last executing test programs:

10.912178658s ago: executing program 0 (id=66):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x200000)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0xb, @pix={0x9, 0x0, 0x42303159, 0x6, 0xfffffffb, 0x0, 0x6, 0x1219, 0x1, 0x3, 0x1, 0x7}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x6, 0x2, {0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xc000, 0x7ffe)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r6, 0x0, 0x2, 0x0) (async)
pipe(&(0x7f0000000480)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async)
r9 = socket$netlink(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r7, 0xffffffffffffffcd, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0}}, 0x10)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x49881}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x40}}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
splice(r7, 0x0, r9, 0x0, 0x800000000082, 0xf)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000c600000c00150000000000000100de"], 0x5c}}, 0x4004040) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0)

10.263146265s ago: executing program 0 (id=68):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010639d00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000007d000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040))
timer_create(0x0, 0x0, &(0x7f0000000200)=<r3=>0x0)
timer_settime(r3, 0x1, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
write$tun(r4, 0x0, 0xfdef)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000000)={0xc0002003})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10.084432578s ago: executing program 0 (id=69):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xb0e, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfe, 0x9498e17e2907101c, 0x9, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x99, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xdd4}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x80, 0x9}}}}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(r1, 0x40095505, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x800)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f00000000c0)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = dup(r4)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
write$P9_RSTATFS(r7, &(0x7f00000001c0)={0x43, 0x9, 0x1, {0x4b0, 0xa3, 0x4, 0x8000000000000001, 0xb6, 0x0, 0x1, 0x401, 0x7fff}}, 0x43)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0xf0ff)

9.331393918s ago: executing program 3 (id=71):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0)

8.032399358s ago: executing program 3 (id=74):
syz_open_dev$video(&(0x7f0000000040), 0x8, 0x109340)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20)
r1 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000002000/0x4000)=nil, 0x4000}, 0x1})
syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), 0xffffffffffffffff)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000004240)={0x2020}, 0x2020)
read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002140)=ANY=[@ANYBLOB="340000002500010022bd7000fcffffff1d000005fe000d803757ce55f362adf42d107199b7ddc014d7d6ba10e268dedc960000008eff0b2fd78766c37b902bee07a0882bdf521c36d28c2bb5bd3faefa385b691b8e871cceb782ce024f14e43dd839e614e31702dd90a6a18eba718dfbfbd85fd0d7eaea558cdbb9bf49e58b813e8e5ece78f55d32210faa007187"], 0x34}, 0x1, 0x0, 0x0, 0x449d7}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x4c, 0x0, &(0x7f00000001c0))
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x120)
connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
r5 = timerfd_create(0x0, 0x80800)
timerfd_settime(r4, 0x1, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, &(0x7f00000001c0))
r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {<r7=>0xee01, 0xffffffffffffffff}}, './file1\x00'})
quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000201, r7, &(0x7f0000000300)='./file0\x00')
timerfd_settime(r5, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r8, &(0x7f0000001480)=[{&(0x7f00000011c0)=""/123, 0x7b}], 0x1)

7.527659462s ago: executing program 2 (id=75):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000340)={0x92, 0x3, 0x7, 0x5, '\x00', '\x00', '\x00', 0x7fff, 0x7f000, 0x6, 0x7fffffff, "6548360b1c2c6408f908b86f18c0fd14"})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x148}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000007c0)={r1, &(0x7f0000000100)='\x00', 0x48000, &(0x7f00000004c0)={@align=0x40, {0x58, 0x3, 0x9, 0x80}}, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x3c})
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x8000)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x0, 0xffffff80, 0x0, 0x7}})
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req={0x5, 0x9, 0xfdff8000, 0x4}, 0x10)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000001c0)=0xffffffff, 0x4)
syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd20cb653e00283afffe800000000000000000000000000015ff020000fc010000000000000000000000000001fc010000000000000000000002000001"], 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000010000000000a00200062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x24004880)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000090000000800000040"], 0x50)
creat(&(0x7f0000000bc0)='./file0\x00', 0xecf86c37d53049cc)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f0000001e00)={0x2020, 0x0, <r8=>0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
syz_fuse_handle_req(r7, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x10001, {0x3ffffffffffffffc, 0x3, 0x0, '\x00', {0x2fff, 0x2, 0x6, 0x906, r9, r10, 0x2000, '\x00', 0x6, 0x27efc00800000, 0x81, 0x80000001, {0x7, 0x4}, {0x6, 0x3}, {0x15, 0x4}, {0xffffffffa, 0xa03}, 0x80008001, 0x0, 0xfffffffe, 0x5}}}})
write$FUSE_INIT(r7, &(0x7f0000001200)={0x50, 0x0, r8, {0x7, 0x29, 0xffffffff, 0x22000100, 0x0, 0x0, 0x8000000}}, 0x50)
r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
statx(r11, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x4, r6, 0x4}, 0x38)
r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10)
ioctl$KVM_SET_IRQCHIP(r12, 0x8208ae63, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xa000, 0x51, 0x800, 0x1000, 0x0, [{0x9, 0x4, 0x8c, '\x00', 0xd5}, {0xf7, 0x9, 0x8}, {0x3, 0x1, 0x5, '\x00', 0x7}, {0x8, 0x80, 0x80, '\x00', 0x1}, {0x4, 0x6f, 0x7, '\x00', 0x81}, {0xf9, 0x6e, 0x5e}, {0x8, 0x7, 0x9, '\x00', 0x7}, {0x3, 0xf, 0x4}, {0x3f, 0x4, 0x0, '\x00', 0xff}, {0xf, 0x8, 0x3, '\x00', 0x9}, {0x5, 0x4, 0x0, '\x00', 0x1}, {0x3, 0x4, 0x0, '\x00', 0xd}, {0x80, 0x3, 0x73, '\x00', 0x5}, {0x4, 0x7a, 0x50, '\x00', 0x6}, {0x6, 0x2, 0x17, '\x00', 0xd9}, {0x1, 0xb, 0x7c, '\x00', 0xf1}, {0xc, 0x9, 0x0, '\x00', 0x7}, {0x1, 0x4, 0xa, '\x00', 0x2}, {0x8, 0x1, 0x3, '\x00', 0xfe}, {0xf1, 0x7, 0x8, '\x00', 0x40}, {0x2, 0x0, 0x4, '\x00', 0x1}, {0x3c, 0xfd, 0x7, '\x00', 0x60}, {0x4, 0x5, 0x2, '\x00', 0x52}, {0xd, 0x5, 0x0, '\x00', 0x5}]}})
sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000ffff0000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000039dca31aff7f000000000000000000000000fbfffffffeffffff000000000000000000000000000000000000000000000002000000000000000000000000c06b6e000000000000000000"], 0xb8}}, 0x2c000010)

6.880464333s ago: executing program 0 (id=77):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = io_uring_setup(0x7b8b, &(0x7f0000000280)={0x0, 0x22bd, 0x200, 0xfffffffe, 0x31a})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400)
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
write$char_usb(r1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00')
read$proc_mixer(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsopen(0x0, 0x0)
socket(0x1490a59e041d8c1b, 0x0, 0x4)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)

6.511946141s ago: executing program 2 (id=79):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010639d00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000007d000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040))
timer_create(0x0, 0x0, &(0x7f0000000200)=<r3=>0x0)
timer_settime(r3, 0x1, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
write$tun(r4, 0x0, 0xfdef)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000000)={0xc0002003})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

6.404752982s ago: executing program 4 (id=80):
r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0x2) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf258300000008000300", @ANYRES32=0x0, @ANYBLOB="200011801c0005801800008014000380102101800c000180050005005d000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080), &(0x7f00000001c0)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xcb\xfd&\x8dE\xbb|&#\xe9\xa3\'\x91>C\x1fV\x87\xeb\xfe\xda\x89\xb7}@\xab%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x8d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00\x9dF\xcf\x14\xbex:\x1e\x851\xfb?\x94H\xac\xe8-\xfb(\x10W\xe8G\b\xf4\xbb\xb8\x16\\\x80Y\x7f\x9d\xecP\vS\xe5\xc6\x14X2\xc9,\xa5\x12t#\xf2\xb5(\xd6\xe5\fLo\x1b\x1f\x02\xd6V\xcb}\xa3])=bx\x95}\xbf\x92lu\x01\xd5\xf7\xcd\xfb\xa6\x9ag7\x03\xe4l\xcf5\x82\x01n)XF\xbbQ\x05/\xd0u[\xbd^M%\x047\xdf^v:;\xf2\x8e\x93_z\xd9-\x8e\x1f_A\x8c\xd2N\xb2\xc7@\x84\xdd\x13?\x1alArI#gH\x9b\xb9\x9f\'@\xb5\x06\x16M|\\E\xabu\x03\x00\x19\x83\xe7\xbc\xfa\xe4\x8e\x06\xfd\xa2\xdc|p\x91=\xc5\xca\xac]\xde\x1c\xdc\x03[\xfb\x958v\x8d:<\xf2\xa9\xe8\xc6\xd7\xe7;\xfb\xd18\xf5\xa7\x7f\x10\x13\x04\x1aW\x15*\x1b\xb9\xd4\xeaE=\x1e`\vY\xd8TeqtU\r\x89\xe2E6\xa5\xb2\xf79S ax\xc9\x05\x9a\xb5\x05\x91\x04\xa3A\x8dX', 0xfeffffff00000000)

6.251112213s ago: executing program 4 (id=81):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x5a, 0x1, 0x0, 0x0, {0x16}, [@generic="74d13007"]}, 0x18}}, 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002380)}], 0x5}}], 0x1, 0x4000001) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

6.161399357s ago: executing program 2 (id=82):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x40024, 0x2081}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x40)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500))
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x40)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000cc0)='notify_on_release\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000700)=ANY=[], 0x31)
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x282, 0x0, 0x8}]})

