last executing test programs:

1m41.024465745s ago: executing program 1 (id=24):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x180000000) (async)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000007c0)="17000000020001000002d68c5ee17688a200d3135447dd376874ae08bc447a32080300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff0601150039000000000000000002ffff02dfccebf6ba0008400300000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2127c3d0", 0xb8) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x2, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) (async, rerun: 32)
r4 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x20, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) (rerun: 32)
syz_usb_control_io$uac1(r4, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async, rerun: 64)
syz_usb_control_io(r4, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) (rerun: 64)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r5)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8b0f, &(0x7f0000000000)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async, rerun: 32)
syz_usb_control_io$uac1(r4, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
sendto$inet6(r3, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async, rerun: 32)
r6 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
pselect6(0x40, &(0x7f00000005c0)={0x9, 0xffff, 0x3, 0x1859, 0x2, 0xfffffffffffffff7, 0x8, 0x3}, &(0x7f0000000600)={0x1, 0x800, 0xa6, 0x400, 0xb6, 0x6, 0x800, 0x7}, &(0x7f0000000640)={0x8, 0x8000000000000000, 0x3, 0x9, 0x3d, 0x100000001, 0x7ff, 0xfffffffffffffff8}, &(0x7f0000000680)={0x0, 0x3938700}, &(0x7f0000000700)={&(0x7f00000006c0)={[0xc]}, 0x8}) (async)
getsockopt$inet_tcp_int(r6, 0x6, 0x24, 0x0, &(0x7f00000000c0)) (async)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f008, 0x23fd})
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000740)={{0x5c, @loopback, 0x4e20, 0x0, 'fo\x00', 0x4, 0x5, 0x59}, {@local, 0x4e24, 0x2, 0x101, 0x1}}, 0x44) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x41, 0xb5, 0xed, 0x8, 0xc72, 0x12, 0xb0f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xd, 0xf0, 0xdc, [{{0x9, 0x4, 0xac, 0x8, 0x0, 0xbd, 0x2, 0x7d, 0x8e}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x6, [{0xcf, &(0x7f00000000c0)=@string={0xcf, 0x3, "c00caa2c118610c32a7d5d98aba7cbb373b285bd7e39ea49d87ebab461ce5dd3d39c7d8da35700e010fd1f6820df0becdfa6c3e2b313729c475fbdc0e18fb0e6b80fa37aa378c062aa7f74fb5674d0ba665445febc651efde9af7d3116861c617c6dc0e41ff9525a2d1eb1f60cd4fc481da804cee28fb65565c288b453ffd2452e6d0a4ead14e56ca6f2cce1bb0854abb007c58f391729cccb4443cb921256acdc2e3e4640eb83f19646ec57d78e4ce3a8ed2fef69800632b2ba2bb586bce4da23d60bbe3e5c9a6b8b504181e0"}}, {0xdc, &(0x7f00000001c0)=@string={0xdc, 0x3, "123e3a0e3f1923cda5d5d2c169120fed7272ef9bc7e876459be4ad831ae8d621786c376a4bae12bfdea329c86d696e1475e8ae27f27b5ae8d9d9ffe5a8a965418bba4aa7882d87ab09f9ac147e2e95f8ae0366a30302c4eb81a15bfd652fa9206fdfc65ce97156c8f5f774ead66e18038d1cb6c83ffdb1e1c87c40cfb60af68e9d93ceb3c5679ed31c0d39a0ac7ef72b46f53608b140e6ca3fb78ffaafd439ae643fc750022b6f0d29e6e6bae1382a4d00f43c2640e54fdc3fc0068843d1915c64006e516ed16a7afe0fb5ed3b5954285ddbfba5f92af5ca1ab5"}}, {0x8e, &(0x7f00000002c0)=@string={0x8e, 0x3, "0889bc540b15482c94084a4de5bebb4209d6433f70422a3436cb289ed753bff59303b7c6855d2c2f2c4c31c119a3802364b2febaa41d3d15a80b5eacb5102cc1fe6d774e4f7c203de787d99fa8da74e0c59a1311a6159d8b868ab56fd0b1294b7063416b4527c1af54f23789d9c75747ea5460a2931a35d5a33d6d32dd1d9a81d5a92b5bb87ddac5b0d4dcb2"}}, {0xfc, &(0x7f0000000380)=@string={0xfc, 0x3, "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"}}, {0x99, &(0x7f0000000480)=@string={0xd0, 0x3, "f34898c622a1f31f61958260cced4800ec429d85420b24af8c966d884382859cd2dc6a462f8e759fbe6a2136432d0cb8a25c0557a20cfe9bedf519dc3433e819e0804f68322416744041da9eeb1c78a3e0950164803986db1f86ea339c5fbfc46c0be57c48ac736a0d89def006c0658a7ec8a5bb3e9652ed6cedaff430049fcdf4905d22f15a89ae1a2a8b2cebb188152b51b5f8b8d2d5"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x44a}}]})

1m39.49267297s ago: executing program 1 (id=33):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="4016cb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x10, 0x71, {0x71, 0xd, "0840d9d9f43d41c8c3ec2d0741c6a3dfd4b43cf9277f5e5a3d146cfd2ef58b2baac9e550fa2f17a7d1296635062bdd50a65022320cc963b568f267e7e9eba58e4c277281c5ece83a53bd9e11422039f264d644975a2c3bc7fb0c6773c8671a2418687503e85b403193dcde7c673053"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000180)={0x20, 0x31, 0x94, "d4f891589feb1858a6218ea1ad181ba492fd346164379500de43491997ac39b480a3904b3457b95ad6c08e826de2729d7e98dd25127764db75f16bd00daba3bbf7c83b152724196ce4407d32b1e6f0f3d91f2e3164cf8945678f4ed48b69e78b5898e845433c2f10e8e43e5f7545af9e016798e23a32bc6c18e36a5057d8e83c47ff06f9c4f6aea371da601d39c5fe443d669070"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x80}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="400fcd000000a0eb2b67fe100152116d8baadcabd24af2e9b48b274baba0b0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="001446"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m37.045074045s ago: executing program 1 (id=40):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x5c0a, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0}) (async, rerun: 64)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) (rerun: 64)
sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@canfd={{}, 0x2e, 0x0, 0x0, 0x0, "4e4e488e419039dda425818c34de45852abd1372621b404219373c9a72cdb611ef256a70bf66c39d7082f2809cbc3da9bb3c86e0c5e53cff15d561c53fe9ae3a"}, 0x48}}, 0x1) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)

1m35.784611932s ago: executing program 1 (id=43):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x8008af26, &(0x7f00000001c0))
chroot(&(0x7f00000000c0)='./file0/../file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x48, 0x1, 0x0, "b49e1b6225be4279fa07fbde4749573e7c17e6e724ae09b9424f5ab23870ecd4"})
pipe2$9p(&(0x7f0000001900)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000040)='smb3\x00', 0x820018, &(0x7f0000000500)='rdma')
r6 = dup(r5)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@afid}], [], 0x6b}})
chroot(&(0x7f0000000000)='./file0/../file0\x00')
pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00')
r7 = accept(r2, 0x0, &(0x7f0000000100))
ioctl$EXT4_IOC_MIGRATE(r7, 0x6609)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async)
ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x8008af26, &(0x7f00000001c0)) (async)
chroot(&(0x7f00000000c0)='./file0/../file0\x00') (async)
socket$netlink(0x10, 0x3, 0x0) (async)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x48, 0x1, 0x0, "b49e1b6225be4279fa07fbde4749573e7c17e6e724ae09b9424f5ab23870ecd4"}) (async)
pipe2$9p(&(0x7f0000001900), 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) (async)
mount(0x0, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000040)='smb3\x00', 0x820018, &(0x7f0000000500)='rdma') (async)
dup(r5) (async)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@afid}], [], 0x6b}}) (async)
chroot(&(0x7f0000000000)='./file0/../file0\x00') (async)
pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') (async)
accept(r2, 0x0, &(0x7f0000000100)) (async)
ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) (async)

1m35.545753859s ago: executing program 1 (id=44):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000880)=[@uexit={0x0, 0x18, 0x8000000000000001}, @wr_crn={0x46, 0x20, {0x0, 0x1}}, @wr_crn={0x46, 0x20, {0x2, 0x3fc}}, @out_dx={0xaa, 0x28, {0xc8bf, 0x5, 0x5}}, @code={0xa, 0x59, {"660f3838e966baf80cb81bc60584ef66bafc0cb002ee9766ba2100b03dee460f2b59d6c441f92f24640f01c8430f1c978fa8aadcf4c744240002010000c744240241000000ff2c24"}}, @cpuid={0x14, 0x18, {0x4f20000, 0x780}}, @uexit={0x0, 0x18, 0x8000000000000000}, @wr_drn={0x6e, 0x20, {0x3, 0x1000000006}}, @uexit={0x0, 0x18, 0x9}, @wr_crn={0x46, 0x20, {0x3, 0x2}}, @wr_drn={0x6e, 0x20, {0x0, 0x5}}, @wrmsr={0x1e, 0x20, {0xa7f, 0x9}}, @rdmsr={0x32, 0x18, {0xc001001f}}, @code={0xa, 0x7c, {"c744240080000000c74424027e73bb84ff2c24b805000000b9459060b30f01c1c4c199d2e7b93d0800000f3248b81dd9dc56000000000f23c80f21f8350000d0000f23f80f785c116f0f20e035000100000f22e0440f22c5470f01cf66baf80cb8a0ae3e82ef66bafc0ced"}}, @in_dx={0x82, 0x20, {0xea0f, 0x1}}], 0x255})
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f0000000540)={0xa3, 0x0, &(0x7f00000001c0)})
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3)
shutdown(r2, 0x2)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f0000000400))
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000880)=[@uexit={0x0, 0x18, 0x8000000000000001}, @wr_crn={0x46, 0x20, {0x0, 0x1}}, @wr_crn={0x46, 0x20, {0x2, 0x3fc}}, @out_dx={0xaa, 0x28, {0xc8bf, 0x5, 0x5}}, @code={0xa, 0x59, {"660f3838e966baf80cb81bc60584ef66bafc0cb002ee9766ba2100b03dee460f2b59d6c441f92f24640f01c8430f1c978fa8aadcf4c744240002010000c744240241000000ff2c24"}}, @cpuid={0x14, 0x18, {0x4f20000, 0x780}}, @uexit={0x0, 0x18, 0x8000000000000000}, @wr_drn={0x6e, 0x20, {0x3, 0x1000000006}}, @uexit={0x0, 0x18, 0x9}, @wr_crn={0x46, 0x20, {0x3, 0x2}}, @wr_drn={0x6e, 0x20, {0x0, 0x5}}, @wrmsr={0x1e, 0x20, {0xa7f, 0x9}}, @rdmsr={0x32, 0x18, {0xc001001f}}, @code={0xa, 0x7c, {"c744240080000000c74424027e73bb84ff2c24b805000000b9459060b30f01c1c4c199d2e7b93d0800000f3248b81dd9dc56000000000f23c80f21f8350000d0000f23f80f785c116f0f20e035000100000f22e0440f22c5470f01cf66baf80cb8a0ae3e82ef66bafc0ced"}}, @in_dx={0x82, 0x20, {0xea0f, 0x1}}], 0x255}) (async)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f0000000540)={0xa3, 0x0, &(0x7f00000001c0)}) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) (async)
shutdown(r2, 0x2) (async)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f0000000400)) (async)

1m35.274337423s ago: executing program 1 (id=46):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x2, 0x386, &(0x7f00000001c0)=ANY=[], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x3, &(0x7f0000000880)=@string={0x3, 0x3, "14"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x403}}, {0x1e, &(0x7f0000000900)=@string={0x1e, 0x3, "f23cf62142ceba918985f07eb0ae0d74c702b1c3c9e45850dd21e79a"}}, {0x79, &(0x7f0000000bc0)=@string={0x79, 0x3, "2a8bac66550c0fcf29df07c4c981015759a3e6c911813e7e83556dd0cf5acaa1c70b0ebad19992ed5ad3902e6de4a5fa482a571b960909cc5a32d248b0330d89ff3b5d203b1623644af4cafdeee4c24d311ff413fa4517935cee60ce469126179d57ae5956cb5c36feececeb48f1fd4fe9b59f9eaae72b"}}, {0xe, &(0x7f0000000980)=@string={0xe, 0x3, "32504c0271cf20e1e895fab5"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xfb, &(0x7f0000000a00)=@string={0xfb, 0x3, "6fd21711285133ddefedd7aaef99ca4829482b473adb0bfc4b1b38192a2ffd833c15afc9a15970edef7b5dea922a309f8944fde0fa9937b7105d93541aa22a920615dfe6b7f019b44f1806dd785ec6a571ce2de46decc905a134098bc3999e3d7ba852335a73349dd3bb5ad20f54313511ff054acb3b59eda8b36a6c3276bdbf8bcf2220bec6c36dc941b2b942a76cfc3b52ce0d53dd67b4cb8992b4463d6c015e2107040d8021e484d33a43a9ea42002b34bb985da5086313ddc1f68af98d14c78c9370f6d18fa05d45089f5dae22e25e68d65d95a3880d74132ba427f74c16d4ffce11b11f317b6693b9341410f4f1672b090fcb2ab35b9d"}}]})
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
io_setup(0x7, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
io_submit(0x0, 0x0, &(0x7f00000008c0))
io_pgetevents(0x0, 0x1, 0x2, &(0x7f0000000040)=[{}, {}], 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc1105511, &(0x7f0000000280)={{0x6, 0x0, 0x40, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x800000000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f000000028000", 0x2b}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a7916d12178651b69f849bfe114ae79e72f93c4829173295bf31f43bd1d62288c403eee7db47d164886c1fbb599665397adefcfe53401743b08ba4a79a7e140e09096a2c2354f66e94015f44215aa79ea38c482f4ec92b3552e7b6232db6f8736300d5845dc948128f60e4c1fd", 0xa7}], 0x2}, 0x4)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000007c0)}, 0x40)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000000000000020000001c00058008000140000000160800014000000021080001400000006c0900020073797a32000000000900010073797a3000"/72], 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="5118b3a6e3b941d2baafc35ac98ff357a8369b445395f4622129aef4a44cc0c7eba45ebe1ba5747482d2e56845af530b0020dd10443880dcbe87912a29d07c8a286401acce347632817a2e1054f051b24710d6f08cfb04c79bea9efde677bfa8d28b909b4da963932354674ac5943659924824be1f88205bbf9d1577374f7ce2de9ec52f99758daa"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write$nci(r5, 0x0, 0x0)
r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4)
fcntl$setsig(r7, 0xa, 0x13)
fcntl$setlease(r7, 0x400, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000780)={0x5, 0x1, 0x2, "1bea0484eaaa5b8e5395bca0eee7a3b49088788843e261643b0dd133c32c94ec", 0x4745504d})

1m35.058802521s ago: executing program 32 (id=46):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x2, 0x386, &(0x7f00000001c0)=ANY=[], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x3, &(0x7f0000000880)=@string={0x3, 0x3, "14"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x403}}, {0x1e, &(0x7f0000000900)=@string={0x1e, 0x3, "f23cf62142ceba918985f07eb0ae0d74c702b1c3c9e45850dd21e79a"}}, {0x79, &(0x7f0000000bc0)=@string={0x79, 0x3, "2a8bac66550c0fcf29df07c4c981015759a3e6c911813e7e83556dd0cf5acaa1c70b0ebad19992ed5ad3902e6de4a5fa482a571b960909cc5a32d248b0330d89ff3b5d203b1623644af4cafdeee4c24d311ff413fa4517935cee60ce469126179d57ae5956cb5c36feececeb48f1fd4fe9b59f9eaae72b"}}, {0xe, &(0x7f0000000980)=@string={0xe, 0x3, "32504c0271cf20e1e895fab5"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xfb, &(0x7f0000000a00)=@string={0xfb, 0x3, "6fd21711285133ddefedd7aaef99ca4829482b473adb0bfc4b1b38192a2ffd833c15afc9a15970edef7b5dea922a309f8944fde0fa9937b7105d93541aa22a920615dfe6b7f019b44f1806dd785ec6a571ce2de46decc905a134098bc3999e3d7ba852335a73349dd3bb5ad20f54313511ff054acb3b59eda8b36a6c3276bdbf8bcf2220bec6c36dc941b2b942a76cfc3b52ce0d53dd67b4cb8992b4463d6c015e2107040d8021e484d33a43a9ea42002b34bb985da5086313ddc1f68af98d14c78c9370f6d18fa05d45089f5dae22e25e68d65d95a3880d74132ba427f74c16d4ffce11b11f317b6693b9341410f4f1672b090fcb2ab35b9d"}}]})
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
io_setup(0x7, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
io_submit(0x0, 0x0, &(0x7f00000008c0))
io_pgetevents(0x0, 0x1, 0x2, &(0x7f0000000040)=[{}, {}], 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc1105511, &(0x7f0000000280)={{0x6, 0x0, 0x40, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x800000000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f000000028000", 0x2b}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a7916d12178651b69f849bfe114ae79e72f93c4829173295bf31f43bd1d62288c403eee7db47d164886c1fbb599665397adefcfe53401743b08ba4a79a7e140e09096a2c2354f66e94015f44215aa79ea38c482f4ec92b3552e7b6232db6f8736300d5845dc948128f60e4c1fd", 0xa7}], 0x2}, 0x4)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000007c0)}, 0x40)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000000000000020000001c00058008000140000000160800014000000021080001400000006c0900020073797a32000000000900010073797a3000"/72], 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="5118b3a6e3b941d2baafc35ac98ff357a8369b445395f4622129aef4a44cc0c7eba45ebe1ba5747482d2e56845af530b0020dd10443880dcbe87912a29d07c8a286401acce347632817a2e1054f051b24710d6f08cfb04c79bea9efde677bfa8d28b909b4da963932354674ac5943659924824be1f88205bbf9d1577374f7ce2de9ec52f99758daa"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
write$nci(r5, 0x0, 0x0)
r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4)
fcntl$setsig(r7, 0xa, 0x13)
fcntl$setlease(r7, 0x400, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000780)={0x5, 0x1, 0x2, "1bea0484eaaa5b8e5395bca0eee7a3b49088788843e261643b0dd133c32c94ec", 0x4745504d})

1m20.136409595s ago: executing program 4 (id=118):
r0 = epoll_create1(0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001001400018008000100e0000001080003"], 0x38}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = dup(r4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1, 0x20}, 0xc)
sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0xffff, 0x30}, 0xc)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x8}}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7}, 0x9c)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setregs(0xf, r6, 0xc, &(0x7f0000000040)="fb71e41c02c76d9a7448eb30f5cdef3e5fdd9c70a3fb411b154aa65976e7c9fac0759854214f048b0803bd18fe2c57fab05c8cdb84920c557fe6c89745f782b4abfbe4266d47f8ce27a3964349b6bd1c063db7d671ff21a48bf6ee131db6989977ae946bc7e4c119487647cdb15f1eea8b20a0d4bef0acdcac5c0c336a5b8a003c0d6adeb95e4814decab21dd7244a")
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000001c0))
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)

