last executing test programs:

20.925230081s ago: executing program 0 (id=95):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0xc}]}}, 0x0, 0x26, 0x0, 0x0, 0x800001}, 0x28)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
prctl$PR_SET_ENDIAN(0x47, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000101840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff050000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10}, 0x90)

19.240689788s ago: executing program 0 (id=98):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000280)=[@enter_looper, @exit_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000})
prlimit64(0x0, 0xd, &(0x7f00000001c0)={0x2, 0x2}, 0x0)
mremap(&(0x7f00003c8000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000024a000/0x1000)=nil)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ptrace(0x10, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
inotify_init()

17.478900251s ago: executing program 0 (id=104):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
syz_usb_connect(0x1, 0x9a2, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe00c0000904eb02027f9c1f000905060220000200020905822b"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r5 = eventfd2(0x4001, 0x800)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r7 = eventfd2(0x4, 0x801)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r5, 0x7, 0x2, r7})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x1, 0x7, 0x7f, 0x0, 0xf, 0x4, 0x3, 0x41, 0x3, 0x58, 0x90, 0x5, 0xc0, 0x7f}})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000000340)=[0x400007f])
ioctl$KVM_GET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea3)

15.288515962s ago: executing program 2 (id=112):
socket$inet6(0xa, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000400)=0xdc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xd, &(0x7f0000000580)=ANY=[@ANYRES16=r2, @ANYRES8, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc889}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r4 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000280)={r4, r5, r5}, &(0x7f00000002c0)=""/46, 0x2e, &(0x7f0000000380)={&(0x7f0000000300)={'sha1-avx\x00'}})
sendmsg$nl_route(r0, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x404c080)
write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0x92e1, 0x20, 0x1, 0x40000333}, &(0x7f00000006c0)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x24})
syz_open_dev$vim2m(&(0x7f0000000340), 0x20000000009, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x2, 0x0)
prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x88}, 0x0)

14.501782212s ago: executing program 4 (id=113):
r0 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='(\b \x00', @ANYRES16=r3, @ANYBLOB="0b0d28bd7000fcdbdf250200000014000180060005004e2000000500020001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="000000ba0424c800", @ANYRES16=r3, @ANYBLOB="000127bd7000fedbdf250200000008000400000000000800040000020000080004000200000008000300000000000500050001000000050005008a000000080004000600000008000400010400000500050007000000"], 0x5c}, 0x1, 0x0, 0x0, 0xd1}, 0x804)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2$watch_queue(&(0x7f0000000280)={<r7=>0xffffffffffffffff}, 0x80)
r8 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x0)
keyctl$revoke(0x3, r8)
read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc491"], 0x1c}}, 0x48011)
ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000000c0)={0x0, @multicast})
ftruncate(r0, 0x80079a0)
readv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0)

13.265036101s ago: executing program 0 (id=114):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x8}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80000002}, 0x50)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006f8db4088205e82806f50102030109021b0001000000000904000001fff14c000905", @ANYRES16], 0x0)

13.140212068s ago: executing program 4 (id=115):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="0200003ed00d40980d4011e9db00100801090212000000"], 0x0)

