last executing test programs:

13.471701646s ago: executing program 3 (id=924):
r0 = socket(0x1e, 0x4, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000196758f5266ab1", @ANYRES32=0x0, @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100"/28], 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1c42, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, 0x0)
r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000), 0x0, 0xbff, 0x1e, 0x0, 0x8, 0x6e})
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
socket(0x2, 0x80805, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)

11.374316594s ago: executing program 3 (id=928):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8)
mount$fuseblk(&(0x7f0000000240), 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB='_id=\x00', @ANYRESDEC=0x0, @ANYRES8=r0])
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
socket$inet6(0xa, 0x80003, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x7, @mcast2, 0x4}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000020000000017000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa118000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)

9.814198656s ago: executing program 3 (id=935):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$packet(0x11, 0xa, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00'})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r3, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f00000007c0)=ANY=[], 0x0)

8.626386591s ago: executing program 3 (id=943):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x300, 0x0, 0x18}}}}}, 0x36)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0)

8.275003884s ago: executing program 4 (id=946):
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = socket(0xa, 0x3, 0x3a)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x1}, 0x10)
sendmsg(r1, &(0x7f00000007c0)={&(0x7f00000001c0)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="ff32", 0x2}], 0x1}, 0x40)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd0, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
r4 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r4, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b0000000000024907864010101ac14142100004e20009c907801000000000000007b4b143b7461fd777b1c026a0000fb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d0017b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xea, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000ec0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e20, 0xfffffff8, @rand_addr=' \x01\x00', 0xa8d2}, {0xa, 0x4e23, 0x80000001, @empty, 0x7ff}, 0x1, {[0xdb, 0xe4, 0x4, 0x7fff, 0x3b, 0x7, 0x1, 0x9]}}, 0x5c)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0)

5.763951104s ago: executing program 2 (id=952):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x0, 0x4e22, 0x2, 0x2, 0x20, 0xa0}, {0x6, 0xfff, 0x4, 0xfffffffffffffff9, 0x8, 0x538, 0xb38, 0x5}, {0xb3, 0x40, 0xffffffff, 0x7ff}, 0x6, 0x6e6bb2, 0x3, 0x1, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0xff}, 0xa, @in=@local, 0x3501, 0x1, 0x1, 0x4, 0x7, 0x1, 0x3}}, 0xe8)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000005c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f00000000000100"], 0x48}}, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x7, 0x1, 0xccb, 0x8, 0xab, 0xd, 0x103, 0xffffffff, 0x1, 0x5, 0x1, 0x6, 0xffffffff, 0xfffffffe, 0x1a449, 0x3, 0x40000003, 0x489, 0x2, 0x9, 0x20001e58, 0x9, 0x3, 0x3c, 0xa, 0xc, 0x4, 0x3]})
r4 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x4000)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000180)={0x1, 0x100000001, 0x9})
r5 = socket$caif_seqpacket(0x25, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000001ac0)=@ethtool_regs={0x4, 0x5}})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'})

5.487909996s ago: executing program 2 (id=956):
r0 = socket(0x1e, 0x4, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000196758f5266ab1", @ANYRES32=0x0, @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100"/28], 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1c42, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, 0x0)
r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000), 0x0, 0xbff, 0x1e, 0x0, 0x8, 0x6e})
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
socket(0x2, 0x80805, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)

5.056284616s ago: executing program 2 (id=959):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0])

3.943226016s ago: executing program 4 (id=960):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYRES32, @ANYBLOB="b2e61743d7", @ANYRES32=0x0], 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/389], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffee8}, 0x48)

3.743632418s ago: executing program 2 (id=961):
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f64d1a325"], 0x20)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)

3.528524171s ago: executing program 3 (id=962):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bf27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000200", @ANYRES16=r1, @ANYBLOB="00022bbd7000fedbdf250200000008006100e0ffffff05003e00c7"], 0x24}, 0x1, 0x0, 0x0, 0x4004851}, 0x801)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0)

3.459537093s ago: executing program 1 (id=963):
r0 = socket$inet6(0xa, 0x3, 0x3c)
bind$inet6(r0, 0x0, 0x0)

3.101269996s ago: executing program 1 (id=964):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="18fff0001110"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x14)

2.987696341s ago: executing program 1 (id=965):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

2.98688724s ago: executing program 3 (id=966):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0xb7103ff69430cfd7, 0x1, 0x40, "56acfe5e", "0f57087b"}}, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r2, &(0x7f0000000200)={0x14, &(0x7f0000000440)={0x40, 0x8, 0xbe, {0xbe, 0x4, "d2016c272cb7607cec425a86bc6a99c76e3668267ed09cfe9a66ddc0a5a51905ae64685ba9bd8ed012ca999cd0abac9d9bbf3eb79b4649377e72888951380163a1f2ebd21c5d38fcd8f2bd92f53f8a37762f093aab8595f6388d0b20c5be6a731e6a0157a600d0dda5a9146cb217e49f995cedcaa1f64e9d0784a43e5f8f6fc96aa8a65fe561aa74dd8f269c1db23368e6a20a669a5c0da4a92fa15d43b89c38aac4fbb79bb06ef4c92f02f2c4252d8bf95a4ce7542c20ac961faa0f"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000006f030928"]}, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x20, 0x13, 0x1e, "bfb850abad43716c8bfdeb746c720e57a172b470b6cc6e6e0645ae0ba300"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000005c0)={0xc0, 0x5, 0x6, "3c9e7d0aee92"}, &(0x7f0000000600)={0x40, 0x5, 0x4, "41f35007"}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x1, 0x9, 0xc, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), 0x84, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
creat(&(0x7f0000000240)='./file0\x00', 0x122)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x3)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
syz_usb_connect$uac1(0x2, 0x78, 0x0, 0x0)
r5 = gettid()
r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0x2})
close(r6)
prctl$PR_SET_PTRACER(0x59616d61, r5)
ptrace$ARCH_SET_CPUID(0x1e, r5, 0x1, 0x1012)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@mcast2, @multicast1, 0x18, 0x13}})

2.854542773s ago: executing program 2 (id=967):
prctl$PR_GET_TIMERSLACK(0x1e)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_getnetconf={0x1c, 0x52, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001dc0), &(0x7f0000001e40)=0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0x6, 0xfb, 0x1d, 0x7}, {0x2, 0xa, 0x6, 0x7}, {0x2f7, 0x7f, 0x8, 0x9}, {0x754, 0x4a, 0x8, 0x5}]}, 0x10)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_getneigh={0x64, 0x1e, 0x200, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x7100, 0x49024}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}, @IFLA_IFALIASn={0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x40010)

2.839014769s ago: executing program 4 (id=968):
socket$unix(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999ea", 0x5c}, {&(0x7f0000001400)="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", 0xd17}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f", 0x36}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0162202101ff1d871ea0957f080801010c00020100000000030405cb7acaffe2ff01070001"], 0x25)

2.771769807s ago: executing program 1 (id=969):
r0 = add_key$keyring(0x0, &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080), 0x0, r0)
add_key$user(&(0x7f0000000200), &(0x7f0000000440), 0x0, 0x0, r0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="be0c66ca70c2"})
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00')
fchdir(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet(0x2, 0x802, 0x1)
recvmmsg(r5, 0x0, 0x0, 0x2040, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000140)=0x448cb70c, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff02318944268cb89914f086dd", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00')
fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, r9, 0x0)
pread64(r9, &(0x7f0000000240)=""/188, 0xbc, 0x3)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1], 0x72)
keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r1}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={'blake2b-384-generic\x00'}})

2.681545s ago: executing program 1 (id=971):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT')
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e00000005000000040000000900000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x8000000000, 0x1, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffffffffffc}, 0x0, 0x0)
epoll_create1(0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x18)
ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, 0x0)

2.631862631s ago: executing program 4 (id=972):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x0, 0x34343452, 0x640, 0x4b0, 0x3, @stepwise={{0x1ff, 0x6}, {0x3, 0x200}, {0x7ff, 0x9}}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="0000000000faff000000f46611c135dac3b7dc6f3c88134e66c5fa523d473fabb14c4717cfcb0cbd00301b85301751358aa0c4f0dddda0ee9676627965d9fdaa3d5a0d17d2bff0c741ba8ee471a7a4f441835a89a852681ce68bbf6a54f86dd853ddce5754d5876a644fdb6b4b4427ffffffff8a551797f80177f1e544b5ac04f2c4b491abff8bcf8511a095894aa2cbe6dd66d661e295ffda45f555f6761386619171a14c1f8f298c16422374a49104b2d07ccd409eaea0bef67f8dcaef378ff58fca1d30de749d748f929454793157adb04aff20a498088bb70efb4dca5ca5abaf6f32d964d416f096116220f53f8e7f9513", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYRES16=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18)
syz_open_dev$loop(0x0, 0x1, 0x135e80)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r7, &(0x7f00000010c0)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5d57b757b550180000000000000a7f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29ca8fb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73db3d9ac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df2e86cd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb287faf64bb7a3cfe3c28eb7c2335a3af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a7ef759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57ec14a0e767025fed229b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3569fb86225b6cce291da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f608617a308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4ec70c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485dddaa7c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca151d3095232820a84704311f0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3c86761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e8575c69401ea75d14e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0781d2d10b96519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4baf802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea5f8e81f6ed7f242c5a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d93617c4783133f9abab2d6935d54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343feecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x200]}})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8)
r9 = accept4(r8, 0x0, 0x0, 0x80000)
sendmmsg$unix(r9, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="53ccdaeb5f7721a987a7819d89297c4d9104e576ca8112b601c16734255744c1253ef6f07a0136d948716432249c928136ea5e87a3272448a38147d1c5db", 0x3e}], 0x1, 0x0, 0x0, 0x40001}}], 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
open(&(0x7f00000000c0)='./bus\x00', 0x4c27e, 0x2)

2.599327102s ago: executing program 2 (id=973):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e8805208680000100000000090401000015cc1c00"/36], 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x4080)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x1e, 0x14800, 0x0, 0x0}], 0x1})
r3 = accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10, 0x180800)
getsockopt$inet_int(r3, 0x0, 0xe, &(0x7f0000000200), &(0x7f0000000280)=0x4)

2.568338338s ago: executing program 0 (id=974):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x84)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={[{@noprefix}]})
r1 = socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6560696174650000001c0002800800014000000900100002800c00028008000180fffffffb0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0)
sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f000001b640)=""/102390, 0x18ff6}], 0x1, 0x1903d}}], 0x48}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f0000000180))
r4 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'})
getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000400), &(0x7f0000000440)=0x4)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, 0x0, 0x8001)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206050000000000000000000700000405000100070000000900020073797a31000000000c00078008001200ffffffff0500050002000000050004000100000011000300686173683a69702c6d61726b"], 0x58}}, 0x40000)
read(r0, &(0x7f0000000a00)=""/4096, 0x1000)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x9}, 0x8)
setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f00000001c0)=0xe, 0x4)
getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000040))
r6 = syz_open_dev$vcsa(&(0x7f0000000080), 0x6, 0x1c3000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
map_shadow_stack(&(0x7f00008fb000/0x3000)=nil, 0x3000, 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="05030000000000f1000007000000"], 0x14}}, 0x20000000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r9=>0x0, 0x7800, 0x80, 0x7, 0xfffffc5b, {{0x1a, 0x4, 0x1, 0x1d, 0x68, 0x66, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0x7, 0x4f, [@dev={0xac, 0x14, 0x14, 0x3d}]}, @timestamp_prespec={0x44, 0x2c, 0xee, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x6}, {@multicast2, 0x9}, {@empty, 0x8}, {@local, 0x7}, {@rand_addr=0x64010102, 0x40}]}, @ra={0x94, 0x4}, @generic={0x89, 0x6, "2350c688"}, @cipso={0x86, 0x14, 0x3, [{0x7, 0x7, "bb5cc03dc4"}, {0x1, 0x7, "5beeb42f2a"}]}]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x2040005}, 0x44001)

1.168206983s ago: executing program 4 (id=975):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'vcan0\x00', 0x200})
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r1, 0x15fc, 0x7721, 0x1a, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)={0xffffffffffffffff, r2})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="540100001a000100febfffff00010000ffffffff000000000000000000000000fc010000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x844)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x545b01, 0xde)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000700)='./file1\x00', 0x2000775)
keyctl$clear(0x5, 0xfffffffffffffffd)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0)
r7 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000000000000100100000b0000001cfb3dddca87ada872a313a9c280ac08cb05702b79e67385b48dada81527511bfdca52db78e0269838bc70ed0c70ee9649dff16a1a6d05e53d56f671296a11d5ef929223806d7753009e"], 0x10}, 0x20000800)
syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r9 = dup(r8)
r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB="00000000001b87", @ANYRESHEX=r10, @ANYBLOB=',\x00'])
write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYRES32], 0x78)
close(r4)

696.851032ms ago: executing program 1 (id=976):
syz_usb_connect(0x3, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRES8], 0x0)

684.70498ms ago: executing program 0 (id=977):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b3178c965c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfde4, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000e40)="b907ef19edfff007049e0ff0888e", 0x0, 0x6503, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r3 = socket(0x2, 0x80805, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000ffc000/0x1000)=nil)

607.988906ms ago: executing program 4 (id=978):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYRES32, @ANYBLOB="b2e61743d7", @ANYRES32=0x0], 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/389], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffee8}, 0x48)

419.918554ms ago: executing program 0 (id=979):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000004ae00001002abd7000fbdbdf25000000"], 0x14}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x23041, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
getpid()
getpid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
semget$private(0x0, 0x2, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)

238.545416ms ago: executing program 0 (id=980):
r0 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x3, 0x8d)
mincore(&(0x7f0000a49000/0x1000)=nil, 0x1000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='pstore\x00', 0x1004002, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2270469, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}]}}]}, 0x154}}, 0x0)
getrlimit(0x6, &(0x7f0000000100))

156.368184ms ago: executing program 0 (id=981):
r0 = add_key$keyring(0x0, &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080), 0x0, r0)
add_key$user(&(0x7f0000000200), &(0x7f0000000440), 0x0, 0x0, r0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="be0c66ca70c2"})
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00')
fchdir(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet(0x2, 0x802, 0x1)
recvmmsg(r5, 0x0, 0x0, 0x2040, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000140)=0x448cb70c, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff02318944268cb89914f086dd", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00')
fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, r9, 0x0)
pread64(r9, &(0x7f0000000240)=""/188, 0xbc, 0x3)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1], 0x72)
keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r1}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={'blake2b-384-generic\x00'}})

