Warning: Permanently added '10.128.0.253' (ECDSA) to the list of known hosts.
2022/10/25 01:06:58 fuzzer started
2022/10/25 01:06:58 dialing manager at 10.128.0.169:39955
[   42.256393][ T3602] cgroup: Unknown subsys name 'net'
[   42.354949][ T3602] cgroup: Unknown subsys name 'rlimit'
2022/10/25 01:06:59 syscalls: 3416
2022/10/25 01:06:59 code coverage: enabled
2022/10/25 01:06:59 comparison tracing: enabled
2022/10/25 01:06:59 extra coverage: ioctl(KCOV_DISABLE) failed: invalid argument
2022/10/25 01:06:59 delay kcov mmap: enabled
2022/10/25 01:06:59 setuid sandbox: enabled
2022/10/25 01:06:59 namespace sandbox: enabled
2022/10/25 01:06:59 Android sandbox: /sys/fs/selinux/policy does not exist
2022/10/25 01:06:59 fault injection: enabled
2022/10/25 01:06:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2022/10/25 01:06:59 net packet injection: enabled
2022/10/25 01:06:59 net device setup: enabled
2022/10/25 01:06:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/25 01:06:59 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/25 01:06:59 NIC VF setup: PCI device 0000:00:11.0 is not available
2022/10/25 01:06:59 USB emulation: enabled
2022/10/25 01:06:59 hci packet injection: enabled
2022/10/25 01:06:59 wifi device emulation: enabled
2022/10/25 01:06:59 802.15.4 emulation: enabled
2022/10/25 01:06:59 fetching corpus: 0, signal 0/2000 (executing program)
2022/10/25 01:06:59 fetching corpus: 50, signal 33897/37662 (executing program)
2022/10/25 01:06:59 fetching corpus: 100, signal 47391/52893 (executing program)
2022/10/25 01:06:59 fetching corpus: 150, signal 65398/72445 (executing program)
2022/10/25 01:06:59 fetching corpus: 200, signal 75964/84581 (executing program)
2022/10/25 01:06:59 fetching corpus: 250, signal 87828/97936 (executing program)
2022/10/25 01:06:59 fetching corpus: 300, signal 94157/105801 (executing program)
2022/10/25 01:07:00 fetching corpus: 350, signal 100708/113799 (executing program)
2022/10/25 01:07:00 fetching corpus: 400, signal 105155/119720 (executing program)
2022/10/25 01:07:00 fetching corpus: 450, signal 109945/125947 (executing program)
2022/10/25 01:07:00 fetching corpus: 500, signal 117129/134469 (executing program)
2022/10/25 01:07:00 fetching corpus: 550, signal 122377/141084 (executing program)
2022/10/25 01:07:00 fetching corpus: 600, signal 127017/147065 (executing program)
2022/10/25 01:07:00 fetching corpus: 650, signal 133138/154365 (executing program)
2022/10/25 01:07:01 fetching corpus: 700, signal 137030/159555 (executing program)
2022/10/25 01:07:01 fetching corpus: 750, signal 140214/164045 (executing program)
2022/10/25 01:07:01 fetching corpus: 800, signal 144757/169815 (executing program)
2022/10/25 01:07:01 fetching corpus: 850, signal 149544/175775 (executing program)
2022/10/25 01:07:01 fetching corpus: 900, signal 152862/180358 (executing program)
2022/10/25 01:07:01 fetching corpus: 950, signal 156742/185368 (executing program)
2022/10/25 01:07:01 fetching corpus: 1000, signal 161566/191279 (executing program)
2022/10/25 01:07:01 fetching corpus: 1050, signal 164569/195432 (executing program)
2022/10/25 01:07:02 fetching corpus: 1100, signal 167040/199091 (executing program)
2022/10/25 01:07:02 fetching corpus: 1150, signal 170956/204106 (executing program)
2022/10/25 01:07:02 fetching corpus: 1200, signal 173186/207518 (executing program)
2022/10/25 01:07:02 fetching corpus: 1250, signal 176144/211572 (executing program)
2022/10/25 01:07:02 fetching corpus: 1300, signal 179381/215873 (executing program)
2022/10/25 01:07:02 fetching corpus: 1350, signal 182532/220100 (executing program)
2022/10/25 01:07:02 fetching corpus: 1400, signal 184935/223599 (executing program)
2022/10/25 01:07:02 fetching corpus: 1450, signal 186495/226302 (executing program)
2022/10/25 01:07:02 fetching corpus: 1500, signal 189158/229965 (executing program)
2022/10/25 01:07:02 fetching corpus: 1550, signal 191101/233034 (executing program)
2022/10/25 01:07:02 fetching corpus: 1600, signal 194308/237172 (executing program)
2022/10/25 01:07:03 fetching corpus: 1650, signal 196482/240425 (executing program)
2022/10/25 01:07:03 fetching corpus: 1700, signal 198873/243825 (executing program)
2022/10/25 01:07:03 fetching corpus: 1750, signal 200895/246928 (executing program)
2022/10/25 01:07:03 fetching corpus: 1800, signal 203096/250114 (executing program)
2022/10/25 01:07:03 fetching corpus: 1850, signal 205016/253079 (executing program)
2022/10/25 01:07:03 fetching corpus: 1900, signal 206615/255718 (executing program)
2022/10/25 01:07:03 fetching corpus: 1950, signal 207976/258143 (executing program)
2022/10/25 01:07:03 fetching corpus: 2000, signal 209646/260771 (executing program)
2022/10/25 01:07:03 fetching corpus: 2050, signal 211300/263425 (executing program)
2022/10/25 01:07:03 fetching corpus: 2100, signal 213656/266662 (executing program)
2022/10/25 01:07:04 fetching corpus: 2150, signal 215474/269450 (executing program)
2022/10/25 01:07:04 fetching corpus: 2200, signal 217917/272727 (executing program)
2022/10/25 01:07:04 fetching corpus: 2250, signal 219420/275227 (executing program)
2022/10/25 01:07:04 fetching corpus: 2300, signal 221578/278251 (executing program)
2022/10/25 01:07:04 fetching corpus: 2350, signal 223756/281254 (executing program)
2022/10/25 01:07:04 fetching corpus: 2400, signal 224736/283295 (executing program)
2022/10/25 01:07:04 fetching corpus: 2450, signal 226659/286057 (executing program)
2022/10/25 01:07:04 fetching corpus: 2500, signal 227932/288296 (executing program)
2022/10/25 01:07:04 fetching corpus: 2550, signal 229420/290691 (executing program)
2022/10/25 01:07:04 fetching corpus: 2600, signal 231348/293462 (executing program)
2022/10/25 01:07:05 fetching corpus: 2650, signal 232840/295879 (executing program)
2022/10/25 01:07:05 fetching corpus: 2700, signal 234051/298017 (executing program)
2022/10/25 01:07:05 fetching corpus: 2750, signal 235607/300459 (executing program)
2022/10/25 01:07:05 fetching corpus: 2800, signal 237510/303131 (executing program)
2022/10/25 01:07:05 fetching corpus: 2850, signal 238928/305451 (executing program)
2022/10/25 01:07:05 fetching corpus: 2900, signal 240769/308041 (executing program)
2022/10/25 01:07:05 fetching corpus: 2950, signal 241703/309863 (executing program)
2022/10/25 01:07:05 fetching corpus: 3000, signal 243217/312218 (executing program)
2022/10/25 01:07:05 fetching corpus: 3050, signal 244467/314333 (executing program)
2022/10/25 01:07:05 fetching corpus: 3100, signal 245688/316396 (executing program)
2022/10/25 01:07:05 fetching corpus: 3150, signal 247076/318580 (executing program)
2022/10/25 01:07:06 fetching corpus: 3200, signal 248553/320839 (executing program)
2022/10/25 01:07:06 fetching corpus: 3250, signal 249940/323007 (executing program)
2022/10/25 01:07:06 fetching corpus: 3300, signal 251196/325069 (executing program)
2022/10/25 01:07:06 fetching corpus: 3350, signal 252629/327242 (executing program)
2022/10/25 01:07:06 fetching corpus: 3400, signal 255011/330117 (executing program)
2022/10/25 01:07:06 fetching corpus: 3450, signal 256676/332432 (executing program)
2022/10/25 01:07:06 fetching corpus: 3500, signal 258011/334496 (executing program)
2022/10/25 01:07:06 fetching corpus: 3550, signal 259354/336561 (executing program)
2022/10/25 01:07:06 fetching corpus: 3600, signal 261018/338884 (executing program)
2022/10/25 01:07:06 fetching corpus: 3650, signal 262318/340888 (executing program)
2022/10/25 01:07:07 fetching corpus: 3700, signal 263194/342617 (executing program)
2022/10/25 01:07:07 fetching corpus: 3750, signal 264192/344451 (executing program)
2022/10/25 01:07:07 fetching corpus: 3800, signal 265812/346747 (executing program)
2022/10/25 01:07:07 fetching corpus: 3850, signal 266955/348683 (executing program)
2022/10/25 01:07:07 fetching corpus: 3900, signal 268174/350581 (executing program)
2022/10/25 01:07:07 fetching corpus: 3950, signal 269452/352475 (executing program)
2022/10/25 01:07:07 fetching corpus: 4000, signal 270592/354387 (executing program)
2022/10/25 01:07:07 fetching corpus: 4050, signal 272026/356419 (executing program)
2022/10/25 01:07:07 fetching corpus: 4100, signal 272953/358153 (executing program)
2022/10/25 01:07:07 fetching corpus: 4150, signal 274042/359987 (executing program)
2022/10/25 01:07:08 fetching corpus: 4200, signal 274969/361633 (executing program)
2022/10/25 01:07:08 fetching corpus: 4250, signal 276477/363690 (executing program)
2022/10/25 01:07:08 fetching corpus: 4300, signal 277667/365530 (executing program)
2022/10/25 01:07:08 fetching corpus: 4350, signal 278677/367243 (executing program)
2022/10/25 01:07:08 fetching corpus: 4400, signal 279590/368860 (executing program)
2022/10/25 01:07:08 fetching corpus: 4450, signal 280277/370327 (executing program)
2022/10/25 01:07:08 fetching corpus: 4500, signal 281121/371872 (executing program)
2022/10/25 01:07:08 fetching corpus: 4550, signal 281708/373247 (executing program)
2022/10/25 01:07:08 fetching corpus: 4600, signal 282529/374772 (executing program)
2022/10/25 01:07:08 fetching corpus: 4650, signal 283759/376600 (executing program)
2022/10/25 01:07:09 fetching corpus: 4700, signal 284602/378165 (executing program)
2022/10/25 01:07:09 fetching corpus: 4750, signal 285736/379892 (executing program)
2022/10/25 01:07:09 fetching corpus: 4800, signal 286619/381453 (executing program)
2022/10/25 01:07:09 fetching corpus: 4850, signal 287364/382905 (executing program)
2022/10/25 01:07:09 fetching corpus: 4900, signal 288369/384548 (executing program)
2022/10/25 01:07:09 fetching corpus: 4950, signal 289189/386054 (executing program)
2022/10/25 01:07:09 fetching corpus: 5000, signal 290307/387708 (executing program)
2022/10/25 01:07:09 fetching corpus: 5050, signal 291197/389217 (executing program)
2022/10/25 01:07:09 fetching corpus: 5100, signal 292049/390719 (executing program)
2022/10/25 01:07:09 fetching corpus: 5150, signal 292729/392109 (executing program)
2022/10/25 01:07:09 fetching corpus: 5200, signal 294220/393970 (executing program)
2022/10/25 01:07:10 fetching corpus: 5250, signal 295224/395548 (executing program)
2022/10/25 01:07:10 fetching corpus: 5300, signal 296512/397326 (executing program)
2022/10/25 01:07:10 fetching corpus: 5350, signal 297385/398799 (executing program)
2022/10/25 01:07:10 fetching corpus: 5400, signal 298250/400279 (executing program)
2022/10/25 01:07:10 fetching corpus: 5450, signal 299082/401738 (executing program)
2022/10/25 01:07:10 fetching corpus: 5500, signal 300053/403259 (executing program)
2022/10/25 01:07:10 fetching corpus: 5550, signal 300964/404724 (executing program)
2022/10/25 01:07:11 fetching corpus: 5600, signal 301820/406187 (executing program)
2022/10/25 01:07:11 fetching corpus: 5650, signal 302701/407657 (executing program)
2022/10/25 01:07:11 fetching corpus: 5700, signal 303381/408979 (executing program)