1m19.256480918s ago: executing program 4 (id=122):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r2, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b000000080002000000000008000200090000000700010069620000340002800800030064000000080004"], 0x2ac}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0xcc, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x9c, 0x6, "5d57ed326c5f12d4039c47e1910eb87e16822e84f93af1a03ed965adddc7c58a8fadabb494d81b371f9438669b2eea87b65998d6f71da19e93ac483c9ecba9ddfd429da1ea4a5a5d1e69f610c5a0785451806460a2b4b144d41abad9e6f5cbb5ea7ca06cb2a1e2a12d1243c4e6029cb5c6ce510eebc3c7aff6d759095081bb28c67795e636ec2b1c1caf82616fb8b208d4ce97d674d3558e"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x140}}, 0x0)
r3 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x9, "1252"}, @global=@item_4={0x3, 0x1, 0x5, "aa65274b"}]}}, 0x0}, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0x21, 0x5f, {0x5f, 0xc, "0af91774baa31dd47e514d23c8b61297d62100caad7e64cde21b16c066d84338ebb2d3e2c45bbc183bf5ea21f04bc9fbe2b8f0692fccb740923d01bbae3a22f221881e799b360b17b397c3206ddad55f7a0273b3522acfa8cad2f0ba65"}}, &(0x7f0000000040)={0x0, 0x3, 0x28, @string={0x28, 0x3, "683df708b08005cd804e036e1167b269b20ad7b38af8b465602cc43e8501e968fd59aaca8284"}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000440)={0x0, 0x13, 0xc4, "937aec2d81c1e1862ca5e12066b1740098b569541b5b09a076ae5891f116bacd6740b0c67d2ae1781729e1d86a414d81fe7f167288d52a00e9a444163ea791014bdbf8f3dc8e9df73d41c1dacdcc559b02400348f01367009e45006c90692fd851b50dd35ece18b2f6335f117e2d92aac12be8a1479a7c4d57491d215165fdfb160ebfbbaefa3db0a4e52c7337762ac290fab8ce646e82531d27c90821d345e2152cf58d27ec82b635c9bd778c278638b72c090c5c2586f3bdb19cb5d4547beedb32a747"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x67}, &(0x7f0000000540), &(0x7f0000000580)={0x40, 0x5, 0x1, 'w'}})

1m18.62652613s ago: executing program 4 (id=125):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e2306063302000000040002045817d30461bc24eeb556a705251e6182", 0x2c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e1209001800", 0x28}], 0x1}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="000802"], 0x0, 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006540)=[{{&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}], 0x1, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000001080)=ANY=[@ANYBLOB="4008ea"], 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil)
r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000140)={0x0, &(0x7f00000001c0)=[@cpuid={0x14, 0x18, {0xb, 0xde}}], 0x18})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40)
dup(r0)

1m15.554265217s ago: executing program 4 (id=142):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace(0x4210, r1)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x12, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r4=>0x0], 0x1})
r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2})
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285628, &(0x7f0000000080)={0x1, @sliced={0x5, [0x100, 0x1, 0x0, 0x9, 0x223c, 0x7, 0x8, 0x8, 0x9, 0xf, 0x9af9, 0x3ff, 0x6a, 0x0, 0x3, 0x0, 0xfff7, 0x7, 0x5, 0x8, 0x5, 0xc000, 0x95c, 0x3, 0x100, 0x9, 0x8, 0x7, 0x3ba, 0xe, 0x4, 0x6, 0x2ed, 0x40, 0xecaf, 0x6, 0x80, 0x8, 0xd, 0x1, 0x6, 0x6, 0x3, 0x8, 0x3, 0x7, 0x5, 0x7], 0x2}})
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}})
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, <r9=>0x0, 0x0, 0x0], &(0x7f00000000c0), 0x5, r4})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x6, r9, r2, 0xeeeeeeee})

1m15.220123332s ago: executing program 4 (id=144):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC=r0, @ANYRES32=r2, @ANYRES64=r0], 0x0) (async)
chdir(0x0)

1m12.106065341s ago: executing program 4 (id=157):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)

56.915774671s ago: executing program 33 (id=157):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)

5.94865017s ago: executing program 2 (id=499):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x7000000, &(0x7f0000000240)="02"}) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000940)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1040}], 0x0, 0x0, 0x0}) (async)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0, 0xfffffffffffffe9a})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) (async)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x4001, 0x0) (async)
r10 = getpgrp(0x0)
ptrace$setsig(0x4203, r10, 0x101, &(0x7f00000002c0)={0x3f, 0x0, 0x9})
ioctl$KVM_RUN(r9, 0xae80, 0x0)

5.751478301s ago: executing program 2 (id=500):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, &(0x7f0000000380))
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000700)=""/228, 0xe4}], 0x2}, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r5, 0x8000}, 0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000600)={r5, @in={{0x2, 0x4e23, @broadcast}}, 0x7, 0x2}, 0x90)

5.632621998s ago: executing program 2 (id=501):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/21, 0xfffffffffffffe08, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\"\x00\x00@'])
r5 = syz_io_uring_setup(0x224c, &(0x7f0000000440)={0x0, 0xd868, 0x20, 0x0, 0x297}, &(0x7f0000000200), &(0x7f0000000280))
syz_io_uring_setup(0x4006659, &(0x7f0000000040)={0x0, 0x8901, 0x80, 0x3, 0x205, 0x0, r5}, &(0x7f00000000c0), &(0x7f00000004c0))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff)
write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00"], 0x51)
close(r6)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

5.544484948s ago: executing program 0 (id=502):
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={0x0, 0x75, 0x17}, 0x0, &(0x7f0000000040)="acdcaf8736e2a3b9f60c406f410f20be86ef3b5d1286edff6c70e8f3fdf99dbdb61bafb77eef9d2e2e2e81be7715345a6855e13aba29b08c3dae1cee46153e39cf6fb8490cf20bb327a20287a269dbe32e37dd23791805dbe64a16640e0b296e7e73d0d614dbaa43b581a8a716a7e1ec9dd15da852", &(0x7f00000000c0)=""/23) (async)
syz_usb_connect(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x4b, 0x3, 0x9, 0x10, 0x1199, 0x9015, 0x992d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x7f, 0x7, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0x45, 0x83, 0xd6, 0x3}}, {{0x9, 0x4, 0x1, 0xe, 0x0, 0xff, 0xff, 0xff, 0x8}}, {{0x9, 0x4, 0x66, 0xc, 0x0, 0xff, 0xff, 0xff, 0x8}}]}}]}}, 0x0)

5.295792243s ago: executing program 5 (id=505):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) (async)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/187, 0xbb, 0x0)

4.427277128s ago: executing program 5 (id=508):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x64002}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100000000ffe70100008e1a767ae92dacef", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {<r5=>0xee01, 0xee01}}, './file0\x00'})
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="c0000000190002002dbd7000fbdbdf25ffffffff000000000000000000000000fc010000000000000000000000f2ffff4d2200084e23000902008020210000000167efffb5d67247a042f3a70741f70f75799b6aaa8f0b590f4908cfb6514faa43ddf2ac5fb4652fc29a1992aa2a4bfdaefbbe36917c3dca1aca62c770cd4760f77733d2cf47d14663e58ae112891ed6b66e02412766fb84d082267490f8ff40b99c502d0b356fea3822ca2913c1ccdd3c538c00148510c489fe01cbe07300899a6157db51c9a780332dfb72945a40c5293e9bebca789ee2", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="040000000000000001000000000000000700000000000000620b000000000000040000000000000002000000000000000700000000000000000000000000000006000000000000000080000000000000ed80340e00000000ff0f0000000000000400000000000000020003030000000008001d0000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x814}, 0x1)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002640)=ANY=[@ANYBLOB="3c0200001b000001", @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4084}, 0x4)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, 0x0, 0x0)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f00000000c0)=0x17, 0x4)
getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
listen(r9, 0x8ba)
setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32, @ANYRESOCT=r6, @ANYBLOB="fc020000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a2ff030b000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a462f8e61dd77935145b5f70fb55c29a40d13bae0ea8fc4c9727ab5225b5f26d55c240ddbe75d5e77be4ce884d85b05de11294c4597b6e4ec1036ba2ead30d79888135f66"], 0x120}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000080)

4.149707747s ago: executing program 0 (id=510):
init_module(&(0x7f0000000d80)=ANY=[], 0x778, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)
init_module(&(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xf9, 0x16, 0x1, 0x8, 0x2, 0x3e, 0x3, 0x43, 0x40, 0x156, 0x9, 0xa9, 0x38, 0x1, 0x81, 0x3, 0x6}, [{0x70000000, 0x68a, 0xfffffffffffffffc, 0x8, 0x6, 0x100000001, 0x1, 0x6}], "c253fe047950d9f37d72ac3b8282de0f10ae7ad2c8175513bf89954b236ed47b4b57c8408058af74919d8ed16fb4963ab23cf462949006b06f6946e48899511f394adf88139efb647e98af94e7a3af785db8f087877a2edabcc5e2225d4bfa1f58f0872aaef7c86ba2c3651630f86a3ea4154b50dbf0ce667240e5423a35efe10118966d3a2f9b7adb552bcde2e15299e871953794c627d0c18ad54c5cb966c7a6df314978de121287845f0687424eedf3d5e92885e4c89cc80b95ca6b26f5c3f0b8c23d5534d22d982fe779ae2071f672e73018dda925caf4af422ea5a394fcd34cb9c1c9cd99", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa5f, &(0x7f0000000b80)='\x15ixA\x12-\x02\x00&\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000bc0)={{0x7f, 0x45, 0x4c, 0x46, 0xf8, 0x6, 0x4, 0x2, 0x9, 0x3, 0x3, 0x5, 0x203, 0x40, 0x10a, 0x9, 0x7, 0x38, 0x4, 0xffa2, 0x6, 0x5}, [{0x6, 0x8, 0x1199, 0x0, 0x3, 0x7, 0x4, 0xf5ac}, {0x4, 0x4, 0x6, 0x8, 0x8, 0x6, 0x6, 0x94fb}, {0x6, 0x5, 0x0, 0x8, 0x10, 0x8, 0x9, 0x1}, {0x6474e551, 0x5, 0x7, 0xa95, 0x9, 0x6, 0x2, 0x2}], "838caef3ebfc88382ec8ead5f0ef7b6a961299d3ff1d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb36)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @mcast1, 0x2}, 0x1c)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)

3.728325253s ago: executing program 5 (id=511):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid() (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8e000, 0x0) (async)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002ad001"], 0x0}, 0x0) (async)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
signalfd4(r2, &(0x7f0000000200), 0x8, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x300, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
vmsplice(r1, 0x0, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$reject(0x13, 0x0, 0x7, 0x7636, r4) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = getpgrp(0xffffffffffffffff)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) (async)
r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'veth1_vlan\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x32, 0xb, 0x6, {0x0, @hdata="c3b467aca79221c2e4d626bfd283e0a10e23d2fa504990e9ce34004c56937b82a7c45294652cad4e6b3175264e735c411738e756", {0x0, @remote, 0x7f, 0xb6, [0x8, 0x7]}, @esp_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x9, 0x40}, {0x0, @link_local, 0x5, 0xd6, [0x1ff, 0x8]}, 0xad, 0xf1}}}) (async)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
ioctl$SG_GET_SG_TABLESIZE(r8, 0x227f, &(0x7f00000000c0)) (async)
kcmp$KCMP_EPOLL_TFD(r5, r0, 0x7, r7, &(0x7f0000000100)={r6, r8, 0xa08}) (async)
fcntl$addseals(r6, 0x409, 0x4) (async)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0)

3.52036814s ago: executing program 5 (id=512):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000180)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x4, @private2, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000000c0)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40)
shutdown(r2, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0x7d, &(0x7f00000001c0)={0xb, 0x1c, 0x5, 0x8, 0x6, 0x8, 0xff, 0x6, 0x49, 0x77, 0x38, 0x5, 0xff, 0x6}, 0xe)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000040)="b9d00800000f32dbf0b9800000c00f3235004000000f30f30f168305000000c744240004d50000c744240236000000c7442406000000000f011424660f3a0e2fa60fc73d00000000b8846c00000f23d00f21f8350000000f0f23f8d21066672e3664c18408004b", 0x67}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.311251292s ago: executing program 5 (id=514):
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xed, 0xf5, 0x13, 0x20, 0xc45, 0x624f, 0x6437, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd, 0x6, 0x28, 0x9, [{{0x9, 0x4, 0x68, 0x43, 0x0, 0x73, 0x60, 0x83, 0x2}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) (rerun: 32)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0xfffffffffffffffc, 0x8, 0x694e7ff9, 0xfffffffe}) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0)

2.706638778s ago: executing program 0 (id=516):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x8, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x3, 0x1, 0x8, 0x6, 0x9, 0x7, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x0, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x22], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1ff, 0x2a0, 0x5, 0x6, 0x8, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x3, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xfffffdbf)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
r4 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='utf8', &(0x7f00000001c0)='\x00\x00\xf2qE', 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r6 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000200)=ANY=[@ANYRES64=r1, @ANYRES32=r5, @ANYRESDEC=r1, @ANYBLOB="5f9be8f7036d71f927d6e3753635b678bd9dc5406d0efc68690d1b8b44f50f02d9"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=ANY=[@ANYBLOB="180000004100070100000000fcdbdf250900000300000000"], 0x18}}, 0x4010)
syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="20052c0000002c02672039a31cda2d6573727a8cd32651318aa8ec87d76a1b1d7b55b3e4ebcb018440901bde25dc02000000acb55b2778"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r8, 0x5408, &(0x7f00000000c0)={0x2, 0x4ce, 0x5, 0x9dff, 0xf, "000300eb00cbe600"})
write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xff2e)
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000280)=0x2, 0x4)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x4, 0xe6, 0x0, 0x5, 0x0, "0062ba7682000000000000000000f7ffffff00"})
r9 = syz_open_pts(r8, 0x0)
r10 = dup3(r9, r8, 0x0)
ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x17)
ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000080)=0xa)
sendto$unix(r10, &(0x7f0000000080)="3c9e8b38605c974fa31ea8f3edff6e46e41a40e4ceb2e415748be1e1ebf63000f758e656e797", 0x26, 0x20000000, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

2.589919571s ago: executing program 2 (id=517):
syz_usb_connect(0x3, 0x229, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xec, 0x6e, 0xab, 0x40, 0x2040, 0x8265, 0xab1b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x217, 0x2, 0x4, 0x4, 0x40, 0xa, [{{0x9, 0x4, 0x4c, 0x5, 0x6, 0xbc, 0xe8, 0x4a, 0x3, [@uac_as], [{{0x9, 0x5, 0xc, 0x3, 0x20, 0x80, 0x22, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x82, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x3, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x3}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x0, 0x1, 0x9, [@generic={0xc4, 0xb, "c9f43ddfa1b7b4a824c083a70d34296a693fe9d6dc6d94de28d2c88ee6033e23bc78849fbf2d211347bfe6d5b30ffca2073e80ff605fe9b58b253b48900dbd2aaf527bb9193c5a10f5238006fa7d206092fe8a071e016e19701b400af64f0ce5389cc4314f65ac4e4f107265a056d6351896dba21c63580b6f4f6fd35d10bf40e85f08728924d0c5df0dbe3677c8037c56bb020c2eccbbebeebedd58f9b2e823e8f2ffd9a2cf221e8bdb61fabe8f572d12a0f4fc2f9f6410c037368ef850b812926f"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x9, 0x31, 0x8, [@generic={0xed, 0x5, "d3c185a7530f109fe332617db373cf3b4c30bd68126c84d570fbe26afb5215abf0a24eca969d1d51d393bae84a8ab1ba88c0a5b06368e613ce4199f565e78ceea5009d85a56f4297a0392d0c6740906aaca553d4a59ed9a0c754a22436ef8a9caedd033dc33358b3f603d0a5ed6445ca7a1f304ecd4c83c26ef914c48d68a1954a42e36cd6e42b0a77fbcf0fd78348fda93b0310ab1d3b73a6d5153d6261f4a5a2324ebc7a9f73d399c4b440a463297842ed69a9b26b8f1d01cb71b225758e297cf6a196f3100b33cab5964a39162340f68e3e4c416f388fa47b1752bce466b2a0b293176838cd499626c1"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0xf, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}]}}]}}, {{0x9, 0x4, 0xac, 0x7, 0x0, 0x30, 0x68, 0x67, 0x18}}]}}]}}, 0x0)

2.088339013s ago: executing program 3 (id=522):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="030000000000000066bc76199a163f0eddddf1016702ce493cda0e881ff98981dd8a8c03a5863e2e03cabfb948e580ec21d30fc8fa41951f8da0040aa7edbbac"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000580)={0x20, 0xc, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0}, 0x0)

1.953925546s ago: executing program 0 (id=523):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r1 = socket$unix(0x1, 0x1, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async)
writev(r2, &(0x7f0000003500)=[{&(0x7f00000035c0)='4', 0x1}], 0x1)
setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async)
listen(r5, 0x3) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async)
r7 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x110, 0xe, "8f85"}], 0x18}, 0x0) (async)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r8=>0x0})
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$EXT4_IOC_GETSTATE(r9, 0x4008af25, &(0x7f0000000080)) (async)
sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x3c, r0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x21}, @NL80211_ATTR_MAC={0xa, 0x6, @random="96ad00"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48051}, 0x80)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) (async)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000003c40), 0x0, 0x0) (async)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) (async)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2)

1.758643663s ago: executing program 0 (id=524):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r0 = open$dir(&(0x7f0000000000)='./bus\x00', 0x4100, 0x12a)
move_mount(r0, &(0x7f0000000100)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x104) (async, rerun: 64)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) (async, rerun: 64)
chdir(&(0x7f0000000240)='./file0\x00')
add_key(&(0x7f0000001540)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) (async)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 32)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 32)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000080), 0x420000, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