11.028063178s ago: executing program 3 (id=118):
read$msr(0xffffffffffffffff, &(0x7f0000000000)=""/165, 0xa5)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001dc0)={@local, <r0=>0x0}, &(0x7f0000001e00)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000022c0)={'ip6tnl0\x00', &(0x7f0000002240)={'syztnl0\x00', <r1=>0x0, 0x0, 0x4, 0x6, 0x1, 0x62, @loopback, @local, 0x700, 0x700, 0x4, 0x4}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002600)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x8001, @remote, 0x8}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="aacc56006dfa4e65e05601637979d28f0fc3984b39469fb8e5dbae77a420ca9186a46cdf3e6c9812c119eaa429aa2f09b0fcc38b46211fd5276d1aebeed9c472e70ec32b51b3ff2ab8de90880554a5f02deadcaca48b4594aca54cb873f664fd98e9675f3de07a55da4862314bd38d19f0d9", 0x72}], 0x1, &(0x7f00000001c0)=[@hopopts={{0xc8, 0x29, 0x36, {0x6c, 0x15, '\x00', [@generic={0x9, 0xd, "61adbc0097070484a7fdf301b6"}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x48, {0x1, 0x10, 0x9, 0xb, [0x3, 0x6, 0xf000000000000, 0x1, 0x4, 0x5, 0x0, 0xe]}}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x30, {0x3, 0xa, 0x40, 0x7, [0x9, 0x2, 0x9, 0x6f2a1886, 0xbf]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}]}}}, @hopopts={{0x98, 0x29, 0x36, {0x84, 0x10, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x50, {0x3, 0x12, 0x45, 0x2, [0xfffffffffffffffc, 0x2, 0x5, 0x8, 0x497, 0xffff, 0xf, 0x0, 0xb]}}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xad73}}], 0x178}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="226efbfdd5caa958285f4598221f879029ce5cf897e73d87990b35e95d916f04ccc073abb901427c1abb9f2bf061a405b78c82d903625e9377846644ceb02c7df1182ff22efbaaa0698c4095246a26165599538d19afd903ea4dd66962887d2a21855a34d4b95573be5f3d2bedd2e399afcc8fa7a15efaf0459b0215fcf0729abd60562b96a971a59c28583661da37d6a5e21c99d7645ba2f8643c2948aa882ea44cec88", 0xa4}, {&(0x7f0000000400)="cfd95332", 0x4}, {&(0x7f0000000440)="96c85d018abc1e83f6d16be505cf8142f8", 0x11}], 0x3}}, {{&(0x7f00000004c0)={0xa, 0x4e23, 0x3, @private2, 0x7fff}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000500)="26a7a8ba454f182433284c0ff317016a2fa22ec319740618907b0bbbeccb0c", 0x1f}, {&(0x7f0000000540)="5356a7339b12b64c0b9534bb64b3e60746361b69613d030ebc3c43e91916ce3b3b3704804f48b2f6da1208c178b4c884fff2db2017a388d58a1aca2517edc650ae2bb762884c5514ef4a23551dabdcf5dc97b9403e4c0fd8f9091bce24af3e00b3cbf92a2fdd32b008b43516961bfbfbd5ef27459f08f576685ced00c3ac84daf1555d5e92f8491fa912eff2288b320557da73ef3b1a2ab1f5ba28bdf84de671bb3f7fd724dbf17ace0b5677e1cb", 0xae}, {&(0x7f0000000600)="aecd064034a0c8e85a2333b53e59ffdfba8680976b74c4de3ebe8c29df98e5ca960e2c6ce3780d2a686a0d2bd9e65af3a94c9143106e669879c7c644a44dee1988b4c62ff28bca9bebfef30a91da2f6b2cef0cd257eef7edd5e93ed31868f8", 0x5f}, {&(0x7f0000000680)="6d3246472b6ff9aa45273c76c9b5d26a47d1f7c3de3e0cc0b284adbe391b088b8df62369", 0x24}, {&(0x7f00000006c0)="3beabe887a0b8f740d0d6461878babbab47c806e40affd9361e8c1d4f471cfd91fc7788ba6d9caa64012689e92a7fb1890abf8f20b37979b0880c33b131c0d992439e2578fa6b5d731a3605aa72167ca01f2b74f2f5edd54b3f1d5165f8dee5a3f6de341bb243452841458c75ac0d65fe13f1391a1748b6b1882c171b25adc5689819967262f43190440c59f72ccb5bb3ebde381ce01a03db577c5326d89c1cfb058498a36c47c7308b4c9943caf6e049f40b30ef680325704ee89a84d97ae4201f56b9191d60eab8c83a08324dc87ac81c7510c1c974eef22c077", 0xdb}, {&(0x7f00000007c0)="782fcd5ee24de779e0b79fd58a2e3bcb995447b8757588f2e765b9e0e602e9f65e1261fbd1ab5466f46157a3b2294cb6c4a3f23d54ee2aa8cfa8e81325f5dc92479885c0d9a81c9306a4c6fdfb772000060394837b5e92ed10e610a14f6cac4ee43f01a9c2c62d476e9b1b58c97632ed2f165b9ceeabdb8f9990f74947e830313c32f018df7e9fdd8a94b63c3d2b2b4fd811af5c18c03697bcee93c260679f54c9f12d05ef5191553f8595485ff421ba0f126c1f9d9462fc1e6a5fa349", 0xbd}, {&(0x7f0000000880)="29a2bb016a685bbf56fe9c476f0f52179cb0c1d9e47c908d9ef06243cef346326997c2978e997fb2bfb12f29ca7b231ba305b9e2c16600f184dbb1cdb7414b0c36aadf3705ab0bfc51d46fba2bec7c3bfb37bcf73d7b33b10feee40cb9023b6533036172915bd07c9c33f7fdf05569826f25d8a69f1e996eeea82787963ef4e7a1c297fdce2f1e96d5beb4ba6b13ecca6830d659d941a109552b12f84342a38ffab148bcbff22748c07b2de198134aeb5aa4f1855680ff4950f929127b332be1c86a001a2468b66b03a69d5caacf74dbebf0ae70861f2e9d70ec", 0xda}, {&(0x7f0000000980)="319cfa28f7d928e8be9a013efc00fc61", 0x10}, {&(0x7f00000009c0)="6c5a9d26f8fb8829f04806598372102f54334c4f772c3b17d3500ebffef0dc7ea42a95735199c6381309ef715ecf9d4171db1da41b9fa1c4e02304bb0a29b41d914ad7d529300e0b1dd834f19b7cd6ff712c865249e795430a891c766d2a0d00c77468c3b8d4acac3a064b35ed98763d0bac9006817440b02517a2aea0f6b2aa6ad244148088dc03d4a12281a53dec18c4701a433731f4a8197b2b", 0x9b}], 0x9}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, &(0x7f0000001d80)=[{&(0x7f0000000b80)="81c1f5009c267e0d3ce34169be3148e40ead795c14e48209a9fdbca0c331abe7f4aaa89ddb3cc7e9ef85bba755084f108514ebb9c3518762bb7371b18719a3b3344137e978f03031a3fdbd7b54867bacabe74e9e4f690d41f3da6e0460ec2642f7c40ca0d0cfb55f3f46afd03afa53bcd4a8ca9a56a82e2219b0944275f1f17751cdca462c9c891e75532138356552365db274e56523aa7d7d0fbf50c627ba864d91b22093e5bd36e512de4c23e7ace3b4ae6a2d6531840436a3", 0xba}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="e65fe48a49a652f8556cda364a139f34b72483be761065b67283028256849d4a09bc0869af9277c4bf557ed882797600936b27081724411d70329712453b601d9a13eecc94a3fbb959c98e9306b01396dec056bf15d65e35fa5e0564e88546482734700100a877514b11b4ad3af15bc6e05fbdb828ef543dc8564e25f548808d89b9a5196e2fc3c32baf6003711600a976a35534fbfad226cc5969934edf9874bb509791bdf48641eaa245a3d0e0f03e4fb042dc47f19ec74c6289140bf04489f6a6dc8c4a1dbb54863289d7a7bdf5806243929258b31cfcaec1f50f3c66b9034de7", 0xe2}, {&(0x7f0000001d40)="f31e8859c39abbbd1816ef9627e67cf2211252b5485d6582475c93a60aec4c52a1474c29880ace3a", 0x28}], 0x4, &(0x7f0000001e40)=[@dstopts={{0x28, 0x29, 0x37, {0x3b, 0x1, '\x00', [@ra={0x5, 0x2, 0x7}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x377}, @padn={0x1, 0x1, [0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @dstopts={{0x160, 0x29, 0x37, {0x8, 0x28, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x50, 0x8, [0x3, 0x5, 0x71d, 0x40, 0x7ff]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0xaccb, [0x3ff]}}, @enc_lim={0x4, 0x1, 0xd}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x1}, @generic={0xdd, 0xd9, "54e5008f15679f8a4a492afc01fe0266607a2b38f41c2c66818df7c2e444ffa2e6d32b3649e60970c2369efef21f575686c744aa7f7dde7358224f7a524601e903f7b995217e5f009dc772cb06c35639bb88a5420174833f3378b0ca87d1f683fc3f0d1f2dbdd23ebc305abc85a5e51cad60b189b56bb1cfc327ac7e1c127664323bfc6dab8d042e1572aea855c22e5482baf0397940ceae58a7a60a09a31aae205e8d5cfa1f1b49cbfd3d337c39c8f3d2c6e82b18334ed2805ff20a37924c47c2a144865516ecbc6659139e456747587c276af65b509b49a3"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffd}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}}}], 0x1e0}}, {{&(0x7f0000002040)={0xa, 0x4e24, 0x9, @private1, 0xb}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000002080)="94eb2c399c937db29242a5fdd6a0c6824690e45f383a47391985c3f33a9fe5df406d5d19af40a19f088352ec6946aa60a74ced911c5086cdf6310519e65bcaf40c203600f5fbc42ad6bd549a68c134d2ad81ea671f5b9a8a1fb96fc776ea6f12543c3ed4d3260556f5b18326d907f7c675cd8ec65fa900dcd667bee4bc7c31a26981f7626d5e57071b4261c721b9", 0x8e}, {&(0x7f0000002140)="440a4e1b326eff135ba2b5c4965c9adcb3347eba7a9bfb096ac044e8d2068f75c70881d1367053ee5ad1d9aabad40feed3bf843c3ae7104f911b422be79d3f403143427eda46b317", 0x48}, {&(0x7f00000021c0)='8Eb', 0x3}], 0x3, &(0x7f0000002300)=[@hopopts_2292={{0x230, 0x29, 0x36, {0x2f, 0x42, '\x00', [@generic={0x35, 0x6a, "144bda8139d31b3b917e6c23effa7cf5381c2ccdfc29ee7146805874a2f6db5b3c62660ef9bba0147c7bb3fc6fc10223e719ad5d87a074f87e8c1224e3fb0450a72750da9e6e8ba792429b8f6037625430a69bcff7f333041c4dbb45204414522c5c7c522298a1999a0a"}, @generic={0x4, 0x70, "901ed0281eab8f1fcc703756febcbcb2477f28a57004ca27c30bef7f0aef0d255f47c84fa26e813af637ba47ac826be5ad92cfb8e6c933bea5b649536872c7215aef9e5acfe1479be043bc4c6669a02f8a3dc2a88786d3ba4d04418be2739685ff4be20296b09407fe3d8e00274dff53"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @jumbo, @calipso={0x7, 0x10, {0x0, 0x2, 0xc2, 0xe3, [0xfffffffffffffc00]}}, @generic={0x0, 0x57, "d1b13495d7198282e9fb948de656cc9181c015c8f7fe12eff28428a51f085d0103e88e1e196878fbfbb33259655498a48c6a520ae96c9d8d27799952b44b3e3eeff928a232da4410cefab0cb20dc4e1b052b441e87d7b9"}, @pad1, @generic={0x4, 0xb1, "e6a90e0f95c7967839618cef98e243030ab7c93756ec11e62f04acb0a4b4176bfd54e687abf75d6d10d123b23c6d9c0c5dab2c3efa55bc55dc05eb44da7eac7867aad7688c0d8031f5f27864ca3dcf9223bbe40e58c99757310af397f98b3b3cc635e033732cad60dab113790f1aa8d24086dc224ac07b6c1039a1a60ff78abb5eaaf1aed11921bd79661f513fd8ec4695cbc7b99f9200ce0628c7f4dba461eadda4b3742ea71a78b2c1093e4054efb9ea"}, @enc_lim={0x4, 0x1, 0xa}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x2e}, r1}}}, @dstopts={{0x58, 0x29, 0x37, {0x16, 0x7, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x9, 0x4, [0x1, 0x3, 0x100, 0x40, 0xa7a3]}}, @enc_lim={0x4, 0x1, 0x4}]}}}, @tclass={{0x14}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x87}}}], 0x2e0}}], 0x5, 0x48001)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000002740)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000002780)={0x0, @data})
ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000002840)={{r2}, "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"})
r3 = pidfd_getfd(r2, r2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003880), r2)
sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000003980)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x78, r4, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x48000}, 0x20008080)
ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f00000039c0))
open_by_handle_at(r3, &(0x7f0000003a40)=@fuse={0xc, 0x81, {0x7, 0x9, 0x5}}, 0x8100)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003a80), 0x2, 0x0)
write$FUSE_INIT(r5, &(0x7f0000003ac0)={0x50, 0xb, 0x0, {0x7, 0x2b, 0x4, 0x14, 0x67, 0x8, 0xee, 0x40, 0x0, 0x0, 0x4, 0x4}}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003b80)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000003c40)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x28, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x7f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x20001011)
read$ptp(r2, &(0x7f0000003c80)=""/117, 0x75)
r7 = syz_clone(0x40100, &(0x7f0000003d00)="4bb20576c42d1d5a8f47a4a51c0918544f5e4725d691eb0ee58eb0638f92ed023e3cbff6e30d5c", 0x27, &(0x7f0000003d40), &(0x7f0000003d80), &(0x7f0000003dc0)="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")
write$UHID_CREATE2(r2, &(0x7f0000004dc0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x13, 0x6, 0xd, 0xf, 0x0, 0x8, "cab57221ba576d2bc07f8dae8fe5806858aebd"}}, 0x12b)
syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000004f00), 0x10800, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000005000)={&(0x7f0000004f40), 0xc, &(0x7f0000004fc0)={&(0x7f0000004f80)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast2}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7b}]}, 0x38}}, 0x48150)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000005040)={'ip6tnl0\x00', 0x10})
ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000005080)={{0x4, 0x2, 0x3, 0x7, 0x81, 0x9, 0x2, 0xe, 0xdb, 0x1, 0x78, 0x1}, {0x8000000, 0x8080000, 0xd, 0x3, 0x8, 0xa3, 0x7, 0xa8, 0x85, 0x5, 0x7, 0xe}, {0x2000, 0x6000, 0xa, 0x6, 0xd, 0x18, 0x5, 0x2, 0x0, 0x0, 0x1, 0xf8}, {0xeeee0000, 0x8080000, 0xe, 0x2, 0x6e, 0x6, 0xc4, 0x4, 0x9, 0xa2, 0x1, 0xc8}, {0x4000, 0xdddd1000, 0xb, 0x7, 0x8, 0x91, 0xd, 0xe, 0xd, 0x2, 0x5, 0x8}, {0x10000, 0x4, 0x0, 0xf5, 0x6, 0x23, 0x0, 0x8, 0xbf, 0xe, 0x5, 0xa1}, {0x1, 0x6000, 0xc, 0x0, 0x6, 0x2f, 0xd, 0xfd, 0x7, 0x40, 0x7, 0x70}, {0xeeee0000, 0x105001, 0x10, 0x6, 0x2b, 0x3, 0x66, 0x7, 0x8b, 0x2, 0x16}, {0xd000, 0x5}, {0x6000, 0xc47a}, 0x80000000, 0x0, 0x6000, 0x104012, 0xe, 0xa000, 0x0, 0x0, [0x6, 0x80, 0x25, 0xd6e]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000051c0)={0x0, 0x80000, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000005200)={0x6, 0x101, 0x2})
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f0000005240)={0xf17})
ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000005280))
syz_open_dev$dri(&(0x7f00000052c0), 0x0, 0x101001)

