last executing test programs:

9.762253256s ago: executing program 2 (id=74):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0x3}}}, 0x24}}, 0x4000000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001880)=""/4127, &(0x7f0000000000)=0x1052)
syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400)
syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
fsync(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000480)="2f77abd63ebfe7dbf2f6bfd198b30957f888d4114bbe8a57a5fdc09f903c1d7b5fa8f24db0fdafe48b0405a97cdb0826dc0000000000a1cc5ec9c66a9914a800bdaf69416b535f3c35d8950367b47dec292546c56079060001ee9c74cdc83c4ce9b1e4ef329334b3efedd1e50100000041173086073cae790d486b0881febbce71d1a2331f3a6bf67b9317d0d37ab63d65c6b2d66e6b46ab901d4189a4fc154b6a735a11f844838e0a94cd0815a700"/185, 0xb9, 0xffffffffffffffff)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$inet(r7, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="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", 0x108}, {&(0x7f00000007c0)="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", 0xffffff50}], 0x4}}], 0x1, 0x4044805)
splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0)
splice(r4, 0x0, r7, 0x0, 0x8000000000025a5, 0x0)
shutdown(r6, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={<r10=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000002e00)={r10, 0x5, 0x2}, &(0x7f0000002e40)=0x8)
r11 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r11, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r12, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040041}, 0x4c040)

7.927051463s ago: executing program 3 (id=84):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r0, 0x0)
pipe2(0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000980)={0x2, 0x0, 0x400, 0x2, 0x2})
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0})
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)

7.114321271s ago: executing program 4 (id=87):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
unshare(0x2a020400)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$netlink(r1, 0x10e, 0xa, 0xfffffffffffffffe, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x38, 0x0, &(0x7f0000000000))
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, <r7=>r5, 0x2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r7})
mmap(&(0x7f0000001000/0x4000)=nil, 0x21000, 0x4, 0x11, r4, 0x100000000)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
read$FUSE(r8, &(0x7f0000005200)={0x2020}, 0x2020)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0)
r9 = socket(0x2a, 0x3, 0x0)
accept4$tipc(r9, 0x0, 0x0, 0x1800)

6.827041268s ago: executing program 3 (id=88):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0), &(0x7f0000000040)=0xff56)
r2 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x6)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0x9)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x6)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)

6.761026326s ago: executing program 4 (id=89):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x34, 0x19, 0x901, 0x200000, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_FLOW={0x8, 0xb, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0xff, @broadcast, 0x4e23, 0x1, 'none\x00', 0x29, 0x9, 0xe}, {@rand_addr=0x64010102, 0x4e21, 0x10000, 0xa420, 0xfffffffc, 0x8}}, 0x44)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r4, 0x0, 0x53, 0x0, &(0x7f0000000080))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[@code={0xa, 0x45, {"0f01b425ac8500006726285d41c442519ae08f49a892db0f01cfc4c30579f400f27f74c4a36d022f67b8010000000f01c10f011e"}}], 0x45})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x0, 0xe4}]}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmmsg$inet(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000013c0)="e4f70e6f91e6673b0618b18eb29bb9e24114db7dd3fc71f3230937079602375fdd26975655a80c84606bcbd3bd506c9640cd4d5213d1d3f4ae496a12ec7a3f388b4e8af5384319f4c407bbc177928822eabc094841ca6feaeb562d80b7e3c90e5787bb77810b72e68308a5e6fffc27217174cec7e5ba7067398ce7491c40f111620862c138b697a98f4d9bbcfab4d9766afb23d2532896a69286ee46c35f88f5bac39aff8bf93be7896039dd8efcaa4c248c8d29f50d5c4d40269ea7a24a332f671be20489", 0xc5}], 0x1}}], 0x1, 0x468d0)
sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
unshare(0x8040480)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r8}, 0x48)

6.363978648s ago: executing program 2 (id=91):
socket$packet(0x11, 0xa, 0x300)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299f000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)

6.362313335s ago: executing program 3 (id=93):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r2 = fcntl$dupfd(r1, 0x406, r1)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="000400001900", 0x0, 0x0, 0x10011, 0xfffbffff, 0x0})
write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000002480)=""/4093, 0xffd}], 0x1)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000080)=[0x9, 0xf])

6.218081673s ago: executing program 4 (id=94):
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x3, 0x0, 0x38, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x1b8d, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x14, 0x40003, 0x0}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x22000}) (async)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f00000000c0), &(0x7f00000001c0)=[{{}, {<r2=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000380)={r2, &(0x7f00000002c0), &(0x7f0000000300)})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r4 = io_uring_setup(0x1f98, &(0x7f00000002c0)={0x0, 0x82b7, 0x2, 0x2})
io_uring_enter(r4, 0x58ea, 0xf9a2, 0xe5, 0x0, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_TDX_FINALIZE_VM(r1, 0xc008aeba, &(0x7f0000000000))

6.162407958s ago: executing program 2 (id=95):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)

5.966644741s ago: executing program 2 (id=96):
r0 = socket(0x28, 0x5, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x800)
connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f00000000c0)={0x18, r2, 0x2, 0x0, &(0x7f0000000280)=[{0x7fff, 0xffffffffffffffff}, {0x0, 0x1542}]})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r2, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1})
connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f000046d000/0x1000)=nil)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000c4e000/0x1000)=nil, &(0x7f0000a36000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000dce000/0x2000)=nil, &(0x7f0000e73000/0x1000)=nil, &(0x7f0000a3e000/0x3000)=nil, &(0x7f0000f6e000/0x1000)=nil, &(0x7f0000c53000/0x3000)=nil, &(0x7f0000a12000/0x3000)=nil, &(0x7f0000f11000/0x2000)=nil, &(0x7f0000a53000/0x3000)=nil, &(0x7f0000000580)="2aa82f4a03f1278f6448c5f7e802bd387a82b43f7365b807f964ad483a589527b29465aa6baecd68e6328bdfa38046f1e9599683b14fa75d849b230bd9774892019769173e0fa64a2f5383ac3789501e013c198e815d582a9e2a1e5a3c33e4b85f20d3efb71c3d55df8cc7979c72396ca25fb361b81f2f30fa415b90fafd392c01f8a2786e42d23a0fde387f4cead8a234199f6f39873217be82485c5585b0", 0x9f, r0}, 0x68)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @loopback, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e780926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a01844f5861299c4edbecfbe2665dca1029607462029adf09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000400)=0x3, 0x4)
connect$inet6(r4, &(0x7f0000000540)={0xa, 0x0, 0x1, @local, 0x100}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe044, 0x0, 0x0)
r5 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r5, &(0x7f0000000240)="4c00000012001f15b9409b849ac00a00a57840020000008b03bcfcb7b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd800008000"/76, 0x4c, 0x810, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = dup(r5)
getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f0000000440)=""/157, &(0x7f0000000500)=0x9d)
pipe2(&(0x7f00000001c0)={<r7=>0xffffffffffffffff}, 0x4000)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r7}, 0x18)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x3})
syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0)

5.517202703s ago: executing program 4 (id=99):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
gettid()
r0 = syz_open_pts(0xffffffffffffffff, 0x4000)
r1 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r2=>0x0}, {0x0, @struct}})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000005c0)={r2, "0ab81f775537054993f9351e15186ed8"})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000004c0)={r2, 0x800, 0x1, [0x2, 0x100, 0x0, 0x60, 0x536], [0xa00000000, 0x6, 0x4, 0x4, 0x9, 0x6, 0x7, 0x0, 0xe4, 0xf2c, 0x2000000000000000, 0x800, 0x2, 0xfffffffffffffffa, 0x0, 0x6, 0xfffffffffffffff7, 0x7, 0xa268, 0x8, 0x1, 0x8, 0x73, 0x3, 0xd8d, 0xbda5, 0x1, 0x50, 0x4, 0x10001, 0x49a, 0x3, 0x2b, 0x1, 0x200, 0x5, 0x4, 0x100000001, 0x100000000, 0x6, 0x5, 0x0, 0x9, 0x80, 0xffffffff, 0x7, 0xf9ad, 0x9, 0x6, 0x5, 0x7, 0x9, 0x5, 0x3ff, 0x6, 0x9, 0x100000001, 0x9, 0x8000, 0x3, 0x5, 0x3140, 0x1, 0x5, 0xda7, 0x2, 0x0, 0xfffffffffffffffe, 0xe, 0x81, 0xd, 0x8000000000000000, 0xb8e0, 0x19c, 0x4, 0x1ff, 0x8, 0xda7a, 0x2, 0x1, 0x8, 0x4, 0x2, 0x9, 0x3ff, 0x1000, 0x8, 0x2, 0xc, 0x7b, 0x0, 0x1ff, 0xdf81, 0x0, 0x8, 0xf7, 0x100000001, 0x7, 0xffffffff, 0x5, 0x2, 0x6, 0x2, 0x1, 0x5, 0x5, 0x8000, 0x4e7, 0x3, 0x4, 0x3, 0x7fff, 0x8, 0x8, 0xd, 0x3, 0x6, 0x8, 0x4, 0x6, 0x6]})
r3 = socket$inet(0xa, 0x801, 0x84)
getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x8, 0x3, 0xa, 0x6, 0x9]}, &(0x7f0000000200)=0x54)
sendmsg(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="4464e19c8eeca47c0c16cd3083b0f582483008422165bd5d8be065ce15730e24fdee86d615e1ce3d2c0860d9f14ec01a66b5ac6734b05cbb676e204797ab90c147a01a3b5e77e48ccca67aad3fa407fb78da7e3ea3efe57642ec0ba4325bedc8c3838857539535f7b555410ad8ece4bcc1b72a4841873387af7c621d73c044120a1254749a56ae706830ce1f75cbb0d9d405", 0x92}, {&(0x7f00000000c0)="aa7aec4b6cb76854429d08c2ba5925c6b29a", 0x12}, {&(0x7f0000000100)="e4bc3c8709415378173e8361784122d51d5cef98f958e714535778424cd8939065379f1d744268beb0", 0x29}, {&(0x7f00000001c0)="ce6404e8a02d0ebdd48cc1e9aa3607cb9203c4d0d3", 0x15}, {&(0x7f0000000240)="fdf71f0d90b51210f31c32cb862c3e1fab9abd8800d14450a99123d8020827b5dbbe35a3c4f54318058dcf81bdf9d6635c7a", 0x32}], 0x5, &(0x7f0000000300)=[{0x68, 0xff, 0x7fff, "e56987d75d6da2822bd6a14ce5291475145ea6c795e921d4d25bc991e894e48eacf06764c67dc3ef121c97f01e2fa145af10ccacea2bca297b232c7eaad0d4f31971ca929ce617edf3810b36920ed612cb7901af"}, {0x50, 0x113, 0x9, "bfe2370d5998138d4846a0b72c79e1efdcb32e3fe252c9b1bbae3490e3a52d34e3c70c12b4703d393f6b3a90981397b88301cb93d7a89776a589d27bc6"}, {0xb0, 0x10b, 0xa, "b024b31f7484a3822c1399bb57eb2770b457862cc71ef2dbb7ae68e785f5298da08a719b137477260d93d2d7496ba9253be143821d2ef7398187ef322d6f1a9a424e32848def711ebd3e609b1ce3e09c8ab8c88119d079d762c023b2571ce9727241a40ac65904e659d95acec08a27c6c90f0bb2a8264238dc45bd6095d3c82a61f74556a3a08b4776d210d203f3b2223ffb29e9c874ce24248d"}], 0x168}, 0x20000001)

5.289741895s ago: executing program 2 (id=100):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
msgctl$MSG_STAT(0x0, 0xb, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
fsopen(&(0x7f0000000000)='sockfs\x00', 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x1a6})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94)
r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0)
syz_clone3(&(0x7f00000012c0)={0x101000280, 0x0, 0x0, 0x0, {0x33}, &(0x7f0000000480)=""/220, 0xdc, 0x0, 0x0}, 0x58)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r3, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12)
ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f00000002c0)={0x81, 0x0, 0x1})
socket(0x10, 0x803, 0x0)

4.665162558s ago: executing program 1 (id=102):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0x0, <r2=>0x0}, 0x0)
write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20)
r3 = fanotify_init(0x200, 0x0)
fanotify_mark(r3, 0x1, 0x23, r1, 0x0)
splice(r0, &(0x7f0000000040)=0x10, r2, 0x0, 0x807, 0x300000000000000)

4.510235176s ago: executing program 3 (id=103):
r0 = socket(0x10, 0x6, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0715000008000000440012800c0001006d6163766c616e0034abbd8e087e34f1f9000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa00000a00cf9eaaaa05aaaaaa0000080003"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