2022/10/25 01:07:11 fetching corpus: 5750, signal 304175/410378 (executing program)
2022/10/25 01:07:11 fetching corpus: 5800, signal 305026/411819 (executing program)
2022/10/25 01:07:11 fetching corpus: 5850, signal 306136/413382 (executing program)
2022/10/25 01:07:12 fetching corpus: 5900, signal 307056/414812 (executing program)
2022/10/25 01:07:12 fetching corpus: 5950, signal 307568/416014 (executing program)
2022/10/25 01:07:12 fetching corpus: 6000, signal 308510/417469 (executing program)
2022/10/25 01:07:12 fetching corpus: 6050, signal 309105/418688 (executing program)
2022/10/25 01:07:12 fetching corpus: 6100, signal 310212/420197 (executing program)
2022/10/25 01:07:12 fetching corpus: 6150, signal 311122/421580 (executing program)
2022/10/25 01:07:12 fetching corpus: 6200, signal 312175/423038 (executing program)
2022/10/25 01:07:13 fetching corpus: 6250, signal 312901/424349 (executing program)
2022/10/25 01:07:13 fetching corpus: 6300, signal 313745/425737 (executing program)
2022/10/25 01:07:13 fetching corpus: 6350, signal 314392/426961 (executing program)
2022/10/25 01:07:13 fetching corpus: 6400, signal 315255/428319 (executing program)
2022/10/25 01:07:13 fetching corpus: 6450, signal 316173/429723 (executing program)
2022/10/25 01:07:13 fetching corpus: 6500, signal 317032/431099 (executing program)
2022/10/25 01:07:13 fetching corpus: 6550, signal 317566/432258 (executing program)
2022/10/25 01:07:13 fetching corpus: 6600, signal 318385/433580 (executing program)
2022/10/25 01:07:13 fetching corpus: 6650, signal 319428/434985 (executing program)
2022/10/25 01:07:14 fetching corpus: 6700, signal 320181/436213 (executing program)
2022/10/25 01:07:14 fetching corpus: 6750, signal 321743/437886 (executing program)
2022/10/25 01:07:14 fetching corpus: 6800, signal 322526/439189 (executing program)
2022/10/25 01:07:14 fetching corpus: 6850, signal 323306/440451 (executing program)
2022/10/25 01:07:14 fetching corpus: 6900, signal 324412/441843 (executing program)
2022/10/25 01:07:14 fetching corpus: 6950, signal 325153/443053 (executing program)
2022/10/25 01:07:14 fetching corpus: 7000, signal 325949/444296 (executing program)
2022/10/25 01:07:14 fetching corpus: 7050, signal 326587/445451 (executing program)
2022/10/25 01:07:14 fetching corpus: 7100, signal 327304/446657 (executing program)
2022/10/25 01:07:15 fetching corpus: 7150, signal 327958/447861 (executing program)
2022/10/25 01:07:15 fetching corpus: 7200, signal 328804/449121 (executing program)
2022/10/25 01:07:15 fetching corpus: 7250, signal 329571/450310 (executing program)
2022/10/25 01:07:15 fetching corpus: 7300, signal 330269/451473 (executing program)
2022/10/25 01:07:15 fetching corpus: 7350, signal 331128/452708 (executing program)
2022/10/25 01:07:15 fetching corpus: 7400, signal 332123/453965 (executing program)
2022/10/25 01:07:15 fetching corpus: 7450, signal 332633/455026 (executing program)
2022/10/25 01:07:15 fetching corpus: 7500, signal 333322/456132 (executing program)
2022/10/25 01:07:15 fetching corpus: 7550, signal 334015/457251 (executing program)
2022/10/25 01:07:16 fetching corpus: 7600, signal 335018/458537 (executing program)
2022/10/25 01:07:16 fetching corpus: 7650, signal 335583/459562 (executing program)
2022/10/25 01:07:16 fetching corpus: 7700, signal 336292/460694 (executing program)
2022/10/25 01:07:16 fetching corpus: 7750, signal 336962/461775 (executing program)
2022/10/25 01:07:16 fetching corpus: 7800, signal 337646/462877 (executing program)
2022/10/25 01:07:16 fetching corpus: 7850, signal 338332/463947 (executing program)
2022/10/25 01:07:16 fetching corpus: 7900, signal 338893/465027 (executing program)
2022/10/25 01:07:16 fetching corpus: 7950, signal 339424/466039 (executing program)
2022/10/25 01:07:16 fetching corpus: 8000, signal 340005/467080 (executing program)
2022/10/25 01:07:16 fetching corpus: 8050, signal 340585/468092 (executing program)
2022/10/25 01:07:17 fetching corpus: 8100, signal 341486/469327 (executing program)
2022/10/25 01:07:17 fetching corpus: 8150, signal 342033/470325 (executing program)
2022/10/25 01:07:17 fetching corpus: 8200, signal 343224/471658 (executing program)
2022/10/25 01:07:17 fetching corpus: 8250, signal 343724/472636 (executing program)
2022/10/25 01:07:17 fetching corpus: 8300, signal 344216/473631 (executing program)
2022/10/25 01:07:17 fetching corpus: 8350, signal 344939/474655 (executing program)
2022/10/25 01:07:17 fetching corpus: 8400, signal 345510/475737 (executing program)
2022/10/25 01:07:17 fetching corpus: 8450, signal 346411/476839 (executing program)
2022/10/25 01:07:17 fetching corpus: 8500, signal 347223/477902 (executing program)
2022/10/25 01:07:17 fetching corpus: 8550, signal 347881/478936 (executing program)
2022/10/25 01:07:17 fetching corpus: 8600, signal 348458/479892 (executing program)
2022/10/25 01:07:17 fetching corpus: 8650, signal 348852/480805 (executing program)
2022/10/25 01:07:18 fetching corpus: 8700, signal 349743/481858 (executing program)
2022/10/25 01:07:18 fetching corpus: 8750, signal 350176/482804 (executing program)
2022/10/25 01:07:18 fetching corpus: 8800, signal 350644/483725 (executing program)
2022/10/25 01:07:18 fetching corpus: 8850, signal 351292/484733 (executing program)
2022/10/25 01:07:18 fetching corpus: 8900, signal 352223/485830 (executing program)
2022/10/25 01:07:18 fetching corpus: 8950, signal 353060/486895 (executing program)
2022/10/25 01:07:18 fetching corpus: 9000, signal 353575/487778 (executing program)
2022/10/25 01:07:18 fetching corpus: 9050, signal 354272/488778 (executing program)
2022/10/25 01:07:18 fetching corpus: 9100, signal 354904/489742 (executing program)
2022/10/25 01:07:18 fetching corpus: 9150, signal 355687/490739 (executing program)
2022/10/25 01:07:18 fetching corpus: 9200, signal 356161/491647 (executing program)
2022/10/25 01:07:18 fetching corpus: 9250, signal 356777/492564 (executing program)
2022/10/25 01:07:19 fetching corpus: 9300, signal 357300/493470 (executing program)
2022/10/25 01:07:19 fetching corpus: 9350, signal 357776/494347 (executing program)
2022/10/25 01:07:19 fetching corpus: 9400, signal 358274/495192 (executing program)
2022/10/25 01:07:19 fetching corpus: 9450, signal 358878/496075 (executing program)
2022/10/25 01:07:19 fetching corpus: 9500, signal 359392/496942 (executing program)
2022/10/25 01:07:19 fetching corpus: 9550, signal 359964/497875 (executing program)
2022/10/25 01:07:19 fetching corpus: 9600, signal 360313/498732 (executing program)
2022/10/25 01:07:19 fetching corpus: 9650, signal 360843/499635 (executing program)
2022/10/25 01:07:19 fetching corpus: 9700, signal 361350/500539 (executing program)
2022/10/25 01:07:19 fetching corpus: 9750, signal 362201/501519 (executing program)
2022/10/25 01:07:19 fetching corpus: 9800, signal 362724/502375 (executing program)
2022/10/25 01:07:20 fetching corpus: 9850, signal 363292/503252 (executing program)
2022/10/25 01:07:20 fetching corpus: 9900, signal 363657/504038 (executing program)
2022/10/25 01:07:20 fetching corpus: 9950, signal 364248/504910 (executing program)
2022/10/25 01:07:20 fetching corpus: 10000, signal 364815/505748 (executing program)
2022/10/25 01:07:20 fetching corpus: 10050, signal 365345/506611 (executing program)
2022/10/25 01:07:20 fetching corpus: 10100, signal 365859/507435 (executing program)
2022/10/25 01:07:20 fetching corpus: 10150, signal 366507/508345 (executing program)
2022/10/25 01:07:20 fetching corpus: 10200, signal 367047/509192 (executing program)
2022/10/25 01:07:20 fetching corpus: 10250, signal 367508/510000 (executing program)
2022/10/25 01:07:20 fetching corpus: 10300, signal 368082/510833 (executing program)
2022/10/25 01:07:20 fetching corpus: 10350, signal 368642/511704 (executing program)
2022/10/25 01:07:21 fetching corpus: 10400, signal 369122/512483 (executing program)
2022/10/25 01:07:21 fetching corpus: 10450, signal 369880/513318 (executing program)
2022/10/25 01:07:21 fetching corpus: 10500, signal 370474/514137 (executing program)
2022/10/25 01:07:21 fetching corpus: 10550, signal 370971/514959 (executing program)
2022/10/25 01:07:21 fetching corpus: 10600, signal 371521/515777 (executing program)
2022/10/25 01:07:22 fetching corpus: 10650, signal 372164/516600 (executing program)
2022/10/25 01:07:22 fetching corpus: 10700, signal 372741/517372 (executing program)
2022/10/25 01:07:22 fetching corpus: 10750, signal 373444/518203 (executing program)
2022/10/25 01:07:22 fetching corpus: 10800, signal 374139/519047 (executing program)
2022/10/25 01:07:22 fetching corpus: 10850, signal 374545/519782 (executing program)
2022/10/25 01:07:22 fetching corpus: 10900, signal 375229/520571 (executing program)
2022/10/25 01:07:23 fetching corpus: 10950, signal 375817/521362 (executing program)
2022/10/25 01:07:23 fetching corpus: 11000, signal 376462/522169 (executing program)
2022/10/25 01:07:23 fetching corpus: 11050, signal 377218/522987 (executing program)
2022/10/25 01:07:23 fetching corpus: 11100, signal 377763/523739 (executing program)
2022/10/25 01:07:23 fetching corpus: 11150, signal 378278/524504 (executing program)
2022/10/25 01:07:23 fetching corpus: 11200, signal 378804/525245 (executing program)
2022/10/25 01:07:23 fetching corpus: 11250, signal 379133/525968 (executing program)
2022/10/25 01:07:24 fetching corpus: 11300, signal 379651/526712 (executing program)
2022/10/25 01:07:24 fetching corpus: 11350, signal 380173/527466 (executing program)
2022/10/25 01:07:24 fetching corpus: 11400, signal 380915/528236 (executing program)
2022/10/25 01:07:24 fetching corpus: 11450, signal 381525/529005 (executing program)
2022/10/25 01:07:24 fetching corpus: 11500, signal 382115/529759 (executing program)
2022/10/25 01:07:24 fetching corpus: 11550, signal 382837/530522 (executing program)
2022/10/25 01:07:24 fetching corpus: 11600, signal 383241/531197 (executing program)
2022/10/25 01:07:24 fetching corpus: 11650, signal 383777/531928 (executing program)
2022/10/25 01:07:24 fetching corpus: 11700, signal 384363/532679 (executing program)
2022/10/25 01:07:24 fetching corpus: 11750, signal 384931/533396 (executing program)
2022/10/25 01:07:25 fetching corpus: 11800, signal 385391/534112 (executing program)
2022/10/25 01:07:25 fetching corpus: 11850, signal 386126/534866 (executing program)
2022/10/25 01:07:25 fetching corpus: 11900, signal 386763/535606 (executing program)
2022/10/25 01:07:25 fetching corpus: 11950, signal 387555/536324 (executing program)
2022/10/25 01:07:25 fetching corpus: 12000, signal 388117/537053 (executing program)
2022/10/25 01:07:25 fetching corpus: 12050, signal 388729/537783 (executing program)
2022/10/25 01:07:25 fetching corpus: 12100, signal 389304/538484 (executing program)
2022/10/25 01:07:25 fetching corpus: 12150, signal 389595/539102 (executing program)