10.759354415s ago: executing program 2 (id=119):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000))
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="980400000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000004000680c60aa1007c9be5cd2f19e14c9f18cb9e7b115edc87f356b769e43135d34cb9b65fea0672ef3f45f22b057372019ede5da7c952ba53c4a927b80f775c589b07c9cdb6626dc15b67e26d0c35167999de"], 0x98}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="980400000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000004000680c60aa1007c9be5cd2f19e14c9f18cb9e7b115edc87f356b769e43135d34cb9b65fea0672ef3f45f22b057372019ede5da7c952ba53c4a927b80f775c589b07c9cdb6626dc15b67e26d0c35167999de"], 0x98}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) (async)

10.64882076s ago: executing program 3 (id=120):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
getdents64(r0, &(0x7f0000000480)=""/243, 0xf3)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="7c0000007d01000000630000000900000000010000000300000000000000000015290b000000ff07000000000000000000000300237d5d010026280073797374656d5f753a6f626a6563745f723a72656d6f7661626c655f646576696365d952bbd58141e8feb15b296fc49a5f743a", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32], 0x7c)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, 0xad)
setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000140), 0x4)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d9, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)
connect$unix(r0, 0x0, 0x0)
setsockopt$inet_int(r5, 0x0, 0x22, &(0x7f00000001c0)=0x5, 0x4)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x430, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xb8, 0x1e0, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f)
socket$nl_route(0x10, 0x3, 0x0)

10.364942908s ago: executing program 2 (id=122):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0xd6, 0xa, 0x19, 0x40, 0xea6a, 0xdaa1, 0xf160, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x8, [{{0x9, 0x4, 0xf1, 0x0, 0x0, 0xef, 0x1, 0x1}}]}}]}}, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x1, 0x8, 0xf}, {0xfffb, 0x3, 0x9, 0x800}, {0xaeb, 0x3, 0x10, 0x800}, {0x7, 0x95, 0x4, 0x1}, {0x5, 0x1, 0x0, 0x1}]})

9.322260888s ago: executing program 3 (id=123):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0xffffffffffffffff})
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000040)={0x8400, r0}, 0x0)
r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
io_setup(0x4, &(0x7f0000000340))
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x404e01, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1, {0x0, 0x0, 0x0, r9, {0xa, 0xb}, {0xffff, 0xfff3}, {0xfff3, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x103, 0x7, 0x6361, 0x9, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffffa, 0x3d3, 0x1, 0xffff0000, 0x6}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x3}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x4}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x8, 0xb}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xa4}}]}, 0x38}}, 0x4008090)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r10 = fsmount(r1, 0x0, 0x0)
r11 = openat$cgroup_procs(r10, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r11, &(0x7f0000000140), 0x12)
r12 = openat$cgroup(r10, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
r13 = openat$cgroup_procs(r12, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r13, &(0x7f0000000500), 0x12)

8.465010168s ago: executing program 4 (id=124):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3)
fsopen(&(0x7f0000000080)='romfs\x00', 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7"]}]}, 0x4c}], 0x1}, 0x0) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7"]}]}, 0x4c}], 0x1}, 0x0)

8.121813282s ago: executing program 1 (id=125):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0xff, 0xff})
ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x8})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0xff, 0xff}) (async)
ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x8}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)

7.900863825s ago: executing program 4 (id=126):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b10b5103a09222689b7010203010902450001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
socket(0x10, 0x5, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
pipe2(0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1})
r3 = socket$packet(0x11, 0x2, 0x300)
unshare(0x24020400)
getsockopt$packet_int(r3, 0x107, 0xb, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r5=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000001c0)=0xffffb0c6, 0x4)

7.555927189s ago: executing program 3 (id=127):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x8000001, @private0, 0x2003}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x5, @private1, 0x5f}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000340)="b3", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @private1, 0x62af}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000000c0)="c92d5a65", 0x4}], 0x1}}], 0x3, 0x931766f6319eed40)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x9, 0x4)
close(0x3)

7.535956125s ago: executing program 1 (id=128):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb00000101000004000000000000"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
socket$alg(0x26, 0x5, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0xfffffffc)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r10, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)

7.332753725s ago: executing program 2 (id=129):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000013b7040000000000008500000003000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000500), &(0x7f0000000840)=r1}, 0x20) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
socket$inet6(0xa, 0x800, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000000)={0xc, r3})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES64], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r4 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r7 = socket(0x11, 0x3, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async)
syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) (async)
write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330022eb"], 0x10da) (async)
syz_emit_ethernet(0x3a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb40000000000a0000f00000059078ac141400e0000001070404158441726e17db5d76ce1146010039326447d66366cfb6b815418ca4fbb3545c1811c93b44adcd621cb93d78a02d1f94e4b57ef648ab092860b8681210", @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0)

7.225868164s ago: executing program 3 (id=130):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x1008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300021000000000000000000000000200080008000000fd0000000a000000000000000000000000000000000000000000000100000000000000000200010000000040000000fd0000000005000500000000000a00000000000000fe8000000000000000000000000000aa00"/128], 0x80}, 0x1, 0x7}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10)
bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x10000000}}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000180)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40040}, 0x4)
splice(r3, 0x0, r1, 0x0, 0x406f413, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
rseq(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2(&(0x7f0000000040), 0x0)

5.870718211s ago: executing program 1 (id=131):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
r3 = io_uring_setup(0x3c92, &(0x7f0000000240)={0x0, 0x3, 0x0, 0xffffffff})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x1e76, 0xf728, 0xd, 0x0, 0x18)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r4 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x84)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="2815"], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4)
write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r4], 0x2b)
sendfile(r6, r4, 0x0, 0x4000000053d2)
close_range(r3, 0xffffffffffffffff, 0x0)

5.136887141s ago: executing program 2 (id=132):
r0 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0x0, 0x0, 0x7}) (async)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "d25c855d", {0x3, 0x100, 0x0, 0x9, 0x0, 0x8, 0x3}}) (async, rerun: 32)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x20, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e"])

2.702503786s ago: executing program 1 (id=133):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100003b000103000000000000000001"], 0x114}], 0x1}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b40500000000000079108f0000000000070000000000000095000000000000000637f79d237f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

2.084239859s ago: executing program 4 (id=134):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="6690f3460f00dd262e0f01c3660f3828206348490f20c035000000200f22c0660fc737c4e24d9af366ba200066b8000066ef400f30"}], 0x1, 0x42, 0x0, 0xffffff88) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000140)=0xa64d)

2.033024509s ago: executing program 0 (id=135):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$smackfs_ipv6host(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='0x0000000000000063:0x0000000000000001:0x0000000000000002:0x0000000000000500:0x0000000000000004:0x0000000000000005:0x0002000000000006:0x0000000000000003/00000000000000000096 ,'], 0xaf)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005200010005bd7000040000000200000008000100", @ANYRES32], 0x1c}}, 0x800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xfffffffffffffff4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94)

1.968334911s ago: executing program 3 (id=136):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) (async)
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffffc}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffffc}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x31, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0)