0s ago: executing program 0 (id=982):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000001cc0))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r3)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000100)={&(0x7f0000000000), 0x0})
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be422000000000000000000000000000000000000005b00", 0x13}, 0x60)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

b 1-1: config 0 has an invalid interface number: 67 but max is 0
[  206.432400][ T5861] usb 1-1: config 0 has no interface number 0
[  206.435705][ T5861] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  206.435732][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.435752][ T5861] usb 1-1: Product: syz
[  206.435765][ T5861] usb 1-1: Manufacturer: syz
[  206.435780][ T5861] usb 1-1: SerialNumber: syz
[  206.494788][ T5861] usb 1-1: config 0 descriptor??
[  206.513500][ T5861] smsc95xx v2.0.0
[  207.291250][ T5861] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  207.291280][ T5861] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  207.389940][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  207.642141][   T10] usb 3-1: Using ep0 maxpacket: 32
[  207.648249][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.663608][   T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  207.663634][   T10] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  207.663654][   T10] usb 3-1: Product: syz
[  207.663668][   T10] usb 3-1: Manufacturer: syz
[  207.663682][   T10] usb 3-1: SerialNumber: syz
[  207.675274][   T10] usb 3-1: config 0 descriptor??
[  207.710356][ T7238] veth8: entered promiscuous mode
[  207.710378][ T7238] veth8: entered allmulticast mode
[  207.743548][   T10] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  207.891274][   T43] usb 3-1: Failed to submit usb control message: -71
[  207.891311][   T43] usb 3-1: unable to send the bmi data to the device: -71
[  207.891382][   T43] usb 3-1: unable to get target info from device
[  207.891396][   T43] usb 3-1: could not get target info (-71)
[  207.891412][   T43] usb 3-1: could not probe fw (-71)
[  207.936909][   T10] usb 3-1: USB disconnect, device number 11
[  209.098688][ T5861] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  209.098976][ T5861] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  209.119977][ T5861] usb 1-1: USB disconnect, device number 8
[  209.188618][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'.
[  210.646801][ T7317] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  210.647513][ T7317] cramfs: wrong magic
[  211.318886][ T7331] 9pnet_fd: Insufficient options for proto=fd
[  211.539558][ T7334] 9pnet_virtio: no channels available for device 
[  212.724865][ T7342] 9pnet_virtio: no channels available for device 
[  213.231908][ T7344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.398'.
[  213.579989][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  213.741058][   T10] usb 2-1: Using ep0 maxpacket: 32
[  213.745898][   T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  213.745921][   T10] usb 2-1: config 0 has no interface number 0
[  213.748462][   T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  213.748490][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.748511][   T10] usb 2-1: Product: syz
[  213.748525][   T10] usb 2-1: Manufacturer: syz
[  213.748540][   T10] usb 2-1: SerialNumber: syz
[  213.807597][   T10] usb 2-1: config 0 descriptor??
[  213.829076][   T10] smsc95xx v2.0.0
[  214.231620][   T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  214.231650][   T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  214.606575][    C1] vkms_vblank_simulate: vblank timer overrun
[  214.738679][    C1] vkms_vblank_simulate: vblank timer overrun
[  215.411231][ T7361] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  215.647968][    C1] vkms_vblank_simulate: vblank timer overrun
[  215.789195][    C1] vkms_vblank_simulate: vblank timer overrun
[  216.789627][    C1] vkms_vblank_simulate: vblank timer overrun
[  217.008317][    C1] vkms_vblank_simulate: vblank timer overrun
[  217.663367][ T7371] netlink: 'syz.0.406': attribute type 39 has an invalid length.
[  217.786706][    C1] vkms_vblank_simulate: vblank timer overrun
[  217.786813][   T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  217.787106][   T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  217.867222][   T10] usb 2-1: USB disconnect, device number 12
[  218.109888][   T44] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  218.270230][   T44] usb 5-1: Using ep0 maxpacket: 32
[  218.272462][   T44] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  218.272485][   T44] usb 5-1: config 0 has no interface number 0
[  218.279489][   T44] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  218.279515][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.279534][   T44] usb 5-1: Product: syz
[  218.279548][   T44] usb 5-1: Manufacturer: syz
[  218.279602][   T44] usb 5-1: SerialNumber: syz
[  218.352456][   T44] usb 5-1: config 0 descriptor??
[  218.367835][   T44] smsc95xx v2.0.0
[  218.686630][ T7380] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  218.805071][   T44] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  218.805090][   T44] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  219.152238][ T7380] bond1 (unregistering): Released all slaves
[  219.229960][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  219.382838][   T10] usb 1-1: Using ep0 maxpacket: 32
[  219.385319][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  219.385349][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  219.385373][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  219.385396][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  219.385419][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  219.385443][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  219.388533][   T10] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  219.388566][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.388586][   T10] usb 1-1: Product: syz
[  219.388600][   T10] usb 1-1: Manufacturer: syz
[  219.388614][   T10] usb 1-1: SerialNumber: syz
[  220.425059][    C1] vkms_vblank_simulate: vblank timer overrun
[  220.583610][    C1] vkms_vblank_simulate: vblank timer overrun
[  220.636017][   T10] usb 1-1: config 0 descriptor??
[  220.890984][    C1] vkms_vblank_simulate: vblank timer overrun
[  220.951730][ T7383] netlink: 'syz.0.411': attribute type 10 has an invalid length.
[  221.039417][ T7389] 9pnet_virtio: no channels available for device 
[  221.417239][    C1] vkms_vblank_simulate: vblank timer overrun
[  221.584556][    C1] vkms_vblank_simulate: vblank timer overrun
[  221.645663][    C1] vkms_vblank_simulate: vblank timer overrun
[  221.852770][ T5881] usb 1-1: USB disconnect, device number 9
[  222.139172][ T7393] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  222.208040][ T7393] cramfs: wrong magic
[  222.365140][    C1] vkms_vblank_simulate: vblank timer overrun
[  222.365313][   T44] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  222.365563][   T44] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  222.507383][   T44] usb 5-1: USB disconnect, device number 11
[  223.098935][ T7409] loop9: detected capacity change from 0 to 8
[  223.499918][ T7409] Dev loop9: unable to read RDB block 8
[  223.500257][ T7409]  loop9: unable to read partition table
[  223.504810][ T7409] loop9: partition table beyond EOD, truncated
[  223.504903][ T7409] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  224.109909][ T7414] netlink: 'syz.0.419': attribute type 39 has an invalid length.
[  224.244001][ T7417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.420'.
[  224.329905][   T44] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  224.509838][   T44] usb 2-1: Using ep0 maxpacket: 32
[  224.512542][   T44] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  224.512567][   T44] usb 2-1: config 0 has no interface number 0
[  224.517207][   T44] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  224.517233][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.517254][   T44] usb 2-1: Product: syz
[  224.517268][   T44] usb 2-1: Manufacturer: syz
[  224.517283][   T44] usb 2-1: SerialNumber: syz
[  224.577625][   T44] usb 2-1: config 0 descriptor??
[  224.592315][   T44] smsc95xx v2.0.0
[  225.763619][   T44] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  225.763649][   T44] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  226.324739][ T7432] 9pnet_virtio: no channels available for device 
[  228.716051][   T44] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  228.716353][   T44] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  228.769588][   T44] usb 2-1: USB disconnect, device number 13
[  229.490415][ T7447] nbd: must specify at least one socket
[  229.777428][    C0] vkms_vblank_simulate: vblank timer overrun
[  230.106162][ T7454] 9pnet_virtio: no channels available for device 
[  230.603856][    C0] vkms_vblank_simulate: vblank timer overrun
[  231.182336][    C0] vkms_vblank_simulate: vblank timer overrun
[  231.596124][    C0] vkms_vblank_simulate: vblank timer overrun
[  231.909192][    C0] vkms_vblank_simulate: vblank timer overrun
[  232.711322][    C0] vkms_vblank_simulate: vblank timer overrun
[  232.884097][ T7471] sd 0:0:1:0: device reset
[  233.044991][    C0] vkms_vblank_simulate: vblank timer overrun
[  233.192657][ T7476] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  233.198527][ T7476] cramfs: wrong magic
[  235.289945][ T5895] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  236.101841][ T5895] usb 1-1: Using ep0 maxpacket: 32
[  236.104016][ T5895] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  236.104040][ T5895] usb 1-1: config 0 has no interface number 0
[  236.108355][ T5895] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  236.108421][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.108441][ T5895] usb 1-1: Product: syz
[  236.108455][ T5895] usb 1-1: Manufacturer: syz
[  236.108470][ T5895] usb 1-1: SerialNumber: syz
[  236.176409][ T5895] usb 1-1: config 0 descriptor??
[  236.200929][ T5895] smsc95xx v2.0.0
[  236.548963][ T7509] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  236.869827][ T5895] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  236.869913][ T5895] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  237.972674][ T7519] 9pnet_fd: Insufficient options for proto=fd
[  238.359021][ T5881] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  238.549919][ T5881] usb 3-1: Using ep0 maxpacket: 32
[  238.584260][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  238.584290][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  238.584316][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  238.584338][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  238.584363][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  238.584388][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  238.621898][ T5881] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  238.621925][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.621944][ T5881] usb 3-1: Product: syz
[  238.621958][ T5881] usb 3-1: Manufacturer: syz
[  238.621973][ T5881] usb 3-1: SerialNumber: syz
[  238.712798][ T5881] usb 3-1: config 0 descriptor??
[  238.945773][ T1562] usb 3-1: USB disconnect, device number 12
[  239.151058][ T5895] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  239.151287][ T5895] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  239.180332][ T5895] usb 1-1: USB disconnect, device number 10
[  239.551930][ T5881] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  239.679867][ T5881] usb 4-1: device descriptor read/64, error -71
[  239.809783][ T7546] 9pnet_virtio: no channels available for device 
[  239.939861][ T5881] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  240.159882][ T5881] usb 4-1: device descriptor read/64, error -71
[  240.229883][   T44] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  240.270181][ T5881] usb usb4-port1: attempt power cycle
[  240.449871][   T44] usb 3-1: Using ep0 maxpacket: 32
[  240.452376][   T44] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  240.452400][   T44] usb 3-1: config 0 has no interface number 0
[  240.452448][   T44] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  240.452476][   T44] usb 3-1: config 0 interface 85 has no altsetting 0
[  240.455565][   T44] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  240.455591][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.455611][   T44] usb 3-1: Product: syz
[  240.455625][   T44] usb 3-1: Manufacturer: syz
[  240.455640][   T44] usb 3-1: SerialNumber: syz
[  240.512019][ T7555] ubi31: attaching mtd0
[  240.516301][ T7555] ubi31: scanning is finished
[  240.516315][ T7555] ubi31: empty MTD device detected
[  240.567201][   T44] usb 3-1: config 0 descriptor??
[  240.610215][ T5881] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  240.819969][ T5881] usb 4-1: device not accepting address 14, error -71
[  241.199171][ T7555] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  241.199194][ T7555] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  241.199211][ T7555] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  241.199225][ T7555] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  241.199241][ T7555] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  241.199255][ T7555] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  241.199270][ T7555] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1279582353
[  241.199288][ T7555] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  241.202054][ T7579] ubi31: background thread "ubi_bgt31d" started, PID 7579
[  241.279522][   T44] usb 3-1: can't set config #0, error -71
[  241.334048][ T7580] loop9: detected capacity change from 0 to 8
[  241.589422][   T44] usb 3-1: USB disconnect, device number 13
[  242.138427][ T7580] Dev loop9: unable to read RDB block 8
[  242.138482][ T7580]  loop9: unable to read partition table
[  242.138707][ T7580] loop9: partition table beyond EOD, truncated
[  242.138727][ T7580] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  242.529897][ T5861] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  242.569868][   T44] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  242.570002][ T5881] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  242.679911][ T5861] usb 1-1: Using ep0 maxpacket: 32
[  242.681640][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  242.681670][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  242.681751][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  242.681774][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  242.681799][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  242.681822][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  242.685447][ T5861] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  242.685473][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.685493][ T5861] usb 1-1: Product: syz
[  242.685501][ T5861] usb 1-1: Manufacturer: syz
[  242.685509][ T5861] usb 1-1: SerialNumber: syz
[  242.689037][ T5861] usb 1-1: config 0 descriptor??
[  242.809844][ T5881] usb 4-1: Using ep0 maxpacket: 16
[  242.812078][ T5881] usb 4-1: unable to get BOS descriptor or descriptor too short
[  242.813238][ T5881] usb 4-1: config 1 has an invalid interface number: 9 but max is 0
[  242.813261][ T5881] usb 4-1: config 1 has no interface number 0
[  242.813317][ T5881] usb 4-1: config 1 interface 9 altsetting 69 bulk endpoint 0x4 has invalid maxpacket 8
[  242.813341][ T5881] usb 4-1: config 1 interface 9 altsetting 69 bulk endpoint 0xC has invalid maxpacket 1024
[  242.813365][ T5881] usb 4-1: config 1 interface 9 has no altsetting 0
[  242.815670][ T5881] usb 4-1: New USB device found, idVendor=0711, idProduct=5200, bcdDevice=13.fc
[  242.815696][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.815716][ T5881] usb 4-1: Product: syz
[  242.815730][ T5881] usb 4-1: Manufacturer: syz
[  242.815744][ T5881] usb 4-1: SerialNumber: syz
[  242.819957][   T44] usb 3-1: Using ep0 maxpacket: 32
[  242.820799][ T7589] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  242.820922][ T7589] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  242.828995][   T44] usb 3-1: unable to get BOS descriptor or descriptor too short
[  242.829923][   T44] usb 3-1: unable to read config index 0 descriptor/start: -71
[  242.829953][   T44] usb 3-1: can't read configurations, error -71
[  242.910889][ T5895] usb 1-1: USB disconnect, device number 11
[  243.032482][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.032983][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.037351][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.037735][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.078611][ T5881] sisusb 4-1:1.9: Invalid USB2VGA device