4.391114732s ago: executing program 3 (id=104):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8)
unshare(0x6a040000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4842, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000068f000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000690000/0x4000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f000068d000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffffd7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x54e, &(0x7f0000000040)={0x0, 0xc8a0, 0xd001, 0x2, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xe, 0x7, 0xd, '\x00', 0x3})
r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x862b01)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x7ff, {0xffff, 0x1}, {0x45, 0xfffe}, @cond=[{0x8, 0x5388, 0x4, 0x7980, 0x80cb, 0x9}, {0x81, 0x1, 0x1, 0x7, 0x27, 0x1}]})
write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x8, 0x5})
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8, 0xffff}, {0xe, 0x10}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.309145353s ago: executing program 1 (id=105):
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$inet(r1, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="f1e538943a7ccfa5c6a23afc1bbc63657f7cfb36f81a03a698ee1b36cd21a0dc2dc525fae7fe1c762453d4566261", 0x2e}], 0x1}}, {{0x0, 0x33, &(0x7f0000000180)=[{&(0x7f00000002c0)="c7dd7e36ecd58e182972aa83894a1fad1f996aa277d86beb886c590891f30dd11f2960f01dd5a69309517207a8b015d31dd2260dda9f391278cacbcc29b10d4450456da1753f10c6865d94e55f056bcdcb818857d3ec66260b264dd184df9504a2f272262f6607579e324caf918d00913845c1f73fbf302e273341be01cf34719b81bf8f3fd9ed6b051c8e3e16bc883d92ff0a310736cb7c0ce708ceff1197dd33327fb35db764552c91d208e2ea6833d3ff8ecb32acce5c00c332d18375b5acf69bddf38121d29fa1d68ba3f44b75adcbfc34b43e8da35eef21e6c60e9140141b7b0e", 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)="6d8927da228592a1aaafcb73dc58bbdd739892204d9e3949e43e5c3c1718eb53e59740101113a19f9a7329e7646bf087b682f15d30a55a016cda631c8d7fa7f25447ba0c8293ec344e400c28ef0f2db41c25e41c03166dcbbb91fecb53a620076bf6793846f6b565f8d580c0d2fdd434c1402744a1f91d606c41b3ce062bb677ad54a981cb19e9270c500532c2e3f36a996387b843a1521d0203eb765e0b09ca22975eec125d193642e748ab7dc898c70e3d220490538c92f171593eec01888df40512c5ca4be49209bc86593305b747cc8f5cc6c0d658ebf7f901112fab2b", 0xdf}, {&(0x7f0000000200)="e866e6491b0b13c3a7be5bba6c911b66f430375f3e920c7a926ce27821e8ec1522a2caefcbdb7ed1e37374ebd06448ec1b2b3295386e19fe1b756ab5601d193e", 0x40}, {&(0x7f0000000740)="83f424e345da3f1985d7ed9f43ec4b97cccb25a50fc298115a1f7c301511565b44fbe7bafbdb5f3088f6247fa7e47e6bd19ae92224cbb491d4a1f1c3c60d22bfbcf28d8978", 0x45}, {&(0x7f00000007c0)="0be90882a7df5b5d13d352e3e15aa2bf48eb3e4dea46ae936d5d3d606d159595ffe6d7ada2ccba5cd6337ce28ef3", 0x2e}], 0x4}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000880)="8d3b117c2c8005f2712b8a968ee121ed39c84b5813985fb9a3f897da37640daa50dbfd57dbc2d730cb8cf4cd1e6722b8663d", 0x32}, {&(0x7f00000008c0)="f19e3420a8580be3e948c8b6078fc95c894f1c2e6e2df9a58d40cbe8ea7206e132a427a3bb0754c3c1eacd545e7006565935df92a96ce4c83db7cd780fbb8080960fc0c340ae4f84887f5699e48b85a4ca51ec2eb81b8c9a5a7e5abf915a62848b67ff33fc6bb18495c485cd9b6ff42006fe6e09a5a4c9322a69e1f3226c63de27275d8abbccbab0d047043986291b9d0ec67ae0a9282a67c23f61ff5707fe182fa4a264e4b4c64cfa1a95487ff6d03dbab74fd1e1594139486ff245471a6ed079cbdf1408eadcbaf25a418e01089ce25b6cf2bca7a78887dcced7a058f6a37af8d4ac1379978010c62818a29fc120d9d46b5c8e", 0xf4}, {&(0x7f00000009c0)="017b0507c7b0483e0aaac803e7423948779f323ba18d49414226b481278b42bb939c2cea1bd30a93b4d2e75a25f890c45891a0939f667c639ca1efa4441badbd689de51f2c594f8daf6dc06aca4577c8513d59e74fe15f944536671f9d71f68d0802b10b197706d9ca15770a0d3eab4b4855af84db8487b5fafd17941a5c750041c876cba51e0a42e6216bc518d2a6b5cd23c45fa8e9878de9768ff191baebd5f459accfa13e47529c132eee03b8d5db03dd3da89f273613797bdbfec2661327e1743e45dafb22fc747ee17d6a8bb3eb3d06e0e04cc1f6e2", 0xd8}, {&(0x7f0000001bc0)="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", 0xb60}], 0x4}}], 0x4, 0x8000) (async)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1dc}}, 0x20000000) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0xf000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffffe1)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async)
r2 = open(&(0x7f0000000540)='./cgroup/../file0\x00', 0x101001, 0x1c5) (async, rerun: 64)
r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async, rerun: 64)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000007c0), 0x101000, 0x0)
preadv(r4, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/4, 0x4}], 0x1, 0x200, 0x4) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x5, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0xf0}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000007) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xeeee0000, 0x8004, 0x8, 0x8, 0x0, [{0x6, 0xbd, 0xff, '\x00', 0x6}, {0x5, 0x12, 0x2, '\x00', 0x4}, {0x4, 0x46, 0x3c, '\x00', 0x6}, {0x1, 0xfb, 0x1}, {0x8, 0x8, 0xc, '\x00', 0x6c}, {0x8, 0x77, 0x1, '\x00', 0x19}, {0x17, 0x5, 0xd6, '\x00', 0x8d}, {0xa, 0x9, 0x1, '\x00', 0x6f}, {0x8, 0xf, 0x9, '\x00', 0x9}, {0x0, 0x3, 0xf, '\x00', 0x8}, {0x6, 0x3, 0xe1, '\x00', 0x5}, {0xfa, 0x46, 0x4, '\x00', 0xdd}, {0x1, 0x80, 0x2, '\x00', 0x5}, {0x80, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x81, 0x7, '\x00', 0xfd}, {0x4, 0x5, 0x8, '\x00', 0xf7}, {0x9, 0x10, 0x5, '\x00', 0x1}, {0xb5, 0x0, 0x9, '\x00', 0xc}, {0xa7, 0x1, 0x3, '\x00', 0x7}, {0xf, 0x3, 0x89, '\x00', 0xd}, {0x8, 0x5, 0x0, '\x00', 0x9}, {0x0, 0x5, 0x0, '\x00', 0xf1}, {0xa, 0x5, 0x1, '\x00', 0xff}, {0x8, 0x0, 0x0, '\x00', 0x5}]}}) (async, rerun: 32)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) (async, rerun: 32)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) (async)
r9 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
r10 = epoll_create(0x4)
getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000680), &(0x7f00000006c0)=0x4) (async)
ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000580)={0x3, @sliced={0x6, [0x9a, 0x5, 0x2, 0x2, 0x6, 0x0, 0xa, 0x0, 0x400, 0x0, 0x200, 0x2, 0x0, 0x4, 0x7, 0x8, 0x4, 0x0, 0xff14, 0x4007, 0x5, 0x0, 0x8, 0x0, 0x2, 0x7fff, 0x200, 0x8, 0x0, 0x2, 0x6e8, 0x1ff, 0x3, 0x7, 0x8, 0x1, 0xfffa, 0x6, 0x18, 0x5, 0x1ff, 0x0, 0x432f, 0x1, 0x1, 0x4, 0xc, 0x838], 0x2}}) (async)
epoll_pwait2(r10, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x20000009}) (async)
sendfile(r8, r8, 0x0, 0x5) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.169150665s ago: executing program 4 (id=106):
unshare(0x62040200)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = inotify_init()
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={r4, 0x6, 0x7}, &(0x7f00000000c0)=0x8)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r1, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0xfe19)
write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000400)=""/205, 0xcd, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r1, &(0x7f0000000ac0)={0x2, 0x0, {&(0x7f0000000940)=""/81, 0x51, 0x0, 0x3, 0x3}}, 0x48)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1)
close(0x3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000bc0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000425bd7000fbdbdf25170000002c000980080001000600000008000100010000000800010009000000080001000100008008000100a7010000"], 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x4004850)
unshare(0x6020400)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0xb, 0x6, 0x101, 0x80, 0xd]}, &(0x7f00000000c0)=0x54)
ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000380)={0x0, 0x9c38, 0x0, [0x1d4e, 0x5, 0x1, 0x9, 0x552], [0x0, 0xfffffffffffffffa, 0x8000, 0x3, 0x9, 0x3, 0x7, 0x4, 0x5, 0x3, 0xffff, 0x7, 0x2, 0x380000000000000, 0x9, 0x8, 0x6, 0x6, 0x8000, 0x8, 0x24, 0x3ff, 0x8, 0x0, 0x9, 0x6, 0x7, 0x4, 0xb, 0xe87, 0xc3d9, 0x101, 0x6, 0x2, 0x2, 0x200, 0x10000, 0x6, 0x4, 0xa0000, 0x8000000000000001, 0xffffffffffffffff, 0x5, 0xf960, 0x569, 0x100, 0x8, 0xf6fd, 0x7, 0x0, 0x37b086f4, 0x2, 0x8, 0xb, 0x5000, 0xa, 0x9, 0x1000, 0x56, 0xfffffffffffffff7, 0x5, 0x726, 0x1, 0x7, 0xfffffffffffffff6, 0x3, 0x800, 0x50c, 0x8, 0x1, 0x0, 0xe, 0xfffffffffffffffa, 0x629, 0x9, 0x8, 0x7fffffff, 0xed6, 0x2c1ec117, 0x7, 0xfffffffffffff001, 0x8001, 0x5, 0x8, 0x1, 0x5, 0x680, 0x4, 0x5, 0x8, 0x80000000, 0x400, 0x2, 0x9, 0x8, 0x0, 0x2, 0x4, 0xb2, 0x9, 0x400, 0x0, 0x1, 0xffffffffffffffc0, 0xfff, 0x225, 0x2, 0x248b, 0x5, 0x2, 0x2, 0x33, 0x6, 0x8, 0x70f3, 0x81, 0x4, 0x3aa3, 0x0, 0x80]})
r8 = open_tree(r5, &(0x7f0000000000)='./bus\x00', 0x800)
mkdirat(r8, &(0x7f0000000100)='./bus\x00', 0x4)

4.165753764s ago: executing program 1 (id=107):
r0 = memfd_create(&(0x7f00000002c0)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfb\x05\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\\xd8\xdfa\xea62\x90\xfc\x10\xfd\xd8\x06hTa2\xd8\xf9\x15N\x8f04\xf5\xcczg\xa0Y\xc5?E\xe8\x0e\x14R`b\xa6\xf1w\xe2\xc0\xe2\xea\a\x02\x15\xb0\xffP\xe21L\x1a\xd6\x12\xe6\xc9\xf3\xba\x02 \xed\xf9\xb6\x0f\x15a3\xfc .\x06\xa1&\x7f\xef=\x06\x93\x06\xf74h\xa8o`\xd0\xdfA\xa8\x9b\xce\"\x01v+j\x19&\xf6yq:\x94\x10#\x89Sp\x8f\xd7\x92\xa1S9\xf2\xb0\xdd\x00\x00\xd5\xc0\xb4\xb9\xfa\xc9u\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001440)={&(0x7f00000012c0)=@getsa={0x174, 0x12, 0xe, 0x70bd2d, 0x25dfdbfb, {@in6=@mcast1, 0x4d5, 0xa, 0xff}, [@sec_ctx={0x43, 0x8, {0x3f, 0x8, 0x1, 0x38, 0x37, "be3faac41dc45dd9165900cc9e2c7b36469d13a30314c6b7d00d19ace5b8d1af3c0309fdc133ddbfdc8e4d00b9101ffce678b31b11265d"}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e22, @in6=@private2}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xbfa5}, @sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x4e23, 0x9, 0x4e23, 0x0, 0xa, 0xa0, 0x20, 0x2c}, {@in6=@local, 0x4d4, 0x33}, @in=@empty, {0x2, 0x5, 0x7, 0x4, 0x0, 0x9, 0x4, 0x5c}, {0x6, 0xd0a, 0x8, 0x69}, {0x2, 0x0, 0x5}, 0x70bd28, 0x34ff, 0xa, 0x1, 0x8, 0x22}}]}, 0x174}}, 0xd0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000005000b0000000000080011"], 0x3c}}, 0x0)
pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x20000)
lseek(r0, 0x0, 0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080), 0x4)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
sendmmsg$inet6(r4, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="8299", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)="6310332f1b", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001240)="ff5fa864da", 0x5}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=ANY=[], 0x5f8}}], 0x4, 0x4400c800)
socket$packet(0x11, 0x2, 0x300)
capset(&(0x7f0000000980)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x9, 0x8000004, 0x7, 0x4})
r5 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x40c01)
writev(r5, &(0x7f0000002200)=[{&(0x7f0000000040)="8513645b47582e2a97a8ce85d9b478f8e79abc81b0759c5e68f59bab1bec36067f406327036224b3c285eaa4598221beca2cf9718a2e7bfcc3621e499ad192", 0x3f}, {&(0x7f0000000200)="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", 0xfc2}], 0x2)
r6 = socket$netlink(0x10, 0x3, 0x4)
write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27)
syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r6)
sendfile(r0, r0, &(0x7f00000001c0), 0x7fa)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x70bd26, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x8044010}, 0x20041040)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r9, r9], 0x2}, 0x58)
getsockopt$sock_buf(r8, 0x1, 0x28, &(0x7f0000000080)=""/185, &(0x7f0000000580)=0xb9)
syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020008402505a1a44000010203010902680002010040000904000001020e0000052406080005240000faf3370f0100160000000000000006241b0000000c241b"], 0x0)

