last executing test programs:

2.485933345s ago: executing program 0 (id=135):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)
write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4)
write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc)

2.433974482s ago: executing program 0 (id=136):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)

2.339264416s ago: executing program 0 (id=137):
syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r1)
socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000ecdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000001)

2.311285409s ago: executing program 1 (id=139):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)
write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4)
write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc)
write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc)

2.173595761s ago: executing program 1 (id=141):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)
write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4)

2.100548477s ago: executing program 1 (id=142):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)

2.017754911s ago: executing program 1 (id=143):
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r0, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r0, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)

1.928284412s ago: executing program 1 (id=144):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)
write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4)
write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc)
write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc)
write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c)

1.896392455s ago: executing program 1 (id=146):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0)
syz_usb_disconnect(r1)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)

1.747713135s ago: executing program 0 (id=148):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80))
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = dup(r1)
r5 = fcntl$dupfd(r0, 0x406, r3)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xd9, 0x51, 0x6, 0x10, 0x2294, 0x425a, 0xcf10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4, 0xa5, 0x57}}]}}]}}, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4})

1.745945429s ago: executing program 2 (id=149):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e})
close_range(r0, 0xffffffffffffffff, 0x0)

1.68688236s ago: executing program 2 (id=150):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)

1.621611854s ago: executing program 2 (id=151):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)

1.515242769s ago: executing program 2 (id=153):
mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r1=>0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = semget(0x0, 0x1, 0x281)
semctl$IPC_RMID(r2, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000fcffffffffffffff00"/33, @ANYRES64=r1, @ANYRESDEC=r1], 0xc0}}, 0x4000010)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000a00))
r3 = open(&(0x7f0000000000)='./file0\x00', 0x208040, 0x13e)
mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000001800)="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", 0x801}], 0x1, 0xa)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0)
pipe(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x22042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc)
splice(r4, 0x0, r6, 0x0, 0xbfd1, 0x0)

624.183712ms ago: executing program 2 (id=158):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e})
close_range(r0, 0xffffffffffffffff, 0x0)

558.803098ms ago: executing program 2 (id=160):
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211"], 0x32)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0)

369.693646ms ago: executing program 3 (id=163):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)

326.221081ms ago: executing program 0 (id=164):
r0 = syz_open_dev$sg(0x0, 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)

281.969368ms ago: executing program 3 (id=165):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)
write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4)

208.343877ms ago: executing program 0 (id=166):
mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r1=>0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = semget(0x0, 0x1, 0x281)
semctl$IPC_RMID(r2, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000fcffffffffffffff00"/33, @ANYRES64=r1, @ANYRESDEC=r1], 0xc0}}, 0x4000010)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000a00))
r3 = open(&(0x7f0000000000)='./file0\x00', 0x208040, 0x13e)
mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000c80)=[{&(0x7f0000001800)="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", 0x801}], 0x1, 0xa)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0)
pipe(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x22042, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc)
splice(r4, 0x0, r6, 0x0, 0xbfd1, 0x0)

186.837657ms ago: executing program 3 (id=167):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)
write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4)
write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc)
write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc)

114.402219ms ago: executing program 3 (id=168):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e})
close_range(r0, 0xffffffffffffffff, 0x0)

61.519885ms ago: executing program 3 (id=169):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)
write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4)
write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc)