2022/10/25 01:07:25 fetching corpus: 12200, signal 390003/539783 (executing program)
2022/10/25 01:07:25 fetching corpus: 12250, signal 390528/540428 (executing program)
2022/10/25 01:07:25 fetching corpus: 12300, signal 391051/541099 (executing program)
2022/10/25 01:07:26 fetching corpus: 12350, signal 391541/541768 (executing program)
2022/10/25 01:07:26 fetching corpus: 12400, signal 392081/542406 (executing program)
2022/10/25 01:07:26 fetching corpus: 12450, signal 392490/543059 (executing program)
2022/10/25 01:07:26 fetching corpus: 12500, signal 392771/543704 (executing program)
2022/10/25 01:07:26 fetching corpus: 12550, signal 393307/544371 (executing program)
2022/10/25 01:07:26 fetching corpus: 12600, signal 393813/545042 (executing program)
2022/10/25 01:07:26 fetching corpus: 12650, signal 394319/545679 (executing program)
2022/10/25 01:07:26 fetching corpus: 12700, signal 394838/546338 (executing program)
2022/10/25 01:07:26 fetching corpus: 12750, signal 395197/546992 (executing program)
2022/10/25 01:07:27 fetching corpus: 12800, signal 395566/547618 (executing program)
2022/10/25 01:07:27 fetching corpus: 12850, signal 396132/548279 (executing program)
2022/10/25 01:07:27 fetching corpus: 12900, signal 396514/548904 (executing program)
2022/10/25 01:07:27 fetching corpus: 12950, signal 397045/549524 (executing program)
2022/10/25 01:07:27 fetching corpus: 13000, signal 397615/550140 (executing program)
2022/10/25 01:07:27 fetching corpus: 13050, signal 398069/550802 (executing program)
2022/10/25 01:07:27 fetching corpus: 13100, signal 398447/551412 (executing program)
2022/10/25 01:07:27 fetching corpus: 13150, signal 398953/552038 (executing program)
[   71.041401][ T1238] ieee802154 phy0 wpan0: encryption failed: -22
[   71.047728][ T1238] ieee802154 phy1 wpan1: encryption failed: -22
2022/10/25 01:07:27 fetching corpus: 13200, signal 399414/552627 (executing program)
2022/10/25 01:07:27 fetching corpus: 13250, signal 399966/553238 (executing program)
2022/10/25 01:07:27 fetching corpus: 13300, signal 400460/553852 (executing program)
2022/10/25 01:07:27 fetching corpus: 13350, signal 400825/554463 (executing program)
2022/10/25 01:07:28 fetching corpus: 13400, signal 401350/555044 (executing program)
2022/10/25 01:07:28 fetching corpus: 13450, signal 401762/555632 (executing program)
2022/10/25 01:07:28 fetching corpus: 13500, signal 402247/556215 (executing program)
2022/10/25 01:07:28 fetching corpus: 13550, signal 403035/556827 (executing program)
2022/10/25 01:07:28 fetching corpus: 13600, signal 403597/557406 (executing program)
2022/10/25 01:07:28 fetching corpus: 13650, signal 403991/557936 (executing program)
2022/10/25 01:07:28 fetching corpus: 13700, signal 404454/558485 (executing program)
2022/10/25 01:07:28 fetching corpus: 13750, signal 404925/559051 (executing program)
2022/10/25 01:07:28 fetching corpus: 13800, signal 405581/559609 (executing program)
2022/10/25 01:07:28 fetching corpus: 13850, signal 405854/560193 (executing program)
2022/10/25 01:07:28 fetching corpus: 13900, signal 406360/560774 (executing program)
2022/10/25 01:07:29 fetching corpus: 13950, signal 406763/561326 (executing program)
2022/10/25 01:07:29 fetching corpus: 14000, signal 407111/561847 (executing program)
2022/10/25 01:07:29 fetching corpus: 14050, signal 407480/561847 (executing program)
2022/10/25 01:07:29 fetching corpus: 14100, signal 407839/561847 (executing program)
2022/10/25 01:07:29 fetching corpus: 14150, signal 408416/561847 (executing program)
2022/10/25 01:07:29 fetching corpus: 14200, signal 408961/561847 (executing program)
2022/10/25 01:07:29 fetching corpus: 14250, signal 409449/561847 (executing program)
2022/10/25 01:07:29 fetching corpus: 14300, signal 410027/561847 (executing program)
2022/10/25 01:07:29 fetching corpus: 14350, signal 410570/561847 (executing program)
2022/10/25 01:07:29 fetching corpus: 14400, signal 411024/561847 (executing program)
2022/10/25 01:07:30 fetching corpus: 14450, signal 411541/561847 (executing program)
2022/10/25 01:07:30 fetching corpus: 14500, signal 412090/561847 (executing program)
2022/10/25 01:07:30 fetching corpus: 14550, signal 412505/561847 (executing program)
2022/10/25 01:07:30 fetching corpus: 14600, signal 412905/561847 (executing program)
2022/10/25 01:07:30 fetching corpus: 14650, signal 413313/561847 (executing program)
2022/10/25 01:07:30 fetching corpus: 14700, signal 413645/561847 (executing program)
2022/10/25 01:07:30 fetching corpus: 14750, signal 413902/561847 (executing program)
2022/10/25 01:07:30 fetching corpus: 14800, signal 414159/561847 (executing program)
2022/10/25 01:07:30 fetching corpus: 14850, signal 414576/561847 (executing program)
2022/10/25 01:07:30 fetching corpus: 14900, signal 414980/561847 (executing program)
2022/10/25 01:07:31 fetching corpus: 14950, signal 415410/561847 (executing program)
2022/10/25 01:07:31 fetching corpus: 15000, signal 415839/561847 (executing program)
2022/10/25 01:07:31 fetching corpus: 15050, signal 416211/561847 (executing program)
2022/10/25 01:07:31 fetching corpus: 15100, signal 416718/561847 (executing program)
2022/10/25 01:07:31 fetching corpus: 15150, signal 417159/561847 (executing program)
2022/10/25 01:07:31 fetching corpus: 15200, signal 417675/561847 (executing program)
2022/10/25 01:07:31 fetching corpus: 15250, signal 418044/561847 (executing program)
2022/10/25 01:07:31 fetching corpus: 15300, signal 418399/561847 (executing program)
2022/10/25 01:07:31 fetching corpus: 15350, signal 418816/561847 (executing program)
2022/10/25 01:07:31 fetching corpus: 15400, signal 419092/561847 (executing program)
2022/10/25 01:07:31 fetching corpus: 15450, signal 419381/561847 (executing program)
2022/10/25 01:07:31 fetching corpus: 15500, signal 419730/561847 (executing program)
2022/10/25 01:07:31 fetching corpus: 15550, signal 420247/561847 (executing program)
2022/10/25 01:07:32 fetching corpus: 15600, signal 420574/561847 (executing program)
2022/10/25 01:07:32 fetching corpus: 15650, signal 420867/561847 (executing program)
2022/10/25 01:07:32 fetching corpus: 15700, signal 421239/561847 (executing program)
2022/10/25 01:07:32 fetching corpus: 15750, signal 421683/561847 (executing program)
2022/10/25 01:07:32 fetching corpus: 15800, signal 422112/561847 (executing program)
2022/10/25 01:07:32 fetching corpus: 15850, signal 422635/561847 (executing program)
2022/10/25 01:07:32 fetching corpus: 15900, signal 423118/561847 (executing program)
2022/10/25 01:07:32 fetching corpus: 15950, signal 423398/561847 (executing program)
2022/10/25 01:07:32 fetching corpus: 16000, signal 423773/561847 (executing program)
[   76.160932][    T7] cfg80211: failed to load regulatory.db
2022/10/25 01:07:32 fetching corpus: 16050, signal 424302/561847 (executing program)
2022/10/25 01:07:32 fetching corpus: 16100, signal 424813/561847 (executing program)
2022/10/25 01:07:32 fetching corpus: 16150, signal 425099/561847 (executing program)
2022/10/25 01:07:33 fetching corpus: 16200, signal 425482/561847 (executing program)
2022/10/25 01:07:33 fetching corpus: 16250, signal 425789/561847 (executing program)
2022/10/25 01:07:33 fetching corpus: 16300, signal 426192/561847 (executing program)
2022/10/25 01:07:33 fetching corpus: 16350, signal 426620/561847 (executing program)
2022/10/25 01:07:33 fetching corpus: 16400, signal 426925/561847 (executing program)
2022/10/25 01:07:33 fetching corpus: 16450, signal 427267/561847 (executing program)
2022/10/25 01:07:33 fetching corpus: 16500, signal 427555/561847 (executing program)
2022/10/25 01:07:33 fetching corpus: 16550, signal 427951/561847 (executing program)
2022/10/25 01:07:34 fetching corpus: 16600, signal 428385/561847 (executing program)
2022/10/25 01:07:34 fetching corpus: 16650, signal 428821/561847 (executing program)
2022/10/25 01:07:34 fetching corpus: 16700, signal 429100/561847 (executing program)
2022/10/25 01:07:34 fetching corpus: 16750, signal 429349/561847 (executing program)
2022/10/25 01:07:34 fetching corpus: 16800, signal 429684/561847 (executing program)
2022/10/25 01:07:34 fetching corpus: 16850, signal 429993/561847 (executing program)
2022/10/25 01:07:34 fetching corpus: 16900, signal 430317/561847 (executing program)
2022/10/25 01:07:35 fetching corpus: 16950, signal 430720/561847 (executing program)
2022/10/25 01:07:35 fetching corpus: 17000, signal 431142/561847 (executing program)
2022/10/25 01:07:35 fetching corpus: 17050, signal 431480/561847 (executing program)
2022/10/25 01:07:35 fetching corpus: 17100, signal 431925/561847 (executing program)
2022/10/25 01:07:35 fetching corpus: 17150, signal 432290/561847 (executing program)
2022/10/25 01:07:35 fetching corpus: 17200, signal 432673/561847 (executing program)
2022/10/25 01:07:35 fetching corpus: 17250, signal 433144/561847 (executing program)
2022/10/25 01:07:36 fetching corpus: 17300, signal 433436/561847 (executing program)
2022/10/25 01:07:36 fetching corpus: 17350, signal 433779/561847 (executing program)
2022/10/25 01:07:36 fetching corpus: 17400, signal 434246/561847 (executing program)
2022/10/25 01:07:36 fetching corpus: 17450, signal 434725/561847 (executing program)
2022/10/25 01:07:36 fetching corpus: 17500, signal 435073/561847 (executing program)
2022/10/25 01:07:36 fetching corpus: 17550, signal 435450/561847 (executing program)
2022/10/25 01:07:36 fetching corpus: 17600, signal 435847/561847 (executing program)
2022/10/25 01:07:36 fetching corpus: 17650, signal 436250/561847 (executing program)
2022/10/25 01:07:37 fetching corpus: 17700, signal 436592/561847 (executing program)
2022/10/25 01:07:37 fetching corpus: 17750, signal 436875/561847 (executing program)
2022/10/25 01:07:37 fetching corpus: 17800, signal 437216/561847 (executing program)
2022/10/25 01:07:37 fetching corpus: 17850, signal 437453/561847 (executing program)
2022/10/25 01:07:37 fetching corpus: 17900, signal 437755/561847 (executing program)
2022/10/25 01:07:37 fetching corpus: 17950, signal 438086/561847 (executing program)
2022/10/25 01:07:37 fetching corpus: 18000, signal 438413/561847 (executing program)
2022/10/25 01:07:37 fetching corpus: 18050, signal 438847/561847 (executing program)
2022/10/25 01:07:37 fetching corpus: 18100, signal 439232/561847 (executing program)
2022/10/25 01:07:37 fetching corpus: 18150, signal 439576/561847 (executing program)
2022/10/25 01:07:37 fetching corpus: 18200, signal 439944/561847 (executing program)
2022/10/25 01:07:38 fetching corpus: 18250, signal 440353/561847 (executing program)
2022/10/25 01:07:38 fetching corpus: 18300, signal 440593/561847 (executing program)
2022/10/25 01:07:38 fetching corpus: 18350, signal 440915/561847 (executing program)
2022/10/25 01:07:38 fetching corpus: 18400, signal 441285/561847 (executing program)
2022/10/25 01:07:38 fetching corpus: 18450, signal 441641/561847 (executing program)