5.811411335s ago: executing program 4 (id=83):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8001, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async)
clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='projid_map\x00') (rerun: 64)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
pipe2(&(0x7f00000001c0), 0x4000) (async)
read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020)
preadv(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/17, 0x11}], 0x1, 0x6, 0x1) (async)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c74650000000000000001000000000000000000000000000000000000000500"], 0x78) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async)
r6 = socket$kcm(0x2, 0x1, 0x0)
listen(r6, 0x1000) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r6, r5}) (async, rerun: 64)
ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) (rerun: 64)

5.499421651s ago: executing program 4 (id=84):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0)

4.454388285s ago: executing program 4 (id=87):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000000c0)=@overlay={0x10001, 0x0, 0x4, 0x0, 0xaf100, {0x0, 0x2710}, {0x4, 0xc, 0xf, 0x0, 0x4, 0x77, "966696b4"}, 0x0, 0x3, {}, 0x5})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x204a83, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x100010, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mmap(&(0x7f000001c000/0x2000)=nil, 0x2000, 0x6, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e0, 0xc8, 0x2e4, 0x2e4, 0x40c, 0x0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'vlan0\x00', {}, {}, 0x6, 0x0, 0x0, 0x51}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@local, @loopback, [], [], 'vlan0\x00', 'syzkaller0\x00', {0xff}}, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x81}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, 0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x53c)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x835e5000)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3)
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0)
syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000000100000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)

4.162975858s ago: executing program 1 (id=88):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', <r3=>0x0})
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000003b80)={0x10000001}) (async)
write(r5, 0x0, 0x0) (async)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3, 0x1000000}, 0x10) (async)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000800)={0x0, 0x200000, 0x1000, 0x1, 0x2}, 0x20) (async)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x24}}, 0x0) (async)
close(0x3)

3.819862062s ago: executing program 2 (id=89):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
r4 = io_uring_setup(0x468e, &(0x7f00000000c0)={0x0, 0x8c1b, 0x400, 0x3, 0xe2, 0x0, r2})
splice(r2, &(0x7f0000000080)=0x9, r4, 0x0, 0x81, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b3"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, &(0x7f0000000100)={0x3, 0x100, 0x3d8})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084)
r7 = msgget(0x3, 0x42)
msgctl$IPC_STAT(r7, 0x2, &(0x7f0000000140)=""/78)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', <r8=>0x0, 0x4, 0x80, 0xff, 0x9, 0x54, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x20, 0x9}})
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000a40)={0x1, 0x1, 0x2, 0x101, @vifc_lcl_ifindex=r8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r9 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r10 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r11, {0xfffa, 0x6}, {}, {0xffff, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x8}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @loopback}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004091)
setsockopt$inet6_mreq(r3, 0x29, 0xf, &(0x7f0000000400)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r11}, 0x14)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x40, 0xd, 0x3a, {0x3a, 0x1, "24268c88b1b031d64824f3e9f4d4f9000ce7ef094c748e9aa14a074d4ab19689f62828c941bb99eca3ea066c6eefca7b152100cf4eb32b5d"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}}, &(0x7f0000000a00)={0x1c, &(0x7f0000000380)={0x0, 0x3, 0x28, "579a6eb562e2b958008de4f7bc1df7ee8f76b426fef26d2da37d42b9f46d6b75af108e6dbf8f1cd9"}, &(0x7f0000000580)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000009c0)})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="003179000000fd50", @ANYRESDEC=r9], 0x0, 0x0})

3.674821045s ago: executing program 0 (id=90):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a004e220000000500005f000000003a0040ffffe000000102000000200002000a00000000000000ff0100000000000000000000000000019c0000000d0001007564703a"], 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20040084)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x9b4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r3, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008111f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000240)=0x7)

3.347841328s ago: executing program 1 (id=91):
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x0, <r3=>0xffffffffffffffff}) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2e, 0x0, &(0x7f00000001c0)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af8babc441912e", 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1}, 0x50) (async)
r4 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001)
ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85)
ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc010643a, &(0x7f0000000080)={0x20000000, 0x3, 0x9})
r5 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) (async)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0x4, 0x9, 0xb, 0x0, 0x200000000001, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1, 0x5], 0x8000000, 0x11ab51}) (async)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060009"], 0x38}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00082dbd7000fedbdf250600000005000500070000100800020001000000"], 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x48000)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

3.25013203s ago: executing program 3 (id=92):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010639d00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000007d000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040))
timer_create(0x0, 0x0, &(0x7f0000000200)=<r3=>0x0)
timer_settime(r3, 0x1, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
write$tun(r4, 0x0, 0xfdef)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000000)={0xc0002003})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2.656607774s ago: executing program 3 (id=93):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000015c0), 0x123041, 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
faccessat2(r1, &(0x7f0000000000)='\x00', 0x2, 0x1000) (async)
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000cc0)={0x60, 0x0, &(0x7f000037f000/0x3000)=nil, &(0x7f00000b1000/0x4000)=nil, 0x2, &(0x7f0000000100)=[{0x5, 0x2, 0x1}, {0xf0c7, 0x9b8c, 0x400}], 0x2, 0xa7a0, 0x49, 0x26, 0x24, 0x4})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf)
r2 = syz_usb_connect$cdc_ncm(0x6, 0x91, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x60, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0xc0, 0x0, 0xb2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "d1cc"}, {0x5, 0x24, 0x0, 0x7aa}, {0xd, 0x24, 0xf, 0x1, 0x6c, 0x8, 0x67bd, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x3, 0x0, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x10}, @country_functional={0x12, 0x24, 0x7, 0x6, 0xce75, [0x7, 0xc713, 0x1, 0xfff, 0xdcc, 0x9]}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xfa, 0xae}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x44, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x4, 0x5}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x3, 0x9, 0x70, 0x0, 0x2}, 0x5b, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f5b00060b10010862f305f90e00031c100a0984000000050000000000000000c000000000ff000000ff000710021c6284000a100300080009f6080054100402478326c6eba6510333bc7bc2b8dfcc570a100300000001094000cd85872671797343d59a3f7a26fd9e0c4074378d5ae5498fc9228e78272958d4e129894ca9b3ce75e879f960a7468946acae83a258"], 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x301d}}, {0xe0, &(0x7f0000000280)=@string={0xe0, 0x3, "cfa61584401efa9b7291e5dbcc2c5a3171bfa7fa18f981bdb91e188dfe375fb1ee90d2375599dd37be00ac8f7bbe0c7dd5196c3c257f962d72dfb3ad45931ecb4a6dfbc9182acfe3b29336423b1735e36e30b9414abd2b7853830ff1a0597d4e6c9860f284e79c8c763ac19a5ae05a0cc17cf14867dad15a4abc60495da78fb16ef0b5045e1e851ada20237ce0bab68b96ae8327a3425a887a9f51f974e15f14c21597a7851ff1aca6deb615f1bf8bc52421ea04afa9809f5afa3ff64ff9b8a9f7cbbad39b098920b79e5adee14495502f3d9f149a2946f207625fb93558"}}, {0x33, &(0x7f0000000380)=@string={0x33, 0x3, "4eb23cf69eb453e5aea25f381a0b7988b15aa0104991999c3ba2be68b9417af3196dc1b393b28f325bf2e5a360d14c7931"}}]}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x58, r4, 0x1, 0x70bd25, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
socket$alg(0x26, 0x5, 0x0)
syz_usb_control_io(r2, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x40, 0xc, 0xc2, {0xc2, 0x24, "1bba8fb57af5ccf6719a44b1459b47288fc681db5053c57f0b8b8313c8fa52d397a54beee772b4ed8a36357c0ff5bfee728ffebe8426510dba24c084c21afff1d1c3fdd427c1c6eab903e55b0729f27e2f726203eafef2d0969d8a92ccbf4219f9e06f7769f19819a2cdb1bb059810d4d625bd1f8416bc6c2c5b25982667975c5a79ffe5d6a3d69e3ebabd8e903b76e0160fdde77fc1e1e8e5f9ea3d17138894c88bcc2d9a9d96fe07c404930c144c86e92f4047404bbe0505cc368d30d0b88d"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, &(0x7f0000000580)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x2, 0x0, 0x8, [0x687d45e27668dd2f, 0xc000, 0xff00cf, 0x0, 0x0, 0xff000f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xd0, 0x7, 0x40}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x8001, 0xf, 0x5, [0x0, 0x0, 0x0, 0xf73d60b565ba143b, 0xff3f00]}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x4, 0x32, 0x35, "d75055c6", "0fc95652"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x0, 0xb0, 0x4, 0x8f0}}}, &(0x7f0000000b40)={0x84, &(0x7f00000006c0)={0x0, 0x15, 0x8a, "726a0c0309616abc2b79bc9163e4115773fbe89422bcd1a84b8cef1ff267e1828b0e6bd7082af046e59ca1c1d003422eb38701819326d8b533580a4ed3916fbcab6b7a07311db3bf17d344b09556502c6b7121c840a9a9f25c03a49f2cd34bb37b5158bf510ffc4422ceb4f05b8f548a514cd04e738d2d5ba1ab2ca753248a29e34d39bc1f69ec631f01"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x4}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000900)={0x40, 0xb, 0x2, "c1df"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000980)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "a6d4"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x8}}) (async)
write$rfkill(r0, &(0x7f0000001600)={0x7, 0x8, 0x3, 0x1}, 0x8)

2.516341093s ago: executing program 0 (id=94):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
shmget$private(0x0, 0x1000, 0x1000, &(0x7f00008e6000/0x1000)=nil)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'vlan0\x00'})
fcntl$notify(r3, 0x402, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00'})

