5861] usbhid: probe of 5-1:0.0 failed with error -32
[ 1087.594228][ T5861] usb 5-1: USB disconnect, device number 6
[ 1088.665403][ T8442] team0 (unregistering): Port device team_slave_1 removed
[ 1088.845613][ T8442] team0 (unregistering): Port device team_slave_0 removed
[ 1089.038273][ T8442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1089.121461][ T8442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1090.047489][ T8442] bond0 (unregistering): Released all slaves
[ 1091.269656][   T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1091.470023][   T23] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1091.482109][   T23] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1091.492210][   T23] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1091.507318][   T23] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1091.549507][   T23] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1091.559156][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1091.575967][   T23] usb 5-1: config 0 descriptor??
[ 1091.586106][   T23] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count
[ 1091.629745][T10058] veth0_vlan: entered promiscuous mode
[ 1091.691355][T10058] veth1_vlan: entered promiscuous mode
[ 1091.724663][T10303] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1093.576448][   T23] usbhid 5-1:0.0: can't add hid device: -71
[ 1093.591560][T10058] veth0_macvtap: entered promiscuous mode
[ 1093.615806][   T23] usbhid: probe of 5-1:0.0 failed with error -71
[ 1093.653422][T10058] veth1_macvtap: entered promiscuous mode
[ 1093.667149][   T23] usb 5-1: USB disconnect, device number 7
[ 1093.738448][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1093.767168][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.797657][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1093.809147][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.819446][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1093.830463][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.842531][T10058] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1093.854234][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1093.878924][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.923609][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1093.975201][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.031900][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.102123][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.134343][T10058] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1094.207967][ T8442] IPVS: stop unused estimator thread 0...
[ 1094.219131][T10058] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1094.263394][T10058] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1094.310137][T10058] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1094.362800][T10058] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1094.800990][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1094.847256][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1094.905479][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1094.926343][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1095.102111][   T23] hid-generic 0003:28DE:1302.000C: unknown main item tag 0x0
[ 1095.120811][   T23] hid-generic 0003:28DE:1302.000C: unknown main item tag 0x0
[ 1095.134656][   T23] hid-generic 0003:28DE:1302.000C: unknown main item tag 0x0
[ 1095.177159][   T23] hid-generic 0003:28DE:1302.000C: unbalanced collection at end of report description
[ 1095.206364][   T23] hid-generic: probe of 0003:28DE:1302.000C failed with error -22
[ 1095.290057][T10329] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1100.517678][T10353] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1101.968488][T10364] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1102.044341][ T5882] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1102.299324][ T5882] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1102.408937][ T5882] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1102.529992][ T5882] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1102.636192][ T9469] Bluetooth: hci0: command 0x0406 tx timeout
[ 1102.732851][ T5882] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1102.804160][ T5882] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1104.657361][ T7443] IPVS: starting estimator thread 0...
[ 1104.734246][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1104.764968][ T5882] usb 6-1: config 0 descriptor??
[ 1104.775729][ T5882] usb 6-1: can't set config #0, error -71
[ 1104.782882][ T5882] usb 6-1: USB disconnect, device number 2
[ 1104.813840][T10376] IPVS: using max 20 ests per chain, 48000 per kthread
[ 1105.131870][T10391] random: crng reseeded on system resumption
[ 1105.740752][T10397] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1109.010215][ T5792] IPVS: starting estimator thread 0...
[ 1109.524119][ T5860] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1109.761220][ T5860] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1109.839152][ T5860] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1109.918318][ T5860] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1109.970926][ T5792] hid-generic 0003:28DE:1302.000D: unknown main item tag 0x0
[ 1109.974354][T10415] IPVS: using max 18 ests per chain, 43200 per kthread
[ 1109.979156][ T5792] hid-generic 0003:28DE:1302.000D: unknown main item tag 0x0
[ 1109.993051][ T5792] hid-generic 0003:28DE:1302.000D: unknown main item tag 0x0
[ 1110.000869][ T5792] hid-generic 0003:28DE:1302.000D: unbalanced collection at end of report description
[ 1110.038697][ T5860] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1110.102123][ T5860] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1110.241138][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1110.436722][ T5860] usb 6-1: config 0 descriptor??
[ 1110.513797][ T5792] hid-generic: probe of 0003:28DE:1302.000D failed with error -22
[ 1110.558454][ T5860] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count
[ 1112.230803][T10445] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1113.527908][T10455] FAULT_INJECTION: forcing a failure.