2022/10/25 01:07:38 fetching corpus: 18500, signal 442017/561847 (executing program)
2022/10/25 01:07:38 fetching corpus: 18550, signal 442503/561847 (executing program)
2022/10/25 01:07:38 fetching corpus: 18600, signal 442745/561847 (executing program)
2022/10/25 01:07:38 fetching corpus: 18650, signal 443118/561847 (executing program)
2022/10/25 01:07:38 fetching corpus: 18700, signal 443454/561847 (executing program)
2022/10/25 01:07:38 fetching corpus: 18750, signal 443764/561847 (executing program)
2022/10/25 01:07:39 fetching corpus: 18800, signal 444285/561847 (executing program)
2022/10/25 01:07:39 fetching corpus: 18850, signal 444573/561847 (executing program)
2022/10/25 01:07:39 fetching corpus: 18900, signal 445013/561847 (executing program)
2022/10/25 01:07:39 fetching corpus: 18950, signal 445343/561847 (executing program)
2022/10/25 01:07:39 fetching corpus: 19000, signal 445619/561847 (executing program)
2022/10/25 01:07:39 fetching corpus: 19050, signal 446103/561847 (executing program)
2022/10/25 01:07:39 fetching corpus: 19100, signal 446736/561847 (executing program)
2022/10/25 01:07:39 fetching corpus: 19150, signal 447023/561847 (executing program)
2022/10/25 01:07:39 fetching corpus: 19200, signal 447328/561847 (executing program)
2022/10/25 01:07:39 fetching corpus: 19250, signal 447719/561847 (executing program)
2022/10/25 01:07:39 fetching corpus: 19300, signal 447934/561847 (executing program)
2022/10/25 01:07:40 fetching corpus: 19350, signal 448216/561847 (executing program)
2022/10/25 01:07:40 fetching corpus: 19400, signal 448560/561847 (executing program)
2022/10/25 01:07:40 fetching corpus: 19450, signal 449059/561847 (executing program)
2022/10/25 01:07:40 fetching corpus: 19500, signal 449411/561847 (executing program)
2022/10/25 01:07:40 fetching corpus: 19550, signal 449673/561847 (executing program)
2022/10/25 01:07:40 fetching corpus: 19600, signal 449972/561847 (executing program)
2022/10/25 01:07:40 fetching corpus: 19650, signal 450367/561847 (executing program)
2022/10/25 01:07:40 fetching corpus: 19700, signal 450602/561847 (executing program)
2022/10/25 01:07:40 fetching corpus: 19750, signal 450858/561847 (executing program)
2022/10/25 01:07:40 fetching corpus: 19800, signal 451307/561847 (executing program)
2022/10/25 01:07:41 fetching corpus: 19850, signal 451596/561847 (executing program)
2022/10/25 01:07:41 fetching corpus: 19900, signal 451909/561847 (executing program)
2022/10/25 01:07:41 fetching corpus: 19950, signal 452283/561847 (executing program)
2022/10/25 01:07:41 fetching corpus: 20000, signal 452610/561847 (executing program)
2022/10/25 01:07:41 fetching corpus: 20050, signal 453108/561847 (executing program)
2022/10/25 01:07:41 fetching corpus: 20100, signal 453479/561847 (executing program)
2022/10/25 01:07:41 fetching corpus: 20150, signal 453841/561847 (executing program)
2022/10/25 01:07:41 fetching corpus: 20200, signal 454123/561847 (executing program)
2022/10/25 01:07:41 fetching corpus: 20250, signal 454465/561847 (executing program)
2022/10/25 01:07:41 fetching corpus: 20300, signal 454692/561847 (executing program)
2022/10/25 01:07:41 fetching corpus: 20350, signal 455004/561847 (executing program)
2022/10/25 01:07:42 fetching corpus: 20400, signal 455801/561847 (executing program)
2022/10/25 01:07:42 fetching corpus: 20450, signal 456139/561847 (executing program)
2022/10/25 01:07:42 fetching corpus: 20500, signal 456327/561847 (executing program)
2022/10/25 01:07:42 fetching corpus: 20550, signal 456587/561847 (executing program)
2022/10/25 01:07:42 fetching corpus: 20600, signal 456873/561847 (executing program)
2022/10/25 01:07:42 fetching corpus: 20650, signal 457137/561847 (executing program)
2022/10/25 01:07:42 fetching corpus: 20700, signal 457409/561847 (executing program)
2022/10/25 01:07:42 fetching corpus: 20750, signal 457688/561847 (executing program)
2022/10/25 01:07:42 fetching corpus: 20800, signal 458149/561847 (executing program)
2022/10/25 01:07:42 fetching corpus: 20850, signal 458464/561847 (executing program)
2022/10/25 01:07:42 fetching corpus: 20900, signal 458842/561847 (executing program)
2022/10/25 01:07:42 fetching corpus: 20950, signal 459158/561847 (executing program)
2022/10/25 01:07:42 fetching corpus: 21000, signal 459469/561847 (executing program)
2022/10/25 01:07:43 fetching corpus: 21050, signal 459727/561847 (executing program)
2022/10/25 01:07:43 fetching corpus: 21100, signal 460013/561847 (executing program)
2022/10/25 01:07:43 fetching corpus: 21150, signal 460390/561847 (executing program)
2022/10/25 01:07:43 fetching corpus: 21200, signal 460745/561847 (executing program)
2022/10/25 01:07:43 fetching corpus: 21250, signal 461018/561847 (executing program)
2022/10/25 01:07:43 fetching corpus: 21300, signal 461390/561847 (executing program)
2022/10/25 01:07:43 fetching corpus: 21350, signal 461809/561847 (executing program)
2022/10/25 01:07:43 fetching corpus: 21400, signal 462127/561847 (executing program)
2022/10/25 01:07:43 fetching corpus: 21450, signal 462403/561847 (executing program)
2022/10/25 01:07:43 fetching corpus: 21500, signal 462682/561847 (executing program)
2022/10/25 01:07:43 fetching corpus: 21550, signal 462986/561847 (executing program)
2022/10/25 01:07:44 fetching corpus: 21600, signal 463222/561847 (executing program)
2022/10/25 01:07:44 fetching corpus: 21650, signal 463461/561847 (executing program)
2022/10/25 01:07:44 fetching corpus: 21700, signal 463956/561847 (executing program)
2022/10/25 01:07:44 fetching corpus: 21750, signal 464198/561847 (executing program)
2022/10/25 01:07:44 fetching corpus: 21800, signal 464555/561847 (executing program)
2022/10/25 01:07:44 fetching corpus: 21850, signal 464844/561847 (executing program)
2022/10/25 01:07:44 fetching corpus: 21900, signal 465169/561847 (executing program)
2022/10/25 01:07:44 fetching corpus: 21950, signal 465402/561847 (executing program)
2022/10/25 01:07:45 fetching corpus: 22000, signal 465664/561847 (executing program)
2022/10/25 01:07:45 fetching corpus: 22050, signal 465977/561847 (executing program)
2022/10/25 01:07:45 fetching corpus: 22100, signal 466324/561847 (executing program)
2022/10/25 01:07:45 fetching corpus: 22150, signal 466520/561847 (executing program)
2022/10/25 01:07:45 fetching corpus: 22200, signal 466841/561847 (executing program)
2022/10/25 01:07:45 fetching corpus: 22250, signal 467013/561847 (executing program)
2022/10/25 01:07:45 fetching corpus: 22300, signal 467351/561847 (executing program)
2022/10/25 01:07:45 fetching corpus: 22350, signal 467583/561847 (executing program)
2022/10/25 01:07:46 fetching corpus: 22400, signal 467861/561847 (executing program)
2022/10/25 01:07:46 fetching corpus: 22450, signal 468116/561847 (executing program)
2022/10/25 01:07:46 fetching corpus: 22500, signal 468376/561847 (executing program)
2022/10/25 01:07:46 fetching corpus: 22550, signal 468655/561847 (executing program)
2022/10/25 01:07:46 fetching corpus: 22600, signal 468805/561847 (executing program)
2022/10/25 01:07:46 fetching corpus: 22650, signal 469033/561847 (executing program)
2022/10/25 01:07:46 fetching corpus: 22700, signal 469365/561847 (executing program)
2022/10/25 01:07:46 fetching corpus: 22750, signal 469695/561847 (executing program)
2022/10/25 01:07:46 fetching corpus: 22800, signal 469871/561847 (executing program)
2022/10/25 01:07:47 fetching corpus: 22850, signal 470135/561847 (executing program)
2022/10/25 01:07:47 fetching corpus: 22900, signal 470355/561847 (executing program)
2022/10/25 01:07:47 fetching corpus: 22950, signal 470574/561847 (executing program)
2022/10/25 01:07:47 fetching corpus: 23000, signal 470894/561847 (executing program)
2022/10/25 01:07:47 fetching corpus: 23050, signal 471093/561847 (executing program)
2022/10/25 01:07:47 fetching corpus: 23100, signal 471353/561847 (executing program)
2022/10/25 01:07:47 fetching corpus: 23150, signal 471573/561847 (executing program)
2022/10/25 01:07:47 fetching corpus: 23200, signal 471826/561847 (executing program)
2022/10/25 01:07:47 fetching corpus: 23250, signal 472194/561847 (executing program)
2022/10/25 01:07:47 fetching corpus: 23300, signal 472526/561847 (executing program)
2022/10/25 01:07:47 fetching corpus: 23350, signal 472743/561847 (executing program)
2022/10/25 01:07:47 fetching corpus: 23400, signal 472981/561847 (executing program)
2022/10/25 01:07:48 fetching corpus: 23450, signal 473262/561847 (executing program)
2022/10/25 01:07:48 fetching corpus: 23500, signal 473526/561847 (executing program)
2022/10/25 01:07:48 fetching corpus: 23550, signal 473727/561847 (executing program)
2022/10/25 01:07:48 fetching corpus: 23600, signal 473952/561847 (executing program)
2022/10/25 01:07:48 fetching corpus: 23650, signal 474279/561847 (executing program)
2022/10/25 01:07:48 fetching corpus: 23700, signal 474701/561847 (executing program)
2022/10/25 01:07:48 fetching corpus: 23750, signal 475012/561847 (executing program)
2022/10/25 01:07:48 fetching corpus: 23800, signal 475245/561847 (executing program)
2022/10/25 01:07:48 fetching corpus: 23850, signal 475573/561847 (executing program)
2022/10/25 01:07:49 fetching corpus: 23900, signal 475934/561847 (executing program)
2022/10/25 01:07:49 fetching corpus: 23950, signal 476130/561847 (executing program)
2022/10/25 01:07:49 fetching corpus: 24000, signal 476518/561847 (executing program)
2022/10/25 01:07:49 fetching corpus: 24050, signal 476811/561847 (executing program)
2022/10/25 01:07:49 fetching corpus: 24100, signal 477087/561847 (executing program)
2022/10/25 01:07:49 fetching corpus: 24150, signal 477308/561847 (executing program)
2022/10/25 01:07:49 fetching corpus: 24200, signal 477633/561847 (executing program)
2022/10/25 01:07:49 fetching corpus: 24250, signal 477945/561847 (executing program)
2022/10/25 01:07:49 fetching corpus: 24300, signal 478226/561847 (executing program)
2022/10/25 01:07:49 fetching corpus: 24350, signal 478597/561847 (executing program)
2022/10/25 01:07:49 fetching corpus: 24400, signal 478843/561847 (executing program)
2022/10/25 01:07:50 fetching corpus: 24450, signal 479188/561847 (executing program)
2022/10/25 01:07:50 fetching corpus: 24500, signal 479384/561847 (executing program)
2022/10/25 01:07:50 fetching corpus: 24550, signal 479673/561847 (executing program)
2022/10/25 01:07:50 fetching corpus: 24600, signal 479912/561847 (executing program)
2022/10/25 01:07:50 fetching corpus: 24650, signal 480126/561847 (executing program)
2022/10/25 01:07:50 fetching corpus: 24700, signal 480354/561847 (executing program)
2022/10/25 01:07:50 fetching corpus: 24750, signal 480536/561847 (executing program)
2022/10/25 01:07:50 fetching corpus: 24800, signal 480860/561847 (executing program)
2022/10/25 01:07:50 fetching corpus: 24850, signal 481220/561847 (executing program)
2022/10/25 01:07:50 fetching corpus: 24900, signal 481452/561847 (executing program)