0s ago: executing program 3 (id=170):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.177' (ED25519) to the list of known hosts.
[   81.923449][ T5820] cgroup: Unknown subsys name 'net'
[   82.041463][ T5820] cgroup: Unknown subsys name 'cpuset'
[   82.050777][ T5820] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.734161][ T5820] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.110889][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.120045][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.127718][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.136193][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.143703][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.145953][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.157957][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.158685][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.168412][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.176257][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.183737][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.187929][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.202214][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.203330][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.217482][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.218428][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.232664][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.241088][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.251155][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.258750][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.770813][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   86.920198][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   86.965998][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   87.083506][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   87.141593][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.149605][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.157952][ T5832] bridge_slave_0: entered allmulticast mode
[   87.165373][ T5832] bridge_slave_0: entered promiscuous mode
[   87.215853][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.223237][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.230833][ T5832] bridge_slave_1: entered allmulticast mode
[   87.238462][ T5832] bridge_slave_1: entered promiscuous mode
[   87.301302][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.308644][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.316108][ T5833] bridge_slave_0: entered allmulticast mode
[   87.323645][ T5833] bridge_slave_0: entered promiscuous mode
[   87.331302][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.338729][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.346214][ T5835] bridge_slave_0: entered allmulticast mode
[   87.353659][ T5835] bridge_slave_0: entered promiscuous mode
[   87.386054][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.393338][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.401800][ T5833] bridge_slave_1: entered allmulticast mode
[   87.409469][ T5833] bridge_slave_1: entered promiscuous mode
[   87.416608][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.423820][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.432518][ T5835] bridge_slave_1: entered allmulticast mode
[   87.439953][ T5835] bridge_slave_1: entered promiscuous mode
[   87.450423][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.463087][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.570787][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.578114][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.585402][ T5831] bridge_slave_0: entered allmulticast mode
[   87.593401][ T5831] bridge_slave_0: entered promiscuous mode
[   87.603487][ T5832] team0: Port device team_slave_0 added
[   87.612471][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.624850][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.634590][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.641999][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.649570][ T5831] bridge_slave_1: entered allmulticast mode
[   87.657451][ T5831] bridge_slave_1: entered promiscuous mode
[   87.667153][ T5832] team0: Port device team_slave_1 added
[   87.675324][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.692268][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.774996][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.810133][ T5835] team0: Port device team_slave_0 added
[   87.818942][ T5835] team0: Port device team_slave_1 added
[   87.839516][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.851465][ T5833] team0: Port device team_slave_0 added
[   87.858607][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.866098][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.892787][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.933035][ T5833] team0: Port device team_slave_1 added
[   87.939929][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.946983][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.973209][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.985089][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.997231][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.024324][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.068849][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.076579][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.102761][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.116626][ T5831] team0: Port device team_slave_0 added
[   88.135526][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.142721][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.169560][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.193356][ T5831] team0: Port device team_slave_1 added
[   88.200887][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.208585][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.234830][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.306639][ T5847] Bluetooth: hci3: command tx timeout
[   88.306642][ T5838] Bluetooth: hci2: command tx timeout
[   88.307020][ T5847] Bluetooth: hci0: command tx timeout
[   88.312687][ T5838] Bluetooth: hci1: command tx timeout
[   88.353306][ T5835] hsr_slave_0: entered promiscuous mode
[   88.360149][ T5835] hsr_slave_1: entered promiscuous mode
[   88.368925][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.376252][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.402592][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.419649][ T5832] hsr_slave_0: entered promiscuous mode
[   88.426367][ T5832] hsr_slave_1: entered promiscuous mode
[   88.432694][ T5832] debugfs: 'hsr0' already exists in 'hsr'
[   88.438855][ T5832] Cannot create hsr debugfs directory
[   88.448757][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.456267][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.482439][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.577261][ T5833] hsr_slave_0: entered promiscuous mode
[   88.583889][ T5833] hsr_slave_1: entered promiscuous mode
[   88.590514][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[   88.596606][ T5833] Cannot create hsr debugfs directory
[   88.633505][ T5831] hsr_slave_0: entered promiscuous mode
[   88.640330][ T5831] hsr_slave_1: entered promiscuous mode
[   88.646968][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   88.652724][ T5831] Cannot create hsr debugfs directory