[ 1113.527908][T10455] name failslab, interval 1, probability 0, space 0, times 0
[ 1113.619310][T10455] CPU: 1 PID: 10455 Comm: syz.2.1132 Not tainted syzkaller #0
[ 1113.626810][T10455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1113.636872][T10455] Call Trace:
[ 1113.640178][T10455]  <TASK>
[ 1113.643120][T10455]  dump_stack_lvl+0x18c/0x250
[ 1113.647818][T10455]  ? show_regs_print_info+0x20/0x20
[ 1113.653023][T10455]  ? load_image+0x420/0x420
[ 1113.657558][T10455]  ? __might_sleep+0xe0/0xe0
[ 1113.662163][T10455]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1113.667195][T10455]  ? trace_contention_end+0x39/0xe0
[ 1113.672418][T10455]  should_fail_ex+0x394/0x4c0
[ 1113.677119][T10455]  should_failslab+0x9/0x20
[ 1113.681656][T10455]  slab_pre_alloc_hook+0x59/0x300
[ 1113.686686][T10455]  ? mutex_unlock+0x10/0x10
[ 1113.691224][T10455]  ? __list_lru_init+0xb4/0x600
[ 1113.696086][T10455]  ? __list_lru_init+0xb4/0x600
[ 1113.700945][T10455]  __kmem_cache_alloc_node+0x53/0x250
[ 1113.706355][T10455]  ? __list_lru_init+0xb4/0x600
[ 1113.711214][T10455]  __kmalloc+0xa7/0x240
[ 1113.715390][T10455]  __list_lru_init+0xb4/0x600
[ 1113.720091][T10455]  alloc_super+0x77b/0x910
[ 1113.724523][T10455]  ? kernfs_get_tree+0x720/0x720
[ 1113.729505][T10455]  sget_fc+0x325/0x8d0
[ 1113.733584][T10455]  ? kernfs_test_super+0x100/0x100
[ 1113.738736][T10455]  kernfs_get_tree+0x173/0x720
[ 1113.743534][T10455]  sysfs_get_tree+0x46/0x110
[ 1113.748152][T10455]  vfs_get_tree+0x8c/0x280
[ 1113.752572][T10455]  vfs_cmd_create+0xe3/0x230
[ 1113.757171][T10455]  __se_sys_fsconfig+0x70a/0x850
[ 1113.762118][T10455]  ? __x64_sys_fsconfig+0xc0/0xc0
[ 1113.767172][T10455]  ? lockdep_hardirqs_on+0x98/0x150
[ 1113.772408][T10455]  ? __x64_sys_fsconfig+0x20/0xc0
[ 1113.777470][T10455]  do_syscall_64+0x55/0xb0
[ 1113.781928][T10455]  ? clear_bhb_loop+0x40/0x90
[ 1113.786635][T10455]  ? clear_bhb_loop+0x40/0x90
[ 1113.791326][T10455]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1113.797273][T10455] RIP: 0033:0x7fcdc439e1d9
[ 1113.801690][T10455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1113.821303][T10455] RSP: 002b:00007fcdc524d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[ 1113.829747][T10455] RAX: ffffffffffffffda RBX: 00007fcdc4625fa0 RCX: 00007fcdc439e1d9
[ 1113.837753][T10455] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 1113.845788][T10455] RBP: 00007fcdc4435888 R08: 0000000000000000 R09: 0000000000000000
[ 1113.853796][T10455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1113.861778][T10455] R13: 00007fcdc4626038 R14: 00007fcdc4625fa0 R15: 00007ffc1cb1c0b8
[ 1113.869786][T10455]  </TASK>
[ 1115.689861][ T5860] usbhid 6-1:0.0: can't add hid device: -32
[ 1115.698285][ T5860] usbhid: probe of 6-1:0.0 failed with error -32
[ 1115.742932][ T5882] hid-generic 0003:28DE:1302.000E: unknown main item tag 0x0
[ 1115.754203][ T5882] hid-generic 0003:28DE:1302.000E: unknown main item tag 0x0
[ 1115.761630][ T5882] hid-generic 0003:28DE:1302.000E: unknown main item tag 0x0
[ 1115.769622][ T5882] hid-generic 0003:28DE:1302.000E: unbalanced collection at end of report description
[ 1115.782440][ T5882] hid-generic: probe of 0003:28DE:1302.000E failed with error -22
[ 1115.793903][ T5086] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[ 1115.918152][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.924803][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.982559][ T5792] usb 6-1: USB disconnect, device number 3
[ 1117.087706][T10487] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1119.486550][ T5860] IPVS: starting estimator thread 0...