2022/10/25 01:07:50 fetching corpus: 24950, signal 481763/561847 (executing program)
2022/10/25 01:07:51 fetching corpus: 25000, signal 482069/561847 (executing program)
2022/10/25 01:07:51 fetching corpus: 25050, signal 482380/561847 (executing program)
2022/10/25 01:07:51 fetching corpus: 25100, signal 482609/561847 (executing program)
2022/10/25 01:07:51 fetching corpus: 25150, signal 482852/561847 (executing program)
2022/10/25 01:07:51 fetching corpus: 25200, signal 483106/561847 (executing program)
2022/10/25 01:07:51 fetching corpus: 25250, signal 483472/561847 (executing program)
2022/10/25 01:07:51 fetching corpus: 25300, signal 483722/561847 (executing program)
2022/10/25 01:07:51 fetching corpus: 25350, signal 484004/561847 (executing program)
2022/10/25 01:07:51 fetching corpus: 25400, signal 484234/561847 (executing program)
2022/10/25 01:07:51 fetching corpus: 25450, signal 484587/561847 (executing program)
2022/10/25 01:07:52 fetching corpus: 25500, signal 484860/561847 (executing program)
2022/10/25 01:07:52 fetching corpus: 25550, signal 485162/561847 (executing program)
2022/10/25 01:07:52 fetching corpus: 25600, signal 485450/561847 (executing program)
2022/10/25 01:07:52 fetching corpus: 25650, signal 485743/561847 (executing program)
2022/10/25 01:07:52 fetching corpus: 25700, signal 485954/561847 (executing program)
2022/10/25 01:07:52 fetching corpus: 25750, signal 486222/561847 (executing program)
2022/10/25 01:07:52 fetching corpus: 25800, signal 486429/561847 (executing program)
2022/10/25 01:07:52 fetching corpus: 25850, signal 486677/561847 (executing program)
2022/10/25 01:07:52 fetching corpus: 25900, signal 486951/561847 (executing program)
2022/10/25 01:07:52 fetching corpus: 25950, signal 487174/561847 (executing program)
2022/10/25 01:07:52 fetching corpus: 26000, signal 487527/561847 (executing program)
2022/10/25 01:07:52 fetching corpus: 26050, signal 487722/561847 (executing program)
2022/10/25 01:07:52 fetching corpus: 26100, signal 487909/561847 (executing program)
2022/10/25 01:07:53 fetching corpus: 26150, signal 488147/561847 (executing program)
2022/10/25 01:07:53 fetching corpus: 26200, signal 488392/561847 (executing program)
2022/10/25 01:07:53 fetching corpus: 26250, signal 488643/561847 (executing program)
2022/10/25 01:07:53 fetching corpus: 26300, signal 488922/561847 (executing program)
2022/10/25 01:07:53 fetching corpus: 26350, signal 489159/561847 (executing program)
2022/10/25 01:07:53 fetching corpus: 26400, signal 489386/561847 (executing program)
2022/10/25 01:07:53 fetching corpus: 26450, signal 489611/561847 (executing program)
2022/10/25 01:07:53 fetching corpus: 26500, signal 489890/561847 (executing program)
2022/10/25 01:07:53 fetching corpus: 26550, signal 490151/561847 (executing program)
2022/10/25 01:07:53 fetching corpus: 26600, signal 490449/561847 (executing program)
2022/10/25 01:07:53 fetching corpus: 26650, signal 490639/561847 (executing program)
2022/10/25 01:07:54 fetching corpus: 26700, signal 490805/561847 (executing program)
2022/10/25 01:07:54 fetching corpus: 26750, signal 491066/561847 (executing program)
2022/10/25 01:07:54 fetching corpus: 26800, signal 491272/561847 (executing program)
2022/10/25 01:07:54 fetching corpus: 26850, signal 491502/561847 (executing program)
2022/10/25 01:07:54 fetching corpus: 26900, signal 491878/561847 (executing program)
2022/10/25 01:07:54 fetching corpus: 26950, signal 492205/561847 (executing program)
2022/10/25 01:07:54 fetching corpus: 27000, signal 492402/561847 (executing program)
2022/10/25 01:07:54 fetching corpus: 27050, signal 492765/561847 (executing program)
2022/10/25 01:07:54 fetching corpus: 27100, signal 492964/561847 (executing program)
2022/10/25 01:07:54 fetching corpus: 27150, signal 493245/561847 (executing program)
2022/10/25 01:07:54 fetching corpus: 27200, signal 493455/561847 (executing program)
2022/10/25 01:07:55 fetching corpus: 27250, signal 493726/561847 (executing program)
2022/10/25 01:07:55 fetching corpus: 27300, signal 493954/561847 (executing program)
2022/10/25 01:07:55 fetching corpus: 27350, signal 494170/561847 (executing program)
2022/10/25 01:07:55 fetching corpus: 27400, signal 494477/561847 (executing program)
2022/10/25 01:07:55 fetching corpus: 27450, signal 494667/561847 (executing program)
2022/10/25 01:07:55 fetching corpus: 27500, signal 494900/561847 (executing program)
2022/10/25 01:07:55 fetching corpus: 27550, signal 495112/561847 (executing program)
2022/10/25 01:07:55 fetching corpus: 27600, signal 495294/561847 (executing program)
2022/10/25 01:07:55 fetching corpus: 27650, signal 495437/561847 (executing program)
2022/10/25 01:07:55 fetching corpus: 27700, signal 495778/561847 (executing program)
2022/10/25 01:07:56 fetching corpus: 27750, signal 496031/561847 (executing program)
2022/10/25 01:07:56 fetching corpus: 27800, signal 496292/561847 (executing program)
2022/10/25 01:07:56 fetching corpus: 27850, signal 496539/561847 (executing program)
2022/10/25 01:07:56 fetching corpus: 27900, signal 496800/561847 (executing program)
2022/10/25 01:07:56 fetching corpus: 27950, signal 497019/561847 (executing program)
2022/10/25 01:07:56 fetching corpus: 28000, signal 497215/561847 (executing program)
2022/10/25 01:07:57 fetching corpus: 28050, signal 497365/561847 (executing program)
2022/10/25 01:07:57 fetching corpus: 28100, signal 497748/561847 (executing program)
2022/10/25 01:07:57 fetching corpus: 28150, signal 497968/561847 (executing program)
2022/10/25 01:07:57 fetching corpus: 28200, signal 498175/561847 (executing program)
2022/10/25 01:07:57 fetching corpus: 28250, signal 498377/561847 (executing program)
2022/10/25 01:07:57 fetching corpus: 28300, signal 498594/561847 (executing program)
2022/10/25 01:07:57 fetching corpus: 28350, signal 498806/561847 (executing program)
2022/10/25 01:07:57 fetching corpus: 28400, signal 498977/561847 (executing program)
2022/10/25 01:07:58 fetching corpus: 28450, signal 499243/561847 (executing program)
2022/10/25 01:07:58 fetching corpus: 28500, signal 499481/561847 (executing program)
2022/10/25 01:07:58 fetching corpus: 28550, signal 499722/561847 (executing program)
2022/10/25 01:07:58 fetching corpus: 28600, signal 499928/561847 (executing program)
2022/10/25 01:07:58 fetching corpus: 28650, signal 500132/561847 (executing program)
2022/10/25 01:07:58 fetching corpus: 28700, signal 500403/561847 (executing program)
2022/10/25 01:07:58 fetching corpus: 28750, signal 500751/561847 (executing program)
2022/10/25 01:07:58 fetching corpus: 28800, signal 500994/561847 (executing program)
2022/10/25 01:07:59 fetching corpus: 28850, signal 501194/561847 (executing program)
2022/10/25 01:07:59 fetching corpus: 28900, signal 501375/561847 (executing program)
2022/10/25 01:07:59 fetching corpus: 28950, signal 501579/561847 (executing program)
2022/10/25 01:07:59 fetching corpus: 29000, signal 501829/561847 (executing program)
2022/10/25 01:07:59 fetching corpus: 29050, signal 502041/561847 (executing program)
2022/10/25 01:07:59 fetching corpus: 29100, signal 502260/561847 (executing program)
2022/10/25 01:07:59 fetching corpus: 29150, signal 502618/561847 (executing program)
2022/10/25 01:07:59 fetching corpus: 29200, signal 502898/561847 (executing program)
2022/10/25 01:08:00 fetching corpus: 29250, signal 503065/561847 (executing program)
2022/10/25 01:08:00 fetching corpus: 29300, signal 505121/561847 (executing program)
2022/10/25 01:08:00 fetching corpus: 29350, signal 505355/561847 (executing program)
2022/10/25 01:08:00 fetching corpus: 29400, signal 505538/561847 (executing program)
2022/10/25 01:08:00 fetching corpus: 29450, signal 505679/561847 (executing program)
2022/10/25 01:08:00 fetching corpus: 29500, signal 505976/561847 (executing program)
2022/10/25 01:08:00 fetching corpus: 29550, signal 506183/561847 (executing program)
2022/10/25 01:08:00 fetching corpus: 29600, signal 506415/561847 (executing program)
2022/10/25 01:08:00 fetching corpus: 29650, signal 506628/561847 (executing program)
2022/10/25 01:08:00 fetching corpus: 29700, signal 506881/561847 (executing program)
2022/10/25 01:08:00 fetching corpus: 29750, signal 507145/561847 (executing program)
2022/10/25 01:08:00 fetching corpus: 29800, signal 507414/561847 (executing program)
2022/10/25 01:08:01 fetching corpus: 29850, signal 507628/561847 (executing program)
2022/10/25 01:08:01 fetching corpus: 29900, signal 508002/561847 (executing program)
2022/10/25 01:08:01 fetching corpus: 29950, signal 508179/561847 (executing program)
2022/10/25 01:08:01 fetching corpus: 30000, signal 508502/561847 (executing program)
2022/10/25 01:08:01 fetching corpus: 30050, signal 508764/561847 (executing program)
2022/10/25 01:08:01 fetching corpus: 30100, signal 508963/561847 (executing program)
2022/10/25 01:08:01 fetching corpus: 30150, signal 509226/561847 (executing program)
2022/10/25 01:08:01 fetching corpus: 30200, signal 509476/561847 (executing program)
2022/10/25 01:08:01 fetching corpus: 30250, signal 509709/561847 (executing program)
2022/10/25 01:08:01 fetching corpus: 30300, signal 509927/561847 (executing program)
2022/10/25 01:08:02 fetching corpus: 30350, signal 510129/561847 (executing program)
2022/10/25 01:08:02 fetching corpus: 30400, signal 510282/561847 (executing program)
2022/10/25 01:08:02 fetching corpus: 30450, signal 510537/561847 (executing program)
2022/10/25 01:08:02 fetching corpus: 30500, signal 510724/561847 (executing program)
2022/10/25 01:08:02 fetching corpus: 30550, signal 510958/561847 (executing program)
2022/10/25 01:08:02 fetching corpus: 30600, signal 511191/561847 (executing program)
2022/10/25 01:08:02 fetching corpus: 30650, signal 511366/561847 (executing program)
2022/10/25 01:08:02 fetching corpus: 30700, signal 511609/561847 (executing program)
2022/10/25 01:08:02 fetching corpus: 30750, signal 511836/561847 (executing program)
2022/10/25 01:08:02 fetching corpus: 30800, signal 512032/561847 (executing program)
2022/10/25 01:08:03 fetching corpus: 30850, signal 512314/561847 (executing program)
2022/10/25 01:08:03 fetching corpus: 30900, signal 512487/561847 (executing program)
2022/10/25 01:08:03 fetching corpus: 30950, signal 512694/561847 (executing program)
2022/10/25 01:08:03 fetching corpus: 31000, signal 512963/561847 (executing program)
2022/10/25 01:08:03 fetching corpus: 31050, signal 513148/561847 (executing program)
2022/10/25 01:08:03 fetching corpus: 31100, signal 513358/561847 (executing program)
2022/10/25 01:08:03 fetching corpus: 31150, signal 513583/561847 (executing program)
2022/10/25 01:08:03 fetching corpus: 31200, signal 513873/561847 (executing program)
2022/10/25 01:08:03 fetching corpus: 31250, signal 514081/561847 (executing program)
2022/10/25 01:08:03 fetching corpus: 31300, signal 514306/561847 (executing program)