[  243.078645][ T5881] sisusb 4-1:1.9: probe with driver sisusb failed with error -22
[  243.099954][ T5881] usb 4-1: USB disconnect, device number 16
[  243.125979][ T7601] veth8: entered promiscuous mode
[  243.125992][ T7601] veth8: entered allmulticast mode
[  243.247913][ T7605] netlink: 'syz.4.474': attribute type 39 has an invalid length.
[  243.780536][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'.
[  243.788356][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'.
[  243.994883][ T7632] input: syz0 as /devices/virtual/input/input5
[  244.115089][ T7641] 
€Â: renamed from vlan1 (while UP)
[  244.975896][ T5895] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  245.032093][   T37] audit: type=1326 audit(1763057820.476:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7645 comm="syz.4.491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dad7ff6c9 code=0x0
[  245.404176][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  245.404231][ T5895] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  245.404260][ T5895] usb 3-1: config 0 interface 0 has no altsetting 0
[  245.444777][ T5895] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  245.444806][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  245.444826][ T5895] usb 3-1: Product: syz
[  245.444841][ T5895] usb 3-1: Manufacturer: syz
[  245.444855][ T5895] usb 3-1: SerialNumber: syz
[  245.554151][ T5895] usb 3-1: config 0 descriptor??
[  245.595131][ T7659] trusted_key: encrypted_key: insufficient parameters specified
[  245.599717][ T7659] trusted_key: encrypted_key: insufficient parameters specified
[  245.661996][ T5895] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  245.957607][ T7665] netlink: 'syz.0.496': attribute type 39 has an invalid length.
[  247.073641][ T7674] ubi: mtd0 is already attached to ubi31
[  247.175935][   T44] usb 3-1: USB disconnect, device number 16
[  248.224932][ T7694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  248.224950][ T7694] IPv6: NLM_F_CREATE should be set when creating new route
[  248.564488][ T7709] FAULT_INJECTION: forcing a failure.
[  248.564488][ T7709] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  248.564521][ T7709] CPU: 0 UID: 0 PID: 7709 Comm: syz.0.511 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  248.564543][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  248.564554][ T7709] Call Trace:
[  248.564561][ T7709]  <TASK>
[  248.564569][ T7709]  dump_stack_lvl+0x189/0x250
[  248.564599][ T7709]  ? __pfx____ratelimit+0x10/0x10
[  248.564623][ T7709]  ? __pfx_dump_stack_lvl+0x10/0x10
[  248.564648][ T7709]  ? __pfx__printk+0x10/0x10
[  248.564670][ T7709]  ? fs_reclaim_acquire+0x7d/0x100
[  248.564703][ T7709]  should_fail_ex+0x46c/0x600
[  248.564734][ T7709]  prepare_alloc_pages+0x213/0x670
[  248.564768][ T7709]  __alloc_frozen_pages_noprof+0x123/0x370
[  248.564798][ T7709]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  248.564836][ T7709]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  248.564859][ T7709]  ? __might_fault+0xb0/0x130
[  248.564888][ T7709]  alloc_pages_mpol+0xd1/0x380
[  248.564918][ T7709]  alloc_pages_noprof+0xcf/0x1e0
[  248.564952][ T7709]  anon_pipe_write+0xbf6/0x1460
[  248.565005][ T7709]  ? __pfx_anon_pipe_write+0x10/0x10
[  248.565031][ T7709]  ? do_raw_spin_lock+0x121/0x290
[  248.565067][ T7709]  vfs_write+0x5d5/0xb40
[  248.565095][ T7709]  ? __pfx_anon_pipe_write+0x10/0x10
[  248.565120][ T7709]  ? __pfx_vfs_write+0x10/0x10
[  248.565154][ T7709]  ? __fget_files+0x2a/0x420
[  248.565188][ T7709]  ksys_write+0x14b/0x260
[  248.565213][ T7709]  ? __pfx_ksys_write+0x10/0x10
[  248.565239][ T7709]  ? do_syscall_64+0xbe/0xfa0
[  248.565267][ T7709]  do_syscall_64+0xfa/0xfa0
[  248.565289][ T7709]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.565312][ T7709]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.565331][ T7709]  ? clear_bhb_loop+0x60/0xb0
[  248.565353][ T7709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.565371][ T7709] RIP: 0033:0x7ff10595f6c9
[  248.565387][ T7709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.565402][ T7709] RSP: 002b:00007ff103ba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  248.565421][ T7709] RAX: ffffffffffffffda RBX: 00007ff105bb6090 RCX: 00007ff10595f6c9
[  248.565435][ T7709] RDX: 0000000000011000 RSI: 0000200000000340 RDI: 0000000000000004
[  248.565447][ T7709] RBP: 00007ff103ba5090 R08: 0000000000000000 R09: 0000000000000000
[  248.565458][ T7709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  248.565469][ T7709] R13: 00007ff105bb6128 R14: 00007ff105bb6090 R15: 00007ffd2b5e4b78
[  248.565503][ T7709]  </TASK>
[  249.219844][ T5881] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  249.369898][ T5881] usb 4-1: Using ep0 maxpacket: 32
[  249.372262][ T5881] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  249.372286][ T5881] usb 4-1: config 0 has no interface number 0
[  249.375622][ T5881] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  249.375648][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.375669][ T5881] usb 4-1: Product: syz
[  249.375684][ T5881] usb 4-1: Manufacturer: syz
[  249.375699][ T5881] usb 4-1: SerialNumber: syz
[  249.472766][ T5881] usb 4-1: config 0 descriptor??
[  249.493599][ T5881] smsc95xx v2.0.0
[  250.314716][ T5881] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  250.314746][ T5881] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  250.352568][ T7733] 9pnet_fd: Insufficient options for proto=fd
[  250.521761][ T7743] netlink: 'syz.1.523': attribute type 21 has an invalid length.
[  250.521866][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'.
[  252.196393][ T5881] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  252.196697][ T5881] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  252.205355][ T5881] usb 4-1: USB disconnect, device number 17
[  252.228765][ T7755] netlink: 'syz.2.528': attribute type 2 has an invalid length.
[  252.228783][ T7755] netlink: 119 bytes leftover after parsing attributes in process `syz.2.528'.
[  253.019931][ T5881] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  253.189879][ T5881] usb 3-1: Using ep0 maxpacket: 32
[  253.192177][ T5881] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  253.192199][ T5881] usb 3-1: config 0 has no interface number 0
[  253.195416][ T5881] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  253.195442][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.195462][ T5881] usb 3-1: Product: syz
[  253.195477][ T5881] usb 3-1: Manufacturer: syz
[  253.195491][ T5881] usb 3-1: SerialNumber: syz
[  253.301879][ T5881] usb 3-1: config 0 descriptor??
[  253.306200][ T5881] smsc95xx v2.0.0
[  253.409961][   T44] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  253.559958][   T44] usb 5-1: Using ep0 maxpacket: 32
[  253.562595][   T44] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  253.562620][   T44] usb 5-1: config 0 has no interface number 0
[  253.566624][   T44] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  253.566706][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.566727][   T44] usb 5-1: Product: syz
[  253.566741][   T44] usb 5-1: Manufacturer: syz
[  253.566755][   T44] usb 5-1: SerialNumber: syz
[  253.707134][   T44] usb 5-1: config 0 descriptor??
[  253.715527][ T5881] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  253.715554][ T5881] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  253.732749][   T44] smsc95xx v2.0.0
[  253.737049][ T7757] netlink: 48 bytes leftover after parsing attributes in process `syz.1.529'.
[  253.873287][ T7766] syz.0.533 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  254.163240][   T44] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  254.163318][   T44] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  257.000535][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  257.000605][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  257.213731][ T5881] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  257.214192][ T5881] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  257.223636][ T5881] usb 3-1: USB disconnect, device number 17
[  257.375539][ T7789] netlink: 'syz.0.539': attribute type 39 has an invalid length.
[  258.583286][   T44] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  258.583617][   T44] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  258.698514][   T44] usb 5-1: USB disconnect, device number 12
[  260.049716][ T7806] 9pnet_fd: Insufficient options for proto=fd
[  260.510234][ T7805] 9pnet_virtio: no channels available for device 
[  260.511040][ T7804] loop9: detected capacity change from 0 to 8
[  261.023282][ T7804] Dev loop9: unable to read RDB block 8
[  261.023328][ T7804]  loop9: unable to read partition table
[  261.023557][ T7804] loop9: partition table beyond EOD, truncated
[  261.023575][ T7804] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  263.064026][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.551'.
[  263.158714][ T7833] netlink: 'syz.3.552': attribute type 39 has an invalid length.
[  263.569915][ T5895] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  263.719836][ T5895] usb 3-1: Using ep0 maxpacket: 32
[  263.722136][ T5895] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  263.722161][ T5895] usb 3-1: config 0 has no interface number 0
[  263.725585][ T5895] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  263.725612][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.725632][ T5895] usb 3-1: Product: syz
[  263.725647][ T5895] usb 3-1: Manufacturer: syz
[  263.725662][ T5895] usb 3-1: SerialNumber: syz
[  263.810080][ T5895] usb 3-1: config 0 descriptor??
[  263.815054][ T5895] smsc95xx v2.0.0
[  264.796144][ T5895] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  264.796174][ T5895] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  264.948982][ T7850] loop9: detected capacity change from 0 to 8
[  264.966847][    C1] vkms_vblank_simulate: vblank timer overrun
[  265.125749][    C1] vkms_vblank_simulate: vblank timer overrun
[  265.498012][    C1] vkms_vblank_simulate: vblank timer overrun
[  265.617423][ T7850] Dev loop9: unable to read RDB block 8
[  265.617476][ T7850]  loop9: unable to read partition table
[  265.617700][ T7850] loop9: partition table beyond EOD, truncated
[  265.617718][ T7850] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  265.752029][    C1] vkms_vblank_simulate: vblank timer overrun
[  265.773535][ T7856] netlink: 168 bytes leftover after parsing attributes in process `syz.4.558'.
[  265.874766][ T7860] FAULT_INJECTION: forcing a failure.
[  265.874766][ T7860] name failslab, interval 1, probability 0, space 0, times 1
[  265.874796][ T7860] CPU: 1 UID: 0 PID: 7860 Comm: syz.4.562 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  265.874818][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  265.874828][ T7860] Call Trace:
[  265.874835][ T7860]  <TASK>
[  265.874843][ T7860]  dump_stack_lvl+0x189/0x250
[  265.874872][ T7860]  ? __pfx____ratelimit+0x10/0x10
[  265.874896][ T7860]  ? __pfx_dump_stack_lvl+0x10/0x10
[  265.874921][ T7860]  ? __pfx__printk+0x10/0x10
[  265.874949][ T7860]  ? __pfx___might_resched+0x10/0x10
[  265.874969][ T7860]  ? fs_reclaim_acquire+0x7d/0x100
[  265.874998][ T7860]  should_fail_ex+0x46c/0x600
[  265.875026][ T7860]  ? __alloc_skb+0x112/0x2d0
[  265.875053][ T7860]  should_failslab+0xa8/0x100
[  265.875079][ T7860]  ? __alloc_skb+0x112/0x2d0
[  265.875095][ T7860]  kmem_cache_alloc_node_noprof+0x78/0x6e0
[  265.875119][ T7860]  ? netlink_autobind+0xdb/0x300
[  265.875143][ T7860]  __alloc_skb+0x112/0x2d0
[  265.875165][ T7860]  netlink_sendmsg+0x5c6/0xb30
[  265.875183][ T7860]  ? is_bpf_text_address+0x26/0x2b0
[  265.875218][ T7860]  ? __pfx_netlink_sendmsg+0x10/0x10
[  265.875246][ T7860]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  265.875270][ T7860]  ? __pfx_netlink_sendmsg+0x10/0x10
[  265.875289][ T7860]  __sock_sendmsg+0x21c/0x270
[  265.875317][ T7860]  ____sys_sendmsg+0x508/0x820
[  265.875344][ T7860]  ? __pfx_____sys_sendmsg+0x10/0x10
[  265.875375][ T7860]  ? import_iovec+0x74/0xa0
[  265.875398][ T7860]  ___sys_sendmsg+0x21f/0x2a0
[  265.875422][ T7860]  ? __pfx____sys_sendmsg+0x10/0x10
[  265.875478][ T7860]  ? __fget_files+0x2a/0x420
[  265.875501][ T7860]  ? __fget_files+0x3a6/0x420
[  265.875535][ T7860]  __x64_sys_sendmsg+0x1a1/0x260
[  265.875560][ T7860]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  265.875592][ T7860]  ? __pfx_ksys_write+0x10/0x10
[  265.875618][ T7860]  ? do_syscall_64+0xbe/0xfa0
[  265.875646][ T7860]  do_syscall_64+0xfa/0xfa0
[  265.875673][ T7860]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.875696][ T7860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.875714][ T7860]  ? clear_bhb_loop+0x60/0xb0
[  265.875735][ T7860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.875752][ T7860] RIP: 0033:0x7f2dad7ff6c9
[  265.875769][ T7860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.875784][ T7860] RSP: 002b:00007f2daba66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  265.875803][ T7860] RAX: ffffffffffffffda RBX: 00007f2dada55fa0 RCX: 00007f2dad7ff6c9
[  265.875816][ T7860] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004
[  265.875827][ T7860] RBP: 00007f2daba66090 R08: 0000000000000000 R09: 0000000000000000
[  265.875838][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.875849][ T7860] R13: 00007f2dada56038 R14: 00007f2dada55fa0 R15: 00007ffd6cfdf078
[  265.875880][ T7860]  </TASK>
[  266.139830][ T5896] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  266.403763][    C1] vkms_vblank_simulate: vblank timer overrun
[  266.480015][ T5896] usb 2-1: Using ep0 maxpacket: 32
[  266.482417][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.487361][ T5896] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  266.487388][ T5896] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  266.487408][ T5896] usb 2-1: Product: syz
[  266.487422][ T5896] usb 2-1: Manufacturer: syz
[  266.487436][ T5896] usb 2-1: SerialNumber: syz
[  266.540996][ T5896] usb 2-1: config 0 descriptor??
[  266.583860][ T5896] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  266.599896][ T5894] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  266.749138][ T3645] usb 2-1: Failed to submit usb control message: -71
[  266.749174][ T3645] usb 2-1: unable to send the bmi data to the device: -71
[  266.749587][ T3645] usb 2-1: unable to get target info from device
[  266.749599][ T3645] usb 2-1: could not get target info (-71)
[  266.749609][ T3645] usb 2-1: could not probe fw (-71)
[  266.750009][ T5894] usb 1-1: Using ep0 maxpacket: 32
[  266.753622][ T5894] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  266.753646][ T5894] usb 1-1: config 0 has no interface number 0
[  266.761060][ T5894] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  266.761134][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.761201][ T5894] usb 1-1: Product: syz
[  266.761215][ T5894] usb 1-1: Manufacturer: syz
[  266.761229][ T5894] usb 1-1: SerialNumber: syz
[  266.821364][ T5894] usb 1-1: config 0 descriptor??
[  266.842615][ T5894] smsc95xx v2.0.0
[  266.845523][ T5896] usb 2-1: USB disconnect, device number 14
[  267.250808][ T5881] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  267.258038][ T5894] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  267.258118][ T5894] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  267.411288][ T5881] usb 4-1: Using ep0 maxpacket: 32
[  267.415263][ T5881] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  267.415288][ T5881] usb 4-1: config 0 has no interface number 0
[  267.417979][ T5881] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  267.418005][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.418026][ T5881] usb 4-1: Product: syz
[  267.418039][ T5881] usb 4-1: Manufacturer: syz
[  267.418048][ T5881] usb 4-1: SerialNumber: syz
[  267.477903][ T5881] usb 4-1: config 0 descriptor??
[  267.500767][ T5881] smsc95xx v2.0.0
[  267.842407][    C1] vkms_vblank_simulate: vblank timer overrun
[  268.359674][    C1] vkms_vblank_simulate: vblank timer overrun
[  268.534972][    C1] vkms_vblank_simulate: vblank timer overrun
[  268.666156][    C1] vkms_vblank_simulate: vblank timer overrun
[  269.530416][    C1] vkms_vblank_simulate: vblank timer overrun
[  269.839129][    C1] vkms_vblank_simulate: vblank timer overrun
[  269.936123][ T7894] netlink: 'syz.1.569': attribute type 83 has an invalid length.
[  270.075730][   T37] audit: type=1800 audit(1763057845.416:11): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.569" name="file1" dev="tmpfs" ino=686 res=0 errno=0
[  270.736292][ T5881] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  270.736325][ T5881] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  270.957889][ T5894] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  270.958355][ T5894] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  270.967561][ T5894] usb 1-1: USB disconnect, device number 12