[ 1119.623969][T10506] IPVS: using max 20 ests per chain, 48000 per kthread
[ 1119.910669][   T23] hid-generic 0003:28DE:1302.000F: unknown main item tag 0x0
[ 1120.018579][   T23] hid-generic 0003:28DE:1302.000F: unknown main item tag 0x0
[ 1120.087789][   T23] hid-generic 0003:28DE:1302.000F: unknown main item tag 0x0
[ 1120.154181][   T23] hid-generic 0003:28DE:1302.000F: unbalanced collection at end of report description
[ 1120.227143][   T23] hid-generic: probe of 0003:28DE:1302.000F failed with error -22
[ 1123.232781][T10516] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1123.475339][T10265] usb 3-1: new low-speed USB device number 27 using dummy_hcd
[ 1123.552671][T10529] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1123.873645][T10265] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1124.426064][T10265] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1124.440104][T10265] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1124.453592][T10265] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1124.463647][T10265] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1124.475250][T10265] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1124.488093][T10265] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1124.504349][T10265] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1124.515286][T10265] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1124.529521][T10265] usb 3-1: string descriptor 0 read error: -22
[ 1124.535927][T10265] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1124.545159][T10265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1124.566403][T10265] adutux 3-1:168.0: interrupt endpoints not found
[ 1124.616924][T10532] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1125.148579][T10265] usb 3-1: USB disconnect, device number 27
[ 1127.495029][T10265] hid-generic 0003:28DE:1302.0010: unknown main item tag 0x0
[ 1127.502481][T10265] hid-generic 0003:28DE:1302.0010: unknown main item tag 0x0
[ 1127.611885][T10558] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1128.097077][T10265] hid-generic 0003:28DE:1302.0010: unknown main item tag 0x0
[ 1128.104925][T10265] hid-generic 0003:28DE:1302.0010: unbalanced collection at end of report description
[ 1128.115209][T10265] hid-generic: probe of 0003:28DE:1302.0010 failed with error -22
[ 1128.249611][T10565] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1158'.
[ 1128.342513][T10566] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1135.273851][ T5806] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1135.478406][ T5806] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1135.543844][ T5806] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1135.571629][ T5806] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1135.603897][ T5806] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1135.610590][ T5806] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1135.660109][ T5806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1135.693392][ T5806] usb 6-1: config 0 descriptor??
[ 1135.918267][ T5806] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count
[ 1138.349229][ T5806] usbhid 6-1:0.0: can't add hid device: -71
[ 1138.355405][ T5806] usbhid: probe of 6-1:0.0 failed with error -71
[ 1138.369045][ T5806] usb 6-1: USB disconnect, device number 4
[ 1138.559300][T10632] syzkaller0: entered promiscuous mode
[ 1138.578996][T10632] syzkaller0: entered allmulticast mode
[ 1138.602184][T10632] simple: /dev/video#_0
[ 1138.606798][T10632] simple: /dev/video#_0
[ 1138.611018][T10632] simple: /dev/video#_0
[ 1138.615311][T10632] simple: /dev/video#_0
[ 1138.619515][T10632] simple: /dev/video#_0
[ 1138.623763][T10632] simple: /dev/video#_0
[ 1138.627946][T10632] simple: /dev/video#_0
[ 1138.632130][T10632] simple: /dev/video#_0
[ 1138.636357][T10632] simple: /dev/video#_0
[ 1138.640552][T10632] simple: /dev/video#_0
[ 1138.644790][T10632] simple: /dev/video#_0
[ 1138.649027][T10632] simple: /dev/video#_0
[ 1138.653348][T10632] simple: /dev/video#_0
[ 1138.657579][T10632] simple: /dev/video#_0
[ 1138.661807][T10632] simple: /dev/video#_0
[ 1138.666038][T10632] simple: /dev/video#_0
[ 1138.670230][T10632] simple: /dev/video#_0
[ 1138.674473][T10632] simple: /dev/video#_0
[ 1138.678654][T10632] simple: /dev/video#_0
[ 1138.682859][T10632] simple: /dev/video#_0
[ 1138.687090][T10632] simple: /dev/video#_0
[ 1138.691282][T10632] simple: /dev/video#_0
[ 1138.695511][T10632] simple: /dev/video#_0
[ 1138.699716][T10632] simple: /dev/video#_0
[ 1138.703935][T10632] simple: /dev/video#_0
[ 1138.708121][T10632] simple: /dev/video#_0
[ 1138.712306][T10632] simple: /dev/video#_0
[ 1138.716609][T10632] simple: /dev/video#_0
[ 1138.720814][T10632] simple: /dev/video#_0
[ 1138.725059][T10632] simple: /dev/video#_0
[ 1138.729254][T10632] simple: /dev/video#_0
[ 1138.733442][T10632] simple: /dev/video#_0
[ 1138.737662][T10632] TC_ACT_REPEAT abuse ?
[ 1139.161521][T10649] binder: 10648:10649 ioctl c0306201 200000000b40 returned -14
[ 1139.175063][T10649] binder: 10648:10649 ioctl c0306201 200000000c40 returned -14
[ 1139.244703][T10650] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1140.144930][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'.
[ 1143.093933][ T5882] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1143.293405][ T5882] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1143.305083][ T5882] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1143.315135][ T5882] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1143.328788][ T5882] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1143.336002][ T5882] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1143.363762][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1143.481922][ T5882] usb 3-1: config 0 descriptor??