1.610978355s ago: executing program 1 (id=137):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 32)
prlimit64(0x0, 0xd, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid() (async, rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 64)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0xfec8d000) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (rerun: 64)
connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f0000000f80)=[{{&(0x7f0000000240)=@x25={0x9, @remote}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/155, 0x9b}, {&(0x7f00000005c0)=""/25, 0x19}], 0x2, &(0x7f0000000680)=""/198, 0xc6}, 0x9}, {{&(0x7f0000000880)=@ieee802154, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/190, 0xbe}, {&(0x7f0000000780)}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f0000000a00)=""/40, 0x28}, {&(0x7f0000000a40)=""/203, 0xcb}, {&(0x7f0000000b40)=""/123, 0x7b}], 0x6, &(0x7f0000000c40)=""/112, 0x70}, 0x9}, {{&(0x7f0000000cc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000d40)=""/169, 0xa9}, {&(0x7f0000000e00)=""/129, 0x81}], 0x2, &(0x7f0000000f00)=""/76, 0x4c}}], 0x3, 0x2, 0x0) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@bridge_getneigh={0x20, 0x1e, 0x10}, 0xfffffffffffffdb6}}, 0x0) (async, rerun: 32)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @loopback}}) (async, rerun: 32)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000000))
ioctl$TIOCGPGRP(r6, 0x540f, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000479a5273000000006519168988a43024b5d8000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) (async, rerun: 32)
nanosleep(&(0x7f00000000c0)={0x0, 0xfffffffffffffff7}, 0x0) (rerun: 32)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000012c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="37ea15c60a498af8821303c7008b3f4235949de0ddb3a7ffb072e205c74197a55a02d12df164e75c306058e8c224f46112"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.380762461s ago: executing program 0 (id=138):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="370200007d02000005"], 0xe9)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[], 0x78)
close(r5)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_GET_VRING_BASE(r8, 0xc008af12, &(0x7f0000000480))
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000580)={0x7, 0x1})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x11, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x20, r10, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x40000)
ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0))

1.149830668s ago: executing program 2 (id=139):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
recvmmsg(r0, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x0, 0x0)
close(r1)
syz_usb_connect(0x1, 0x56, &(0x7f0000000000)=ANY=[], 0x0)

800.294275ms ago: executing program 4 (id=140):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, 0x930, 0x1, 0x13, r5, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x2, 0xeeee0000, 0x2000, &(0x7f000000f000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@delchain={0x5c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r6 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00'})
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
pipe(&(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
writev(r9, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
splice(r11, 0x0, r12, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r12, &(0x7f0000000000), 0xffffff98)
splice(r8, 0x0, r12, 0x0, 0x80, 0x4)
write(r10, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10)
gettid()
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8)