[  271.014970][ T5895] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -110
[  271.015269][ T5895] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -110
[  272.137114][ T5881] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  272.137288][ T5881] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  272.233084][ T5881] usb 4-1: USB disconnect, device number 18
[  272.879880][ T1562] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  273.039927][ T1562] usb 5-1: Using ep0 maxpacket: 32
[  273.041869][ T1562] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  273.041884][ T1562] usb 5-1: config 0 has no interface number 0
[  273.043796][ T1562] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  273.043813][ T1562] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.043823][ T1562] usb 5-1: Product: syz
[  273.043831][ T1562] usb 5-1: Manufacturer: syz
[  273.043838][ T1562] usb 5-1: SerialNumber: syz
[  273.047076][ T1562] usb 5-1: config 0 descriptor??
[  273.049520][ T1562] smsc95xx v2.0.0
[  274.146377][ T1562] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  274.146407][ T1562] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  274.419918][ T5881] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  274.590051][ T5881] usb 2-1: Using ep0 maxpacket: 32
[  274.596226][ T5881] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  274.596251][ T5881] usb 2-1: config 0 has no interface number 0
[  274.619852][ T5881] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  274.619878][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.619899][ T5881] usb 2-1: Product: syz
[  274.619914][ T5881] usb 2-1: Manufacturer: syz
[  274.619928][ T5881] usb 2-1: SerialNumber: syz
[  274.624979][ T5881] usb 2-1: config 0 descriptor??
[  274.667779][ T5881] smsc95xx v2.0.0
[  274.690455][ T7937] syz.3.582 (7937): /proc/7937/oom_adj is deprecated, please use /proc/7937/oom_score_adj instead.
[  275.285389][ T5881] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  275.285420][ T5881] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  275.542738][ T7944] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  275.556693][ T7944] cramfs: wrong magic
[  279.331375][ T5881] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  279.331680][ T5881] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  279.428244][ T5881] usb 2-1: USB disconnect, device number 15
[  279.650200][ T1562] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -110
[  279.650506][ T1562] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -110
[  280.047077][ T7969] loop9: detected capacity change from 0 to 8
[  280.769619][ T7969] Dev loop9: unable to read RDB block 8
[  280.769676][ T7969]  loop9: unable to read partition table
[  280.769974][ T7969] loop9: partition table beyond EOD, truncated
[  280.769994][ T7969] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  282.161650][ T1562] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  282.303996][ T7983] netlink: 36 bytes leftover after parsing attributes in process `syz.0.596'.
[  282.319922][ T1562] usb 4-1: Using ep0 maxpacket: 32
[  282.321384][ T1562] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  282.321398][ T1562] usb 4-1: config 0 has no interface number 0
[  282.323245][ T1562] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  282.323260][ T1562] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.323270][ T1562] usb 4-1: Product: syz
[  282.323278][ T1562] usb 4-1: Manufacturer: syz
[  282.323285][ T1562] usb 4-1: SerialNumber: syz
[  282.326377][ T1562] usb 4-1: config 0 descriptor??
[  282.328770][ T1562] smsc95xx v2.0.0
[  282.435787][ T7985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.436435][ T7985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.072810][ T1562] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  283.072840][ T1562] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  283.549907][ T5896] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  283.800860][ T5896] usb 1-1: Using ep0 maxpacket: 32
[  283.803001][ T5896] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  283.803026][ T5896] usb 1-1: config 0 has no interface number 0
[  283.805937][ T5896] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  283.805963][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.805982][ T5896] usb 1-1: Product: syz
[  283.805997][ T5896] usb 1-1: Manufacturer: syz
[  283.806011][ T5896] usb 1-1: SerialNumber: syz
[  283.811372][ T5896] usb 1-1: config 0 descriptor??
[  283.818015][ T5896] smsc95xx v2.0.0
[  285.465419][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  285.465450][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  285.539260][ T1562] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  285.539478][ T1562] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  285.591001][ T1562] usb 4-1: USB disconnect, device number 19
[  285.714550][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'.
[  287.625458][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  287.625762][ T5896] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  287.650345][ T5896] usb 1-1: USB disconnect, device number 13
[  287.780157][ T5861] usb 3-1: USB disconnect, device number 18
[  288.031060][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.031772][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.581344][ T8025] loop9: detected capacity change from 0 to 8
[  289.854821][ T8025] Dev loop9: unable to read RDB block 8
[  289.855160][ T8025]  loop9: unable to read partition table
[  289.857561][ T8025] loop9: partition table beyond EOD, truncated
[  289.857628][ T8025] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  290.409821][ T5894] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  290.569946][ T5894] usb 3-1: Using ep0 maxpacket: 32
[  290.587613][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  290.587631][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  290.587645][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  290.587659][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  290.587673][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  290.587686][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  290.677970][ T5894] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  290.678002][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.678023][ T5894] usb 3-1: Product: syz
[  290.678038][ T5894] usb 3-1: Manufacturer: syz
[  290.678053][ T5894] usb 3-1: SerialNumber: syz
[  290.710150][ T5896] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  290.761083][ T5894] usb 3-1: config 0 descriptor??
[  290.859827][ T5896] usb 4-1: Using ep0 maxpacket: 32
[  290.864603][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  290.864643][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  290.864670][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  290.864693][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  290.864723][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  290.864749][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  290.948934][ T5896] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  290.948964][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.948985][ T5896] usb 4-1: Product: syz
[  290.949001][ T5896] usb 4-1: Manufacturer: syz
[  290.949016][ T5896] usb 4-1: SerialNumber: syz
[  290.985458][ T5896] usb 4-1: config 0 descriptor??
[  291.099128][ T5894] usb 5-1: USB disconnect, device number 13
[  291.159561][   T10] usb 3-1: USB disconnect, device number 19
[  291.273799][ T5896] usb 4-1: USB disconnect, device number 20
[  292.811370][ T8042] 9pnet_virtio: no channels available for device 
[  292.812166][ T8041] loop9: detected capacity change from 0 to 8
[  293.270177][ T8041] Dev loop9: unable to read RDB block 8
[  293.270235][ T8041]  loop9: unable to read partition table
[  293.270467][ T8041] loop9: partition table beyond EOD, truncated
[  293.270485][ T8041] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  294.906203][ T8045] 9pnet_virtio: no channels available for device 
[  295.062070][ T8049] 9pnet_fd: Insufficient options for proto=fd
[  296.194487][ T8053] 9pnet_fd: Insufficient options for proto=fd
[  296.616922][ T5894] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  296.709864][ T5881] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  296.769953][ T5894] usb 3-1: Using ep0 maxpacket: 32
[  296.772356][ T5894] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  296.772382][ T5894] usb 3-1: config 0 has no interface number 0
[  296.775426][ T5894] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  296.775453][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.775473][ T5894] usb 3-1: Product: syz
[  296.775488][ T5894] usb 3-1: Manufacturer: syz
[  296.775503][ T5894] usb 3-1: SerialNumber: syz
[  296.782129][ T5894] usb 3-1: config 0 descriptor??
[  296.788372][ T5894] smsc95xx v2.0.0
[  296.922180][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.922238][ T5881] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  296.922269][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0
[  296.925262][ T5881] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  296.925289][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  296.925310][ T5881] usb 4-1: Product: syz
[  296.925324][ T5881] usb 4-1: Manufacturer: syz
[  296.925339][ T5881] usb 4-1: SerialNumber: syz
[  297.005578][ T5881] usb 4-1: config 0 descriptor??
[  297.063680][ T5881] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[  297.202758][ T5894] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  297.202789][ T5894] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  298.340628][ T8075] loop9: detected capacity change from 0 to 8
[  298.879971][ T8075] Dev loop9: unable to read RDB block 8
[  298.880025][ T8075]  loop9: unable to read partition table
[  298.880232][ T8075] loop9: partition table beyond EOD, truncated
[  298.880248][ T8075] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  299.899516][ T5881] usb 4-1: USB disconnect, device number 21
[  300.401111][ T5894] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  300.401402][ T5894] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  300.412717][ T5894] usb 3-1: USB disconnect, device number 20
[  301.096826][   T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  301.877297][ T1562] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  302.029844][   T10] usb 1-1: Using ep0 maxpacket: 32
[  302.031636][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  302.031654][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  302.031668][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  302.031680][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  302.031693][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  302.031707][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  302.034041][   T10] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  302.034068][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.034088][   T10] usb 1-1: Product: syz
[  302.034102][   T10] usb 1-1: Manufacturer: syz
[  302.034117][   T10] usb 1-1: SerialNumber: syz
[  302.037187][   T10] usb 1-1: config 0 descriptor??
[  302.089882][ T1562] usb 5-1: Using ep0 maxpacket: 32
[  302.092207][ T1562] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  302.092230][ T1562] usb 5-1: config 0 has no interface number 0
[  302.096578][ T1562] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  302.096605][ T1562] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.096625][ T1562] usb 5-1: Product: syz
[  302.096639][ T1562] usb 5-1: Manufacturer: syz
[  302.096653][ T1562] usb 5-1: SerialNumber: syz
[  302.102905][ T1562] usb 5-1: config 0 descriptor??
[  302.116613][ T1562] smsc95xx v2.0.0
[  302.453537][ T8102] 9pnet_fd: Insufficient options for proto=fd
[  302.468135][   T10] usb 1-1: USB disconnect, device number 14
[  302.582933][ T1562] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  302.582962][ T1562] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  302.694932][ T8107] 9pnet_fd: Insufficient options for proto=fd
[  302.959946][   T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  303.149876][   T10] usb 2-1: Using ep0 maxpacket: 32
[  303.156165][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  303.156195][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  303.156276][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  303.156299][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  303.156324][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  303.156351][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  303.169161][   T10] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  303.169189][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.169210][   T10] usb 2-1: Product: syz
[  303.169225][   T10] usb 2-1: Manufacturer: syz
[  303.169239][   T10] usb 2-1: SerialNumber: syz
[  303.324753][   T10] usb 2-1: config 0 descriptor??
[  304.505225][   T10] usb 2-1: USB disconnect, device number 16
[  304.517183][ T1562] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  304.517492][ T1562] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  304.524890][ T1562] usb 5-1: USB disconnect, device number 14
[  304.616436][ T8127] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  304.626854][ T8127] cramfs: wrong magic
[  307.189866][ T5881] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  307.345785][ T5881] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  307.345816][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.371828][ T5881] usb 4-1: config 0 descriptor??
[  307.388631][ T5881] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  308.069652][ T5881] gp8psk: usb in 137 operation failed.
[  308.069687][ T5881] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  308.086190][ T5881] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  308.101627][ T5881] usb 4-1: USB disconnect, device number 22
[  308.699895][ T1562] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  310.035248][   T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  310.059806][ T1562] usb 3-1: Using ep0 maxpacket: 32
[  310.062158][ T1562] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  310.062189][ T1562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  310.062216][ T1562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  310.062239][ T1562] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  310.062265][ T1562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  310.062292][ T1562] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  310.066870][ T1562] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  310.066898][ T1562] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.066919][ T1562] usb 3-1: Product: syz
[  310.066934][ T1562] usb 3-1: Manufacturer: syz
[  310.066949][ T1562] usb 3-1: SerialNumber: syz
[  310.314655][   T44] Process accounting resumed
[  310.412841][ T1562] usb 3-1: config 0 descriptor??
[  310.413428][ T1562] usb 3-1: can't set config #0, error -71
[  310.415838][ T1562] usb 3-1: USB disconnect, device number 21
[  310.491583][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  310.491644][   T10] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  310.491673][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  310.496193][   T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  310.496221][   T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  310.496241][   T10] usb 1-1: Product: syz
[  310.496255][   T10] usb 1-1: Manufacturer: syz
[  310.496269][   T10] usb 1-1: SerialNumber: syz
[  310.515892][   T10] usb 1-1: config 0 descriptor??
[  310.637427][   T10] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  311.754251][   T10] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  311.912172][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  311.912236][   T10] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  311.912266][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  311.915430][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  311.915458][   T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  311.915479][   T10] usb 3-1: Product: syz
[  311.915494][   T10] usb 3-1: Manufacturer: syz
[  311.915509][   T10] usb 3-1: SerialNumber: syz
[  311.921303][   T10] usb 3-1: config 0 descriptor??
[  312.354320][ T8212] loop9: detected capacity change from 0 to 8
[  312.960679][ T8212] Dev loop9: unable to read RDB block 8
[  312.960726][ T8212]  loop9: unable to read partition table
[  312.960947][ T8212] loop9: partition table beyond EOD, truncated
[  312.960964][ T8212] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  314.429873][ T1562] usb 1-1: USB disconnect, device number 15