[ 1143.525971][ T5882] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[ 1145.762330][ T5882] usbhid 3-1:0.0: can't add hid device: -71
[ 1145.779477][ T5882] usbhid: probe of 3-1:0.0 failed with error -71
[ 1145.822080][ T5882] usb 3-1: USB disconnect, device number 28
[ 1147.051274][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'.
[ 1148.096441][T10713] binder: 10711:10713 ioctl c0306201 200000000b40 returned -14
[ 1148.123418][T10713] binder: BINDER_SET_CONTEXT_MGR already set
[ 1148.144036][T10713] binder: 10711:10713 ioctl 4018620d 200000000c00 returned -16
[ 1148.275250][T10719] binder: 10711:10719 ioctl c0306201 200000000c40 returned -14
[ 1148.824684][T10724] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1150.335961][T10740] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1150.394432][T10742] CacheFiles: No cache directory specified
[ 1151.099299][T10748] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1152.167670][T10764] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1154.378835][T10766] binder: 10763:10766 ioctl c0306201 200000000b40 returned -14
[ 1154.410608][T10766] binder: BINDER_SET_CONTEXT_MGR already set
[ 1154.483880][T10766] binder: 10763:10766 ioctl 4018620d 200000000c00 returned -16
[ 1154.527897][T10766] binder: 10763:10766 ioctl c0306201 200000000c40 returned -14
[ 1154.721239][T10776] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1156.621752][T10793] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1157.435051][T10809] netlink: 'syz.4.1206': attribute type 1 has an invalid length.
[ 1157.485973][T10811] binder: 10810:10811 ioctl c0306201 200000000b40 returned -14
[ 1157.552085][T10811] binder: BINDER_SET_CONTEXT_MGR already set
[ 1157.643035][T10818] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1159.842363][T10820] binder: 10810:10820 ioctl c0306201 200000000c40 returned -14
[ 1159.842362][T10811] binder: 10810:10811 ioctl 4018620d 200000000c00 returned -16
[ 1161.677671][T10830] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1162.357160][ T5860] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[ 1162.604598][ T5860] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1163.240586][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1212'.
[ 1163.621633][T10854] ptp ptp0: guarantee physical clock free running
[ 1163.639097][T10854] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1166.052429][T10868] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1166.080570][T10868] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1166.106650][T10868] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1166.958281][T10863] binder: 10862:10863 ioctl c0306201 200000000c40 returned -14
[ 1167.735082][T10889] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1168.623189][T10906] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1170.314058][ T5086] Bluetooth: hci4: command tx timeout
[ 1171.580994][T10912] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1171.657513][T10912] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1171.710459][T10912] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1172.253197][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1227'.
[ 1173.014287][T10917] ptp ptp0: guarantee physical clock free running
[ 1173.024262][T10917] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1175.176632][T10927] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1175.221085][T10927] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1175.247720][T10927] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1177.358168][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.371344][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1180.818989][T10950] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1180.863113][T10950] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1181.951776][T10953] FAULT_INJECTION: forcing a failure.
[ 1181.951776][T10953] name failslab, interval 1, probability 0, space 0, times 0
[ 1181.985018][T10953] CPU: 0 PID: 10953 Comm: syz.3.1235 Not tainted syzkaller #0
[ 1181.992546][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1182.002660][T10953] Call Trace:
[ 1182.005981][T10953]  <TASK>
[ 1182.008944][T10953]  dump_stack_lvl+0x18c/0x250
[ 1182.013679][T10953]  ? show_regs_print_info+0x20/0x20
[ 1182.018917][T10953]  ? load_image+0x420/0x420
[ 1182.023464][T10953]  ? __might_sleep+0xe0/0xe0
[ 1182.028106][T10953]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1182.033197][T10953]  should_fail_ex+0x394/0x4c0
[ 1182.037928][T10953]  should_failslab+0x9/0x20
[ 1182.042479][T10953]  slab_pre_alloc_hook+0x59/0x300
[ 1182.047544][T10953]  ? kvmalloc_node+0x70/0x180
[ 1182.052269][T10953]  ? kvmalloc_node+0x70/0x180
[ 1182.056997][T10953]  __kmem_cache_alloc_node+0x53/0x250
[ 1182.062394][T10953]  ? kvmalloc_node+0x70/0x180
[ 1182.067081][T10953]  __kmalloc_node+0xa6/0x240
[ 1182.071684][T10953]  kvmalloc_node+0x70/0x180
[ 1182.076210][T10953]  nf_tables_newchain+0x1d41/0x29b0