[   89.180364][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.193921][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.226296][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.237950][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.324152][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.375187][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.389855][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.400880][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.505917][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.520261][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.531970][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.554752][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.730996][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.743689][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.757149][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.783302][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.790944][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.851290][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   89.869881][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.905597][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.912927][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.953381][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   89.964523][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.971864][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.010996][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.023630][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.030893][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.083608][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.090921][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.168912][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   90.208525][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.215768][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.244479][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.251701][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.279401][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.363535][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   90.386345][ T5838] Bluetooth: hci1: command tx timeout
[   90.391931][ T5845] Bluetooth: hci0: command tx timeout
[   90.391953][ T5847] Bluetooth: hci2: command tx timeout
[   90.397868][ T5845] Bluetooth: hci3: command tx timeout
[   90.425347][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.432593][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.518774][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.526074][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.690187][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.832436][ T5835] veth0_vlan: entered promiscuous mode
[   90.868881][ T5835] veth1_vlan: entered promiscuous mode
[   90.913622][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.964336][ T5835] veth0_macvtap: entered promiscuous mode
[   91.000207][ T5835] veth1_macvtap: entered promiscuous mode
[   91.025342][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.073129][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.089066][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.104330][ T5833] veth0_vlan: entered promiscuous mode
[   91.129051][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.156321][   T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.170485][ T5833] veth1_vlan: entered promiscuous mode
[   91.191189][   T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.201129][   T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.225782][   T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.308830][ T5832] veth0_vlan: entered promiscuous mode
[   91.324026][ T5831] veth0_vlan: entered promiscuous mode
[   91.362414][ T5833] veth0_macvtap: entered promiscuous mode
[   91.391832][ T5833] veth1_macvtap: entered promiscuous mode
[   91.402768][ T5831] veth1_vlan: entered promiscuous mode
[   91.422365][ T5832] veth1_vlan: entered promiscuous mode
[   91.466145][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.477838][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.529866][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.556722][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.571853][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.581735][ T5831] veth0_macvtap: entered promiscuous mode
[   91.588462][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.611165][ T5831] veth1_macvtap: entered promiscuous mode
[   91.634989][ T1006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.647900][ T1006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.672845][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   91.692828][ T1006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.702872][ T1006] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.767965][ T5832] veth0_macvtap: entered promiscuous mode
[   91.804717][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.843089][ T5832] veth1_macvtap: entered promiscuous mode
[   91.862005][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.896908][ T5927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.913072][ T1006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.922887][ T1006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.941848][ T5927] Zero length message leads to an empty skb
[   91.952258][ T5927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.953326][ T1006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.972299][ T1006] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.000114][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.036297][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.070311][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.092699][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.101965][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.118517][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.171834][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.208418][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.230087][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.255071][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.389152][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.400976][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.465942][ T5845] Bluetooth: hci3: command tx timeout
[   92.471410][ T5845] Bluetooth: hci1: command tx timeout
[   92.477015][ T5838] Bluetooth: hci2: command tx timeout
[   92.477844][ T5847] Bluetooth: hci0: command tx timeout
[   92.551613][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.597003][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.653509][ T5933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.687107][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.696111][ T5920] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   92.725472][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.827704][ T5936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.863289][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.878680][ T5920] usb 2-1: too many configurations: 13, using maximum allowed: 8
[   92.883844][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.896491][ T5920] usb 2-1: unable to read config index 0 descriptor/start: -61
[   92.910342][ T5920] usb 2-1: can't read configurations, error -61
[   92.918321][ T5933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.980958][ T5933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.097945][ T5920] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   93.154959][   T29] audit: type=1326 audit(1769606843.885:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25a99aeb9 code=0x7ffc0000