2.474463606s ago: executing program 1 (id=95):
msgget$private(0x0, 0x200)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x0)
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/anycast6\x00')
r2 = syz_ublk_setup_io_uring(0x1758, &(0x7f0000000040)={0x0, 0xe501, 0x20, 0x1, 0x15d, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
r3 = io_uring_setup(0x47e8, &(0x7f0000000180)={0x0, 0x391e, 0x2, 0x3, 0x13f, 0x0, r2})
ioctl$IOCTL_START_ACCEL_DEV(r3, 0x40096102, &(0x7f0000000800)={{&(0x7f0000000780)={'Accelerator1\x00', {&(0x7f0000000380)=@adf_str={@format={'Dc', '2', 'NumConcurrentRequests\x00'}, {"b1d73517fb7a70cf3cb065f53ac95ccc85ff03671c80282ab3acef0410c9a906bb9cfa5407e84c9fc73a3d9bbbc07dbb061b37470ad961f6fd560a00dedd587c"}, {&(0x7f00000002c0)=@adf_dec={@normal='NumberCyInstances\x00', {0x8001}, {&(0x7f0000000200)=@adf_dec={@bank={'Bank', '3', 'InterruptCoalescingEnabled\x00'}, {0xadc3}}}}}}}, {&(0x7f0000000700)={'Accelerator\x00', {&(0x7f0000000500)=@adf_hex={@format={'Cy', '2', 'RingSymRx\x00'}, {0x8}, {&(0x7f0000000440)=@adf_hex={@format={'Cy', '1', 'NumConcurrentAsymRequests\x00'}, {0x6}}}}}, {&(0x7f0000000680)={'Accelerator1\x00', {&(0x7f00000005c0)=@adf_str={@format={'Dc', '3', 'RingAsymRx\x00'}, {"cd8de000cea96879bc11cc2960df6e0d9ea037431e33d897a0fbc339657c6bec8ccfa48dbf28e67475a355f2534935faefe2fec0d7ffe24d4ce819c985fed259"}}}}}}}}}, 0xc8})
ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000840)={0x2})
r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000008c0), 0x220000, 0x0)
lseek(r4, 0x6, 0x1)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000900)=0x1)
syz_open_dev$sg(&(0x7f0000000940), 0x10001, 0x80000)
lseek(r2, 0x1, 0x3)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000c80)={{<r5=>r3, &(0x7f0000000980)='net/anycast6\x00', 0x400000, &(0x7f00000009c0)={@align=0x6, {0xc, 0xffff, 0x40}}, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)=0x6}, 0x2, &(0x7f0000000c40)=[{0x1, 0x6, &(0x7f0000000a80)='Accelerator\x00', &(0x7f0000000ac0)='82', 0x2, 0x18}, {0x2, 0x0, &(0x7f0000000b00)='[\x00', &(0x7f0000000b40)="dc525c0261cf5deb04970b1abf1cc8f5a432d50cf9d23ffbeda99dbe765458bb25dbc013db28d026ad33ae0dee9a57155d3b2cbfd24cf50cc9c1bf59cb126af8a0ad0a25345a37d205b072655f3d7de6b4a1522669ad6008bff76399435e1e9923defb84236ed8f0786744e1b60d50dcdaa31b70907bd8bfe8bbf3fbc139a83e2bbc0a46755df9d141f4b2ecd38fd04833c72f72b4021709c170730d0f44bfa22d2e90477b00716a6d0c95451b447882b830116ded87d176a1a5d8d404e604bbf757da0511deb2e2198912c12ad2ed81b4d47f1b88", 0xd5, 0x2}]})
ioctl$XFS_IOC_GETBMAPX(r5, 0xc0205838, &(0x7f0000000d00)={0x1, 0x7, 0x2, 0x3, 0x2, 0x0, 0x1})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000d40)={<r6=>0x0, 0x200}, &(0x7f0000000d80)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000dc0)={0x81, 0x408, 0x0, 0x7, r6}, &(0x7f0000000e00)=0x10)
mq_timedreceive(r3, &(0x7f0000000e40)=""/149, 0x95, 0x3, &(0x7f0000000f00)={0x0, 0x989680})
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000f40)={0x32, @private=0xa010102, 0x4e22, 0x0, 'nq\x00', 0x3a, 0x5, 0x4c}, 0x2c)
r7 = dup(r4)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000f80)={<r8=>0x0, 0x1, r1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000fc0)={<r9=>0x0, 0x1, r7})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000001000)={<r10=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000001040)={<r11=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01864c2, &(0x7f0000001080)={<r12=>0x0, 0x1, r1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000010c0)={<r13=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02864c3, &(0x7f0000001140)={&(0x7f0000001100)=[r8, r9, r10, r11, r12, r13], 0x3ff, 0x6, 0x3})
madvise(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0xc)

1.957507283s ago: executing program 1 (id=96):
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$tipc(0x1e, 0x2, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x7, 0x1, 0x4, 0x0, 0x9})
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405668, &(0x7f0000000140)={0x6, 0x2, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405668, &(0x7f0000000140)={0x6, 0x2, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559})
socket$unix(0x1, 0x1, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xe}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xe}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)

1.699666854s ago: executing program 3 (id=97):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0xf0ff, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0xf0ff)

1.67477984s ago: executing program 4 (id=98):
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$kcm(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x4})
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
r2 = add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000180)="3e92bf2644069f00f794b435db2245aa0d7263c69d02cec85603b30b125d9557f7141d2df5d2d3e0201264b791a348b3bf4c7a11115e00ce807ce00ba577feaacbee52da19a0f3263cdffe1909ee59533aa3e6c39336e4e588a1ac8e712cbbef6d051323b6a3647be02b64fb9f414a41", 0x70, 0x0)
keyctl$revoke(0x3, r2)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x38, 0xe1, 0xd, 0x8, 0x13d8, 0x1, 0x324c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x22, 0xff, 0x40, 0x4, "", [{{0x9, 0x4, 0x74, 0x3, 0x0, 0x34, 0xa3, 0xf1, 0x63}}]}}]}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket(0x1e, 0x4, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r4], 0x54}}, 0x0)

1.395348813s ago: executing program 1 (id=99):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000156000/0x2000)=nil, 0x2000, 0x14)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000002380)={0x10, 0x0, r1}, 0x10)
r2 = io_uring_setup(0x1bc0, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002fd})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r3 = socket$inet(0x2, 0x80001, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

987.758901ms ago: executing program 3 (id=100):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000480)=@e={0xff, 0x9, 0xf, 0xe, @SEQ_CONTROLLER=0xff, 0x2, 0x7, 0x9})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r3, 0xe01, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000001c0)={0x8, "16b170b3fb50a6d0174c76f708f9a27d7ccdd73d237bb4b59b54009abaaff1ad", 0x3, 0x1})
ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0x60cb, 0x7, 0x0, 0x0, 0xcfa1, 0xffff, 0x1, 0x100000b, 0x5, 0x3, 0x40, 0x4, 0xfff, 0x3bb0, 0x0, 0x32, {0x401, 0xf76}, 0xff, 0x7}})
socket$inet6_udp(0xa, 0x2, 0x0)
timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
io_uring_setup(0x70c3, &(0x7f0000000280)={0x0, 0x2c3f, 0x0, 0x20001, 0x2})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[@code={0xa, 0x45, {"0f01b425ac8500006726285d41c442519ae08f49a892db0f01cfc4c30579f400f27f74c4a36d022f67b8010000000f01c10f011e"}}], 0x45})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x4307})
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)=0x40, 0x4)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x4, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc)=0x3, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x1, 0x1fffffd)
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000500)={{0x200000, 0x5000, 0xf, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x4, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0x1, 0x0, 0x0, 0x0, 0x7, 0xff, 0x1}, {0xa03a19760224864a, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x7f, 0xfc}, {0x1, 0xd000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x81, 0x8, 0x2, 0x5}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x100000, 0x50000, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0xdddd0000, 0xddde1000, 0x0, 0x3, 0x4, 0x2, 0xa9, 0x20, 0x0, 0x3}, {0xeeee0000, 0x41000, 0xc, 0x0, 0x3, 0x7, 0xb, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0x2}, 0xc0000011, 0x0, 0x0, 0x23c, 0xc, 0x0, 0xd000, [0x3, 0x0, 0x40000000001]})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
unshare(0x44040200)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