[ 1182.081529][T10953]  ? nf_tables_deltable+0xe80/0xe80
[ 1182.086799][T10953]  ? nft_trans_table_add+0x1e6/0x270
[ 1182.092120][T10953]  ? nfnl_pernet+0x23/0x230
[ 1182.096746][T10953]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1182.101780][T10953]  ? nf_tables_newtable+0xd58/0x17b0
[ 1182.107090][T10953]  ? __nla_parse+0x40/0x50
[ 1182.111533][T10953]  nfnetlink_rcv+0x1133/0x2490
[ 1182.116320][T10953]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[ 1182.121910][T10953]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1182.126946][T10953]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1182.132195][T10953]  netlink_unicast+0x7b1/0x930
[ 1182.136977][T10953]  netlink_sendmsg+0x8d0/0xbf0
[ 1182.141761][T10953]  ? netlink_getsockopt+0x590/0x590
[ 1182.146970][T10953]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 1182.152569][T10953]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1182.157874][T10953]  ? security_socket_sendmsg+0x80/0xa0
[ 1182.163357][T10953]  ? netlink_getsockopt+0x590/0x590
[ 1182.168575][T10953]  ____sys_sendmsg+0x61b/0x980
[ 1182.173362][T10953]  ? __asan_memset+0x22/0x40
[ 1182.177961][T10953]  ? __sys_sendmsg_sock+0x30/0x30
[ 1182.182996][T10953]  ? __import_iovec+0x5f2/0x850
[ 1182.187863][T10953]  ? import_iovec+0x73/0xa0
[ 1182.192383][T10953]  ___sys_sendmsg+0x2a6/0x360
[ 1182.197098][T10953]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1182.201908][T10953]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1182.206785][T10953]  ? __x64_sys_sendmsg+0x80/0x80
[ 1182.211763][T10953]  ? lockdep_hardirqs_on+0x98/0x150
[ 1182.216973][T10953]  do_syscall_64+0x55/0xb0
[ 1182.221405][T10953]  ? clear_bhb_loop+0x40/0x90
[ 1182.226119][T10953]  ? clear_bhb_loop+0x40/0x90
[ 1182.230802][T10953]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1182.236720][T10953] RIP: 0033:0x7f976eb9e1d9
[ 1182.241194][T10953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1182.260820][T10953] RSP: 002b:00007f976fa51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1182.269269][T10953] RAX: ffffffffffffffda RBX: 00007f976ee25fa0 RCX: 00007f976eb9e1d9
[ 1182.277257][T10953] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004
[ 1182.285248][T10953] RBP: 00007f976ec35888 R08: 0000000000000000 R09: 0000000000000000
[ 1182.293228][T10953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1182.301213][T10953] R13: 00007f976ee26038 R14: 00007f976ee25fa0 R15: 00007fffc8c2a888
[ 1182.309205][T10953]  </TASK>
[ 1182.935706][T10968] binder: 10967:10968 ioctl c0306201 200000000c40 returned -14
[ 1183.070191][ T9469] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[ 1183.309862][T10975] ptp ptp0: guarantee physical clock free running
[ 1183.319469][T10975] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1184.405438][T10981] overlayfs: overlapping lowerdir path
[ 1184.553779][ T9469] Bluetooth: hci4: command 0x0406 tx timeout
[ 1185.563321][T10988] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1185.600461][T10988] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1185.624465][T10988] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1187.496441][T11001] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1189.083972][ T5086] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[ 1189.145208][T11028] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1190.367090][T11035] overlayfs: overlapping lowerdir path
[ 1191.747625][T11037] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[ 1191.754208][T11037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1191.762193][T11037] vhci_hcd vhci_hcd.0: Device attached
[ 1192.030534][T11038] vhci_hcd: connection closed
[ 1192.687157][T11046] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1192.722454][T11046] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1192.742403][T11046] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1193.421088][T10899] vhci_hcd: stop threads
[ 1193.439707][T10899] vhci_hcd: release socket
[ 1193.468593][T10899] vhci_hcd: disconnect device
[ 1193.500050][T11048] input: syz1 as /devices/virtual/input/input59
[ 1193.603887][ T5806] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[ 1193.644011][ T5806] usb 41-1: enqueue for inactive port 0
[ 1193.723875][ T5806] vhci_hcd: vhci_device speed not set
[ 1199.263406][T11092] ptp ptp0: guarantee physical clock free running
[ 1199.273207][T11092] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1204.054874][T11121] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[ 1204.061458][T11121] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1204.069614][T11121] vhci_hcd vhci_hcd.0: Device attached
[ 1204.978689][T11122] vhci_hcd: connection closed
[ 1204.994799][ T5861] usb 41-1: new low-speed USB device number 3 using vhci_hcd
[ 1205.015442][ T5868] vhci_hcd: stop threads
[ 1205.082837][ T5868] vhci_hcd: release socket
[ 1205.133349][ T5868] vhci_hcd: disconnect device
[ 1207.711821][T11148] ksmbd: Unknown IPC event: 3, ignore.