1.744598696s ago: executing program 0 (id=525):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x2, 0xef, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x3, 0x1, 0x40, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xf3}, [@extension_unit={0x7, 0x24, 0x8, 0x6, 0x0, 0xc3}, @extension_unit={0x8, 0x24, 0x8, 0x5, 0x0, 0x0, '7'}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x6, 0x1, [0x2], 0xa7}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x4, 0x1, [0x7], 0xe0}, @selector_unit={0xb, 0x24, 0x5, 0x1, 0x1, '6CX\ndt'}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x6f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x5, 0x7, "", "176230"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x4, 0xb0dc, 0x3, "0dcc890f3784efdd"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x0, 0xe7, "ed0a7e15b6e3228cd9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x10, 0x5, 0x8, {0x7, 0x25, 0x1, 0x2, 0x28, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x3, 0x4}, @as_header={0x7, 0x24, 0x1, 0x5, 0x1, 0x1001}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xcf, 0x1, 0x0, 0x2, "00e0"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xc, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x8, 0x81, {0x7, 0x25, 0x1, 0x0, 0x67, 0xfffa}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x6, 0x9, 0xf, 0x40, 0x6}, 0xf0, &(0x7f0000000180)={0x5, 0xf, 0xf0, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "c8412f94e94d0d6d29fd790f3a6918d4"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x1, 0xc2, 0x800}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x2, 0x84}, @generic={0xc0, 0x10, 0xb, "7dca670dd2647c9e3aeaf248f58417bb4b84d7e6a4efe0fbca7fc41a4d647300a2d34050576256de5e5a6d941a60a399378cf16d175a9408fee471ca71c9c6e8492420f86e7697838683a7b501363d6e8a33fa1ddcbbad8a4c3d61584a63774f99ff3b39105486cf2861444e587f7d542f4cca2c2e7faa59ae842307884389c3210b09dd47812af8cde85892fe1d161fb0f023542abe9cc90619d181f3c09a4145b8c8b58c6ca7c3b8b92965f77310d38dfce906fab1ec618d15367721"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x280a}}]})
r1 = syz_usb_connect$uac1(0x3, 0x101, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x3, 0x1, 0x96, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x5, 0x6, 0xe1}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x4, 0x1, [0xa], 0x6}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x1, 0x6, [0x8, 0x7, 0x3, 0x7, 0x6, 0x7], 0x87}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x1, 0x9, 0x5, 0x4, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x3, 0x2, 0xb1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x9, 0x5, 0x8, "310bd60ad0deb9"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x3, 0x6, '} '}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9b, 0x8, 0x2, {0x7, 0x25, 0x1, 0x1, 0x40, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x6, 0x4, "d02056"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0xf000, 0x2, "158736602494049cc6"}, @as_header={0x7, 0x24, 0x1, 0xd2, 0x3}, @as_header={0x7, 0x24, 0x1, 0x7, 0x0, 0x5}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x62, 0x4, 0xb, 0x80}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xff, 0x1, 0x7, 0x3, "d3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x9, 0x7, {0x7, 0x25, 0x1, 0x0, 0x1, 0xfff4}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x300, 0x6, 0x4, 0x2, 0x20, 0x1}, 0xf0, &(0x7f0000000640)={0x5, 0xf, 0xf0, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "a8153456d258023cbd8905174c1d7d11"}, @ptm_cap={0x3}, @generic={0xca, 0x10, 0xc, "b6732e29f9057badb47539dbdc3154c8e472b625e278d59c631c9cfc809d0112360888ebc370d3969a273ee89b85045c691bece62f89586e0bdbc25c69b65b2c87d86385ff2c85e90274dd09801e57df371fada67ec7bdb3a2a567ff0e0d1587abdec10800c280ed866463721d398cfb1fa6421abf4a9deaa6c0d022ce6194cda2e38fb0ca92db1a2d803b318fb013be0441be845dfbcaaaaa859b20b0453b8398168d16cf3e0e23ea325e55fcc4d4ede38b8e2af58ed7660c2ab3eb9d79d06bc15e180d8f506d"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x81, 0xe5, 0x1}]}, 0x3, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x423}}, {0x10, &(0x7f0000000580)=@string={0x10, 0x3, "787fb8f4cfca95faa53aff03d65a"}}]})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x0, 0x8, 0x2, "1145"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x82, 0x2, "8370"}, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)={0x40, 0x14, 0x3, "b7618f"}, 0x0, 0x0, 0x0, 0x0})

1.48206727s ago: executing program 3 (id=526):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
semctl$IPC_INFO(0xffffffffffffffff, 0x2, 0x3, 0x0)
bind$vsock_stream(r0, &(0x7f0000000940), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000002c40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ffff7f00fcdbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000000000014001180040002"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x40810)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r6, 0x4068aea3, &(0x7f0000000180)={0xcc, 0x0, 0x8001})
close(0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)='?', 0x1}], 0x1)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0x10)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_GET_FEATURES(r9, 0x8008af00, 0xffffffffffffffff)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000400)={0x20, 0x6, 0x22, "b8e91fc54f7a288aa2215a47373369484c152d346f35298223543756aec9e029ab46"}, 0x0, 0x0})
syz_usb_control_io$hid(r8, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r10, &(0x7f0000000400)={@void, @void, @eth={@empty, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_uc={0x8847, {[], @ipv4=@generic={{0x6, 0x4, 0x2, 0x8, 0x18, 0x65, 0x0, 0x4c, 0x21, 0x0, @broadcast, @rand_addr=0x64010100, {[@noop]}}}}}}}}, 0x2a)

1.06858082s ago: executing program 2 (id=527):
write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0014f9f4070009040081000000000140", 0x17)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x804, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}, 0x1c)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000080)})
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0x0, 0x7})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x4, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0xd10, 0x2, 0xf7, 0x0, 0x7f, 0xc], 0x80a0000, 0x2010d3})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

931.58439ms ago: executing program 2 (id=528):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_NOTEON})
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000001000a5a898bfed26a98734bc569a8700810000"])
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

739.848334ms ago: executing program 3 (id=529):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000a0200000000000009"])
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x369680, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xab)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x7d)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x81)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0x980901, 0x3, @value=0x140000000000})

583.801452ms ago: executing program 3 (id=530):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)

579.910306ms ago: executing program 3 (id=531):
r0 = syz_usb_connect(0x5, 0x1b, &(0x7f0000001c80)={{0x12, 0x1, 0x300, 0x52, 0x70, 0x74, 0x8, 0x2040, 0xd864, 0x8038, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x8, 0x6, 0x0, 0x22}}]}}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

240.599796ms ago: executing program 5 (id=532):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c1f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x4, "b9"}]}}, 0x0}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0xcc9d, @remote, 0x4}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000015009900000008000300", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000))
ioctl(r4, 0x8b2c, &(0x7f0000000040))
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, 0xffffffffffffffff, 0x100000000)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x10000, 0x12)
syz_usb_connect(0x3, 0x69, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000317643108210900121bf60102030109025700020c00500a0904540a01b3400a0409050d10400006590409046edf010206000b092101000301224f00092406a7188f001e5b13c60f052400acf30d240f"], &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x9, 0x0, 0xff, 0x8, 0x3}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x4f, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x0)

0s ago: executing program 3 (id=533):
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43)
ftruncate(r4, 0x2007ffb)
sendfile(r4, r4, 0x0, 0x1000000201005)
r5 = openat(r3, &(0x7f0000000180)='./bus\x00', 0x88882, 0x8)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
sendfile(r6, r5, 0x0, 0x7ffff000)
fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0)
r7 = add_key$user(&(0x7f0000006400), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000006900)='\x00', 0x18, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})

kernel console output (not intermixed with test programs):