[   93.184105][   T29] audit: type=1326 audit(1769606843.915:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fb25a99aeb9 code=0x7ffc0000
[   93.220968][   T29] audit: type=1326 audit(1769606843.915:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25a99aeb9 code=0x7ffc0000
[   93.290560][   T29] audit: type=1326 audit(1769606843.915:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fb25a99aeb9 code=0x7ffc0000
[   93.314012][ T5920] usb 2-1: too many configurations: 13, using maximum allowed: 8
[   93.323235][ T5948] kernel profiling enabled (shift: 9)
[   93.332637][ T5920] usb 2-1: unable to read config index 0 descriptor/start: -61
[   93.341039][ T5920] usb 2-1: can't read configurations, error -61
[   93.349123][ T5920] usb usb2-port1: attempt power cycle
[   93.354737][   T29] audit: type=1326 audit(1769606843.915:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25a99aeb9 code=0x7ffc0000
[   93.378969][   T29] audit: type=1326 audit(1769606843.915:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb25a99aeb9 code=0x7ffc0000
[   93.401629][   T29] audit: type=1326 audit(1769606843.915:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25a99aeb9 code=0x7ffc0000
[   93.425465][   T29] audit: type=1326 audit(1769606843.915:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb25a99aeb9 code=0x7ffc0000
[   93.450410][   T29] audit: type=1326 audit(1769606844.065:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25a99aeb9 code=0x7ffc0000
[   93.477858][   T29] audit: type=1326 audit(1769606844.065:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25a99aeb9 code=0x7ffc0000
[   93.480376][ T5949] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET)
[   93.580104][ T5952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.652761][ T5952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.665391][ T5952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.677125][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'.
[   93.715716][ T5920] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   93.736893][ T5920] usb 2-1: too many configurations: 13, using maximum allowed: 8
[   93.746212][ T5921] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   93.758679][ T5920] usb 2-1: unable to read config index 0 descriptor/start: -61
[   93.769639][ T5920] usb 2-1: can't read configurations, error -61
[   93.906606][ T5920] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   93.915937][ T5921] usb 1-1: Using ep0 maxpacket: 16
[   93.929718][ T5921] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10
[   93.939918][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.948078][ T5921] usb 1-1: Product: syz
[   93.953043][ T5921] usb 1-1: Manufacturer: syz
[   93.958010][ T5920] usb 2-1: too many configurations: 13, using maximum allowed: 8
[   93.966548][ T5921] usb 1-1: SerialNumber: syz
[   93.974034][ T5920] usb 2-1: unable to read config index 0 descriptor/start: -61
[   93.988815][ T5921] usb 1-1: config 0 descriptor??
[   93.994842][ T5920] usb 2-1: can't read configurations, error -61
[   94.005127][ T5920] usb usb2-port1: unable to enumerate USB device
[   94.015400][ T5921] usb 1-1: ucan: probing device on interface #0
[   94.023856][ T5921] usb 1-1: ucan: invalid EP count (0)
[   94.032883][ T5921] usb 1-1: ucan: probe failed; try to update the device firmware
[   94.111766][ T5954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.174152][ T5954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.188859][ T5954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.211421][ T5921] usb 1-1: USB disconnect, device number 2
[   94.342117][ T5958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.360748][ T5958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.423533][ T5958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.435323][ T5958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.545734][ T5847] Bluetooth: hci1: command tx timeout
[   94.547187][ T5844] Bluetooth: hci2: command tx timeout
[   94.551183][ T5847] Bluetooth: hci3: command tx timeout
[   94.551230][ T5847] Bluetooth: hci0: command tx timeout
[   94.905497][ T5964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.974967][ T5964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.988222][ T5964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.047619][ T5870] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   95.203757][ T5969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.216583][ T5870] usb 4-1: Using ep0 maxpacket: 16
[   95.229109][ T5870] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10
[   95.238636][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.242317][ T5969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.250105][ T5870] usb 4-1: Product: syz
[   95.261453][ T5870] usb 4-1: Manufacturer: syz
[   95.266715][ T5870] usb 4-1: SerialNumber: syz
[   95.276044][ T5870] usb 4-1: config 0 descriptor??
[   95.283733][ T5870] usb 4-1: ucan: probing device on interface #0
[   95.290482][ T5870] usb 4-1: ucan: invalid EP count (0)
[   95.296404][ T5870] usb 4-1: ucan: probe failed; try to update the device firmware
[   95.493597][ T5870] usb 4-1: USB disconnect, device number 2
[   95.513195][ T5974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.599426][ T5974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.603882][ T5976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.664518][ T5974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.676599][ T5974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.682895][ T5976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.698876][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'.
[   95.704457][ T5976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.718909][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'.
[   95.831091][ T5978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.895489][ T5978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.907831][ T5978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.325213][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.351132][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.416264][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.428229][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.467876][ T5870] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   96.635619][ T5870] usb 4-1: Using ep0 maxpacket: 16
[   96.654408][ T5870] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10
[   96.663725][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.674548][ T5870] usb 4-1: Product: syz
[   96.679090][ T5870] usb 4-1: Manufacturer: syz
[   96.683725][ T5870] usb 4-1: SerialNumber: syz
[   96.692290][ T5870] usb 4-1: config 0 descriptor??
[   96.693378][ T5995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.712317][ T5870] usb 4-1: ucan: probing device on interface #0
[   96.722329][ T5870] usb 4-1: ucan: invalid EP count (0)
[   96.728118][ T5870] usb 4-1: ucan: probe failed; try to update the device firmware
[   96.765713][ T5888] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   96.775260][ T5995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.791069][ T5995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.916706][ T5888] usb 3-1: too many configurations: 13, using maximum allowed: 8
[   96.926745][ T5888] usb 3-1: unable to read config index 0 descriptor/start: -61
[   96.934996][ T5888] usb 3-1: can't read configurations, error -61