2022/10/25 01:08:03 fetching corpus: 31350, signal 514597/561847 (executing program)
2022/10/25 01:08:04 fetching corpus: 31400, signal 514765/561847 (executing program)
2022/10/25 01:08:04 fetching corpus: 31450, signal 514958/561847 (executing program)
2022/10/25 01:08:04 fetching corpus: 31500, signal 515145/561847 (executing program)
2022/10/25 01:08:04 fetching corpus: 31550, signal 515323/561847 (executing program)
2022/10/25 01:08:04 fetching corpus: 31600, signal 515511/561847 (executing program)
2022/10/25 01:08:04 fetching corpus: 31650, signal 515719/561847 (executing program)
2022/10/25 01:08:04 fetching corpus: 31700, signal 515989/561847 (executing program)
2022/10/25 01:08:04 fetching corpus: 31750, signal 516229/561847 (executing program)
2022/10/25 01:08:04 fetching corpus: 31800, signal 516393/561847 (executing program)
2022/10/25 01:08:04 fetching corpus: 31850, signal 516685/561847 (executing program)
2022/10/25 01:08:05 fetching corpus: 31900, signal 516893/561847 (executing program)
2022/10/25 01:08:05 fetching corpus: 31950, signal 517093/561847 (executing program)
2022/10/25 01:08:05 fetching corpus: 32000, signal 517319/561847 (executing program)
2022/10/25 01:08:05 fetching corpus: 32050, signal 517612/561847 (executing program)
2022/10/25 01:08:05 fetching corpus: 32100, signal 517843/561847 (executing program)
2022/10/25 01:08:05 fetching corpus: 32150, signal 518045/561847 (executing program)
2022/10/25 01:08:05 fetching corpus: 32200, signal 518165/561847 (executing program)
2022/10/25 01:08:05 fetching corpus: 32250, signal 518432/561847 (executing program)
2022/10/25 01:08:05 fetching corpus: 32300, signal 518653/561847 (executing program)
2022/10/25 01:08:05 fetching corpus: 32350, signal 518819/561847 (executing program)
2022/10/25 01:08:05 fetching corpus: 32400, signal 518995/561847 (executing program)
2022/10/25 01:08:05 fetching corpus: 32450, signal 519261/561847 (executing program)
2022/10/25 01:08:06 fetching corpus: 32500, signal 519449/561847 (executing program)
2022/10/25 01:08:06 fetching corpus: 32550, signal 519652/561847 (executing program)
2022/10/25 01:08:06 fetching corpus: 32600, signal 519816/561847 (executing program)
2022/10/25 01:08:06 fetching corpus: 32650, signal 520032/561847 (executing program)
2022/10/25 01:08:06 fetching corpus: 32700, signal 520265/561847 (executing program)
2022/10/25 01:08:06 fetching corpus: 32750, signal 520495/561847 (executing program)
2022/10/25 01:08:06 fetching corpus: 32800, signal 520778/561847 (executing program)
2022/10/25 01:08:06 fetching corpus: 32850, signal 521026/561847 (executing program)
2022/10/25 01:08:06 fetching corpus: 32900, signal 521181/561847 (executing program)
2022/10/25 01:08:06 fetching corpus: 32950, signal 521417/561847 (executing program)
2022/10/25 01:08:07 fetching corpus: 33000, signal 521715/561847 (executing program)
2022/10/25 01:08:07 fetching corpus: 33050, signal 521947/561847 (executing program)
2022/10/25 01:08:07 fetching corpus: 33100, signal 522119/561847 (executing program)
2022/10/25 01:08:07 fetching corpus: 33150, signal 522313/561847 (executing program)
2022/10/25 01:08:07 fetching corpus: 33200, signal 522490/561847 (executing program)
2022/10/25 01:08:07 fetching corpus: 33250, signal 522656/561847 (executing program)
2022/10/25 01:08:07 fetching corpus: 33300, signal 522851/561847 (executing program)
2022/10/25 01:08:07 fetching corpus: 33350, signal 523094/561847 (executing program)
2022/10/25 01:08:07 fetching corpus: 33400, signal 523315/561847 (executing program)
2022/10/25 01:08:07 fetching corpus: 33450, signal 523474/561847 (executing program)
2022/10/25 01:08:07 fetching corpus: 33500, signal 523641/561847 (executing program)
2022/10/25 01:08:08 fetching corpus: 33550, signal 523870/561847 (executing program)
2022/10/25 01:08:08 fetching corpus: 33600, signal 524117/561847 (executing program)
2022/10/25 01:08:08 fetching corpus: 33650, signal 524329/561847 (executing program)
2022/10/25 01:08:08 fetching corpus: 33700, signal 524699/561847 (executing program)
2022/10/25 01:08:08 fetching corpus: 33750, signal 524933/561847 (executing program)
2022/10/25 01:08:09 fetching corpus: 33800, signal 525094/561847 (executing program)
2022/10/25 01:08:09 fetching corpus: 33850, signal 525294/561847 (executing program)
2022/10/25 01:08:09 fetching corpus: 33900, signal 525406/561847 (executing program)
2022/10/25 01:08:09 fetching corpus: 33950, signal 525550/561847 (executing program)
2022/10/25 01:08:09 fetching corpus: 34000, signal 525736/561847 (executing program)
2022/10/25 01:08:09 fetching corpus: 34050, signal 525894/561847 (executing program)
2022/10/25 01:08:09 fetching corpus: 34100, signal 526090/561847 (executing program)
2022/10/25 01:08:09 fetching corpus: 34150, signal 526252/561847 (executing program)
2022/10/25 01:08:10 fetching corpus: 34200, signal 526366/561847 (executing program)
2022/10/25 01:08:10 fetching corpus: 34250, signal 526533/561847 (executing program)
2022/10/25 01:08:10 fetching corpus: 34300, signal 526819/561847 (executing program)
2022/10/25 01:08:10 fetching corpus: 34350, signal 526953/561847 (executing program)
2022/10/25 01:08:10 fetching corpus: 34400, signal 527200/561847 (executing program)
2022/10/25 01:08:10 fetching corpus: 34450, signal 527357/561847 (executing program)
2022/10/25 01:08:10 fetching corpus: 34500, signal 527496/561847 (executing program)
2022/10/25 01:08:10 fetching corpus: 34550, signal 527638/561847 (executing program)
2022/10/25 01:08:10 fetching corpus: 34600, signal 527851/561847 (executing program)
2022/10/25 01:08:10 fetching corpus: 34650, signal 528092/561847 (executing program)
2022/10/25 01:08:10 fetching corpus: 34700, signal 528379/561847 (executing program)
2022/10/25 01:08:11 fetching corpus: 34750, signal 528554/561847 (executing program)
2022/10/25 01:08:11 fetching corpus: 34800, signal 528747/561847 (executing program)
2022/10/25 01:08:11 fetching corpus: 34850, signal 528916/561847 (executing program)
2022/10/25 01:08:11 fetching corpus: 34900, signal 529093/561847 (executing program)
2022/10/25 01:08:11 fetching corpus: 34950, signal 529242/561847 (executing program)
2022/10/25 01:08:11 fetching corpus: 35000, signal 529440/561847 (executing program)
2022/10/25 01:08:11 fetching corpus: 35050, signal 529628/561847 (executing program)
2022/10/25 01:08:11 fetching corpus: 35100, signal 529816/561847 (executing program)
2022/10/25 01:08:12 fetching corpus: 35150, signal 530010/561847 (executing program)
2022/10/25 01:08:12 fetching corpus: 35200, signal 530239/561847 (executing program)
2022/10/25 01:08:12 fetching corpus: 35220, signal 530317/561847 (executing program)
2022/10/25 01:08:12 fetching corpus: 35220, signal 530317/561847 (executing program)
2022/10/25 01:08:14 starting 6 fuzzer processes
01:08:14 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x300}, 0x0)

01:08:14 executing program 2:
r0 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x10000000)
syz_io_uring_setup(0x2368, &(0x7f0000000040), &(0x7f0000dce000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180))

01:08:14 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x0, 0x0, 0x0, "e4be86825f3767fbf1dad36c3049f3a5f2c11e682102879d92b0d3e054955666"})

01:08:14 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000180)={0x14, 0x1, 0xc, 0x401}, 0x14}}, 0x0)

01:08:14 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x9, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x2}]}, 0x1c}}, 0x0)

01:08:14 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_buf(r0, 0x29, 0x32, 0x0, 0x0)

[  119.124968][ T3637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.132238][ T3637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.139382][ T3637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.146461][ T3637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  119.152117][ T3638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  119.153793][ T3637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  119.160554][ T3643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  119.167591][ T3637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.174621][ T3643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  119.181693][ T3637] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  119.188337][ T3643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  119.195551][ T3637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  119.202568][ T3643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  119.215852][ T3638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  119.224202][ T3644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  119.226149][   T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  119.231447][ T3623] Bluetooth: hci0: HCI_REQ-0x0c1a
[  119.238160][   T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  119.250378][   T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  119.250495][ T3644] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  119.257697][   T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.264749][ T3644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  119.271455][   T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  119.278743][ T3644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  119.285803][ T3626] Bluetooth: hci2: HCI_REQ-0x0c1a
[  119.292615][ T3644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  119.297428][ T3648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  119.304590][ T3644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  119.311503][ T3648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  119.318255][ T3628] Bluetooth: hci1: HCI_REQ-0x0c1a
[  119.325399][ T3648] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  119.330664][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  119.337174][ T3648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  119.344439][ T3644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  119.350864][ T3648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  119.358094][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  119.365317][ T3629] Bluetooth: hci5: HCI_REQ-0x0c1a
[  119.371873][ T3644] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  119.383903][ T3644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  119.391183][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  119.398932][ T3631] Bluetooth: hci4: HCI_REQ-0x0c1a
[  119.399309][ T3627] Bluetooth: hci3: HCI_REQ-0x0c1a
[  119.684069][ T3651] chnl_net:caif_netlink_parms(): no params data found
[  119.708133][ T3652] chnl_net:caif_netlink_parms(): no params data found
[  119.813315][ T3650] chnl_net:caif_netlink_parms(): no params data found
[  119.883878][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.891576][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.899107][ T3652] device bridge_slave_0 entered promiscuous mode