get: fail, usb_gadget_register_driver returned -16
[  137.986180][ T5955] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  137.995510][ T5955] usb 3-1: config 129 has no interface number 1
[  138.027733][   T24] dvb-usb: found a 'DiBcom STK7700D reference design' in warm state.
[  138.033580][ T4629] Bluetooth: (null): Invalid header checksum
[  138.062313][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  138.076381][ T5955] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  138.097489][   T24] dvbdev: DVB: registering new adapter (DiBcom STK7700D reference design)
[  138.103531][ T5955] usb 3-1: config 129 interface 135 has no altsetting 0
[  138.116059][   T24] usb 1-1: media controller created
[  138.145956][   T12] Bluetooth: (null): Invalid header checksum
[  138.171585][ T5955] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  138.181185][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.190742][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  138.195389][ T5955] usb 3-1: Product: syz
[  138.212397][ T5955] usb 3-1: Manufacturer: syz
[  138.218924][ T5955] usb 3-1: SerialNumber: syz
[  138.247921][ T4629] Bluetooth: (null): Invalid header checksum
[  138.358987][   T49] Bluetooth: (null): Invalid header checksum
[  138.416187][   T24] DVB: Unable to find symbol dib7000p_attach()
[  138.424298][   T24] dvb-usb: no frontend was attached by 'DiBcom STK7700D reference design'
[  138.445738][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  138.476131][   T24] dvbdev: DVB: registering new adapter (DiBcom STK7700D reference design)
[  138.484790][   T24] usb 1-1: media controller created
[  138.493424][ T6789] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  138.534180][ T6789] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  138.560530][   T12] Bluetooth: (null): Invalid header checksum
[  138.581448][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  138.590163][   T12] Bluetooth: (null): Invalid header checksum
[  138.596821][ T6789] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  138.662944][ T6789] overlayfs: d_ino too big (45, ino=9223372036854776050, xinobits=2)
[  138.693541][   T60] Bluetooth: (null): Invalid header checksum
[  138.765641][ T5955] au0828: au0828: Device initialization failed.
[  138.775347][ T5955] au0828: au0828: Device must be connected to a high-speed USB 2.0 port.
[  138.799372][   T60] Bluetooth: (null): Invalid header checksum
[  138.816854][   T24] DVB: Unable to find symbol dib7000p_attach()
[  138.823107][   T24] dvb-usb: no frontend was attached by 'DiBcom STK7700D reference design'
[  138.826355][ T5955] usb 3-1: USB disconnect, device number 26
[  138.910036][ T4629] Bluetooth: (null): Invalid header checksum
[  139.015831][   T24] rc_core: IR keymap rc-dib0700-rc5 not found
[  139.018592][   T12] Bluetooth: (null): Invalid header checksum
[  139.025791][   T24] Registered IR keymap rc-empty
[  139.051158][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.070693][   T24] dvb-usb: could not initialize remote control.
[  139.086035][   T24] dvb-usb: DiBcom STK7700D reference design successfully initialized and connected.
[  139.126039][   T24] usb 1-1: USB disconnect, device number 32
[  139.130637][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.144007][ T4629] Bluetooth: (null): Invalid header checksum
[  139.160850][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.173111][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.188475][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.199381][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.226068][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.243763][   T12] Bluetooth: (null): Invalid header checksum
[  139.252208][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.272415][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.282416][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.297265][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.303250][   T24] dvb-usb: DiBcom STK7700D reference design successfully deinitialized and disconnected.
[  139.340329][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.355096][   T12] Bluetooth: (null): Invalid header checksum
[  139.458027][   T60] Bluetooth: (null): Invalid header checksum
[  139.521619][ T6811] binder: 6810:6811 ioctl c0306201 200000000080 returned -14
[  139.586304][ T4629] Bluetooth: (null): Invalid header checksum
[  139.686576][   T60] Bluetooth: (null): Invalid header checksum
[  139.797369][   T60] Bluetooth: (null): Invalid header checksum
[  139.828952][ T5955] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  139.918346][   T60] Bluetooth: (null): Invalid header checksum
[  140.001147][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.027259][ T5955] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  140.037657][   T12] Bluetooth: (null): Invalid header checksum
[  140.069887][ T5955] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99
[  140.085736][ T5955] usb 3-1: New USB device strings: Mfr=227, Product=2, SerialNumber=3
[  140.112836][ T5955] usb 3-1: Product: syz
[  140.117428][ T5955] usb 3-1: Manufacturer: syz
[  140.122336][ T5955] usb 3-1: SerialNumber: syz
[  140.137917][   T49] Bluetooth: (null): Invalid header checksum
[  140.149352][ T5955] usb 3-1: config 0 descriptor??
[  140.246464][   T12] Bluetooth: (null): Invalid header checksum
[  140.357550][   T12] Bluetooth: (null): Invalid header checksum
[  140.385407][ T6813] syz.2.218 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  140.466383][   T49] Bluetooth: (null): Invalid header checksum
[  140.576328][   T60] Bluetooth: (null): Invalid header checksum
[  140.692634][   T49] Bluetooth: (null): Invalid header checksum
[  140.798191][   T60] Bluetooth: (null): Invalid header checksum
[  140.910821][   T12] Bluetooth: (null): Invalid header checksum
[  141.019145][   T60] Bluetooth: (null): Invalid header checksum
[  141.128420][   T60] Bluetooth: (null): Invalid header checksum
[  141.255249][ T4629] Bluetooth: (null): Invalid header checksum
[  141.356085][ T4629] Bluetooth: (null): Invalid header checksum
[  141.467165][   T12] Bluetooth: (null): Invalid header checksum
[  141.578065][ T4629] Bluetooth: (null): Invalid header checksum
[  141.661232][ T5955] usb 3-1: USB disconnect, device number 27
[  141.696226][ T4629] Bluetooth: (null): Invalid header checksum
[  141.807826][ T4629] Bluetooth: (null): Invalid header checksum
[  141.916450][   T60] Bluetooth: (null): Invalid header checksum
[  141.985641][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  141.996847][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  142.006917][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  142.017263][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  142.026478][ T4629] Bluetooth: (null): Invalid header checksum
[  142.033606][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  142.137843][   T60] Bluetooth: (null): Invalid header checksum
[  142.249503][ T1040] Bluetooth: (null): Invalid header checksum
[  142.362893][   T60] Bluetooth: (null): Invalid header checksum
[  142.462125][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.475351][   T36] Bluetooth: (null): Invalid header checksum
[  142.577008][   T12] Bluetooth: (null): Invalid header checksum
[  142.649363][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.697042][ T1040] Bluetooth: (null): Invalid header checksum
[  142.816525][   T36] Bluetooth: (null): Invalid header checksum
[  142.896477][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.933851][ T4629] Bluetooth: (null): Invalid header checksum
[  142.973149][ T6893] RDS: rds_bind could not find a transport for fe88::201, load rds_tcp or rds_rdma?
[  143.043088][ T4629] Bluetooth: (null): Invalid header checksum
[  143.070716][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.147880][ T4629] Bluetooth: (null): Invalid header checksum
[  143.256526][   T36] Bluetooth: (null): Invalid header checksum
[  143.272770][ T6857] chnl_net:caif_netlink_parms(): no params data found
[  143.367301][   T36] Bluetooth: (null): Invalid header checksum
[  143.398056][   T49] bridge_slave_1: left allmulticast mode
[  143.414075][   T49] bridge_slave_1: left promiscuous mode
[  143.433349][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.470748][   T49] bridge_slave_0: left allmulticast mode
[  143.477210][   T49] bridge_slave_0: left promiscuous mode
[  143.483363][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.493222][   T36] Bluetooth: (null): Invalid header checksum
[  143.587535][ T4629] Bluetooth: (null): Invalid header checksum
[  143.696125][ T4629] Bluetooth: (null): Invalid header checksum
[  143.747283][ T6913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.756594][ T6913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.805789][   T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  143.808465][ T4629] Bluetooth: (null): Invalid header checksum
[  143.916098][   T36] Bluetooth: (null): Invalid header checksum
[  143.987438][   T24] usb 1-1: Using ep0 maxpacket: 8
[  144.015153][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  144.029414][   T12] Bluetooth: (null): Invalid header checksum
[  144.051845][   T24] usb 1-1: config 0 has an invalid interface number: 65 but max is 0
[  144.067932][   T24] usb 1-1: config 0 has no interface number 0
[  144.082191][   T24] usb 1-1: config 0 interface 65 has no altsetting 0
[  144.115927][ T5182] Bluetooth: hci2: command tx timeout
[  144.122266][   T24] usb 1-1: New USB device found, idVendor=052b, idProduct=1911, bcdDevice= 1.00
[  144.137678][   T12] Bluetooth: (null): Invalid header checksum
[  144.150700][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.170967][   T24] usb 1-1: Product: п
[  144.183180][   T24] usb 1-1: SerialNumber: syz
[  144.207086][   T24] usb 1-1: config 0 descriptor??
[  144.257877][   T60] Bluetooth: (null): Invalid header checksum
[  144.350676][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.367345][ T1040] Bluetooth: (null): Invalid header checksum
[  144.374809][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.387911][   T49] bond0 (unregistering): Released all slaves
[  144.420427][   T24] usb-storage 1-1:0.65: USB Mass Storage device detected
[  144.444672][   T24] usb-storage 1-1:0.65: Quirks match for vid 052b pid 1911: 20
[  144.481024][   T12] Bluetooth: (null): Invalid header checksum
[  144.579264][   T24] usb 1-1: USB disconnect, device number 33
[  144.595337][   T12] Bluetooth: (null): Invalid header checksum
[  144.693767][ T6946] netlink: 'syz.2.234': attribute type 21 has an invalid length.
[  144.707236][   T60] Bluetooth: (null): Invalid header checksum
[  144.710606][ T6946] netlink: 128 bytes leftover after parsing attributes in process `syz.2.234'.
[  144.764985][ T6946] netlink: 'syz.2.234': attribute type 6 has an invalid length.
[  144.794273][ T6946] netlink: 3 bytes leftover after parsing attributes in process `syz.2.234'.
[  144.808752][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.817130][   T60] Bluetooth: (null): Invalid header checksum
[  144.827683][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.859277][ T6857] bridge_slave_0: entered allmulticast mode
[  144.879468][ T6857] bridge_slave_0: entered promiscuous mode
[  144.900463][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.912506][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.921857][ T6857] bridge_slave_1: entered allmulticast mode
[  144.932736][   T60] Bluetooth: (null): Invalid header checksum
[  144.954952][ T6857] bridge_slave_1: entered promiscuous mode
[  145.038032][   T36] Bluetooth: (null): Invalid header checksum
[  145.148236][   T36] Bluetooth: (null): Invalid header checksum
[  145.166446][  T980] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  145.215623][   T49] hsr_slave_0: left promiscuous mode
[  145.238700][   T49] hsr_slave_1: left promiscuous mode
[  145.247300][ T6962] I/O error, dev loop0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  145.259746][   T60] Bluetooth: (null): Invalid header checksum
[  145.267791][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.275624][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.284367][ T6962] qnx4: unable to read the superblock
[  145.293348][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.301125][  T980] usb 3-1: device descriptor read/64, error -71
[  145.321175][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.368301][ T1040] Bluetooth: (null): Invalid header checksum
[  145.408262][   T49] veth1_macvtap: left promiscuous mode
[  145.427223][   T49] veth0_macvtap: left promiscuous mode
[  145.437741][   T49] veth1_vlan: left promiscuous mode
[  145.448965][   T49] veth0_vlan: left promiscuous mode
[  145.479104][   T12] Bluetooth: (null): Invalid header checksum
[  145.555771][  T980] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  145.594391][   T36] Bluetooth: (null): Invalid header checksum
[  145.708221][   T36] Bluetooth: (null): Invalid header checksum
[  145.722729][  T980] usb 3-1: device descriptor read/64, error -71
[  145.806544][   T60] Bluetooth: (null): Invalid header checksum
[  145.836227][  T980] usb usb3-port1: attempt power cycle
[  145.916180][   T36] Bluetooth: (null): Invalid header checksum
[  146.038086][   T12] Bluetooth: (null): Invalid header checksum
[  146.150053][   T36] Bluetooth: (null): Invalid header checksum
[  146.203920][ T6984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.205904][  T980] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  146.219485][ T6984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.223189][ T5182] Bluetooth: hci2: command tx timeout
[  146.251107][   T36] Bluetooth: (null): Invalid header checksum
[  146.267325][  T980] usb 3-1: device descriptor read/8, error -71
[  146.363079][   T12] Bluetooth: (null): Invalid header checksum
[  146.476726][   T12] Bluetooth: (null): Invalid header checksum
[  146.536388][  T980] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  146.576624][  T980] usb 3-1: device descriptor read/8, error -71
[  146.602520][   T36] Bluetooth: (null): Invalid header checksum
[  146.642699][   T49] team0 (unregistering): Port device team_slave_1 removed
[  146.679801][   T49] team0 (unregistering): Port device team_slave_0 removed
[  146.687772][  T980] usb usb3-port1: unable to enumerate USB device
[  146.710628][   T36] Bluetooth: (null): Invalid header checksum
[  146.828774][   T12] Bluetooth: (null): Invalid header checksum
[  146.946288][   T36] Bluetooth: (null): Invalid header checksum
[  147.074465][   T36] Bluetooth: (null): Invalid header checksum
[  147.114301][ T6857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.131561][ T6857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.166786][   T36] Bluetooth: (null): Invalid header checksum
[  147.195356][ T6857] team0: Port device team_slave_0 added
[  147.205061][ T6857] team0: Port device team_slave_1 added
[  147.285138][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.286453][ T1040] Bluetooth: (null): Invalid header checksum
[  147.293688][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  147.327074][ T6857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.358752][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.367024][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  147.392934][    C0] vkms_vblank_simulate: vblank timer overrun
[  147.400157][ T6857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.406248][ T4629] Bluetooth: (null): Invalid header checksum
[  147.496535][ T6857] hsr_slave_0: entered promiscuous mode
[  147.503491][ T6857] hsr_slave_1: entered promiscuous mode
[  147.507074][   T12] Bluetooth: (null): Invalid header checksum
[  147.511791][ T6857] debugfs: 'hsr0' already exists in 'hsr'
[  147.537522][ T6857] Cannot create hsr debugfs directory
[  147.606929][ T1040] Bluetooth: (null): Invalid header checksum
[  147.716355][ T1040] Bluetooth: (null): Invalid header checksum
[  147.841037][   T12] Bluetooth: (null): Invalid header checksum
[  147.953468][ T1040] Bluetooth: (null): Invalid header checksum
[  148.010453][ T7015] QAT: failed to copy from user cfg_data.
[  148.025414][ T7015] netlink: 'syz.0.245': attribute type 8 has an invalid length.
[  148.033442][ T6857] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  148.058582][ T1040] Bluetooth: (null): Invalid header checksum
[  148.082829][ T6857] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  148.096906][ T6857] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  148.119757][ T6857] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  148.167899][ T1040] Bluetooth: (null): Invalid header checksum
[  148.278755][ T5182] Bluetooth: hci2: command tx timeout
[  148.307040][   T12] Bluetooth: (null): Invalid header checksum
[  148.363360][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.370902][   T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  148.398812][   T12] Bluetooth: (null): Invalid header checksum
[  148.433585][ T7033] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  148.449142][ T6857] 8021q: adding VLAN 0 to HW filter on device team0
[  148.466177][ T7033] overlayfs: maximum fs stacking depth exceeded
[  148.488995][ T5947] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  148.495482][ T4629] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.504112][ T4629] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.508691][   T49] Bluetooth: (null): Invalid header checksum
[  148.523440][ T4629] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.530725][ T4629] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.558631][   T24] usb 3-1: config 0 has an invalid descriptor of length 232, skipping remainder of the config
[  148.582191][   T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  148.614166][   T49] Bluetooth: (null): Invalid header checksum
[  148.614698][   T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb
[  148.658814][ T5947] usb 1-1: config index 0 descriptor too short (expected 539, got 27)
[  148.666474][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.668768][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 64
[  148.675207][   T24] usb 3-1: Product: syz
[  148.705388][   T24] usb 3-1: Manufacturer: syz
[  148.712242][   T24] usb 3-1: SerialNumber: syz
[  148.740307][   T36] Bluetooth: (null): Invalid header checksum
[  148.747626][   T24] usb 3-1: config 0 descriptor??
[  148.776281][ T5947] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  148.785504][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.838337][ T5947] usb 1-1: Product: syz
[  148.843224][   T36] Bluetooth: (null): Invalid header checksum
[  148.849646][ T5947] usb 1-1: Manufacturer: syz
[  148.854307][ T5947] usb 1-1: SerialNumber: syz
[  148.892307][ T5947] usb 1-1: config 0 descriptor??
[  148.913992][ T7029] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  148.967364][   T12] Bluetooth: (null): Invalid header checksum
[  148.984783][   T24] usb 3-1: USB disconnect, device number 32
[  148.988463][ T5947] hub 1-1:0.0: bad descriptor, ignoring hub
[  149.018040][ T5947] hub 1-1:0.0: probe with driver hub failed with error -5
[  149.055809][ T5947] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11
[  149.089250][   T12] Bluetooth: (null): Invalid header checksum
[  149.156970][ T5182] Bluetooth: hci0: unexpected event for opcode 0x0403
[  149.186513][   T36] Bluetooth: (null): Invalid header checksum
[  149.195949][ T5947] usb 1-1: USB disconnect, device number 34
[  149.201965][    C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  149.296344][   T49] Bluetooth: (null): Invalid header checksum
[  149.318224][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.349028][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.371892][ T6857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.421536][   T36] Bluetooth: (null): Invalid header checksum
[  149.778011][ T6857] veth0_vlan: entered promiscuous mode
[  149.819498][ T6857] veth1_vlan: entered promiscuous mode
[  149.921319][ T6857] veth0_macvtap: entered promiscuous mode
[  149.930023][ T7072] netlink: 'syz.0.253': attribute type 2 has an invalid length.
[  149.952345][ T6857] veth1_macvtap: entered promiscuous mode
[  149.959137][ T7072] netlink: 244 bytes leftover after parsing attributes in process `syz.0.253'.
[  149.969322][   T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  150.001417][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.021242][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.044885][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.058534][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.076935][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.136356][   T24] usb 3-1: Using ep0 maxpacket: 8
[  150.159168][   T24] usb 3-1: config 162 has an invalid interface number: 92 but max is 1
[  150.172656][   T24] usb 3-1: config 162 has an invalid interface number: 155 but max is 1
[  150.182028][   T24] usb 3-1: config 162 has no interface number 0
[  150.189406][   T24] usb 3-1: config 162 has no interface number 1
[  150.197977][   T24] usb 3-1: config 162 interface 92 has no altsetting 0
[  150.204997][   T24] usb 3-1: config 162 interface 155 has no altsetting 0
[  150.217540][   T24] usb 3-1: New USB device found, idVendor=05a9, idProduct=8519, bcdDevice=45.21
[  150.228183][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.236814][   T24] usb 3-1: Product: syz
[  150.241236][   T24] usb 3-1: Manufacturer: syz
[  150.246706][   T24] usb 3-1: SerialNumber: syz
[  150.321251][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.390020][ T5182] Bluetooth: hci2: command tx timeout
[  150.409721][   T36] Bluetooth: (null): Invalid header checksum
[  150.464504][   T36] Bluetooth: (null): Invalid header checksum
[  150.539824][   T36] Bluetooth: (null): Invalid header checksum
[  150.590470][   T36] Bluetooth: (null): Invalid header checksum
[  150.626154][   T36] Bluetooth: (null): Invalid header checksum
[  150.659488][   T36] Bluetooth: (null): Invalid header checksum
[  150.681803][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.691007][   T36] Bluetooth: (null): Invalid header checksum
[  150.721855][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.734168][   T36] Bluetooth: (null): Invalid header checksum
[  150.753905][   T36] Bluetooth: (null): Invalid header checksum
[  150.785056][   T36] Bluetooth: (null): Invalid header checksum
[  150.843886][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.871536][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.569828][   T12] Bluetooth: (null): Invalid header checksum
[  151.610715][   T12] Bluetooth: (null): Invalid header checksum
[  151.654160][   T12] Bluetooth: (null): Invalid header checksum
[  151.682956][   T12] Bluetooth: (null): Invalid header checksum
[  151.717167][   T12] Bluetooth: (null): Invalid header checksum
[  151.751601][   T12] Bluetooth: (null): Invalid header checksum
[  151.790890][   T12] Bluetooth: (null): Invalid header checksum
[  151.821785][   T12] Bluetooth: (null): Invalid header checksum
[  151.872779][   T12] Bluetooth: (null): Invalid header checksum
[  152.298308][ T1040] Bluetooth: (null): Invalid header checksum
[  152.304506][ T1040] Bluetooth: (null): Invalid header checksum
[  152.325911][ T7093] kAFS: No cell specified
[  152.388189][ T1040] Bluetooth: (null): Invalid header checksum
[  152.447584][ T1040] Bluetooth: (null): Invalid header checksum
[  152.484425][ T1040] Bluetooth: (null): Invalid header checksum
[  152.706214][ T1040] Bluetooth: (null): Invalid header checksum
[  152.730486][ T1040] Bluetooth: (null): Invalid header checksum
[  152.751179][ T1040] Bluetooth: (null): Invalid header checksum
[  152.783374][ T1040] Bluetooth: (null): Invalid header checksum
[  152.805851][ T1040] Bluetooth: (null): Invalid header checksum
[  152.831901][ T1040] Bluetooth: (null): Invalid header checksum
[  152.887196][ T1040] Bluetooth: (null): Invalid header checksum
[  153.006817][ T1040] Bluetooth: (null): Invalid header checksum
[  153.133738][ T1040] Bluetooth: (null): Invalid header checksum