[   96.942031][ T5870] usb 4-1: USB disconnect, device number 3
[   97.022450][ T5997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.044261][ T5997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.075727][ T5888] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   97.114517][    T9] cfg80211: failed to load regulatory.db
[   97.226717][ T5888] usb 3-1: too many configurations: 13, using maximum allowed: 8
[   97.236909][ T5888] usb 3-1: unable to read config index 0 descriptor/start: -61
[   97.244645][ T5888] usb 3-1: can't read configurations, error -61
[   97.252190][ T5888] usb usb3-port1: attempt power cycle
[   97.591509][ T6003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.600932][ T5888] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   97.628598][ T6003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.646804][ T5888] usb 3-1: too many configurations: 13, using maximum allowed: 8
[   97.660335][ T5888] usb 3-1: unable to read config index 0 descriptor/start: -61
[   97.681896][ T5870] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[   97.682582][ T5888] usb 3-1: can't read configurations, error -61
[   97.692351][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   97.705747][ T6005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.715285][ T5870] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[   97.726145][   T13] wlan1: authenticated
[   97.734033][ T6006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.747870][ T1006] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[   97.755134][ T1006] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[   97.755276][ T6003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.766440][ T1006] wlan1: associated
[   97.779109][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'.
[   97.797867][ T6005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.809328][ T6005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.820123][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'.
[   97.846276][ T5888] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   97.875638][    T9] usb 1-1: Using ep0 maxpacket: 16
[   97.878950][ T5888] usb 3-1: too many configurations: 13, using maximum allowed: 8
[   97.890444][    T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10
[   97.893874][ T5888] usb 3-1: unable to read config index 0 descriptor/start: -61
[   97.900511][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.911504][ T5888] usb 3-1: can't read configurations, error -61
[   97.922588][ T5888] usb usb3-port1: unable to enumerate USB device
[   97.922943][    T9] usb 1-1: Product: syz
[   97.933694][    T9] usb 1-1: Manufacturer: syz
[   97.938547][    T9] usb 1-1: SerialNumber: syz
[   97.950059][    T9] usb 1-1: config 0 descriptor??
[   97.958141][    T9] usb 1-1: ucan: probing device on interface #0
[   97.964427][    T9] usb 1-1: ucan: invalid EP count (0)
[   97.970716][    T9] usb 1-1: ucan: probe failed; try to update the device firmware
[   98.160328][ T5888] usb 1-1: USB disconnect, device number 3
[   98.352530][ T6008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.414438][ T6008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.428123][ T6008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.563261][   T29] kauditd_printk_skb: 57 callbacks suppressed
[   98.563280][   T29] audit: type=1326 audit(1769606849.295:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[   98.601218][   T29] audit: type=1326 audit(1769606849.295:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[   98.627417][   T29] audit: type=1326 audit(1769606849.295:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[   98.650520][   T29] audit: type=1326 audit(1769606849.305:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[   98.673354][   T29] audit: type=1326 audit(1769606849.305:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[   98.696968][   T29] audit: type=1326 audit(1769606849.305:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[   98.721376][   T29] audit: type=1326 audit(1769606849.305:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[   98.744236][   T29] audit: type=1326 audit(1769606849.305:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[   98.768843][   T29] audit: type=1326 audit(1769606849.305:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[   98.792505][   T29] audit: type=1326 audit(1769606849.475:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.1.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[   98.896708][ T6017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.917329][ T6019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.935465][ T6019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.959143][ T6017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.973805][ T6017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.998496][ T6019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.012542][ T6019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.051452][ T6021] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[   99.435747][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   99.553168][ T6028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.586454][    T9] usb 4-1: Using ep0 maxpacket: 16
[   99.607543][    T9] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10
[   99.635223][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.650856][    T9] usb 4-1: Product: syz
[   99.663271][    T9] usb 4-1: Manufacturer: syz
[   99.671928][ T6030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.679175][    T9] usb 4-1: SerialNumber: syz
[   99.690089][ T6028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.711581][    T9] usb 4-1: config 0 descriptor??
[   99.721642][    T9] usb 4-1: ucan: probing device on interface #0
[   99.730375][    T9] usb 4-1: ucan: invalid EP count (0)
[   99.736042][    T9] usb 4-1: ucan: probe failed; try to update the device firmware
[   99.752220][ T6030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.764117][ T6028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.766147][ T6030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.785111][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'.
[   99.799887][ T6028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.810685][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'.
[   99.926506][ T5870] usb 4-1: USB disconnect, device number 4
[  100.663446][ T6053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.697020][ T6053] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  100.706565][ T6053] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  100.707469][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  100.727316][ T3567] wlan1: authenticated
[  100.734031][ T6053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.735939][ T3513] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[  100.828467][ T6053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.858052][ T1006] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[  100.867952][ T6053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.878660][ T1006] wlan1: associated
[  100.888900][    T9] usb 1-1: Using ep0 maxpacket: 16
[  100.899990][    T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10
[  100.911176][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.919904][    T9] usb 1-1: Product: syz
[  100.924214][    T9] usb 1-1: Manufacturer: syz
[  100.930168][    T9] usb 1-1: SerialNumber: syz
[  100.941599][    T9] usb 1-1: config 0 descriptor??