[  314.811224][ T5861] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  315.476389][   T10] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  315.479189][   T10] usb 3-1: USB disconnect, device number 22
[  315.928719][ T5861] usb 2-1: Using ep0 maxpacket: 32
[  315.931832][ T5861] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  315.931863][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  315.931890][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  315.931913][ T5861] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  315.931938][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  315.931965][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  315.935610][ T5861] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  315.935637][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.935657][ T5861] usb 2-1: Product: syz
[  315.935671][ T5861] usb 2-1: Manufacturer: syz
[  315.935686][ T5861] usb 2-1: SerialNumber: syz
[  315.951798][ T5861] usb 2-1: config 0 descriptor??
[  315.963108][ T8232] netlink: 100 bytes leftover after parsing attributes in process `syz.0.673'.
[  315.972969][ T8232] 9pnet_fd: Insufficient options for proto=fd
[  316.626405][   T44] usb 2-1: USB disconnect, device number 17
[  317.831706][ T8245] loop9: detected capacity change from 0 to 8
[  317.959283][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  317.959353][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  318.289929][ T8245] Dev loop9: unable to read RDB block 8
[  318.289975][ T8245]  loop9: unable to read partition table
[  318.290197][ T8245] loop9: partition table beyond EOD, truncated
[  318.290216][ T8245] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  318.955566][ T1562] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  319.577773][ T8262] binder: 8259:8262 ioctl c0306201 200000000040 returned -22
[  319.578057][ T8262] binder: 8259:8262 ioctl c0306201 200000000640 returned -22
[  319.988475][ T8266] 9pnet_virtio: no channels available for device 
[  320.789679][ T8277] 9pnet_virtio: no channels available for device 
[  322.245751][ T8284] loop9: detected capacity change from 0 to 8
[  322.421513][ T8284] Dev loop9: unable to read RDB block 8
[  322.421561][ T8284]  loop9: unable to read partition table
[  322.421790][ T8284] loop9: partition table beyond EOD, truncated
[  322.421809][ T8284] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  323.624031][ T8297] loop9: detected capacity change from 0 to 8
[  323.988491][ T8297] Dev loop9: unable to read RDB block 8
[  323.988882][ T8297]  loop9: unable to read partition table
[  323.991459][ T8297] loop9: partition table beyond EOD, truncated
[  323.991557][ T8297] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  324.423569][ T8302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.694'.
[  324.835003][   T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  324.852320][ T5861] usb 4-1: new low-speed USB device number 23 using dummy_hcd
[  325.156230][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  325.157563][   T10] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  325.157629][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  325.182156][ T5895] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  325.440522][   T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  325.440551][   T10] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  325.440580][   T10] usb 1-1: Product: syz
[  325.440595][   T10] usb 1-1: Manufacturer: syz
[  325.440611][   T10] usb 1-1: SerialNumber: syz
[  325.710838][ T8311] 9pnet_virtio: no channels available for device 
[  325.757161][   T10] usb 1-1: config 0 descriptor??
[  325.821860][   T10] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  325.841552][ T5895] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  325.841583][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.847006][ T5895] usb 5-1: config 0 descriptor??
[  325.848624][ T5861] usb 4-1: config 0 has an invalid interface number: 33 but max is 0
[  325.848648][ T5861] usb 4-1: config 0 has no interface number 0
[  325.893655][ T5895] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  326.002503][ T5861] usb 4-1: string descriptor 0 read error: -22
[  326.002661][ T5861] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  326.002686][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.011727][ T5861] usb 4-1: config 0 descriptor??
[  326.023635][ T5861] usbtest 4-1:0.33: FX2 device
[  326.023653][ T5861] usbtest 4-1:0.33: low-speed {control intr-in intr-out} tests (+alt)
[  326.229509][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.230099][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.238760][   T44] usb 4-1: USB disconnect, device number 23
[  326.256416][ T5895] gp8psk: usb in 137 operation failed.
[  326.256433][ T5895] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  326.256471][ T5895] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  326.287333][ T5895] usb 5-1: USB disconnect, device number 16
[  326.339821][ T5861] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  326.395444][ T5896] usb 1-1: USB disconnect, device number 16
[  326.499849][ T5861] usb 2-1: Using ep0 maxpacket: 32
[  326.501603][ T5861] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  326.501681][ T5861] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  326.503946][ T5861] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  326.503973][ T5861] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  326.503994][ T5861] usb 2-1: Product: syz
[  326.504004][ T5861] usb 2-1: Manufacturer: syz
[  326.504011][ T5861] usb 2-1: SerialNumber: syz
[  326.507407][ T5861] usb 2-1: config 0 descriptor??
[  326.710664][ T5895] usb 2-1: USB disconnect, device number 18
[  327.119974][ T5895] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  327.157012][ T5896] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  327.304092][ T8335] loop9: detected capacity change from 0 to 8
[  327.535159][ T5896] usb 4-1: Using ep0 maxpacket: 32
[  327.708194][ T5896] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  327.708271][ T5896] usb 4-1: config 0 has no interface number 0
[  327.968562][ T5896] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  327.968594][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.968615][ T5896] usb 4-1: Product: syz
[  327.968630][ T5896] usb 4-1: Manufacturer: syz
[  327.968645][ T5896] usb 4-1: SerialNumber: syz
[  327.979136][ T5896] usb 4-1: config 0 descriptor??
[  327.989699][ T5896] smsc95xx v2.0.0
[  328.057236][ T8335] Dev loop9: unable to read RDB block 8
[  328.057284][ T8335]  loop9: unable to read partition table
[  328.057493][ T8335] loop9: partition table beyond EOD, truncated
[  328.057512][ T8335] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  328.157445][ T8338] cgroup: noprefix used incorrectly
[  328.269794][ T5895] usb 5-1: Using ep0 maxpacket: 32
[  328.273505][ T5895] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  328.273526][ T5895] usb 5-1: config 0 has no interface number 0
[  328.282833][ T5895] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  328.282860][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.282880][ T5895] usb 5-1: Product: syz
[  328.282896][ T5895] usb 5-1: Manufacturer: syz
[  328.282910][ T5895] usb 5-1: SerialNumber: syz
[  328.334650][ T5895] usb 5-1: config 0 descriptor??
[  328.347289][ T5895] smsc95xx v2.0.0
[  328.420513][ T5896] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  328.420543][ T5896] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  328.827062][ T5895] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  328.827094][ T5895] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  328.919885][ T5881] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  329.070315][ T5881] usb 3-1: Using ep0 maxpacket: 32
[  329.077402][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  329.077432][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  329.077459][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  329.078026][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  329.078055][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  329.078081][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  329.087200][ T5881] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  329.087755][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.087776][ T5881] usb 3-1: Product: syz
[  329.087790][ T5881] usb 3-1: Manufacturer: syz
[  329.087804][ T5881] usb 3-1: SerialNumber: syz
[  329.127800][ T5881] usb 3-1: config 0 descriptor??
[  330.708822][ T5895] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  330.709115][ T5895] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  330.737542][ T5895] usb 5-1: USB disconnect, device number 17
[  330.769634][ T5896] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  330.770066][ T5896] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  330.807151][ T5896] usb 4-1: USB disconnect, device number 24
[  330.869232][   T44] usb 3-1: USB disconnect, device number 23
[  330.870005][ T1807] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  330.880338][ T8359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.713'.
[  330.999864][ T1807] usb 1-1: device descriptor read/64, error -71
[  331.249877][ T1807] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  331.389953][ T1807] usb 1-1: device descriptor read/64, error -71
[  331.521191][ T1807] usb usb1-port1: attempt power cycle
[  331.869865][ T1807] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  331.890640][ T1807] usb 1-1: device descriptor read/8, error -71
[  331.949319][ T8375] veth10: entered promiscuous mode
[  331.949344][ T8375] veth10: entered allmulticast mode
[  332.139944][ T1807] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  332.359856][ T1807] usb 1-1: device not accepting address 20, error -71
[  332.360122][ T1807] usb usb1-port1: unable to enumerate USB device
[  332.576401][ T5896] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  332.849888][ T5896] usb 3-1: Using ep0 maxpacket: 32
[  332.852930][ T5896] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  332.852956][ T5896] usb 3-1: config 0 has no interface number 0
[  332.857669][ T5896] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  332.857696][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.857718][ T5896] usb 3-1: Product: syz
[  332.857732][ T5896] usb 3-1: Manufacturer: syz
[  332.857747][ T5896] usb 3-1: SerialNumber: syz
[  333.111798][ T5896] usb 3-1: config 0 descriptor??
[  333.115773][ T5896] smsc95xx v2.0.0
[  333.507116][ T8399] 9pnet_virtio: no channels available for device 
[  333.671232][    C1] vkms_vblank_simulate: vblank timer overrun
[  333.696190][ T5896] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  333.696219][ T5896] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  333.791166][ T8401] 9pnet_virtio: no channels available for device 
[  334.638833][    C1] vkms_vblank_simulate: vblank timer overrun
[  335.151725][    C1] vkms_vblank_simulate: vblank timer overrun
[  335.204831][    C1] vkms_vblank_simulate: vblank timer overrun
[  335.600504][    C1] vkms_vblank_simulate: vblank timer overrun
[  337.059525][ T5896] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  337.080382][ T5896] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  337.088221][ T5896] usb 3-1: USB disconnect, device number 24
[  337.757091][ T8441] netlink: 100 bytes leftover after parsing attributes in process `syz.2.735'.
[  337.765619][ T8441] 9pnet_fd: Insufficient options for proto=fd
[  338.729244][ T8452] 9pnet_virtio: no channels available for device 
[  339.990366][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'.
[  339.990409][ T8461] /dev/nullb0: Can't open blockdev
[  340.039837][ T1807] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  340.199801][ T1807] usb 1-1: Using ep0 maxpacket: 32
[  340.202268][ T1807] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  340.202293][ T1807] usb 1-1: config 0 has no interface number 0
[  340.205522][ T1807] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  340.205549][ T1807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.205570][ T1807] usb 1-1: Product: syz
[  340.205584][ T1807] usb 1-1: Manufacturer: syz
[  340.205599][ T1807] usb 1-1: SerialNumber: syz
[  340.263283][ T1807] usb 1-1: config 0 descriptor??
[  340.269299][ T1807] smsc95xx v2.0.0
[  341.054843][ T8473] cgroup: noprefix used incorrectly
[  341.150369][ T1807] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  341.150389][ T1807] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  341.567373][ T5895] Process accounting resumed
[  341.586153][ T8483] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  341.607168][ T8486] overlay: ./file1 is not a directory
[  341.705473][ T8483] cramfs: wrong magic
[  341.751157][ T8488] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  341.755406][ T8488] cramfs: wrong magic
[  343.532130][ T1807] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  343.532313][ T1807] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  343.537112][ T1807] usb 1-1: USB disconnect, device number 21
[  343.816942][ T8510] sctp: [Deprecated]: syz.1.757 (pid 8510) Use of struct sctp_assoc_value in delayed_ack socket option.
[  343.816942][ T8510] Use struct sctp_sack_info instead
[  343.989832][   T10] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  343.992224][ T8517] cgroup: noprefix used incorrectly
[  344.016427][ T1807] Process accounting resumed
[  344.028212][ T8519] overlay: ./file1 is not a directory
[  344.187779][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  344.187840][   T10] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  344.187870][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  344.226628][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  344.226659][   T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  344.226681][   T10] usb 4-1: Product: syz
[  344.226696][   T10] usb 4-1: Manufacturer: syz
[  344.226711][   T10] usb 4-1: SerialNumber: syz
[  344.264922][   T10] usb 4-1: config 0 descriptor??
[  344.293120][ T8527] FAULT_INJECTION: forcing a failure.
[  344.293120][ T8527] name failslab, interval 1, probability 0, space 0, times 0
[  344.293152][ T8527] CPU: 1 UID: 0 PID: 8527 Comm: syz.2.762 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  344.293173][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  344.293185][ T8527] Call Trace:
[  344.293193][ T8527]  <TASK>
[  344.293203][ T8527]  dump_stack_lvl+0x189/0x250
[  344.293234][ T8527]  ? __pfx____ratelimit+0x10/0x10
[  344.293259][ T8527]  ? __pfx_dump_stack_lvl+0x10/0x10
[  344.293288][ T8527]  ? __pfx__printk+0x10/0x10
[  344.293317][ T8527]  ? __pfx___might_resched+0x10/0x10
[  344.293342][ T8527]  should_fail_ex+0x46c/0x600
[  344.293373][ T8527]  should_failslab+0xa8/0x100
[  344.293400][ T8527]  __kmalloc_noprof+0xcc/0x7d0
[  344.293423][ T8527]  ? kfree+0x51/0x950
[  344.293441][ T8527]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  344.293470][ T8527]  tomoyo_realpath_from_path+0xe3/0x5d0
[  344.293493][ T8527]  ? tomoyo_domain+0xda/0x130
[  344.293529][ T8527]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  344.293556][ T8527]  tomoyo_path_number_perm+0x1e8/0x5a0
[  344.293586][ T8527]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  344.293617][ T8527]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  344.293642][ T8527]  ? lockdep_hardirqs_on+0x9c/0x150
[  344.293698][ T8527]  ? __fget_files+0x2a/0x420
[  344.293728][ T8527]  ? __fget_files+0x3a6/0x420
[  344.293750][ T8527]  ? __fget_files+0x2a/0x420
[  344.293778][ T8527]  security_file_ioctl+0xcb/0x2d0
[  344.293800][ T8527]  __se_sys_ioctl+0x47/0x170
[  344.293824][ T8527]  do_syscall_64+0xfa/0xfa0
[  344.293846][ T8527]  ? lockdep_hardirqs_on+0x9c/0x150
[  344.293870][ T8527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.293889][ T8527]  ? clear_bhb_loop+0x60/0xb0
[  344.293912][ T8527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.293930][ T8527] RIP: 0033:0x7f7b77baf6c9
[  344.293947][ T8527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.293963][ T8527] RSP: 002b:00007f7b75e16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  344.293983][ T8527] RAX: ffffffffffffffda RBX: 00007f7b77e05fa0 RCX: 00007f7b77baf6c9
[  344.293997][ T8527] RDX: 0000200000000040 RSI: 0000000040086603 RDI: 0000000000000004
[  344.294010][ T8527] RBP: 00007f7b75e16090 R08: 0000000000000000 R09: 0000000000000000
[  344.294022][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.294034][ T8527] R13: 00007f7b77e06038 R14: 00007f7b77e05fa0 R15: 00007ffcc1a2f6f8
[  344.294068][ T8527]  </TASK>
[  344.294168][ T8527] ERROR: Out of memory at tomoyo_realpath_from_path.
[  344.518949][ T8534] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  344.519988][ T8534] cramfs: wrong magic