3.548562585s ago: executing program 0 (id=108):
getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400})
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x106}, 0x1c)
r2 = fcntl$dupfd(r1, 0x0, r1)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24008800}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2)
sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="000227bd700003dcdf2509000000e7f02c330c2c88a96e06c95c841bc4c2471d68261deede5cec93e1b5252943d0853a493b62c00d3e5bbe3bab557b4cf1cef9962c657cde7e9d659f2dc443aff396e81c87ce1623b984a96ae8a09461bbbc3b2bd1338b50e62f9b0b97ad6031e74b0b60895bf3ea724321499559c7307c9289117e5abc471a3bf9563eb28572e2052f4b5e9094207d43e578dd194087fd91287a7fbdc66c59c5d59f1b6f270b74f79e36d59d490c52cd4599b3e5d32f599c023f27c2136f8a7be803285050907eddbaf0d2825a6a2d75fbaa5a47"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000041)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000002706010100000000000000000200000205000100070000000900020073797a31000000000900020073797a32000000000900020073797a320000000005000100070000000900020073797a3200000000050001000700000005000100070000000500010007000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10000}, 0x20000800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000690000012abd700008010000800000000000010001000000080001000100"/48], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x90)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, 0x0, &(0x7f0000000100))
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
getdents(0xffffffffffffffff, &(0x7f0000000700)=""/17, 0x11)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0205008e5b99935332aca14639c7e04b09680600002dbd70e1171d19"], 0x10}}, 0x24004040)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), r4)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05000000", @ANYRES16=r9, @ANYBLOB="2b572dbd7000ffdbdf25010000001400010000000000000000000000ffffac1414aa0800030006000000080002000200000010000400080000000500000007000000050006000700000008000200000000800800030040000000080003009a0400000500060003000000"], 0x70}}, 0x2004a080)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES32=r11, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0)

3.376435666s ago: executing program 3 (id=109):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x840000000002, 0x3, 0xfa)
getsockname$inet(r2, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0xf2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={<r3=>0x0}, 0x0)
tgkill(r3, 0x0, 0x3f)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="9ef29db97f25be03903871ef15498641812d7ed4b6809cc7bf5f2b62c49a21e6b0d4a2dfe8261bf6d446c90b88f6855ed1cb5c31626b2290500644497eeb13bb16d587880751ff5599c78d779fbddf71e6c1bdeef47bb2306a7380a9484259e44d91bf4e710f7d6d68a19e485e161b4cd560d16686fbd5110e491af6a75d9eaf8a", @ANYBLOB="ad49f9f5d1ebbbe6f4b8b8dcb49256d07fa1f5920e98218b15e1d32e195175578141be7555001edf87603b1effd1d9fd10e21005144bb6d8adbde9607ab4c03149428957a7d757274e9ee96156be92f3e630c453b719b7b4dc5d9eccb3573210a9dde162fb24b5a229417f80e43bf918598151a7ad933cdc043ac47e538f71461d5b16c38fd3739c2c8f13dde4a896a7f77df9bd65a9", @ANYRES64=0x0, @ANYRESDEC=0x0], 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, <r8=>0xffffffffffffffff, 0x1})
unshare(0x2000000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000040601090000000000000000030000040500010007aea6d5248bedbfd00da5e77e63eba75a0000000900020073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b})
ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000240)={0x18})
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000000000000000000000000000000000000400"/104], 0x68)

2.660842086s ago: executing program 0 (id=110):
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x102, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7288, 0x77}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008810}, 0x448a1)
read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x2020)
ioctl$FE_SET_TONE(r0, 0x6f42, &(0x7f0000002200)=0x1)
readahead(r0, 0xe1, 0x7)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x40010, r0, 0x502b1000)
ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000002280)={0x1, 0x11, &(0x7f0000002240)="4b694585cf2eb6b415814e7abf8159fd34f333", {0x40, 0x7f000, 0x34363248, 0x1, 0x6, 0xfffffffe, 0xc, 0xfc5b}})
r4 = syz_open_dev$dvb_frontend(&(0x7f00000022c0), 0x5, 0x200600)
ioctl$FE_SET_VOLTAGE(r4, 0x6f43, &(0x7f0000002300)=0x2)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002340)={{{@in=@broadcast, @in6=@local, 0x4e21, 0x7a, 0x4e20, 0xdd9, 0x2, 0x80, 0x80, 0xff, 0x0, r3}, {0x0, 0xd9, 0x6, 0xfffffffffffffffc, 0xfff, 0xc6c0000000000000, 0x8, 0x8}, {0x1f94, 0x7fffffff, 0x6, 0xffffffffffff0001}, 0x5, 0x6e6bbd, 0x2, 0x0, 0x2, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x3c}, 0xa, @in=@local, 0x3507, 0x0, 0x2, 0x9, 0x0, 0x806}}, 0xe8)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000002440)={0x577, [0x2, 0xd9, 0x4], [{0xc, 0x45eaf7f4, 0x1, 0x1, 0x1}, {0x947, 0x7ff, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x2, 0x0, 0x1, 0x1}, {0xe7, 0xc9b9, 0x0, 0x1, 0x1}, {0xffffff77, 0x800, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x401, 0x0, 0x0, 0x1}, {0x1, 0x100, 0x0, 0x0, 0x0, 0x1}, {0xd7f9, 0x81, 0x0, 0x0, 0x0, 0x1}, {0x1000, 0x2, 0x0, 0x1, 0x0, 0x1}, {0xffff7fff, 0x5, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x255, 0x0, 0x0, 0x0, 0x1}, {0x1000, 0x4}], 0x92})
syz_genetlink_get_family_id$ethtool(&(0x7f0000002540), r0)
ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(r0, 0x6f44, 0x5)
ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000002580)={0x2, 0x3a})
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000025c0), &(0x7f0000002600)=0x4)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000002f40)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002f00)={&(0x7f0000002680)={0x7f0, r1, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @beacon=[@NL80211_ATTR_IE={0x16d, 0x2a, [@perr={0x84, 0x13b, {0x1, 0x13, [{{}, @broadcast, 0x734d, @void, 0x10}, {{0x0, 0x1}, @device_b, 0x7fff, @value, 0x28}, {{0x0, 0x1}, @broadcast, 0x32, @value=@broadcast, 0x2b}, {{0x0, 0x1}, @broadcast, 0xfffffb6e, @value=@device_b, 0x10}, {{}, @device_a, 0xb, @void, 0x19}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x3e}, {{}, @device_b, 0x8, @void, 0x31}, {{0x0, 0x1}, @device_a, 0xd2e, @value, 0x1c}, {{}, @broadcast, 0x9, @void, 0x2b}, {{0x0, 0x1}, @device_b, 0x4, @value, 0x24}, {{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0x18}, {{}, @broadcast, 0x5, @void, 0x5}, {{}, @device_b, 0x7, @void, 0x2d}, {{0x0, 0x1}, @broadcast, 0x6d3, @value=@broadcast, 0x2a}, {{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0x35}, {{0x0, 0x1}, @broadcast, 0xffffd881, @value, 0x5}, {{}, @device_b, 0x7, @void, 0x36}, {{}, @broadcast, 0x0, @void, 0x41}, {{0x0, 0x1}, @device_a, 0x5, @value=@broadcast, 0x1b}]}}, @random={0x6, 0x2a, "de43adeb11a103807f699825e94785fc9b4341bde19db0135d2d9ffbfa647f82cc2c712cadf05bd6b6f9"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x100, 0x7f, [@tim={0x5, 0x6e, {0x3, 0xf6, 0x0, "b96e0d1f217d2aefa49cafd6cdf71e14732147bc3c5d498bdde23d461b5c5149f841c0293fbb8cb24bdb8de0dcd3350dbb717703d4886b1434163d19504f7d2add1495abaa5d3406ff504d7661eb4f6db47eb70aef11249ed9bf8b577ccc39314cc76e714f401d32fa4ca7"}}, @tim={0x5, 0x8a, {0x6, 0x3, 0x80, "1ac759c1a0f97889af8d4e587ab615fd1421d5a4c661f9135fe78184f671a5e0398cd0be21f38aa109d2f357922990881b9c10d572ef92d94e9e4f4c2e9a009895621d582f42787ec6312e0dfabbecbe35288971eed311557057b3cf66ac67debbca199e4611bd9a9d4b3822d8d260986bf929c4b5b7f9da6dd66cc9d5dea44a43e226a40febc5"}}]}, @NL80211_ATTR_BEACON_TAIL={0x157, 0xf, [@mic={0x8c, 0x18, {0x3ca, "8952411665ff", @long="8d1dd7e2f2dfa071345c7ca1744140b9"}}, @supported_rates={0x1, 0x8, [{0x60}, {0xe6d258c943a5749c}, {0x9, 0x1}, {0xc, 0x1}, {0x4}, {0x1b}, {0x1}, {0x4, 0x1}]}, @ht={0x2d, 0x1a, {0x8040, 0x2, 0x6, 0x0, {0x7, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x7cb3, 0x3}}, @mesh_chsw={0x76, 0x6, {0x1, 0x9, 0x5, 0x7}}, @perr={0x84, 0x63, {0x80, 0x7, [{{}, @device_b, 0x3, @void, 0x35}, {{}, @device_a, 0x2, @void, 0x1d}, {{}, @device_b, 0x7ff, @void, 0x1d}, {{}, @broadcast, 0x8, @void, 0x22}, {{}, @device_b, 0x3, @void, 0x27}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x40}, {{}, @device_a, 0x82, @void, 0x27}]}}, @measure_req={0x26, 0x8a, {0x9, 0xf, 0x2, "806143be528c35528a9f6620758e45534c9fd8019af14b8c53521ed7f2d2ca543094b2361af53296cb01e032608a70c09e8521bc16fffde482207a19ba0788de53d9cdd35c10912ae98ee36810e99cfe02de43b30ef8e59bd42d45bafd225c8dcf8de04dd7a6b8ad1ebea64156075bb00541462c5c3035e7fd1afcb2cbdadca13fc028ac1594a4"}}, @mic={0x8c, 0x18, {0x9db, "d29c3c738db6", @long="27abbe3a9e08a091a611ed5749448289"}}]}, @NL80211_ATTR_IE={0x52, 0x2a, [@cf={0x4, 0x6, {0xf7, 0x9, 0x80, 0x3}}, @preq={0x82, 0x41, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x4, 0x6, @broadcast, 0x28000000, @value=@device_b, 0x4382, 0x4, 0x3, [{{0x1, 0x0, 0x1}, @broadcast, 0x854}, {{0x1, 0x0, 0x1}, @device_a, 0x9}, {{0x1}}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0x58, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x53, 0x2, "2e62e9b85f4aa305b5da10106dda07514d77bf6288a75bfa3043274329d435e523b4034f3b15d6efb62baba259dc0ee4f4ea29b2c6586a70d608d875c1fb4b7204b16562eaa25ef246e307f17810c2"}]}, @NL80211_ATTR_BEACON_HEAD={0x1d2, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x56e}, @device_a, @broadcast, @initial, {0x5, 0xa3}}, 0x55a57b9f, @random=0x2, 0x800, @void, @val={0x1, 0x3, [{0x14, 0x1}, {0x5, 0x1}, {0x36, 0x1}]}, @val={0x3, 0x1, 0xa}, @void, @val={0x6, 0x2, 0x9}, @void, @val={0x25, 0x3, {0x0, 0x30, 0x7}}, @void, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0xa9, 0x4, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x8, 0x5}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x41}}, @void, [{0xdd, 0x3c, "b377d99baa0582c6f1ab713663f796f2b1c4511369349b4fa4e8b2b476a7bb4777fe82dc1937ffae8f1541fa45ec4e5dedec6c9c94887c5463ddeabc"}, {0xdd, 0x8d, "df8e493742abe5cdc39b8d2242fcaba0387ecefd19c1802418a845f0131cc311453ef682e3f9e4c26c1b7c5406ff7cf351b14ed958d08871f9ef0d8ff08be1b9957597966f6f4d35557995cd9402cd7c408c8817a447922cbd01dc49d24c718f4ef928660c0d25611b38c89fb9d2b9625ee101745fe6fb1d40b1ad3d2e10c0a8ccec516675750e392a3ee208f0"}, {0xdd, 0xa5, "7556caf6a274b613fae3854312679ee9bda6d4a7e4c37d213ef6686975873c5b0df16eaa5ef5accdd7d5cbb88ecfaa12d12aadf28bf446c8136f8ba3d29c9c7c0c34dd4b0e81ceba85152cc14725192242950aa05ff85d1fc5016b401d254cb093bd39f9cd4e1ee8651079b7a0ec8cd0564f65fc2e0d397b8e2f0646445d600065d28f1f0f7fb7da57d843228bf9a185bed0e418730ecfce0570adb6568837dede9133129f"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xf, 0x7f, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @mesh_chsw={0x76, 0x6, {0x0, 0x5, 0x35, 0x7}}]}], @NL80211_ATTR_SSID={0x10, 0x34, @random="163ed798ad0e30f5513359ce"}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_TX_RATES={0x138, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x4}, {0x0, 0x3}, {0x6, 0x5}, {0x6, 0x9}, {0x7, 0x2}, {0x0, 0x4}, {0x7, 0x3}, {0x3}, {0x3, 0x7}, {0x4, 0xa}, {0x2, 0x9}, {0x6}, {0x6, 0x8}, {0x5, 0x1}, {0x2, 0x8}, {0x4, 0x8}, {0x3, 0xa}, {0x7, 0x3}, {0x5, 0x6}, {0x3, 0x7}, {0x4, 0x2}, {0x2, 0x4}, {0x1, 0x5}, {0x1, 0x5}, {0x5}, {0x2, 0x2}, {0x3, 0x7}, {0x3, 0xa}, {0x7, 0x8}, {0x4, 0x3}, {0x0, 0x6}, {0x3, 0xa}, {0x3, 0x5}, {0x3, 0x8}, {0x4, 0x4}, {0x4, 0x7}, {0x1, 0x5}, {0x6, 0x4}, {0x0, 0x6}, {0x4, 0x4}, {}, {0x3, 0xa}, {0x5, 0x4}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x6}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x6, 0x8, 0x8, 0x4, 0x4, 0x7]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x9}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x2}, {0x5, 0x9}, {0x1, 0x3}, {0x4}, {0x0, 0xa}, {0x3, 0x7}, {0x5, 0xa}, {0x2, 0x8}, {0x6, 0x4}, {0x7, 0x4}, {0x0, 0x4}, {0x3, 0xa}, {0x4, 0x8}, {0x4, 0x8}, {0x7}, {0x1}, {0x4, 0x3}, {0x3, 0x8}, {0x5, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x7, 0x4}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0x9}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0xa4, 0x9, 0x6b, 0x6, 0x5, 0x8, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x2}, {0x7}, {0x5, 0x9}, {0x4, 0x5}, {0x0, 0x8}, {0x0, 0x4}, {0x2, 0x3}, {0x0, 0x2}, {0x0, 0x9}, {0x0, 0x4}, {0x7, 0x2}, {0x1, 0x8}, {0x5, 0x7}, {0x1, 0x1}, {0x0, 0x8}, {0x4}, {0x3, 0xa}, {0x1, 0x3}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x9}, {0x4, 0x3}, {0x5, 0x3}, {0x6, 0xa}, {0x4, 0x7}, {0x3, 0x4}, {0x6, 0x6}, {0x1, 0x2}, {0x3, 0x6}, {0x7, 0x3}, {0x3, 0x4}, {0x6, 0x1}, {0x1, 0x4}, {0x1, 0xa}, {0x2, 0x4}, {0x0, 0x7}, {0x4, 0x2}, {0x0, 0xa}, {0x7, 0x6}, {0x0, 0x2}, {0x6, 0x8}, {0x4, 0x9}, {0x0, 0x9}, {0x4, 0x9}, {0x7, 0x5}, {0x4, 0xa}, {0x7, 0x4}, {0x5, 0x4}, {0x5, 0x4}, {0x4, 0x8}, {0x2, 0x7}, {0x2, 0x1}, {0x6, 0x2}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x9, 0x16, 0x24, 0x12, 0x6, 0x9, 0x48, 0x9, 0x2, 0x6, 0x48, 0x16, 0x2, 0x4, 0x0, 0x5, 0x48, 0x6, 0xc, 0x48, 0xc, 0x3, 0x24, 0x48, 0xea54d68ef08a95ee, 0x5, 0x48, 0x12, 0x1b, 0x5f]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1ff, 0x1, 0x400, 0x8, 0x7, 0x0, 0xa2a]}}]}]}]}, 0x7f0}, 0x1, 0x0, 0x0, 0x4044091}, 0x20004804)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002fc0), r0)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000003080)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x1c, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1048)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003100), r0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000003200)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x5c, r7, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003240)=@gcm_256={{0x304}, "535722d621405186", "52d12aa00f9451284532ad56f0406ca7a863fa4c2925513c499ae25b884a3a23", "fd76cdf1", "08e03311d55aa3bf"}, 0x38)
ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000003280)=@hopopts={0x1d, 0x10, '\x00', [@generic={0x9, 0x7f, "9736d71f059550a332d3a894fa7d6fd2ee34b40442935fd23f5d1fe31aa55ede103e57bad250a618855a04ad4866a3c8e87435a451be08ab8485e127de034bc5e99e21df58fd3d961113f2dea521754a1ce9625ed9d4a138db4b0066e40a638dad58861607ea4436b99a734ae9dac13b18e78d3a1ebcf97eccd4f16d97a93a"}]}, 0x90)
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000003340)={0x3, 0x0, [{0x40000095, 0x0, 0x76fd}, {0x1b2, 0x0, 0x7}, {0x93d, 0x0, 0x1}]})
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000004780)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004740)={&(0x7f00000033c0)={0x1378, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1000, 0x35}}}}, [@NL80211_ATTR_FRAME_MATCH={0xb8, 0x5b, "01116fcaec683a55f308c6bfccf248f8ef9b166308847da44e3a0e79ce1a03ebe53b8a1cc4440ecb5e3bf0e609669add6ad2b909a77bd360c62b38079cb048d22a4db4733d814efec04b49df3a3dcc2667c027f6eb6e742bf0a1066318976bcf33a2075d2b7d7361deb0f884e7dc564fe05fbf5bac9aad702caea5365f3d98ce4c97cd622c61c4f01ba8ccd3d52499d9e921bc625f8d82de422871b6e53f6f6796ccf8dae0a31add378b0a3c48c59799826049e5"}, @NL80211_ATTR_FRAME_MATCH={0x9c, 0x5b, "67887933bf73345ec6cc554ad47941b150f529a3bae375f602835f8ddb556e3c4aa06a7ce1cbb9730d9353f9736b27047fd56512df1a6c113b17298923489b6048ca8c12f5ced65c22c30e6b44a0e14d5e54b6e96ba4fd9bf3ca5337a35e2d32edc33599e4065ad7a3f7961a59d7470dcf65a0b72437c0b032ac4cd6285c6c2aed92046d40562ad2087ceadc5ea0a7e7f519bbd5560f8300"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x10}, @NL80211_ATTR_FRAME_MATCH={0x14, 0x5b, "5521735b40625fa5a549f77869ab2c53"}, @NL80211_ATTR_FRAME_MATCH={0x88, 0x5b, "a0356bcad58ef4dcaae40d07c24f6295e56252f7f568e81c532ebfac667727ad8f3d8824d112bbabeddb006183d5d79fc8a5874b8a86784bb39632dde54330c736bda112268dfc5133f6aa32bf8468ac0b6ad2854573b18c4725cc5e769051a485059de465e3bf27e0de8e99047d0fc391c898b0caf6431eb17321b373859eadd5549905"}, @NL80211_ATTR_FRAME_MATCH={0xc5, 0x5b, "67bf9cdbea78277af3e68032cf280e4bbd2aaba945a75b1d84383645330482a32df5d54fb331a0030294c022616dc592c0f0897d693c1be7b58fee984e143286535bba131fb77a96a66a35aaff6acc97f03454e3154704af74b93223895820f2cb24a1c5e5f4eefb563641bd83cf9a10735da6f1ff8e9d6d1e7463fa634fe7b76f4a671154bac0901c74316f6c5fae63eeb58395af29c11d69efa83d3b136a07a2fc2eb476e7f9d81dc2619d39236c14d2ecd0f700c840ce08a0e3f655acedbbf4"}, @NL80211_ATTR_FRAME_MATCH={0x7c, 0x5b, "2e4288ee7ddcdcb0f35157cd6cf4955ab0a032c2dd41fe231588f8bf3a806d4d51d87209febda9489c41ee26865b51ec037e7def395edaeba94e01568d63d538df90e2ca0e99732637a62aed2ffec7108e036d1940a60386d41813757f228659ab13aedcf128a9fb85268d83b0a5226deaa46d10a1ed1ae0"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, 'v'}]}, 0x1378}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
mq_timedsend(0xffffffffffffffff, &(0x7f00000047c0)="67a5fb76959a6af10ffbcc496f6b28f67e221eff6a68dc453b828a040f70502cce176ed5d496e75d91db0f239ac92ec75c173ddd0be6665153601d44b39af1cd361d8a95635982f42fc342370e8673c04503b0238e1d86924e6d9e2c74fd6bf6b358b62c931bd5f56eca018704b02df55f8a3d0b5ea64b632b2e493d9214c6b167dc931f36b59a265d36c4dad0886a16eeec85a10303d294edf0521c799d621a334eb9b35b87649432aba39966498aee0898dab793a8a179838a49dd63df74dec385f801ec85cdf11c057b4208e7ff0e5e2909c6237c95339c5204c2f89ff91a598ee196d35ecbc345669f5c81436ae0b4013b0a0aedfb45b2", 0xf9, 0xfff, &(0x7f00000048c0)={0x77359400})

