last executing test programs:

3m18.309086722s ago: executing program 3 (id=299):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @raw_data="9b16ebd90f692b4b691728b7d4cdd15e35b1ec76ba509664e24ece8545453a3318ed4ff254f1ba134c392f62406e53859e405b7d710fc58378a838c9cb68b038f499f5aa325e69883f1440bfb3675a931d48518aff54f27eb75350e38774b33ddf8947e83b1e07a48936f073a54c4a2d7cb29fcee4fd3f933c18a5cce94e53227c1aca11d5cc76ef9d260379831cd0170dc323229f7c0be8b70ffb600bbd66bdaf8ec44b2346f2dee8cf9c87514c341a5cc63d52426c78487c27b709e0fb4e3229b164b33e3d9628"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xa, 0x2)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4)
sendmmsg$inet6(r5, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xfff, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x0)
recvmmsg(r5, &(0x7f0000005200)=[{{0x0, 0xffffffffffffff9d, 0x0}, 0xc4}], 0x40000000000026e, 0x2000, 0x0)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
ioctl(r4, 0x8b1a, &(0x7f0000000040))

3m17.017565808s ago: executing program 3 (id=300):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[], 0xfc}}, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x80000)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x80044100, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r2, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x60010000, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

3m16.006292136s ago: executing program 3 (id=302):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x240, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x11, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfc, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c050895012930"], 0x0}, 0x0)

3m14.173280846s ago: executing program 3 (id=306):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1ae8, 0x1, 0x200, 0x5, '\x00', '\x00', '\x00', 0x2, 0x9, 0x800, 0xf4, "7f9f5f00c447b2a00c0b8cdf9039534d"})
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB], 0x50)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001480)=@deltaction={0x138, 0x31, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x34000}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xeba1}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8050}, 0x40000)
openat$dir(0xffffffffffffff9c, 0x0, 0x60082, 0x148)
fchown(r1, 0x0, 0xee00)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4028055}, 0x0)
writev(r4, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4)

3m13.178439434s ago: executing program 3 (id=308):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$usbfs(0x0, 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r7, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050)

3m10.990787864s ago: executing program 3 (id=312):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9cae556c58768461ce74c044b9b0e9db785713ea3656b06797b301cd", 0x32)
r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r4, &(0x7f00000091c0)=""/16384, 0x4000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f00000001c0)=[{}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80)
setns(0xc9, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e24000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r6, 0x0, 0x0)
syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="007cfa1a03eeb4a33b5c62e97561b693343a677290c3433b43e502a5abea610af3a5b9431ad4d3eda4b5653804"], 0x1, 0x5ce8, &(0x7f0000005dc0)="$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")

2m55.52835003s ago: executing program 32 (id=312):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9cae556c58768461ce74c044b9b0e9db785713ea3656b06797b301cd", 0x32)
r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r4, &(0x7f00000091c0)=""/16384, 0x4000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f00000001c0)=[{}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80)
setns(0xc9, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e24000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r6, 0x0, 0x0)
syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="007cfa1a03eeb4a33b5c62e97561b693343a677290c3433b43e502a5abea610af3a5b9431ad4d3eda4b5653804"], 0x1, 0x5ce8, &(0x7f0000005dc0)="$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")

13.338852872s ago: executing program 0 (id=589):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0)
write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="390242000200000005f8000000000000000000000000000000000000000000000000000000000300000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007d351f5bde054000000000187b8200b500fb2a595fcb14034354b9fd9ef196a51cd5157adc8103b494e11d00", @ANYRES32=0x0, @ANYRES32=0x0], 0x239)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/current_tracer\x00', 0x2, 0x0)
preadv(r4, &(0x7f0000002b40)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1, 0xf, 0x94b8)
syz_usb_connect$sierra_net(0x6, 0x0, 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000a00)='cifs\x00', 0x0, &(0x7f0000000b00)='echo_interval=1,user=root,pass=root,ip=127.0.0.1,soft\x00')

11.023431766s ago: executing program 1 (id=591):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00)=r6, 0x4)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="c1aaaaaaaaaaaaaaaaaaaabb86dd60a1dbe0653cb0a0e3800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="5018100090780000"], 0x0)

10.924733099s ago: executing program 2 (id=592):
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff224000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f00000000000000cb"], 0x20)

10.811905551s ago: executing program 4 (id=593):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000200)={0x5a1, 0x1, 0x7fffffff, 0xffffffff})
unshare(0x22020400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
waitid(0x1, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200))
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0)
writev(r5, &(0x7f0000019540)=[{&(0x7f0000019440)='3', 0x1}, {&(0x7f0000019480)="cb", 0x1}], 0x2)

10.810630242s ago: executing program 1 (id=594):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0)
syz_usb_connect$printer(0x8, 0x0, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000e00)={0x1c, &(0x7f0000000680)={0x40, 0x10, 0x5, "a72f03b93e"}, 0x0, 0x0})
syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000000)="9001000000000000")
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000900)=""/183, 0xb7)

10.50419688s ago: executing program 4 (id=595):
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)
openat2(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x40, 0x0, 0x8}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})

10.369931644s ago: executing program 4 (id=596):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)

10.087745741s ago: executing program 0 (id=597):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioprio_get$uid(0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000480)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_dump={0x32, 0x9, 0x6, 0x2a, "ad53a3712b67940eda0a0159c9030ecbb9013538fc898ae4948b99d24a3703d5de077c92c17fca16650d"}})
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000002680)=[{{&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000025c0)=[{&(0x7f00000003c0)="1695", 0x2}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000340)=0x8)

9.867445377s ago: executing program 2 (id=598):
r0 = gettid()
timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8d0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

8.554613774s ago: executing program 0 (id=599):
setns(0xc9, 0x0)
syz_open_dev$vivid(0x0, 0x2, 0x2)
r0 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4074, 0xfea}], 0x1, 0x8000740, 0x3)

8.183042044s ago: executing program 2 (id=600):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1ae8, 0x1, 0x200, 0x5, '\x00', '\x00', '\x00', 0x2, 0x9, 0x800, 0xf4, "7f9f5f00c447b2a00c0b8cdf9039534d"})
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001480)=@deltaction={0x138, 0x31, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x34000}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xeba1}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8050}, 0x40000)
openat$dir(0xffffffffffffff9c, 0x0, 0x60082, 0x148)
fchown(0xffffffffffffffff, 0x0, 0xee00)
unshare(0x4000400)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4028055}, 0x0)
writev(r3, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4)

5.595104525s ago: executing program 1 (id=601):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a00010005000000000000720800", 0x32}], 0x1)

5.594484735s ago: executing program 2 (id=602):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000a00)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x1}}, 0x80, 0x0}, 0x7ffffff7)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7)

5.593286605s ago: executing program 4 (id=603):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000200)={0x5a1, 0x1, 0x7fffffff, 0xffffffff})
unshare(0x22020400)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
waitid(0x1, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200))
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}})
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0)
writev(r5, &(0x7f0000019540)=[{&(0x7f0000019440)='3', 0x1}, {&(0x7f0000019480)="cb", 0x1}], 0x2)

5.378716161s ago: executing program 1 (id=604):
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)
openat2(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x40, 0x0, 0x8}, 0x18)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)

5.350734592s ago: executing program 0 (id=605):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0)
write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="390242000200000005f8000000000000000000000000000000000000000000000000000000000300000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007d351f5bde054000000000187b8200b500fb2a595fcb14034354b9fd9ef196a51cd5157adc8103b494e11d00", @ANYRES32=0x0, @ANYRES32=0x0], 0x239)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/current_tracer\x00', 0x2, 0x0)
preadv(r4, &(0x7f0000002b40)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1, 0xf, 0x94b8)
syz_usb_connect$sierra_net(0x6, 0x0, 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000a00)='cifs\x00', 0x0, &(0x7f0000000b00)='echo_interval=1,user=root,pass=root,ip=127.0.0.1,soft\x00')

5.230244375s ago: executing program 1 (id=606):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="390242000200000005f8000000000000000000000000000000000000000000000000000000000300000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007d351f5bde054000000000187b8200b500fb2a595fcb14034354b9fd9ef196a51cd5157adc8103b494e11d00", @ANYRES32=0x0, @ANYRES32=0x0], 0x239)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/current_tracer\x00', 0x2, 0x0)
preadv(r3, &(0x7f0000002b40)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1, 0xf, 0x94b8)
syz_usb_connect$sierra_net(0x6, 0x0, 0x0, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000a00)='cifs\x00', 0x0, &(0x7f0000000b00)='echo_interval=1,user=root,pass=root,ip=127.0.0.1,soft\x00')
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003)
dup2(r4, r4)

4.299928161s ago: executing program 2 (id=607):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r1, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c9754a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c6", 0x96, 0x12, 0x0, 0x0)

3.931870881s ago: executing program 4 (id=608):
r0 = gettid()
timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8d0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

3.285185779s ago: executing program 4 (id=609):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0)
syz_usb_connect$printer(0x8, 0x0, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000e00)={0x1c, &(0x7f0000000680)={0x40, 0x10, 0x5, "a72f03b93e"}, 0x0, 0x0})
syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000000)="9001000000000000")
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000900)=""/183, 0xb7)

2.88032008s ago: executing program 2 (id=610):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x400000e0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9aa8, 0x0, 0x0, 0x8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x100, 0x3, 0x2cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xccc3, 0x2, 0x3, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x80, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

2.046002853s ago: executing program 1 (id=611):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000540)={0x1ae8, 0x1, 0x200, 0x5, '\x00', '\x00', '\x00', 0x2, 0x9, 0x800, 0xf4, "7f9f5f00c447b2a00c0b8cdf9039534d"})
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001480)=@deltaction={0x138, 0x31, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x34000}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xeba1}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8050}, 0x40000)
openat$dir(0xffffffffffffff9c, 0x0, 0x60082, 0x148)
fchown(0xffffffffffffffff, 0x0, 0xee00)
unshare(0x4000400)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4028055}, 0x0)
writev(r3, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4)

2.044458423s ago: executing program 0 (id=612):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$dri(0x0, 0x9, 0x400)
sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000003c0)={{0x3, 0x0, 0x0, 0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x840, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, {0x68, 0xffffffff, 0x6, 0x95bf6fef}})
ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, 0x0)
pipe(&(0x7f0000000180))
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

0s ago: executing program 0 (id=613):
setns(0xc9, 0x0)
syz_open_dev$vivid(0x0, 0x2, 0x2)
r0 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4074, 0xfea}], 0x1, 0x8000740, 0x3)

kernel console output (not intermixed with test programs):