[  344.638427][   T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[  344.986464][ T8539] wg2 speed is unknown, defaulting to 1000
[  344.988598][ T8539] wg2 speed is unknown, defaulting to 1000
[  345.017830][ T8539] wg2 speed is unknown, defaulting to 1000
[  345.132144][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'.
[  345.573211][   T10] usb 4-1: USB disconnect, device number 25
[  345.807144][ T1807] wg2 speed is unknown, defaulting to 1000
[  345.814190][ T8539] infiniband syz0: set active
[  345.814208][ T8539] infiniband syz0: added wg2
[  345.818531][ T8539] syz0: rxe_create_cq: returned err = -12
[  345.818706][ T8539] infiniband syz0: Couldn't create ib_mad CQ
[  345.818893][ T8539] infiniband syz0: Couldn't open port 1
[  345.886924][ T8539] RDS/IB: syz0: added
[  345.888529][ T8539] smc: adding ib device syz0 with port count 1
[  345.888775][ T8539] smc:    ib device syz0 port 1 has no pnetid
[  345.907773][   T10] wg2 speed is unknown, defaulting to 1000
[  345.924903][ T8539] wg2 speed is unknown, defaulting to 1000
[  346.529918][ T8563] capability: warning: `syz.3.774' uses deprecated v2 capabilities in a way that may be insecure
[  346.566546][ T8539] wg2 speed is unknown, defaulting to 1000
[  346.903720][   T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  347.076185][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'.
[  347.231286][   T37] audit: type=1800 audit(1763057922.616:12): pid=8582 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.779" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  347.911204][   T10] usb 5-1: Using ep0 maxpacket: 32
[  347.913727][   T10] usb 5-1: config 0 has an invalid interface number: 194 but max is 0
[  347.913754][   T10] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  347.913773][   T10] usb 5-1: config 0 has no interface number 0
[  347.913836][   T10] usb 5-1: config 0 interface 194 altsetting 2 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  347.913865][   T10] usb 5-1: config 0 interface 194 altsetting 2 endpoint 0xB has invalid wMaxPacketSize 0
[  347.913888][   T10] usb 5-1: config 0 interface 194 altsetting 2 has a duplicate endpoint with address 0xB, skipping
[  347.913912][   T10] usb 5-1: config 0 interface 194 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  347.913933][   T10] usb 5-1: config 0 interface 194 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  347.913955][   T10] usb 5-1: config 0 interface 194 altsetting 2 has a duplicate endpoint with address 0xB, skipping
[  347.913978][   T10] usb 5-1: config 0 interface 194 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  347.914005][   T10] usb 5-1: config 0 interface 194 altsetting 2 has a duplicate endpoint with address 0x9, skipping
[  347.914027][   T10] usb 5-1: config 0 interface 194 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  347.914049][   T10] usb 5-1: config 0 interface 194 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  347.914072][   T10] usb 5-1: config 0 interface 194 has no altsetting 0
[  347.917178][   T10] usb 5-1: New USB device found, idVendor=15a4, idProduct=1001, bcdDevice=c8.d9
[  347.917204][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.917224][   T10] usb 5-1: Product: syz
[  347.917238][   T10] usb 5-1: Manufacturer: syz
[  347.917253][   T10] usb 5-1: SerialNumber: syz
[  348.093956][   T10] usb 5-1: config 0 descriptor??
[  348.098954][ T8570] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  348.099231][ T8570] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  348.135119][   T10] usb 5-1: USB disconnect, device number 18
[  348.383557][ T8539] wg2 speed is unknown, defaulting to 1000
[  349.001688][ T8597] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  349.001743][ T8597] overlayfs: missing 'lowerdir'
[  349.145995][ T8603] netlink: 'syz.0.789': attribute type 39 has an invalid length.
[  349.161671][ T8539] wg2 speed is unknown, defaulting to 1000
[  349.898991][ T8539] wg2 speed is unknown, defaulting to 1000
[  349.919819][ T1562] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[  350.069812][ T1562] usb 5-1: device descriptor read/64, error -71
[  350.089851][ T1807] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  350.245266][ T1807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.245300][ T1807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.245324][ T1807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  350.245368][ T1807] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  350.245392][ T1807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.257367][ T1807] usb 4-1: config 0 descriptor??
[  350.319948][ T1562] usb 5-1: new low-speed USB device number 20 using dummy_hcd
[  350.396633][ T8633] netlink: 'syz.2.801': attribute type 39 has an invalid length.
[  350.459903][ T1562] usb 5-1: device descriptor read/64, error -71
[  350.570353][ T1562] usb usb5-port1: attempt power cycle
[  350.675238][ T1807] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  350.675277][ T1807] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  350.675307][ T1807] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  350.675336][ T1807] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  350.675366][ T1807] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  350.675522][ T1807] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  350.675552][ T1807] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  350.675581][ T1807] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  350.675610][ T1807] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  350.675640][ T1807] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  350.785439][ T1807] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  350.933964][ T1562] usb 5-1: new low-speed USB device number 21 using dummy_hcd
[  350.990339][ T1562] usb 5-1: device descriptor read/8, error -71
[  351.071131][ T5861] usb 4-1: USB disconnect, device number 26
[  351.259864][ T1562] usb 5-1: new low-speed USB device number 22 using dummy_hcd
[  351.280523][ T1562] usb 5-1: device descriptor read/8, error -71
[  351.409086][ T1562] usb usb5-port1: unable to enumerate USB device
[  351.630630][ T1807] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  351.783377][ T1807] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  351.783410][ T1807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.788924][ T1807] usb 1-1: config 0 descriptor??
[  351.818083][ T1807] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  352.197297][ T8654] netlink: 'syz.3.809': attribute type 1 has an invalid length.
[  352.229932][ T1807] gp8psk: usb in 137 operation failed.
[  352.229950][ T1807] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  352.229998][ T1807] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  352.238102][ T1807] usb 1-1: USB disconnect, device number 22
[  352.456443][ T8666] FAULT_INJECTION: forcing a failure.
[  352.456443][ T8666] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  352.456529][ T8666] CPU: 1 UID: 0 PID: 8666 Comm: syz.2.812 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  352.456551][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  352.456563][ T8666] Call Trace:
[  352.456570][ T8666]  <TASK>
[  352.456579][ T8666]  dump_stack_lvl+0x189/0x250
[  352.456610][ T8666]  ? __pfx____ratelimit+0x10/0x10
[  352.456634][ T8666]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.456661][ T8666]  ? __pfx__printk+0x10/0x10
[  352.456706][ T8666]  should_fail_ex+0x46c/0x600
[  352.456736][ T8666]  _copy_to_user+0x31/0xb0
[  352.456760][ T8666]  simple_read_from_buffer+0xe1/0x170
[  352.456790][ T8666]  proc_fail_nth_read+0x1b6/0x220
[  352.456815][ T8666]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  352.456839][ T8666]  ? rw_verify_area+0x2ac/0x4e0
[  352.456860][ T8666]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  352.456882][ T8666]  vfs_read+0x206/0xa30
[  352.456914][ T8666]  ? __pfx_vfs_read+0x10/0x10
[  352.456932][ T8666]  ? try_to_take_rt_mutex+0x7fd/0xac0
[  352.456962][ T8666]  ? mutex_lock_nested+0x154/0x1d0
[  352.456982][ T8666]  ? fdget_pos+0x253/0x320
[  352.457016][ T8666]  ksys_read+0x14b/0x260
[  352.457041][ T8666]  ? __pfx_ksys_read+0x10/0x10
[  352.457068][ T8666]  ? do_syscall_64+0xbe/0xfa0
[  352.457096][ T8666]  do_syscall_64+0xfa/0xfa0
[  352.457118][ T8666]  ? lockdep_hardirqs_on+0x9c/0x150
[  352.457141][ T8666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.457160][ T8666]  ? clear_bhb_loop+0x60/0xb0
[  352.457182][ T8666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.457200][ T8666] RIP: 0033:0x7f7b77bae0dc
[  352.457216][ T8666] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  352.457232][ T8666] RSP: 002b:00007f7b75e16030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  352.457252][ T8666] RAX: ffffffffffffffda RBX: 00007f7b77e05fa0 RCX: 00007f7b77bae0dc
[  352.457266][ T8666] RDX: 000000000000000f RSI: 00007f7b75e160a0 RDI: 0000000000000004
[  352.457279][ T8666] RBP: 00007f7b75e16090 R08: 0000000000000000 R09: 0000000000000000
[  352.457290][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.457301][ T8666] R13: 00007f7b77e06038 R14: 00007f7b77e05fa0 R15: 00007ffcc1a2f6f8
[  352.457335][ T8666]  </TASK>
[  353.979030][ T1807] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  354.176338][ T1807] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  354.197990][ T1807] usb 2-1: New USB device found, idVendor=16ea, idProduct=1502, bcdDevice=a9.25
[  354.198048][ T1807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.198119][ T1807] usb 2-1: Product: syz
[  354.198167][ T1807] usb 2-1: Manufacturer: syz
[  354.198219][ T1807] usb 2-1: SerialNumber: syz
[  354.319101][ T1807] usb 2-1: config 0 descriptor??
[  354.798712][   T37] audit: type=1326 audit(1763057930.246:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8679 comm="syz.2.817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b77baf6c9 code=0x0
[  354.830591][   T37] audit: type=1326 audit(1763057930.286:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8679 comm="syz.2.817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b77baf6c9 code=0x0
[  354.940955][ T8685] 9pnet_virtio: no channels available for device 
[  355.615243][   T37] audit: type=1326 audit(1763057931.036:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8679 comm="syz.2.817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b77baf6c9 code=0x0
[  355.916662][ T8688] netlink: 'syz.4.816': attribute type 39 has an invalid length.
[  355.959915][ T1807] usb 2-1: USB disconnect, device number 19
[  356.524920][ T8710] 9pnet_fd: Insufficient options for proto=fd
[  356.559810][ T1807] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  356.606787][ T8715] FAULT_INJECTION: forcing a failure.
[  356.606787][ T8715] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  356.606818][ T8715] CPU: 0 UID: 0 PID: 8715 Comm: syz.3.829 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  356.606840][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  356.606851][ T8715] Call Trace:
[  356.606859][ T8715]  <TASK>
[  356.606867][ T8715]  dump_stack_lvl+0x189/0x250
[  356.606897][ T8715]  ? __pfx____ratelimit+0x10/0x10
[  356.606922][ T8715]  ? __pfx_dump_stack_lvl+0x10/0x10
[  356.606948][ T8715]  ? __pfx__printk+0x10/0x10
[  356.606986][ T8715]  should_fail_ex+0x46c/0x600
[  356.607016][ T8715]  _copy_to_user+0x31/0xb0
[  356.607040][ T8715]  simple_read_from_buffer+0xe1/0x170
[  356.607069][ T8715]  proc_fail_nth_read+0x1b6/0x220
[  356.607093][ T8715]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  356.607117][ T8715]  ? rw_verify_area+0x2ac/0x4e0
[  356.607138][ T8715]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  356.607159][ T8715]  vfs_read+0x206/0xa30
[  356.607190][ T8715]  ? __pfx_vfs_read+0x10/0x10
[  356.607209][ T8715]  ? try_to_take_rt_mutex+0x7fd/0xac0
[  356.607240][ T8715]  ? mutex_lock_nested+0x154/0x1d0
[  356.607259][ T8715]  ? fdget_pos+0x253/0x320
[  356.607293][ T8715]  ksys_read+0x14b/0x260
[  356.607320][ T8715]  ? __pfx_filldir64+0x10/0x10
[  356.607344][ T8715]  ? __pfx_ksys_read+0x10/0x10
[  356.607370][ T8715]  ? do_syscall_64+0xbe/0xfa0
[  356.607399][ T8715]  do_syscall_64+0xfa/0xfa0
[  356.607421][ T8715]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.607446][ T8715]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.607464][ T8715]  ? clear_bhb_loop+0x60/0xb0
[  356.607488][ T8715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.607506][ T8715] RIP: 0033:0x7fdb4a61e0dc
[  356.607523][ T8715] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  356.607538][ T8715] RSP: 002b:00007fdb4887e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  356.607558][ T8715] RAX: ffffffffffffffda RBX: 00007fdb4a875fa0 RCX: 00007fdb4a61e0dc
[  356.607572][ T8715] RDX: 000000000000000f RSI: 00007fdb4887e0a0 RDI: 0000000000000003
[  356.607584][ T8715] RBP: 00007fdb4887e090 R08: 0000000000000000 R09: 0000000000000000
[  356.607596][ T8715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  356.607607][ T8715] R13: 00007fdb4a876038 R14: 00007fdb4a875fa0 R15: 00007ffd17106a98
[  356.607640][ T8715]  </TASK>
[  356.720186][ T1807] usb 1-1: Using ep0 maxpacket: 32
[  356.742140][ T1807] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  356.742156][ T1807] usb 1-1: config 0 has no interface number 0
[  356.759999][ T1807] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  356.760016][ T1807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.760027][ T1807] usb 1-1: Product: syz
[  356.760035][ T1807] usb 1-1: Manufacturer: syz
[  356.760043][ T1807] usb 1-1: SerialNumber: syz
[  356.864374][ T1807] usb 1-1: config 0 descriptor??
[  356.921942][ T1807] smsc95xx v2.0.0
[  357.018947][ T8714] netlink: 'syz.4.830': attribute type 2 has an invalid length.
[  357.206094][ T8723] tipc: Started in network mode
[  357.206127][ T8723] tipc: Node identity 2d00000000000000faffffffffffffff, cluster identity 4711
[  357.293719][ T1807] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  357.293748][ T1807] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  357.297710][ T8727] netlink: 148 bytes leftover after parsing attributes in process `syz.4.833'.
[  357.679157][ T8730] 9pnet_virtio: no channels available for device 
[  360.103147][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'.
[  360.213219][ T8743] binder: 8742:8743 ioctl c0306201 200000000640 returned -22
[  360.266190][ T8748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.836'.
[  360.266754][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'.
[  360.583490][ T1807] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  360.583794][ T1807] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  360.629914][ T1807] usb 1-1: USB disconnect, device number 23
[  360.679353][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.843'.
[  360.724468][ T8765] netlink: 'syz.3.844': attribute type 1 has an invalid length.
[  361.212250][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'.
[  361.462108][ T8777] loop9: detected capacity change from 0 to 8
[  361.464433][ T8777] Dev loop9: unable to read RDB block 8
[  361.464477][ T8777]  loop9: unable to read partition table
[  361.464702][ T8777] loop9: partition table beyond EOD, truncated
[  361.464720][ T8777] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  361.832290][ T5895] Process accounting resumed
[  361.844973][ T8784] overlay: ./file1 is not a directory
[  362.139812][ T5861] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  362.291025][ T5861] usb 4-1: Using ep0 maxpacket: 32
[  362.294494][ T5861] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  362.294523][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.302291][ T5861] usb 4-1: config 0 descriptor??
[  362.318395][ T5861] gspca_main: sunplus-2.14.0 probing 041e:400b
[  362.447925][ T8801] 9pnet_virtio: no channels available for device 
[  362.531627][    C1] vkms_vblank_simulate: vblank timer overrun
[  362.991888][    C1] vkms_vblank_simulate: vblank timer overrun
[  363.244933][    C1] vkms_vblank_simulate: vblank timer overrun
[  363.427086][    C1] vkms_vblank_simulate: vblank timer overrun
[  363.530136][ T5861] gspca_sunplus: reg_r err -110
[  363.530246][ T5861] sunplus 4-1:0.0: probe with driver sunplus failed with error -110
[  363.552733][ T5881] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  363.697709][    C1] vkms_vblank_simulate: vblank timer overrun
[  363.720171][ T5881] usb 1-1: Using ep0 maxpacket: 32
[  363.809013][ T5881] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  363.809092][ T5881] usb 1-1: config 0 has no interface number 0
[  364.159625][ T5881] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  364.159657][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.159678][ T5881] usb 1-1: Product: syz
[  364.181459][ T5881] usb 1-1: Manufacturer: syz
[  364.181478][ T5881] usb 1-1: SerialNumber: syz