[  153.143341][ T7112] netlink: 'syz.0.259': attribute type 10 has an invalid length.
[  153.228989][   T12] Bluetooth: (null): Invalid header checksum
[  153.290081][ T7112] veth0_vlan: left promiscuous mode
[  153.347608][   T13] Bluetooth: (null): Invalid header checksum
[  153.355045][ T7112] veth0_vlan: entered promiscuous mode
[  153.379328][ T7112] team0: Device veth0_vlan failed to register rx_handler
[  153.404391][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.414788][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.466469][   T36] Bluetooth: (null): Invalid header checksum
[  153.477985][   T24] usb 3-1: USB disconnect, device number 33
[  153.570968][ T7129] netlink: 64 bytes leftover after parsing attributes in process `syz.5.263'.
[  153.586199][ T1040] Bluetooth: (null): Invalid header checksum
[  153.696296][ T1040] Bluetooth: (null): Invalid header checksum
[  153.816340][   T49] Bluetooth: (null): Invalid header checksum
[  153.920872][ T5182] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  153.929804][   T49] Bluetooth: (null): Invalid header checksum
[  154.042916][   T12] Bluetooth: (null): Invalid header checksum
[  154.118695][ T7152] /dev/nullb0: Can't open blockdev
[  154.129978][ T7151] netlink: 56 bytes leftover after parsing attributes in process `syz.3.268'.
[  154.151232][   T49] Bluetooth: (null): Invalid header checksum
[  154.163310][ T7150] /dev/nullb0: Can't open blockdev
[  154.250140][ T7150] fuse: Unknown parameter 'grd'
[  154.256652][ T1040] Bluetooth: (null): Invalid header checksum
[  154.377345][   T49] Bluetooth: (null): Invalid header checksum
[  154.434244][ T7158] ucma_write: process 302 (syz.3.269) changed security contexts after opening file descriptor, this is not allowed.
[  154.485989][ T1040] Bluetooth: (null): Invalid header checksum
[  154.586299][   T36] Bluetooth: (null): Invalid header checksum
[  154.647984][   T24] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  154.696953][   T36] Bluetooth: (null): Invalid header checksum
[  154.809381][   T36] Bluetooth: (null): Invalid header checksum
[  154.820198][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.849773][   T24] usb 1-1: config 0 has an invalid interface number: 245 but max is 0
[  154.864139][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.874151][   T24] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  154.888461][   T24] usb 1-1: config 0 has no interface number 0
[  154.894869][   T24] usb 1-1: config 0 interface 245 altsetting 127 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  154.909280][   T24] usb 1-1: config 0 interface 245 altsetting 127 has a duplicate endpoint with address 0x4, skipping
[  154.920908][   T24] usb 1-1: config 0 interface 245 has no altsetting 0
[  154.926208][ T1040] Bluetooth: (null): Invalid header checksum
[  154.935943][   T24] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0183, bcdDevice=dc.e5
[  154.950502][ T7184] netlink: 'syz.3.276': attribute type 1 has an invalid length.
[  154.958392][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.958422][   T24] usb 1-1: Product: syz
[  154.958438][   T24] usb 1-1: Manufacturer: syz
[  154.958454][   T24] usb 1-1: SerialNumber: syz
[  154.964950][   T24] usb 1-1: config 0 descriptor??
[  154.973537][ T7184] netlink: 'syz.3.276': attribute type 3 has an invalid length.
[  155.005878][ T7184] netlink: 224 bytes leftover after parsing attributes in process `syz.3.276'.
[  155.024404][   T24] ftdi_sio 1-1:0.245: FTDI USB Serial Device converter detected
[  155.036322][ T1040] Bluetooth: (null): Invalid header checksum
[  155.051843][   T24] ftdi_sio ttyUSB0: unknown device type: 0xdce5
[  155.125864][ T5946] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[  155.147063][   T13] Bluetooth: (null): Invalid header checksum
[  155.224639][ T7163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.239016][ T7163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.256086][   T13] Bluetooth: (null): Invalid header checksum
[  155.295957][   T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  155.299123][ T5946] usb 6-1: Invalid ep0 maxpacket: 16
[  155.366335][   T36] Bluetooth: (null): Invalid header checksum
[  155.435810][ T5946] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  155.465844][   T10] usb 3-1: Using ep0 maxpacket: 8
[  155.474953][   T10] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  155.493520][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.502580][   T10] usb 3-1: Product: syz
[  155.506002][   T36] Bluetooth: (null): Invalid header checksum
[  155.507316][   T10] usb 3-1: Manufacturer: syz
[  155.518019][   T10] usb 3-1: SerialNumber: syz
[  155.536497][   T10] usb 3-1: config 0 descriptor??
[  155.545348][   T10] gspca_main: se401-2.14.0 probing 047d:5003
[  155.598456][ T1040] Bluetooth: (null): Invalid header checksum
[  155.604643][ T5946] usb 6-1: Invalid ep0 maxpacket: 16
[  155.612275][ T5946] usb usb6-port1: attempt power cycle
[  155.639159][ T7211] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002
[  155.716386][   T36] Bluetooth: (null): Invalid header checksum
[  155.736503][ T7211] block nbd0: server does not support multiple connections per device.
[  155.748509][ T7211] block nbd0: shutting down sockets
[  155.827513][   T36] Bluetooth: (null): Invalid header checksum
[  155.841486][   T10] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  155.852320][   T10] se401 3-1:0.0: probe with driver se401 failed with error -71
[  155.862974][   T10] usb 3-1: USB disconnect, device number 34
[  155.937213][   T36] Bluetooth: (null): Invalid header checksum
[  155.965993][ T5946] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[  155.998270][ T5946] usb 6-1: Invalid ep0 maxpacket: 16
[  156.046586][   T36] Bluetooth: (null): Invalid header checksum
[  156.126891][ T5946] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[  156.156560][ T5946] usb 6-1: Invalid ep0 maxpacket: 16
[  156.162126][   T36] Bluetooth: (null): Invalid header checksum
[  156.162534][ T5946] usb usb6-port1: unable to enumerate USB device
[  156.266198][   T36] Bluetooth: (null): Invalid header checksum
[  156.309218][   T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  156.376190][   T36] Bluetooth: (null): Invalid header checksum
[  156.465855][   T10] usb 3-1: Using ep0 maxpacket: 32
[  156.474215][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.485411][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.496509][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[  156.505955][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.507400][   T13] Bluetooth: (null): Invalid header checksum
[  156.518872][   T10] usb 3-1: config 0 descriptor??
[  156.607344][   T36] Bluetooth: (null): Invalid header checksum
[  156.704719][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.715512][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.727409][   T13] Bluetooth: (null): Invalid header checksum
[  156.749521][ T7222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.772966][ T7222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.820503][ T7232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.830150][ T7232] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.840055][   T36] Bluetooth: (null): Invalid header checksum
[  156.956290][   T36] Bluetooth: (null): Invalid header checksum
[  157.076583][   T36] Bluetooth: (null): Invalid header checksum
[  157.186106][   T36] Bluetooth: (null): Invalid header checksum
[  157.296221][   T13] Bluetooth: (null): Invalid header checksum
[  157.408265][ T1040] Bluetooth: (null): Invalid header checksum
[  157.446309][   T43] usb 1-1: USB disconnect, device number 35
[  157.458000][   T43] ftdi_sio 1-1:0.245: device disconnected
[  157.527675][   T13] Bluetooth: (null): Invalid header checksum
[  157.638664][   T13] Bluetooth: (null): Invalid header checksum
[  157.659410][ T7240] syzkaller1: entered promiscuous mode
[  157.665052][ T7240] syzkaller1: entered allmulticast mode
[  157.746537][   T13] Bluetooth: (null): Invalid header checksum
[  157.868500][ T1040] Bluetooth: (null): Invalid header checksum
[  157.972402][   T43] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  157.986449][   T49] Bluetooth: (null): Invalid header checksum
[  158.071735][ T7250] netlink: 24 bytes leftover after parsing attributes in process `syz.5.290'.
[  158.096176][   T49] Bluetooth: (null): Invalid header checksum
[  158.128280][   T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  158.139164][   T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.158436][   T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  158.169721][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.178299][   T43] usb 1-1: Product: syz
[  158.183178][   T43] usb 1-1: Manufacturer: syz
[  158.189440][   T43] usb 1-1: SerialNumber: syz
[  158.207133][ T1040] Bluetooth: (null): Invalid header checksum
[  158.219849][   T43] cdc_mbim 1-1:1.0: skipping garbage
[  158.316597][   T49] Bluetooth: (null): Invalid header checksum
[  158.347834][ T7255] netlink: 'syz.5.291': attribute type 12 has an invalid length.
[  158.356778][ T7255] netlink: 132 bytes leftover after parsing attributes in process `syz.5.291'.
[  158.427819][ T1040] Bluetooth: (null): Invalid header checksum
[  158.534311][ T7262] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  158.547268][   T12] Bluetooth: (null): Invalid header checksum
[  158.590001][ T7264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.603328][ T7264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.622297][ T7265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.633958][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.644668][ T7265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.668023][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.670372][   T12] Bluetooth: (null): Invalid header checksum
[  158.767469][ T1040] Bluetooth: (null): Invalid header checksum
[  158.855316][ T7273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.867287][ T7273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.888275][   T12] Bluetooth: (null): Invalid header checksum
[  158.945943][   T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  158.998256][   T12] Bluetooth: (null): Invalid header checksum
[  159.060632][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  159.083133][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  159.108557][   T49] Bluetooth: (null): Invalid header checksum
[  159.116514][   T10] usb 3-1: USB disconnect, device number 35
[  159.121250][   T24] usb 6-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e
[  159.135815][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.154150][   T24] usb 6-1: Product: syz
[  159.164283][   T24] usb 6-1: Manufacturer: syz
[  159.187171][   T24] usb 6-1: SerialNumber: syz
[  159.195406][   T24] usb 6-1: config 0 descriptor??
[  159.222215][   T24] usbsevseg 6-1:0.0: USB 7 Segment device now attached
[  159.230262][   T49] Bluetooth: (null): Invalid header checksum
[  159.309640][   T43] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS
[  159.315993][   T43] cdc_mbim 1-1:1.0: bind() failure
[  159.325950][   T43] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  159.332813][   T43] cdc_ncm 1-1:1.1: bind() failure
[  159.333218][ T7277] netlink: 'syz.2.299': attribute type 142 has an invalid length.
[  159.347197][   T49] Bluetooth: (null): Invalid header checksum
[  159.452267][ T1040] Bluetooth: (null): Invalid header checksum
[  159.484181][ T7285] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  159.498557][   T43] usb 6-1: USB disconnect, device number 6
[  159.510376][   T43] usbsevseg 6-1:0.0: USB 7 Segment now disconnected
[  159.575391][   T36] Bluetooth: (null): Invalid header checksum
[  159.655041][   T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  159.678536][   T36] Bluetooth: (null): Invalid header checksum
[  159.687958][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.697468][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.707563][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.716853][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.786664][   T49] Bluetooth: (null): Invalid header checksum
[  159.807659][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.817930][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  159.826987][   T10] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  159.840451][   T10] usb 3-1: config 1 interface 0 has no altsetting 0
[  159.850417][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  159.859680][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.867780][   T10] usb 3-1: Product: syz
[  159.871984][   T10] usb 3-1: Manufacturer: syz
[  159.880744][   T10] usb 3-1: SerialNumber: syz
[  159.896245][ T1040] Bluetooth: (null): Invalid header checksum
[  160.007020][   T36] Bluetooth: (null): Invalid header checksum
[  160.126396][   T36] Bluetooth: (null): Invalid header checksum
[  160.247670][   T49] Bluetooth: (null): Invalid header checksum
[  160.291914][ T7294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.304'.
[  160.295081][   T24] usb 3-1: USB disconnect, device number 36
[  160.301391][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'.
[  160.315927][ T5947] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  160.356123][   T36] Bluetooth: (null): Invalid header checksum
[  160.466218][   T36] Bluetooth: (null): Invalid header checksum
[  160.475865][ T5947] usb 6-1: device descriptor read/64, error -71
[  160.576140][   T36] Bluetooth: (null): Invalid header checksum
[  160.686065][   T36] Bluetooth: (null): Invalid header checksum
[  160.715860][ T5947] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  160.796103][   T36] Bluetooth: (null): Invalid header checksum
[  160.845969][ T5947] usb 6-1: device descriptor read/64, error -71
[  160.906248][   T36] Bluetooth: (null): Invalid header checksum
[  160.966309][ T5947] usb usb6-port1: attempt power cycle
[  161.016155][   T49] Bluetooth: (null): Invalid header checksum
[  161.080123][ T5955] usb 1-1: USB disconnect, device number 36
[  161.085846][   T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  161.164325][   T49] Bluetooth: (null): Invalid header checksum
[  161.238829][   T49] Bluetooth: (null): Invalid header checksum
[  161.306625][ T5947] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  161.336203][   T24] usb 3-1: Using ep0 maxpacket: 32
[  161.339948][ T5947] usb 6-1: device descriptor read/8, error -71
[  161.348732][   T12] Bluetooth: (null): Invalid header checksum
[  161.357502][   T24] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  161.366527][   T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  161.377935][   T24] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  161.389247][   T24] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  161.403258][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  161.417339][   T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  161.435844][   T24] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  161.444369][   T24] usb 3-1: Product: syz
[  161.456715][   T36] Bluetooth: (null): Invalid header checksum
[  161.465720][   T24] usb 3-1: Manufacturer: syz
[  161.475070][   T24] usb 3-1: SerialNumber: syz
[  161.494793][   T24] usb 3-1: config 0 descriptor??
[  161.514874][   T24] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  161.552522][   T24] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  161.568135][   T12] Bluetooth: (null): Invalid header checksum
[  161.747262][   T12] Bluetooth: (null): Invalid header checksum
[  161.754686][ T5955] usb 1-1: new low-speed USB device number 37 using dummy_hcd
[  161.762469][ T5947] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  161.789070][ T1040] Bluetooth: (null): Invalid header checksum
[  161.797897][ T5947] usb 6-1: device descriptor read/8, error -71
[  161.879230][   T10] usb 3-1: USB disconnect, device number 37
[  161.897291][   T10] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  161.916439][   T36] Bluetooth: (null): Invalid header checksum
[  161.925803][ T5955] usb 1-1: Invalid ep0 maxpacket: 64
[  161.931578][ T5947] usb usb6-port1: unable to enumerate USB device
[  162.009787][   T49] Bluetooth: (null): Invalid header checksum
[  162.086315][ T5955] usb 1-1: new low-speed USB device number 38 using dummy_hcd
[  162.126177][   T12] Bluetooth: (null): Invalid header checksum
[  162.246175][ T1040] Bluetooth: (null): Invalid header checksum
[  162.255991][ T5955] usb 1-1: Invalid ep0 maxpacket: 64
[  162.285937][ T5955] usb usb1-port1: attempt power cycle
[  162.363654][   T12] Bluetooth: (null): Invalid header checksum
[  162.456119][ T3171] Bluetooth: (null): Invalid header checksum
[  162.566977][   T60] Bluetooth: (null): Invalid header checksum
[  162.600335][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.615570][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.655814][ T5955] usb 1-1: new low-speed USB device number 39 using dummy_hcd
[  162.686739][ T5955] usb 1-1: Invalid ep0 maxpacket: 64
[  162.690453][   T60] Bluetooth: (null): Invalid header checksum
[  162.797713][ T4629] Bluetooth: (null): Invalid header checksum
[  162.815893][ T5955] usb 1-1: new low-speed USB device number 40 using dummy_hcd
[  162.836644][ T5955] usb 1-1: Invalid ep0 maxpacket: 64
[  162.842395][ T5955] usb usb1-port1: unable to enumerate USB device
[  162.916129][   T49] Bluetooth: (null): Invalid header checksum
[  163.036338][ T4629] Bluetooth: (null): Invalid header checksum
[  163.156606][   T49] Bluetooth: (null): Invalid header checksum
[  163.223027][ T7361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.239373][ T7361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.256198][   T60] Bluetooth: (null): Invalid header checksum
[  163.367154][ T4629] Bluetooth: (null): Invalid header checksum
[  163.406562][ T7364] 9pnet_fd: Insufficient options for proto=fd
[  163.464631][ T7366] syz_tun: entered allmulticast mode
[  163.478032][ T3171] Bluetooth: (null): Invalid header checksum
[  163.587318][ T3171] Bluetooth: (null): Invalid header checksum
[  163.706170][ T3171] Bluetooth: (null): Invalid header checksum
[  163.808404][ T4629] Bluetooth: (null): Invalid header checksum
[  163.862937][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.878451][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.887137][ T7373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.901056][ T7373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.916315][ T3171] Bluetooth: (null): Invalid header checksum
[  164.026191][   T60] Bluetooth: (null): Invalid header checksum
[  164.136173][   T60] Bluetooth: (null): Invalid header checksum
[  164.247284][ T3171] Bluetooth: (null): Invalid header checksum
[  164.255792][ T5955] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  164.291262][ T7383] netlink: 40 bytes leftover after parsing attributes in process `syz.2.322'.
[  164.360785][ T4629] Bluetooth: (null): Invalid header checksum
[  164.450450][ T5955] usb 6-1: Using ep0 maxpacket: 8
[  164.466119][   T60] Bluetooth: (null): Invalid header checksum
[  164.482279][ T5955] usb 6-1: config 32 has 1 interface, different from the descriptor's value: 2
[  164.513967][ T5955] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  164.532995][ T5955] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  164.533313][ T7392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.324'.
[  164.544983][ T7393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.561293][ T5955] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  164.571105][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.579714][   T60] Bluetooth: (null): Invalid header checksum
[  164.580803][ T7393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.617067][ T7393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.646223][ T7393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.686480][ T3171] Bluetooth: (null): Invalid header checksum
[  164.710837][ T7393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.720138][ T7393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.745780][ T5946] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  164.796252][ T3171] Bluetooth: (null): Invalid header checksum
[  164.804066][ T5955] usb 6-1: string descriptor 0 read error: -71
[  164.871919][ T5955] usb 6-1: USB disconnect, device number 11
[  164.906515][ T5946] usb 1-1: Using ep0 maxpacket: 32
[  164.914760][ T4629] Bluetooth: (null): Invalid header checksum
[  164.930387][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.960607][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.972234][ T5946] usb 1-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[  164.990883][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.007236][ T5946] usb 1-1: config 0 descriptor??
[  165.019376][ T4629] Bluetooth: (null): Invalid header checksum
[  165.126206][   T60] Bluetooth: (null): Invalid header checksum
[  165.205808][   T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  165.238267][ T3171] Bluetooth: (null): Invalid header checksum
[  165.244489][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.253402][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.335788][   T10] usb 3-1: device descriptor read/64, error -71
[  165.347227][   T60] Bluetooth: (null): Invalid header checksum
[  165.445190][ T7411] genirq: Flags mismatch irq 8. 00200000 (comedi_parport) vs. 00200000 (rtc0)
[  165.460789][   T12] Bluetooth: (null): Invalid header checksum
[  165.476131][ T7413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.487710][ T7413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.568553][ T3171] Bluetooth: (null): Invalid header checksum
[  165.576752][   T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  165.678370][   T12] Bluetooth: (null): Invalid header checksum
[  165.716191][   T10] usb 3-1: device descriptor read/64, error -71
[  165.790241][ T3171] Bluetooth: (null): Invalid header checksum
[  165.826389][   T10] usb usb3-port1: attempt power cycle
[  165.896220][   T49] Bluetooth: (null): Invalid header checksum
[  166.009695][ T4629] Bluetooth: (null): Invalid header checksum
[  166.127676][   T60] Bluetooth: (null): Invalid header checksum
[  166.187691][   T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  166.216417][   T10] usb 3-1: device descriptor read/8, error -71
[  166.239033][   T60] Bluetooth: (null): Invalid header checksum
[  166.373478][   T36] Bluetooth: (null): Invalid header checksum
[  166.390276][ T7439] syzkaller1: entered promiscuous mode
[  166.446023][ T7439] syzkaller1: entered allmulticast mode
[  166.455176][   T36] Bluetooth: (null): Invalid header checksum
[  166.495830][   T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  166.539717][ T7439] netlink: 37 bytes leftover after parsing attributes in process `syz.3.331'.
[  166.556127][ T4629] Bluetooth: (null): Invalid header checksum
[  166.572677][   T10] usb 3-1: device descriptor read/8, error -71
[  166.672636][   T49] Bluetooth: (null): Invalid header checksum
[  166.706255][   T10] usb usb3-port1: unable to enumerate USB device
[  166.778849][   T49] Bluetooth: (null): Invalid header checksum
[  166.892879][   T49] Bluetooth: (null): Invalid header checksum
[  166.998409][   T13] Bluetooth: (null): Invalid header checksum
[  167.047682][   T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  167.106172][ T3171] Bluetooth: (null): Invalid header checksum
[  167.180836][   T30] audit: type=1800 audit(1758413787.424:2): pid=7473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.335" name="memory.events" dev="tmpfs" ino=730 res=0 errno=0
[  167.216135][   T36] Bluetooth: (null): Invalid header checksum
[  167.225960][   T24] usb 6-1: Using ep0 maxpacket: 32
[  167.237772][   T30] audit: type=1804 audit(1758413787.454:3): pid=7473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.335" name="/newroot/131/memory.events" dev="tmpfs" ino=730 res=1 errno=0
[  167.244961][   T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  167.292669][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  167.325801][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  167.326205][   T49] Bluetooth: (null): Invalid header checksum