 initialize disk quotas.
[  167.087459][ T6691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.158'.
[  167.141115][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  167.524482][    T8] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  167.756994][    T8] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.776522][    T8] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  167.804775][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[  167.814755][    T8] usb 1-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00
[  167.823858][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.850836][ T6669] tipc: Disabling bearer <eth:syzkaller0>
[  167.859489][    T8] usb 1-1: config 0 descriptor??
[  168.294580][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  168.674436][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  168.994395][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  169.794392][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  170.004373][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  170.270661][    T8] usbhid 1-1:0.0: can't add hid device: -71
[  170.281666][    T8] usbhid: probe of 1-1:0.0 failed with error -71
[  170.298800][    T8] usb 1-1: USB disconnect, device number 37
[  170.430428][ T6719] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  170.656439][ T6722] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10
[  171.387553][ T6729] CIFS mount error: No usable UNC path provided in device string!
[  171.387553][ T6729] 
[  172.593863][ T6729] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  173.204290][ T6738] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.273699][ T6739] netlink: 68 bytes leftover after parsing attributes in process `syz.0.171'.
[  173.293093][ T6738] syzkaller0: entered promiscuous mode
[  173.309650][ T6738] syzkaller0: entered allmulticast mode
[  173.319706][ T6738] tipc: Resetting bearer <eth:syzkaller0>
[  173.663678][ T6736] loop1: detected capacity change from 0 to 32768
[  173.761810][ T6736] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  173.925305][ T6739] loop0: detected capacity change from 0 to 32768
[  173.941535][ T6736] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  174.022506][ T6736] XFS (loop1): Starting recovery (logdev: internal)
[  174.061798][ T6737] tipc: Resetting bearer <eth:syzkaller0>
[  174.104700][ T6736] XFS (loop1): Ending recovery (logdev: internal)
[  174.134593][ T6736] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0.
[  174.142568][ T6736] XFS (loop1): Failed to initialize disk quotas.
[  174.215231][ T6736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.170'.
[  174.281606][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  175.903792][ T6749] loop2: detected capacity change from 0 to 32768
[  175.953519][ T6749] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.964005][ T6749] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  175.981270][ T6749] BTRFS info (device loop2): force clearing of disk cache
[  175.988601][ T6749] BTRFS error (device loop2): unrecognized mount option 'fragment=metadata'
[  176.042288][ T6749] BTRFS error (device loop2): open_ctree failed: -22
[  176.114987][ T5795] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (5795)
[  176.355925][    T8] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  176.600321][    T8] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  176.609013][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.619665][    T8] usb 4-1: config 0 has no interface number 0
[  176.626201][    T8] usb 4-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  176.641339][    T8] usb 4-1: config 0 interface 52 has no altsetting 0
[  176.653722][    T8] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  176.664557][    T8] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  176.672947][    T8] usb 4-1: Product: syz
[  176.677970][    T8] usb 4-1: Manufacturer: syz
[  176.682650][    T8] usb 4-1: SerialNumber: syz
[  176.694621][    T8] usb 4-1: config 0 descriptor??
[  177.132828][ T5822] usb 4-1: USB disconnect, device number 19
[  177.604624][ T1197] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  177.808333][ T1197] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.819452][ T1197] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  177.833051][ T1197] usb 3-1: config 0 interface 0 has no altsetting 0
[  177.840062][ T1197] usb 3-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00
[  177.850513][ T1197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.863731][ T1197] usb 3-1: config 0 descriptor??
[  177.895893][ T6737] tipc: Disabling bearer <eth:syzkaller0>
[  177.906634][ T5615] tipc: Node number set to 1566855432
[  177.922893][ T6756] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  177.939493][ T6756] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  178.464388][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  178.504785][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  179.394391][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  180.476587][ T1197] usbhid 3-1:0.0: can't add hid device: -71
[  180.498571][ T1197] usbhid: probe of 3-1:0.0 failed with error -71
[  180.540750][ T1197] usb 3-1: USB disconnect, device number 19
[  182.000521][ T6778] loop3: detected capacity change from 0 to 32768
[  182.035760][ T6778] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  182.054941][ T6778] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  182.069850][ T6778] BTRFS info (device loop3): force clearing of disk cache
[  182.095861][ T6778] BTRFS error (device loop3): unrecognized mount option 'fragment=metadata'
[  182.134092][ T6778] BTRFS error (device loop3): open_ctree failed: -22
[  182.212763][ T5795] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (5795)
[  182.414536][    T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  182.574313][    T8] usb 3-1: device descriptor read/64, error -71
[  182.854895][    T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  182.914831][ T1197] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  183.014495][    T8] usb 3-1: device descriptor read/64, error -71
[  183.106139][ T1197] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  183.115634][ T1197] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  183.126434][ T1197] usb 2-1: config 0 has no interface number 0
[  183.132774][ T1197] usb 2-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0x0, skipping
[  183.143627][ T1197] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  183.145119][    T8] usb usb3-port1: attempt power cycle
[  183.158611][ T1197] usb 2-1: config 0 interface 52 has no altsetting 0
[  183.182871][ T1197] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  183.192753][ T1197] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  183.201793][ T1197] usb 2-1: Product: syz
[  183.206499][ T1197] usb 2-1: Manufacturer: syz
[  183.211303][ T1197] usb 2-1: SerialNumber: syz
[  183.221275][ T1197] usb 2-1: config 0 descriptor??
[  183.482464][ T6795] netlink: 52 bytes leftover after parsing attributes in process `syz.3.186'.
[  184.480267][ T1197] usb 2-1: USB disconnect, device number 24
[  184.563524][ T6800] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.642692][ T6802] netlink: 68 bytes leftover after parsing attributes in process `syz.3.187'.
[  184.663269][ T6800] syzkaller0: entered promiscuous mode
[  184.672847][ T6800] syzkaller0: entered allmulticast mode
[  184.704175][ T6800] tipc: Resetting bearer <eth:syzkaller0>
[  184.734528][ T5615] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  184.938039][ T5615] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.968886][ T5615] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  185.032998][ T5615] usb 1-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 130
[  185.098231][ T5615] usb 1-1: config 0 interface 0 has no altsetting 0
[  185.143494][ T5615] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice=10.00
[  185.202170][ T5615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.255640][ T5615] usb 1-1: config 0 descriptor??
[  185.300249][ T5615] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  185.354702][    T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  185.442856][ T6802] loop3: detected capacity change from 0 to 32768
[  185.480887][ T6798] tipc: Resetting bearer <eth:syzkaller0>
[  185.581827][    T8] usb 3-1: device not accepting address 22, error -71
[  185.595936][ T5841] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  185.809413][ T5841] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.838518][ T5841] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  185.851674][ T5841] usb 2-1: config 0 interface 0 has no altsetting 0
[  185.860991][ T5841] usb 2-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00
[  185.870583][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.882342][ T5841] usb 2-1: config 0 descriptor??
[  186.521924][ T5841] usbhid 2-1:0.0: can't add hid device: -71
[  186.541558][ T5841] usbhid: probe of 2-1:0.0 failed with error -71
[  186.558407][ T5841] usb 2-1: USB disconnect, device number 25
[  187.473405][ T6819] loop1: detected capacity change from 0 to 32768
[  187.523152][ T6819] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.548990][ T6819] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  187.558402][ T6819] BTRFS info (device loop1): force clearing of disk cache
[  187.569474][ T1197] usb 1-1: USB disconnect, device number 38
[  187.584727][ T6819] BTRFS error (device loop1): unrecognized mount option 'fragment=metadata'
[  187.629297][ T6819] BTRFS error (device loop1): open_ctree failed: -22
[  187.755840][ T5795] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5795)
[  188.107050][ T6798] tipc: Disabling bearer <eth:syzkaller0>
[  188.179277][ T5786] Bluetooth: hci1: unexpected event for opcode 0x0c13
[  189.635064][ T5844] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  189.967453][ T5844] usb 3-1: device descriptor read/64, error -71
[  190.914688][ T5844] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  191.074630][ T5844] usb 3-1: device descriptor read/64, error -71
[  191.209113][ T5844] usb usb3-port1: attempt power cycle
[  191.634614][ T5844] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  191.669132][ T5844] usb 3-1: device descriptor read/8, error -71
[  191.855979][ T6849] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.965709][ T5844] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  192.046018][ T5844] usb 3-1: device descriptor read/8, error -71
[  192.054009][ T6850] netlink: 68 bytes leftover after parsing attributes in process `syz.3.204'.
[  192.094902][ T5786] Bluetooth: Wrong link type (-22)
[  192.116995][ T6849] syzkaller0: entered promiscuous mode
[  192.123071][ T6849] syzkaller0: entered allmulticast mode
[  192.136375][ T6849] tipc: Resetting bearer <eth:syzkaller0>
[  193.743722][ T5844] usb usb3-port1: unable to enumerate USB device
[  194.241396][ T6852] loop1: detected capacity change from 0 to 32768
[  194.280566][ T6852] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  194.313381][ T6852] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  194.337463][ T6852] BTRFS info (device loop1): force clearing of disk cache
[  194.363481][ T6852] BTRFS error (device loop1): unrecognized mount option 'fragment=metadata'
[  194.390938][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  194.405287][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  194.412898][ T6852] BTRFS error (device loop1): open_ctree failed: -22
[  194.452839][ T5795] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5795)
[  194.487677][ T6855] loop3: detected capacity change from 0 to 32768
[  194.620682][ T6848] tipc: Resetting bearer <eth:syzkaller0>
[  195.192797][ T5786] Bluetooth: hci1: unexpected event for opcode 0x0c13
[  196.764854][ T1197] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  197.700990][ T1197] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  197.712084][ T1197] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  197.730110][ T1197] usb 2-1: config 0 interface 0 has no altsetting 0
[  197.736858][ T1197] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00
[  197.750307][ T1197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.771834][ T1197] usb 2-1: config 0 descriptor??
[  197.777816][ T6874] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  198.231650][ T1197] apple 0003:05AC:0240.0006: unknown main item tag 0x0
[  198.238856][ T1197] apple 0003:05AC:0240.0006: unknown main item tag 0x0
[  198.263886][ T1197] apple 0003:05AC:0240.0006: unknown main item tag 0x0
[  198.273709][ T1197] apple 0003:05AC:0240.0006: unknown main item tag 0x0
[  198.281177][ T1197] apple 0003:05AC:0240.0006: unknown main item tag 0x0
[  198.288500][ T1197] apple 0003:05AC:0240.0006: unknown main item tag 0x0
[  198.295898][ T1197] apple 0003:05AC:0240.0006: unknown main item tag 0x0
[  198.302857][ T1197] apple 0003:05AC:0240.0006: unknown main item tag 0x0
[  198.310289][ T1197] apple 0003:05AC:0240.0006: unknown main item tag 0x0
[  198.318513][ T1197] apple 0003:05AC:0240.0006: unknown main item tag 0x0
[  198.330593][ T1197] apple 0003:05AC:0240.0006: unknown main item tag 0x0
[  198.337888][ T1197] apple 0003:05AC:0240.0006: unknown main item tag 0x0
[  198.345200][ T1197] apple 0003:05AC:0240.0006: unknown main item tag 0x0
[  198.352167][ T1197] apple 0003:05AC:0240.0006: unknown main item tag 0x0
[  198.359597][ T1197] apple 0003:05AC:0240.0006: unbalanced collection at end of report description
[  198.382167][ T1197] apple 0003:05AC:0240.0006: parse failed
[  198.388404][ T1197] apple: probe of 0003:05AC:0240.0006 failed with error -22
[  198.438301][ T5821] usb 2-1: USB disconnect, device number 26
[  198.847242][ T6848] tipc: Disabling bearer <eth:syzkaller0>
[  202.855589][ T6904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.874473][    T8] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  202.936701][ T6905] netlink: 68 bytes leftover after parsing attributes in process `syz.2.223'.
[  202.986423][ T6904] syzkaller0: entered promiscuous mode
[  203.032284][ T6904] syzkaller0: entered allmulticast mode
[  203.050830][ T6904] tipc: Resetting bearer <eth:syzkaller0>
[  203.074542][    T8] usb 1-1: device descriptor read/64, error -71
[  203.494682][    T8] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  203.864781][    T8] usb 1-1: device descriptor read/64, error -71
[  205.502400][    T8] usb usb1-port1: attempt power cycle
[  206.134731][ T6925] CIFS mount error: No usable UNC path provided in device string!
[  206.134731][ T6925] 
[  206.145169][ T6925] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  206.865944][ T6904] tipc: Resetting bearer <eth:syzkaller0>
[  207.272500][    T8] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  207.498072][    T8] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.510863][    T8] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  207.529074][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[  207.545073][    T8] usb 1-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00
[  207.554864][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.577154][ T5789] Bluetooth: hci0: command 0x0c13 tx timeout
[  207.583278][ T5789] Bluetooth: hci3: command 0x0406 tx timeout
[  207.590234][ T5789] Bluetooth: hci2: command 0x0406 tx timeout
[  207.634871][ T5822] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  207.653303][    T8] usb 1-1: config 0 descriptor??
[  207.844201][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.854789][ T5822] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  207.880786][ T5822] usb 4-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 130
[  207.908196][ T5822] usb 4-1: config 0 interface 0 has no altsetting 0
[  207.916296][ T5822] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice=10.00
[  207.928852][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.941326][ T5822] usb 4-1: config 0 descriptor??
[  207.955492][ T5822] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  208.290131][    T8] usbhid 1-1:0.0: can't add hid device: -71
[  208.311097][    T8] usbhid: probe of 1-1:0.0 failed with error -71
[  208.328876][    T8] usb 1-1: USB disconnect, device number 42
[  209.164972][    T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  209.370465][    T8] usb 2-1: device descriptor read/64, error -71
[  209.666670][    T8] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  209.854439][    T8] usb 2-1: device descriptor read/64, error -71
[  210.017880][    T8] usb usb2-port1: attempt power cycle
[  210.415694][ T1197] usb 4-1: USB disconnect, device number 20