[  119.926069][ T3655] chnl_net:caif_netlink_parms(): no params data found
[  119.934272][ T3652] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.941655][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.949203][ T3652] device bridge_slave_1 entered promiscuous mode
[  119.956437][ T3654] chnl_net:caif_netlink_parms(): no params data found
[  119.972459][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.979513][ T3651] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.987247][ T3651] device bridge_slave_0 entered promiscuous mode
[  119.996156][ T3653] chnl_net:caif_netlink_parms(): no params data found
[  120.026416][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.033723][ T3651] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.041866][ T3651] device bridge_slave_1 entered promiscuous mode
[  120.062786][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.069851][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.077721][ T3650] device bridge_slave_0 entered promiscuous mode
[  120.087060][ T3652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.114422][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.121590][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.129095][ T3650] device bridge_slave_1 entered promiscuous mode
[  120.136929][ T3652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.180505][ T3651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.213352][ T3651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.231228][ T3655] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.238298][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.246096][ T3655] device bridge_slave_0 entered promiscuous mode
[  120.254389][ T3650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.264549][ T3652] team0: Port device team_slave_0 added
[  120.292432][ T3655] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.299509][ T3655] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.307872][ T3655] device bridge_slave_1 entered promiscuous mode
[  120.315759][ T3650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.325631][ T3652] team0: Port device team_slave_1 added
[  120.336258][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.343368][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.352622][ T3654] device bridge_slave_0 entered promiscuous mode
[  120.359634][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.366714][ T3653] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.375218][ T3653] device bridge_slave_0 entered promiscuous mode
[  120.401124][ T3651] team0: Port device team_slave_0 added
[  120.408089][ T3651] team0: Port device team_slave_1 added
[  120.414579][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.421732][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.429236][ T3654] device bridge_slave_1 entered promiscuous mode
[  120.442796][ T3653] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.449836][ T3653] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.457898][ T3653] device bridge_slave_1 entered promiscuous mode
[  120.500888][ T3655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.510815][ T3650] team0: Port device team_slave_0 added
[  120.516833][ T3652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.523877][ T3652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.549797][ T3652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.561455][ T3651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.568424][ T3651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.594978][ T3651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.607258][ T3654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.623489][ T3655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.633509][ T3650] team0: Port device team_slave_1 added
[  120.639385][ T3652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.646779][ T3652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.672846][ T3652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.684448][ T3651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.691587][ T3651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.717570][ T3651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.729668][ T3654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.741197][ T3653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.775483][ T3653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.790492][ T3655] team0: Port device team_slave_0 added
[  120.829450][ T3655] team0: Port device team_slave_1 added
[  120.835501][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.842487][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.868499][ T3650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.888665][ T3652] device hsr_slave_0 entered promiscuous mode
[  120.895299][ T3652] device hsr_slave_1 entered promiscuous mode
[  120.903027][ T3654] team0: Port device team_slave_0 added
[  120.918855][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.925829][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.951725][ T3650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.971346][ T3651] device hsr_slave_0 entered promiscuous mode
[  120.977794][ T3651] device hsr_slave_1 entered promiscuous mode
[  120.984350][ T3651] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  120.991983][ T3651] Cannot create hsr debugfs directory
[  120.998060][ T3654] team0: Port device team_slave_1 added
[  121.004846][ T3653] team0: Port device team_slave_0 added
[  121.038618][ T3653] team0: Port device team_slave_1 added
[  121.051095][ T3655] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.058032][ T3655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.084216][ T3655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.096111][ T3655] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.104148][ T3655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.130275][ T3655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.155001][ T3654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.161971][ T3654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.188390][ T3654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.228856][ T3655] device hsr_slave_0 entered promiscuous mode
[  121.235458][ T3655] device hsr_slave_1 entered promiscuous mode
[  121.242867][ T3655] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.250402][ T3655] Cannot create hsr debugfs directory
[  121.256240][ T3654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.263382][ T3654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.289824][ T3654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.311225][ T3653] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.318186][ T3653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.344195][ T3653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.357974][ T3653] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.365045][ T3653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.390965][ T3653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.416743][ T3650] device hsr_slave_0 entered promiscuous mode
[  121.423634][ T3650] device hsr_slave_1 entered promiscuous mode
[  121.430006][ T3650] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.437677][ T3650] Cannot create hsr debugfs directory
[  121.440767][ T3644] Bluetooth: hci2: command 0x0409 tx timeout
[  121.443273][ T3649] Bluetooth: hci5: command 0x0409 tx timeout
[  121.449123][ T3644] Bluetooth: hci0: command 0x0409 tx timeout
[  121.455107][ T3637] Bluetooth: hci3: command 0x0409 tx timeout
[  121.455132][ T3637] Bluetooth: hci4: command 0x0409 tx timeout
[  121.530766][ T3644] Bluetooth: hci1: command 0x0409 tx timeout
[  121.570980][ T3654] device hsr_slave_0 entered promiscuous mode
[  121.577517][ T3654] device hsr_slave_1 entered promiscuous mode
[  121.584124][ T3654] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.591967][ T3654] Cannot create hsr debugfs directory
[  121.599276][ T3653] device hsr_slave_0 entered promiscuous mode
[  121.606261][ T3653] device hsr_slave_1 entered promiscuous mode
[  121.612949][ T3653] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.620484][ T3653] Cannot create hsr debugfs directory
[  121.749265][ T3652] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  121.769589][ T3652] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  121.790535][ T3652] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  121.801138][ T3652] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  121.820297][ T3651] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  121.829782][ T3651] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  121.852336][ T3651] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  121.871580][ T3651] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  121.883763][ T3650] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  121.893383][ T3650] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  121.903963][ T3650] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  121.923374][ T3650] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  121.952855][ T3655] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  121.969499][ T3655] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  121.979235][ T3655] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  121.991166][ T3655] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  122.059479][ T3654] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  122.086521][ T3652] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.107784][ T3654] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  122.119198][ T3654] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  122.130704][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  122.138285][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  122.148287][ T3651] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.168032][ T3653] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  122.176849][ T3654] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  122.191423][ T3653] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  122.200129][ T3652] 8021q: adding VLAN 0 to HW filter on device team0
[  122.213062][ T3650] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.221669][ T3653] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  122.230056][ T3653] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  122.247386][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  122.255936][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  122.264501][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.271594][ T3690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.279107][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  122.286793][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  122.300326][ T3651] 8021q: adding VLAN 0 to HW filter on device team0