463.456427ms ago: executing program 2 (id=101):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}, 0x108)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d40)=@nat={'nat\x00', 0x19, 0x5, 0x886, [0x200000000480, 0x0, 0x0, 0x2000000006bc, 0x2000000006ec], 0x0, &(0x7f0000000000), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x12, 0x80f3, 'veth0_to_bond\x00', 'ip6erspan0\x00', 'pimreg1\x00', 'ip6gre0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @random="227030a28f29", [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@link_local, 0xfffffffffffffff8}}}}, {0x9, 0x5, 0xf5, 'macsec0\x00', 'vlan1\x00', 'sit0\x00', 'sit0\x00', @random="86e0538cb50a", [0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0xff], 0xbe, 0xf6, 0x12e, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'syz1\x00'}}}], [@arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x5, 0x7, 0x829b, 'xfrm0\x00', 'ip6erspan0\x00', 'veth1_to_bridge\x00', 'ipvlan1\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, [0x0, 0xff, 0xff, 0x0, 0xff], 0xbe, 0x12e, 0x166, [@helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'pptp\x00'}}}], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}, @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{0x5, 0xa, 0x88f5, 'sit0\x00', 'veth1_to_batadv\x00', 'ipvlan1\x00', 'veth1\x00', @remote, [0x0, 0x0, 0xff, 0x0, 0xff], @multicast, [0xff], 0x9e, 0xce, 0x106, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x7, 0x1}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}], @arpreply={'arpreply\x00', 0x10, {{@random="3e99497f2f31", 0xffffffffffffffff}}}}, {0x11, 0x0, 0x806, 'ip6gretap0\x00', 'dvmrp1\x00', 'syzkaller0\x00', 'ipvlan0\x00', @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x2a6, 0x316, 0x34e, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0x15, [{0x7ff, 0x3d, 0x5, 0x3}, {0xc20d, 0x0, 0xea, 0x7f}, {0x8, 0x3, 0x1, 0x5}, {0xffff, 0x0, 0xfa, 0x8}, {0xffff, 0x80, 0x4, 0x4}, {0x6, 0x67, 0x80, 0x6}, {0x84d6, 0x6, 0x5, 0x6}, {0x1, 0x1, 0x1, 0x9}, {0xff, 0xff, 0xf, 0xe}, {0x4, 0x9, 0xd, 0x9}, {0x3, 0xff, 0x2b, 0x5}, {0x7, 0x9, 0xfb, 0x9b1}, {0x4, 0x0, 0xf2, 0x8}, {0x1, 0x7, 0x7f}, {0x1a36, 0x2, 0x2, 0x6e5}, {0x5, 0x7, 0xb9, 0x8}, {0xb42d, 0xc, 0x80, 0x9}, {0x7, 0xf7, 0x80, 0x3}, {0xce58, 0x0, 0x0, 0x80000000}, {0x9, 0xa1, 0x3, 0xffff}, {0x5, 0x62, 0x9, 0x7}, {0x9, 0x7, 0x6, 0xfffffffe}, {0x0, 0x5, 0x2, 0x3}, {0x2, 0x8, 0x5, 0x1}, {0x1, 0x1, 0x3, 0x3}, {0x6, 0x2, 0xf, 0x1000000}, {0x5, 0x3, 0xb, 0x3}, {0xca4, 0x0, 0x1, 0x80000000}, {0x9, 0x3e, 0x6, 0xa}, {0x81, 0x5, 0x81, 0x8001}, {0x1, 0x9, 0x9, 0x3a}, {0x800, 0x4, 0x1, 0x245}, {0x5, 0xb, 0x6, 0x2}, {0x4, 0x6e, 0x5, 0x3}, {0x2, 0xfa, 0x1, 0x2}, {0x4, 0x9, 0x4, 0xf1}, {0xf117, 0xf7, 0x80, 0xffff}, {0xd7f9, 0x8, 0x0, 0x1ff}, {0xff, 0x5, 0xf, 0xa00}, {0x1, 0xfd, 0x81, 0x6}, {0x7, 0xdf, 0x1b, 0x4}, {0xf3, 0x4, 0x8, 0x3}, {0x3bb0, 0x7f, 0x2, 0x40000000}, {0x79, 0xd, 0x0, 0x8}, {0x10, 0x1, 0xfc, 0x8}, {0x9d, 0x10, 0x4, 0x7}, {0x855, 0x2, 0x8, 0x2}, {0x5, 0xff, 0xfe, 0x4}, {0x3000, 0x57, 0x88, 0x10001}, {0xc2d9, 0x3, 0xa, 0x8}, {0xb, 0x81, 0x3, 0x8001}, {0x7, 0xa7, 0x40, 0x1}, {0x7, 0x6, 0x3, 0x7}, {0x3, 0x1, 0x8, 0x5}, {0xffff, 0x3, 0xf}, {0x8, 0x1, 0x10, 0x8001}, {0x4, 0x5, 0xa}, {0x40, 0xe0, 0x6a, 0x6}, {0x4, 0x0, 0x4, 0x1740}, {0x0, 0x0, 0xa, 0x5}, {0x8, 0x4, 0x1, 0x1}, {0x4, 0x40, 0x75, 0x80000001}, {0x0, 0x0, 0xf3, 0x4}, {0x8, 0x5, 0x9, 0x8001}], {0x3}}}}], [@arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}}]}]}, 0x8fe)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x2710}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16)
write(r0, &(0x7f0000000080)="225a1aeba9828a5eec36417569baf165571a6b11af3a29d095e544545bae1c219d96645f0d80a3047e0f5e08a39d1b1f8ff72faad322d8b81703a4bd9a66b0f9825f0862dd2d1700000000000000", 0x4e)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
connect$netlink(r3, &(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc)