[  210.461373][    T8] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  210.496435][ T6904] tipc: Disabling bearer <eth:syzkaller0>
[  210.515632][    T8] usb 2-1: device descriptor read/8, error -71
[  212.395426][    T8] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  212.574493][ T1197] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  212.634512][ T5821] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  212.642295][    T8] usb 2-1: device not accepting address 30, error -71
[  212.654900][    T8] usb usb2-port1: unable to enumerate USB device
[  212.776259][ T1197] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  212.787591][ T1197] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.798161][ T1197] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  212.810075][ T1197] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  212.824517][ T5821] usb 1-1: device descriptor read/64, error -71
[  212.832110][ T1197] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  212.841656][ T1197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.865604][ T1197] cxacru 4-1:1.0: submit of read urb for cm 0x90 failed (-90)
[  212.873644][ T1197] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  212.885368][ T1197] cxacru: probe of 4-1:1.0 failed with error -22
[  214.524738][    T8] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  214.570050][ T1197] usb 4-1: USB disconnect, device number 21
[  214.605153][ T5821] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  214.816387][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  215.622407][ T6966] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  215.744396][    T8] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  215.846757][    T8] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00
[  215.952854][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.624693][    T8] usb 2-1: can't set config #1, error -71
[  216.632286][    T8] usb 2-1: USB disconnect, device number 31
[  218.864776][ T6978] Zero length message leads to an empty skb
[  220.354676][   T28] audit: type=1804 audit(1791068145.303:2): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.249" name="/newroot/61/tracing/events/msr/read_msr/enable" dev="tracefs" ino=19680823 res=1 errno=0
[  220.594532][ T5822] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  220.718789][ T6995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.773307][ T6995] syzkaller0: entered promiscuous mode
[  220.779194][ T6995] syzkaller0: entered allmulticast mode
[  220.787382][ T5822] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  220.797898][    T8] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  220.811949][ T6995] tipc: Resetting bearer <eth:syzkaller0>
[  220.819712][ T5822] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  220.841383][ T5822] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  220.854049][ T6995] netlink: 68 bytes leftover after parsing attributes in process `syz.2.243'.
[  220.867824][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.988408][    T8] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  221.004395][    T8] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  221.023263][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  221.030463][    T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00
[  221.045853][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.059397][    T8] usb 2-1: config 0 descriptor??
[  221.067765][ T6993] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  221.109057][ T5822] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  221.121982][ T5822] cxacru: probe of 4-1:1.0 failed with error -22
[  221.356994][ T6995] loop2: detected capacity change from 0 to 32768
[  221.391807][ T6994] tipc: Resetting bearer <eth:syzkaller0>
[  221.497396][    T8] apple 0003:05AC:0240.0007: unknown main item tag 0x0
[  221.516749][    T8] apple 0003:05AC:0240.0007: unknown main item tag 0x0
[  221.533257][    T8] apple 0003:05AC:0240.0007: unknown main item tag 0x0
[  221.541159][    T8] apple 0003:05AC:0240.0007: unknown main item tag 0x0
[  221.565094][    T8] apple 0003:05AC:0240.0007: unknown main item tag 0x0
[  221.572081][    T8] apple 0003:05AC:0240.0007: unknown main item tag 0x0
[  221.579936][    T8] apple 0003:05AC:0240.0007: unknown main item tag 0x0
[  221.604279][    T8] apple 0003:05AC:0240.0007: unbalanced collection at end of report description
[  221.614282][    T8] apple 0003:05AC:0240.0007: parse failed
[  221.630272][    T8] apple: probe of 0003:05AC:0240.0007 failed with error -22
[  221.701979][    T8] usb 2-1: USB disconnect, device number 32
[  223.097855][ T5787] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  223.334641][ T5787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.387309][ T5787] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  223.518369][ T5787] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00
[  223.630161][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.791211][    T8] usb 4-1: USB disconnect, device number 22
[  225.873328][ T5822] usb 2-1: USB disconnect, device number 33
[  226.425239][ T5822] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  226.634916][ T5822] usb 2-1: Using ep0 maxpacket: 16
[  226.643339][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  226.669782][ T5822] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  226.687960][ T5822] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  226.705911][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.724813][ T5822] usb 2-1: config 0 descriptor??
[  226.943251][ T7027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.966471][ T7027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.028105][ T5840] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  227.051837][ T7016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  227.141849][ T7030] rt1711h 0-0004: check vid/pid fail
[  227.166320][ T7030] rt1711h: probe of 0-0004 failed with error -5
[  227.178326][ T7030] i2c i2c-0: new_device: Instantiated device rt1715 at 0x04
[  227.204542][ T5840] usb 1-1: device descriptor read/64, error -71
[  227.213095][ T7031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.243418][ T6994] tipc: Disabling bearer <eth:syzkaller0>
[  227.245588][ T7031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.267850][ T7027] warning: `syz.1.259' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  227.474498][ T5840] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  227.634787][ T5840] usb 1-1: device descriptor read/64, error -71
[  227.641996][ T5822] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  228.495413][ T5840] usb usb1-port1: attempt power cycle
[  228.546708][ T5822] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  228.557937][ T5822] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  228.572021][ T5822] usb 4-1: config 0 interface 0 has no altsetting 0
[  228.579632][ T5822] usb 4-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00
[  228.589301][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.601189][ T5822] usb 4-1: config 0 descriptor??
[  228.611996][ T7033] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  228.714473][ T1197] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  228.896274][ T1197] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.906907][ T1197] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  228.919103][ T1197] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  228.928153][ T5840] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  228.933530][ T1197] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.960993][ T1197] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  228.974516][ T1197] usb 3-1: config 0 interface 0 has no altsetting 0
[  228.981305][ T1197] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice=10.00
[  228.991483][ T1197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.001245][ T5840] usb 1-1: device descriptor read/8, error -71
[  229.012573][ T1197] usb 3-1: config 0 descriptor??
[  229.037347][ T1197] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[  229.056126][ T5822] apple 0003:05AC:0240.0008: unknown main item tag 0x0
[  229.063561][ T5822] apple 0003:05AC:0240.0008: unknown main item tag 0x0
[  229.071935][ T5822] apple 0003:05AC:0240.0008: unknown main item tag 0x0
[  229.079496][ T5822] apple 0003:05AC:0240.0008: unknown main item tag 0x0
[  229.088940][ T5822] apple 0003:05AC:0240.0008: unknown main item tag 0x0
[  229.097541][ T5822] apple 0003:05AC:0240.0008: unknown main item tag 0x0
[  229.105885][ T5822] apple 0003:05AC:0240.0008: unknown main item tag 0x0
[  229.106970][ T5821] usb 2-1: USB disconnect, device number 34
[  229.113483][ T5822] apple 0003:05AC:0240.0008: unbalanced collection at end of report description
[  229.147467][ T5822] apple 0003:05AC:0240.0008: parse failed
[  229.153562][ T5822] apple: probe of 0003:05AC:0240.0008 failed with error -22
[  229.239824][    T8] usb 4-1: USB disconnect, device number 23
[  229.314442][ T5840] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  229.349368][ T5840] usb 1-1: device descriptor read/8, error -71
[  229.451701][ T1197] logitech 0003:046D:C298.0009: unknown main item tag 0x2
[  229.460291][ T1197] logitech 0003:046D:C298.0009: unknown main item tag 0x0
[  229.467654][ T1197] logitech 0003:046D:C298.0009: unknown main item tag 0x0
[  229.479430][ T1197] input: HID 046d:c298 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C298.0009/input/input11
[  229.479531][ T5840] usb usb1-port1: unable to enumerate USB device
[  229.607243][ T5821] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  229.622222][ T1197] logitech 0003:046D:C298.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.2-1/input0
[  229.645922][ T1197] logitech 0003:046D:C298.0009: implement() called with too large value 245 (n: 0)! (kworker/1:2)
[  229.695851][ T1197] logitech 0003:046D:C298.0009: implement() called with too large value 248 (n: 0)! (kworker/1:2)
[  229.706525][ T1197] logitech 0003:046D:C298.0009: implement() called with too large value 3 (n: 0)! (kworker/1:2)
[  229.717147][ T1197] logitech 0003:046D:C298.0009: implement() called with too large value 129 (n: 0)! (kworker/1:2)
[  229.727787][ T1197] logitech 0003:046D:C298.0009: implement() called with too large value 11 (n: 0)! (kworker/1:2)
[  229.742903][ T1197] logitech 0003:046D:C298.0009: Force feedback support for Logitech Gaming Wheels
[  229.788174][ T1197] usb 3-1: USB disconnect, device number 28
[  229.827530][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.865828][ T5821] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  229.910164][ T5821] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  229.929824][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.022265][ T7056] syzkaller0: entered promiscuous mode
[  231.039998][ T7056] syzkaller0: entered allmulticast mode
[  232.816535][ T5821] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  232.823816][ T5821] cxacru: probe of 2-1:1.0 failed with error -22
[  232.890189][ T5821] usb 2-1: USB disconnect, device number 35
[  233.044922][ T7059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.148162][ T7065] netlink: 68 bytes leftover after parsing attributes in process `syz.3.270'.
[  233.201954][ T7059] syzkaller0: entered promiscuous mode
[  233.239153][ T7059] syzkaller0: entered allmulticast mode
[  233.255251][ T7059] tipc: Resetting bearer <eth:syzkaller0>
[  233.861771][ T7065] loop3: detected capacity change from 0 to 32768
[  234.233057][ T7058] tipc: Resetting bearer <eth:syzkaller0>
[  235.304947][ T1197] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  235.509644][ T1197] usb 1-1: Using ep0 maxpacket: 16
[  235.517500][ T1197] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.532219][ T1197] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  235.703326][ T1197] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  235.723707][ T1197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.764963][ T1197] usb 1-1: config 0 descriptor??
[  239.518165][ T1197] usb 1-1: USB disconnect, device number 49
[  240.108574][ T1197] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  240.316421][ T1197] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  240.327262][ T1197] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  240.340624][ T1197] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  240.350285][ T1197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.593696][ T1197] cxacru 1-1:1.0: send of cm 0x90 failed (-104)
[  242.606283][ T1197] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  242.615901][ T1197] cxacru: probe of 1-1:1.0 failed with error -22
[  242.679628][ T1197] usb 1-1: USB disconnect, device number 50
[  243.892038][ T7058] tipc: Disabling bearer <eth:syzkaller0>
[  245.477815][ T7121] CIFS mount error: No usable UNC path provided in device string!
[  245.477815][ T7121] 
[  245.488255][ T7121] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  246.506255][ T7128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.288'.
[  246.520186][ T7128] netlink: 36 bytes leftover after parsing attributes in process `syz.1.288'.
[  246.864916][ T5821] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  247.111027][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.190982][ T5821] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  247.271031][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.470752][ T5821] usb 3-1: config 0 descriptor??
[  248.010443][ T5821] usbhid 3-1:0.0: can't add hid device: -71
[  248.147402][ T5821] usbhid: probe of 3-1:0.0 failed with error -71
[  248.198703][ T5821] usb 3-1: USB disconnect, device number 29
[  248.421976][ T5840] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  248.674906][ T5840] usb 1-1: Using ep0 maxpacket: 16
[  248.684894][ T5840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.695142][ T5840] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  248.704169][ T5840] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  248.713301][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.723719][ T5840] usb 1-1: config 0 descriptor??
[  248.766885][ T5822] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  248.784523][ T5787] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  248.824492][ T5821] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  248.968657][ T5822] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x82, skipping
[  248.979934][ T5787] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  248.980419][ T5822] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  248.991395][ T5787] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  249.014113][ T5787] usb 2-1: config 0 interface 0 has no altsetting 0
[  249.014209][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.025432][ T5821] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  249.039381][ T5787] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00
[  249.048571][ T5821] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256
[  249.061483][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.069616][ T5821] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  249.088261][ T5787] usb 2-1: config 0 descriptor??
[  249.099411][ T5821] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  249.109910][ T7136] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  249.124480][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.132747][ T5821] usb 3-1: Product: syz
[  249.137095][ T5821] usb 3-1: Manufacturer: syz
[  249.141744][ T5821] usb 3-1: SerialNumber: syz
[  249.271442][ T5822] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  249.278965][ T5822] cxacru: probe of 4-1:1.0 failed with error -22
[  249.530446][ T5787] apple 0003:05AC:0240.000A: ignoring exceeding usage max
[  249.539627][ T5787] apple 0003:05AC:0240.000A: unknown main item tag 0x0
[  249.546660][ T5787] apple 0003:05AC:0240.000A: unknown main item tag 0x0
[  249.553715][ T5787] apple 0003:05AC:0240.000A: unknown main item tag 0x0
[  249.560832][ T5787] apple 0003:05AC:0240.000A: unbalanced collection at end of report description
[  249.577727][ T5787] apple 0003:05AC:0240.000A: parse failed
[  249.583676][ T5787] apple: probe of 0003:05AC:0240.000A failed with error -22
[  249.590887][ T5615] usb 3-1: USB disconnect, device number 30
[  249.739809][ T5822] usb 2-1: USB disconnect, device number 36
[  250.423763][ T5787] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  250.486165][ T7149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.530206][ T7149] syzkaller0: entered promiscuous mode
[  250.535833][ T7149] syzkaller0: entered allmulticast mode
[  250.541934][ T7149] tipc: Resetting bearer <eth:syzkaller0>
[  250.553678][ T7149] netlink: 68 bytes leftover after parsing attributes in process `syz.1.295'.