[  167.353683][   T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  167.373369][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.431365][   T24] usb 6-1: config 0 descriptor??
[  167.438751][   T13] Bluetooth: (null): Invalid header checksum
[  167.460770][ T7456] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[  167.477598][   T24] hub 6-1:0.0: USB hub found
[  167.484436][ T5946] usbhid 1-1:0.0: can't add hid device: -71
[  167.515977][ T5946] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  167.548981][   T49] Bluetooth: (null): Invalid header checksum
[  167.550917][ T5946] usb 1-1: USB disconnect, device number 41
[  167.656157][ T3171] Bluetooth: (null): Invalid header checksum
[  167.671583][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.682440][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.695272][   T24] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[  167.715084][   T24] usbhid 6-1:0.0: can't add hid device: -71
[  167.725082][   T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  167.764915][   T24] usb 6-1: USB disconnect, device number 12
[  167.766597][ T3171] Bluetooth: (null): Invalid header checksum
[  167.853967][ T7497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.863947][ T7498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.878204][ T3171] Bluetooth: (null): Invalid header checksum
[  167.878858][ T7497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.893326][ T7498] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.986168][ T3171] Bluetooth: (null): Invalid header checksum
[  168.096226][   T49] Bluetooth: (null): Invalid header checksum
[  168.206859][   T13] Bluetooth: (null): Invalid header checksum
[  168.318429][   T13] Bluetooth: (null): Invalid header checksum
[  168.405977][ T5946] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  168.427104][   T49] Bluetooth: (null): Invalid header checksum
[  168.563599][   T49] Bluetooth: (null): Invalid header checksum
[  168.577353][ T5946] usb 3-1: Using ep0 maxpacket: 8
[  168.604470][ T5946] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  168.635811][ T5946] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  168.647025][   T13] Bluetooth: (null): Invalid header checksum
[  168.663474][ T5946] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  168.678062][ T5946] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  168.688590][ T5946] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  168.707831][ T5946] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  168.723067][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.742503][ T7533] netlink: 'syz.0.345': attribute type 10 has an invalid length.
[  168.763306][ T3171] Bluetooth: (null): Invalid header checksum
[  168.777391][ T7533] team0: Port device macvlan1 added
[  168.875646][ T3171] Bluetooth: (null): Invalid header checksum
[  168.940571][ T5946] usb 3-1: GET_CAPABILITIES returned 0
[  168.948672][ T5946] usbtmc 3-1:16.0: can't read capabilities
[  168.978141][   T49] Bluetooth: (null): Invalid header checksum
[  169.087087][ T3171] Bluetooth: (null): Invalid header checksum
[  169.147106][ T5946] usb 3-1: USB disconnect, device number 42
[  169.196126][   T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  169.204927][ T3171] Bluetooth: (null): Invalid header checksum
[  169.307472][ T3171] Bluetooth: (null): Invalid header checksum
[  169.362324][ T7509] fuse: Bad value for 'rootmode'
[  169.363528][ T7561] comedi comedi3: comedi_config --init_data is deprecated
[  169.387342][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.397634][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  169.421328][   T49] Bluetooth: (null): Invalid header checksum
[  169.441234][   T10] usb 1-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[  169.459719][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.483137][   T10] usb 1-1: config 0 descriptor??
[  169.527579][   T49] Bluetooth: (null): Invalid header checksum
[  169.636676][ T3171] Bluetooth: (null): Invalid header checksum
[  169.700882][   T10] waltop 0003:172F:0038.0006: unknown main item tag 0x0
[  169.714323][   T10] waltop 0003:172F:0038.0006: unknown main item tag 0x0
[  169.722295][   T10] waltop 0003:172F:0038.0006: unknown main item tag 0x0
[  169.748311][   T49] Bluetooth: (null): Invalid header checksum
[  169.754078][   T10] waltop 0003:172F:0038.0006: unknown main item tag 0x0
[  169.765159][   T10] waltop 0003:172F:0038.0006: unknown main item tag 0x0
[  169.778074][   T10] waltop 0003:172F:0038.0006: unknown main item tag 0x0
[  169.785103][   T10] waltop 0003:172F:0038.0006: unknown main item tag 0x0
[  169.819300][   T10] waltop 0003:172F:0038.0006: unknown main item tag 0x0
[  169.827629][   T10] waltop 0003:172F:0038.0006: unknown main item tag 0x0
[  169.834640][   T10] waltop 0003:172F:0038.0006: unknown main item tag 0x0
[  169.848369][   T10] waltop 0003:172F:0038.0006: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.0-1/input0
[  169.865358][ T3171] Bluetooth: (null): Invalid header checksum
[  169.886158][   T10] usb 1-1: USB disconnect, device number 42
[  169.967104][   T49] Bluetooth: (null): Invalid header checksum
[  170.018893][ T7586] netlink: 'syz.5.359': attribute type 1 has an invalid length.
[  170.067003][ T5182] Bluetooth: hci3: unexpected event 0x0b length: 6 < 11
[  170.077703][ T7583] fido_id[7583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  170.092357][ T3171] Bluetooth: (null): Invalid header checksum
[  170.186994][ T3171] Bluetooth: (null): Invalid header checksum
[  170.296322][ T3171] Bluetooth: (null): Invalid header checksum
[  170.355883][   T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  170.406415][   T49] Bluetooth: (null): Invalid header checksum
[  170.495806][   T10] usb 1-1: device descriptor read/64, error -71
[  170.527552][   T49] Bluetooth: (null): Invalid header checksum
[  170.637021][   T60] Bluetooth: (null): Invalid header checksum
[  170.735977][   T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  170.740646][ T7607] netlink: 'syz.2.364': attribute type 10 has an invalid length.
[  170.750044][   T60] Bluetooth: (null): Invalid header checksum
[  170.752650][ T7607] netlink: 168 bytes leftover after parsing attributes in process `syz.2.364'.
[  170.809427][ T7610] binder: BINDER_SET_CONTEXT_MGR already set
[  170.816329][ T7610] binder: 7608:7610 ioctl 4018620d 200000000140 returned -16
[  170.856811][   T60] Bluetooth: (null): Invalid header checksum
[  170.865964][   T10] usb 1-1: device descriptor read/64, error -71
[  170.880517][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'.
[  170.967338][   T60] Bluetooth: (null): Invalid header checksum
[  170.978832][   T10] usb usb1-port1: attempt power cycle
[  171.004374][ T7615] MTD: Attempt to mount non-MTD device "/dev/nbd2"
[  171.014112][ T7615] cramfs: wrong magic
[  171.079975][   T49] Bluetooth: (null): Invalid header checksum
[  171.187697][   T13] Bluetooth: (null): Invalid header checksum
[  171.296188][   T49] Bluetooth: (null): Invalid header checksum
[  171.335781][   T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  171.356970][   T10] usb 1-1: device descriptor read/8, error -71
[  171.375953][    T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  171.409038][   T49] Bluetooth: (null): Invalid header checksum
[  171.415862][ T7633] trusted_key: syz.2.372 sent an empty control message without MSG_MORE.
[  171.516577][   T36] Bluetooth: (null): Invalid header checksum
[  171.523306][ T7636] netlink: 5820 bytes leftover after parsing attributes in process `syz.2.373'.
[  171.536149][    T9] usb 6-1: Using ep0 maxpacket: 16
[  171.544977][    T9] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  171.557928][    T9] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  171.567296][    T9] usb 6-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[  171.575585][    T9] usb 6-1: Product: syz
[  171.583446][    T9] usb 6-1: Manufacturer: syz
[  171.588226][    T9] usb 6-1: SerialNumber: syz
[  171.606699][   T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  171.615088][    T9] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  171.639725][   T13] Bluetooth: (null): Invalid header checksum
[  171.665816][   T10] usb 1-1: device descriptor read/8, error -71
[  171.741586][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.746281][   T13] Bluetooth: (null): Invalid header checksum
[  171.750769][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.770703][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.790605][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.805070][   T36] usb 6-1: Failed to submit usb control message: -71
[  171.815473][    T9] usb 6-1: USB disconnect, device number 13
[  171.824565][   T10] usb usb1-port1: unable to enumerate USB device
[  171.837673][   T36] usb 6-1: unable to send the bmi data to the device: -71
[  171.846766][   T49] Bluetooth: (null): Invalid header checksum
[  171.849259][   T36] usb 6-1: unable to get target info from device
[  171.859450][   T36] usb 6-1: could not get target info (-71)
[  171.865405][   T36] usb 6-1: could not probe fw (-71)
[  171.957070][   T13] Bluetooth: (null): Invalid header checksum
[  172.066178][   T49] Bluetooth: (null): Invalid header checksum
[  172.176216][   T13] Bluetooth: (null): Invalid header checksum
[  172.286537][   T49] Bluetooth: (null): Invalid header checksum
[  172.396854][   T13] Bluetooth: (null): Invalid header checksum
[  172.413050][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'.
[  172.497750][ T7663] netlink: 'syz.3.381': attribute type 21 has an invalid length.
[  172.518093][   T60] Bluetooth: (null): Invalid header checksum
[  172.625834][   T60] Bluetooth: (null): Invalid header checksum
[  172.656053][ T5946] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  172.716375][ T7678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.727804][   T60] Bluetooth: (null): Invalid header checksum
[  172.729878][ T7678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.836221][   T49] Bluetooth: (null): Invalid header checksum
[  172.842329][ T5946] usb 6-1: Using ep0 maxpacket: 32
[  172.851869][ T5946] usb 6-1: config 0 has an invalid interface number: 54 but max is 0
[  172.871490][ T5946] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.882813][ T5946] usb 6-1: config 0 has no interface number 0
[  172.884970][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'.
[  172.889270][ T5946] usb 6-1: config 0 interface 54 has no altsetting 0
[  172.892336][ T5946] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42
[  172.920166][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.930083][ T5946] usb 6-1: Product: syz
[  172.934446][ T5946] usb 6-1: Manufacturer: syz
[  172.939391][ T5946] usb 6-1: SerialNumber: syz
[  172.948188][   T49] Bluetooth: (null): Invalid header checksum
[  172.955858][    T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  172.958377][ T5946] usb 6-1: config 0 descriptor??
[  173.064655][ T3171] Bluetooth: (null): Invalid header checksum
[  173.095802][    T9] usb 3-1: device descriptor read/64, error -71
[  173.170205][   T60] Bluetooth: (null): Invalid header checksum
[  173.201878][ T7659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.214328][ T7659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.246658][ T5946] ums_eneub6250 6-1:0.54: USB Mass Storage device detected
[  173.277749][   T49] Bluetooth: (null): Invalid header checksum
[  173.318879][ T5946] usb 6-1: USB disconnect, device number 14
[  173.345766][    T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  173.398974][   T13] Bluetooth: (null): Invalid header checksum
[  173.485795][    T9] usb 3-1: device descriptor read/64, error -71
[  173.495840][   T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  173.507383][   T13] Bluetooth: (null): Invalid header checksum
[  173.596171][    T9] usb usb3-port1: attempt power cycle
[  173.616050][ T3171] Bluetooth: (null): Invalid header checksum
[  173.629964][ T7708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.639171][ T7708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.657407][   T10] usb 1-1: config 0 has an invalid interface number: 3 but max is 0
[  173.665494][   T10] usb 1-1: config 0 has no interface number 0
[  173.675870][   T10] usb 1-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84
[  173.684946][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.693062][   T10] usb 1-1: Product: syz
[  173.697355][   T10] usb 1-1: Manufacturer: syz
[  173.701989][   T10] usb 1-1: SerialNumber: syz
[  173.709084][   T10] usb 1-1: config 0 descriptor??
[  173.726093][   T13] Bluetooth: (null): Invalid header checksum
[  173.836258][ T3171] Bluetooth: (null): Invalid header checksum
[  173.924402][ T7703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.934130][ T7703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.937533][    T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  173.950325][   T49] Bluetooth: (null): Invalid header checksum
[  173.959614][   T10] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware
[  173.986622][    T9] usb 3-1: device descriptor read/8, error -71
[  174.000434][   T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  174.009027][   T10] dib0700: firmware download failed at 7 with -22
[  174.024300][   T10] usb 1-1: USB disconnect, device number 47
[  174.056220][ T3171] Bluetooth: (null): Invalid header checksum
[  174.166105][   T60] Bluetooth: (null): Invalid header checksum
[  174.215794][  T983] usb 6-1: new low-speed USB device number 15 using dummy_hcd
[  174.239496][    T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  174.266389][    T9] usb 3-1: device descriptor read/8, error -71
[  174.286133][ T3171] Bluetooth: (null): Invalid header checksum
[  174.329101][ T7718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.338575][ T7718] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.376108][    T9] usb usb3-port1: unable to enumerate USB device
[  174.377972][  T983] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  174.396123][ T3171] Bluetooth: (null): Invalid header checksum
[  174.401036][  T983] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  174.417058][  T983] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  174.427423][  T983] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  174.442225][  T983] usb 6-1: string descriptor 0 read error: -22
[  174.449287][  T983] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  174.461832][  T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.478967][  T983] usb 6-1: config 0 descriptor??
[  174.520250][   T49] Bluetooth: (null): Invalid header checksum
[  174.520922][  T983] hub 6-1:0.0: bad descriptor, ignoring hub
[  174.539325][  T983] hub 6-1:0.0: probe with driver hub failed with error -5
[  174.548512][ T7721] netlink: 'syz.0.399': attribute type 2 has an invalid length.
[  174.557602][ T7721] netlink: 'syz.0.399': attribute type 8 has an invalid length.
[  174.565565][ T7721] netlink: 132 bytes leftover after parsing attributes in process `syz.0.399'.
[  174.626318][   T60] Bluetooth: (null): Invalid header checksum
[  174.736504][   T60] Bluetooth: (null): Invalid header checksum
[  174.806086][ T5946] usb 6-1: USB disconnect, device number 15
[  174.846739][   T49] Bluetooth: (null): Invalid header checksum
[  174.906047][  T983] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  174.956108][   T60] Bluetooth: (null): Invalid header checksum
[  175.069135][  T983] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  175.076252][   T49] Bluetooth: (null): Invalid header checksum
[  175.080102][  T983] usb 1-1: config 1 has no interface number 0
[  175.089802][  T983] usb 1-1: config 1 interface 105 has no altsetting 0
[  175.099881][  T983] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  175.109076][  T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.117182][  T983] usb 1-1: Product: syz
[  175.121460][  T983] usb 1-1: Manufacturer: syz
[  175.127376][  T983] usb 1-1: SerialNumber: syz
[  175.176201][   T60] Bluetooth: (null): Invalid header checksum
[  175.248891][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.273917][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.286891][ T3171] Bluetooth: (null): Invalid header checksum
[  175.397609][ T3171] Bluetooth: (null): Invalid header checksum
[  175.506457][   T60] Bluetooth: (null): Invalid header checksum
[  175.616179][ T3171] Bluetooth: (null): Invalid header checksum
[  175.726377][   T60] Bluetooth: (null): Invalid header checksum
[  175.839359][   T60] Bluetooth: (null): Invalid header checksum
[  175.947535][ T7748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.951647][  T983] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  175.969413][ T3171] Bluetooth: (null): Invalid header checksum
[  175.977595][ T7748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.987103][  T983] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  176.019887][  T983] aqc111 1-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 62:07:ef:48:4a:b2
[  176.045633][ T7749] netlink: 28 bytes leftover after parsing attributes in process `syz.3.408'.
[  176.060861][ T3171] Bluetooth: (null): Invalid header checksum
[  176.066385][ T7748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.408'.
[  176.166124][   T49] Bluetooth: (null): Invalid header checksum
[  176.215115][ T7728] syzkaller1: entered promiscuous mode
[  176.230943][ T7728] syzkaller1: entered allmulticast mode
[  176.250240][ T5946] usb 1-1: USB disconnect, device number 48
[  176.261716][ T5946] aqc111 1-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  176.293195][   T49] Bluetooth: (null): Invalid header checksum
[  176.396885][   T60] Bluetooth: (null): Invalid header checksum
[  176.422065][ T5946] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  176.453243][ T5946] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  176.464532][ T5946] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  176.496126][   T60] Bluetooth: (null): Invalid header checksum
[  176.606421][ T3171] Bluetooth: (null): Invalid header checksum
[  176.696859][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'.
[  176.717003][ T3171] Bluetooth: (null): Invalid header checksum
[  176.826086][ T3171] Bluetooth: (null): Invalid header checksum
[  176.847637][   T10] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  176.943713][   T60] Bluetooth: (null): Invalid header checksum
[  177.025352][ T7783] sctp: [Deprecated]: syz.3.417 (pid 7783) Use of int in max_burst socket option.
[  177.025352][ T7783] Use struct sctp_assoc_value instead
[  177.046496][ T3171] Bluetooth: (null): Invalid header checksum
[  177.057954][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  177.073255][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  177.092993][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  177.106566][   T10] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  177.118477][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.133163][   T10] usb 3-1: Product: syz
[  177.158509][   T60] Bluetooth: (null): Invalid header checksum
[  177.161132][   T10] usb 3-1: Manufacturer: syz
[  177.187419][   T10] usb 3-1: SerialNumber: syz
[  177.194196][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.209216][   T10] usb 3-1: config 0 descriptor??
[  177.225066][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.237463][   T10] port100 3-1:0.0: NFC: Could not get supported command types
[  177.266112][ T3171] Bluetooth: (null): Invalid header checksum
[  177.345203][ T7796] fuse: Bad value for 'group_id'
[  177.350941][ T7796] fuse: Bad value for 'group_id'
[  177.377666][   T49] Bluetooth: (null): Invalid header checksum
[  177.416037][ T5946] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  177.463583][ T7763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.483085][ T7763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.491826][   T49] Bluetooth: (null): Invalid header checksum
[  177.518396][   T10] usb 3-1: USB disconnect, device number 47
[  177.596260][   T49] Bluetooth: (null): Invalid header checksum
[  177.604033][ T5946] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  177.615861][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.623894][ T5946] usb 6-1: Product: syz
[  177.628671][ T5946] usb 6-1: Manufacturer: syz
[  177.633305][ T5946] usb 6-1: SerialNumber: syz
[  177.707534][   T60] Bluetooth: (null): Invalid header checksum
[  177.809028][    T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  177.817359][ T3171] Bluetooth: (null): Invalid header checksum
[  177.927306][   T60] Bluetooth: (null): Invalid header checksum
[  177.969724][    T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  177.979099][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.992742][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.993844][    T9] usb 1-1: config 0 descriptor??
[  178.004449][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.022923][    T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  178.036272][ T3171] Bluetooth: (null): Invalid header checksum
[  178.146212][   T13] Bluetooth: (null): Invalid header checksum
[  178.256248][   T49] Bluetooth: (null): Invalid header checksum
[  178.366212][   T13] Bluetooth: (null): Invalid header checksum
[  178.426255][    T9] gspca_sn9c2028: read1 error -71
[  178.434481][    T9] gspca_sn9c2028: read1 error -71
[  178.439709][    T9] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71
[  178.450542][    T9] usb 1-1: USB disconnect, device number 49
[  178.476744][ T3171] Bluetooth: (null): Invalid header checksum
[  178.525842][   T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  178.586117][ T3171] Bluetooth: (null): Invalid header checksum
[  178.675337][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.684261][   T10] usb 3-1: Using ep0 maxpacket: 8
[  178.692142][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.700773][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  178.712380][   T13] Bluetooth: (null): Invalid header checksum
[  178.713039][   T10] usb 3-1: config 71 has an invalid interface number: 222 but max is 0
[  178.727440][   T10] usb 3-1: config 71 has no interface number 0
[  178.727695][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.733665][   T10] usb 3-1: config 71 interface 222 has no altsetting 0
[  178.737514][   T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=7205, bcdDevice=69.4b
[  178.746031][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.749772][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.775560][   T10] usb 3-1: Product: syz
[  178.779870][   T10] usb 3-1: Manufacturer: syz
[  178.784488][   T10] usb 3-1: SerialNumber: syz
[  178.797934][   T10] r8152-cfgselector 3-1: Unknown version 0x0000
[  178.806116][   T49] Bluetooth: (null): Invalid header checksum
[  178.917211][   T49] Bluetooth: (null): Invalid header checksum
[  179.019625][   T10] hub 3-1:71.222: bad descriptor, ignoring hub
[  179.031726][   T13] Bluetooth: (null): Invalid header checksum
[  179.039561][   T10] hub 3-1:71.222: probe with driver hub failed with error -5
[  179.060413][ T5946] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  179.069126][   T10] r8152-cfgselector 3-1: USB disconnect, device number 48
[  179.076558][ T5946] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  179.137185][ T3171] Bluetooth: (null): Invalid header checksum
[  179.237005][    T9] usb 1-1: new low-speed USB device number 50 using dummy_hcd
[  179.246647][ T3171] Bluetooth: (null): Invalid header checksum
[  179.300538][ T5946] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO
[  179.319384][ T5946] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  179.330014][ T5946] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  179.342401][ T5946] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  179.356498][ T3171] Bluetooth: (null): Invalid header checksum
[  179.361102][ T5946] usb 6-1: USB disconnect, device number 16