[ 1207.864149][ T5806] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1208.741386][T11156] overlayfs: overlapping lowerdir path
[ 1209.279497][ T5806] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1209.291691][ T5806] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1209.301939][ T5806] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1209.311999][ T5806] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1209.330161][ T5806] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1209.392730][T11150] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1209.411709][ T5806] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1209.477602][ T5806] usb 6-1: Product: syz
[ 1209.522458][ T5806] usb 6-1: Manufacturer: syz
[ 1209.581767][ T5806] cdc_wdm 6-1:1.0: skipping garbage
[ 1209.646571][ T5806] cdc_wdm 6-1:1.0: skipping garbage
[ 1209.667270][ T5806] cdc_wdm: probe of 6-1:1.0 failed with error -22
[ 1209.833187][ T5806] usb 6-1: USB disconnect, device number 5
[ 1210.234817][ T5861] vhci_hcd: vhci_device speed not set
[ 1214.081048][T11202] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1282'.
[ 1215.017160][T11213] binder: BINDER_SET_CONTEXT_MGR already set
[ 1215.023380][T11213] binder: 11211:11213 ioctl 4018620d 200000000c00 returned -16
[ 1215.077476][T11215] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1285'.
[ 1215.953563][T11227] ptp ptp0: guarantee physical clock free running
[ 1215.963176][T11227] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1217.409744][T11234] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1217.448462][T11234] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1217.470848][T11234] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1218.789537][T11240] syzkaller0: entered promiscuous mode
[ 1221.323727][T11240] syzkaller0: entered allmulticast mode
[ 1221.388196][T11249] blktrace: Concurrent blktraces are not allowed on sg0
[ 1222.368492][T11262] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1222.399966][T11262] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1223.784015][ T5806] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[ 1224.137992][ T5806] usb 4-1: config 201 has an invalid interface number: 249 but max is 0
[ 1224.147137][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1290'.
[ 1224.256485][ T5806] usb 4-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config
[ 1224.267233][ T5806] usb 4-1: config 201 has no interface number 0
[ 1224.274167][ T5806] usb 4-1: config 201 interface 249 altsetting 4 has an invalid endpoint with address 0xF1, skipping
[ 1224.287970][ T5806] usb 4-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1224.301541][ T5806] usb 4-1: config 201 interface 249 has no altsetting 0
[ 1224.311635][ T5806] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[ 1224.363859][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1224.371914][ T5806] usb 4-1: Product: syz
[ 1224.427598][ T5806] usb 4-1: Manufacturer: syz
[ 1224.486201][ T5806] usb 4-1: SerialNumber: syz
[ 1224.930208][ T5806] ath6kl: Failed to submit usb control message: -71
[ 1224.973879][ T5806] ath6kl: unable to send the bmi data to the device: -71
[ 1224.984239][ T5806] ath6kl: Unable to send get target info: -71
[ 1225.002154][ T5806] ath6kl: Failed to init ath6kl core: -71
[ 1225.030425][ T5806] ath6kl_usb: probe of 4-1:201.249 failed with error -71
[ 1225.090087][ T5806] usb 4-1: USB disconnect, device number 25
[ 1225.830218][T11291] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1225.867682][T11291] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1225.896334][T11291] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1226.754180][T11293] Bluetooth: MGMT ver 1.22
[ 1226.992876][T11299] blktrace: Concurrent blktraces are not allowed on sg0
[ 1229.424805][T11305] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1230.997013][T11314] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1231.006192][T11314] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816)
[ 1231.243981][ T5861] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1231.526207][ T5861] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1231.583947][ T5861] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1231.602269][ T5861] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1231.636383][ T5861] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1231.643011][ T5861] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[ 1231.694120][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1231.725998][ T5861] usb 5-1: config 0 descriptor??
[ 1231.767465][ T5861] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count
[ 1233.289101][ T5861] usbhid 5-1:0.0: can't add hid device: -71
[ 1233.299537][ T5861] usbhid: probe of 5-1:0.0 failed with error -71
[ 1233.334199][ T5861] usb 5-1: USB disconnect, device number 8
[ 1234.003253][T11334] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1238.804219][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.810753][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.164567][T11380] blktrace: Concurrent blktraces are not allowed on sg0
[ 1239.379837][T11378] overlayfs: overlapping lowerdir path
[ 1243.897333][T11406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1323'.