200.38878ms ago: executing program 1 (id=102):
syz_emit_ethernet(0x1016, &(0x7f00000014c0)={@remote, @local, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x2}}, {@generic={0x9300, "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"}}}, &(0x7f0000002500)={0x0, 0x4, [0x60c, 0x572, 0x72e, 0xcee]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
close_range(r0, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 2 (id=103):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010639d00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000007d000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040))
timer_create(0x0, 0x0, &(0x7f0000000200))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
socket$kcm(0x2, 0xa, 0x2)
write$tun(r3, 0x0, 0xfdef)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0xc0002003})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts.
[   81.435733][ T5621] cgroup: Unknown subsys name 'net'
[   81.553911][ T5621] cgroup: Unknown subsys name 'cpuset'
[   81.564185][ T5621] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.276289][ T5621] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.608219][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.619190][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.627088][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.635273][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.657345][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.666916][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.674503][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.685758][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.694115][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.704102][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.722209][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.742255][ T4950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.763420][ T5645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.771290][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.776649][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.789754][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.797217][ T4950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.809073][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.818145][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.818634][ T4950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.840681][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.851776][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.860326][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   85.870050][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   85.877929][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.140727][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.148020][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.156371][ T5649] bridge_slave_0: entered allmulticast mode
[   87.163954][ T5649] bridge_slave_0: entered promiscuous mode
[   87.187092][ T5654] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.194431][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.202146][ T5654] bridge_slave_0: entered allmulticast mode
[   87.209737][ T5654] bridge_slave_0: entered promiscuous mode
[   87.246012][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.253222][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.261129][ T5649] bridge_slave_1: entered allmulticast mode
[   87.268649][ T5649] bridge_slave_1: entered promiscuous mode
[   87.289005][ T5654] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.296275][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.303594][ T5654] bridge_slave_1: entered allmulticast mode
[   87.310998][ T5654] bridge_slave_1: entered promiscuous mode
[   87.384808][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.392266][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.399464][ T5651] bridge_slave_0: entered allmulticast mode
[   87.407932][ T5651] bridge_slave_0: entered promiscuous mode
[   87.451390][ T5654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.463455][ T5654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.473627][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.482253][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.489522][ T5651] bridge_slave_1: entered allmulticast mode
[   87.497730][ T5651] bridge_slave_1: entered promiscuous mode
[   87.509442][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.519105][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.526406][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.533797][ T5650] bridge_slave_0: entered allmulticast mode
[   87.541560][ T5650] bridge_slave_0: entered promiscuous mode
[   87.548890][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.556090][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.563505][ T5653] bridge_slave_0: entered allmulticast mode
[   87.570962][ T5653] bridge_slave_0: entered promiscuous mode
[   87.602627][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.612217][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.619451][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.627328][ T5650] bridge_slave_1: entered allmulticast mode
[   87.634722][ T5650] bridge_slave_1: entered promiscuous mode
[   87.641916][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.649046][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.656405][ T5653] bridge_slave_1: entered allmulticast mode
[   87.664523][ T5653] bridge_slave_1: entered promiscuous mode
[   87.727324][ T5654] team0: Port device team_slave_0 added
[   87.736590][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.779464][ T5654] team0: Port device team_slave_1 added
[   87.788535][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.800058][ T5649] team0: Port device team_slave_0 added
[   87.808398][ T5650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.821342][ T5636] Bluetooth: hci0: command tx timeout
[   87.829484][ T5653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.861199][ T5649] team0: Port device team_slave_1 added
[   87.868917][ T5650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.880887][ T5653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.900249][ T5636] Bluetooth: hci4: command tx timeout
[   87.900261][ T4950] Bluetooth: hci1: command tx timeout
[   87.900511][ T4950] Bluetooth: hci3: command tx timeout
[   87.906799][ T5640] Bluetooth: hci2: command tx timeout
[   87.979114][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.986349][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.013479][ T5654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.027329][ T5651] team0: Port device team_slave_0 added
[   88.058122][ T5653] team0: Port device team_slave_0 added
[   88.067312][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.074467][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.100972][ T5654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.114461][ T5651] team0: Port device team_slave_1 added
[   88.122495][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.129492][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.155889][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.169661][ T5650] team0: Port device team_slave_0 added
[   88.177629][ T5653] team0: Port device team_slave_1 added
[   88.215955][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.223078][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.249189][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.262444][ T5650] team0: Port device team_slave_1 added
[   88.280630][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.287651][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.313939][ T5653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.367300][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.374408][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.400913][ T5653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.420280][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.427256][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.453256][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.465856][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.472905][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.498850][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.521575][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.528603][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.554930][ T5650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.594783][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.602018][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.628119][ T5650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.670273][ T5654] hsr_slave_0: entered promiscuous mode
[   88.677311][ T5654] hsr_slave_1: entered promiscuous mode
[   88.727356][ T5649] hsr_slave_0: entered promiscuous mode
[   88.734523][ T5649] hsr_slave_1: entered promiscuous mode
[   88.741069][ T5649] debugfs: 'hsr0' already exists in 'hsr'
[   88.746974][ T5649] Cannot create hsr debugfs directory
[   88.775050][ T5653] hsr_slave_0: entered promiscuous mode
[   88.782032][ T5653] hsr_slave_1: entered promiscuous mode
[   88.788377][ T5653] debugfs: 'hsr0' already exists in 'hsr'
[   88.794237][ T5653] Cannot create hsr debugfs directory
[   88.873501][ T5651] hsr_slave_0: entered promiscuous mode
[   88.880343][ T5651] hsr_slave_1: entered promiscuous mode
[   88.886611][ T5651] debugfs: 'hsr0' already exists in 'hsr'
[   88.892806][ T5651] Cannot create hsr debugfs directory
[   88.932069][ T5650] hsr_slave_0: entered promiscuous mode
[   88.938908][ T5650] hsr_slave_1: entered promiscuous mode
[   88.945865][ T5650] debugfs: 'hsr0' already exists in 'hsr'
[   88.951865][ T5650] Cannot create hsr debugfs directory
[   89.554318][ T5649] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.570458][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.580459][ T5649] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.592774][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.601021][ T5649] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.611727][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.629746][ T5649] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.642072][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.710475][ T5653] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.726187][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.734730][ T5653] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.748050][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.763337][ T5653] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.778043][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   89.787875][ T5653] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.798455][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.901274][ T5640] Bluetooth: hci0: command tx timeout
[   89.926824][ T5654] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.938331][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   89.955736][ T5654] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.966154][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   89.975147][ T5654] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.982771][ T5640] Bluetooth: hci2: command tx timeout
[   89.982796][ T5636] Bluetooth: hci4: command tx timeout
[   89.988344][ T4950] Bluetooth: hci3: command tx timeout
[   89.993755][ T5639] Bluetooth: hci1: command tx timeout
[   90.009602][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.024343][ T5654] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.034914][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.145372][ T5651] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.157539][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.175577][ T5651] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   90.186012][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.199366][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.212363][ T5651] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   90.223837][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.233831][ T5651] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   90.244541][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.338912][ T5653] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.349528][ T5649] 8021q: adding VLAN 0 to HW filter on device team0
[   90.394267][ T5650] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.404888][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.416870][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.424506][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.441476][ T5650] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   90.453275][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.462493][ T5650] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   90.474782][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.485476][ T5650] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.496623][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.520609][ T5653] 8021q: adding VLAN 0 to HW filter on device team0
[   90.534495][ T3389] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.541813][ T3389] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.583347][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.590562][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.634505][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.641750][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.706867][ T5654] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.778244][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.811227][ T5654] 8021q: adding VLAN 0 to HW filter on device team0
[   90.844639][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.851813][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.874794][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.882024][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.898232][ T5651] 8021q: adding VLAN 0 to HW filter on device team0
[   90.923525][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.930787][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.959442][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.966623][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.015422][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.048427][ T5650] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.129688][ T5653] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.144049][ T5650] 8021q: adding VLAN 0 to HW filter on device team0
[   91.172611][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.179758][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.206134][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.213409][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.285403][ T5649] veth0_vlan: entered promiscuous mode
[   91.315589][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.335431][ T5654] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.358348][ T5649] veth1_vlan: entered promiscuous mode
[   91.411647][ T5653] veth0_vlan: entered promiscuous mode
[   91.465737][ T5653] veth1_vlan: entered promiscuous mode
[   91.478869][ T5649] veth0_macvtap: entered promiscuous mode
[   91.503866][ T5649] veth1_macvtap: entered promiscuous mode
[   91.545076][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.554400][ T5651] veth0_vlan: entered promiscuous mode
[   91.589106][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.602401][ T5654] veth0_vlan: entered promiscuous mode
[   91.615009][ T5651] veth1_vlan: entered promiscuous mode