[  179.369630][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.378227][    T9] usb 1-1: device descriptor read/64, error -71
[  179.390367][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.401569][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.410624][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.466258][   T49] Bluetooth: (null): Invalid header checksum
[  179.576053][   T49] Bluetooth: (null): Invalid header checksum
[  179.615838][    T9] usb 1-1: new low-speed USB device number 51 using dummy_hcd
[  179.686132][   T13] Bluetooth: (null): Invalid header checksum
[  179.755809][    T9] usb 1-1: device descriptor read/64, error -71
[  179.796436][ T3171] Bluetooth: (null): Invalid header checksum
[  179.866212][    T9] usb usb1-port1: attempt power cycle
[  179.876971][ T5946] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  179.906056][   T49] Bluetooth: (null): Invalid header checksum
[  180.016431][ T3171] Bluetooth: (null): Invalid header checksum
[  180.036449][ T5946] usb 3-1: Using ep0 maxpacket: 32
[  180.043843][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.057500][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.068618][ T5946] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[  180.070884][ T7847] IPVS: set_ctl: invalid protocol: 34971 172.20.20.187:20003
[  180.081331][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.114731][ T5946] usb 3-1: config 0 descriptor??
[  180.127280][   T13] Bluetooth: (null): Invalid header checksum
[  180.141640][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.435'.
[  180.206167][    T9] usb 1-1: new low-speed USB device number 52 using dummy_hcd
[  180.236489][    T9] usb 1-1: device descriptor read/8, error -71
[  180.236508][ T3171] Bluetooth: (null): Invalid header checksum
[  180.246260][ T5919] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  180.346405][   T49] Bluetooth: (null): Invalid header checksum
[  180.405928][ T5919] usb 6-1: Using ep0 maxpacket: 8
[  180.417304][ T7843] netlink: 36 bytes leftover after parsing attributes in process `syz.5.433'.
[  180.458661][ T7859] overlayfs: failed to resolve './file1': -2
[  180.476804][   T49] Bluetooth: (null): Invalid header checksum
[  180.485764][    T9] usb 1-1: new low-speed USB device number 53 using dummy_hcd
[  180.517441][    T9] usb 1-1: device descriptor read/8, error -71
[  180.542062][ T7831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.551214][ T7831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.562141][ T5919] usb 6-1: unable to get BOS descriptor or descriptor too short
[  180.566399][   T13] Bluetooth: (null): Invalid header checksum
[  180.577203][ T5946] logitech 0003:046D:C287.0007: unknown main item tag 0x0
[  180.584666][ T5946] logitech 0003:046D:C287.0007: unknown main item tag 0x0
[  180.595047][ T5919] usb 6-1: unable to read config index 0 descriptor/start: -71
[  180.603136][ T5946] logitech 0003:046D:C287.0007: unknown main item tag 0x0
[  180.611560][ T5919] usb 6-1: can't read configurations, error -71
[  180.617949][ T5946] logitech 0003:046D:C287.0007: unknown main item tag 0x0
[  180.625196][ T5946] logitech 0003:046D:C287.0007: unknown main item tag 0x0
[  180.635972][    T9] usb usb1-port1: unable to enumerate USB device
[  180.636127][ T5946] logitech 0003:046D:C287.0007: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.2-1/input0
[  180.653728][ T5946] logitech 0003:046D:C287.0007: no inputs found
[  180.676629][   T49] Bluetooth: (null): Invalid header checksum
[  180.776934][    T9] usb 3-1: USB disconnect, device number 49
[  180.789765][   T49] Bluetooth: (null): Invalid header checksum
[  180.896144][ T3171] Bluetooth: (null): Invalid header checksum
[  181.006064][   T49] Bluetooth: (null): Invalid header checksum
[  181.119423][   T13] Bluetooth: (null): Invalid header checksum
[  181.143510][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.155765][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.169589][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.181978][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.226446][   T13] Bluetooth: (null): Invalid header checksum
[  181.234585][ T7869] 9pnet_fd: Insufficient options for proto=fd
[  181.336617][   T13] Bluetooth: (null): Invalid header checksum
[  181.447017][ T3171] Bluetooth: (null): Invalid header checksum
[  181.557806][ T3171] Bluetooth: (null): Invalid header checksum
[  181.666832][ T3171] Bluetooth: (null): Invalid header checksum
[  181.675934][ T5919] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  181.789156][ T3171] Bluetooth: (null): Invalid header checksum
[  181.799743][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.813630][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.827676][ T5919] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  181.839701][ T5919] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  181.849709][ T5919] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  181.860335][ T5919] usb 6-1: config 220 has no interface number 2
[  181.867129][ T5919] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  181.880832][ T5919] usb 6-1: config 220 interface 0 has no altsetting 0
[  181.888120][ T5919] usb 6-1: config 220 interface 76 has no altsetting 0
[  181.895160][ T5919] usb 6-1: config 220 interface 1 has no altsetting 0
[  181.905526][ T5919] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  181.908334][   T49] Bluetooth: (null): Invalid header checksum
[  181.917043][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.929251][ T5919] usb 6-1: Product: syz
[  181.933458][ T5919] usb 6-1: Manufacturer: syz
[  181.939437][ T5919] usb 6-1: SerialNumber: syz
[  182.010209][ T3171] Bluetooth: (null): Invalid header checksum
[  182.045803][ T5946] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  182.127271][   T49] Bluetooth: (null): Invalid header checksum
[  182.177767][ T5919] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  182.185143][ T5919] uvcvideo 6-1:220.0: No valid video chain found.
[  182.211051][ T5919] usb 6-1: selecting invalid altsetting 0
[  182.218518][ T5946] usb 3-1: Using ep0 maxpacket: 16
[  182.231192][ T5919] usb 6-1: selecting invalid altsetting 0
[  182.239917][ T5919] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  182.247195][ T3171] Bluetooth: (null): Invalid header checksum
[  182.253153][ T5946] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.268089][ T5946] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  182.281506][ T5919] usb 6-1: USB disconnect, device number 18
[  182.290519][ T5946] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  182.305288][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.317151][ T5946] usb 3-1: Product: syz
[  182.321371][ T5946] usb 3-1: Manufacturer: syz
[  182.331204][ T5946] usb 3-1: SerialNumber: syz
[  182.349208][   T49] Bluetooth: (null): Invalid header checksum
[  182.458120][   T13] Bluetooth: (null): Invalid header checksum
[  182.464682][ T7891] hugetlbfs: syz.0.448 (7891): Using mlock ulimits for SHM_HUGETLB is obsolete
[  182.558662][ T5946] usb 3-1: 0:2 : does not exist
[  182.581558][ T5946] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  182.588268][   T13] Bluetooth: (null): Invalid header checksum
[  182.636116][ T5946] usb 3-1: USB disconnect, device number 50
[  182.671175][ T6834] udevd[6834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  182.703172][   T49] Bluetooth: (null): Invalid header checksum
[  182.806054][ T3171] Bluetooth: (null): Invalid header checksum
[  182.936539][   T49] Bluetooth: (null): Invalid header checksum
[  182.956494][ T7908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.994127][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.005098][ T7908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.015944][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.036076][   T49] Bluetooth: (null): Invalid header checksum
[  183.146103][   T49] Bluetooth: (null): Invalid header checksum
[  183.198026][ T7918] @: renamed from vlan0
[  183.209677][ T7913] netlink: 72 bytes leftover after parsing attributes in process `syz.0.456'.
[  183.256119][   T13] Bluetooth: (null): Invalid header checksum
[  183.329718][  T980] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  183.367508][ T3171] Bluetooth: (null): Invalid header checksum
[  183.426144][   T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  183.477097][ T3171] Bluetooth: (null): Invalid header checksum
[  183.495972][  T980] usb 6-1: Using ep0 maxpacket: 16
[  183.504667][  T980] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  183.514075][  T980] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  183.524746][  T980] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  183.537137][  T980] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  183.546548][  T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.554568][  T980] usb 6-1: Product: syz
[  183.559196][   T10] usb 3-1: device descriptor read/64, error -71
[  183.575764][  T980] usb 6-1: Manufacturer: syz
[  183.587138][ T3171] Bluetooth: (null): Invalid header checksum
[  183.593684][  T980] usb 6-1: SerialNumber: syz
[  183.595803][ T5946] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  183.647221][ T7926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.657163][ T7926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.706664][ T3171] Bluetooth: (null): Invalid header checksum
[  183.765833][ T5946] usb 1-1: Using ep0 maxpacket: 16
[  183.775432][ T5946] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  183.785407][ T5946] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  183.798943][ T5946] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  183.810963][ T5946] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  183.821394][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.826157][   T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  183.829759][ T3171] Bluetooth: (null): Invalid header checksum
[  183.845032][ T5946] usb 1-1: Product: syz
[  183.850698][ T5946] usb 1-1: Manufacturer: syz
[  183.855563][ T5946] usb 1-1: SerialNumber: syz
[  183.926905][   T13] Bluetooth: (null): Invalid header checksum
[  183.995770][   T10] usb 3-1: device descriptor read/64, error -71
[  184.010623][  T980] usb 6-1: 0:2 : does not exist
[  184.046183][   T49] Bluetooth: (null): Invalid header checksum
[  184.120428][   T10] usb usb3-port1: attempt power cycle
[  184.167793][ T3171] Bluetooth: (null): Invalid header checksum
[  184.225118][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.257318][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.286631][ T3171] Bluetooth: (null): Invalid header checksum
[  184.296075][  T980] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1)
[  184.354263][  T980] usb 6-1: USB disconnect, device number 19
[  184.396310][   T49] Bluetooth: (null): Invalid header checksum
[  184.423328][ T5946] usb 1-1: 0:2 : does not exist
[  184.465836][   T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  184.507098][ T3171] Bluetooth: (null): Invalid header checksum
[  184.510012][   T10] usb 3-1: device descriptor read/8, error -71
[  184.521447][ T7943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.531134][ T7943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.616274][ T3171] Bluetooth: (null): Invalid header checksum
[  184.726273][ T3171] Bluetooth: (null): Invalid header checksum
[  184.765942][   T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  184.786622][   T10] usb 3-1: device descriptor read/8, error -71
[  184.836269][   T13] Bluetooth: (null): Invalid header checksum
[  184.896581][   T10] usb usb3-port1: unable to enumerate USB device
[  184.946097][   T49] Bluetooth: (null): Invalid header checksum
[  185.028592][ T7924] program syz.0.459 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  185.061691][   T49] Bluetooth: (null): Invalid header checksum
[  185.070709][ T5946] usb 1-1: USB disconnect, device number 54
[  185.133915][ T7945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.146333][ T7945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.166664][   T49] Bluetooth: (null): Invalid header checksum
[  185.286175][   T13] Bluetooth: (null): Invalid header checksum
[  185.396205][   T60] Bluetooth: (null): Invalid header checksum
[  185.416855][  T980] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  185.506218][   T60] Bluetooth: (null): Invalid header checksum
[  185.568676][  T980] usb 6-1: config index 0 descriptor too short (expected 2596, got 36)
[  185.577113][  T980] usb 6-1: config 0 has an invalid interface number: 28 but max is 0
[  185.585381][  T980] usb 6-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config
[  185.595880][  T980] usb 6-1: config 0 has no interface number 0
[  185.602238][  T980] usb 6-1: too many endpoints for config 0 interface 28 altsetting 114: 86, using maximum allowed: 30
[  185.613511][  T980] usb 6-1: config 0 interface 28 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 86
[  185.627281][   T49] Bluetooth: (null): Invalid header checksum
[  185.633579][  T980] usb 6-1: config 0 interface 28 has no altsetting 0
[  185.641799][  T980] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  185.652086][  T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.662569][  T980] usb 6-1: config 0 descriptor??
[  185.736147][   T60] Bluetooth: (null): Invalid header checksum
[  185.846262][   T49] Bluetooth: (null): Invalid header checksum
[  185.877256][ T5946] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  185.909202][  T980] usb 6-1: string descriptor 0 read error: -71
[  185.933092][  T980] usb 6-1: USB disconnect, device number 20
[  185.959836][   T49] Bluetooth: (null): Invalid header checksum
[  186.045910][ T5946] usb 1-1: Using ep0 maxpacket: 16
[  186.052791][ T5946] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.064114][ T5946] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.074323][ T5946] usb 1-1: config 0 interface 0 has no altsetting 0
[  186.076161][ T3171] Bluetooth: (null): Invalid header checksum
[  186.081073][ T5946] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  186.096376][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.109940][ T5946] usb 1-1: config 0 descriptor??
[  186.176147][ T3171] Bluetooth: (null): Invalid header checksum
[  186.286823][   T13] Bluetooth: (null): Invalid header checksum
[  186.309066][  T980] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  186.340847][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.354245][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.373396][ T7965] syzkaller1: entered promiscuous mode
[  186.380026][ T7965] syzkaller1: entered allmulticast mode
[  186.396286][ T3171] Bluetooth: (null): Invalid header checksum
[  186.478908][  T980] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  186.488349][  T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.506180][   T13] Bluetooth: (null): Invalid header checksum
[  186.513092][  T980] usb 6-1: config 0 descriptor??
[  186.547508][ T5946] zeroplus 0003:0C12:0005.0008: collection stack underflow
[  186.567576][ T5946] zeroplus 0003:0C12:0005.0008: item 0 4 0 12 parsing failed
[  186.588487][ T5946] zeroplus 0003:0C12:0005.0008: parse failed
[  186.594642][ T5946] zeroplus 0003:0C12:0005.0008: probe with driver zeroplus failed with error -22
[  186.626934][ T3171] Bluetooth: (null): Invalid header checksum
[  186.745189][   T10] usb 1-1: USB disconnect, device number 55
[  186.752445][ T7980] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  186.766149][   T49] Bluetooth: (null): Invalid header checksum
[  186.857359][   T13] Bluetooth: (null): Invalid header checksum
[  186.966199][   T13] Bluetooth: (null): Invalid header checksum
[  187.007706][ T7991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.033630][ T7991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.076665][   T49] Bluetooth: (null): Invalid header checksum
[  187.163648][  T980] ath6kl: Failed to read usb control message: -71
[  187.172490][  T980] ath6kl: Unable to read the bmi data from the device: -71
[  187.190087][  T980] ath6kl: Unable to recv target info: -71
[  187.196544][   T13] Bluetooth: (null): Invalid header checksum
[  187.207080][  T980] ath6kl: Failed to init ath6kl core: -71
[  187.232696][  T980] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71
[  187.272292][  T980] usb 6-1: USB disconnect, device number 21
[  187.307698][ T3171] Bluetooth: (null): Invalid header checksum
[  187.396218][ T8002] binder: Unknown parameter 'fscontext'
[  187.416438][   T49] Bluetooth: (null): Invalid header checksum
[  187.526549][   T49] Bluetooth: (null): Invalid header checksum
[  187.636688][   T13] Bluetooth: (null): Invalid header checksum
[  187.645765][ T5946] usb 3-1: new low-speed USB device number 55 using dummy_hcd
[  187.749303][   T49] Bluetooth: (null): Invalid header checksum
[  187.798792][ T5946] usb 3-1: device descriptor read/64, error -71
[  187.861325][   T49] Bluetooth: (null): Invalid header checksum
[  187.960445][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.971268][   T49] Bluetooth: (null): Invalid header checksum
[  187.988124][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.045785][ T5946] usb 3-1: new low-speed USB device number 56 using dummy_hcd
[  188.076130][ T3171] Bluetooth: (null): Invalid header checksum
[  188.185762][ T5946] usb 3-1: device descriptor read/64, error -71
[  188.192257][   T36] Bluetooth: (null): Invalid header checksum
[  188.266012][ T8038] mmap: syz.5.478 (8038) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  188.306198][   T13] Bluetooth: (null): Invalid header checksum
[  188.317225][ T5946] usb usb3-port1: attempt power cycle
[  188.416089][   T13] Bluetooth: (null): Invalid header checksum
[  188.486354][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'.
[  188.528220][   T36] Bluetooth: (null): Invalid header checksum
[  188.575756][   T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  188.636176][   T49] Bluetooth: (null): Invalid header checksum
[  188.738578][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.750147][   T49] Bluetooth: (null): Invalid header checksum
[  188.756606][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.775780][ T5946] usb 3-1: new low-speed USB device number 57 using dummy_hcd
[  188.796567][ T5946] usb 3-1: device descriptor read/8, error -71
[  188.986929][   T36] Bluetooth: (null): Invalid header checksum
[  188.993054][   T36] Bluetooth: (null): Invalid header checksum
[  189.035770][ T5946] usb 3-1: new low-speed USB device number 58 using dummy_hcd
[  189.055760][   T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  189.064851][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.066700][ T5946] usb 3-1: device descriptor read/8, error -71
[  189.083901][   T10] usb 1-1: config 0 descriptor??
[  189.096053][ T3171] Bluetooth: (null): Invalid header checksum
[  189.203990][ T3171] Bluetooth: (null): Invalid header checksum
[  189.226724][ T5946] usb usb3-port1: unable to enumerate USB device
[  189.318105][   T13] Bluetooth: (null): Invalid header checksum
[  189.426773][ T3171] Bluetooth: (null): Invalid header checksum
[  189.526098][   T10] uclogic 0003:256C:006D.0009: failed retrieving Huion firmware version: -22
[  189.534991][   T10] uclogic 0003:256C:006D.0009: failed probing parameters: -22
[  189.556977][   T13] Bluetooth: (null): Invalid header checksum
[  189.557826][ T5947] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  189.570804][   T10] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -22
[  189.596168][   T10] usb 1-1: USB disconnect, device number 56
[  189.657185][ T3171] Bluetooth: (null): Invalid header checksum
[  189.756416][   T36] Bluetooth: (null): Invalid header checksum
[  189.786107][ T5947] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  189.795225][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.812128][ T5947] usb 6-1: config 0 descriptor??
[  189.826356][ T5947] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  189.866232][ T3171] Bluetooth: (null): Invalid header checksum
[  189.891928][ T8043] syz.3.483 (8043): drop_caches: 2
[  189.981617][ T8054] fuse: Bad value for 'group_id'
[  189.986292][   T36] Bluetooth: (null): Invalid header checksum
[  189.987009][ T8054] fuse: Bad value for 'group_id'
[  190.003873][ T8054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.013999][ T8054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.026819][ T8054] netlink: 44 bytes leftover after parsing attributes in process `syz.3.487'.
[  190.050033][   T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  190.058355][ T8054] netlink: 44 bytes leftover after parsing attributes in process `syz.3.487'.
[  190.086244][   T49] Bluetooth: (null): Invalid header checksum
[  190.206826][ T3171] Bluetooth: (null): Invalid header checksum
[  190.225150][ T8048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.244514][   T10] usb 1-1: Using ep0 maxpacket: 32
[  190.253918][   T10] usb 1-1: too many configurations: 17, using maximum allowed: 8
[  190.262442][ T8048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.275528][   T10] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  190.284787][   T10] usb 1-1: config 0 has no interface number 0
[  190.293419][ T5947] gp8psk: usb out operation failed.
[  190.299630][ T5947] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  190.311910][ T5947] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  190.318328][ T5946] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  190.322914][   T10] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  190.337535][   T10] usb 1-1: config 0 has no interface number 0
[  190.339708][ T3171] Bluetooth: (null): Invalid header checksum
[  190.347351][   T10] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  190.363215][   T10] usb 1-1: config 0 has no interface number 0
[  190.370336][ T5947] usb 6-1: USB disconnect, device number 22
[  190.381440][   T10] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  190.391672][   T10] usb 1-1: config 0 has no interface number 0
[  190.399398][ T5946] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  190.416031][   T10] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  190.426247][ T3171] Bluetooth: (null): Invalid header checksum
[  190.434389][   T10] usb 1-1: config 0 has no interface number 0
[  190.458184][   T10] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  190.475726][   T10] usb 1-1: config 0 has no interface number 0
[  190.488946][   T10] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  190.505758][   T10] usb 1-1: config 0 has no interface number 0
[  190.523542][   T10] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  190.528418][ T8060] fido_id[8060]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  190.535705][   T10] usb 1-1: config 0 has no interface number 0
[  190.551795][ T3171] Bluetooth: (null): Invalid header checksum
[  190.578197][   T10] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  190.604584][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.616058][   T10] usb 1-1: Product: syz
[  190.620326][   T10] usb 1-1: Manufacturer: syz
[  190.638237][ T8062] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.490'.
[  190.645497][   T10] usb 1-1: SerialNumber: syz
[  190.656075][   T36] Bluetooth: (null): Invalid header checksum
[  190.656518][   T10] usb 1-1: config 0 descriptor??
[  190.670677][   T10] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz)
[  190.767991][ T3171] Bluetooth: (null): Invalid header checksum
[  190.851626][ T8068] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  190.878805][   T10] etas_es58x 1-1:0.2: could not parse product info: '424242424242'
[  190.894765][ T3171] Bluetooth: (null): Invalid header checksum
[  190.929713][ T8068] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  190.947051][ T8068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'.
[  190.985815][ T5946] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  190.987342][   T49] Bluetooth: (null): Invalid header checksum