[ 1247.630342][T11427] afs: Unknown parameter 'flocRª³«…K›autocell'
[ 1248.501851][T11426] block2mtd: erasesize must be a divisor of device size
[ 1248.540136][T11426] ------------[ cut here ]------------
[ 1248.546132][T11426] WARNING: CPU: 0 PID: 11426 at block/bdev.c:643 blkdev_flush_mapping+0xac/0x290
[ 1248.555491][T11426] Modules linked in:
[ 1248.559436][T11426] CPU: 0 PID: 11426 Comm: syz.3.1331 Not tainted syzkaller #0
[ 1248.567024][T11426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1248.577193][T11426] RIP: 0010:blkdev_flush_mapping+0xac/0x290
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1248.583189][T11426] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 7f 92 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 eb 14 a1 fd eb 11 e8 34 b1 72 fd <0f> 0b 48 85 db 75 9f e8 28 b1 72 fd 48 89 1c 24 4c 8d b3 80 00 00
[ 1248.602941][T11426] RSP: 0018:ffffc9000e97f970 EFLAGS: 00010287
[ 1248.609408][T11426] RAX: ffffffff8414df7c RBX: ffff888148d88000 RCX: 0000000000080000
[ 1248.618097][T11426] RDX: ffffc9000cc3a000 RSI: 000000000000bf13 RDI: 000000000000bf14
[ 1248.626252][T11426] RBP: 0000000000000002 R08: ffff888148d8803b R09: 1ffff110291b1007
[ 1248.634340][T11426] R10: dffffc0000000000 R11: ffffed10291b1008 R12: dffffc0000000000
[ 1248.642383][T11426] R13: dffffc0000000000 R14: ffff888148d88134 R15: ffff888148d88038
[ 1248.650955][T11426] FS:  00007f976fa516c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[ 1248.660149][T11426] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1248.667076][T11426] CR2: 000000110c383c23 CR3: 0000000062e3f000 CR4: 00000000003506f0
[ 1248.675153][T11426] Call Trace:
[ 1248.678471][T11426]  <TASK>
[ 1248.681456][T11426]  ? blkdev_put+0x492/0x7a0
[ 1248.686040][T11426]  blkdev_put+0x49a/0x7a0
[ 1248.690393][T11426]  block2mtd_setup2+0x98f/0xe30
[ 1248.695345][T11426]  ? block2mtd_setup+0xd0/0xd0
[ 1248.700129][T11426]  ? rcu_is_watching+0x15/0xb0
[ 1248.705002][T11426]  ? mutex_lock_nested+0x20/0x20
[ 1248.710111][T11426]  ? __virt_addr_valid+0x10c/0x380
[ 1248.715760][T11426]  ? kernfs_fop_write_iter+0x1dc/0x520
[ 1248.721296][T11426]  block2mtd_setup+0x27/0xd0
[ 1248.726037][T11426]  param_attr_store+0x20e/0x300
[ 1248.730910][T11426]  ? param_attr_show+0x170/0x170
[ 1248.735920][T11426]  ? sysfs_kf_read+0x360/0x360
[ 1248.740696][T11426]  module_attr_store+0x5f/0x80
[ 1248.745524][T11426]  kernfs_fop_write_iter+0x3a4/0x520
[ 1248.750833][T11426]  vfs_write+0x474/0x9a0
[ 1248.755161][T11426]  ? file_end_write+0x250/0x250
[ 1248.760034][T11426]  ? __fget_files+0x3fc/0x460
[ 1248.764761][T11426]  ? __fdget_pos+0x2a3/0x330
[ 1248.769369][T11426]  ? ksys_write+0x74/0x260
[ 1248.773885][T11426]  ksys_write+0x151/0x260
[ 1248.778291][T11426]  ? __ia32_sys_read+0x90/0x90
[ 1248.783080][T11426]  ? lockdep_hardirqs_on+0x98/0x150
[ 1248.788331][T11426]  do_syscall_64+0x55/0xb0
[ 1248.792775][T11426]  ? clear_bhb_loop+0x40/0x90
[ 1248.797719][T11426]  ? clear_bhb_loop+0x40/0x90
[ 1248.802428][T11426]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1248.808487][T11426] RIP: 0033:0x7f976eb9e1d9
[ 1248.813066][T11426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1248.832780][T11426] RSP: 002b:00007f976fa51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1248.841744][T11426] RAX: ffffffffffffffda RBX: 00007f976ee25fa0 RCX: 00007f976eb9e1d9
[ 1248.849873][T11426] RDX: 000000000000000b RSI: 0000200000000540 RDI: 0000000000000003
[ 1248.858001][T11426] RBP: 00007f976ec35888 R08: 0000000000000000 R09: 0000000000000000
[ 1248.866051][T11426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1248.874123][T11426] R13: 00007f976ee26038 R14: 00007f976ee25fa0 R15: 00007fffc8c2a888
[ 1248.882182][T11426]  </TASK>
[ 1248.885294][T11426] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1248.892612][T11426] CPU: 0 PID: 11426 Comm: syz.3.1331 Not tainted syzkaller #0