0s ago: executing program 1 (id=141):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x9, 0x1)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
utime(&(0x7f0000000000)='./file0\x00', 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01be8a8d71aea3416d256900000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4044084}, 0x40000)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts.
[   87.578729][ T5824] cgroup: Unknown subsys name 'net'
[   87.699429][ T5824] cgroup: Unknown subsys name 'cpuset'
[   87.708838][ T5824] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   89.465215][ T5824] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   92.287068][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.302860][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.311614][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.319635][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.327428][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.336520][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.344685][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.352213][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.360477][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.366991][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.376002][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.383337][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.391059][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.398741][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.399690][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.408139][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.415012][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.428487][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.450596][ T1208] cfg80211: failed to load regulatory.db
[   92.477501][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.489797][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.521626][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.530077][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.538023][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.547301][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.555340][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   93.127036][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   93.321334][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   93.391355][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   93.450627][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.458757][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.466729][ T5838] bridge_slave_0: entered allmulticast mode
[   93.475517][ T5838] bridge_slave_0: entered promiscuous mode
[   93.523504][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.530743][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.543647][ T5838] bridge_slave_1: entered allmulticast mode
[   93.551982][ T5838] bridge_slave_1: entered promiscuous mode
[   93.608683][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   93.664090][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.682299][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.742899][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   93.848214][ T5838] team0: Port device team_slave_0 added
[   93.874964][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.882266][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.889795][ T5837] bridge_slave_0: entered allmulticast mode
[   93.897663][ T5837] bridge_slave_0: entered promiscuous mode
[   93.921603][ T5838] team0: Port device team_slave_1 added
[   93.965682][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.973068][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.980788][ T5837] bridge_slave_1: entered allmulticast mode
[   93.988252][ T5837] bridge_slave_1: entered promiscuous mode
[   93.995778][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.002944][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.010860][ T5851] bridge_slave_0: entered allmulticast mode
[   94.020366][ T5851] bridge_slave_0: entered promiscuous mode
[   94.084321][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.091677][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.100035][ T5851] bridge_slave_1: entered allmulticast mode
[   94.107781][ T5851] bridge_slave_1: entered promiscuous mode
[   94.132043][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.139452][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.167439][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.240052][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.247509][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.274866][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.294792][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.302036][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.309613][ T5848] bridge_slave_0: entered allmulticast mode
[   94.318778][ T5848] bridge_slave_0: entered promiscuous mode
[   94.328705][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.336160][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.343409][ T5848] bridge_slave_1: entered allmulticast mode
[   94.351459][ T5848] bridge_slave_1: entered promiscuous mode
[   94.376195][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.390016][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.404421][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.417137][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.440365][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.447878][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.455352][ T5834] bridge_slave_0: entered allmulticast mode
[   94.462677][ T5834] bridge_slave_0: entered promiscuous mode
[   94.472497][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.480435][ T5847] Bluetooth: hci2: command tx timeout
[   94.480483][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.486321][ T5845] Bluetooth: hci1: command tx timeout
[   94.493887][ T5834] bridge_slave_1: entered allmulticast mode
[   94.506119][ T5834] bridge_slave_1: entered promiscuous mode
[   94.553766][ T5847] Bluetooth: hci0: command tx timeout
[   94.559656][ T5845] Bluetooth: hci3: command tx timeout
[   94.631440][ T5851] team0: Port device team_slave_0 added
[   94.637775][ T5845] Bluetooth: hci4: command tx timeout
[   94.647837][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.674582][ T5837] team0: Port device team_slave_0 added
[   94.698196][ T5851] team0: Port device team_slave_1 added
[   94.721513][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.734855][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.748537][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.759798][ T5837] team0: Port device team_slave_1 added
[   94.788718][ T5838] hsr_slave_0: entered promiscuous mode
[   94.795781][ T5838] hsr_slave_1: entered promiscuous mode
[   94.861907][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.869382][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.896439][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.908296][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.915953][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.942769][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.956778][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.963915][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.990103][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.041805][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.049052][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.075228][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.107141][ T5848] team0: Port device team_slave_0 added
[   95.117562][ T5834] team0: Port device team_slave_0 added
[   95.187082][ T5848] team0: Port device team_slave_1 added
[   95.196103][ T5834] team0: Port device team_slave_1 added
[   95.284626][ T5837] hsr_slave_0: entered promiscuous mode
[   95.291195][ T5837] hsr_slave_1: entered promiscuous mode
[   95.298171][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.306258][ T5837] Cannot create hsr debugfs directory
[   95.326693][ T5851] hsr_slave_0: entered promiscuous mode
[   95.333129][ T5851] hsr_slave_1: entered promiscuous mode
[   95.339575][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.347288][ T5851] Cannot create hsr debugfs directory
[   95.439164][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.446495][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.473051][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.485501][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.492487][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.520244][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.574089][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.581177][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.611707][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.634895][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.641968][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.668243][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.951278][ T5848] hsr_slave_0: entered promiscuous mode
[   95.958000][ T5848] hsr_slave_1: entered promiscuous mode
[   95.965239][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.972860][ T5848] Cannot create hsr debugfs directory
[   95.992889][ T5834] hsr_slave_0: entered promiscuous mode
[   96.000614][ T5834] hsr_slave_1: entered promiscuous mode
[   96.007085][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.015147][ T5834] Cannot create hsr debugfs directory
[   96.317916][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.354427][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.403493][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.414543][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.559232][ T5845] Bluetooth: hci1: command tx timeout
[   96.559243][ T5847] Bluetooth: hci2: command tx timeout
[   96.577961][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   96.591814][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   96.618379][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   96.633698][ T5845] Bluetooth: hci3: command tx timeout
[   96.633738][ T5847] Bluetooth: hci0: command tx timeout
[   96.655495][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   96.713548][ T5847] Bluetooth: hci4: command tx timeout
[   96.722470][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   96.743028][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   96.767420][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   96.780210][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.886171][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   96.923902][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   96.934979][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   96.950222][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   97.049820][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.088468][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   97.121263][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   97.132704][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   97.161625][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   97.169714][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   97.220777][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.228230][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.242084][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.281474][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.288637][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.380563][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   97.432324][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.439715][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.466328][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.473653][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.507954][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.580781][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.651198][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   97.675702][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   97.712608][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.719946][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.762625][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.769845][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.786514][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.794099][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.850535][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.857819][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.910096][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.020161][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   98.039931][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.078918][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.086179][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.098727][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.105988][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.271805][ T5838] veth0_vlan: entered promiscuous mode
[   98.359592][ T5838] veth1_vlan: entered promiscuous mode
[   98.548012][ T5838] veth0_macvtap: entered promiscuous mode
[   98.608014][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.637950][ T5847] Bluetooth: hci1: command tx timeout
[   98.637963][ T5845] Bluetooth: hci2: command tx timeout
[   98.661037][ T5838] veth1_macvtap: entered promiscuous mode
[   98.713772][ T5847] Bluetooth: hci3: command tx timeout
[   98.715067][ T5845] Bluetooth: hci0: command tx timeout
[   98.737394][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.778933][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.797500][ T5845] Bluetooth: hci4: command tx timeout