[  250.604429][ T5787] usb 3-1: Using ep0 maxpacket: 16
[  250.618998][ T5787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.625353][ T5822] usb 1-1: USB disconnect, device number 51
[  250.645017][ T5787] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  250.666612][ T5787] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  250.694528][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.716066][ T5787] usb 3-1: config 0 descriptor??
[  251.101217][ T7142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.230097][ T7142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.685640][ T7142] i2c i2c-0: Failed to register i2c client rt1715 at 0x04 (-16)
[  251.742018][ T5787] usb 4-1: USB disconnect, device number 24
[  251.749939][ T5822] usb 3-1: USB disconnect, device number 31
[  252.228257][ T7149] loop1: detected capacity change from 0 to 32768
[  253.084696][ T7148] tipc: Resetting bearer <eth:syzkaller0>
[  253.305778][ T7162] CIFS mount error: No usable UNC path provided in device string!
[  253.305778][ T7162] 
[  253.331124][ T7162] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  253.748210][ T5840] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  253.948778][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.968726][ T5840] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  253.979293][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.010356][ T5840] usb 3-1: config 0 descriptor??
[  254.264668][ T5840] usbhid 3-1:0.0: can't add hid device: -71
[  254.270870][ T5840] usbhid: probe of 3-1:0.0 failed with error -71
[  254.294194][ T5840] usb 3-1: USB disconnect, device number 32
[  254.376041][ T5821] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  254.582315][ T5821] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  254.601787][ T5821] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  254.632170][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0
[  254.645688][ T5821] usb 4-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00
[  254.655315][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.678634][ T5821] usb 4-1: config 0 descriptor??
[  254.685112][ T7175] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  254.874622][ T5840] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  255.096455][ T5840] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  255.110630][ T5840] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256
[  255.131321][ T5821] apple 0003:05AC:0240.000B: ignoring exceeding usage max
[  255.141126][ T5840] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  255.156304][ T5821] apple 0003:05AC:0240.000B: unknown main item tag 0x0
[  255.164993][ T5821] apple 0003:05AC:0240.000B: unknown main item tag 0x0
[  255.172440][ T5821] apple 0003:05AC:0240.000B: unknown main item tag 0x0
[  255.179728][ T5821] apple 0003:05AC:0240.000B: unbalanced collection at end of report description
[  255.191831][ T5821] apple 0003:05AC:0240.000B: parse failed
[  255.198888][ T5821] apple: probe of 0003:05AC:0240.000B failed with error -22
[  255.209075][ T5840] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  255.228989][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.249315][ T5840] usb 3-1: Product: syz
[  255.253640][ T5840] usb 3-1: Manufacturer: syz
[  255.266934][ T5840] usb 3-1: SerialNumber: syz
[  255.338395][ T1197] usb 4-1: USB disconnect, device number 25
[  255.597350][ T7148] tipc: Disabling bearer <eth:syzkaller0>
[  255.705155][ T1197] usb 3-1: USB disconnect, device number 33
[  255.800951][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  255.807835][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  256.046354][ T5840] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  256.154445][ T5822] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  256.312615][ T5840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.387108][ T5840] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  256.469414][ T5840] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  256.541486][ T5840] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.601029][ T5840] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  256.695432][ T5840] usb 1-1: config 0 interface 0 has no altsetting 0
[  256.735594][ T5840] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice=10.00
[  256.792041][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.820157][ T5840] usb 1-1: config 0 descriptor??
[  256.864982][ T5840] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[  257.630802][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'.
[  258.815035][ T5822] usb 2-1: Using ep0 maxpacket: 16
[  258.829225][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  258.845090][ T5822] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  258.854278][ T5822] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  258.863992][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.875425][ T5822] usb 2-1: config 0 descriptor??
[  258.964518][ T5822] usb 2-1: can't set config #0, error -71
[  258.977861][ T5840] usbhid 1-1:0.0: can't add hid device: -71
[  258.990624][ T5822] usb 2-1: USB disconnect, device number 37
[  259.094480][ T5840] usbhid: probe of 1-1:0.0 failed with error -71
[  259.106955][ T5840] usb 1-1: USB disconnect, device number 52
[  260.730276][ T5615] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  260.850733][ T7198] FAULT_INJECTION: forcing a failure.
[  260.850733][ T7198] name failslab, interval 1, probability 0, space 0, times 1
[  260.863910][ T7198] CPU: 1 PID: 7198 Comm: syz.0.311 Not tainted syzkaller #0
[  260.871251][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  260.881345][ T7198] Call Trace:
[  260.884687][ T7198]  <TASK>
[  260.887660][ T7198]  dump_stack_lvl+0x18c/0x250
[  260.892431][ T7198]  ? show_regs_print_info+0x20/0x20
[  260.897684][ T7198]  ? load_image+0x420/0x420
[  260.902252][ T7198]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  260.908288][ T7198]  ? verify_lock_unused+0x140/0x140
[  260.913542][ T7198]  should_fail_ex+0x394/0x4c0
[  260.918290][ T7198]  should_failslab+0x9/0x20
[  260.922850][ T7198]  slab_pre_alloc_hook+0x59/0x300
[  260.927993][ T7198]  kmem_cache_alloc+0x5a/0x2c0
[  260.932833][ T7198]  ? fdb_create+0xa6/0x12b0
[  260.937391][ T7198]  fdb_create+0xa6/0x12b0
[  260.941801][ T7198]  ? br_fdb_find+0x82/0x210
[  260.946362][ T7198]  ? __lock_acquire+0x7eb0/0x7eb0
[  260.951444][ T7198]  ? br_fdb_find_rcu+0x30/0x30
[  260.956260][ T7198]  ? trace_br_fdb_update+0x1f0/0x1f0
[  260.961596][ T7198]  ? br_fdb_find+0x82/0x210
[  260.966151][ T7198]  ? br_fdb_find+0x82/0x210
[  260.970717][ T7198]  fdb_add_local+0x121/0x240
[  260.975366][ T7198]  br_fdb_changeaddr+0x2c9/0x420
[  260.980410][ T7198]  br_device_event+0x604/0x920
[  260.985396][ T7198]  ? br_switchdev_event+0x550/0x550
[  260.990631][ T7198]  ? packet_notifier+0xa3c/0xa50
[  260.995612][ T7198]  notifier_call_chain+0x18f/0x380
[  261.000793][ T7198]  call_netdevice_notifiers+0x91/0xd0
[  261.006215][ T7198]  ? netdev_adjacent_rename_links+0x500/0x500
[  261.012347][ T7198]  dev_ifsioc+0x662/0xc40
[  261.016720][ T7198]  dev_ioctl+0x7b4/0x1140
[  261.021087][ T7198]  sock_do_ioctl+0x239/0x310
[  261.025715][ T7198]  ? sock_show_fdinfo+0xb0/0xb0
[  261.030622][ T7198]  sock_ioctl+0x5be/0x7e0
[  261.034989][ T7198]  ? sock_poll+0x3e0/0x3e0
[  261.039461][ T7198]  ? bpf_lsm_file_ioctl+0x9/0x10
[  261.044440][ T7198]  ? security_file_ioctl+0x80/0xa0
[  261.049636][ T7198]  ? sock_poll+0x3e0/0x3e0
[  261.054085][ T7198]  __se_sys_ioctl+0xfd/0x170
[  261.058705][ T7198]  do_syscall_64+0x55/0xb0
[  261.063153][ T7198]  ? clear_bhb_loop+0x40/0x90
[  261.067854][ T7198]  ? clear_bhb_loop+0x40/0x90
[  261.072551][ T7198]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  261.078490][ T7198] RIP: 0033:0x7fe17019e159
[  261.083041][ T7198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  261.102668][ T7198] RSP: 002b:00007fe170fd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  261.111138][ T7198] RAX: ffffffffffffffda RBX: 00007fe170425fa0 RCX: 00007fe17019e159
[  261.119140][ T7198] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000007
[  261.127138][ T7198] RBP: 00007fe17023506b R08: 0000000000000000 R09: 0000000000000000
[  261.135155][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  261.143154][ T7198] R13: 00007fe170426038 R14: 00007fe170425fa0 R15: 00007ffc7373bca8
[  261.151184][ T7198]  </TASK>
[  261.274819][ T5615] usb 3-1: Using ep0 maxpacket: 16
[  261.296410][ T5615] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  261.324414][ T5615] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  261.333485][ T5615] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  261.369343][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.405336][ T5615] usb 3-1: config 0 descriptor??
[  261.671610][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.695262][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.485310][ T7195] i2c i2c-0: Failed to register i2c client rt1715 at 0x04 (-16)
[  262.495733][ T5615] usb 3-1: USB disconnect, device number 34
[  262.880225][ T7209] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.935422][ T7209] syzkaller0: entered promiscuous mode
[  262.941054][ T7209] syzkaller0: entered allmulticast mode
[  262.952439][ T7209] tipc: Resetting bearer <eth:syzkaller0>
[  262.963305][ T7212] netlink: 68 bytes leftover after parsing attributes in process `syz.3.312'.
[  263.905316][    T8] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  264.023874][ T7209] loop3: detected capacity change from 0 to 32768
[  264.067039][ T7207] tipc: Resetting bearer <eth:syzkaller0>
[  264.106105][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.131700][    T8] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  264.146386][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.187935][    T8] usb 3-1: config 0 descriptor??
[  264.565238][    T8] usbhid 3-1:0.0: can't add hid device: -71
[  264.571375][    T8] usbhid: probe of 3-1:0.0 failed with error -71
[  264.594969][    T8] usb 3-1: USB disconnect, device number 35
[  264.926430][ T5822] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  264.944553][ T5615] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[  265.094550][    T8] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  265.148509][ T5822] usb 2-1: Using ep0 maxpacket: 16
[  265.164842][ T5615] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.176700][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.201111][ T5615] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  265.212173][ T5822] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  265.234602][ T5615] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  265.246705][ T5822] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  265.259783][ T5615] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.279148][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.288355][    T8] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  265.289325][ T5615] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  265.304692][    T8] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256
[  265.333996][ T5822] usb 2-1: config 0 descriptor??
[  265.352195][    T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  265.374164][ T5615] usb 1-1: config 0 interface 0 has no altsetting 0
[  265.397156][ T5822] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  265.430467][ T5615] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice=10.00
[  265.437677][    T8] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  265.461379][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.467931][ T5615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.486382][    T8] usb 3-1: Product: syz
[  265.494842][    T8] usb 3-1: Manufacturer: syz
[  265.499502][    T8] usb 3-1: SerialNumber: syz
[  265.511064][ T5615] usb 1-1: config 0 descriptor??
[  265.537493][ T5615] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[  265.940957][ T5822] usb 3-1: USB disconnect, device number 36
[  265.960414][ T5615] usbhid 1-1:0.0: can't add hid device: -71
[  265.987989][ T5615] usbhid: probe of 1-1:0.0 failed with error -71
[  266.015176][ T5615] usb 1-1: USB disconnect, device number 53
[  268.602018][ T5787] usb 2-1: USB disconnect, device number 38
[  270.806287][ T7244] netlink: 52 bytes leftover after parsing attributes in process `syz.0.326'.
[  273.144513][ T5840] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  273.365119][ T5840] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  273.384519][ T5840] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  273.420952][ T5840] usb 3-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00
[  273.437891][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.833408][ T7207] tipc: Disabling bearer <eth:syzkaller0>
[  274.676622][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32
[  274.718345][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32
[  274.754251][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random
[  277.386810][ T5787] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  277.494514][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71
[  277.542870][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  277.585398][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  277.615900][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  277.632297][ T5787] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  277.657063][ T5787] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  277.676916][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  277.690153][ T5787] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  277.714617][ T5787] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  277.728019][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  277.769492][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  277.791747][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  277.808475][ T5787] usb 1-1: string descriptor 0 read error: -71
[  277.826156][ T5787] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  278.376587][ T7276] CIFS mount error: No usable UNC path provided in device string!
[  278.376587][ T7276] 
[  278.387103][ T7276] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  278.424154][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  279.262528][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  280.158620][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  280.169765][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  280.179415][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  280.191613][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  280.199883][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  280.201792][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  280.331296][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  280.357179][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  280.368896][ T5787] usb 1-1: can't set config #1, error -71
[  280.379043][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  280.390490][ T5787] usb 1-1: USB disconnect, device number 54
[  280.398643][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71
[  280.411816][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  280.452078][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  280.540301][ T7282] netlink: 52 bytes leftover after parsing attributes in process `syz.0.335'.
[  282.222758][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  282.234786][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  282.294646][ T5790] Bluetooth: hci4: command tx timeout
[  282.431290][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71
[  282.473854][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  282.666861][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  283.025821][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  283.114540][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  283.135319][ T5840] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  283.346392][ T5840] ax88179_178a 3-1:1.0 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, da:36:14:0b:96:02
[  284.594522][ T5786] Bluetooth: hci4: command tx timeout
[  284.635733][ T5840] usb 3-1: USB disconnect, device number 37
[  284.642792][ T5840] ax88179_178a 3-1:1.0 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet
[  284.912707][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.004750][    T8] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  285.059712][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.188126][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.211766][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  285.224806][ T5821] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  285.239119][ T7272] chnl_net:caif_netlink_parms(): no params data found