[   91.632519][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.669206][ T5654] veth1_vlan: entered promiscuous mode
[   91.679594][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.697885][ T5653] veth0_macvtap: entered promiscuous mode
[   91.709430][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.719451][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.739372][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.758729][ T5653] veth1_macvtap: entered promiscuous mode
[   91.835188][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.843478][ T5651] veth0_macvtap: entered promiscuous mode
[   91.882747][ T5650] veth0_vlan: entered promiscuous mode
[   91.891814][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.901915][ T5651] veth1_macvtap: entered promiscuous mode
[   91.926022][  T808] cfg80211: failed to load regulatory.db
[   91.973908][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.983495][ T5636] Bluetooth: hci0: command tx timeout
[   91.983928][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.013236][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.025603][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.026904][ T5650] veth1_vlan: entered promiscuous mode
[   92.046283][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.055631][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.060677][ T5636] Bluetooth: hci4: command tx timeout
[   92.068898][ T5639] Bluetooth: hci3: command tx timeout
[   92.069975][ T4950] Bluetooth: hci2: command tx timeout
[   92.070005][ T4950] Bluetooth: hci1: command tx timeout
[   92.076072][ T5654] veth0_macvtap: entered promiscuous mode
[   92.126629][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.146708][ T5654] veth1_macvtap: entered promiscuous mode
[   92.193228][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.216430][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.225625][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.266429][   T80] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.277930][   T80] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.291570][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.331269][   T80] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.344780][   T76] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.374333][ T5649] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   92.402330][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.415794][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.438011][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.533559][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.546576][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.562038][ T5650] veth0_macvtap: entered promiscuous mode
[   92.605464][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.618973][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.633339][ T5650] veth1_macvtap: entered promiscuous mode
[   92.662182][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.671689][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.723090][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.756431][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.797203][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.841871][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   92.856410][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.867841][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.879873][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.888834][ T3389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.912861][ T3389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.942242][ T3389] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.979079][ T3389] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.039665][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[   93.060994][    T9] usb 4-1: config 0 has no interface number 0
[   93.070765][   T80] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.076435][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.091671][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.102849][ T3389] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.113197][    T9] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.145667][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.162839][    T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[   93.177698][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.211866][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.301343][    T9] usb 4-1: config 0 descriptor??
[   93.405708][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.428647][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.450402][   T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   93.544651][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.574871][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.639868][   T29] usb 1-1: Using ep0 maxpacket: 32
[   93.661201][   T29] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[   93.692513][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.749190][   T29] usb 1-1: config 0 descriptor??
[   93.813531][   T29] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[   93.897719][ T5760] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4'.
[   94.007384][ T5757] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   94.061743][ T5639] Bluetooth: hci0: command tx timeout
[   94.142710][ T5639] Bluetooth: hci4: command tx timeout
[   94.142902][ T5636] Bluetooth: hci1: command tx timeout
[   94.148408][ T5639] Bluetooth: hci2: command tx timeout
[   94.155525][ T5640] Bluetooth: hci3: command tx timeout
[   94.308580][ T5768] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10'.
[   94.343958][ T5768] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10'.
[   94.375249][ T5770] IPv6: addrconf: prefix option has invalid lifetime
[   94.750131][  T809] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   94.870036][ T5772] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   94.906101][ T5782] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6'.
[   94.921807][  T809] usb 3-1: Using ep0 maxpacket: 32
[   94.950171][  T809] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[   94.981536][ T5782] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6'.
[   94.982618][  T809] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   95.042164][  T809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[   95.068470][ T5772] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[   95.086647][  T809] usb 3-1: config 1 has no interface number 0
[   95.098009][ T5772] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.130583][  T809] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   95.151507][   T29] gspca_vc032x: reg_w err -110
[   95.166908][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.175644][ T5772] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   95.192410][  T809] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   95.206501][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.216834][ T5772] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   95.229400][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.237263][  T809] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   95.261846][ T5772] usb 2-1: Manufacturer: syz
[   95.268083][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.283349][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.293711][  T809] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   95.316712][ T5772] usb 2-1: config 0 descriptor??
[   95.322492][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.343944][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.352769][  T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.382132][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.395878][ T5772] igorplugusb 2-1:0.0: incorrect number of endpoints
[   95.415882][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.476353][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.519258][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.531351][  T809] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[   95.556034][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.584639][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.608875][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.631758][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.673361][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.686866][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.704856][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.736097][   T29] gspca_vc032x: I2c Bus Busy Wait 00
[   95.750626][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.777919][   T29] gspca_vc032x: Unknown sensor...
[   95.798031][    T9] usbhid 4-1:0.1: can't add hid device: -71
[   95.818917][   T29] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[   95.832541][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.849947][    T9] usbhid 4-1:0.1: probe with driver usbhid failed with error -71
[   95.872816][ T5767] usb 2-1: USB disconnect, device number 2
[   95.954989][    T9] usb 4-1: USB disconnect, device number 2
[   95.965536][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.048277][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.086601][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.122939][  T809] snd_usb_pod 3-1:1.1: set_interface failed
[   96.160478][ T5702] usb 1-1: USB disconnect, device number 2
[   96.183486][  T809] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[   96.208958][  T809] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71
[   96.260880][  T809] usb 3-1: USB disconnect, device number 2
[   96.385746][ T5636] Bluetooth: hci0: SCO packet for unknown connection handle 101
[   97.093913][ T5829] loop2: detected capacity change from 0 to 7
[   97.116418][ T5829] Dev loop2: unable to read RDB block 7
[   97.123206][ T5829]  loop2: unable to read partition table
[   97.129221][ T5829] loop2: partition table beyond EOD, truncated
[   97.136146][ T5829] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   98.380680][ T5636] Bluetooth: hci0: command 0x2016 tx timeout
[   98.393773][ T5800] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   98.401122][ T5800] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   98.414431][ T5800] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   98.423475][ T5800] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   98.429613][ T5800] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   98.437171][ T5800] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   98.445690][ T5800] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   98.452988][ T5800] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   98.464827][ T5800] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   98.474080][ T5800] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   98.483400][ T5800] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   98.492403][ T5800] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   98.501311][ T5800] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   98.507490][ T5800] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   98.516235][ T5800] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   98.764675][ T5840] loop5: detected capacity change from 0 to 7
[   98.783449][ T5702] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   98.797684][ T5840] Dev loop5: unable to read RDB block 7
[   98.807034][ T5840]  loop5: AHDI p1 p2 p3
[   98.826629][ T5840] loop5: partition table partially beyond EOD, truncated
[   98.846148][ T5840] loop5: p1 size 1986618213 extends beyond EOD, truncated
[   98.887316][ T5840] loop5: p2 start 1702059890 is beyond EOD, truncated
[   98.971453][ T5702] usb 3-1: Using ep0 maxpacket: 8
[   98.983686][ T5702] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[   99.004009][ T5702] usb 3-1: config 0 has no interface number 0
[   99.027958][ T5702] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   99.055894][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.065460][ T5737] udevd[5737]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[   99.081503][ T5702] usb 3-1: Product: syz
[   99.096867][ T5702] usb 3-1: Manufacturer: syz
[   99.112161][ T5702] usb 3-1: SerialNumber: syz
[   99.120118][ T5767] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   99.137725][ T5702] usb 3-1: config 0 descriptor??
[   99.217765][ T5842] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET)
[   99.306688][ T5767] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   99.341597][ T5767] usb 2-1: config 1 has no interface number 0
[   99.363547][ T5767] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[   99.374823][ T5817] ALSA: mixer_oss: invalid OSS volume ' total bytes transmitted       '
[   99.383693][ T5817] ALSA: mixer_oss: invalid OSS volume 'Device:'
[   99.392352][ T5702] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[   99.402962][ T5702] uvcvideo 3-1:0.31: No valid video chain found.
[   99.423964][ T5767] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[   99.451895][ T5767] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7
[   99.474451][ T5767] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40
[   99.484847][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.495762][ T5767] usb 2-1: Product: syz
[   99.502249][ T5767] usb 2-1: Manufacturer: syz
[   99.509589][ T5767] usb 2-1: SerialNumber: syz
[   99.670382][  T809] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   99.686681][ T5702] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   99.712686][ T5858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'.
[   99.839885][  T809] usb 5-1: Using ep0 maxpacket: 16
[   99.857260][  T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   99.871920][ T5702] usb 4-1: Using ep0 maxpacket: 16
[   99.883582][ T5767] usb 2-1: USB disconnect, device number 3
[   99.891845][  T809] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   99.902909][ T5702] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[   99.902938][ T5702] usb 4-1: config 0 has no interface number 0
[   99.902979][ T5702] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   99.935442][  T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.947080][ T5702] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   99.952596][  T809] usb 5-1: Product: syz
[   99.966330][  T809] usb 5-1: Manufacturer: syz
[   99.971590][ T5702] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   99.987178][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.995478][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  100.004784][ T5702] usb 4-1: Product: syz
[  100.010871][ T5702] usb 4-1: Manufacturer: syz
[  100.016088][  T809] usb 5-1: SerialNumber: syz
[  100.023433][ T5702] usb 4-1: SerialNumber: syz
[  100.034365][  T809] usb 5-1: config 0 descriptor??
[  100.034513][ T5702] usb 4-1: config 0 descriptor??
[  100.055064][ T5856] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  100.064175][ T5856] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  100.075527][  T809] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  100.089366][  T809] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  100.161722][    T9] usb 1-1: Using ep0 maxpacket: 8
[  100.172284][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  100.189750][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  100.204813][    T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  100.218866][    T9] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  100.239967][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  100.257766][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.268102][    T9] usb 1-1: Product: syz