2.472841674s ago: executing program 0 (id=111):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x51})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000001700)=ANY=[@ANYBLOB="7f454c4600040000ff7f08000000000003003e00ecffffff980300000000000040000000000000005600000000000000000000000000380005"], 0x78)
close(r1)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="d7c355814a5426f7e31527312fa484e960dda65c4084d863db75da4c21208635275f0e15b5ba729d89a78a4b23ebb397503ce977cc541e486fabb54acddcf401d29f474ae7708eaccceafdb683a03d394451505c35673462a078d25979f8a6cf375711bb58a6994f8618df19d1a9", 0x6e)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2508000000180004801300010062726f61646361730aff6b0000feefccc794"], 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x4000000)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1})
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141902)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r5, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5})

2.309806865s ago: executing program 1 (id=112):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010402400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="88d10100000000002400128009000100766c616e0000000014000280100004800c010100b4000000ff00000014000300766c616e30"], 0x58}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

2.193108272s ago: executing program 0 (id=113):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
r1 = fsopen(&(0x7f0000001c80)='9p\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000001cc0)='noxattr', &(0x7f0000001d00)="a9", 0x1)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCMSET(r2, 0x5418, 0x0) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x41, 0x3, 0x258, 0x0, 0x50020000, 0x0, 0x0, 0x0, 0x1c0, 0x1f0, 0x1f0, 0x1c0, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @broadcast, 0xffffffff, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@addrtype={{0x30}, {0x624, 0xc10, 0x1}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="84bceb21710a", 0x0, 0x0, [0x2a, 0x0, 0x0, 0xfffa, 0x12, 0x0, 0x0, 0x2, 0x8, 0x8, 0x0, 0x3, 0x800, 0x0, 0x402], 0x0, 0x0, 0xffffffffffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @window={0x3, 0x9, 0x9}, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x8)
sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) (async)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x0, 0x0, 0x0}) (async)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f00000001c0)={0x190, 0x140, 0x300, 0x80, 0x8, 0x80, 0x1, 0x2, {0x7, 0x8, 0x1}, {0xd7a, 0x4}, {0x3, 0x1, 0x1}, {0x7, 0x4}, 0x0, 0x53, 0x80000000, 0x6, 0x1, 0x970b, 0x2, 0x334, 0x1a3, 0x7, 0x197, 0x0, 0x25, 0x1, 0x2, 0x5})

1.875673674s ago: executing program 0 (id=114):
socket(0x200000000000011, 0x8000c, 0x3c644)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4)
recvfrom(r0, 0x0, 0x0, 0x12000, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
close_range(r2, r1, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x40939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000))
fsopen(&(0x7f0000000480)='hfs\x00', 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1)
syz_emit_ethernet(0x86, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb0d0045000078000000020011907800000000000000000000fffc00649078020000000200000002000000e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc0c17d7b0325901007eb609eb8d2d9d1528cbbe8b3bc8849d1e6124e7e59132830080200000002000d300000000000400f76bec4f046c725b75e147d52c6a6481f1c5d997df7eb79a97ee9ca8b13fddac700dc533712e279b26a6b09cbcb5e0ee4d25f1b007eb80e54d569351d06ca596f2d8f36781cf085890e42e7c0589eb77d3d665403d9b3dc2ae19"], 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x806, 0x6b929545a64e734d)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8482c0000005e14060205cd00000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c832, 0xffffffffffffffff, 0x0)
r6 = fanotify_init(0x200, 0x0)
r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000040)={0xa, 0x0, 0x10000, 0x80000})
fanotify_mark(r6, 0x1, 0x40000020, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00')
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001200010025ebc5532213bd7000fcdbdff9b463e98ceae6d9853cb13035760b7031f9c1483134d8ae231fbfc07070e6b6ebfdd5fdfa9f384a6b8ca56c42749ab18069ddbe7162cf9f12f507e920035f4d7a735b9a978a244d0d8ab6416ecfa297c06b557ca946375c629d0abb7a17b24fc0df7f76e93fc220b69dcee33d51c154f188df7e5b60590ad5b04252b8055b0350ccef2b413397b37da1d0210ccb19400cb199b27a", @ANYRES32=0x0, @ANYBLOB="00000000000000000800040007000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, 0x0)