[  285.252552][    T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  285.274430][    T8] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  285.304458][    T8] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00
[  285.327211][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.424632][   T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.680661][ T5821] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  285.692812][ T5821] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  285.720430][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.767707][ T5821] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  285.905303][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.078463][ T7272] bridge_slave_0: entered allmulticast mode
[  286.100207][ T5821] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  286.509191][ T7272] bridge_slave_0: entered promiscuous mode
[  286.516630][ T5821] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  286.526771][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  286.534908][ T5821] usb 1-1: Product: syz
[  286.540959][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.549194][ T5821] usb 1-1: Manufacturer: syz
[  286.561521][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.577711][ T5821] cdc_wdm 1-1:1.0: skipping garbage
[  286.580857][ T7272] bridge_slave_1: entered allmulticast mode
[  286.585850][ T5821] cdc_wdm: probe of 1-1:1.0 failed with error -22
[  286.610045][ T7272] bridge_slave_1: entered promiscuous mode
[  286.625090][ T7318] sit0: entered promiscuous mode
[  286.636181][ T7318] netlink: 'syz.2.336': attribute type 1 has an invalid length.
[  286.644885][ T7318] netlink: 1 bytes leftover after parsing attributes in process `syz.2.336'.
[  286.694634][ T5786] Bluetooth: hci4: command tx timeout
[  286.827959][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32
[  286.866503][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32
[  286.904557][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random
[  286.915577][ T5840] usb 1-1: USB disconnect, device number 55
[  286.976972][ T7272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.868018][ T5786] Bluetooth: hci4: command tx timeout
[  288.934903][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71
[  288.975944][ T7272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  288.985963][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  289.024514][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  289.062633][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  289.190756][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  289.297107][ T7337] netlink: 52 bytes leftover after parsing attributes in process `syz.1.344'.
[  290.141382][ T7272] team0: Port device team_slave_0 added
[  290.245870][ T7272] team0: Port device team_slave_1 added
[  292.714644][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  294.122574][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  294.420527][   T49] tipc: Left network mode
[  294.565338][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.629987][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.927716][ T7272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.137413][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.223219][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.510812][ T7272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.414210][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  296.425684][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  296.437134][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  296.448415][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  296.459693][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  296.472477][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71
[  296.483796][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  296.495086][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  296.506337][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  296.517792][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  296.529149][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71
[  296.540364][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  296.551609][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  296.562919][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  296.584572][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  296.605009][    T8] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  296.834486][    T8] ax88179_178a 2-1:1.0 eth5: register 'ax88179_178a' at usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, c6:de:e5:89:bb:5c
[  296.927782][    T8] usb 2-1: USB disconnect, device number 39
[  296.940685][    T8] ax88179_178a 2-1:1.0 eth5: unregister 'ax88179_178a' usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet
[  297.077868][ T7272] hsr_slave_0: entered promiscuous mode
[  297.109088][ T7272] hsr_slave_1: entered promiscuous mode
[  297.125279][ T7272] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  297.132909][ T7272] Cannot create hsr debugfs directory
[  297.304644][ T1197] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  297.506228][ T1197] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  297.534466][ T1197] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  297.565817][ T1197] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  297.621443][ T1197] usb 1-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00
[  297.664515][ T1197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.651349][ T7371] netlink: 36 bytes leftover after parsing attributes in process `syz.1.349'.
[  301.265377][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  301.514773][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  301.554582][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71
[  301.574373][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random
[  301.594895][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71
[  301.625157][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71
[  301.644820][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  301.670795][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  301.695288][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  301.725819][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  301.743391][ T7387] sit0: entered promiscuous mode
[  301.763082][ T7387] netlink: 'syz.1.357': attribute type 1 has an invalid length.
[  301.775908][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  301.807883][ T7387] netlink: 1 bytes leftover after parsing attributes in process `syz.1.357'.
[  301.816966][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  301.844945][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  301.858500][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  301.875612][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  301.915748][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  301.926698][ T7272] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  301.943696][ T7272] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  301.952247][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  301.982060][ T7272] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  301.994736][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71
[  302.029757][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  302.064975][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  302.089866][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  302.144533][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  302.164883][ T7272] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  302.188062][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71
[  302.214777][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  302.255117][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  302.291899][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  302.321579][   T49] hsr_slave_0: left promiscuous mode
[  302.341208][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  302.352560][   T49] hsr_slave_1: left promiscuous mode
[  302.374496][  T788] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  302.384902][ T1197] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  302.396134][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.403739][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.428303][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  302.444492][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.454533][   T49] bridge_slave_1: left allmulticast mode
[  302.460235][   T49] bridge_slave_1: left promiscuous mode
[  302.486504][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.515359][   T49] bridge_slave_0: left allmulticast mode
[  302.521162][   T49] bridge_slave_0: left promiscuous mode
[  302.544830][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.556725][  T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  302.576264][  T788] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  302.613928][  T788] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  302.646068][   T49] veth1_macvtap: left promiscuous mode
[  302.652137][   T49] veth0_macvtap: left promiscuous mode
[  302.655061][  T788] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.675835][   T49] veth1_vlan: left promiscuous mode
[  302.678231][  T788] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  302.682140][   T49] veth0_vlan: left promiscuous mode
[  302.716395][  T788] usb 2-1: config 0 interface 0 has no altsetting 0
[  302.723096][  T788] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice=10.00
[  302.753316][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.782561][  T788] usb 2-1: config 0 descriptor??
[  302.799857][  T788] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count
[  303.237876][  T788] usbhid 2-1:0.0: can't add hid device: -71
[  303.299124][  T788] usbhid: probe of 2-1:0.0 failed with error -71
[  303.418193][  T788] usb 2-1: USB disconnect, device number 40
[  304.428603][   T49] team0 (unregistering): Port device team_slave_1 removed
[  304.527890][   T49] team0 (unregistering): Port device team_slave_0 removed
[  306.401440][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  306.513752][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  306.736816][   T27] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  306.947301][   T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  306.964476][   T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  306.969366][   T49] bond0 (unregistering): Released all slaves
[  306.994405][   T27] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  307.023026][   T27] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00
[  307.044546][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.121672][ T1197] ax88179_178a 1-1:1.0 eth5: register 'ax88179_178a' at usb-dummy_hcd.0-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, ee:e5:5f:ed:0a:48
[  307.167285][ T1197] usb 1-1: USB disconnect, device number 56
[  307.215491][ T1197] ax88179_178a 1-1:1.0 eth5: unregister 'ax88179_178a' usb-dummy_hcd.0-1, ASIX AX88179 USB 3.0 Gigabit Ethernet
[  308.119106][ T7427] loop7: detected capacity change from 0 to 16384
[  309.109388][ T7272] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.147311][ T7429] loop7: detected capacity change from 16384 to 0
[  309.263469][ T7272] 8021q: adding VLAN 0 to HW filter on device team0
[  309.307116][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32
[  309.345909][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.353127][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.374840][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32
[  309.410635][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random
[  309.448054][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.455342][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.646443][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71
[  309.678043][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  309.718015][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  309.752423][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  309.785812][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  309.824657][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  309.855013][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  309.900546][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  309.942413][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  309.985695][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  310.015034][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  310.057591][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  310.102595][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71
[  310.140521][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  310.176215][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  310.219225][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  310.262956][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  310.316587][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71
[  310.349017][ T7272] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.352122][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  310.413606][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  310.436379][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  310.479614][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  310.524947][   T27] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  310.587595][   T27] ax88179_178a 2-1:1.0 eth5: register 'ax88179_178a' at usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 96:44:74:62:fc:14
[  310.673949][   T27] usb 2-1: USB disconnect, device number 41
[  310.705867][   T27] ax88179_178a 2-1:1.0 eth5: unregister 'ax88179_178a' usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet
[  311.214526][   T27] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  313.061954][   T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  313.106217][   T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  313.155087][   T27] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  313.157263][ T7272] veth0_vlan: entered promiscuous mode
[  313.203660][   T27] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[  313.228197][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.228985][ T7272] veth1_vlan: entered promiscuous mode
[  313.285680][   T27] usb 2-1: probing VID:PID(0424:012C)   
[  313.310457][   T27] usb 2-1: vub300 testing BULK IN EndPoint(0) 81
[  313.334464][   T27] usb 2-1: vub300 testing UNKNOWN EndPoint(1) 02
[  313.340882][   T27] usb 2-1: vub300 ignoring EndPoint(1) 02
[  313.371246][   T27] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[  313.390380][ T7272] veth0_macvtap: entered promiscuous mode
[  313.431245][ T7272] veth1_macvtap: entered promiscuous mode
[  313.492247][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.523738][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.564560][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.606767][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.674456][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.685880][   T27] vub300: probe of 2-1:1.0 failed with error -22
[  313.714333][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.996347][ T7272] batman_adv: batadv0: Interface activated: batadv_slave_0
[  314.260426][ T7478] sctp: failed to load transform for md5: -2
[  314.307463][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.420894][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.493330][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.554348][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.576056][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.594585][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.629283][ T7272] batman_adv: batadv0: Interface activated: batadv_slave_1
[  314.647485][ T5821] usb 2-1: USB disconnect, device number 42
[  314.669855][ T7272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.690211][ T7272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.707661][ T7272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.722907][ T7272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.999909][ T5786] Bluetooth: hci1: command 0x0406 tx timeout