[  100.272701][    T9] usb 1-1: Manufacturer: syz
[  100.288191][ T5856] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  100.296136][    T9] usb 1-1: SerialNumber: syz
[  100.302896][ T5856] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  100.329645][    T9] usb 1-1: config 0 descriptor??
[  100.469948][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout
[  100.476098][ T5640] Bluetooth: hci0: command 0x2016 tx timeout
[  100.482738][ T5639] Bluetooth: hci2: command 0x0c1a tx timeout
[  100.516743][ T5702] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  100.540366][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout
[  100.546459][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout
[  100.684199][ T5767] usb 3-1: USB disconnect, device number 3
[  100.693401][  T809] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  100.730723][    T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  100.912878][    T9] usb 2-1: config 3 has an invalid interface number: 3 but max is 1
[  100.923404][    T9] usb 2-1: config 3 has an invalid interface number: 50 but max is 1
[  100.935983][    T9] usb 2-1: config 3 has no interface number 0
[  100.948015][    T9] usb 2-1: config 3 has no interface number 1
[  100.954703][    T9] usb 2-1: config 3 interface 3 altsetting 8 has an endpoint descriptor with address 0x44, changing to 0x4
[  100.966948][    T9] usb 2-1: config 3 interface 3 altsetting 8 endpoint 0x4 has invalid maxpacket 1040, setting to 64
[  100.978359][    T9] usb 2-1: config 3 interface 3 has no altsetting 0
[  100.989075][    T9] usb 2-1: config 3 interface 50 has no altsetting 0
[  100.999633][    T9] usb 2-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43
[  101.009508][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.017882][    T9] usb 2-1: Product: syz
[  101.023503][    T9] usb 2-1: Manufacturer: syz
[  101.028255][    T9] usb 2-1: SerialNumber: syz
[  101.149309][  T809] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  101.158912][  T809] em28xx 5-1:0.0: board has no eeprom
[  101.177998][ T5856] syzkaller0: entered promiscuous mode
[  101.190112][ T5856] syzkaller0: entered allmulticast mode
[  101.214369][ T5856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.229248][ T5856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.286524][    T9] usb 2-1: unknown number of interfaces: 2
[  101.310769][    T9] usb 2-1: USB disconnect, device number 4
[  101.498289][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'.
[  101.518161][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'.
[  101.527426][ T5876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.36'.
[  101.531276][  T809] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  101.550917][  T809] em28xx 5-1:0.0: dvb set to bulk mode.
[  101.560781][ T5733] em28xx 5-1:0.0: Binding DVB extension
[  102.221234][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  102.381885][    T9] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  102.392485][    T9] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184
[  102.404654][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  102.415563][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.449395][    T9] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  102.541672][ T5639] Bluetooth: hci2: command 0x0c1a tx timeout
[  102.547875][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout
[  102.554410][ T5640] Bluetooth: hci0: command 0x2016 tx timeout
[  102.621022][ T5640] Bluetooth: hci4: command 0x0c1a tx timeout
[  102.621919][ T5636] Bluetooth: hci3: command 0x0c1a tx timeout
[  102.799166][ T5852] em28xx 5-1:0.0: writing to i2c device at 0xe failed (error=-5)
[  102.815246][    T9] gspca_sn9c2028: read1 error -71
[  102.847387][    T9] gspca_sn9c2028: read1 error -71
[  102.857110][ T5725] usb 1-1: USB disconnect, device number 3
[  102.870732][   T29] usb 5-1: USB disconnect, device number 2
[  102.887836][   T29] em28xx 5-1:0.0: Disconnecting em28xx
[  102.903515][    T9] gspca_sn9c2028: read1 error -71
[  102.914577][    T9] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71
[  102.968483][    T9] usb 2-1: USB disconnect, device number 5
[  103.052625][ T5733] em28xx 5-1:0.0: Registering input extension
[  103.090572][   T29] em28xx 5-1:0.0: Closing input extension
[  103.221315][ T5702] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  103.249509][ T5702] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  103.271871][   T29] em28xx 5-1:0.0: Freeing device
[  103.287255][ T5702] asix 4-1:0.34: probe with driver asix failed with error -71
[  103.329235][ T5702] usb 4-1: USB disconnect, device number 3
[  103.452223][ T5733] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  103.982192][ T5907] netlink: 56 bytes leftover after parsing attributes in process `syz.2.45'.
[  104.026154][ T5907] hub 8-0:1.0: USB hub found
[  104.035400][ T5907] hub 8-0:1.0: 1 port detected
[  104.049405][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'.
[  104.589831][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'.
[  104.598943][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'.
[  104.614504][ T5916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.47'.
[  104.629880][ T5640] Bluetooth: hci0: command 0x2016 tx timeout
[  104.631393][ T5639] Bluetooth: hci2: command 0x0c1a tx timeout
[  104.642122][ T5636] Bluetooth: hci1: command 0x0c1a tx timeout
[  104.701006][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout
[  104.708986][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout
[  104.715309][ T5767] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  104.873689][ T5767] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  104.896442][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.916601][ T5767] usb 3-1: config 0 descriptor??
[  104.937666][ T5767] cp210x 3-1:0.0: cp210x converter detected
[  105.160420][ T5927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.51'.
[  105.171575][ T5907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.208646][ T5907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.273362][ T5907] netlink: 165 bytes leftover after parsing attributes in process `syz.2.45'.
[  105.408915][ T5767] usb 3-1: cp210x converter now attached to ttyUSB0
[  105.486293][ T5934] x_tables: duplicate underflow at hook 1
[  105.535613][ T5725] usb 3-1: USB disconnect, device number 4
[  105.602839][ T5934] kAFS: unable to lookup cell 'ÿ'
[  105.688621][ T5725] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  105.731320][ T5725] cp210x 3-1:0.0: device disconnected
[  106.277257][ T5940] netlink: 64 bytes leftover after parsing attributes in process `syz.1.53'.
[  106.979955][ T5733] usb 1-1: device descriptor read/64, error -71
[  107.000245][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  107.180929][   T10] usb 2-1: Using ep0 maxpacket: 16
[  107.206571][   T10] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40
[  107.228007][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.240397][ T5733] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  107.246946][   T10] usb 2-1: Product: syz
[  107.280630][ T5725] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  107.290875][   T10] usb 2-1: Manufacturer: syz
[  107.301943][   T10] usb 2-1: SerialNumber: syz
[  107.430781][ T5733] usb 1-1: device descriptor read/64, error -71
[  107.462188][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.482844][ T5725] usb 4-1: config 0 has no interfaces?
[  107.501694][ T5725] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  107.516372][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.525076][ T5725] usb 4-1: Product: syz
[  107.530099][ T5725] usb 4-1: Manufacturer: syz
[  107.545772][ T5725] usb 4-1: SerialNumber: syz
[  107.562963][ T5733] usb usb1-port1: attempt power cycle
[  107.577289][ T5725] usb 4-1: config 0 descriptor??
[  107.681765][ T5958] capability: warning: `syz.1.57' uses deprecated v2 capabilities in a way that may be insecure
[  107.828386][ T5954] usb usb7: usbfs: process 5954 (syz.3.59) did not claim interface 0 before use
[  107.845080][ T5959] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  107.944384][ T5733] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  108.008021][ T5733] usb 1-1: device descriptor read/8, error -71
[  108.224653][ T5968] x_tables: duplicate underflow at hook 1
[  108.261072][ T5733] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  108.313336][ T5733] usb 1-1: device descriptor read/8, error -71
[  108.431134][ T5733] usb usb1-port1: unable to enumerate USB device
[  109.945818][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  110.181214][ T5725] usb 4-1: USB disconnect, device number 4
[  110.226079][   T30] audit: type=1326 audit(1780736162.054:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.1.65" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562179ce59 code=0x7ffc0000
[  110.270999][   T10] usb 2-1: USB disconnect, device number 6
[  110.291995][   T30] audit: type=1326 audit(1780736162.104:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.1.65" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562179ce59 code=0x7ffc0000
[  110.322135][   T30] audit: type=1326 audit(1780736162.114:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.1.65" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562179ce59 code=0x7ffc0000
[  110.459304][   T30] audit: type=1326 audit(1780736162.114:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.1.65" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562179ce59 code=0x7ffc0000
[  110.530604][ T5861] udevd[5861]: setting mode of /dev/bus/usb/002/006 to 020664 failed: No such file or directory
[  110.535270][   T30] audit: type=1326 audit(1780736162.114:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.1.65" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f562179ce59 code=0x7ffc0000
[  110.588050][ T5861] udevd[5861]: setting owner of /dev/bus/usb/002/006 to uid=0, gid=0 failed: No such file or directory
[  110.659948][   T30] audit: type=1326 audit(1780736162.114:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.1.65" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562179ce59 code=0x7ffc0000
[  110.750883][   T30] audit: type=1326 audit(1780736162.124:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.1.65" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562179ce59 code=0x7ffc0000
[  110.830843][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  110.856314][   T30] audit: type=1326 audit(1780736162.124:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.1.65" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562179ce59 code=0x7ffc0000
[  110.948843][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  110.973468][   T30] audit: type=1326 audit(1780736162.124:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.1.65" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562179ce59 code=0x7ffc0000
[  111.029500][   T30] audit: type=1326 audit(1780736162.124:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.1.65" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f562175d68e code=0x7ffc0000
[  111.083087][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  111.126572][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.171853][   T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  111.219235][   T10] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  111.231665][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.242958][   T10] usb 2-1: Product: syz
[  111.247742][   T10] usb 2-1: Manufacturer: syz
[  111.255189][   T10] usb 2-1: SerialNumber: syz
[  111.398596][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'.
[  111.426284][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'.
[  111.435183][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  111.495680][ T5996] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96
[  111.741326][ T5996] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.70'.
[  111.762734][ T5998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.824060][ T5998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.851089][ T5996] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.70'.
[  111.968110][ T5996] netlink: 640 bytes leftover after parsing attributes in process `syz.2.70'.
[  112.026966][ T5983] loop5: detected capacity change from 0 to 7
[  112.079393][ T5998] binder: 5979:5998 ioctl c0285840 200000000000 returned -22
[  112.135864][ T5983] Dev loop5: unable to read RDB block 7
[  112.162636][ T5983]  loop5: unable to read partition table
[  112.184238][ T5983] loop5: partition table beyond EOD, truncated
[  112.206299][ T5983] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  112.358681][   T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  112.398571][   T10] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  112.432679][   T10] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  112.463182][   T10] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  112.647625][   T10] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  113.227714][   T10] usb 2-1: USB disconnect, device number 7
[  113.430098][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  113.666162][ T5737] udevd[5737]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  113.782530][ T5733] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  113.982444][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  114.001830][ T5733] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  114.013746][    T9] usb 1-1: unable to read config index 0 descriptor/start: -71
[  114.041573][ T5733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  114.060631][    T9] usb 1-1: can't read configurations, error -71
[  114.093690][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 52, changing to 9
[  114.143140][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 9606, setting to 1024
[  114.206849][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0
[  114.239573][ T5733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  114.292643][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 52, changing to 9
[  114.346223][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 9606, setting to 1024
[  114.392713][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0
[  114.428216][ T5733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  114.449752][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 52, changing to 9
[  114.469919][    T9] usb 1-1: new low-speed USB device number 9 using dummy_hcd
[  114.508526][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 9606, setting to 1024
[  114.551884][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0
[  114.573760][ T5733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  114.593248][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 52, changing to 9
[  114.622124][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 9606, setting to 1024
[  114.663899][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.666961][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0
[  114.714601][ T5733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  114.747225][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 52, changing to 9
[  114.750611][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  114.803453][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 9606, setting to 1024
[  114.807609][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'.
[  114.850169][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  114.857600][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0