[  191.067610][ T8068] syz.3.493 (8068) used greatest stack depth: 17832 bytes left
[  191.106305][   T49] Bluetooth: (null): Invalid header checksum
[  191.145989][ T5946] usb 3-1: Using ep0 maxpacket: 16
[  191.160127][ T5946] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  191.169875][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.178977][ T5946] usb 3-1: Product: syz
[  191.185913][ T5946] usb 3-1: Manufacturer: syz
[  191.193446][ T5946] usb 3-1: SerialNumber: syz
[  191.216102][   T49] Bluetooth: (null): Invalid header checksum
[  191.218034][ T5946] r8152-cfgselector 3-1: Unknown version 0x0000
[  191.229627][ T5946] r8152-cfgselector 3-1: config 0 descriptor??
[  191.327097][   T36] Bluetooth: (null): Invalid header checksum
[  191.436272][   T36] Bluetooth: (null): Invalid header checksum
[  191.444728][ T8084] overlayfs: failed to resolve '/��X]�����-bca6NJ�l�}6�;t���GeY޸ eE��X-3���щ��1�=�s.Ի�����'��9'�
[  191.444728][ T8084] 7�c&����b��D��w�a��!|�����_�Z�I1��.H�Z}k$����#�+-kr��k��H.�?j#M@i�	���]���th����]�ܼ�2^���P��������(�L2#i0�U�zb�
��[�C-�&�(8�‡��s���噴�X�j ��?����)��`���R���&�*�'-����������Į�m5���-��1bK �ܰ���`x��|íQ��-œ��ci�����Gv���4وIK���^WҘ2<�
��Gg��}T��k�еy�VQ�
[  191.444728][ T8084] ���?y��|': -36
[  191.548581][   T49] Bluetooth: (null): Invalid header checksum
[  191.579379][ T8090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.590526][ T8090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.656197][   T36] Bluetooth: (null): Invalid header checksum
[  191.656703][ T5946] r8152-cfgselector 3-1: USB disconnect, device number 59
[  191.749333][    C1] etas_es58x 1-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x6280.
[  191.760502][    C1] etas_es58x 1-1:0.2: es58x_split_urb_try_recovery: Recovery failed
[  191.768531][    C1] etas_es58x 1-1:0.2: es58x_split_urb() returned error -EBADMSG
[  191.776965][    C1] etas_es58x 1-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x4FB7.
[  191.777886][ T5527] etas_es58x 1-1:0.2 can1: bit-timing not yet defined
[  191.788170][    C1] etas_es58x 1-1:0.2: es58x_check_rx_urb: Biggest expected size for rx urb_cmd is 7809 but receive a command of size 48977
[  191.807807][    C1] etas_es58x 1-1:0.2: es58x_split_urb_try_recovery: Recovery failed
[  191.815827][    C1] etas_es58x 1-1:0.2: es58x_split_urb() returned error -EBADMSG
[  191.824101][   T36] Bluetooth: (null): Invalid header checksum
[  191.882619][ T8095] netlink: 76 bytes leftover after parsing attributes in process `syz.5.497'.
[  191.894970][   T36] Bluetooth: (null): Invalid header checksum
[  191.950234][ T8098] xt_time: invalid argument - start or stop time greater than 23:59:59
[  191.996261][   T36] Bluetooth: (null): Invalid header checksum
[  192.045002][    C1] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  192.054360][    C1] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  192.063570][    C1] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  192.072853][    C1] etas_es58x 1-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO
[  192.082060][    C1] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  192.091445][    C1] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  192.100898][ T5527] etas_es58x 1-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL
[  192.111102][ T5946] usb 1-1: USB disconnect, device number 57
[  192.123445][   T60] Bluetooth: (null): Invalid header checksum
[  192.131787][ T5946] etas_es58x 1-1:0.2: Disconnecting syz syz
[  192.217341][   T13] Bluetooth: (null): Invalid header checksum
[  192.268024][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.280010][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.322785][ T8111] binder: 8108:8111 ioctl c0306201 200000000380 returned -14
[  192.333164][   T36] Bluetooth: (null): Invalid header checksum
[  192.438794][   T36] Bluetooth: (null): Invalid header checksum
[  192.552807][   T49] Bluetooth: (null): Invalid header checksum
[  192.662100][   T13] Bluetooth: (null): Invalid header checksum
[  192.780988][   T13] Bluetooth: (null): Invalid header checksum
[  192.781432][ T5946] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  192.890717][ T3171] Bluetooth: (null): Invalid header checksum
[  192.957580][ T5947] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  192.975774][ T5946] usb 3-1: Using ep0 maxpacket: 8
[  192.984523][ T5946] usb 3-1: config 0 has an invalid interface number: 24 but max is 0
[  192.993203][ T5946] usb 3-1: config 0 has no interface number 0
[  192.996170][ T3171] Bluetooth: (null): Invalid header checksum
[  193.001322][ T5946] usb 3-1: config 0 interface 24 has no altsetting 0
[  193.017067][ T5946] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  193.026786][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.040702][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.049964][ T5946] usb 3-1: Product: syz
[  193.054167][ T5946] usb 3-1: Manufacturer: syz
[  193.059412][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.069011][ T5946] usb 3-1: SerialNumber: syz
[  193.078433][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.088189][ T5946] usb 3-1: config 0 descriptor??
[  193.096103][ T3171] Bluetooth: (null): Invalid header checksum
[  193.102110][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.137372][ T5947] usb 1-1: Using ep0 maxpacket: 16
[  193.149252][ T5947] usb 1-1: config 127 has an invalid interface number: 102 but max is 2
[  193.164470][ T5947] usb 1-1: config 127 has no interface number 2
[  193.174796][ T5947] usb 1-1: config 127 interface 0 has no altsetting 0
[  193.181760][   T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  193.189943][ T5947] usb 1-1: config 127 interface 1 has no altsetting 0
[  193.198030][ T5947] usb 1-1: config 127 interface 102 has no altsetting 0
[  193.208739][ T3171] Bluetooth: (null): Invalid header checksum
[  193.219345][ T5947] usb 1-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d
[  193.231497][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.248681][ T5947] usb 1-1: Product: syz
[  193.252925][ T5947] usb 1-1: Manufacturer: syz
[  193.257884][ T5947] usb 1-1: SerialNumber: syz
[  193.316233][ T3171] Bluetooth: (null): Invalid header checksum
[  193.355759][   T10] usb 6-1: Using ep0 maxpacket: 32
[  193.363440][   T10] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  193.372475][   T10] usb 6-1: config 0 has no interface number 0
[  193.379221][   T10] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  193.390578][   T10] usb 6-1: config 0 interface 196 has no altsetting 0
[  193.404742][   T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  193.415172][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.423515][   T10] usb 6-1: Product: syz
[  193.428304][ T3171] Bluetooth: (null): Invalid header checksum
[  193.434992][   T10] usb 6-1: Manufacturer: syz
[  193.442221][   T10] usb 6-1: SerialNumber: syz
[  193.461037][   T10] usb 6-1: config 0 descriptor??
[  193.480694][ T8140] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  193.498421][ T5947] usb 1-1: selecting invalid altsetting 0
[  193.506345][ T5947] usb 1-1: Could not set interface, error -22
[  193.519517][ T5947] usb 1-1: selecting invalid altsetting 0
[  193.526203][ T5947] usb 1-1: Could not set interface, error -22
[  193.536530][ T3171] Bluetooth: (null): Invalid header checksum
[  193.546491][ T5947] usb 1-1: USB disconnect, device number 58
[  193.650831][   T49] Bluetooth: (null): Invalid header checksum
[  193.701640][   T10] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  193.722755][   T10] ipheth 6-1:0.196: probe with driver ipheth failed with error -22
[  193.758593][ T3171] Bluetooth: (null): Invalid header checksum
[  193.809424][   T10] usb 6-1: USB disconnect, device number 23
[  193.870911][ T3171] Bluetooth: (null): Invalid header checksum
[  193.976305][   T60] Bluetooth: (null): Invalid header checksum
[  194.012267][ T8180] netlink: 201916 bytes leftover after parsing attributes in process `syz.3.509'.
[  194.066579][ T8180] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  194.082675][ T8183] Invalid ELF header magic: != ELF
[  194.099905][   T60] Bluetooth: (null): Invalid header checksum
[  194.206120][   T36] Bluetooth: (null): Invalid header checksum
[  194.316167][   T60] Bluetooth: (null): Invalid header checksum
[  194.373783][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  194.380309][   T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  194.388114][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  194.426116][ T3171] Bluetooth: (null): Invalid header checksum
[  194.536501][   T36] Bluetooth: (null): Invalid header checksum
[  194.548506][   T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  194.557067][   T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  194.569214][   T10] usb 1-1: config 220 has no interface number 2
[  194.576273][   T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  194.625908][   T10] usb 1-1: config 220 interface 0 has no altsetting 0
[  194.632740][   T10] usb 1-1: config 220 interface 76 has no altsetting 0
[  194.646053][   T60] Bluetooth: (null): Invalid header checksum
[  194.655731][   T10] usb 1-1: config 220 interface 1 has no altsetting 0
[  194.676547][   T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  194.695993][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.712818][   T10] usb 1-1: Product: syz
[  194.721311][   T10] usb 1-1: Manufacturer: syz
[  194.726624][   T10] usb 1-1: SerialNumber: syz
[  194.756470][   T60] Bluetooth: (null): Invalid header checksum
[  194.866360][   T60] Bluetooth: (null): Invalid header checksum
[  194.940742][ T8183] Invalid ELF header type: 2 != 1
[  194.958086][   T10] usb 1-1: selecting invalid altsetting 0
[  194.964512][   T10] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  194.974470][   T10] uvcvideo 1-1:220.0: No valid video chain found.
[  194.981480][   T60] Bluetooth: (null): Invalid header checksum
[  194.991348][   T10] usb 1-1: selecting invalid altsetting 0
[  194.997956][   T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  195.016424][   T10] usb 1-1: USB disconnect, device number 59
[  195.086380][   T36] Bluetooth: (null): Invalid header checksum
[  195.114869][ T8207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.124751][ T8207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.165809][ T5947] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  195.196048][   T49] Bluetooth: (null): Invalid header checksum
[  195.295797][ T5947] usb 6-1: device descriptor read/64, error -71
[  195.306414][   T60] Bluetooth: (null): Invalid header checksum
[  195.417186][   T60] Bluetooth: (null): Invalid header checksum
[  195.527437][   T60] Bluetooth: (null): Invalid header checksum
[  195.545922][ T5947] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  195.607925][  T980] usb 3-1: USB disconnect, device number 60
[  195.636158][   T60] Bluetooth: (null): Invalid header checksum
[  195.684220][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'.
[  195.697350][ T8216] netlink: 'syz.3.518': attribute type 10 has an invalid length.
[  195.715626][ T8216] veth0_vlan: left promiscuous mode
[  195.722755][ T8216] veth0_vlan: entered promiscuous mode
[  195.732502][ T8216] team0: Device veth0_vlan failed to register rx_handler
[  195.735780][ T5947] usb 6-1: device descriptor read/64, error -71
[  195.746689][   T49] Bluetooth: (null): Invalid header checksum
[  195.856974][ T5947] usb usb6-port1: attempt power cycle
[  195.857723][ T3171] Bluetooth: (null): Invalid header checksum
[  195.925778][  T980] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  195.963605][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.973839][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.978281][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.989842][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.993344][ T3171] Bluetooth: (null): Invalid header checksum
[  196.056765][ T8229] netlink: 156 bytes leftover after parsing attributes in process `syz.3.521'.
[  196.086419][   T36] Bluetooth: (null): Invalid header checksum
[  196.112024][  T980] usb 3-1: config 4 has an invalid interface number: 76 but max is 1
[  196.113759][ T8231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.122667][  T980] usb 3-1: config 4 has an invalid interface number: 172 but max is 1
[  196.138479][  T980] usb 3-1: config 4 has no interface number 0
[  196.141872][ T8231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.145605][  T980] usb 3-1: config 4 has no interface number 1
[  196.159526][  T980] usb 3-1: config 4 interface 76 altsetting 5 endpoint 0xC has an invalid bInterval 128, changing to 11
[  196.170845][  T980] usb 3-1: config 4 interface 76 altsetting 5 endpoint 0x2 has an invalid bInterval 130, changing to 11
[  196.182308][  T980] usb 3-1: config 4 interface 76 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  196.193511][  T980] usb 3-1: config 4 interface 76 altsetting 5 has an endpoint descriptor with address 0xD3, changing to 0x83
[  196.205507][  T980] usb 3-1: config 4 interface 76 altsetting 5 endpoint 0x83 has an invalid bInterval 83, changing to 7
[  196.206108][   T49] Bluetooth: (null): Invalid header checksum
[  196.221337][ T5947] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  196.230478][  T980] usb 3-1: config 4 interface 76 altsetting 5 endpoint 0x83 has invalid maxpacket 42885, setting to 1024
[  196.242022][  T980] usb 3-1: config 4 interface 76 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[  196.262387][ T5947] usb 6-1: device descriptor read/8, error -71
[  196.274565][  T980] usb 3-1: config 4 interface 76 has no altsetting 0
[  196.282926][  T980] usb 3-1: config 4 interface 172 has no altsetting 0
[  196.292562][  T980] usb 3-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=ab.1b
[  196.301896][  T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.310842][  T980] usb 3-1: Product: syz
[  196.310894][   T36] Bluetooth: (null): Invalid header checksum
[  196.315034][  T980] usb 3-1: Manufacturer: syz
[  196.315052][  T980] usb 3-1: SerialNumber: syz
[  196.416278][   T36] Bluetooth: (null): Invalid header checksum
[  196.516557][ T5947] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  196.526233][   T49] Bluetooth: (null): Invalid header checksum
[  196.548437][ T5947] usb 6-1: device descriptor read/8, error -71
[  196.557234][  T980] em28xx 3-1:4.76: New device syz syz @ 480 Mbps (2040:8265, interface 76, class 76)
[  196.566986][  T980] em28xx 3-1:4.76: Audio interface 76 found (Vendor Class)
[  196.636318][ T3171] Bluetooth: (null): Invalid header checksum
[  196.642533][  T980] em28xx 3-1:4.76: unknown em28xx chip ID (0)
[  196.649356][  T980] em28xx 3-1:4.76: Config register raw data: 0xfffffffb
[  196.657068][  T980] em28xx 3-1:4.76: AC97 chip type couldn't be determined
[  196.664139][  T980] em28xx 3-1:4.76: No AC97 audio processor
[  196.670152][  T980] em28xx 3-1:4.76: We currently don't support analog TV or stream capture on dual tuners.
[  196.680562][ T5947] usb usb6-port1: unable to enumerate USB device
[  196.715788][   T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  196.734199][ T8247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.743085][ T8247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.747157][   T36] Bluetooth: (null): Invalid header checksum
[  196.757617][  T980] em28xx 3-1:4.76: unknown em28xx chip ID (0)
[  196.764304][  T980] em28xx 3-1:4.76: Config register raw data: 0xfffffffb
[  196.772827][  T980] em28xx 3-1:4.76: AC97 chip type couldn't be determined
[  196.780568][  T980] em28xx 3-1:4.76: No AC97 audio processor
[  196.856259][   T49] Bluetooth: (null): Invalid header checksum
[  196.867092][   T10] usb 1-1: Using ep0 maxpacket: 32
[  196.887134][   T10] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  196.905937][   T10] usb 1-1: config 0 has no interface number 0
[  196.912556][   T10] usb 1-1: config 0 interface 89 has no altsetting 0
[  196.928689][   T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  196.938251][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.955735][   T10] usb 1-1: Product: syz
[  196.959979][   T10] usb 1-1: Manufacturer: syz
[  196.964588][   T10] usb 1-1: SerialNumber: syz
[  196.975996][   T36] Bluetooth: (null): Invalid header checksum
[  196.988100][   T10] usb 1-1: config 0 descriptor??
[  197.007854][   T10] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  197.025717][   T10] em28xx 1-1:0.89: Video interface 89 found: bulk
[  197.076606][   T36] Bluetooth: (null): Invalid header checksum
[  197.112306][  T980] usb 3-1: USB disconnect, device number 61
[  197.124683][  T980] em28xx 3-1:4.76: Disconnecting em28xx #1
[  197.130858][  T980] em28xx 3-1:4.76: Disconnecting em28xx
[  197.152660][  T980] em28xx 3-1:4.76: Freeing device
[  197.159639][  T980] em28xx 3-1:4.76: Freeing device
[  197.186178][   T49] Bluetooth: (null): Invalid header checksum
[  197.200899][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.211436][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.225144][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.238233][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.297475][   T49] Bluetooth: (null): Invalid header checksum
[  197.406048][   T36] Bluetooth: (null): Invalid header checksum
[  197.448593][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.461939][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.516142][   T36] Bluetooth: (null): Invalid header checksum
[  197.606240][  T980] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  197.628188][ T8258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.638771][   T49] Bluetooth: (null): Invalid header checksum
[  197.638865][ T8258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.672920][   T10] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[  197.746721][   T36] Bluetooth: (null): Invalid header checksum
[  197.767204][  T980] usb 3-1: Using ep0 maxpacket: 16
[  197.774477][  T980] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.785711][  T980] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.795546][  T980] usb 3-1: config 0 interface 0 has no altsetting 0
[  197.802414][  T980] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  197.811645][  T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.824460][  T980] usb 3-1: config 0 descriptor??
[  197.856141][   T60] Bluetooth: (null): Invalid header checksum
[  197.966284][   T60] Bluetooth: (null): Invalid header checksum
[  198.088803][   T10] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  198.089026][   T36] Bluetooth: (null): Invalid header checksum
[  198.097272][   T10] em28xx 1-1:0.89: board has no eeprom
[  198.196198][   T49] Bluetooth: (null): Invalid header checksum
[  198.263016][  T980] cougar 0003:060B:500A.000B: unexpected long global item
[  198.277638][  T980] cougar 0003:060B:500A.000B: parse failed
[  198.283720][  T980] cougar 0003:060B:500A.000B: probe with driver cougar failed with error -22
[  198.316114][   T60] Bluetooth: (null): Invalid header checksum
[  198.325809][ T5946] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  198.365733][   T10] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[  198.373118][   T10] em28xx 1-1:0.89: analog set to bulk mode.
[  198.382855][  T980]  non-slab/vmalloc memory
[  198.392206][  T980] list_add corruption. prev->next should be next (ffffffff8f56ea80), but was 0000000000000000. (prev=ffff88805bb24250).
[  198.408058][  T980] ------------[ cut here ]------------
[  198.413568][  T980] kernel BUG at lib/list_debug.c:34!
[  198.421456][   T10] usb 1-1: USB disconnect, device number 60
[  198.431014][   T49] Bluetooth: (null): Invalid header checksum
[  198.451632][   T10] em28xx 1-1:0.89: Disconnecting em28xx
[  198.457505][  T980] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  198.463976][  T980] CPU: 0 UID: 0 PID: 980 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) 
[  198.466335][   T24] usb 3-1: USB disconnect, device number 62
[  198.473295][  T980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  198.473313][  T980] Workqueue: events request_module_async
[  198.473366][  T980] RIP: 0010:__list_add_valid_or_report+0x123/0x130
[  198.473395][  T980] Code: e8 02 8e 25 fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 13 59 47 fd 49 8b 16 48 c7 c7 a0 3f 05 8c 48 89 de 4c 89 f1 e8 ee 48 4a fc 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90
[  198.473412][  T980] RSP: 0018:ffffc9000392f9e0 EFLAGS: 00010246
[  198.473429][  T980] RAX: 0000000000000075 RBX: ffffffff8f56ea80 RCX: 78e085ad48f03300
[  198.473443][  T980] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  198.473456][  T980] RBP: 1ffffffff1eadd51 R08: ffffc9000392f707 R09: 1ffff92000725ee0
[  198.473473][  T980] R10: dffffc0000000000 R11: fffff52000725ee1 R12: 1ffff1100b76484a
[  198.495762][ T5946] usb 6-1: Using ep0 maxpacket: 32
[  198.501546][  T980] R13: dffffc0000000000 R14: ffff88805bb24250 R15: ffff88807be00250
[  198.501568][  T980] FS:  0000000000000000(0000) GS:ffff8881257a2000(0000) knlGS:0000000000000000
[  198.501585][  T980] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  198.501599][  T980] CR2: 000000110c3c225e CR3: 0000000032ffe000 CR4: 00000000003526f0
[  198.556384][ T5946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.559275][  T980] Call Trace:
[  198.559293][  T980]  <TASK>
[  198.559306][  T980]  em28xx_init_extension+0x56/0x1c0
[  198.564751][ T5946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.572400][  T980]  ? process_scheduled_works+0x9ef/0x17b0
[  198.572432][  T980]  process_scheduled_works+0xae1/0x17b0
[  198.572469][  T980]  ? __pfx_process_scheduled_works+0x10/0x10
[  198.598295][ T5946] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00
[  198.606839][  T980]  worker_thread+0x8a0/0xda0
[  198.606876][  T980]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  198.606910][  T980]  ? __kthread_parkme+0x7b/0x200
[  198.606940][  T980]  kthread+0x711/0x8a0
[  198.620424][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.628110][  T980]  ? __pfx_worker_thread+0x10/0x10
[  198.628145][  T980]  ? __pfx_kthread+0x10/0x10
[  198.628174][  T980]  ? _raw_spin_unlock_irq+0x23/0x50
[  198.628204][  T980]  ? lockdep_hardirqs_on+0x9c/0x150
[  198.652484][ T5946] usb 6-1: config 0 descriptor??
[  198.654471][  T980]  ? __pfx_kthread+0x10/0x10
[  198.712067][  T980]  ret_from_fork+0x4bc/0x870
[  198.716702][  T980]  ? __pfx_ret_from_fork+0x10/0x10
[  198.721871][  T980]  ? __switch_to_asm+0x39/0x70
[  198.726666][  T980]  ? __switch_to_asm+0x33/0x70
[  198.731471][  T980]  ? __pfx_kthread+0x10/0x10
[  198.736115][  T980]  ret_from_fork_asm+0x1a/0x30
[  198.740925][  T980]  </TASK>
[  198.743975][  T980] Modules linked in:
[  198.748490][  T980] ---[ end trace 0000000000000000 ]---
[  198.759988][   T49] Bluetooth: (null): Invalid header checksum
[  198.766283][  T980] RIP: 0010:__list_add_valid_or_report+0x123/0x130
[  198.772875][  T980] Code: e8 02 8e 25 fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 13 59 47 fd 49 8b 16 48 c7 c7 a0 3f 05 8c 48 89 de 4c 89 f1 e8 ee 48 4a fc 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90
[  198.792683][  T980] RSP: 0018:ffffc9000392f9e0 EFLAGS: 00010246
[  198.798922][  T980] RAX: 0000000000000075 RBX: ffffffff8f56ea80 RCX: 78e085ad48f03300
[  198.810750][  T980] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  198.824381][  T980] RBP: 1ffffffff1eadd51 R08: ffffc9000392f707 R09: 1ffff92000725ee0
[  198.856321][   T49] Bluetooth: (null): Invalid header checksum
[  198.894964][  T980] R10: dffffc0000000000 R11: fffff52000725ee1 R12: 1ffff1100b76484a
[  198.903233][  T980] R13: dffffc0000000000 R14: ffff88805bb24250 R15: ffff88807be00250
[  198.911544][  T980] FS:  0000000000000000(0000) GS:ffff8881257a2000(0000) knlGS:0000000000000000
[  198.920880][  T980] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  198.927687][  T980] CR2: 000000110c3c225e CR3: 000000007caf4000 CR4: 00000000003526f0
[  198.935744][  T980] Kernel panic - not syncing: Fatal exception
[  198.942197][  T980] Kernel Offset: disabled
[  198.946543][  T980] Rebooting in 86400 seconds..