[  364.187464][ T5881] usb 1-1: config 0 descriptor??
[  364.206504][ T5881] smsc95xx v2.0.0
[  364.516392][ T5896] usb 4-1: USB disconnect, device number 27
[  364.608242][ T5881] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  364.608271][ T5881] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  364.627228][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'.
[  365.069909][ T1562] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  365.240473][ T1562] usb 3-1: Using ep0 maxpacket: 32
[  365.279791][ T1562] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  365.279820][ T1562] usb 3-1: config 0 has no interface number 0
[  365.330621][ T1562] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  365.330650][ T1562] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.330671][ T1562] usb 3-1: Product: syz
[  365.330686][ T1562] usb 3-1: Manufacturer: syz
[  365.330700][ T1562] usb 3-1: SerialNumber: syz
[  365.342403][ T1562] usb 3-1: config 0 descriptor??
[  365.374693][ T1562] smsc95xx v2.0.0
[  365.802498][ T1562] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  365.802529][ T1562] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  366.031629][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.874'.
[  367.518032][ T8862] 9pnet_virtio: no channels available for device 
[  368.559323][ T5881] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  368.559572][ T5881] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  368.612694][ T5881] usb 1-1: USB disconnect, device number 24
[  370.375618][ T1562] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  370.375909][ T1562] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  370.390227][ T1562] usb 3-1: USB disconnect, device number 25
[  370.681380][   T37] audit: type=1326 audit(1763057946.136:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.1.887" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91535cf6c9 code=0x0
[  371.768071][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'.
[  371.875464][ T8895] [†’Ì: entered promiscuous mode
[  372.003681][ T8900] binder: 8892:8900 ioctl 4004556b 25 returned -22
[  373.804782][ T8922] 9pnet_virtio: no channels available for device 
[  373.869781][ T1562] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  374.403504][ T1562] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  374.403533][ T1562] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  374.403560][ T1562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  374.403583][ T1562] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  374.407667][ T1562] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  374.407695][ T1562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.407717][ T1562] usb 1-1: Product: syz
[  374.407732][ T1562] usb 1-1: Manufacturer: syz
[  374.407748][ T1562] usb 1-1: SerialNumber: syz
[  374.509346][ T1562] usb 1-1: config 0 descriptor??
[  374.737221][ T8906] netlink: 'syz.0.891': attribute type 10 has an invalid length.
[  374.738439][ T8906] bond0: (slave wlan1): Opening slave failed
[  375.537476][ T8941] loop9: detected capacity change from 0 to 8
[  375.555232][ T8941] Dev loop9: unable to read RDB block 8
[  375.555584][ T8941]  loop9: unable to read partition table
[  375.558142][ T8941] loop9: partition table beyond EOD, truncated
[  375.558209][ T8941] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  377.527073][ T8938] 9pnet: Found fid 0 not clunked
[  378.389824][ T5881] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  378.478805][ T8957] capability: warning: `syz.1.904' uses 32-bit capabilities (legacy support in use)
[  378.537267][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  378.537337][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  378.560880][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.560930][ T5881] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  378.560954][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.610056][ T5881] usb 5-1: config 0 descriptor??
[  378.729928][ T5861] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  378.906468][ T5861] usb 3-1: Using ep0 maxpacket: 32
[  378.908746][ T5861] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  378.908765][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  378.908778][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  378.908827][ T5861] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  378.908841][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  378.908854][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  379.019219][ T8967] 9pnet_virtio: no channels available for device 
[  379.794088][ T5861] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  379.794117][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.794137][ T5861] usb 3-1: Product: syz
[  379.794151][ T5861] usb 3-1: Manufacturer: syz
[  379.794165][ T5861] usb 3-1: SerialNumber: syz
[  379.803698][ T5881] kye 0003:0458:501A.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  379.831701][ T5861] usb 3-1: config 0 descriptor??
[  379.834850][ T5881] kye 0003:0458:501A.0003: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0
[  379.834881][ T5881] kye 0003:0458:501A.0003: tablet-enabling feature report not found
[  379.834896][ T5881] kye 0003:0458:501A.0003: tablet enabling failed
[  379.869877][ T5895] usb 1-1: USB disconnect, device number 25
[  380.249529][ T5861] usb 5-1: USB disconnect, device number 23
[  380.263164][ T8956] netlink: 'syz.2.903': attribute type 10 has an invalid length.
[  380.700244][ T8980] 9pnet_virtio: no channels available for device 
[  381.067629][ T8984] FAULT_INJECTION: forcing a failure.
[  381.067629][ T8984] name failslab, interval 1, probability 0, space 0, times 0
[  381.067651][ T8984] CPU: 0 UID: 0 PID: 8984 Comm: syz.0.911 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  381.067664][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  381.067670][ T8984] Call Trace:
[  381.067675][ T8984]  <TASK>
[  381.067679][ T8984]  dump_stack_lvl+0x189/0x250
[  381.067700][ T8984]  ? __pfx____ratelimit+0x10/0x10
[  381.067714][ T8984]  ? __pfx_dump_stack_lvl+0x10/0x10
[  381.067730][ T8984]  ? __pfx__printk+0x10/0x10
[  381.067745][ T8984]  ? __pfx___might_resched+0x10/0x10
[  381.067759][ T8984]  should_fail_ex+0x46c/0x600
[  381.067777][ T8984]  should_failslab+0xa8/0x100
[  381.067794][ T8984]  __kmalloc_noprof+0xcc/0x7d0
[  381.067807][ T8984]  ? kfree+0x51/0x950
[  381.067818][ T8984]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  381.067834][ T8984]  tomoyo_realpath_from_path+0xe3/0x5d0
[  381.067847][ T8984]  ? tomoyo_domain+0xda/0x130
[  381.067863][ T8984]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  381.067879][ T8984]  tomoyo_path_number_perm+0x1e8/0x5a0
[  381.067897][ T8984]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  381.067915][ T8984]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  381.067931][ T8984]  ? lockdep_hardirqs_on+0x9c/0x150
[  381.067963][ T8984]  ? __fget_files+0x2a/0x420
[  381.067981][ T8984]  ? __fget_files+0x3a6/0x420
[  381.067994][ T8984]  ? __fget_files+0x2a/0x420
[  381.068010][ T8984]  security_file_ioctl+0xcb/0x2d0
[  381.068023][ T8984]  __se_sys_ioctl+0x47/0x170
[  381.068036][ T8984]  do_syscall_64+0xfa/0xfa0
[  381.068050][ T8984]  ? lockdep_hardirqs_on+0x9c/0x150
[  381.068064][ T8984]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.068074][ T8984]  ? clear_bhb_loop+0x60/0xb0
[  381.068086][ T8984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.068100][ T8984] RIP: 0033:0x7ff10595f6c9
[  381.068110][ T8984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  381.068118][ T8984] RSP: 002b:00007ff103bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  381.068130][ T8984] RAX: ffffffffffffffda RBX: 00007ff105bb5fa0 RCX: 00007ff10595f6c9
[  381.068138][ T8984] RDX: 0000200000000040 RSI: 0000000080044d05 RDI: 0000000000000003
[  381.068145][ T8984] RBP: 00007ff103bc6090 R08: 0000000000000000 R09: 0000000000000000
[  381.068151][ T8984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  381.068157][ T8984] R13: 00007ff105bb6038 R14: 00007ff105bb5fa0 R15: 00007ffd2b5e4b78
[  381.068174][ T8984]  </TASK>
[  381.068253][ T8984] ERROR: Out of memory at tomoyo_realpath_from_path.
[  381.466560][    C1] vkms_vblank_simulate: vblank timer overrun
[  381.557537][    C1] vkms_vblank_simulate: vblank timer overrun
[  381.642649][ T5894] usb 3-1: USB disconnect, device number 26
[  381.659940][ T1562] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  381.901594][ T1562] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1
[  381.901625][ T1562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.905094][ T1562] usb 1-1: config 0 descriptor??
[  381.932859][ T1562] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  381.934126][ T1562] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  382.080925][ T5861] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  382.210935][ T1807] usb 1-1: USB disconnect, device number 26
[  382.237155][ T9003] FAULT_INJECTION: forcing a failure.
[  382.237155][ T9003] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  382.237188][ T9003] CPU: 1 UID: 0 PID: 9003 Comm: syz.4.918 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  382.237209][ T9003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  382.237221][ T9003] Call Trace:
[  382.237229][ T9003]  <TASK>
[  382.237237][ T9003]  dump_stack_lvl+0x189/0x250
[  382.237267][ T9003]  ? __pfx____ratelimit+0x10/0x10
[  382.237291][ T9003]  ? __pfx_dump_stack_lvl+0x10/0x10
[  382.237317][ T9003]  ? __pfx__printk+0x10/0x10
[  382.237340][ T9003]  ? __might_fault+0xb0/0x130
[  382.237376][ T9003]  should_fail_ex+0x46c/0x600
[  382.237407][ T9003]  _copy_from_user+0x2d/0xb0
[  382.237429][ T9003]  __sys_sendto+0x262/0x520
[  382.237453][ T9003]  ? __pfx___sys_sendto+0x10/0x10
[  382.237501][ T9003]  ? ksys_write+0x230/0x260
[  382.237526][ T9003]  ? __pfx_ksys_write+0x10/0x10
[  382.237552][ T9003]  __x64_sys_sendto+0xde/0x100
[  382.237576][ T9003]  do_syscall_64+0xfa/0xfa0
[  382.237599][ T9003]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.237622][ T9003]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.237641][ T9003]  ? clear_bhb_loop+0x60/0xb0
[  382.237663][ T9003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.237680][ T9003] RIP: 0033:0x7f2dad7ff6c9
[  382.237696][ T9003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.237712][ T9003] RSP: 002b:00007f2daba66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  382.237731][ T9003] RAX: ffffffffffffffda RBX: 00007f2dada55fa0 RCX: 00007f2dad7ff6c9
[  382.237745][ T9003] RDX: 000000000000ffeb RSI: 0000200000000040 RDI: 0000000000000003
[  382.237758][ T9003] RBP: 00007f2daba66090 R08: 0000200000000340 R09: 0000000000000010
[  382.237770][ T9003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.237781][ T9003] R13: 00007f2dada56038 R14: 00007f2dada55fa0 R15: 00007ffd6cfdf078
[  382.237814][ T9003]  </TASK>
[  382.251612][ T5861] usb 4-1: Using ep0 maxpacket: 8
[  382.255545][ T5861] usb 4-1: unable to get BOS descriptor or descriptor too short
[  382.261804][ T5861] usb 4-1: config 4 has an invalid interface number: 30 but max is 0
[  382.261828][ T5861] usb 4-1: config 4 has no interface number 0
[  382.261860][ T5861] usb 4-1: config 4 interface 30 has no altsetting 0
[  382.266652][ T5861] usb 4-1: string descriptor 0 read error: -22
[  382.266795][ T5861] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  382.266818][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.299061][ T5861] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  382.299116][ T5861] dw2102: su3000_power_ctrl: 1, initialized 0
[  382.303989][ T5861] dvb-usb: bulk message failed: -22 (2/0)
[  382.338620][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  382.343213][ T5861] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  382.343302][ T5861] usb 4-1: media controller created
[  382.347862][ T5861] dvb-usb: bulk message failed: -22 (6/0)
[  382.347880][ T5861] dw2102: i2c transfer failed.
[  382.347910][ T5861] dvb-usb: bulk message failed: -22 (6/0)
[  382.347924][ T5861] dw2102: i2c transfer failed.
[  382.347940][ T5861] dvb-usb: bulk message failed: -22 (6/0)
[  382.347953][ T5861] dw2102: i2c transfer failed.
[  382.347969][ T5861] dvb-usb: bulk message failed: -22 (6/0)
[  382.347982][ T5861] dw2102: i2c transfer failed.
[  382.347999][ T5861] dvb-usb: bulk message failed: -22 (6/0)
[  382.348012][ T5861] dw2102: i2c transfer failed.
[  382.348028][ T5861] dvb-usb: bulk message failed: -22 (6/0)
[  382.348042][ T5861] dw2102: i2c transfer failed.
[  382.349056][ T5861] dvb-usb: MAC address: 02:02:02:02:02:02
[  382.466323][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  382.521632][ T5861] dvb-usb: bulk message failed: -22 (3/0)
[  382.521652][ T5861] dw2102: command 0x0e transfer failed.
[  382.521663][ T5861] dvb-usb: bulk message failed: -22 (3/0)
[  382.521676][ T5861] dw2102: command 0x0e transfer failed.
[  382.527345][ T9008] netlink: 100 bytes leftover after parsing attributes in process `syz.2.919'.
[  382.548994][ T9008] 9pnet_fd: Insufficient options for proto=fd
[  382.700779][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.922'.
[  382.702335][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.922'.
[  382.829865][ T5861] dvb-usb: bulk message failed: -22 (3/0)
[  382.829888][ T5861] dw2102: command 0x0e transfer failed.
[  382.829898][ T5861] dvb-usb: bulk message failed: -22 (3/0)
[  382.829913][ T5861] dw2102: command 0x0e transfer failed.
[  382.829922][ T5861] dvb-usb: bulk message failed: -22 (1/0)
[  382.829936][ T5861] dw2102: command 0x51 transfer failed.
[  382.829945][ T5861] dvb-usb: bulk message failed: -22 (5/0)
[  382.829959][ T5861] dw2102: i2c probe for address 0x68 failed.
[  382.829970][ T5861] dvb-usb: bulk message failed: -22 (5/0)
[  382.829985][ T5861] dw2102: i2c probe for address 0x69 failed.
[  382.829996][ T5861] dvb-usb: bulk message failed: -22 (5/0)
[  382.830020][ T5861] dw2102: i2c probe for address 0x6a failed.
[  382.830041][ T5861] dw2102: probing for demodulator failed. Is the external power switched on?
[  382.830051][ T5861] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  382.839882][ T1807] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  382.946164][    C1] vkms_vblank_simulate: vblank timer overrun
[  382.946276][ T5861] rc_core: IR keymap rc-tt-1500 not found
[  382.946293][ T5861] Registered IR keymap rc-empty
[  382.953376][ T5861] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  382.956392][ T5861] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6
[  383.240218][ T9022] 9pnet_virtio: no channels available for device 
[  383.358064][    C1] vkms_vblank_simulate: vblank timer overrun
[  383.646287][    C1] vkms_vblank_simulate: vblank timer overrun
[  383.793942][ T5861] dvb-usb: schedule remote query interval to 250 msecs.
[  383.794157][ T5861] dw2102: su3000_power_ctrl: 0, initialized 1
[  383.794254][ T5861] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  383.820125][ T1807] usb 5-1: Using ep0 maxpacket: 32
[  383.897292][ T1807] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  383.897557][ T1807] usb 5-1: config 0 has no interface number 0
[  383.925269][ T5861] usb 4-1: USB disconnect, device number 28
[  383.929041][ T1807] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  383.929069][ T1807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.929090][ T1807] usb 5-1: Product: syz
[  383.929105][ T1807] usb 5-1: Manufacturer: syz
[  383.929120][ T1807] usb 5-1: SerialNumber: syz
[  383.993068][ T1807] usb 5-1: config 0 descriptor??
[  383.998308][ T1807] smsc95xx v2.0.0
[  384.243986][    C1] vkms_vblank_simulate: vblank timer overrun
[  384.363203][ T9034] 9pnet_virtio: no channels available for device 
[  384.996266][    C1] vkms_vblank_simulate: vblank timer overrun
[  384.999948][ T1807] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  384.999977][ T1807] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  385.088750][ T5861] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  385.382749][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'.
[  386.958556][ T9063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.936'.
[  387.021154][ T1807] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  387.021452][ T1807] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  387.027631][ T1807] usb 5-1: USB disconnect, device number 24
[  387.259863][ T1562] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  387.413424][ T1562] usb 3-1: config index 0 descriptor too short (expected 126, got 72)
[  387.416106][ T1562] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  387.416135][ T1562] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.416155][ T1562] usb 3-1: Product: syz
[  387.416170][ T1562] usb 3-1: Manufacturer: syz
[  387.416181][ T1562] usb 3-1: SerialNumber: syz