1.80403638s ago: executing program 4 (id=115):
uname(&(0x7f0000000000)=""/126)
r0 = syz_open_dev$loop(&(0x7f0000000300), 0xc1d, 0x42e82)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0)
r1 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @bt={0x2, 0x231, 0xf2, 0x7, 0xed2, 0x5, 0x8, 0x2}})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7fffffffffe, &(0x7f0000006680))
mkdir(&(0x7f00000000c0)='./file0\x00', 0x143)
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002215c6a0009050702960000da000905897e0968", @ANYRESHEX, @ANYRES64=r0], 0x0)
uname(&(0x7f0000000000)=""/126) (async)
syz_open_dev$loop(&(0x7f0000000300), 0xc1d, 0x42e82) (async)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) (async)
syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) (async)
ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @bt={0x2, 0x231, 0xf2, 0x7, 0xed2, 0x5, 0x8, 0x2}}) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7fffffffffe, &(0x7f0000006680)) (async)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) (async)
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002215c6a0009050702960000da000905897e0968", @ANYRESHEX, @ANYRES64=r0], 0x0) (async)

1.685559584s ago: executing program 2 (id=116):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async)
mkdirat(0xffffffffffffffff, 0x0, 0x0) (async)
r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x40045702, &(0x7f0000000040)) (async)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f00000000c0)={0x0, 0x82, 0x3ff, 0x1, 0x1}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xfff3}, {0xfff3}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@delqdisc={0x4c, 0x25, 0x2, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff2, 0x5}, {0xa, 0xffe6}, {0xf, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_RATE={0x6, 0x5, {0xa, 0x7c}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7f}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040094}, 0x4020080) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x404401c}, 0x4801) (async)
r10 = socket$netlink(0x10, 0x3, 0x0) (async)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000108000021", @ANYBLOB="f5fbcb44a3994c2c9ebc814ce5fabfcf12c14edff73a8a49480c0261ac338b77c138b669a8b1e822693154fe2aef4e8ffe5eddd1310f83b1b887741fc1ca550e463de0b2f25b1d07fa9d91ef8785f2cc30c084f11698fecc01cf47f26ea5f79532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X2APIC_API(r13, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3})
ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60)

1.345227089s ago: executing program 1 (id=117):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
prctl$PR_SCHED_CORE(0x4d, 0x4, 0x0, 0x0, 0x0)
r1 = getpid() (async)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 32)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) (rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 32)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async, rerun: 32)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async, rerun: 32)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x0, 0x21}}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x2, r7, 0x80003e, r8}, 0x10) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async)
socket$netlink(0x10, 0x3, 0x0)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
shutdown(r0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x1, @remote, 0x1}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000240)={r9, @in6={{0xa, 0x3, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3c}}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000240)=@assoc_value, &(0x7f0000000200)=0x8)

1.094199844s ago: executing program 1 (id=118):
r0 = gettid()
tkill(r0, 0x13) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x5, 0x2, @tid=r0}, &(0x7f0000000340)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
clock_gettime(0x0, &(0x7f0000000140)) (async, rerun: 32)
timer_settime(r1, 0x0, &(0x7f0000000180), 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x0, 0x1}, 0xfd}, 0x18) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async)
userfaultfd(0x801)
r5 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) (async, rerun: 32)
shmdt(r5) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r7=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r10, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) (async, rerun: 32)
socket$xdp(0x2c, 0x3, 0x0) (rerun: 32)