[  100.956890][    T9] usb 1-1: ucan: probing device on interface #0
[  100.963284][    T9] usb 1-1: ucan: invalid EP count (0)
[  100.968982][    T9] usb 1-1: ucan: probe failed; try to update the device firmware
[  101.055680][ T5870] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  101.114586][ T6061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.160560][ T5888] usb 1-1: USB disconnect, device number 4
[  101.193120][ T6061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.204812][ T6061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.217793][ T5870] usb 3-1: too many configurations: 13, using maximum allowed: 8
[  101.228703][ T5870] usb 3-1: unable to read config index 0 descriptor/start: -61
[  101.237599][ T5870] usb 3-1: can't read configurations, error -61
[  101.365719][ T5870] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  101.473543][ T6063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.494712][ T6063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.526442][ T5870] usb 3-1: too many configurations: 13, using maximum allowed: 8
[  101.536494][ T5870] usb 3-1: unable to read config index 0 descriptor/start: -61
[  101.544104][ T5870] usb 3-1: can't read configurations, error -61
[  101.551044][ T5870] usb usb3-port1: attempt power cycle
[  101.558269][ T6063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.570038][ T6063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.580595][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'.
[  101.915843][ T5870] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  101.947688][ T5870] usb 3-1: too many configurations: 13, using maximum allowed: 8
[  101.957704][ T5870] usb 3-1: unable to read config index 0 descriptor/start: -61
[  101.965321][ T5870] usb 3-1: can't read configurations, error -61
[  102.105682][ T5870] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  102.126958][ T5870] usb 3-1: too many configurations: 13, using maximum allowed: 8
[  102.138482][ T5870] usb 3-1: unable to read config index 0 descriptor/start: -61
[  102.147359][ T5870] usb 3-1: can't read configurations, error -61
[  102.154359][ T5870] usb usb3-port1: unable to enumerate USB device
[  102.165737][   T42] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  102.335727][   T42] usb 1-1: Using ep0 maxpacket: 16
[  102.344474][   T42] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10
[  102.353933][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.362064][   T42] usb 1-1: Product: syz
[  102.366440][   T42] usb 1-1: Manufacturer: syz
[  102.371070][   T42] usb 1-1: SerialNumber: syz
[  102.379951][   T42] usb 1-1: config 0 descriptor??
[  102.390042][   T42] usb 1-1: ucan: probing device on interface #0
[  102.396630][   T42] usb 1-1: ucan: invalid EP count (0)
[  102.402203][   T42] usb 1-1: ucan: probe failed; try to update the device firmware
[  102.592018][   T42] usb 1-1: USB disconnect, device number 5
[  102.799688][ T6083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.817717][ T6083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.880316][ T6083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.893528][ T6083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.249329][ T6091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.316390][ T6091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.329016][ T6091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.385949][ T5870] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  103.535666][ T5870] usb 4-1: Using ep0 maxpacket: 16
[  103.558024][ T5870] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10
[  103.575664][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.579329][ T6097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.588049][ T5870] usb 4-1: Product: syz
[  103.599232][ T5870] usb 4-1: Manufacturer: syz
[  103.604192][ T5870] usb 4-1: SerialNumber: syz
[  103.616481][ T5870] usb 4-1: config 0 descriptor??
[  103.623092][ T6097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.634115][ T5870] usb 4-1: ucan: probing device on interface #0
[  103.640623][ T5870] usb 4-1: ucan: invalid EP count (0)
[  103.646614][ T5870] usb 4-1: ucan: probe failed; try to update the device firmware
[  103.687644][ T6098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.699161][ T6097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.712567][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'.
[  103.834143][   T42] usb 4-1: USB disconnect, device number 5
[  104.214374][   T29] kauditd_printk_skb: 64 callbacks suppressed
[  104.214392][   T29] audit: type=1326 audit(1769606854.945:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3e99aeb9 code=0x7ffc0000
[  104.263761][   T29] audit: type=1326 audit(1769606854.945:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3e99aeb9 code=0x7ffc0000
[  104.319048][   T29] audit: type=1326 audit(1769606854.945:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7efe3e99aeb9 code=0x7ffc0000
[  104.345782][   T29] audit: type=1326 audit(1769606854.945:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3e99aeb9 code=0x7ffc0000
[  104.416380][   T29] audit: type=1326 audit(1769606854.945:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3e99aeb9 code=0x7ffc0000
[  104.468001][   T29] audit: type=1326 audit(1769606854.945:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7efe3e99aeb9 code=0x7ffc0000
[  104.501603][   T29] audit: type=1326 audit(1769606854.945:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3e99aeb9 code=0x7ffc0000
[  104.536207][   T29] audit: type=1326 audit(1769606854.945:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efe3e99aeb9 code=0x7ffc0000
[  104.541760][ T6115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.563061][   T29] audit: type=1326 audit(1769606854.945:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3e99aeb9 code=0x7ffc0000
[  104.593900][   T29] audit: type=1326 audit(1769606854.955:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efe3e99aeb9 code=0x7ffc0000
[  104.650986][ T6115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.743154][ T6115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.770403][ T6115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.935706][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  105.072599][ T6128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.087079][    T9] usb 3-1: too many configurations: 13, using maximum allowed: 8
[  105.104804][ T6128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.122613][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  105.136449][    T9] usb 3-1: can't read configurations, error -61
[  105.170966][ T6133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.184531][ T6128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.196193][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'.
[  105.285977][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  105.447876][    T9] usb 3-1: too many configurations: 13, using maximum allowed: 8
[  105.455744][   T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  105.473374][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  105.481649][    T9] usb 3-1: can't read configurations, error -61
[  105.488841][    T9] usb usb3-port1: attempt power cycle
[  105.615752][   T24] usb 1-1: Using ep0 maxpacket: 16
[  105.626162][   T24] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10
[  105.635757][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.643787][   T24] usb 1-1: Product: syz
[  105.648085][   T24] usb 1-1: Manufacturer: syz