[   98.855794][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.870060][ T5837] veth0_vlan: entered promiscuous mode
[   98.916206][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.927797][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.937116][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.947136][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.964891][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.982542][ T5837] veth1_vlan: entered promiscuous mode
[   99.116631][ T5851] veth0_vlan: entered promiscuous mode
[   99.142026][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.192890][ T5837] veth0_macvtap: entered promiscuous mode
[   99.231778][ T5837] veth1_macvtap: entered promiscuous mode
[   99.255306][ T5851] veth1_vlan: entered promiscuous mode
[   99.316841][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.325614][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.338254][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.406425][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.491554][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.507504][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.508774][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.527208][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.537582][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.546739][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.566816][ T5851] veth0_macvtap: entered promiscuous mode
[   99.605627][ T5851] veth1_macvtap: entered promiscuous mode
[   99.639337][ T5848] veth0_vlan: entered promiscuous mode
[   99.656547][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   99.702291][ T5834] veth0_vlan: entered promiscuous mode
[   99.752084][ T5848] veth1_vlan: entered promiscuous mode
[   99.819238][ T5834] veth1_vlan: entered promiscuous mode
[   99.933397][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.137498][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.151485][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.478545][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.534980][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.542880][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.557408][ T5834] veth0_macvtap: entered promiscuous mode
[  100.578796][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.598379][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.623912][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.642980][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.714453][ T5845] Bluetooth: hci2: command tx timeout
[  100.714488][ T5847] Bluetooth: hci1: command tx timeout
[  100.731551][ T5834] veth1_macvtap: entered promiscuous mode
[  100.756598][ T5848] veth0_macvtap: entered promiscuous mode
[  100.785733][ T5848] veth1_macvtap: entered promiscuous mode
[  100.794030][ T5847] Bluetooth: hci3: command tx timeout
[  100.794743][ T5845] Bluetooth: hci0: command tx timeout
[  100.855672][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.873925][ T5845] Bluetooth: hci4: command tx timeout
[  100.895650][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.920274][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.957205][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.019575][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.056366][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.093170][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.107751][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.118918][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.128642][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.161348][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.185454][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.202245][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.211735][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.322261][ T5965] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  101.441674][ T5968] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  101.537026][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.557310][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.565934][ T5965] Zero length message leads to an empty skb
[  101.611026][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.626137][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.714828][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.728806][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.887535][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.919991][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.985890][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.013882][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.074174][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.084793][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.415087][ T5980] process 'syz.1.2' launched './file0' with NULL argv: empty string added
[  103.683866][   T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  103.916036][ T5979] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  104.349137][ T5949] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  104.419968][ T5999] syz.0.1 (5999) used greatest stack depth: 15448 bytes left
[  104.544609][   T43] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  104.612291][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.620519][ T5979] usb 4-1: Using ep0 maxpacket: 32
[  104.623344][ T5949] usb 5-1: device descriptor read/64, error -71
[  104.642178][ T5979] usb 4-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af
[  104.668825][   T43] usb 2-1: Product: syz
[  104.693492][   T43] usb 2-1: Manufacturer: syz
[  104.698360][   T43] usb 2-1: SerialNumber: syz
[  104.713918][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.722023][ T5979] usb 4-1: Product: syz
[  104.753837][ T5979] usb 4-1: Manufacturer: syz
[  104.759177][   T43] usb 2-1: config 0 descriptor??
[  104.778937][ T5979] usb 4-1: SerialNumber: syz
[  104.805344][ T5979] usb 4-1: config 0 descriptor??
[  104.827486][ T5979] gspca_main: sunplus-2.14.0 probing 046d:0960
[  104.884737][ T5949] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  105.210249][ T6009] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  105.296587][ T5996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.400374][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.409441][ T5949] usb 5-1: device descriptor read/64, error -71
[  105.575139][ T5949] usb usb5-port1: attempt power cycle
[  105.843468][ T5979] gspca_sunplus: reg_w_riv err -71
[  105.848945][ T5979] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  105.906979][ T5979] usb 4-1: USB disconnect, device number 2
[  106.009629][ T5949] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  106.058128][ T5949] usb 5-1: device descriptor read/8, error -71
[  106.084826][ T6024] mmap: syz.2.16 (6024) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  106.134014][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  106.142772][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  106.151732][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  106.161903][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[  106.170934][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  106.179616][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  106.253954][   T43] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  106.306055][    T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!!
[  106.316261][    T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!!
[  106.404888][ T5949] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  107.318417][   T43] asix 2-1:0.0: probe with driver asix failed with error -71
[  107.336812][   T43] usb 2-1: USB disconnect, device number 2
[  107.403358][ T5949] usb 5-1: device descriptor read/8, error -71
[  107.528257][ T5949] usb usb5-port1: unable to enumerate USB device
[  107.557566][ T6032] veth1_to_bond: entered allmulticast mode
[  107.596279][ T6032] veth1_to_bond: left allmulticast mode
[  107.781680][ T6038] netlink: 92 bytes leftover after parsing attributes in process `syz.0.18'.
[  107.792484][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18'.
[  107.800129][ T6037] input: syz1 as /devices/virtual/input/input5
[  107.809889][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18'.
[  108.535931][ T6044] syz.3.22 uses obsolete (PF_INET,SOCK_PACKET)
[  108.556334][ T6046] program syz.0.23 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.566541][ T6046] program syz.0.23 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.815196][ T6056] netlink: 256 bytes leftover after parsing attributes in process `syz.0.25'.
[  109.302035][ T6028] Unsupported ieee802154 address type: 0
[  110.697541][ T6070] syzkaller1: entered promiscuous mode
[  110.703458][ T6070] syzkaller1: entered allmulticast mode
[  110.902982][ T6075] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  111.503450][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  111.753310][   T10] usb 1-1: Using ep0 maxpacket: 32
[  111.900947][ T6091] =======================================================
[  111.900947][ T6091] WARNING: The mand mount option has been deprecated and
[  111.900947][ T6091]          and is ignored by this kernel. Remove the mand
[  111.900947][ T6091]          option from the mount to silence this warning.
[  111.900947][ T6091] =======================================================
[  111.936651][ T6091] ecryptfs: Unknown parameter 'discard'
[  112.074005][   T10] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[  112.082307][   T10] usb 1-1: config 0 has no interface number 0
[  112.650033][   T10] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  112.743277][   T10] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  112.796086][   T10] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  112.960106][   T10] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  113.092706][ T6101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36'.
[  113.153502][   T10] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  113.205972][   T10] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  113.266587][   T10] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  113.334750][ T6105] cgroup: Name too long
[  113.343303][   T10] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[  113.383981][   T43] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  113.418518][   T10] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  113.473533][   T10] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  113.549242][   T10] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  113.569457][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.616765][   T10] usb 1-1: Product: syz
[  113.643409][   T10] usb 1-1: Manufacturer: syz
[  113.665687][   T10] usb 1-1: SerialNumber: syz
[  113.695241][   T43] usb 4-1: not running at top speed; connect to a high speed hub
[  113.748111][   T43] usb 4-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config
[  113.807337][   T43] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  113.821279][   T10] usb 1-1: config 0 descriptor??
[  113.859336][ T6084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  113.867735][ T6084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  113.888736][   T43] usb 4-1: config 1 has no interface number 1
[  113.917300][   T10] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[  113.933911][   T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  113.961337][   T10] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[  114.014862][   T43] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  114.234502][   T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  114.293411][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.335803][   T43] usb 4-1: Product: syz
[  114.340056][   T43] usb 4-1: Manufacturer: syz
[  114.363468][   T43] usb 4-1: SerialNumber: syz
[  114.489267][   T10] scsi host1: microtekX6
[  114.634607][   T10] usb 1-1: USB disconnect, device number 2
[  114.663534][   T55] microtek usb (rev 0.4.3): error -19 submitting URB
[  114.688485][   T43] usb 4-1: USB disconnect, device number 3
[  115.537942][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  115.934914][ T6132] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0
[  116.828453][ T6129] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  117.124419][ T6141] overlay: ./file0 is not a directory
[  117.203477][ T6108] capability: warning: `syz.1.38' uses deprecated v2 capabilities in a way that may be insecure
[  117.273489][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  117.764531][ T6147] No source specified
[  117.956096][   T10] usb 1-1: Using ep0 maxpacket: 16
[  118.053745][ T6139] Process accounting resumed
[  118.067178][   T10] usb 1-1: config 0 has an invalid interface number: 48 but max is 0
[  118.076207][   T10] usb 1-1: config 0 has no interface number 0
[  118.082366][   T10] usb 1-1: config 0 interface 48 has no altsetting 0
[  118.143700][   T10] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[  118.154327][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.162475][   T10] usb 1-1: Product: syz
[  118.193451][   T10] usb 1-1: Manufacturer: syz
[  118.203833][   T10] usb 1-1: SerialNumber: syz
[  118.488945][   T10] usb 1-1: config 0 descriptor??
[  118.798455][ T5842] usb 1-1: USB disconnect, device number 3
[  121.104129][ T6181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'.
[  121.313135][ T5972] udevd[5972]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  121.531909][ T6042] udevd[6042]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  122.100069][ T6204] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  122.148484][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'.
[  122.166409][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.203025][ T6210] netlink: 'syz.0.61': attribute type 1 has an invalid length.