0s ago: executing program 0 (id=119):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000202907800000000e000080211009078e0000002000000"], 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1100, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts.
[   78.476647][ T5611] cgroup: Unknown subsys name 'net'
[   78.608386][ T5611] cgroup: Unknown subsys name 'cpuset'
[   78.617817][ T5611] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   80.306691][ T5611] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   82.459794][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.473640][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.482555][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.492296][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.501296][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.502946][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.511020][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.517674][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.528271][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.532358][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.541566][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.547850][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.562179][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.562931][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.570890][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.578967][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.586256][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.592949][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.605554][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.606997][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.614065][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.620776][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.641039][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.646802][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.667460][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.748506][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.756281][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.763843][ T5642] bridge_slave_0: entered allmulticast mode
[   83.771614][ T5642] bridge_slave_0: entered promiscuous mode
[   83.830060][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.837439][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.845313][ T5642] bridge_slave_1: entered allmulticast mode
[   83.853003][ T5642] bridge_slave_1: entered promiscuous mode
[   83.964865][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.973040][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.981184][ T5645] bridge_slave_0: entered allmulticast mode
[   83.989003][ T5645] bridge_slave_0: entered promiscuous mode
[   84.005279][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.040840][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.051039][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.058895][ T5645] bridge_slave_1: entered allmulticast mode
[   84.066670][ T5645] bridge_slave_1: entered promiscuous mode
[   84.087490][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.163495][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.171312][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.179113][ T5644] bridge_slave_0: entered allmulticast mode
[   84.186346][ T5644] bridge_slave_0: entered promiscuous mode
[   84.205638][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.212779][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.220168][ T5646] bridge_slave_0: entered allmulticast mode
[   84.227538][ T5646] bridge_slave_0: entered promiscuous mode
[   84.246094][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.253399][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.262056][ T5641] bridge_slave_0: entered allmulticast mode
[   84.270316][ T5641] bridge_slave_0: entered promiscuous mode
[   84.278393][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.285953][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.293258][ T5644] bridge_slave_1: entered allmulticast mode
[   84.300749][ T5644] bridge_slave_1: entered promiscuous mode
[   84.312959][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.322717][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.330387][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.338143][ T5646] bridge_slave_1: entered allmulticast mode
[   84.345457][ T5646] bridge_slave_1: entered promiscuous mode
[   84.356631][ T5642] team0: Port device team_slave_0 added
[   84.367066][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.374662][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.382075][ T5641] bridge_slave_1: entered allmulticast mode
[   84.389694][ T5641] bridge_slave_1: entered promiscuous mode
[   84.410282][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.435335][ T5642] team0: Port device team_slave_1 added
[   84.511859][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.534506][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.559862][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.572326][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.596559][ T5645] team0: Port device team_slave_0 added
[   84.606194][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.616580][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.623869][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.650854][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.664873][ T5631] Bluetooth: hci2: command tx timeout
[   84.665283][ T5627] Bluetooth: hci3: command tx timeout
[   84.672989][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.711720][ T5645] team0: Port device team_slave_1 added
[   84.728710][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.737245][ T5631] Bluetooth: hci0: command tx timeout
[   84.737253][   T50] Bluetooth: hci1: command tx timeout
[   84.737500][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.744399][ T5627] Bluetooth: hci4: command tx timeout
[   84.749655][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.806996][ T5644] team0: Port device team_slave_0 added
[   84.843101][ T5641] team0: Port device team_slave_0 added
[   84.851462][ T5644] team0: Port device team_slave_1 added
[   84.870851][ T5646] team0: Port device team_slave_0 added
[   84.880703][ T5646] team0: Port device team_slave_1 added
[   84.890291][ T5641] team0: Port device team_slave_1 added
[   84.908435][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.916035][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.942922][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.956574][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.964529][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.991179][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.073830][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.081074][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.109007][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.138780][ T5642] hsr_slave_0: entered promiscuous mode
[   85.145694][ T5642] hsr_slave_1: entered promiscuous mode
[   85.154801][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.162894][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.189329][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.202693][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.210267][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.237974][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.250221][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.258297][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.286925][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.300375][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.308182][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.335211][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.348328][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.356210][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.384207][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.502776][ T5645] hsr_slave_0: entered promiscuous mode
[   85.509425][ T5645] hsr_slave_1: entered promiscuous mode
[   85.516857][ T5645] debugfs: 'hsr0' already exists in 'hsr'
[   85.523117][ T5645] Cannot create hsr debugfs directory
[   85.594887][ T5646] hsr_slave_0: entered promiscuous mode
[   85.601440][ T5646] hsr_slave_1: entered promiscuous mode
[   85.607915][ T5646] debugfs: 'hsr0' already exists in 'hsr'
[   85.613931][ T5646] Cannot create hsr debugfs directory
[   85.624990][ T5641] hsr_slave_0: entered promiscuous mode
[   85.631387][ T5641] hsr_slave_1: entered promiscuous mode
[   85.637976][ T5641] debugfs: 'hsr0' already exists in 'hsr'
[   85.643828][ T5641] Cannot create hsr debugfs directory
[   85.675946][ T5644] hsr_slave_0: entered promiscuous mode
[   85.682481][ T5644] hsr_slave_1: entered promiscuous mode
[   85.689813][ T5644] debugfs: 'hsr0' already exists in 'hsr'
[   85.696209][ T5644] Cannot create hsr debugfs directory
[   86.286619][ T5642] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   86.302939][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.312011][ T5642] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   86.322636][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.332738][ T5642] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   86.344893][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.363022][ T5642] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   86.372787][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.445883][ T5645] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   86.460630][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.470064][ T5645] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   86.482538][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.491203][ T5645] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   86.501429][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.510094][ T5645] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   86.520775][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.636050][ T5644] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   86.649370][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.659446][ T5644] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   86.673006][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.681458][ T5644] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   86.691543][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.699947][ T5644] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   86.709998][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.734931][ T5631] Bluetooth: hci3: command tx timeout
[   86.744346][ T5631] Bluetooth: hci2: command tx timeout
[   86.814591][ T5631] Bluetooth: hci0: command tx timeout
[   86.820354][ T5627] Bluetooth: hci4: command tx timeout
[   86.820485][   T50] Bluetooth: hci1: command tx timeout
[   86.850175][ T5646] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   86.861437][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.880477][ T5646] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   86.893925][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.903224][ T5646] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   86.914442][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.940115][ T5646] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   86.952181][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.006270][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.077746][ T5641] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   87.092452][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.117799][ T5641] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   87.132942][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.142088][ T5641] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   87.154955][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.186598][ T5641] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   87.199367][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   87.246377][ T5642] 8021q: adding VLAN 0 to HW filter on device team0
[   87.316618][  T142] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.324372][  T142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.360579][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.368289][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.381368][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.479837][ T5645] 8021q: adding VLAN 0 to HW filter on device team0
[   87.533020][  T137] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.541060][  T137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.556411][  T137] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.564790][  T137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.586586][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.628839][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.677809][ T5644] 8021q: adding VLAN 0 to HW filter on device team0
[   87.699162][ T5646] 8021q: adding VLAN 0 to HW filter on device team0
[   87.727936][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.735356][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.788405][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.795753][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.806985][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.814209][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.837324][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.844778][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.863335][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.880949][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.951881][ T5641] 8021q: adding VLAN 0 to HW filter on device team0
[   87.997963][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.005277][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.052490][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.059866][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.083700][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.129392][ T5642] veth0_vlan: entered promiscuous mode
[   88.187537][ T5642] veth1_vlan: entered promiscuous mode
[   88.206430][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.258774][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.279101][ T5645] veth0_vlan: entered promiscuous mode
[   88.317365][ T5645] veth1_vlan: entered promiscuous mode
[   88.332690][ T5642] veth0_macvtap: entered promiscuous mode
[   88.369168][ T5642] veth1_macvtap: entered promiscuous mode
[   88.399260][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.413965][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.429022][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.459412][  T137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.469479][  T137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.492125][  T137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.501655][  T137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.539096][ T5645] veth0_macvtap: entered promiscuous mode
[   88.557660][ T5644] veth0_vlan: entered promiscuous mode
[   88.570370][ T5646] veth0_vlan: entered promiscuous mode
[   88.596703][ T5645] veth1_macvtap: entered promiscuous mode
[   88.619198][ T5644] veth1_vlan: entered promiscuous mode
[   88.659869][ T5646] veth1_vlan: entered promiscuous mode
[   88.716441][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.744923][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.761919][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.771792][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.816002][   T50] Bluetooth: hci2: command tx timeout
[   88.822257][ T5627] Bluetooth: hci3: command tx timeout
[   88.835502][   T76] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.851927][ T5644] veth0_macvtap: entered promiscuous mode
[   88.864340][   T76] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.879326][ T5641] veth0_vlan: entered promiscuous mode
[   88.888297][   T76] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.897210][ T5627] Bluetooth: hci1: command tx timeout
[   88.897353][ T5627] Bluetooth: hci4: command tx timeout
[   88.897379][ T5627] Bluetooth: hci0: command tx timeout
[   88.914429][   T76] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.929819][ T5644] veth1_macvtap: entered promiscuous mode
[   88.943293][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.952824][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.967850][ T5646] veth0_macvtap: entered promiscuous mode
[   88.991278][ T5641] veth1_vlan: entered promiscuous mode
[   89.028554][ T5646] veth1_macvtap: entered promiscuous mode
[   89.047701][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.080614][ T5642] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   89.109027][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.126099][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.133409][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.164487][  T142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.173812][  T142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.215785][  T142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.227967][  T142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.254804][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.280127][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.293849][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.308965][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.352329][  T142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.373145][  T142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.403017][  T142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.412310][  T142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.519626][ T5641] veth0_macvtap: entered promiscuous mode
[   89.658398][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.673403][ T5727] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   89.693512][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.767822][ T5641] veth1_macvtap: entered promiscuous mode
[   89.875521][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.898460][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.980494][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.996184][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.022302][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.061276][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.104636][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.117701][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.148711][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.187285][  T142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.210418][  T142] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.239138][  T142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.599962][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.651600][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.860124][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.901324][   T50] Bluetooth: hci3: command tx timeout
[   90.908945][ T5627] Bluetooth: hci2: command tx timeout
[   90.929295][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.976390][ T5627] Bluetooth: hci4: command tx timeout
[   90.977555][ T5631] Bluetooth: hci1: command tx timeout
[   90.981956][   T50] Bluetooth: hci0: command tx timeout
[   91.012552][ T5704] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   91.241867][ T5704] usb 3-1: config 255 has an invalid interface number: 249 but max is 1
[   91.260977][ T5758] Zero length message leads to an empty skb
[   91.275951][ T5704] usb 3-1: config 255 has an invalid interface number: 78 but max is 1
[   91.313272][ T5704] usb 3-1: config 255 has no interface number 0
[   91.345248][ T5704] usb 3-1: config 255 has no interface number 1
[   91.371110][ T5704] usb 3-1: config 255 interface 249 altsetting 12 endpoint 0xA has invalid wMaxPacketSize 0
[   91.414832][ T5704] usb 3-1: config 255 interface 249 altsetting 12 has a duplicate endpoint with address 0x9, skipping
[   91.474931][ T5704] usb 3-1: config 255 interface 249 altsetting 12 has a duplicate endpoint with address 0x9, skipping
[   91.479225][ T5763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'.
[   91.541998][ T5704] usb 3-1: config 255 interface 249 altsetting 12 has a duplicate endpoint with address 0xA, skipping
[   91.545575][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'.
[   91.601986][ T5704] usb 3-1: config 255 interface 249 altsetting 12 has a duplicate endpoint with address 0x3, skipping
[   91.634865][ T5763] erspan0: entered promiscuous mode
[   91.642221][ T5704] usb 3-1: config 255 interface 249 altsetting 12 has an endpoint descriptor with address 0xBA, changing to 0x8A
[   91.678841][ T5763] erspan0: left promiscuous mode
[   91.684039][ T5704] usb 3-1: config 255 interface 249 altsetting 12 has a duplicate endpoint with address 0x8A, skipping
[   91.717099][ T5704] usb 3-1: config 255 interface 249 altsetting 12 has a duplicate endpoint with address 0x9, skipping
[   91.749584][ T5704] usb 3-1: config 255 interface 249 altsetting 12 has an endpoint descriptor with address 0x16, changing to 0x6
[   91.758202][ T5771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11'.
[   91.777292][ T5704] usb 3-1: config 255 interface 249 altsetting 12 has a duplicate endpoint with address 0x9, skipping
[   91.837364][ T5704] usb 3-1: config 255 interface 249 altsetting 12 has a duplicate endpoint with address 0x6, skipping
[   91.850265][ T5775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11'.
[   91.885668][ T5704] usb 3-1: config 255 interface 249 altsetting 12 endpoint 0xF has invalid maxpacket 512, setting to 64
[   91.913116][ T5704] usb 3-1: config 255 interface 78 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[   91.945274][ T5704] usb 3-1: config 255 interface 78 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[   91.980156][ T5704] usb 3-1: config 255 interface 78 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   92.017771][ T5704] usb 3-1: config 255 interface 78 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[   92.066400][ T5704] usb 3-1: config 255 interface 78 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[   92.066452][ T5704] usb 3-1: config 255 interface 249 has no altsetting 0