[  105.652711][   T24] usb 1-1: SerialNumber: syz
[  105.661088][   T24] usb 1-1: config 0 descriptor??
[  105.669148][   T24] usb 1-1: ucan: probing device on interface #0
[  105.675457][   T24] usb 1-1: ucan: invalid EP count (0)
[  105.681024][   T24] usb 1-1: ucan: probe failed; try to update the device firmware
[  105.836842][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  105.867387][    T9] usb 3-1: too many configurations: 13, using maximum allowed: 8
[  105.881292][ T5870] usb 1-1: USB disconnect, device number 6
[  105.892638][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  105.901567][    T9] usb 3-1: can't read configurations, error -61
[  106.035793][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  106.074019][    T9] usb 3-1: too many configurations: 13, using maximum allowed: 8
[  106.083980][    T9] usb 3-1: unable to read config index 0 descriptor/start: -61
[  106.093129][    T9] usb 3-1: can't read configurations, error -61
[  106.100381][    T9] usb usb3-port1: unable to enumerate USB device
[  106.458559][ T6156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.480743][ T6156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.543126][ T6156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.554961][ T6156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.959255][ T6162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.002722][ T6162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.077264][ T6162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.090492][ T6162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.103545][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'.
[  107.555682][ T5870] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  107.720086][ T5870] usb 2-1: Using ep0 maxpacket: 16
[  107.744736][ T5870] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10
[  107.757435][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.769435][ T5870] usb 2-1: Product: syz
[  107.773652][ T5870] usb 2-1: Manufacturer: syz
[  107.778782][ T5870] usb 2-1: SerialNumber: syz
[  107.799081][ T5870] usb 2-1: config 0 descriptor??
[  107.820552][ T5870] usb 2-1: ucan: probing device on interface #0
[  107.831691][ T5870] usb 2-1: ucan: invalid EP count (0)
[  107.837476][ T5870] usb 2-1: ucan: probe failed; try to update the device firmware
[  108.009537][ T5888] usb 2-1: USB disconnect, device number 6
[  108.243405][ T6197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.264022][ T6197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.327196][ T6197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.339334][ T6197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.805691][ T5870] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  108.987511][ T5870] usb 4-1: too many configurations: 13, using maximum allowed: 8
[  109.009103][ T5870] usb 4-1: unable to read config index 0 descriptor/start: -61
[  109.027579][ T5870] usb 4-1: can't read configurations, error -61
[  109.155655][ T5870] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  109.227863][   T29] kauditd_printk_skb: 62 callbacks suppressed
[  109.227881][   T29] audit: type=1326 audit(1769606859.965:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[  109.257941][   T29] audit: type=1326 audit(1769606859.965:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[  109.281230][   T29] audit: type=1326 audit(1769606859.965:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[  109.304027][   T29] audit: type=1326 audit(1769606859.965:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[  109.327659][ T5870] usb 4-1: too many configurations: 13, using maximum allowed: 8
[  109.333217][   T29] audit: type=1326 audit(1769606859.965:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[  109.344255][ T5870] usb 4-1: unable to read config index 0 descriptor/start: -61
[  109.362909][   T29] audit: type=1326 audit(1769606859.965:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[  109.387904][ T5870] usb 4-1: can't read configurations, error -61
[  109.388611][ T5870] usb usb4-port1: attempt power cycle
[  109.400173][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  109.400447][   T29] audit: type=1326 audit(1769606859.965:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[  109.431094][   T29] audit: type=1326 audit(1769606859.965:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[  109.456243][   T29] audit: type=1326 audit(1769606859.965:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[  109.479406][   T29] audit: type=1326 audit(1769606859.965:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6223 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62aaf9aeb9 code=0x7ffc0000
[  109.575643][    T9] usb 1-1: Using ep0 maxpacket: 16
[  109.585337][    T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10
[  109.594858][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.603315][    T9] usb 1-1: Product: syz
[  109.607605][    T9] usb 1-1: Manufacturer: syz
[  109.612265][    T9] usb 1-1: SerialNumber: syz
[  109.620246][    T9] usb 1-1: config 0 descriptor??
[  109.628235][    T9] usb 1-1: ucan: probing device on interface #0
[  109.634536][    T9] usb 1-1: ucan: invalid EP count (0)
[  109.640113][    T9] usb 1-1: ucan: probe failed; try to update the device firmware
[  109.765660][ T5870] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  109.787143][ T5870] usb 4-1: too many configurations: 13, using maximum allowed: 8
[  109.796638][ T5870] usb 4-1: unable to read config index 0 descriptor/start: -61
[  109.804341][ T5870] usb 4-1: can't read configurations, error -61
[  109.829520][   T24] usb 1-1: USB disconnect, device number 7
[  109.945728][ T5870] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  109.967057][ T5870] usb 4-1: too many configurations: 13, using maximum allowed: 8
[  109.981029][ T5870] usb 4-1: unable to read config index 0 descriptor/start: -61
[  109.995063][ T5870] usb 4-1: can't read configurations, error -61
[  110.004350][ T5870] usb usb4-port1: unable to enumerate USB device
[  110.565761][   T42] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  110.715663][   T42] usb 2-1: Using ep0 maxpacket: 16
[  110.724078][   T42] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10
[  110.733546][   T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.742410][   T42] usb 2-1: Product: syz
[  110.746969][   T42] usb 2-1: Manufacturer: syz
[  110.751723][   T42] usb 2-1: SerialNumber: syz
[  110.760044][   T42] usb 2-1: config 0 descriptor??
[  110.767893][   T42] usb 2-1: ucan: probing device on interface #0
[  110.774199][   T42] usb 2-1: ucan: invalid EP count (0)
[  110.781902][   T42] usb 2-1: ucan: probe failed; try to update the device firmware
[  110.970178][ T5870] usb 2-1: USB disconnect, device number 7
[  111.707724][ T6272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.728722][ T6272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.791150][ T6272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.805057][ T6272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.285678][ T5870] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  112.446562][ T5870] usb 2-1: too many configurations: 13, using maximum allowed: 8
[  112.466018][ T5870] usb 2-1: config 0 has no interfaces?
[  112.473234][ T5870] usb 2-1: config 0 has no interfaces?
[  112.480321][ T5870] usb 2-1: config 0 has no interfaces?
[  112.490481][ T5870] usb 2-1: config 0 has no interfaces?
[  112.507181][ T5870] usb 2-1: config 0 has no interfaces?