[  315.567096][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.621814][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.730306][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.748645][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.241820][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  317.248361][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  323.431633][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  323.439761][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  323.447680][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  328.204784][ T1197] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  328.506983][ T1197] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  328.543904][ T1197] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  328.558623][ T1197] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  328.573267][ T1197] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  328.589646][ T1197] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  328.618864][ T1197] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  328.668315][ T1197] usb 1-1: Product: syz
[  328.672583][ T1197] usb 1-1: Manufacturer: syz
[  328.728664][ T1197] cdc_wdm 1-1:1.0: skipping garbage
[  328.784994][ T1197] cdc_wdm: probe of 1-1:1.0 failed with error -22
[  328.950237][ T1197] usb 1-1: USB disconnect, device number 57
[  330.284527][ T1197] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  330.481683][ T1197] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  330.548813][ T1197] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.594959][ T1197] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  330.614643][ T1197] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  330.635881][ T1197] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  330.743103][ T1197] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  330.767048][ T1197] usb 1-1: Product: syz
[  330.771380][ T1197] usb 1-1: Manufacturer: syz
[  330.827024][ T1197] cdc_wdm 1-1:1.0: skipping garbage
[  330.832376][ T1197] cdc_wdm: probe of 1-1:1.0 failed with error -22
[  331.237068][ T1197] usb 1-1: USB disconnect, device number 58
[  331.277920][ T5790] Bluetooth: hci4: link tx timeout
[  331.284732][ T5790] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  331.332468][ T5786] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  331.344773][ T5786] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  331.352530][ T5786] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  333.317244][ T5786] Bluetooth: hci4: command 0x0406 tx timeout
[  334.826637][ T7680] CIFS mount error: No usable UNC path provided in device string!
[  334.826637][ T7680] 
[  334.837315][ T7680] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  342.553991][ T7740] CIFS mount error: No usable UNC path provided in device string!
[  342.553991][ T7740] 
[  342.564341][ T7740] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  344.075581][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  344.083612][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  344.092364][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  350.550172][ T7816] CIFS mount error: No usable UNC path provided in device string!
[  350.550172][ T7816] 
[  350.560413][ T7816] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  352.590928][ T7832] binder: 7831:7832 ioctl 4018620d 0 returned -22
[  354.109003][ T5822] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  354.416429][ T5615] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  354.657660][ T5822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  354.721969][ T5822] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  354.763803][ T5822] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  354.812323][ T5822] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.830939][ T5822] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  354.844729][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0
[  354.860326][ T5822] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice=10.00
[  354.885174][ T1197] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  354.904058][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.056572][ T5822] usb 5-1: config 0 descriptor??
[  355.086791][ T5615] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  355.176493][ T5615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.310186][ T5822] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count
[  355.365216][ T1197] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  355.533585][ T1197] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  355.786743][ T1197] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  355.967254][ T5615] cxacru 2-1:1.0: invalid response length to cm 0x90: 32
[  356.031952][ T1197] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  356.283977][ T5822] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  356.385615][ T1197] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  356.543932][ T5822] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  356.558005][ T1197] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  356.742016][ T7854] cxacru 2-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2
[  356.764988][ T5822] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  356.784514][ T1197] usb 1-1: Product: syz
[  356.869119][ T1197] usb 1-1: Manufacturer: syz
[  356.915796][ T5822] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  356.956335][ T7854] cxacru 2-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin
[  357.117702][ T5822] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  357.250670][ T1197] cdc_wdm 1-1:1.0: skipping garbage
[  357.337122][ T5822] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  357.446343][ T1197] cdc_wdm: probe of 1-1:1.0 failed with error -22
[  357.565854][ T5822] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  357.716539][ T5822] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  357.723785][ T5822] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  357.785513][ T1197] usb 1-1: USB disconnect, device number 59
[  357.951172][ T5822] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  357.981680][ T5822] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  358.000988][   T27] usb 2-1: USB disconnect, device number 43
[  358.167191][ T5822] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  358.318043][ T5822] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  358.783979][ T5822] logitech 0003:046D:C298.000C: unknown main item tag 0x0
[  358.825207][ T5822] logitech 0003:046D:C298.000C: unbalanced collection at end of report description
[  358.883465][ T5822] logitech 0003:046D:C298.000C: parse failed
[  358.939001][ T5822] logitech: probe of 0003:046D:C298.000C failed with error -22
[  360.656874][ T5822] usb 5-1: USB disconnect, device number 2
[  361.157693][ T7891] binder: 7890:7891 ioctl 4018620d 0 returned -22
[  362.444459][ T5615] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  362.464481][ T5822] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  362.494680][ T7855] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  362.636700][ T5615] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  362.651103][ T5822] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  362.660581][ T5822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  362.674883][ T5615] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  362.695251][ T5822] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  362.705804][ T7855] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  362.719747][ T5615] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  362.731755][ T7855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.745325][ T5822] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  362.763927][ T5615] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.823514][ T5615] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  362.854752][ T5822] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  362.874601][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  362.882760][ T5822] usb 1-1: Product: syz
[  362.903230][ T5615] usb 3-1: config 0 interface 0 has no altsetting 0
[  362.920527][ T5615] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice=10.00
[  362.949273][ T5822] usb 1-1: Manufacturer: syz
[  362.977563][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.991088][ T5822] cdc_wdm 1-1:1.0: skipping garbage
[  363.078181][ T7923] CIFS mount error: No usable UNC path provided in device string!
[  363.078181][ T7923] 
[  363.088502][ T7923] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  363.157866][ T5822] cdc_wdm 1-1:1.0: skipping garbage
[  363.264126][ T7855] cxacru 5-1:1.0: invalid response length to cm 0x90: 32
[  363.345043][ T5822] cdc_wdm 1-1:1.0: skipping garbage
[  363.373344][ T5615] usb 3-1: config 0 descriptor??
[  363.480968][ T5822] cdc_wdm: probe of 1-1:1.0 failed with error -22
[  363.751613][ T5615] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[  363.783467][ T5822] usb 1-1: USB disconnect, device number 60
[  363.986759][ T5615] logitech 0003:046D:C298.000D: unknown main item tag 0x2
[  363.994226][ T5615] logitech 0003:046D:C298.000D: unknown main item tag 0x0
[  364.009774][ T5615] logitech 0003:046D:C298.000D: unknown main item tag 0x0
[  364.019487][ T5615] logitech 0003:046D:C298.000D: unknown main item tag 0x0
[  364.032255][ T5615] logitech 0003:046D:C298.000D: unknown main item tag 0x0
[  364.041339][ T5615] logitech 0003:046D:C298.000D: unknown main item tag 0x0
[  364.057392][ T5615] logitech 0003:046D:C298.000D: unknown main item tag 0x0
[  364.068869][ T5615] logitech 0003:046D:C298.000D: unknown main item tag 0x0
[  364.079064][ T5615] logitech 0003:046D:C298.000D: unknown main item tag 0x0
[  364.089242][ T5615] logitech 0003:046D:C298.000D: unknown main item tag 0x0
[  364.101345][ T5615] logitech 0003:046D:C298.000D: unbalanced collection at end of report description
[  364.118562][ T5615] logitech 0003:046D:C298.000D: parse failed
[  364.129214][ T5615] logitech: probe of 0003:046D:C298.000D failed with error -22
[  364.164519][ T5822] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  364.192279][ T5615] usb 3-1: USB disconnect, device number 38
[  364.357077][ T5822] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  364.368281][ T5822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  364.379742][ T5822] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  364.390177][ T5822] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  364.407731][ T5822] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  364.418066][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  364.426323][ T5822] usb 1-1: Product: syz
[  364.430810][ T5822] usb 1-1: Manufacturer: syz
[  364.451204][ T5822] cdc_wdm 1-1:1.0: skipping garbage
[  364.461619][ T5822] cdc_wdm 1-1:1.0: skipping garbage
[  364.468114][ T5822] cdc_wdm 1-1:1.0: skipping garbage
[  364.474020][ T5822] cdc_wdm: probe of 1-1:1.0 failed with error -22
[  364.658239][ T5822] usb 1-1: USB disconnect, device number 61
[  365.875823][ T5822] usb 5-1: USB disconnect, device number 3
[  366.046058][ T7966] netlink: 36 bytes leftover after parsing attributes in process `syz.2.463'.
[  370.009027][ T7980] binder: 7978:7980 ioctl 4018620d 0 returned -22
[  371.931702][ T7997] CIFS mount error: No usable UNC path provided in device string!
[  371.931702][ T7997] 
[  371.942444][ T7997] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  372.014597][    T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  372.315626][    T9] usb 1-1: Using ep0 maxpacket: 8
[  372.337806][    T9] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.362335][    T9] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  372.389156][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  372.397080][    T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[  372.406660][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.417933][    T9] usb 1-1: config 0 descriptor??
[  372.544385][   T23] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  372.756800][   T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  372.775695][   T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  372.786902][   T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  372.796019][   T23] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  372.825619][   T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  372.839299][   T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  372.853139][   T23] usb 3-1: Product: syz
[  372.860036][   T23] usb 3-1: Manufacturer: syz
[  372.867367][    T9] kye 0003:0458:5019.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  372.891109][   T23] cdc_wdm 3-1:1.0: skipping garbage
[  372.896143][    T9] kye 0003:0458:5019.000E: unknown main item tag 0x6
[  372.906700][    T9] kye 0003:0458:5019.000E: unknown main item tag 0xe
[  372.913549][    T9] kye 0003:0458:5019.000E: unknown main item tag 0x0
[  372.924464][   T23] cdc_wdm 3-1:1.0: skipping garbage
[  372.929731][   T23] cdc_wdm 3-1:1.0: skipping garbage
[  372.936282][    T9] kye 0003:0458:5019.000E: unknown main item tag 0x0
[  372.944342][   T23] cdc_wdm: probe of 3-1:1.0 failed with error -22
[  372.956343][    T9] kye 0003:0458:5019.000E: unknown main item tag 0x0
[  372.965170][    T9] kye 0003:0458:5019.000E: unknown main item tag 0x0
[  372.975501][    T9] kye 0003:0458:5019.000E: hidraw0: USB HID v0.81 Device [HID 0458:5019] on usb-dummy_hcd.0-1/input0
[  372.987508][    T9] kye 0003:0458:5019.000E: tablet-enabling feature report not found
[  372.997267][    T9] kye 0003:0458:5019.000E: tablet enabling failed
[  373.110242][    T9] usb 3-1: USB disconnect, device number 39
[  373.135941][ T5840] usb 1-1: USB disconnect, device number 62
[  373.714887][    T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  373.896107][ T8056] netlink: 36 bytes leftover after parsing attributes in process `syz.0.475'.
[  373.916593][    T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  374.698173][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  374.714330][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  374.727024][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  374.742091][    T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  374.751772][    T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  374.764560][    T9] usb 3-1: Product: syz
[  374.768781][    T9] usb 3-1: Manufacturer: syz
[  374.784390][    T9] cdc_wdm 3-1:1.0: skipping garbage
[  374.789675][    T9] cdc_wdm 3-1:1.0: skipping garbage
[  374.795022][    T9] cdc_wdm 3-1:1.0: skipping garbage
[  374.800284][    T9] cdc_wdm: probe of 3-1:1.0 failed with error -22
[  375.085143][  T788] usb 3-1: USB disconnect, device number 40
[  375.759167][ T8067] binder: BINDER_SET_CONTEXT_MGR already set
[  375.766465][ T8067] binder: 8066:8067 ioctl 4018620d 200000004a80 returned -16
[  377.982154][ T7855] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  378.359285][ T7855] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  378.459805][ T7855] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  378.593348][ T7855] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  378.680598][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  378.693934][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  378.703955][ T7855] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.816039][ T7855] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  378.999674][ T7855] usb 3-1: config 0 interface 0 has no altsetting 0
[  379.103763][ T7855] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice=10.00
[  379.253960][ T7855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.555177][ T7855] usb 3-1: config 0 descriptor??
[  379.578652][ T7855] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[  380.077842][ T8093] CIFS mount error: No usable UNC path provided in device string!
[  380.077842][ T8093] 
[  380.088262][ T8093] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  380.738417][ T8094] netlink: 36 bytes leftover after parsing attributes in process `syz.1.485'.
[  380.987910][ T7855] logitech 0003:046D:C298.000F: unknown main item tag 0x2
[  380.996119][ T7855] logitech 0003:046D:C298.000F: unknown main item tag 0x0
[  381.005517][ T7855] logitech 0003:046D:C298.000F: unknown main item tag 0x0
[  381.017892][ T7855] logitech 0003:046D:C298.000F: unknown main item tag 0x0
[  381.025448][ T7855] logitech 0003:046D:C298.000F: unknown main item tag 0x0
[  381.032719][ T7855] logitech 0003:046D:C298.000F: unknown main item tag 0x0
[  381.040042][ T7855] logitech 0003:046D:C298.000F: unknown main item tag 0x0
[  381.047481][ T7855] logitech 0003:046D:C298.000F: unknown main item tag 0x0
[  381.056232][ T7855] logitech 0003:046D:C298.000F: unknown main item tag 0x0
[  381.063489][ T7855] logitech 0003:046D:C298.000F: unknown main item tag 0x0
[  381.070812][ T7855] logitech 0003:046D:C298.000F: unbalanced collection at end of report description
[  381.083878][ T7855] logitech 0003:046D:C298.000F: parse failed