[  122.250952][ T6210] netlink: 144 bytes leftover after parsing attributes in process `syz.0.61'.
[  122.418258][ T6210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.61'.
[  123.110492][ T6210] netlink: 'syz.0.61': attribute type 1 has an invalid length.
[  123.136924][ T6209] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.304625][ T6217] netlink: 96 bytes leftover after parsing attributes in process `syz.1.63'.
[  124.525829][ T6230] netlink: 152 bytes leftover after parsing attributes in process `syz.3.65'.
[  125.138276][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'.
[  125.147189][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.67'.
[  126.457402][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  126.592216][ T6258] kvm: kvm [6257]: vcpu0, guest rIP: 0x97 Unhandled WRMSR(0x11e) = 0x0
[  126.643727][   T10] usb 5-1: Using ep0 maxpacket: 8
[  126.660455][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  126.677509][   T10] usb 5-1: config 4 has an invalid interface number: 147 but max is 0
[  126.699994][   T10] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  126.720905][   T10] usb 5-1: config 4 has no interface number 0
[  126.740791][   T10] usb 5-1: string descriptor 0 read error: -22
[  126.747695][   T10] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  126.764064][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.030888][   T10] usb 5-1: Found UVC 0.02 device <unnamed> (04f2:b746)
[  127.043445][   T10] usb 5-1: No streaming interface found for terminal 6.
[  127.864873][   T10] usb 5-1: USB disconnect, device number 6
[  127.953392][ T5913] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  128.103491][ T6281] input: syz0 as /devices/virtual/input/input7
[  128.163778][ T5913] usb 4-1: Using ep0 maxpacket: 8
[  128.195810][ T5913] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  128.242557][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.263090][ T5913] usb 4-1: Product: syz
[  128.295613][ T5913] usb 4-1: Manufacturer: syz
[  128.300308][ T5913] usb 4-1: SerialNumber: syz
[  128.321498][ T5913] usb 4-1: config 0 descriptor??
[  128.394623][ T6289] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  128.401416][ T6289] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  128.417528][ T6289] vhci_hcd vhci_hcd.0: Device attached
[  128.446625][ T6296] vhci_hcd: connection closed
[  128.456013][ T2999] vhci_hcd: stop threads
[  128.522060][ T2999] vhci_hcd: release socket
[  128.529185][ T2999] vhci_hcd: disconnect device
[  128.547232][ T5913] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  128.740643][ T6307] netlink: 60 bytes leftover after parsing attributes in process `syz.4.82'.
[  129.826869][ T5913] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  129.884387][ T5913] usb 4-1: USB disconnect, device number 4
[  130.083483][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  130.288038][   T10] usb 3-1: Using ep0 maxpacket: 32
[  130.290013][ T6329] Driver unsupported XDP return value 0 on prog  (id 16) dev N/A, expect packet loss!
[  130.324473][   T10] usb 3-1: config 4 has an invalid interface number: 128 but max is 0
[  130.353377][   T10] usb 3-1: config 4 has no interface number 0
[  130.359617][   T10] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.411620][   T10] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.442232][   T10] usb 3-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00
[  130.486243][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.527777][   T10] hub 3-1:4.128: USB hub found
[  130.849674][   T10] hub 3-1:4.128: 2 ports detected
[  130.855017][   T10] hub 3-1:4.128: Using single TT (err -22)
[  131.265235][ T5913] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  131.816375][   T10] hub 3-1:4.128: hub_hub_status failed (err = -71)
[  131.831067][   T10] hub 3-1:4.128: config failed, can't get hub status (err -71)
[  131.863502][   T30] audit: type=1326 audit(1754887414.419:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109158ebe9 code=0x7ffc0000
[  131.893714][ T5949] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  131.904339][   T10] usb 3-1: USB disconnect, device number 2
[  131.935275][ T5913] usb 5-1: too many configurations: 151, using maximum allowed: 8
[  132.024019][   T30] audit: type=1326 audit(1754887414.459:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f109158ebe9 code=0x7ffc0000
[  132.093342][ T5949] usb 2-1: device descriptor read/all, error -71
[  132.095853][ T5913] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  132.137862][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  132.196497][   T30] audit: type=1326 audit(1754887414.459:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109158ebe9 code=0x7ffc0000
[  132.218970][ T5913] usb 5-1: Product: syz
[  132.230958][ T5913] usb 5-1: Manufacturer: syz
[  132.273347][ T5913] usb 5-1: SerialNumber: syz
[  132.306723][ T5913] usb 5-1: config 0 descriptor??
[  132.329296][   T30] audit: type=1326 audit(1754887414.459:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109158ebe9 code=0x7ffc0000
[  132.423343][   T30] audit: type=1326 audit(1754887414.469:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f109158ebe9 code=0x7ffc0000
[  132.567492][ T6343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.88'.
[  133.367394][ T5886] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  133.394943][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  133.409907][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  133.420161][   T30] audit: type=1326 audit(1754887414.469:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109158ebe9 code=0x7ffc0000
[  133.671923][ T5949] usb 5-1: USB disconnect, device number 7
[  133.680683][   T30] audit: type=1326 audit(1754887414.469:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109158ebe9 code=0x7ffc0000
[  133.702244][   T30] audit: type=1326 audit(1754887414.479:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f109158ebe9 code=0x7ffc0000
[  133.730265][   T30] audit: type=1326 audit(1754887414.479:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109158ebe9 code=0x7ffc0000
[  133.751775][   T30] audit: type=1326 audit(1754887414.479:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.0.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109158ebe9 code=0x7ffc0000
[  133.783034][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.842605][ T5886] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  133.891964][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.936667][ T5886] usb 3-1: config 0 descriptor??
[  134.401837][ T5886] pwc: Askey VC010 type 2 USB webcam detected.
[  134.452002][ T5886] pwc: send_video_command error -71
[  134.473749][ T5886] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  134.520112][ T5886] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  134.596945][ T5886] usb 3-1: USB disconnect, device number 3
[  136.723852][   T43] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[  136.913505][   T43] usb 3-1: Invalid ep0 maxpacket: 16
[  137.118566][   T43] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[  137.149050][ T6414] netlink: 68 bytes leftover after parsing attributes in process `syz.4.103'.
[  137.313553][   T43] usb 3-1: Invalid ep0 maxpacket: 16
[  137.319496][   T43] usb usb3-port1: attempt power cycle
[  137.493429][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  137.643575][ T6420] mmap: syz.1.105 (6420): VmData 37728256 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[  137.728902][   T43] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[  137.803060][   T43] usb 3-1: Invalid ep0 maxpacket: 16
[  137.811139][   T10] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  137.833477][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.863832][ T5886] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[  137.884811][   T10] usb 5-1: config 0 descriptor??
[  137.934654][   T43] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  137.994227][   T43] usb 3-1: Invalid ep0 maxpacket: 16
[  138.000400][   T43] usb usb3-port1: unable to enumerate USB device
[  138.063844][ T5886] usb 1-1: Invalid ep0 maxpacket: 16
[  138.130202][   T10] usb 5-1: Cannot read MAC address
[  138.137330][   T10] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  138.186914][   T10] usb 5-1: USB disconnect, device number 8
[  138.213513][ T5886] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  138.393628][ T5886] usb 1-1: Invalid ep0 maxpacket: 16
[  138.433667][ T5886] usb usb1-port1: attempt power cycle
[  138.733978][   T10] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[  138.823314][ T5886] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[  138.862382][ T5886] usb 1-1: Invalid ep0 maxpacket: 16
[  138.937879][   T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  138.953337][   T10] usb 5-1: config 179 has no interface number 0
[  138.963344][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  139.003359][ T5886] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[  139.011039][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  139.024168][ T5979] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  139.037162][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  139.070243][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[  139.083474][ T5886] usb 1-1: Invalid ep0 maxpacket: 16
[  139.093859][ T5886] usb usb1-port1: unable to enumerate USB device
[  139.112184][   T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  139.127400][   T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  139.137506][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.163564][ T5979] usb 4-1: device descriptor read/64, error -71
[  139.189462][ T6434] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  139.220544][   T10] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  139.259611][   T10] xpad 5-1:179.65: probe with driver xpad failed with error -90
[  139.423453][ T5979] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  139.464849][   T10] usb 5-1: USB disconnect, device number 9
[  139.593629][ T5979] usb 4-1: device descriptor read/64, error -71
[  139.598534][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'.
[  139.609581][ T6456] bridge_slave_1: left allmulticast mode
[  139.629713][ T6456] bridge_slave_1: left promiscuous mode
[  139.643291][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.734482][ T6456] bridge_slave_0: left allmulticast mode
[  139.741320][ T5979] usb usb4-port1: attempt power cycle
[  139.748644][ T6456] bridge_slave_0: left promiscuous mode
[  139.781588][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.123315][ T5979] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  140.182020][ T5979] usb 4-1: device descriptor read/8, error -71
[  140.569354][ T5979] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  141.396681][ T5979] usb 4-1: device descriptor read/8, error -71
[  141.534226][ T5979] usb usb4-port1: unable to enumerate USB device
[  142.123364][ T5886] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  142.143379][ T5913] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  142.323401][ T5886] usb 5-1: device descriptor read/64, error -71
[  142.353560][ T5913] usb 1-1: Using ep0 maxpacket: 8
[  142.752992][ T6476] tipc: Started in network mode
[  142.758348][ T6476] tipc: Node identity b6e375b1a1d4, cluster identity 4711
[  142.769221][ T6476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.781177][ T6476] syzkaller0: entered promiscuous mode
[  142.786848][ T6476] syzkaller0: entered allmulticast mode
[  142.801761][ T5886] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  143.483718][ T6473] tipc: Resetting bearer <eth:syzkaller0>
[  143.498153][ T6473] tipc: Disabling bearer <eth:syzkaller0>
[  143.719354][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  143.753532][ T5886] usb 5-1: device descriptor read/64, error -71
[  143.776329][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  143.892656][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  143.908415][ T5886] usb usb5-port1: attempt power cycle
[  143.951038][ T5913] usb 1-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06
[  144.023300][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.031364][ T5913] usb 1-1: Product: syz
[  144.038309][ T5913] usb 1-1: Manufacturer: syz
[  144.045933][ T5913] usb 1-1: SerialNumber: syz
[  144.098127][ T5913] usb 1-1: config 0 descriptor??
[  144.305380][ T5886] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  144.371285][ T5886] usb 5-1: device descriptor read/8, error -71
[  144.581026][ T6487] ubi31: attaching mtd0
[  144.601589][ T6487] ubi31: scanning is finished
[  144.606682][ T6487] ubi31: empty MTD device detected
[  145.153678][ T5886] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  145.198511][ T6487] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  145.348758][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  145.348780][   T30] audit: type=1326 audit(1754887427.899:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6490 comm="syz.2.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a618ebe9 code=0x7ffc0000
[  146.104095][   T30] audit: type=1326 audit(1754887427.899:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6490 comm="syz.2.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a618ebe9 code=0x7ffc0000
[  146.127060][   T30] audit: type=1326 audit(1754887427.909:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6490 comm="syz.2.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35a618d550 code=0x7ffc0000
[  146.149355][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  146.160492][   T30] audit: type=1326 audit(1754887427.909:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6490 comm="syz.2.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35a618e7eb code=0x7ffc0000