[   92.073471][ T5704] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01ab, bcdDevice=27.28
[   92.073506][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.073527][ T5704] usb 3-1: Product: 蠵
[   92.073542][ T5704] usb 3-1: Manufacturer: ᬓ︦襣垊
[   92.073560][ T5704] usb 3-1: SerialNumber: 轖뮔鸗옄䪟Ǥ軯髁滇麉肱瓴
[   92.103018][ T5769] program syz.3.11 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   92.188233][   T24] cfg80211: failed to load regulatory.db
[   92.587958][ T5704] ftdi_sio 3-1:255.249: FTDI USB Serial Device converter detected
[   92.665737][ T5704] ftdi_sio ttyUSB0: unknown device type: 0x2728
[   92.767600][ T5704] ftdi_sio 3-1:255.78: FTDI USB Serial Device converter detected
[   92.802028][ T5704] ftdi_sio ttyUSB1: unknown device type: 0x2728
[   92.936476][ T5704] usb 3-1: USB disconnect, device number 2
[   93.044222][ T5690] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   93.101156][ T5704] ftdi_sio 3-1:255.249: device disconnected
[   93.189384][ T5704] ftdi_sio 3-1:255.78: device disconnected
[   93.244625][ T5690] usb 5-1: Using ep0 maxpacket: 32
[   93.293464][ T5690] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[   93.316246][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.318768][   T29] audit: type=1326 audit(1777455626.496:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.0.16" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f899059cdd9 code=0x0
[   93.355282][ T5690] usb 5-1: Product: syz
[   93.377612][ T5690] usb 5-1: Manufacturer: syz
[   93.395891][ T5690] usb 5-1: SerialNumber: syz
[   93.431882][ T5690] usb 5-1: config 0 descriptor??
[   93.624182][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   93.706317][ T5690] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 002
[   93.785468][   T10] usb 2-1: Using ep0 maxpacket: 8
[   93.805725][   T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[   93.821193][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.831861][   T10] usb 2-1: Product: syz
[   93.840966][   T10] usb 2-1: Manufacturer: syz
[   93.854692][   T10] usb 2-1: SerialNumber: syz
[   93.878771][   T10] usb 2-1: config 0 descriptor??
[   93.906996][   T10] gspca_main: se401-2.14.0 probing 047d:5003
[   94.026554][ T5787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14'.
[   94.038455][ T5787] syzkaller0: entered promiscuous mode
[   94.054701][ T5787] syzkaller0: entered allmulticast mode
[   94.142320][ T5804] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   94.198983][ T5804] sctp: [Deprecated]: syz.2.19 (pid 5804) Use of int in max_burst socket option.
[   94.198983][ T5804] Use struct sctp_assoc_value instead
[   94.206576][  T809] usb 5-1: USB disconnect, device number 2
[   94.484246][   T42] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   94.626155][   T42] usb 3-1: device descriptor read/64, error -71
[   94.844989][  T809] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   94.886434][   T42] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   95.006154][  T809] usb 4-1: Using ep0 maxpacket: 16
[   95.029612][   T10] gspca_se401: read req failed req 0x06 error -19
[   95.044596][  T809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.045297][   T42] usb 3-1: device descriptor read/64, error -71
[   95.069725][   T10] usb 2-1: USB disconnect, device number 2
[   95.090641][  T809] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   95.152253][  T809] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   95.165854][  T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.174790][  T809] usb 4-1: Product: syz
[   95.179318][  T809] usb 4-1: Manufacturer: syz
[   95.187823][  T809] usb 4-1: SerialNumber: syz
[   95.194581][   T42] usb usb3-port1: attempt power cycle
[   95.242225][  T809] usb 4-1: 0:2 : does not exist
[   95.553776][ T5818] program syz.1.24 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   95.567348][   T42] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   95.620027][   T42] usb 3-1: device descriptor read/8, error -71
[   95.676211][   T29] audit: type=1326 audit(1777455628.846:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5817 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116679cdd9 code=0x7ffc0000
[   95.739821][   T29] audit: type=1326 audit(1777455628.856:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5817 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116679cdd9 code=0x7ffc0000
[   95.847971][   T29] audit: type=1326 audit(1777455628.926:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5817 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f116679cdd9 code=0x7ffc0000
[   95.909487][   T29] audit: type=1326 audit(1777455628.926:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5817 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116679cdd9 code=0x7ffc0000
[   95.964036][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   95.977062][   T42] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   96.058381][   T42] usb 3-1: device descriptor read/8, error -71
[   96.086126][   T29] audit: type=1326 audit(1777455628.926:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5817 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f116679cdd9 code=0x7ffc0000
[   96.163862][   T29] audit: type=1326 audit(1777455628.926:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5817 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116679cdd9 code=0x7ffc0000
[   96.208701][   T42] usb usb3-port1: unable to enumerate USB device
[   96.246054][   T29] audit: type=1326 audit(1777455628.926:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5817 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f116679cdd9 code=0x7ffc0000
[   96.378708][   T29] audit: type=1326 audit(1777455629.266:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5817 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116679cdd9 code=0x7ffc0000
[   96.472735][   T29] audit: type=1326 audit(1777455629.266:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5817 comm="syz.4.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116679cdd9 code=0x7ffc0000
[   96.724575][ T5846] binder_alloc: 5845: binder_alloc_buf, no vma
[   96.756839][ T5849] fuse: Unknown parameter 'grou00000000000000000000'
[   97.004240][ T5690] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   97.177012][ T5690] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   97.223247][ T5690] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   97.269902][ T5690] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   97.301829][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.334469][ T5690] usb 2-1: Product: syz
[   97.351541][ T5690] usb 2-1: Manufacturer: syz
[   97.361677][ T5690] usb 2-1: SerialNumber: syz
[   97.406281][ T5690] usb 2-1: config 0 descriptor??
[   97.429248][ T5846] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   97.451216][ T5846] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   97.633393][  T809] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[   97.709997][ T5846] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   97.737312][ T5846] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   98.006135][  T809] usb 4-1: USB disconnect, device number 3
[   98.175228][ T5749] udevd[5749]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   98.476171][  T809] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   98.655077][  T809] usb 4-1: Using ep0 maxpacket: 32
[   98.666678][  T809] usb 4-1: unable to get BOS descriptor or descriptor too short
[   98.690115][  T809] usb 4-1: config 8 has an invalid interface number: 143 but max is 3
[   98.699200][  T809] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[   98.713215][  T809] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 4
[   98.726477][  T809] usb 4-1: config 8 has no interface number 0
[   98.745922][   T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   98.773642][  T809] usb 4-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[   98.794227][  T809] usb 4-1: config 8 interface 143 altsetting 193 endpoint 0x9 has invalid wMaxPacketSize 0
[   98.827348][  T809] usb 4-1: config 8 interface 143 altsetting 193 bulk endpoint 0x9 has invalid maxpacket 0
[   98.864314][  T809] usb 4-1: config 8 interface 143 altsetting 193 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[   98.890567][  T809] usb 4-1: config 8 interface 143 has no altsetting 0
[   98.911729][  T809] usb 4-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4
[   98.916475][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.940491][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.951853][   T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   98.955473][  T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.995886][  T809] usb 4-1: Product: syz
[   99.005830][  T809] usb 4-1: Manufacturer: syz
[   99.022285][  T809] usb 4-1: SerialNumber: syz
[   99.029785][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.050678][ T5883] fuse: Bad value for 'fd'
[   99.079948][   T24] usb 5-1: config 0 descriptor??
[   99.290573][ T5857] netlink: 'syz.3.30': attribute type 32 has an invalid length.
[   99.331936][  T809] io_ti 4-1:8.143: required endpoints missing
[   99.385489][  T809] usb 4-1: USB disconnect, device number 4
[   99.504033][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   99.647715][   T24] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0
[   99.658415][   T24] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0
[   99.666895][   T24] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0
[   99.677223][   T24] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0
[   99.684302][   T24] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0
[   99.691308][   T24] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0
[   99.700575][   T24] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0
[   99.740287][   T24] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0
[   99.820727][ T5690] Error reading MAC address
[   99.821087][ T5879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.865551][ T5879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.935809][ T5690] usb 2-1: USB disconnect, device number 3
[   99.983861][   T42] usb 5-1: USB disconnect, device number 3
[  100.108418][ T5888] fido_id[5888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  100.450733][ T5901] fuse: Unknown parameter 'grou00000000000000000000'
[  101.564151][ T5704] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  101.599472][ T5910] netlink: 'syz.4.42': attribute type 10 has an invalid length.
[  101.759340][ T5704] usb 2-1: Using ep0 maxpacket: 32
[  101.781274][ T5704] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  101.810833][ T5704] usb 2-1: config 0 has no interface number 0
[  101.837107][ T5704] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  101.853708][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.874151][ T5704] usb 2-1: Product: syz
[  101.888634][ T5704] usb 2-1: Manufacturer: syz
[  101.898185][ T5704] usb 2-1: SerialNumber: syz
[  101.908362][ T5704] usb 2-1: config 0 descriptor??
[  101.917601][ T5704] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  101.924151][ T5718] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  101.982770][ T5933] ip6erspan0: entered allmulticast mode
[  102.127244][ T5718] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  102.161498][ T5704] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  102.161888][ T5718] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  102.203632][ T5935] syzkaller1: entered promiscuous mode
[  102.216531][ T5935] syzkaller1: entered allmulticast mode
[  102.223910][ T5718] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  102.249221][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.282692][ T5704] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  102.320975][ T5917] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  102.354983][ T5718] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  102.620979][ T5910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.714227][   T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  102.800234][ T5910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.937686][   T42] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  102.983354][   T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.033550][   T42] usb 1-1: config 0 descriptor??
[  103.336426][ T5718] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  103.506748][ T5718] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  103.523405][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.552268][ T5718] usb 3-1: config 0 descriptor??
[  103.753215][ T5910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  103.797672][ T5910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.432553][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  104.441039][   T24] usb 2-1: USB disconnect, device number 4
[  104.471726][   T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  104.567774][   T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  104.620075][   T24] quatech2 2-1:0.51: device disconnected
[  104.690361][ T5961] capability: warning: `syz.1.54' uses 32-bit capabilities (legacy support in use)
[  104.982600][ T5964] fuse: Unknown parameter 'group_i00000000000000000000'
[  105.219215][   T42] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  105.272347][   T42] [drm:udl_init] *ERROR* Selecting channel failed
[  105.492564][   T42] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  105.522070][   T42] [drm] Initialized udl on minor 2
[  105.635775][   T42] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  105.668003][   T42] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  105.721578][   T42] usb 1-1: USB disconnect, device number 2
[  105.737650][ T5704] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  105.808564][ T5704] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  105.986352][ T5704] usb 5-1: USB disconnect, device number 4
[  106.230262][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'.
[  106.506141][ T5718] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  106.534855][ T5718] [drm:udl_init] *ERROR* Selecting channel failed
[  106.609277][ T5979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.59'.
[  106.623223][ T5718] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 3
[  106.636490][ T5718] [drm] Initialized udl on minor 3
[  106.656355][ T5718] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  106.698991][ T5718] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  106.724610][  T809] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  106.746667][ T5718] usb 3-1: USB disconnect, device number 7
[  106.757685][ T5704] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  106.765153][  T809] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  106.924763][ T5690] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  106.962140][ T5976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.996098][ T5976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.098340][ T5690] usb 4-1: unable to get BOS descriptor or descriptor too short
[  107.125738][ T5690] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  107.150371][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.172511][ T5690] usb 4-1: Product: syz
[  107.186029][ T5690] usb 4-1: Manufacturer: syz
[  107.198362][ T5690] usb 4-1: SerialNumber: syz
[  107.242742][ T5690] usb 4-1: selecting invalid altsetting 1
[  107.265696][ T5690] usb 4-1: unit 6 not found!
[  107.280633][ T5690] usb 4-1: unit 2 not found!
[  107.302939][ T5690] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  107.332744][ T5704] usb 5-1: unable to read config index 0 descriptor/start: -71
[  107.335747][ T5690] usb 4-1: selecting invalid altsetting 1
[  107.360286][ T5704] usb 5-1: can't read configurations, error -71
[  107.369685][ T5690] usb 4-1: unit 6 not found!
[  107.397812][ T5690] usb 4-1: unit 2 not found!
[  107.428146][ T5690] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22
[  107.480362][ T5690] usb 4-1: selecting invalid altsetting 1
[  107.502555][ T5690] usb 4-1: unit 6 not found!
[  107.519970][ T5690] usb 4-1: unit 2 not found!
[  107.543154][ T5994] netlink: 'syz.2.63': attribute type 10 has an invalid length.
[  107.555413][ T5994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.63'.
[  107.634075][ T5690] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22
[  107.646568][  T809] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  107.680398][ T5690] usb 4-1: USB disconnect, device number 5
[  107.736639][ T5749] udevd[5749]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  108.281414][ T6013] fuse: Unknown parameter 'group_i00000000000000000000'
[  109.024955][   T42] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  109.221632][   T42] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  109.242139][   T42] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  109.254135][   T42] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  109.263824][   T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.280869][ T6020] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  109.311494][   T42] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  109.532835][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.554424][  T809] usb 2-1: Using ep0 maxpacket: 16
[  109.666829][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.712734][  T809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.750603][  T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  109.783948][  T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  109.823357][  T809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  109.910145][  T809] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  110.950179][  T809] usb 2-1: string descriptor 0 read error: -71
[  110.984112][  T809] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  110.994174][   T42] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  111.001877][  T809] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  111.042614][  T809] usb 2-1: config 0 descriptor??
[  111.078308][  T809] usb 2-1: can't set config #0, error -71
[  111.129344][  T809] usb 2-1: USB disconnect, device number 5
[  111.148589][ T5690] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  111.206799][   T42] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.239332][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'.
[  111.253553][   T42] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[  111.292920][   T42] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  111.304745][ T5690] usb 3-1: device descriptor read/64, error -71
[  111.326059][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'.
[  111.400889][   T42] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  111.420588][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.431035][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'.
[  111.432091][   T76] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  111.453490][   T42] usb 1-1: Product: syz
[  111.460476][   T42] usb 1-1: Manufacturer: syz
[  111.472358][   T42] usb 1-1: SerialNumber: syz
[  111.489638][   T76] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  111.500136][ T6054] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  111.512585][   T76] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  111.532462][ T6053] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  111.565966][ T6054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.576492][  T142] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  111.586259][ T6053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.612246][ T5690] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  111.764119][ T5690] usb 3-1: device descriptor read/64, error -71
[  111.893199][ T6057] fuse: Unknown parameter 'group_i00000000000000000000'
[  111.905408][ T5690] usb usb3-port1: attempt power cycle
[  112.264203][ T5690] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  112.316865][ T5690] usb 3-1: device descriptor read/8, error -71
[  112.352979][ T6070] mmap: syz.1.82 (6070): VmData 37736448 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  112.438990][ T6069] netlink: 'syz.1.82': attribute type 8 has an invalid length.
[  112.489688][  T809] usb 4-1: USB disconnect, device number 6
[  112.575142][ T5690] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  112.628824][ T5690] usb 3-1: device descriptor read/8, error -71
[  112.738928][ T6076] tipc: Started in network mode
[  112.755740][ T5690] usb usb3-port1: unable to enumerate USB device
[  112.770432][ T6076] tipc: Node identity 4e77c8bdf9f3, cluster identity 4711
[  112.822573][ T6076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.858044][ T6079] syzkaller0: entered promiscuous mode
[  112.888718][ T6079] syzkaller0: entered allmulticast mode
[  112.982769][ T6076] tipc: Resetting bearer <eth:syzkaller0>
[  113.446955][ T6072] tipc: Resetting bearer <eth:syzkaller0>
[  113.525907][ T6072] tipc: Disabling bearer <eth:syzkaller0>
[  114.394100][ T5690] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  114.507995][   T42] cdc_ncm 1-1:1.0: bind() failure
[  114.539265][   T42] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  114.572419][   T42] cdc_ncm 1-1:1.1: bind() failure
[  114.585973][ T5690] usb 4-1: Using ep0 maxpacket: 16
[  114.611477][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.623116][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.628932][   T42] usb 1-1: USB disconnect, device number 3
[  114.634976][ T5690] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  114.655227][ T5690] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  114.666002][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.696766][ T5690] usb 4-1: config 0 descriptor??
[  115.197140][ T5690] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0002/input/input5
[  115.355866][ T5690] appleir 0003:05AC:8241.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  115.430179][ T5690] usb 4-1: USB disconnect, device number 7
[  115.550683][ T6128] fido_id[6128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  116.366324][ T6149] capability: warning: `syz.1.107' uses deprecated v2 capabilities in a way that may be insecure
[  116.781627][ T6134] blktrace: Concurrent blktraces are not allowed on nbd0