[  114.903363][    T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  114.906870][ T5733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  114.936124][   T48] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  114.958929][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 52, changing to 9
[  114.980304][   T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  114.990647][ T3389] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  114.993015][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 9606, setting to 1024
[  114.999713][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.037433][ T3389] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.078589][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0
[  115.112387][ T6029] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  115.113130][ T5733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  115.156568][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 52, changing to 9
[  115.190723][ T5767] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  115.205059][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 9606, setting to 1024
[  115.229116][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0
[  115.245274][ T5733] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  115.248388][    T9] hub 1-1:1.0: bad descriptor, ignoring hub
[  115.256557][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 52, changing to 9
[  115.319912][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 9606, setting to 1024
[  115.345980][    T9] hub 1-1:1.0: probe with driver hub failed with error -5
[  115.362274][ T5767] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  115.378839][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0
[  115.395975][ T5767] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  115.422235][ T5733] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  115.440947][ T5767] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  115.454869][    T9] cdc_wdm 1-1:1.0: skipping garbage
[  115.455622][ T5733] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  115.488596][ T5767] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  115.507404][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.516072][ T5733] usb 4-1: Product: syz
[  115.523315][ T5733] usb 4-1: Manufacturer: syz
[  115.526164][    T9] cdc_wdm 1-1:1.0: skipping garbage
[  115.528376][ T5767] usb 3-1: Product: syz
[  115.537737][ T5733] usb 4-1: SerialNumber: syz
[  115.550494][ T5767] usb 3-1: Manufacturer: syz
[  115.556571][ T5733] usb 4-1: config 0 descriptor??
[  115.566214][ T5767] usb 3-1: SerialNumber: syz
[  115.572032][ T6019] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  115.606641][ T5767] usb 3-1: config 0 descriptor??
[  115.617000][ T6045] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  115.627728][ T6045] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  115.647729][ T5767] usb 3-1: ucan: probing device on interface #0
[  115.694313][    T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  115.710717][ T5733] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1
[  115.725955][    T9] cdc_wdm 1-1:1.0: Unknown control protocol
[  116.089717][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  116.096757][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  116.105520][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  116.112168][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  116.119431][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  116.126157][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  116.132737][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  116.139374][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  116.145878][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  116.152594][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  116.158854][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  116.165490][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  116.171826][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  116.178464][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  116.184792][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  116.191657][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  116.198731][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  116.205478][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  116.212224][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  116.218859][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  116.336520][ T5767] usb 3-1: ucan: could not read protocol version, ret=-71
[  116.369947][ T5767] usb 3-1: ucan: probe failed; try to update the device firmware
[  116.456502][ T5767] usb 3-1: USB disconnect, device number 5
[  116.601801][ T6063] fuse: Invalid uid '0x0000000000000004'
[  116.899983][ T5767] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  117.071277][ T5767] usb 5-1: Using ep0 maxpacket: 32
[  117.098048][ T5767] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  117.120875][ T5767] usb 5-1: config 0 has no interface number 0
[  117.150051][ T5767] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  117.185916][ T5767] usb 5-1: config 0 interface 89 has no altsetting 0
[  117.220738][ T5767] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  117.252482][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.289313][ T5767] usb 5-1: Product: syz
[  117.301724][ T5733] usb 1-1: USB disconnect, device number 9
[  117.312846][ T5767] usb 5-1: Manufacturer: syz
[  117.346228][ T5767] usb 5-1: SerialNumber: syz
[  117.377648][ T5767] usb 5-1: config 0 descriptor??
[  117.414156][ T5767] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  117.434473][ T5767] em28xx 5-1:0.89: Video interface 89 found:
[  117.478656][ T6073] tipc: Started in network mode
[  117.484178][ T6073] tipc: Node identity 00005f000000003a0040ffffe0000001, cluster identity 4711
[  117.529202][ T6073] tipc: Enabling of bearer <udp:ÿÿÿÿ> rejected, failed to enable media
[  117.600033][ T5694] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  117.616065][ T5702] usb 4-1: USB disconnect, device number 5
[  117.668969][ T6077] program syz.1.91 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  117.696849][ T5702] yurex 4-1:0.0: USB YUREX #1 now disconnected
[  117.784480][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  117.837352][ T5694] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  117.885783][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  117.956830][ T5694] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  118.009939][ T5694] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  118.027649][ T5767] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  118.049214][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.190750][ T5694] usb 3-1: config 0 descriptor??
[  118.495685][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.555476][ T5767] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  118.568021][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.626872][ T5767] em28xx 5-1:0.89: board has no eeprom
[  118.675146][ T6071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.89'.
[  118.724582][ T5767] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  118.746601][ T5767] em28xx 5-1:0.89: analog set to bulk mode.
[  118.764068][ T5694] hdpvr 3-1:0.0: unexpected answer of status request, len 40
[  118.775023][  T809] em28xx 5-1:0.89: Registering V4L2 extension
[  118.804798][ T5694] hdpvr 3-1:0.0: device init failed
[  118.819065][ T5767] usb 5-1: USB disconnect, device number 3
[  118.838486][ T5694] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[  118.861980][ T5767] em28xx 5-1:0.89: Disconnecting em28xx
[  119.018255][  T809] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  119.041005][  T809] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  119.060234][  T809] em28xx 5-1:0.89: No AC97 audio processor
[  119.153530][  T809] usb 5-1: Decoder not found
[  119.197534][  T809] em28xx 5-1:0.89: failed to create media graph
[  119.227341][  T809] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  119.302646][  T809] em28xx 5-1:0.89: Registering snapshot button...
[  119.458270][  T809] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input6
[  119.515779][  T809] em28xx 5-1:0.89: Remote control support is not available for this card.
[  119.553452][ T5767] em28xx 5-1:0.89: Closing input extension
[  119.584069][ T5767] em28xx 5-1:0.89: Deregistering snapshot button
[  119.827318][ T5767] em28xx 5-1:0.89: Freeing device
[  120.170063][ T5767] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  120.355926][ T5767] usb 5-1: config 34 has an invalid interface number: 116 but max is 0
[  120.379101][ T5767] usb 5-1: config 34 has no interface number 0
[  120.397871][    T9] usb 3-1: USB disconnect, device number 6
[  120.414598][ T5767] usb 5-1: config 34 interface 116 has no altsetting 0
[  120.452936][ T5767] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c
[  120.497463][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.530749][ T5767] usb 5-1: Product: syz
[  120.544187][ T5767] usb 5-1: Manufacturer: syz
[  120.569946][ T5767] usb 5-1: SerialNumber: syz
[  120.840687][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'.
[  120.984506][ T6099] 8021q: adding VLAN 0 to HW filter on device macsec1
[  121.010431][   T29] team_slave_0: entered promiscuous mode
[  121.017337][   T29] team_slave_1: entered promiscuous mode
[  121.064836][ T6118] 
[  121.067233][ T6118] ============================================
[  121.073419][ T6118] WARNING: possible recursive locking detected
[  121.079636][ T6118] syzkaller #0 Tainted: G             L     
[  121.085620][ T6118] --------------------------------------------
[  121.091776][ T6118] syz.1.102/6118 is trying to acquire lock:
[  121.097686][ T6118] ffffffff8f3d63f0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20
[  121.107997][ T6118] 
[  121.107997][ T6118] but task is already holding lock:
[  121.115367][ T6118] ffffffff8f3d63f0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20
[  121.125567][ T6118] 
[  121.125567][ T6118] other info that might help us debug this:
[  121.133625][ T6118]  Possible unsafe locking scenario:
[  121.133625][ T6118] 
[  121.141073][ T6118]        CPU0
[  121.144354][ T6118]        ----
[  121.147629][ T6118]   lock(qp_broker_list.mutex);
[  121.152490][ T6118]   lock(qp_broker_list.mutex);
[  121.157369][ T6118] 
[  121.157369][ T6118]  *** DEADLOCK ***
[  121.157369][ T6118] 
[  121.165533][ T6118]  May be due to missing lock nesting notation
[  121.165533][ T6118] 
[  121.173868][ T6118] 1 lock held by syz.1.102/6118:
[  121.178818][ T6118]  #0: ffffffff8f3d63f0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20
[  121.189678][ T6118] 
[  121.189678][ T6118] stack backtrace:
[  121.195626][ T6118] CPU: 0 UID: 0 PID: 6118 Comm: syz.1.102 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  121.195652][ T6118] Tainted: [L]=SOFTLOCKUP
[  121.195658][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  121.195676][ T6118] Call Trace:
[  121.195684][ T6118]  <TASK>
[  121.195695][ T6118]  dump_stack_lvl+0xe8/0x150
[  121.195718][ T6118]  print_deadlock_bug+0x279/0x290
[  121.195741][ T6118]  __lock_acquire+0x253f/0x2cf0
[  121.195762][ T6118]  ? is_bpf_text_address+0x292/0x2b0
[  121.195779][ T6118]  ? is_bpf_text_address+0x26/0x2b0
[  121.195797][ T6118]  ? kernel_text_address+0xa5/0xe0
[  121.195821][ T6118]  ? __kernel_text_address+0xd/0x30
[  121.195847][ T6118]  ? vmci_qp_broker_detach+0x117/0xf20
[  121.195870][ T6118]  lock_acquire+0x106/0x350
[  121.195886][ T6118]  ? vmci_qp_broker_detach+0x117/0xf20
[  121.195916][ T6118]  __mutex_lock+0x1a3/0x1550
[  121.195934][ T6118]  ? vmci_qp_broker_detach+0x117/0xf20
[  121.195965][ T6118]  ? kasan_save_track+0x4f/0x80
[  121.195988][ T6118]  ? kasan_save_track+0x3e/0x80
[  121.196010][ T6118]  ? kasan_save_free_info+0x46/0x50
[  121.196029][ T6118]  ? __kasan_slab_free+0x5c/0x80
[  121.196052][ T6118]  ? kfree+0x1c5/0x640
[  121.196072][ T6118]  ? vmci_ctx_put+0x5ef/0xc40
[  121.196089][ T6118]  ? vmci_ctx_enqueue_datagram+0x3ab/0x420
[  121.196105][ T6118]  ? vmci_datagram_dispatch+0x450/0xc60
[  121.196122][ T6118]  ? vmci_qp_broker_detach+0x8dd/0xf20
[  121.196152][ T6118]  ? vmci_host_close+0x98/0x160
[  121.196172][ T6118]  ? vmci_qp_broker_detach+0x117/0xf20
[  121.196195][ T6118]  ? exit_to_user_mode_loop+0x193/0x680
[  121.196214][ T6118]  ? __pfx___mutex_lock+0x10/0x10
[  121.196241][ T6118]  vmci_qp_broker_detach+0x117/0xf20
[  121.196271][ T6118]  ? __pfx_vmci_qp_broker_detach+0x10/0x10
[  121.196294][ T6118]  ? kasan_quarantine_put+0xbb/0x1f0
[  121.196317][ T6118]  ? lockdep_hardirqs_on+0x7a/0x110
[  121.196340][ T6118]  ? kfree+0x1c5/0x640
[  121.196359][ T6118]  ? vmci_ctx_put+0x5ef/0xc40
[  121.196374][ T6118]  ? vmci_ctx_put+0x141/0xc40
[  121.196390][ T6118]  vmci_ctx_put+0x64e/0xc40
[  121.196406][ T6118]  ? __pfx___schedule+0x10/0x10
[  121.196431][ T6118]  ? vmci_ctx_put+0x141/0xc40
[  121.196447][ T6118]  ? __pfx_vmci_ctx_put+0x10/0x10
[  121.196464][ T6118]  ? preempt_schedule_thunk+0x16/0x30
[  121.196489][ T6118]  ? preempt_schedule_common+0x82/0xd0
[  121.196519][ T6118]  vmci_ctx_enqueue_datagram+0x3ab/0x420
[  121.196600][ T6118]  vmci_datagram_dispatch+0x450/0xc60
[  121.196622][ T6118]  ? __pfx_vmci_datagram_dispatch+0x10/0x10
[  121.196644][ T6118]  vmci_qp_broker_detach+0x8dd/0xf20
[  121.196671][ T6118]  ? __pfx_vmci_qp_broker_detach+0x10/0x10
[  121.196694][ T6118]  ? kasan_quarantine_put+0xbb/0x1f0
[  121.196719][ T6118]  ? kfree+0x1c5/0x640
[  121.196738][ T6118]  ? vmci_ctx_put+0x5ef/0xc40
[  121.196755][ T6118]  vmci_ctx_put+0x64e/0xc40
[  121.196771][ T6118]  ? vmci_ctx_put+0x141/0xc40
[  121.196788][ T6118]  ? __pfx_vmci_ctx_put+0x10/0x10
[  121.196811][ T6118]  vmci_host_close+0x98/0x160
[  121.196833][ T6118]  ? __pfx_vmci_host_close+0x10/0x10
[  121.196855][ T6118]  __fput+0x44f/0xa60
[  121.196879][ T6118]  task_work_run+0x1d9/0x270
[  121.196903][ T6118]  ? __pfx_task_work_run+0x10/0x10
[  121.196930][ T6118]  exit_to_user_mode_loop+0x193/0x680
[  121.196945][ T6118]  ? rcu_is_watching+0x15/0xb0
[  121.196965][ T6118]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.196982][ T6118]  do_syscall_64+0x353/0x580
[  121.197000][ T6118]  ? clear_bhb_loop+0x40/0x90
[  121.197018][ T6118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.197035][ T6118] RIP: 0033:0x7f562179ce59
[  121.197060][ T6118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.197079][ T6118] RSP: 002b:00007f56225a9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  121.197097][ T6118] RAX: 0000000000000000 RBX: 00007f5621a16090 RCX: 00007f562179ce59
[  121.197109][ T6118] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007
[  121.197119][ T6118] RBP: 00007f5621832d6f R08: 0000000000000000 R09: 0000000000000000
[  121.197130][ T6118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  121.197139][ T6118] R13: 00007f5621a16128 R14: 00007f5621a16090 R15: 00007f5621b3fa48
[  121.197158][ T6118]  </TASK>
[  121.736110][ T6116] binder: BINDER_SET_CONTEXT_MGR already set
[  121.742247][ T6116] binder: 6115:6116 ioctl 4018620d 200000004a80 returned -16
[  121.782727][ T5767] comedi comedi5: could not set alternate setting 3 in high speed
[  121.803125][ T5767] usbdux 5-1:34.116: driver 'usbdux' failed to auto-configure device.
[  121.826069][ T5767] usbdux 5-1:34.116: probe with driver usbdux failed with error -71
[  121.856787][ T5767] usb 5-1: USB disconnect, device number 4