[ 1248.900141][T11426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1248.910248][T11426] Call Trace:
[ 1248.913580][T11426]  <TASK>
[ 1248.916541][T11426]  dump_stack_lvl+0x18c/0x250
[ 1248.921280][T11426]  ? show_regs_print_info+0x20/0x20
[ 1248.926535][T11426]  ? load_image+0x420/0x420
[ 1248.931103][T11426]  panic+0x2ca/0x720
[ 1248.935084][T11426]  ? bpf_jit_dump+0xd0/0xd0
[ 1248.939655][T11426]  __warn+0x2e0/0x470
[ 1248.943669][T11426]  ? blkdev_flush_mapping+0xac/0x290
[ 1248.948989][T11426]  ? blkdev_flush_mapping+0xac/0x290
[ 1248.954340][T11426]  report_bug+0x2be/0x4f0
[ 1248.958798][T11426]  ? blkdev_flush_mapping+0xac/0x290
[ 1248.964090][T11426]  ? blkdev_flush_mapping+0xac/0x290
[ 1248.969382][T11426]  ? blkdev_flush_mapping+0xae/0x290
[ 1248.974688][T11426]  handle_bug+0xcf/0x120
[ 1248.978959][T11426]  exc_invalid_op+0x1a/0x50
[ 1248.983469][T11426]  asm_exc_invalid_op+0x1a/0x20
[ 1248.988331][T11426] RIP: 0010:blkdev_flush_mapping+0xac/0x290
[ 1248.994244][T11426] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 7f 92 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 eb 14 a1 fd eb 11 e8 34 b1 72 fd <0f> 0b 48 85 db 75 9f e8 28 b1 72 fd 48 89 1c 24 4c 8d b3 80 00 00
[ 1249.013877][T11426] RSP: 0018:ffffc9000e97f970 EFLAGS: 00010287
[ 1249.019953][T11426] RAX: ffffffff8414df7c RBX: ffff888148d88000 RCX: 0000000000080000
[ 1249.027947][T11426] RDX: ffffc9000cc3a000 RSI: 000000000000bf13 RDI: 000000000000bf14
[ 1249.035947][T11426] RBP: 0000000000000002 R08: ffff888148d8803b R09: 1ffff110291b1007
[ 1249.043969][T11426] R10: dffffc0000000000 R11: ffffed10291b1008 R12: dffffc0000000000
[ 1249.051985][T11426] R13: dffffc0000000000 R14: ffff888148d88134 R15: ffff888148d88038
[ 1249.060002][T11426]  ? blkdev_flush_mapping+0xac/0x290
[ 1249.065380][T11426]  ? blkdev_put+0x492/0x7a0
[ 1249.069924][T11426]  blkdev_put+0x49a/0x7a0
[ 1249.074296][T11426]  block2mtd_setup2+0x98f/0xe30
[ 1249.079156][T11426]  ? block2mtd_setup+0xd0/0xd0
[ 1249.083924][T11426]  ? rcu_is_watching+0x15/0xb0
[ 1249.088714][T11426]  ? mutex_lock_nested+0x20/0x20
[ 1249.093682][T11426]  ? __virt_addr_valid+0x10c/0x380
[ 1249.098845][T11426]  ? kernfs_fop_write_iter+0x1dc/0x520
[ 1249.104314][T11426]  block2mtd_setup+0x27/0xd0
[ 1249.108913][T11426]  param_attr_store+0x20e/0x300
[ 1249.113782][T11426]  ? param_attr_show+0x170/0x170
[ 1249.118757][T11426]  ? sysfs_kf_read+0x360/0x360
[ 1249.123521][T11426]  module_attr_store+0x5f/0x80
[ 1249.128295][T11426]  kernfs_fop_write_iter+0x3a4/0x520
[ 1249.133615][T11426]  vfs_write+0x474/0x9a0
[ 1249.137927][T11426]  ? file_end_write+0x250/0x250
[ 1249.142793][T11426]  ? __fget_files+0x3fc/0x460
[ 1249.147514][T11426]  ? __fdget_pos+0x2a3/0x330
[ 1249.152139][T11426]  ? ksys_write+0x74/0x260
[ 1249.156604][T11426]  ksys_write+0x151/0x260
[ 1249.160962][T11426]  ? __ia32_sys_read+0x90/0x90
[ 1249.165738][T11426]  ? lockdep_hardirqs_on+0x98/0x150
[ 1249.170948][T11426]  do_syscall_64+0x55/0xb0
[ 1249.175390][T11426]  ? clear_bhb_loop+0x40/0x90
[ 1249.180068][T11426]  ? clear_bhb_loop+0x40/0x90
[ 1249.184786][T11426]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1249.190710][T11426] RIP: 0033:0x7f976eb9e1d9
[ 1249.195146][T11426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1249.214764][T11426] RSP: 002b:00007f976fa51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1249.223214][T11426] RAX: ffffffffffffffda RBX: 00007f976ee25fa0 RCX: 00007f976eb9e1d9
[ 1249.231191][T11426] RDX: 000000000000000b RSI: 0000200000000540 RDI: 0000000000000003
[ 1249.239168][T11426] RBP: 00007f976ec35888 R08: 0000000000000000 R09: 0000000000000000
[ 1249.247156][T11426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1249.255136][T11426] R13: 00007f976ee26038 R14: 00007f976ee25fa0 R15: 00007fffc8c2a888
[ 1249.263128][T11426]  </TASK>
[ 1249.266801][T11426] Kernel Offset: disabled
[ 1249.271225][T11426] Rebooting in 86400 seconds..