[  381.095553][ T7855] logitech: probe of 0003:046D:C298.000F failed with error -22
[  381.108964][ T7855] usb 3-1: USB disconnect, device number 41
[  382.501703][ T8111] binder: BINDER_SET_CONTEXT_MGR already set
[  382.508645][ T8111] binder: 8110:8111 ioctl 4018620d 200000004a80 returned -16
[  386.880569][ T8128] netlink: 36 bytes leftover after parsing attributes in process `syz.2.494'.
[  389.284369][ T7855] usb 1-1: new full-speed USB device number 63 using dummy_hcd
[  390.331110][ T7855] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  390.381930][ T7855] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  390.437338][ T7855] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  390.470373][ T7855] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  390.543477][ T7855] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  390.606311][ T7855] usb 1-1: config 0 interface 0 has no altsetting 0
[  390.626217][ T7855] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice=10.00
[  390.647209][ T7855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.681461][ T7855] usb 1-1: config 0 descriptor??
[  390.739659][ T7855] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[  391.237795][ T7855] logitech 0003:046D:C298.0010: unknown main item tag 0x2
[  391.277646][ T7855] logitech 0003:046D:C298.0010: unknown main item tag 0x0
[  391.705720][ T7855] logitech 0003:046D:C298.0010: unknown main item tag 0x0
[  391.713077][ T7855] logitech 0003:046D:C298.0010: unknown main item tag 0x0
[  391.851383][ T7855] logitech 0003:046D:C298.0010: unknown main item tag 0x0
[  391.904461][ T7855] logitech 0003:046D:C298.0010: unknown main item tag 0x0
[  391.943275][ T7855] logitech 0003:046D:C298.0010: unbalanced collection at end of report description
[  392.000819][ T7855] logitech 0003:046D:C298.0010: parse failed
[  392.047798][ T7855] logitech: probe of 0003:046D:C298.0010 failed with error -22
[  392.090623][ T7855] usb 1-1: USB disconnect, device number 63
[  392.295272][ T8146] CIFS mount error: No usable UNC path provided in device string!
[  392.295272][ T8146] 
[  392.305394][ T8146] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  392.374422][    T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  392.570883][    T9] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  392.583852][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.878559][    T9] cxacru 3-1:1.0: invalid response length to cm 0x90: 48
[  394.377867][ T8167] sctp: failed to load transform for md5: -2
[  395.580690][ T5821] usb 3-1: USB disconnect, device number 42
[  395.847826][ T8187] netlink: 52 bytes leftover after parsing attributes in process `syz.2.509'.
[  399.148527][ T8214] CIFS mount error: No usable UNC path provided in device string!
[  399.148527][ T8214] 
[  399.158996][ T8214] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  400.149495][ T8219] netlink: 52 bytes leftover after parsing attributes in process `syz.1.521'.
[  401.219947][ T8225] syzkaller0: entered promiscuous mode
[  401.244467][ T8225] syzkaller0: entered allmulticast mode
[  405.228271][ T8249] CIFS mount error: No usable UNC path provided in device string!
[  405.228271][ T8249] 
[  405.238762][ T8249] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  405.803411][ T8251] sctp: failed to load transform for md5: -2
[  406.264218][ T8262] syzkaller0: entered promiscuous mode
[  406.274428][ T8262] syzkaller0: entered allmulticast mode
[  406.377080][ T8266] netlink: 52 bytes leftover after parsing attributes in process `syz.2.530'.
[  409.986248][ T8287] netlink: 52 bytes leftover after parsing attributes in process `syz.0.544'.
[  411.229085][ T8293] sctp: failed to load transform for md5: -2
[  411.812136][ T8304] CIFS mount error: No usable UNC path provided in device string!
[  411.812136][ T8304] 
[  411.822597][ T8304] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  415.494541][ T8326] netlink: 52 bytes leftover after parsing attributes in process `syz.2.553'.
[  417.250602][ T8343] FAULT_INJECTION: forcing a failure.
[  417.250602][ T8343] name failslab, interval 1, probability 0, space 0, times 0
[  417.263502][ T8343] CPU: 0 PID: 8343 Comm: syz.0.557 Not tainted syzkaller #0
[  417.270864][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  417.281040][ T8343] Call Trace:
[  417.284405][ T8343]  <TASK>
[  417.287376][ T8343]  dump_stack_lvl+0x18c/0x250
[  417.292121][ T8343]  ? show_regs_print_info+0x20/0x20
[  417.297452][ T8343]  ? load_image+0x420/0x420
[  417.302059][ T8343]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  417.308071][ T8343]  ? verify_lock_unused+0x140/0x140
[  417.315283][ T8343]  should_fail_ex+0x394/0x4c0
[  417.320083][ T8343]  should_failslab+0x9/0x20
[  417.324686][ T8343]  slab_pre_alloc_hook+0x59/0x300
[  417.329810][ T8343]  kmem_cache_alloc+0x5a/0x2c0
[  417.334742][ T8343]  ? fdb_create+0xa6/0x12b0
[  417.339322][ T8343]  fdb_create+0xa6/0x12b0
[  417.343707][ T8343]  ? br_fdb_find+0x82/0x210
[  417.348266][ T8343]  ? __lock_acquire+0x7eb0/0x7eb0
[  417.353360][ T8343]  ? br_fdb_find_rcu+0x30/0x30
[  417.358222][ T8343]  ? trace_br_fdb_update+0x1f0/0x1f0
[  417.363560][ T8343]  ? br_fdb_find+0x82/0x210
[  417.368114][ T8343]  ? br_fdb_find+0x82/0x210
[  417.372676][ T8343]  fdb_add_local+0x121/0x240
[  417.377329][ T8343]  br_fdb_changeaddr+0x358/0x420
[  417.382322][ T8343]  br_device_event+0x604/0x920
[  417.387121][ T8343]  ? br_switchdev_event+0x550/0x550
[  417.392353][ T8343]  ? packet_notifier+0xa3c/0xa50
[  417.397336][ T8343]  notifier_call_chain+0x18f/0x380
[  417.402514][ T8343]  call_netdevice_notifiers+0x91/0xd0
[  417.407965][ T8343]  ? netdev_adjacent_rename_links+0x500/0x500
[  417.414108][ T8343]  dev_ifsioc+0x662/0xc40
[  417.418498][ T8343]  dev_ioctl+0x7b4/0x1140
[  417.422881][ T8343]  sock_do_ioctl+0x239/0x310
[  417.427543][ T8343]  ? sock_show_fdinfo+0xb0/0xb0
[  417.432463][ T8343]  sock_ioctl+0x5be/0x7e0
[  417.436852][ T8343]  ? sock_poll+0x3e0/0x3e0
[  417.441336][ T8343]  ? bpf_lsm_file_ioctl+0x9/0x10
[  417.446329][ T8343]  ? security_file_ioctl+0x80/0xa0
[  417.451500][ T8343]  ? sock_poll+0x3e0/0x3e0
[  417.456166][ T8343]  __se_sys_ioctl+0xfd/0x170
[  417.460843][ T8343]  do_syscall_64+0x55/0xb0
[  417.465330][ T8343]  ? clear_bhb_loop+0x40/0x90
[  417.470236][ T8343]  ? clear_bhb_loop+0x40/0x90
[  417.474970][ T8343]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  417.480936][ T8343] RIP: 0033:0x7fe17019e159
[  417.485408][ T8343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  417.505086][ T8343] RSP: 002b:00007fe170fd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  417.513573][ T8343] RAX: ffffffffffffffda RBX: 00007fe170425fa0 RCX: 00007fe17019e159
[  417.521625][ T8343] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000006
[  417.529932][ T8343] RBP: 00007fe17023506b R08: 0000000000000000 R09: 0000000000000000
[  417.538044][ T8343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  417.546061][ T8343] R13: 00007fe170426038 R14: 00007fe170425fa0 R15: 00007ffc7373bca8
[  417.554154][ T8343]  </TASK>
[  419.057359][ T5787] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  419.072664][ T8355] netlink: 52 bytes leftover after parsing attributes in process `syz.1.562'.
[  419.503234][ T8356] CIFS mount error: No usable UNC path provided in device string!
[  419.503234][ T8356] 
[  419.513641][ T8356] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  419.650366][ T7924] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[  419.662003][ T7854] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[  419.681792][ T8163] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[  420.104428][ T5822] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  420.306793][ T5822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  420.322571][ T5822] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  420.335113][ T5822] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  420.351940][   T27] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  420.364103][ T5822] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  420.386209][ T5822] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  420.408407][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0
[  420.418966][ T5822] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice=10.00
[  420.431628][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.449102][ T5822] usb 5-1: config 0 descriptor??
[  420.484186][ T5822] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count
[  420.571818][   T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  420.591814][   T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  420.610265][   T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  420.629149][   T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.651854][   T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  420.667586][   T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  420.701468][   T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  420.716855][   T27] usb 2-1: Product: syz
[  420.721679][   T27] usb 2-1: Manufacturer: syz
[  420.760758][   T27] cdc_wdm 2-1:1.0: skipping garbage
[  420.776614][   T27] cdc_wdm 2-1:1.0: skipping garbage
[  420.795523][   T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  420.801871][   T27] cdc_wdm 2-1:1.0: Unknown control protocol
[  420.923120][ T5822] logitech 0003:046D:C298.0011: unknown main item tag 0x2
[  420.931391][ T5822] logitech 0003:046D:C298.0011: unknown main item tag 0x0
[  420.939529][ T5822] logitech 0003:046D:C298.0011: unknown main item tag 0x0
[  420.947486][ T5822] logitech 0003:046D:C298.0011: unknown main item tag 0x0
[  420.963316][ T5822] logitech 0003:046D:C298.0011: unbalanced collection at end of report description
[  420.974026][ T5787] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.982679][   T27] usb 2-1: USB disconnect, device number 44
[  420.996130][ T5822] logitech 0003:046D:C298.0011: parse failed
[  421.006833][ T5787] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  421.023173][ T5787] usb 1-1: config 0 interface 0 has no altsetting 0
[  421.024670][ T5822] logitech: probe of 0003:046D:C298.0011 failed with error -22
[  421.043969][ T5787] usb 1-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00
[  421.059872][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.085318][ T5787] usb 1-1: config 0 descriptor??
[  421.127428][ T5821] usb 5-1: USB disconnect, device number 4
[  421.574389][   T27] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  421.711917][ T5787] usbhid 1-1:0.0: can't add hid device: -71
[  421.718304][ T5787] usbhid: probe of 1-1:0.0 failed with error -71
[  421.732575][ T5787] usb 1-1: USB disconnect, device number 64
[  421.756868][   T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  421.776343][   T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  421.793553][   T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  421.817350][   T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  421.829655][   T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  421.977300][   T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  421.987176][   T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  421.995871][   T27] usb 2-1: Product: syz
[  422.000274][   T27] usb 2-1: Manufacturer: syz
[  422.012875][   T27] cdc_wdm 2-1:1.0: skipping garbage
[  422.019905][   T27] cdc_wdm 2-1:1.0: skipping garbage
[  422.027642][   T27] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  422.033674][   T27] cdc_wdm 2-1:1.0: Unknown control protocol
[  422.821128][ T8379] cdc_wdm 2-1:1.0: Error submitting int urb - -90
[  423.454772][   T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  423.475183][ T5822] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  423.858019][   T27] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  423.867623][   T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  423.880508][ T5822] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  423.890641][   T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  423.899963][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.908646][   T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.932471][   T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  423.971930][   T27] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  423.982979][   T27] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  423.996705][   T27] usb 5-1: Product: syz
[  424.008249][   T27] usb 5-1: Manufacturer: syz
[  424.045595][   T27] cdc_wdm 5-1:1.0: skipping garbage
[  424.064111][   T27] cdc_wdm 5-1:1.0: skipping garbage
[  424.096236][   T27] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device
[  424.112067][   T27] cdc_wdm 5-1:1.0: Unknown control protocol
[  424.143344][ T8112] usb 2-1: USB disconnect, device number 45
[  424.157281][ T5822] cxacru 1-1:1.0: invalid response length to cm 0x90: 60
[  424.255100][ T8395] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2
[  424.378384][ T8393] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  425.095252][ T8395] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin
[  425.120735][ T5821] usb 5-1: USB disconnect, device number 5
[  425.573681][ T8402] CIFS mount error: No usable UNC path provided in device string!
[  425.573681][ T8402] 
[  425.584192][ T8402] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  426.518500][ T5822] usb 1-1: USB disconnect, device number 65
[  430.914514][ T8112] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  431.116773][ T8112] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  431.134489][ T8112] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  431.154410][ T8112] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  431.174014][ T8112] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  431.208175][ T8112] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  431.224514][ T8112] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  431.247013][ T8112] usb 2-1: Product: syz
[  431.252357][ T8112] usb 2-1: Manufacturer: syz
[  431.272483][ T8112] cdc_wdm 2-1:1.0: skipping garbage
[  431.293002][ T8112] cdc_wdm 2-1:1.0: skipping garbage
[  431.315049][ T8112] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  431.333778][ T8112] cdc_wdm 2-1:1.0: Unknown control protocol
[  431.520791][    T8] usb 2-1: USB disconnect, device number 46
[  435.274616][    T8] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  435.865208][    T8] usb 2-1: device descriptor read/64, error -71
[  436.164560][    T8] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  436.566963][    T8] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  436.577600][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.831984][    T8] cxacru 2-1:1.0: invalid response length to cm 0x90: 60
[  437.146337][ T8449] CIFS mount error: No usable UNC path provided in device string!
[  437.146337][ T8449] 
[  437.156675][ T8449] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  439.006409][    T8] usb 2-1: USB disconnect, device number 48
[  439.431668][ T8468] netlink: 52 bytes leftover after parsing attributes in process `syz.4.593'.
[  440.156395][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  440.162858][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  441.150663][ T8481] FAULT_INJECTION: forcing a failure.
[  441.150663][ T8481] name failslab, interval 1, probability 0, space 0, times 0
[  441.163546][ T8481] CPU: 1 PID: 8481 Comm: syz.2.598 Not tainted syzkaller #0
[  441.170919][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  441.181162][ T8481] Call Trace:
[  441.184497][ T8481]  <TASK>
[  441.187576][ T8481]  dump_stack_lvl+0x18c/0x250
[  441.192358][ T8481]  ? show_regs_print_info+0x20/0x20
[  441.197651][ T8481]  ? load_image+0x420/0x420
[  441.202233][ T8481]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  441.208218][ T8481]  ? verify_lock_unused+0x140/0x140
[  441.213499][ T8481]  should_fail_ex+0x394/0x4c0
[  441.218312][ T8481]  should_failslab+0x9/0x20
[  441.222985][ T8481]  slab_pre_alloc_hook+0x59/0x300
[  441.228095][ T8481]  kmem_cache_alloc+0x5a/0x2c0
[  441.232944][ T8481]  ? fdb_create+0xa6/0x12b0
[  441.237546][ T8481]  fdb_create+0xa6/0x12b0
[  441.241965][ T8481]  ? br_fdb_find+0x82/0x210
[  441.246545][ T8481]  ? __lock_acquire+0x7eb0/0x7eb0
[  441.251640][ T8481]  ? br_fdb_find_rcu+0x30/0x30
[  441.256474][ T8481]  ? trace_br_fdb_update+0x1f0/0x1f0
[  441.261829][ T8481]  ? br_fdb_find+0x82/0x210
[  441.266407][ T8481]  ? br_fdb_find+0x82/0x210
[  441.270982][ T8481]  fdb_add_local+0x121/0x240
[  441.275657][ T8481]  br_fdb_changeaddr+0x358/0x420
[  441.280690][ T8481]  br_device_event+0x604/0x920
[  441.285567][ T8481]  ? br_switchdev_event+0x550/0x550