[  387.444147][ T1562] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  387.509857][    T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  387.550245][ T5894] usb 1-1: new low-speed USB device number 27 using dummy_hcd
[  387.727774][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  387.727874][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  387.728099][ T5894] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  387.728144][ T5894] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  387.728611][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.759304][ T5894] hub 1-1:1.0: bad descriptor, ignoring hub
[  387.759412][ T5894] hub 1-1:1.0: probe with driver hub failed with error -5
[  387.765255][ T5894] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  388.088515][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.944'.
[  388.094557][ T5894] usb 1-1: USB disconnect, device number 27
[  388.309848][ T1807] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  388.345152][ T9088] loop2: detected capacity change from 0 to 7
[  388.359967][ T9088] Dev loop2: unable to read RDB block 7
[  388.360013][ T9088]  loop2: unable to read partition table
[  388.360240][ T9088] loop2: partition table beyond EOD, truncated
[  388.360258][ T9088] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  388.430861][    C0] vkms_vblank_simulate: vblank timer overrun
[  388.470526][ T1807] usb 4-1: Using ep0 maxpacket: 32
[  388.477053][ T1807] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  388.477078][ T1807] usb 4-1: config 0 has no interface number 0
[  388.508040][ T1807] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  388.508068][ T1807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.508088][ T1807] usb 4-1: Product: syz
[  388.508102][ T1807] usb 4-1: Manufacturer: syz
[  388.508117][ T1807] usb 4-1: SerialNumber: syz
[  388.544159][ T1807] usb 4-1: config 0 descriptor??
[  388.548837][ T1807] smsc95xx v2.0.0
[  388.577201][ T5896] usb 3-1: USB disconnect, device number 27
[  388.611101][    T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  388.611528][    T9] ath9k_htc: Failed to initialize the device
[  388.616145][ T5896] usb 3-1: ath9k_htc: USB layer deinitialized
[  388.629848][ T5861] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  389.977148][ T5861] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  389.977180][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.977201][ T5861] usb 5-1: Product: syz
[  389.977215][ T5861] usb 5-1: Manufacturer: syz
[  389.977230][ T5861] usb 5-1: SerialNumber: syz
[  390.444265][    C0] vkms_vblank_simulate: vblank timer overrun
[  390.496592][ T1807] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  390.496623][ T1807] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  390.540277][ T5894] Process accounting resumed
[  390.546851][ T5861] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  390.546914][ T5861] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  390.579018][ T9097] overlay: ./file1 is not a directory
[  390.870765][ T9107] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0)
[  391.170765][ T5861] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  391.170837][ T5861] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  391.211283][ T5861] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  391.297216][    C0] vkms_vblank_simulate: vblank timer overrun
[  391.425404][    C0] vkms_vblank_simulate: vblank timer overrun
[  391.429820][    T9] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  391.477000][ T5861] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  391.511322][ T5861] usb 5-1: USB disconnect, device number 25
[  391.600998][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  391.601810][    T9] usb 1-1: not running at top speed; connect to a high speed hub
[  391.603728][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  391.603809][    T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  391.603853][    T9] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  392.255590][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  392.255620][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.255641][    T9] usb 1-1: Product: syz
[  392.255655][    T9] usb 1-1: Manufacturer: syz
[  392.255670][    T9] usb 1-1: SerialNumber: syz
[  392.308573][ T9089] syz.4.946 (9089) used greatest stack depth: 17624 bytes left
[  392.782544][ T1807] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  392.783615][ T1807] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  392.817579][ T1807] usb 4-1: USB disconnect, device number 29
[  393.218205][ T9136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.962'.
[  393.233644][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'.
[  393.381917][    T9] usb 1-1: USB disconnect, device number 28
[  393.872184][ T9154] tmpfs: Bad value for 'mpol'
[  393.969915][ T5861] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  394.239849][ T5894] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  394.283218][ T9163] cgroup: noprefix used incorrectly
[  394.340253][ T5861] usb 4-1: Using ep0 maxpacket: 32
[  394.525292][ T9167] loop9: detected capacity change from 0 to 8
[  395.029840][ T5861] usb 4-1: config 4 has an invalid interface number: 128 but max is 0
[  395.029870][ T5861] usb 4-1: config 4 has no interface number 0
[  395.029920][ T5861] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.029948][ T5861] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  395.029989][ T5861] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  395.030014][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.095299][ T9167] Dev loop9: unable to read RDB block 8
[  395.095354][ T9167]  loop9: unable to read partition table
[  395.095588][ T9167] loop9: partition table beyond EOD, truncated
[  395.095605][ T9167] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  395.129860][ T5861] hub 4-1:4.128: USB hub found
[  395.251629][ T5861] hub 4-1:4.128: 7 ports detected
[  395.251689][ T5861] hub 4-1:4.128: Using single TT (err -22)
[  395.252166][ T5861] hub 4-1:4.128: insufficient power available to use all downstream ports
[  395.409729][ T5894] usb 3-1: Using ep0 maxpacket: 32
[  395.414202][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -61
[  395.414237][ T5894] usb 3-1: can't read configurations, error -61
[  395.459566][   T37] audit: type=1326 audit(1763057970.906:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9144 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4a61f6c9 code=0x7ffc0000
[  395.489991][   T37] audit: type=1326 audit(1763057970.936:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9144 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4a61f6c9 code=0x7ffc0000
[  395.490040][   T37] audit: type=1326 audit(1763057970.936:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9144 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb4a61df10 code=0x7ffc0000
[  395.490083][   T37] audit: type=1326 audit(1763057970.936:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9144 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb4a61f2cb code=0x7ffc0000
[  395.490124][   T37] audit: type=1326 audit(1763057970.936:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9144 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb4a61f2cb code=0x7ffc0000
[  395.502816][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.503672][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  395.503903][   T37] audit: type=1326 audit(1763057970.956:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9144 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4a61f6c9 code=0x7ffc0000
[  395.505994][   T37] audit: type=1326 audit(1763057970.956:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9144 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb4a61f2cb code=0x7ffc0000
[  395.511153][   T37] audit: type=1326 audit(1763057970.956:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9144 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4a61f6c9 code=0x7ffc0000
[  395.539795][ T5894] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  395.553240][   T37] audit: type=1326 audit(1763057970.976:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9144 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4a61f6c9 code=0x7ffc0000
[  395.553288][   T37] audit: type=1326 audit(1763057971.006:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9144 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb4a61f6c9 code=0x7ffc0000
[  395.564643][ T9175] netlink: 100 bytes leftover after parsing attributes in process `syz.4.975'.
[  395.592298][ T9175] 9pnet_fd: Insufficient options for proto=fd
[  395.690914][ T5894] usb 3-1: Using ep0 maxpacket: 32
[  395.695733][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -61
[  395.695848][ T5894] usb 3-1: can't read configurations, error -61
[  395.696233][ T5894] usb usb3-port1: attempt power cycle
[  395.977793][ T5861] hub 4-1:4.128: hub_hub_status failed (err = -71)
[  395.977821][ T5861] hub 4-1:4.128: config failed, can't get hub status (err -71)
[  396.010617][ T5861] usb 4-1: USB disconnect, device number 30
[  396.029878][ T5894] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  396.057342][ T5894] usb 3-1: Using ep0 maxpacket: 32
[  396.077971][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -61
[  396.078007][ T5894] usb 3-1: can't read configurations, error -61
[  396.180466][ T5896] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  396.199783][ T5894] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  396.220715][ T5894] usb 3-1: Using ep0 maxpacket: 32
[  396.224143][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -61
[  396.224178][ T5894] usb 3-1: can't read configurations, error -61
[  396.224572][ T5894] usb usb3-port1: unable to enumerate USB device
[  396.349802][ T5896] usb 2-1: Using ep0 maxpacket: 8
[  396.374876][ T5896] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  396.374903][ T5896] usb 2-1: config 0 has no interface number 0
[  396.378751][ T5896] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  396.378778][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.378799][ T5896] usb 2-1: Product: syz
[  396.378813][ T5896] usb 2-1: Manufacturer: syz
[  396.378827][ T5896] usb 2-1: SerialNumber: syz
[  396.550808][ T9144] ------------[ cut here ]------------
[  396.550829][ T9144] WARNING: CPU: 0 PID: 9144 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150
[  396.550873][ T9144] Modules linked in:
[  396.550896][ T9144] CPU: 0 UID: 0 PID: 9144 Comm: syz.3.966 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  396.550922][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  396.550936][ T9144] RIP: 0010:kcov_task_exit+0x13c/0x150
[  396.550982][ T9144] Code: c7 c7 90 3e c5 8e 48 c7 c6 7b 22 da 8c 48 c7 c2 5a f8 d8 8c 4c 89 f9 e8 a2 3d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 c4 0e 04 09 0f 1f 40 00 90 90
[  396.551001][ T9144] RSP: 0018:ffffc9001cdb7d00 EFLAGS: 00010206
[  396.551020][ T9144] RAX: 9e1fd78a94bbca00 RBX: ffff88814da9ee00 RCX: 0000000000000000
[  396.551036][ T9144] RDX: 0000000000000000 RSI: ffffffff8b3ddd40 RDI: 00000000ffffffff
[  396.551052][ T9144] RBP: ffffc9001cdb7e68 R08: 0000000000000000 R09: ffffffff8ac2bb41
[  396.551067][ T9144] R10: dffffc0000000000 R11: fffffbfff1dac76f R12: 1ffff11006112a6d
[  396.551084][ T9144] R13: 0000000000000000 R14: ffff88814da9ee08 R15: ffff88803086da00
[  396.551100][ T9144] FS:  00005555661f7500(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000
[  396.551119][ T9144] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  396.551134][ T9144] CR2: 00007ff1059bc470 CR3: 0000000037696000 CR4: 00000000003526f0
[  396.551153][ T9144] Call Trace:
[  396.551161][ T9144]  <TASK>
[  396.551173][ T9144]  do_exit+0x105/0x2300
[  396.551203][ T9144]  ? preempt_schedule_thunk+0x16/0x30
[  396.551239][ T9144]  ? rt_mutex_slowunlock+0x668/0x8a0
[  396.551269][ T9144]  ? __pfx_do_exit+0x10/0x10
[  396.551300][ T9144]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  396.551329][ T9144]  ? __rcu_read_unlock+0x84/0xe0
[  396.551358][ T9144]  ? rt_spin_unlock+0x161/0x200
[  396.551387][ T9144]  do_group_exit+0x21c/0x2d0
[  396.551413][ T9144]  __x64_sys_exit_group+0x3f/0x40
[  396.551433][ T9144]  x64_sys_call+0x21f7/0x2200
[  396.551455][ T9144]  do_syscall_64+0xfa/0xfa0
[  396.551483][ T9144]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.551512][ T9144]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.551533][ T9144]  ? clear_bhb_loop+0x60/0xb0
[  396.551560][ T9144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.551581][ T9144] RIP: 0033:0x7fdb4a61f6c9
[  396.551600][ T9144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  396.551618][ T9144] RSP: 002b:00007ffd17106df8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  396.551640][ T9144] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdb4a61f6c9
[  396.551655][ T9144] RDX: 00007fdb49881000 RSI: 0000000000000000 RDI: 0000000000000000
[  396.551669][ T9144] RBP: 00007ffd17106e5c R08: 0000000000028224 R09: 00000000000927c0
[  396.551684][ T9144] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000b8
[  396.551698][ T9144] R13: 00000000000927c0 R14: 000000000005ff81 R15: 00007ffd17106eb0
[  396.551741][ T9144]  </TASK>
[  396.551752][ T9144] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  396.551767][ T9144] CPU: 0 UID: 0 PID: 9144 Comm: syz.3.966 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  396.551791][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  396.551804][ T9144] Call Trace:
[  396.551812][ T9144]  <TASK>
[  396.551821][ T9144]  dump_stack_lvl+0x99/0x250
[  396.551853][ T9144]  ? __asan_memcpy+0x40/0x70
[  396.551878][ T9144]  ? __pfx_dump_stack_lvl+0x10/0x10
[  396.551910][ T9144]  ? __pfx__printk+0x10/0x10
[  396.551952][ T9144]  vpanic+0x237/0x6d0
[  396.551973][ T9144]  ? __pfx_vpanic+0x10/0x10
[  396.552006][ T9144]  panic+0xb9/0xc0
[  396.552026][ T9144]  ? __pfx_panic+0x10/0x10
[  396.552063][ T9144]  __warn+0x31b/0x4b0
[  396.552082][ T9144]  ? kcov_task_exit+0x13c/0x150
[  396.552113][ T9144]  ? kcov_task_exit+0x13c/0x150
[  396.552141][ T9144]  report_bug+0x2be/0x4f0
[  396.552168][ T9144]  ? kcov_task_exit+0x13c/0x150
[  396.552197][ T9144]  ? kcov_task_exit+0x13c/0x150
[  396.552225][ T9144]  ? kcov_task_exit+0x13e/0x150
[  396.552252][ T9144]  handle_bug+0x84/0x160
[  396.552274][ T9144]  exc_invalid_op+0x1a/0x50
[  396.552295][ T9144]  asm_exc_invalid_op+0x1a/0x20
[  396.552315][ T9144] RIP: 0010:kcov_task_exit+0x13c/0x150
[  396.552343][ T9144] Code: c7 c7 90 3e c5 8e 48 c7 c6 7b 22 da 8c 48 c7 c2 5a f8 d8 8c 4c 89 f9 e8 a2 3d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 c4 0e 04 09 0f 1f 40 00 90 90
[  396.552361][ T9144] RSP: 0018:ffffc9001cdb7d00 EFLAGS: 00010206
[  396.552379][ T9144] RAX: 9e1fd78a94bbca00 RBX: ffff88814da9ee00 RCX: 0000000000000000
[  396.552395][ T9144] RDX: 0000000000000000 RSI: ffffffff8b3ddd40 RDI: 00000000ffffffff
[  396.552410][ T9144] RBP: ffffc9001cdb7e68 R08: 0000000000000000 R09: ffffffff8ac2bb41
[  396.552425][ T9144] R10: dffffc0000000000 R11: fffffbfff1dac76f R12: 1ffff11006112a6d
[  396.552442][ T9144] R13: 0000000000000000 R14: ffff88814da9ee08 R15: ffff88803086da00
[  396.552465][ T9144]  ? rt_spin_lock+0x1c1/0x3e0
[  396.552500][ T9144]  do_exit+0x105/0x2300
[  396.552528][ T9144]  ? preempt_schedule_thunk+0x16/0x30
[  396.552562][ T9144]  ? rt_mutex_slowunlock+0x668/0x8a0
[  396.552591][ T9144]  ? __pfx_do_exit+0x10/0x10
[  396.552621][ T9144]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  396.552650][ T9144]  ? __rcu_read_unlock+0x84/0xe0
[  396.552678][ T9144]  ? rt_spin_unlock+0x161/0x200
[  396.552706][ T9144]  do_group_exit+0x21c/0x2d0
[  396.552738][ T9144]  __x64_sys_exit_group+0x3f/0x40
[  396.552758][ T9144]  x64_sys_call+0x21f7/0x2200
[  396.552780][ T9144]  do_syscall_64+0xfa/0xfa0
[  396.552808][ T9144]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.552837][ T9144]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.552859][ T9144]  ? clear_bhb_loop+0x60/0xb0
[  396.552886][ T9144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.552907][ T9144] RIP: 0033:0x7fdb4a61f6c9
[  396.552924][ T9144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  396.552942][ T9144] RSP: 002b:00007ffd17106df8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  396.552962][ T9144] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdb4a61f6c9
[  396.552978][ T9144] RDX: 00007fdb49881000 RSI: 0000000000000000 RDI: 0000000000000000
[  396.552992][ T9144] RBP: 00007ffd17106e5c R08: 0000000000028224 R09: 00000000000927c0
[  396.553008][ T9144] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000b8
[  396.553021][ T9144] R13: 00000000000927c0 R14: 000000000005ff81 R15: 00007ffd17106eb0
[  396.553057][ T9144]  </TASK>
[  396.553311][ T9144] Kernel Offset: disabled