[  116.834110][ T5690] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  116.989614][ T5690] usb 2-1: config 1 has an invalid descriptor of length 243, skipping remainder of the config
[  117.023034][ T6161] netlink: 'syz.0.108': attribute type 13 has an invalid length.
[  117.039383][ T5690] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  117.052647][ T5690] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  117.111166][ T5690] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  117.156620][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.185401][ T5690] usb 2-1: Product: syz
[  117.194646][ T5690] usb 2-1: Manufacturer: syz
[  117.201334][ T5690] usb 2-1: SerialNumber: syz
[  117.233676][ T5690] cdc_mbim 2-1:1.0: MBIM functional descriptor missing
[  117.251496][ T5690] cdc_mbim 2-1:1.0: bind() failure
[  117.450411][ T5690] usb 2-1: USB disconnect, device number 6
[  117.764101][  T809] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  117.966765][  T809] usb 4-1: device descriptor read/64, error -71
[  118.087828][ T6173] io-wq is not configured for unbound workers
[  118.092880][ T6173] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  118.266456][  T809] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  118.304358][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.112'.
[  118.326276][ T6179] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  118.381520][ T6178] vlan0: entered promiscuous mode
[  118.465328][  T809] usb 4-1: device descriptor read/64, error -71
[  118.595331][  T809] usb usb4-port1: attempt power cycle
[  118.965826][  T809] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  119.015258][  T809] usb 4-1: device descriptor read/8, error -71
[  119.024221][ T5690] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  119.090041][ T6187] netlink: 'syz.0.114': attribute type 10 has an invalid length.
[  119.123707][   T42] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  119.187341][ T5690] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 150
[  119.210924][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 26633, setting to 1024
[  119.266207][ T5690] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024
[  119.284139][  T809] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  119.305980][ T5690] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  119.335006][  T809] usb 4-1: device descriptor read/8, error -71
[  119.342391][ T5690] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  119.388000][ T5690] usb 5-1: Manufacturer: syz
[  119.409626][ T5690] usb 5-1: config 0 descriptor??
[  119.420442][ T6186] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  119.433380][ T6186] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  119.456468][ T5690] smsusb:smsusb_probe: board id=9, interface number 0
[  119.485040][  T809] usb usb4-port1: unable to enumerate USB device
[  119.491677][ T5690] smsusb:siano_media_device_register: media controller created
[  119.505161][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.512762][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.520187][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.527719][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.536888][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.546604][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.554039][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.561645][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.568925][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.578056][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.585416][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.592845][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.600417][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.608598][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.615863][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.623389][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.630868][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.638730][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.646063][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.653720][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.661423][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.669374][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.676955][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.684679][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.692048][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.702728][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.710772][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.718496][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.725970][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.735708][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.743130][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.750585][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.757880][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.765970][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.773488][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.781232][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.789107][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.798154][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.805944][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.813391][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.821181][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.831777][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.839147][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.846423][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.853968][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.862074][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.869953][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.877379][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.884942][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.893520][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.900838][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.908117][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.915574][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.924296][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.931638][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.938924][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.946242][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.954271][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.962108][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.970021][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.977640][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.985348][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  119.993406][ T5690] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22
[  120.003092][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.003187][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.003261][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.003336][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.003386][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.046625][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.054666][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.062451][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.070586][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.078370][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.085896][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.093633][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.101053][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.108370][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.177857][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.185207][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.192616][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.199983][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.207521][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.214922][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.222276][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.229540][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.303492][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.311007][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.318507][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.325813][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.333348][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.340665][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.348068][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.356577][ T5690] smsmdtv:smscore_set_device_mode: mode detect failed -22
[  120.368712][ T5690] smsmdtv:smscore_start_device: set device mode failed , rc -22
[  120.377420][ T5690] smsusb:smsusb_init_device: smscore_start_device(...) failed
[  120.388889][ T6187] team0: Port device veth0_to_hsr added
[  120.422513][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.436971][ T6186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.437608][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.453270][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.478828][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.486775][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.496630][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.504827][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.504937][ T6186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.512942][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.528451][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.536269][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.548180][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.555623][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.564364][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.571758][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.579503][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.586825][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.594576][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.604294][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.611693][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.620374][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.627717][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.638384][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.645793][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.653714][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.661176][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.668989][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.676273][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.684165][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.691688][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.701547][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.708879][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.717843][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.725504][    C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes
[  120.734881][ T5690] ------------[ cut here ]------------
[  120.740493][ T5690] !PageLargeKmalloc(page)
[  120.740511][ T5690] WARNING: mm/slub.c:6471 at free_large_kmalloc+0x9b/0x110, CPU#0: kworker/0:4/5690
[  120.754586][ T5690] Modules linked in:
[  120.758710][ T5690] CPU: 0 UID: 0 PID: 5690 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) 
[  120.768277][ T5690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  120.778417][ T5690] Workqueue: usb_hub_wq hub_event
[  120.783580][ T5690] RIP: 0010:free_large_kmalloc+0x9b/0x110
[  120.789546][ T5690] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 60 e9 fb 8d 5b 41 5e 5d e9 ef 66 02 ff
[  120.811142][ T5690] RSP: 0018:ffffc90004746b20 EFLAGS: 00010206
[  120.818236][ T5690] RAX: 00000000ff000000 RBX: ffffea0001441880 RCX: 0000000000000001
[  120.826335][ T5690] RDX: ffffc9001a2aa000 RSI: ffff888051062000 RDI: ffffea0001441880
[  120.834418][ T5690] RBP: 0000000000000000 R08: ffff888077e5d903 R09: 1ffff1100efcbb20
[  120.842419][ T5690] R10: dffffc0000000000 R11: ffffed100efcbb21 R12: 1ffff1100683d682
[  120.850704][ T5690] R13: ffff88807cef1700 R14: ffff888077e5d960 R15: dffffc0000000000
[  120.858863][ T5690] FS:  0000000000000000(0000) GS:ffff888125293000(0000) knlGS:0000000000000000
[  120.867988][ T5690] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  120.874619][ T5690] CR2: 00007ffc9c86dda0 CR3: 0000000058534000 CR4: 00000000003526f0
[  120.882633][ T5690] Call Trace:
[  120.885967][ T5690]  <TASK>
[  120.888926][ T5690]  usb_free_urb+0xd0/0x120
[  120.893381][ T5690]  smsusb_term_device+0x1d7/0x3e0
[  120.898676][ T5690]  smsusb_probe+0x1aba/0x2280
[  120.904662][ T5690]  ? __pfx_smsusb_probe+0x10/0x10
[  120.909894][ T5690]  ? __pfx_smsusb_sendrequest+0x10/0x10
[  120.916466][ T5690]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  120.922584][ T5690]  ? __pm_runtime_set_status+0x9d4/0xcd0
[  120.928418][ T5690]  usb_probe_interface+0x659/0xc70
[  120.933952][ T5690]  ? __pfx_usb_probe_interface+0x10/0x10
[  120.939770][ T5690]  really_probe+0x267/0xaf0
[  120.944409][ T5690]  __driver_probe_device+0x1ef/0x380
[  120.949729][ T5690]  driver_probe_device+0x4f/0x240
[  120.956741][ T5690]  __device_attach_driver+0x279/0x430
[  120.962368][ T5690]  bus_for_each_drv+0x258/0x2f0
[  120.967422][ T5690]  ? __pfx___device_attach_driver+0x10/0x10
[  120.973350][ T5690]  ? __pfx_bus_for_each_drv+0x10/0x10
[  120.987776][ T5690]  ? lockdep_hardirqs_on+0x7a/0x110
[  120.993053][ T5690]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  120.999812][ T5690]  __device_attach+0x2c5/0x450
[  121.006048][ T5690]  ? __pfx___device_attach+0x10/0x10
[  121.011562][ T5690]  ? _raw_spin_unlock+0x28/0x50
[  121.017223][ T5690]  device_initial_probe+0xa1/0xd0
[  121.022389][ T5690]  bus_probe_device+0x12a/0x220
[  121.027403][ T5690]  device_add+0x7e9/0xbb0
[  121.031845][ T5690]  usb_set_configuration+0x1a87/0x2110
[  121.037559][ T5690]  usb_generic_driver_probe+0x8d/0x150
[  121.043056][ T5690]  usb_probe_device+0x1c4/0x3b0
[  121.047993][ T5690]  ? __pfx_usb_probe_device+0x10/0x10
[  121.053557][ T5690]  really_probe+0x267/0xaf0
[  121.058256][ T5690]  __driver_probe_device+0x1ef/0x380
[  121.063871][ T5690]  driver_probe_device+0x4f/0x240
[  121.069167][ T5690]  __device_attach_driver+0x279/0x430
[  121.074740][ T5690]  bus_for_each_drv+0x258/0x2f0
[  121.079756][ T5690]  ? __pfx___device_attach_driver+0x10/0x10
[  121.085765][ T5690]  ? __pfx_bus_for_each_drv+0x10/0x10
[  121.091381][ T5690]  ? lockdep_hardirqs_on+0x7a/0x110
[  121.096676][ T5690]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  121.102578][ T5690]  __device_attach+0x2c5/0x450
[  121.108765][ T5690]  ? __pfx___device_attach+0x10/0x10
[  121.115042][ T5690]  ? _raw_spin_unlock+0x28/0x50
[  121.120128][ T5690]  device_initial_probe+0xa1/0xd0
[  121.125243][ T5690]  bus_probe_device+0x12a/0x220
[  121.130132][ T5690]  device_add+0x7e9/0xbb0
[  121.134648][ T5690]  usb_new_device+0xa08/0x16f0
[  121.139550][ T5690]  ? __pfx_usb_new_device+0x10/0x10
[  121.145002][ T5690]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.150225][ T5690]  hub_event+0x2a1c/0x4f30
[  121.154766][ T5690]  ? do_raw_spin_unlock+0xf5/0x210
[  121.160261][ T5690]  ? __pfx_hub_event+0x10/0x10
[  121.165331][ T5690]  ? process_scheduled_works+0xa70/0x1860
[  121.171557][ T5690]  ? process_scheduled_works+0xa70/0x1860
[  121.177540][ T5690]  ? process_scheduled_works+0xa70/0x1860
[  121.183408][ T5690]  process_scheduled_works+0xb5d/0x1860
[  121.189168][ T5690]  ? __pfx_process_scheduled_works+0x10/0x10
[  121.195260][ T5690]  ? assign_work+0x3d5/0x5e0
[  121.199896][ T5690]  worker_thread+0xa53/0xfc0
[  121.204582][ T5690]  kthread+0x388/0x470
[  121.208719][ T5690]  ? __pfx_worker_thread+0x10/0x10
[  121.215120][ T5690]  ? __pfx_kthread+0x10/0x10
[  121.219773][ T5690]  ret_from_fork+0x514/0xb70
[  121.225184][ T5690]  ? __pfx_ret_from_fork+0x10/0x10
[  121.230315][ T5690]  ? __switch_to+0xc79/0x1410
[  121.236124][ T5690]  ? __pfx_kthread+0x10/0x10
[  121.240745][ T5690]  ret_from_fork_asm+0x1a/0x30
[  121.245592][ T5690]  </TASK>
[  121.248659][ T5690] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  121.255966][ T5690] CPU: 0 UID: 0 PID: 5690 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) 
[  121.265479][ T5690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  121.275758][ T5690] Workqueue: usb_hub_wq hub_event
[  121.281008][ T5690] Call Trace:
[  121.284846][ T5690]  <TASK>
[  121.288229][ T5690]  vpanic+0x56c/0xa60
[  121.292333][ T5690]  ? __pfx__printk+0x10/0x10
[  121.297261][ T5690]  ? __pfx_vpanic+0x10/0x10
[  121.302017][ T5690]  ? is_bpf_text_address+0x292/0x2b0
[  121.307625][ T5690]  ? is_bpf_text_address+0x26/0x2b0
[  121.313106][ T5690]  panic+0xc5/0xd0
[  121.317037][ T5690]  ? __pfx_panic+0x10/0x10
[  121.321485][ T5690]  ? ret_from_fork_asm+0x1a/0x30
[  121.326554][ T5690]  __warn+0x315/0x4c0
[  121.330663][ T5690]  ? free_large_kmalloc+0x9b/0x110
[  121.335977][ T5690]  ? free_large_kmalloc+0x9b/0x110
[  121.341252][ T5690]  __report_bug+0x29a/0x540
[  121.345988][ T5690]  ? device_initial_probe+0xa1/0xd0
[  121.351242][ T5690]  ? bus_probe_device+0x12a/0x220
[  121.356568][ T5690]  ? device_add+0x7e9/0xbb0
[  121.361229][ T5690]  ? free_large_kmalloc+0x9b/0x110
[  121.367096][ T5690]  ? __pfx___report_bug+0x10/0x10
[  121.372369][ T5690]  ? usb_new_device+0xa08/0x16f0
[  121.377360][ T5690]  ? hub_event+0x2a1c/0x4f30
[  121.381977][ T5690]  ? process_scheduled_works+0xb5d/0x1860
[  121.387752][ T5690]  ? smscore_unregister_device+0x651/0x780
[  121.393606][ T5690]  ? free_large_kmalloc+0x9b/0x110
[  121.398749][ T5690]  report_bug+0x16a/0x220
[  121.403198][ T5690]  ? free_large_kmalloc+0x9b/0x110
[  121.408807][ T5690]  ? free_large_kmalloc+0x9d/0x110
[  121.414218][ T5690]  handle_bug+0x9c/0x200
[  121.418617][ T5690]  exc_invalid_op+0x1a/0x50
[  121.423177][ T5690]  asm_exc_invalid_op+0x1a/0x20
[  121.428132][ T5690] RIP: 0010:free_large_kmalloc+0x9b/0x110
[  121.434035][ T5690] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 60 e9 fb 8d 5b 41 5e 5d e9 ef 66 02 ff
[  121.454208][ T5690] RSP: 0018:ffffc90004746b20 EFLAGS: 00010206
[  121.460338][ T5690] RAX: 00000000ff000000 RBX: ffffea0001441880 RCX: 0000000000000001
[  121.468536][ T5690] RDX: ffffc9001a2aa000 RSI: ffff888051062000 RDI: ffffea0001441880
[  121.476811][ T5690] RBP: 0000000000000000 R08: ffff888077e5d903 R09: 1ffff1100efcbb20
[  121.485188][ T5690] R10: dffffc0000000000 R11: ffffed100efcbb21 R12: 1ffff1100683d682
[  121.493632][ T5690] R13: ffff88807cef1700 R14: ffff888077e5d960 R15: dffffc0000000000
[  121.501777][ T5690]  usb_free_urb+0xd0/0x120
[  121.506251][ T5690]  smsusb_term_device+0x1d7/0x3e0
[  121.511512][ T5690]  smsusb_probe+0x1aba/0x2280
[  121.516250][ T5690]  ? __pfx_smsusb_probe+0x10/0x10
[  121.521419][ T5690]  ? __pfx_smsusb_sendrequest+0x10/0x10
[  121.527119][ T5690]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  121.533198][ T5690]  ? __pm_runtime_set_status+0x9d4/0xcd0
[  121.538886][ T5690]  usb_probe_interface+0x659/0xc70
[  121.544091][ T5690]  ? __pfx_usb_probe_interface+0x10/0x10
[  121.549983][ T5690]  really_probe+0x267/0xaf0
[  121.554614][ T5690]  __driver_probe_device+0x1ef/0x380
[  121.560199][ T5690]  driver_probe_device+0x4f/0x240
[  121.565349][ T5690]  __device_attach_driver+0x279/0x430
[  121.570835][ T5690]  bus_for_each_drv+0x258/0x2f0
[  121.575912][ T5690]  ? __pfx___device_attach_driver+0x10/0x10
[  121.582053][ T5690]  ? __pfx_bus_for_each_drv+0x10/0x10
[  121.587493][ T5690]  ? lockdep_hardirqs_on+0x7a/0x110
[  121.592742][ T5690]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  121.598578][ T5690]  __device_attach+0x2c5/0x450
[  121.603399][ T5690]  ? __pfx___device_attach+0x10/0x10
[  121.608721][ T5690]  ? _raw_spin_unlock+0x28/0x50
[  121.613775][ T5690]  device_initial_probe+0xa1/0xd0
[  121.618922][ T5690]  bus_probe_device+0x12a/0x220
[  121.623827][ T5690]  device_add+0x7e9/0xbb0
[  121.628286][ T5690]  usb_set_configuration+0x1a87/0x2110
[  121.634617][ T5690]  usb_generic_driver_probe+0x8d/0x150
[  121.640136][ T5690]  usb_probe_device+0x1c4/0x3b0
[  121.645331][ T5690]  ? __pfx_usb_probe_device+0x10/0x10
[  121.650985][ T5690]  really_probe+0x267/0xaf0
[  121.655738][ T5690]  __driver_probe_device+0x1ef/0x380
[  121.661187][ T5690]  driver_probe_device+0x4f/0x240
[  121.666617][ T5690]  __device_attach_driver+0x279/0x430
[  121.672046][ T5690]  bus_for_each_drv+0x258/0x2f0
[  121.676961][ T5690]  ? __pfx___device_attach_driver+0x10/0x10
[  121.683330][ T5690]  ? __pfx_bus_for_each_drv+0x10/0x10
[  121.688852][ T5690]  ? lockdep_hardirqs_on+0x7a/0x110
[  121.694200][ T5690]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  121.700050][ T5690]  __device_attach+0x2c5/0x450
[  121.704831][ T5690]  ? __pfx___device_attach+0x10/0x10
[  121.710167][ T5690]  ? _raw_spin_unlock+0x28/0x50
[  121.715144][ T5690]  device_initial_probe+0xa1/0xd0
[  121.720187][ T5690]  bus_probe_device+0x12a/0x220
[  121.725171][ T5690]  device_add+0x7e9/0xbb0
[  121.729586][ T5690]  usb_new_device+0xa08/0x16f0
[  121.734462][ T5690]  ? __pfx_usb_new_device+0x10/0x10
[  121.739798][ T5690]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.745142][ T5690]  hub_event+0x2a1c/0x4f30
[  121.749592][ T5690]  ? do_raw_spin_unlock+0xf5/0x210
[  121.754980][ T5690]  ? __pfx_hub_event+0x10/0x10
[  121.760135][ T5690]  ? process_scheduled_works+0xa70/0x1860
[  121.765918][ T5690]  ? process_scheduled_works+0xa70/0x1860
[  121.772102][ T5690]  ? process_scheduled_works+0xa70/0x1860
[  121.778021][ T5690]  process_scheduled_works+0xb5d/0x1860
[  121.783725][ T5690]  ? __pfx_process_scheduled_works+0x10/0x10
[  121.789843][ T5690]  ? assign_work+0x3d5/0x5e0
[  121.794456][ T5690]  worker_thread+0xa53/0xfc0
[  121.799105][ T5690]  kthread+0x388/0x470
[  121.803542][ T5690]  ? __pfx_worker_thread+0x10/0x10
[  121.808798][ T5690]  ? __pfx_kthread+0x10/0x10
[  121.813803][ T5690]  ret_from_fork+0x514/0xb70
[  121.818529][ T5690]  ? __pfx_ret_from_fork+0x10/0x10
[  121.823681][ T5690]  ? __switch_to+0xc79/0x1410
[  121.828417][ T5690]  ? __pfx_kthread+0x10/0x10
[  121.833268][ T5690]  ret_from_fork_asm+0x1a/0x30
[  121.838079][ T5690]  </TASK>
[  121.841874][ T5690] Kernel Offset: disabled
[  121.846209][ T5690] Rebooting in 86400 seconds..