[  146.183574][   T30] audit: type=1326 audit(1754887427.909:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6490 comm="syz.2.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35a618e7eb code=0x7ffc0000
[  146.234367][ T5886] usb 5-1: device descriptor read/8, error -71
[  146.337699][   T10] usb 3-1: config 0 has an invalid interface number: 241 but max is 0
[  146.350191][   T30] audit: type=1326 audit(1754887427.909:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6490 comm="syz.2.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35a618e7eb code=0x7ffc0000
[  146.389237][   T10] usb 3-1: config 0 has no interface number 0
[  146.398392][ T5886] usb usb5-port1: unable to enumerate USB device
[  146.418854][   T10] usb 3-1: New USB device found, idVendor=ea6a, idProduct=daa1, bcdDevice=f1.60
[  146.432599][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.448192][   T30] audit: type=1326 audit(1754887427.909:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6490 comm="syz.2.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35a618e7eb code=0x7ffc0000
[  146.471642][ T6499] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.496059][   T10] usb 3-1: Product: syz
[  146.519913][   T10] usb 3-1: Manufacturer: syz
[  146.526152][   T10] usb 3-1: SerialNumber: syz
[  146.532796][   T30] audit: type=1326 audit(1754887428.029:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6490 comm="syz.2.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35a618e7eb code=0x7ffc0000
[  146.556386][   T10] usb 3-1: config 0 descriptor??
[  146.580124][   T10] usb 3-1: bad CDC descriptors
[  146.619851][ T6498] tipc: Resetting bearer <eth:syzkaller0>
[  146.629533][   T30] audit: type=1326 audit(1754887428.359:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6490 comm="syz.2.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35a618e7eb code=0x7ffc0000
[  146.701913][   T30] audit: type=1326 audit(1754887428.709:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6490 comm="syz.2.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35a618e7eb code=0x7ffc0000
[  146.772625][   T10] usb 3-1: USB disconnect, device number 8
[  146.857308][ T6497] tipc: Disabling bearer <eth:syzkaller0>
[  146.927273][ T6504] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns
[  147.133406][ T5886] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  147.330087][ T5886] usb 5-1: config index 0 descriptor too short (expected 69, got 36)
[  147.368546][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.428936][ T5886] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  147.457745][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.493344][ T5886] usb 5-1: Product: syz
[  147.503283][ T5886] usb 5-1: Manufacturer: syz
[  147.518260][ T5886] usb 5-1: SerialNumber: syz
[  147.550102][ T5886] usb 5-1: config 0 descriptor??
[  147.581500][ T5886] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  148.848637][ T5886] gspca_pac7302: reg_w() failed i: ff v: 01 error -110
[  148.867197][ T5886] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  152.490422][ T5913] usb 1-1: USB disconnect, device number 8
[  152.497309][ T5979] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  152.670180][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  152.723408][ T5842] usb 5-1: USB disconnect, device number 14
[  152.834173][ T5979] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  152.869565][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.997962][ T5979] usb 3-1: Product: syz
[  153.002240][ T5979] usb 3-1: Manufacturer: syz
[  153.047469][ T5979] usb 3-1: SerialNumber: syz
[  153.189748][ T5979] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  153.435669][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'.
[  153.508147][ T5842] usb 3-1: USB disconnect, device number 9
[  153.514531][ T5913] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[  153.569932][ T6551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.136'.
[  153.602493][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'.
[  153.640013][ T5842] usb 3-1: ath9k_htc: USB layer deinitialized
[  153.684930][ T6551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.136'.
[  153.763462][ T5979] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  153.792549][ T6551] netlink: 5 bytes leftover after parsing attributes in process `syz.3.136'.
[  154.964396][ T6570] ------------[ cut here ]------------
[  154.970220][ T6570] WARNING: CPU: 1 PID: 6570 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310
[  154.980618][ T6570] Modules linked in:
[  154.984739][ T6570] CPU: 1 UID: 0 PID: 6570 Comm: syz.4.140 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  154.995111][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  155.005299][ T6570] RIP: 0010:folio_memcg+0x1a8/0x310
[  155.010551][ T6570] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[  155.030614][ T6570] RSP: 0018:ffffc9001b69f250 EFLAGS: 00010283
[  155.037303][ T6570] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000
[  155.045379][ T6570] RDX: ffffc9000db92000 RSI: 0000000000000745 RDI: 0000000000000746
[  155.054333][ T6570] RBP: 0000000000000000 R08: ffffea00016f9a07 R09: 1ffffd40002df340
[  155.063144][ T6570] R10: dffffc0000000000 R11: fffff940002df341 R12: ffffea00016f9a30
[  155.072103][ T6570] R13: dffffc0000000000 R14: ffff888026034b80 R15: 0000000000000002
[  155.080153][ T6570] FS:  00007f75658036c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000
[  155.089446][ T6570] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  155.096484][ T6570] CR2: 0000000000000000 CR3: 0000000025fcc000 CR4: 00000000003526f0
[  155.104591][ T6570] Call Trace:
[  155.107913][ T6570]  <TASK>
[  155.110974][ T6570]  workingset_activation+0x5f/0x4a0
[  155.117318][ T6570]  ? folio_mark_accessed+0x361/0x4a0
[  155.122785][ T6570]  folio_mark_accessed+0x3b5/0x4a0
[  155.128393][ T6570]  kvm_release_page_clean+0x9a/0xe0
[  155.133690][ T6570]  kvm_tdp_page_fault+0x2dd/0x370
[  155.138876][ T6570]  kvm_mmu_do_page_fault+0x2c5/0x640
[  155.144419][ T6570]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  155.150324][ T6570]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[  155.156897][ T6570]  ? __pfx_current_save_fsgs+0x10/0x10
[  155.162444][ T6570]  kvm_mmu_page_fault+0x22f/0xb70
[  155.168235][ T6570]  ? __pfx_handle_ept_violation+0x10/0x10
[  155.174057][ T6570]  vmx_handle_exit+0x1090/0x18a0
[  155.179063][ T6570]  ? vcpu_run+0x361c/0x6f70
[  155.183718][ T6570]  vcpu_run+0x432e/0x6f70
[  155.188127][ T6570]  ? vcpu_run+0x361c/0x6f70
[  155.192734][ T6570]  ? __pfx_vcpu_run+0x10/0x10
[  155.197569][ T6570]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  155.203402][ T6570]  ? rcu_is_watching+0x15/0xb0
[  155.208311][ T6570]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  155.213984][ T6570]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  155.219752][ T6570]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  155.225843][ T6570]  ? rcu_is_watching+0x15/0xb0
[  155.230659][ T6570]  ? trace_contention_end+0x39/0x120
[  155.236057][ T6570]  ? __mutex_lock+0x330/0xe80
[  155.240813][ T6570]  ? __lock_acquire+0xab9/0xd20
[  155.245887][ T6570]  kvm_vcpu_ioctl+0x95c/0xe90
[  155.250627][ T6570]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  155.256038][ T6570]  ? __lock_acquire+0xab9/0xd20
[  155.261843][ T6570]  ? __asan_memset+0x22/0x50
[  155.267145][ T6570]  ? smack_file_ioctl+0x302/0x340
[  155.272224][ T6570]  ? __pfx_smack_file_ioctl+0x10/0x10
[  155.277697][ T6570]  ? __fget_files+0x2a/0x420
[  155.282356][ T6570]  ? __fget_files+0x3a0/0x420
[  155.287223][ T6570]  ? __fget_files+0x2a/0x420
[  155.291949][ T6570]  ? bpf_lsm_file_ioctl+0x9/0x20
[  155.297126][ T6570]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  155.302578][ T6570]  __se_sys_ioctl+0xfc/0x170
[  155.307327][ T6570]  do_syscall_64+0xfa/0x3b0
[  155.311887][ T6570]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.317190][ T6570]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.323392][ T6570]  ? clear_bhb_loop+0x60/0xb0
[  155.328121][ T6570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.334142][ T6570] RIP: 0033:0x7f756498ebe9
[  155.338608][ T6570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.358509][ T6570] RSP: 002b:00007f7565803038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  155.367799][ T6570] RAX: ffffffffffffffda RBX: 00007f7564bb6090 RCX: 00007f756498ebe9
[  155.376667][ T6570] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  155.384749][ T6570] RBP: 00007f7564a11e19 R08: 0000000000000000 R09: 0000000000000000
[  155.392783][ T6570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.401094][ T6570] R13: 00007f7564bb6128 R14: 00007f7564bb6090 R15: 00007ffe7fa68958
[  155.409298][ T6570]  </TASK>
[  155.412449][ T6570] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  155.419767][ T6570] CPU: 1 UID: 0 PID: 6570 Comm: syz.4.140 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  155.429611][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  155.439701][ T6570] Call Trace:
[  155.443299][ T6570]  <TASK>
[  155.446449][ T6570]  dump_stack_lvl+0x99/0x250
[  155.451256][ T6570]  ? __asan_memcpy+0x40/0x70
[  155.455940][ T6570]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.461196][ T6570]  ? __pfx__printk+0x10/0x10
[  155.465856][ T6570]  panic+0x2db/0x790
[  155.469799][ T6570]  ? __pfx_panic+0x10/0x10
[  155.474285][ T6570]  __warn+0x31b/0x4b0
[  155.478324][ T6570]  ? folio_memcg+0x1a8/0x310
[  155.483107][ T6570]  ? folio_memcg+0x1a8/0x310
[  155.487785][ T6570]  report_bug+0x2be/0x4f0
[  155.492340][ T6570]  ? folio_memcg+0x1a8/0x310
[  155.496979][ T6570]  ? folio_memcg+0x1a8/0x310
[  155.501724][ T6570]  ? folio_memcg+0x1aa/0x310
[  155.506370][ T6570]  handle_bug+0x84/0x160
[  155.510653][ T6570]  exc_invalid_op+0x1a/0x50
[  155.515196][ T6570]  asm_exc_invalid_op+0x1a/0x20
[  155.520078][ T6570] RIP: 0010:folio_memcg+0x1a8/0x310
[  155.525323][ T6570] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[  155.545498][ T6570] RSP: 0018:ffffc9001b69f250 EFLAGS: 00010283
[  155.551779][ T6570] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000
[  155.559805][ T6570] RDX: ffffc9000db92000 RSI: 0000000000000745 RDI: 0000000000000746
[  155.567820][ T6570] RBP: 0000000000000000 R08: ffffea00016f9a07 R09: 1ffffd40002df340
[  155.575946][ T6570] R10: dffffc0000000000 R11: fffff940002df341 R12: ffffea00016f9a30
[  155.584141][ T6570] R13: dffffc0000000000 R14: ffff888026034b80 R15: 0000000000000002
[  155.592170][ T6570]  ? folio_memcg+0x1a7/0x310
[  155.596820][ T6570]  workingset_activation+0x5f/0x4a0
[  155.602069][ T6570]  ? folio_mark_accessed+0x361/0x4a0
[  155.607419][ T6570]  folio_mark_accessed+0x3b5/0x4a0
[  155.612599][ T6570]  kvm_release_page_clean+0x9a/0xe0
[  155.617946][ T6570]  kvm_tdp_page_fault+0x2dd/0x370
[  155.623138][ T6570]  kvm_mmu_do_page_fault+0x2c5/0x640
[  155.628472][ T6570]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  155.634339][ T6570]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[  155.639928][ T6570]  ? __pfx_current_save_fsgs+0x10/0x10
[  155.645437][ T6570]  kvm_mmu_page_fault+0x22f/0xb70
[  155.650527][ T6570]  ? __pfx_handle_ept_violation+0x10/0x10
[  155.656285][ T6570]  vmx_handle_exit+0x1090/0x18a0
[  155.661358][ T6570]  ? vcpu_run+0x361c/0x6f70
[  155.666026][ T6570]  vcpu_run+0x432e/0x6f70
[  155.670454][ T6570]  ? vcpu_run+0x361c/0x6f70
[  155.675070][ T6570]  ? __pfx_vcpu_run+0x10/0x10
[  155.679794][ T6570]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  155.685564][ T6570]  ? rcu_is_watching+0x15/0xb0
[  155.690373][ T6570]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  155.695995][ T6570]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  155.701877][ T6570]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  155.707915][ T6570]  ? rcu_is_watching+0x15/0xb0
[  155.712729][ T6570]  ? trace_contention_end+0x39/0x120
[  155.718150][ T6570]  ? __mutex_lock+0x330/0xe80
[  155.722881][ T6570]  ? __lock_acquire+0xab9/0xd20
[  155.727803][ T6570]  kvm_vcpu_ioctl+0x95c/0xe90
[  155.732680][ T6570]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  155.738141][ T6570]  ? __lock_acquire+0xab9/0xd20
[  155.743063][ T6570]  ? __asan_memset+0x22/0x50
[  155.747714][ T6570]  ? smack_file_ioctl+0x302/0x340
[  155.752880][ T6570]  ? __pfx_smack_file_ioctl+0x10/0x10
[  155.758399][ T6570]  ? __fget_files+0x2a/0x420
[  155.763035][ T6570]  ? __fget_files+0x3a0/0x420
[  155.767877][ T6570]  ? __fget_files+0x2a/0x420
[  155.772697][ T6570]  ? bpf_lsm_file_ioctl+0x9/0x20
[  155.777680][ T6570]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  155.782943][ T6570]  __se_sys_ioctl+0xfc/0x170
[  155.787584][ T6570]  do_syscall_64+0xfa/0x3b0
[  155.792130][ T6570]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.797556][ T6570]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.803694][ T6570]  ? clear_bhb_loop+0x60/0xb0
[  155.808421][ T6570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.814357][ T6570] RIP: 0033:0x7f756498ebe9
[  155.818814][ T6570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.838661][ T6570] RSP: 002b:00007f7565803038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  155.847306][ T6570] RAX: ffffffffffffffda RBX: 00007f7564bb6090 RCX: 00007f756498ebe9
[  155.855408][ T6570] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  155.863598][ T6570] RBP: 00007f7564a11e19 R08: 0000000000000000 R09: 0000000000000000
[  155.872041][ T6570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.880223][ T6570] R13: 00007f7564bb6128 R14: 00007f7564bb6090 R15: 00007ffe7fa68958
[  155.888257][ T6570]  </TASK>
[  155.891616][ T6570] Kernel Offset: disabled
[  155.896063][ T6570] Rebooting in 86400 seconds..