[  441.290904][ T8481]  ? packet_notifier+0xa3c/0xa50
[  441.295950][ T8481]  notifier_call_chain+0x18f/0x380
[  441.301152][ T8481]  call_netdevice_notifiers+0x91/0xd0
[  441.306623][ T8481]  ? netdev_adjacent_rename_links+0x500/0x500
[  441.312824][ T8481]  dev_ifsioc+0x662/0xc40
[  441.317251][ T8481]  dev_ioctl+0x7b4/0x1140
[  441.321671][ T8481]  sock_do_ioctl+0x239/0x310
[  441.326373][ T8481]  ? sock_show_fdinfo+0xb0/0xb0
[  441.331324][ T8481]  sock_ioctl+0x5be/0x7e0
[  441.335735][ T8481]  ? sock_poll+0x3e0/0x3e0
[  441.340258][ T8481]  ? bpf_lsm_file_ioctl+0x9/0x10
[  441.345277][ T8481]  ? security_file_ioctl+0x80/0xa0
[  441.350473][ T8481]  ? sock_poll+0x3e0/0x3e0
[  441.354975][ T8481]  __se_sys_ioctl+0xfd/0x170
[  441.359644][ T8481]  do_syscall_64+0x55/0xb0
[  441.364139][ T8481]  ? clear_bhb_loop+0x40/0x90
[  441.368889][ T8481]  ? clear_bhb_loop+0x40/0x90
[  441.373644][ T8481]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  441.379631][ T8481] RIP: 0033:0x7f5b32b9e159
[  441.384119][ T8481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.404243][ T8481] RSP: 002b:00007f5b33b38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  441.412756][ T8481] RAX: ffffffffffffffda RBX: 00007f5b32e25fa0 RCX: 00007f5b32b9e159
[  441.420842][ T8481] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000005
[  441.428890][ T8481] RBP: 00007f5b32c3506b R08: 0000000000000000 R09: 0000000000000000
[  441.437124][ T8481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  441.445183][ T8481] R13: 00007f5b32e26038 R14: 00007f5b32e25fa0 R15: 00007fff070357e8
[  441.453328][ T8481]  </TASK>
[  443.490626][ T8488] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  444.573943][ T5790] Bluetooth: hci3: unexpected event for opcode 0x2035
[  445.537947][ T8508] CIFS mount error: No usable UNC path provided in device string!
[  445.537947][ T8508] 
[  445.548432][ T8508] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  445.576068][ T8509] CIFS mount error: No usable UNC path provided in device string!
[  445.576068][ T8509] 
[  445.586378][ T8509] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  446.051534][ T8515] netlink: 52 bytes leftover after parsing attributes in process `syz.4.603'.
[  446.332382][ T8518] FAULT_INJECTION: forcing a failure.
[  446.332382][ T8518] name failslab, interval 1, probability 0, space 0, times 0
[  446.345560][ T8518] CPU: 1 PID: 8518 Comm: syz.4.608 Not tainted syzkaller #0
[  446.353018][ T8518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  446.363167][ T8518] Call Trace:
[  446.366521][ T8518]  <TASK>
[  446.369528][ T8518]  dump_stack_lvl+0x18c/0x250
[  446.374300][ T8518]  ? show_regs_print_info+0x20/0x20
[  446.379708][ T8518]  ? load_image+0x420/0x420
[  446.384327][ T8518]  should_fail_ex+0x394/0x4c0
[  446.389124][ T8518]  should_failslab+0x9/0x20
[  446.393718][ T8518]  slab_pre_alloc_hook+0x59/0x300
[  446.398844][ T8518]  kmem_cache_alloc_node+0x5e/0x310
[  446.404127][ T8518]  ? __alloc_skb+0x103/0x2c0
[  446.408823][ T8518]  __alloc_skb+0x103/0x2c0
[  446.413428][ T8518]  fdb_notify+0xa6/0x160
[  446.417747][ T8518]  fdb_add_local+0x14e/0x240
[  446.422425][ T8518]  br_fdb_changeaddr+0x2c9/0x420
[  446.427465][ T8518]  br_device_event+0x604/0x920
[  446.432327][ T8518]  ? br_switchdev_event+0x550/0x550
[  446.437612][ T8518]  ? packet_notifier+0xa3c/0xa50
[  446.442643][ T8518]  notifier_call_chain+0x18f/0x380
[  446.447858][ T8518]  call_netdevice_notifiers+0x91/0xd0
[  446.453378][ T8518]  ? netdev_adjacent_rename_links+0x500/0x500
[  446.459574][ T8518]  dev_ifsioc+0x662/0xc40
[  446.464095][ T8518]  dev_ioctl+0x7b4/0x1140
[  446.468521][ T8518]  sock_do_ioctl+0x239/0x310
[  446.473207][ T8518]  ? sock_show_fdinfo+0xb0/0xb0
[  446.478172][ T8518]  sock_ioctl+0x5be/0x7e0
[  446.482596][ T8518]  ? sock_poll+0x3e0/0x3e0
[  446.487129][ T8518]  ? bpf_lsm_file_ioctl+0x9/0x10
[  446.492165][ T8518]  ? security_file_ioctl+0x80/0xa0
[  446.497385][ T8518]  ? sock_poll+0x3e0/0x3e0
[  446.502040][ T8518]  __se_sys_ioctl+0xfd/0x170
[  446.506988][ T8518]  do_syscall_64+0x55/0xb0
[  446.511598][ T8518]  ? clear_bhb_loop+0x40/0x90
[  446.516402][ T8518]  ? clear_bhb_loop+0x40/0x90
[  446.521688][ T8518]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  446.527788][ T8518] RIP: 0033:0x7fcc70f9e159
[  446.532466][ T8518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  446.553038][ T8518] RSP: 002b:00007fcc71f27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  446.561552][ T8518] RAX: ffffffffffffffda RBX: 00007fcc71225fa0 RCX: 00007fcc70f9e159
[  446.569896][ T8518] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000005
[  446.577981][ T8518] RBP: 00007fcc7103506b R08: 0000000000000000 R09: 0000000000000000
[  446.586393][ T8518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  446.594455][ T8518] R13: 00007fcc71226038 R14: 00007fcc71225fa0 R15: 00007ffdd217b1f8
[  446.602727][ T8518]  </TASK>
[  447.224904][ T8112] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  447.418742][ T8112] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  447.428342][ T8112] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  447.441750][ T8112] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  447.452074][ T8112] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.467350][ T8112] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  447.477047][ T8112] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  447.486238][ T8112] usb 5-1: Product: syz
[  447.490940][ T8112] usb 5-1: Manufacturer: syz
[  447.948043][ T8112] cdc_wdm 5-1:1.0: skipping garbage
[  447.953426][ T8112] cdc_wdm 5-1:1.0: skipping garbage
[  447.974549][ T8112] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  447.980566][ T8112] cdc_wdm 5-1:1.0: Unknown control protocol
[  450.131107][ T8531] ==================================================================
[  450.139279][ T8531] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360
[  450.146995][ T8531] Read of size 8 at addr ffff888026546218 by task syz.1.611/8531
[  450.154775][ T8531] 
[  450.157147][ T8531] CPU: 0 PID: 8531 Comm: syz.1.611 Not tainted syzkaller #0
[  450.164493][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  450.174609][ T8531] Call Trace:
[  450.177942][ T8531]  <TASK>
[  450.180926][ T8531]  dump_stack_lvl+0x18c/0x250
[  450.185692][ T8531]  ? read_lock_is_recursive+0x20/0x20
[  450.191149][ T8531]  ? show_regs_print_info+0x20/0x20
[  450.196470][ T8531]  ? load_image+0x420/0x420
[  450.201043][ T8531]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  450.206580][ T8531]  ? __virt_addr_valid+0x10c/0x380
[  450.211776][ T8531]  ? __virt_addr_valid+0x10c/0x380
[  450.216978][ T8531]  ? __virt_addr_valid+0x10c/0x380
[  450.222170][ T8531]  print_report+0xa8/0x210
[  450.226662][ T8531]  ? dvb_device_open+0xc9/0x360
[  450.231591][ T8531]  kasan_report+0x117/0x150
[  450.236166][ T8531]  ? chrdev_open+0x385/0x600
[  450.240825][ T8531]  ? dvb_device_open+0xc9/0x360
[  450.245756][ T8531]  dvb_device_open+0xc9/0x360
[  450.250514][ T8531]  chrdev_open+0x58c/0x600
[  450.255013][ T8531]  ? cd_forget+0x160/0x160
[  450.259503][ T8531]  ? cd_forget+0x160/0x160
[  450.263986][ T8531]  do_dentry_open+0x880/0x14b0
[  450.268822][ T8531]  ? cd_forget+0x160/0x160
[  450.273406][ T8531]  path_openat+0x284f/0x3270
[  450.278095][ T8531]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  450.284250][ T8531]  ? __x64_sys_openat+0x139/0x160
[  450.289402][ T8531]  ? verify_lock_unused+0x140/0x140
[  450.294691][ T8531]  ? do_filp_open+0x430/0x430
[  450.299443][ T8531]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  450.305513][ T8531]  do_filp_open+0x1f2/0x430
[  450.310184][ T8531]  ? vfs_tmpfile+0x620/0x620
[  450.315289][ T8531]  ? _raw_spin_unlock+0x28/0x40
[  450.320504][ T8531]  ? alloc_fd+0x590/0x640
[  450.324925][ T8531]  do_sys_openat2+0x134/0x1d0
[  450.329684][ T8531]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  450.335401][ T8531]  ? do_sys_open+0xe0/0xe0
[  450.339902][ T8531]  __x64_sys_openat+0x139/0x160
[  450.344875][ T8531]  do_syscall_64+0x55/0xb0
[  450.349399][ T8531]  ? clear_bhb_loop+0x40/0x90
[  450.354776][ T8531]  ? clear_bhb_loop+0x40/0x90
[  450.359529][ T8531]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  450.365501][ T8531] RIP: 0033:0x7f8f2e15e98e
[  450.369974][ T8531] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  450.389648][ T8531] RSP: 002b:00007f8f2f110b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  450.398186][ T8531] RAX: ffffffffffffffda RBX: 00007f8f2f1116c0 RCX: 00007f8f2e15e98e
[  450.406220][ T8531] RDX: 0000000000000002 RSI: 00007f8f2f110c00 RDI: ffffffffffffff9c
[  450.414266][ T8531] RBP: 00007f8f2f110c00 R08: 0000000000000000 R09: 0000000000000000
[  450.422306][ T8531] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  450.430334][ T8531] R13: 00007f8f2e426128 R14: 00007f8f2e426090 R15: 00007fff1d91ba08
[  450.438385][ T8531]  </TASK>
[  450.441456][ T8531] 
[  450.443814][ T8531] Allocated by task 1:
[  450.447938][ T8531]  kasan_set_track+0x4e/0x70
[  450.452636][ T8531]  __kasan_kmalloc+0x8f/0xa0
[  450.457293][ T8531]  dvb_register_device+0x309/0x1df0
[  450.462570][ T8531]  dvb_register_frontend+0x62d/0x900
[  450.467919][ T8531]  vidtv_bridge_probe+0x9d6/0xf60
[  450.473098][ T8531]  platform_probe+0x13b/0x1c0
[  450.477850][ T8531]  really_probe+0x247/0xae0
[  450.482427][ T8531]  __driver_probe_device+0x1f5/0x390
[  450.487769][ T8531]  driver_probe_device+0x4f/0x420
[  450.492852][ T8531]  __driver_attach+0x444/0x6d0
[  450.497696][ T8531]  bus_for_each_dev+0x235/0x2b0
[  450.502606][ T8531]  bus_add_driver+0x340/0x630
[  450.507343][ T8531]  driver_register+0x23a/0x310
[  450.512159][ T8531]  vidtv_bridge_init+0x49/0x80
[  450.516990][ T8531]  do_one_initcall+0x242/0x790
[  450.521807][ T8531]  do_initcall_level+0x13d/0x1f0
[  450.526803][ T8531]  do_initcalls+0x69/0xd0
[  450.531185][ T8531]  kernel_init_freeable+0x3d9/0x560
[  450.536457][ T8531]  kernel_init+0x1d/0x1c0
[  450.540861][ T8531]  ret_from_fork+0x48/0x80
[  450.545346][ T8531]  ret_from_fork_asm+0x11/0x20
[  450.550179][ T8531] 
[  450.552544][ T8531] Freed by task 8488:
[  450.556565][ T8531]  kasan_set_track+0x4e/0x70
[  450.561211][ T8531]  kasan_save_free_info+0x28/0x40
[  450.566297][ T8531]  ____kasan_slab_free+0x126/0x1f0
[  450.571471][ T8531]  slab_free_freelist_hook+0x130/0x1a0
[  450.576992][ T8531]  __kmem_cache_free+0xba/0x1f0
[  450.581912][ T8531]  dvb_device_open+0x2d9/0x360
[  450.586754][ T8531]  chrdev_open+0x58c/0x600
[  450.591240][ T8531]  do_dentry_open+0x880/0x14b0
[  450.596089][ T8531]  path_openat+0x284f/0x3270
[  450.600753][ T8531]  do_filp_open+0x1f2/0x430
[  450.605307][ T8531]  do_sys_openat2+0x134/0x1d0
[  450.610040][ T8531]  __x64_sys_openat+0x139/0x160
[  450.614999][ T8531]  do_syscall_64+0x55/0xb0
[  450.619482][ T8531]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  450.625454][ T8531] 
[  450.627819][ T8531] The buggy address belongs to the object at ffff888026546200
[  450.627819][ T8531]  which belongs to the cache kmalloc-256 of size 256
[  450.641963][ T8531] The buggy address is located 24 bytes inside of
[  450.641963][ T8531]  freed 256-byte region [ffff888026546200, ffff888026546300)
[  450.655755][ T8531] 
[  450.658129][ T8531] The buggy address belongs to the physical page:
[  450.664616][ T8531] page:ffffea0000995180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26546
[  450.674829][ T8531] head:ffffea0000995180 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  450.683918][ T8531] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  450.691962][ T8531] page_type: 0xffffffff()
[  450.696372][ T8531] raw: 00fff00000000840 ffff888017c41b40 dead000000000122 0000000000000000
[  450.705070][ T8531] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  450.713710][ T8531] page dumped because: kasan: bad access detected
[  450.720195][ T8531] page_owner tracks the page as allocated
[  450.725955][ T8531] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18625133982, free_ts 0
[  450.745737][ T8531]  post_alloc_hook+0x1c1/0x200
[  450.750556][ T8531]  get_page_from_freelist+0x2181/0x22a0
[  450.756157][ T8531]  __alloc_pages+0x1f0/0x460
[  450.760804][ T8531]  alloc_page_interleave+0x24/0x1e0
[  450.766059][ T8531]  alloc_slab_page+0x5d/0x180
[  450.770793][ T8531]  new_slab+0x87/0x2d0
[  450.774911][ T8531]  ___slab_alloc+0xc5c/0x12f0
[  450.779738][ T8531]  __kmem_cache_alloc_node+0x11f/0x250
[  450.785271][ T8531]  kmalloc_trace+0x2a/0xe0
[  450.789762][ T8531]  bus_add_driver+0x162/0x630
[  450.794506][ T8531]  driver_register+0x23a/0x310
[  450.799331][ T8531]  usb_register_driver+0x1aa/0x360
[  450.804511][ T8531]  do_one_initcall+0x242/0x790
[  450.809341][ T8531]  do_initcall_level+0x13d/0x1f0
[  450.814356][ T8531]  do_initcalls+0x69/0xd0
[  450.818760][ T8531]  kernel_init_freeable+0x3d9/0x560
[  450.824012][ T8531] page_owner free stack trace missing
[  450.829429][ T8531] 
[  450.831793][ T8531] Memory state around the buggy address:
[  450.837647][ T8531]  ffff888026546100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  450.845753][ T8531]  ffff888026546180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  450.853881][ T8531] >ffff888026546200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  450.862184][ T8531]                             ^
[  450.867091][ T8531]  ffff888026546280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  450.875212][ T8531]  ffff888026546300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  450.883338][ T8531] ==================================================================
[  450.893845][ T8531] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  450.901134][ T8531] CPU: 0 PID: 8531 Comm: syz.1.611 Not tainted syzkaller #0
[  450.908514][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  450.918797][ T8531] Call Trace:
[  450.922136][ T8531]  <TASK>
[  450.925205][ T8531]  dump_stack_lvl+0x18c/0x250
[  450.929964][ T8531]  ? show_regs_print_info+0x20/0x20
[  450.935230][ T8531]  ? load_image+0x420/0x420
[  450.939803][ T8531]  panic+0x2ca/0x720
[  450.943796][ T8531]  ? bpf_jit_dump+0xd0/0xd0
[  450.948387][ T8531]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  450.954114][ T8531]  ? dvb_device_open+0xc9/0x360
[  450.959043][ T8531]  ? check_panic_on_warn+0x70/0xa0
[  450.964408][ T8531]  ? dvb_device_open+0xc9/0x360
[  450.969358][ T8531]  check_panic_on_warn+0x84/0xa0
[  450.974384][ T8531]  ? dvb_device_open+0xc9/0x360
[  450.979329][ T8531]  end_report+0x6f/0x130
[  450.983644][ T8531]  kasan_report+0x128/0x150
[  450.988219][ T8531]  ? chrdev_open+0x385/0x600
[  450.992877][ T8531]  ? dvb_device_open+0xc9/0x360
[  450.997826][ T8531]  dvb_device_open+0xc9/0x360
[  451.002569][ T8531]  chrdev_open+0x58c/0x600
[  451.007055][ T8531]  ? cd_forget+0x160/0x160
[  451.011538][ T8531]  ? cd_forget+0x160/0x160
[  451.016120][ T8531]  do_dentry_open+0x880/0x14b0
[  451.020957][ T8531]  ? cd_forget+0x160/0x160
[  451.025458][ T8531]  path_openat+0x284f/0x3270
[  451.030130][ T8531]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  451.036188][ T8531]  ? __x64_sys_openat+0x139/0x160
[  451.041288][ T8531]  ? verify_lock_unused+0x140/0x140
[  451.046546][ T8531]  ? do_filp_open+0x430/0x430
[  451.051314][ T8531]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  451.057384][ T8531]  do_filp_open+0x1f2/0x430
[  451.062060][ T8531]  ? vfs_tmpfile+0x620/0x620
[  451.067773][ T8531]  ? _raw_spin_unlock+0x28/0x40
[  451.072703][ T8531]  ? alloc_fd+0x590/0x640
[  451.077110][ T8531]  do_sys_openat2+0x134/0x1d0
[  451.081859][ T8531]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  451.087569][ T8531]  ? do_sys_open+0xe0/0xe0
[  451.092106][ T8531]  __x64_sys_openat+0x139/0x160
[  451.097040][ T8531]  do_syscall_64+0x55/0xb0
[  451.101537][ T8531]  ? clear_bhb_loop+0x40/0x90
[  451.106293][ T8531]  ? clear_bhb_loop+0x40/0x90
[  451.111085][ T8531]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  451.117068][ T8531] RIP: 0033:0x7f8f2e15e98e
[  451.121539][ T8531] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  451.141203][ T8531] RSP: 002b:00007f8f2f110b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  451.149680][ T8531] RAX: ffffffffffffffda RBX: 00007f8f2f1116c0 RCX: 00007f8f2e15e98e
[  451.157704][ T8531] RDX: 0000000000000002 RSI: 00007f8f2f110c00 RDI: ffffffffffffff9c
[  451.165724][ T8531] RBP: 00007f8f2f110c00 R08: 0000000000000000 R09: 0000000000000000
[  451.173748][ T8531] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  451.181773][ T8531] R13: 00007f8f2e426128 R14: 00007f8f2e426090 R15: 00007fff1d91ba08
[  451.189809][ T8531]  </TASK>
[  451.193672][ T8531] Kernel Offset: disabled
[  451.198044][ T8531] Rebooting in 86400 seconds..