[  112.516847][ T5870] usb 2-1: config 0 has no interfaces?
[  112.527442][ T5870] usb 2-1: config 0 has no interfaces?
[  112.534509][ T5870] usb 2-1: config 0 has no interfaces?
[  112.552510][ T5870] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  112.561916][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  112.569777][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.579425][ T5870] usb 2-1: Product: syz
[  112.584234][ T5870] usb 2-1: Manufacturer: syz
[  112.588994][ T5870] usb 2-1: SerialNumber: syz
[  112.597022][ T5870] usb 2-1: config 0 descriptor??
[  112.725672][    T9] usb 1-1: Using ep0 maxpacket: 16
[  112.735894][    T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10
[  112.745248][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.753578][    T9] usb 1-1: Product: syz
[  112.759408][    T9] usb 1-1: Manufacturer: syz
[  112.764035][    T9] usb 1-1: SerialNumber: syz
[  112.771858][    T9] usb 1-1: config 0 descriptor??
[  112.780311][    T9] usb 1-1: ucan: probing device on interface #0
[  112.787169][    T9] usb 1-1: ucan: invalid EP count (0)
[  112.792617][    T9] usb 1-1: ucan: probe failed; try to update the device firmware
[  112.808434][    T9] usb 2-1: USB disconnect, device number 8
[  112.982109][   T42] usb 1-1: USB disconnect, device number 8
[  113.394616][ T6315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.436449][ T6315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.507333][ T6315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.523268][ T6315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.950165][ T3567] ------------[ cut here ]------------
[  113.956127][ T3567] !sta
[  113.956158][ T3567] WARNING: net/mac80211/mlme.c:4429 at ieee80211_mgd_probe_ap_send+0x497/0x560, CPU#0: kworker/u8:7/3567
[  113.971053][ T3567] Modules linked in:
[  113.975324][ T3567] CPU: 0 UID: 0 PID: 3567 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) 
[  113.984988][ T3567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  113.995268][ T3567] Workqueue: events_unbound cfg80211_wiphy_work
[  114.001638][ T3567] RIP: 0010:ieee80211_mgd_probe_ap_send+0x497/0x560
[  114.008323][ T3567] Code: 4c 89 fe 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0d ee 7b f6 e8 08 df 8f f6 90 0f 0b 90 e9 3a fc ff ff e8 fa de 8f f6 90 <0f> 0b 90 e9 d3 fc ff ff e8 ec de 8f f6 90 0f 0b 90 e9 3c ff ff ff
[  114.028258][ T3567] RSP: 0018:ffffc9000c27faa0 EFLAGS: 00010293
[  114.034469][ T3567] RAX: ffffffff8b354a16 RBX: ffff88805be0cdc0 RCX: ffff8880331b5ac0
[  114.042524][ T3567] RDX: 0000000000000000 RSI: ffffffff8e269d98 RDI: ffff8880331b5ac0
[  114.050687][ T3567] RBP: 0000000000000001 R08: ffff8880331b5ac0 R09: 000000000000000c
[  114.058963][ T3567] R10: 000000000000000c R11: 0000000000000000 R12: ffff88805be0eaf2
[  114.067188][ T3567] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88805be0dd40
[  114.075239][ T3567] FS:  0000000000000000(0000) GS:ffff88812505d000(0000) knlGS:0000000000000000
[  114.084372][ T3567] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  114.091292][ T3567] CR2: 00007ffcd95ade30 CR3: 000000006406e000 CR4: 00000000003526f0
[  114.099433][ T3567] Call Trace:
[  114.102755][ T3567]  <TASK>
[  114.105858][ T3567]  cfg80211_wiphy_work+0x2ab/0x450
[  114.111038][ T3567]  ? process_one_work+0x87c/0x15a0
[  114.116247][ T3567]  process_one_work+0x949/0x15a0
[  114.121267][ T3567]  ? __pfx_process_one_work+0x10/0x10
[  114.126710][ T3567]  ? do_raw_spin_lock+0x12b/0x2f0
[  114.131823][ T3567]  worker_thread+0xb46/0x1140
[  114.136596][ T3567]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  114.142473][ T3567]  kthread+0x388/0x470
[  114.146776][ T3567]  ? __pfx_worker_thread+0x10/0x10
[  114.151951][ T3567]  ? __pfx_kthread+0x10/0x10
[  114.156754][ T3567]  ret_from_fork+0x51b/0xa40
[  114.161401][ T3567]  ? __pfx_ret_from_fork+0x10/0x10
[  114.166598][ T3567]  ? __switch_to+0xc7d/0x1400
[  114.171320][ T3567]  ? __pfx_kthread+0x10/0x10
[  114.175994][ T3567]  ret_from_fork_asm+0x1a/0x30
[  114.180928][ T3567]  </TASK>
[  114.184088][ T3567] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  114.191568][ T3567] CPU: 0 UID: 0 PID: 3567 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) 
[  114.201062][ T3567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  114.211172][ T3567] Workqueue: events_unbound cfg80211_wiphy_work
[  114.217472][ T3567] Call Trace:
[  114.220799][ T3567]  <TASK>
[  114.223765][ T3567]  vpanic+0x56c/0xa60
[  114.227812][ T3567]  ? __pfx__printk+0x10/0x10
[  114.232547][ T3567]  ? __pfx_vpanic+0x10/0x10
[  114.237174][ T3567]  ? is_bpf_text_address+0x292/0x2b0
[  114.242493][ T3567]  ? is_bpf_text_address+0x26/0x2b0
[  114.247760][ T3567]  panic+0xc5/0xd0
[  114.251519][ T3567]  ? __pfx_panic+0x10/0x10
[  114.256006][ T3567]  ? ret_from_fork_asm+0x1a/0x30
[  114.260987][ T3567]  __warn+0x315/0x4a0
[  114.265010][ T3567]  ? ieee80211_mgd_probe_ap_send+0x497/0x560
[  114.271021][ T3567]  ? ieee80211_mgd_probe_ap_send+0x497/0x560
[  114.277033][ T3567]  __report_bug+0x29a/0x540
[  114.281575][ T3567]  ? ieee80211_mgd_probe_ap_send+0x497/0x560
[  114.287738][ T3567]  ? __pfx___report_bug+0x10/0x10
[  114.292982][ T3567]  ? do_raw_spin_unlock+0xf5/0x210
[  114.298131][ T3567]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  114.303967][ T3567]  ? try_to_wake_up+0x7fc/0x1390
[  114.308945][ T3567]  ? ieee80211_mgd_probe_ap_send+0x497/0x560
[  114.314948][ T3567]  report_bug+0x16a/0x220
[  114.319322][ T3567]  ? ieee80211_mgd_probe_ap_send+0x497/0x560
[  114.325321][ T3567]  ? ieee80211_mgd_probe_ap_send+0x499/0x560
[  114.331675][ T3567]  handle_bug+0x98/0x200
[  114.336029][ T3567]  exc_invalid_op+0x1a/0x50
[  114.340639][ T3567]  asm_exc_invalid_op+0x1a/0x20
[  114.345513][ T3567] RIP: 0010:ieee80211_mgd_probe_ap_send+0x497/0x560
[  114.352220][ T3567] Code: 4c 89 fe 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0d ee 7b f6 e8 08 df 8f f6 90 0f 0b 90 e9 3a fc ff ff e8 fa de 8f f6 90 <0f> 0b 90 e9 d3 fc ff ff e8 ec de 8f f6 90 0f 0b 90 e9 3c ff ff ff
[  114.372024][ T3567] RSP: 0018:ffffc9000c27faa0 EFLAGS: 00010293
[  114.378299][ T3567] RAX: ffffffff8b354a16 RBX: ffff88805be0cdc0 RCX: ffff8880331b5ac0
[  114.386475][ T3567] RDX: 0000000000000000 RSI: ffffffff8e269d98 RDI: ffff8880331b5ac0
[  114.394471][ T3567] RBP: 0000000000000001 R08: ffff8880331b5ac0 R09: 000000000000000c
[  114.402466][ T3567] R10: 000000000000000c R11: 0000000000000000 R12: ffff88805be0eaf2
[  114.410459][ T3567] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88805be0dd40
[  114.418549][ T3567]  ? ieee80211_mgd_probe_ap_send+0x496/0x560
[  114.424571][ T3567]  cfg80211_wiphy_work+0x2ab/0x450
[  114.429714][ T3567]  ? process_one_work+0x87c/0x15a0
[  114.434859][ T3567]  process_one_work+0x949/0x15a0
[  114.439892][ T3567]  ? __pfx_process_one_work+0x10/0x10
[  114.445291][ T3567]  ? do_raw_spin_lock+0x12b/0x2f0
[  114.450362][ T3567]  worker_thread+0xb46/0x1140
[  114.455092][ T3567]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  114.460936][ T3567]  kthread+0x388/0x470
[  114.465035][ T3567]  ? __pfx_worker_thread+0x10/0x10
[  114.470170][ T3567]  ? __pfx_kthread+0x10/0x10
[  114.474797][ T3567]  ret_from_fork+0x51b/0xa40
[  114.479416][ T3567]  ? __pfx_ret_from_fork+0x10/0x10
[  114.484752][ T3567]  ? __switch_to+0xc7d/0x1400
[  114.489468][ T3567]  ? __pfx_kthread+0x10/0x10
[  114.494104][ T3567]  ret_from_fork_asm+0x1a/0x30
[  114.498932][ T3567]  </TASK>
[  114.502660][ T3567] Kernel Offset: disabled
[  114.507030][ T3567] Rebooting in 86400 seconds..