[  122.331819][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  122.339667][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  122.348433][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  122.356849][ T3691] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.363906][ T3691] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.371856][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  122.380272][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  122.389161][ T3691] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.396220][ T3691] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.403955][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  122.412628][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  122.420922][ T3691] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.428065][ T3691] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.435689][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.444309][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.452922][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.461476][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  122.469901][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.478409][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.486823][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.495156][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  122.503374][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.517909][ T3650] 8021q: adding VLAN 0 to HW filter on device team0
[  122.533380][ T3652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  122.544811][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  122.557442][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  122.565910][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  122.573742][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  122.581379][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  122.588856][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.597420][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  122.606499][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  122.614716][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  122.623178][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.631621][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.639905][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.680121][ T3651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  122.691992][ T3651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  122.705889][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  122.714520][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  122.723210][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  122.732019][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.739069][ T3690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.746701][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  122.755156][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  122.763601][ T3690] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.770704][ T3690] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.778821][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.787390][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  122.795787][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.804447][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  122.812749][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  122.843524][ T3655] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.854031][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  122.861928][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  122.869367][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.878421][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  122.887375][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.895873][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.904433][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.916095][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  122.932874][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  122.940267][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  122.947963][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  122.956316][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.984294][ T3652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.993758][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  123.001425][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  123.010355][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  123.018898][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  123.030032][ T3651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.040211][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  123.053723][ T3655] 8021q: adding VLAN 0 to HW filter on device team0
[  123.068443][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  123.076130][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  123.098313][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  123.106920][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  123.115352][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.122449][ T3690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.131465][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  123.147488][ T3653] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.163417][ T3653] 8021q: adding VLAN 0 to HW filter on device team0
[  123.180789][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  123.189261][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  123.198660][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  123.206816][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  123.214524][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  123.223051][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  123.231473][  T147] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.238508][  T147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.246935][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  123.255434][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  123.263891][  T147] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.270976][  T147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.279047][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  123.300942][ T3654] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.316036][ T3650] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.323475][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  123.333158][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  123.341846][ T3686] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.348912][ T3686] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.357037][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  123.365767][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  123.374201][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  123.382799][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  123.390144][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  123.407130][ T3652] device veth0_vlan entered promiscuous mode
[  123.423290][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  123.432372][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  123.441251][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  123.449556][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  123.458351][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  123.466463][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  123.474987][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  123.483581][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  123.492085][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  123.500505][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  123.509733][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  123.518105][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  123.520752][ T3644] Bluetooth: hci0: command 0x041b tx timeout
[  123.525612][ T3649] Bluetooth: hci5: command 0x041b tx timeout
[  123.531340][ T3644] Bluetooth: hci4: command 0x041b tx timeout
[  123.537228][ T3649] Bluetooth: hci3: command 0x041b tx timeout
[  123.545038][ T3644] Bluetooth: hci2: command 0x041b tx timeout
[  123.550055][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  123.569259][ T3652] device veth1_vlan entered promiscuous mode
[  123.584775][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  123.593100][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  123.600776][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  123.601924][ T3644] Bluetooth: hci1: command 0x041b tx timeout
[  123.608526][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  123.622266][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  123.629983][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  123.638490][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  123.646759][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  123.655171][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  123.663381][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  123.672255][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  123.695511][ T3654] 8021q: adding VLAN 0 to HW filter on device team0
[  123.712216][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  123.726315][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  123.734673][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  123.743569][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  123.751764][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  123.759877][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  123.768193][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  123.777054][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  123.785461][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  123.793643][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  123.802008][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  123.810023][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  123.819352][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  123.827173][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  123.834897][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  123.842531][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  123.858412][ T3650] device veth0_vlan entered promiscuous mode
[  123.866317][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  123.875541][ T3651] device veth0_vlan entered promiscuous mode
[  123.901307][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  123.909795][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  123.918402][ T3693] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.925487][ T3693] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.933488][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  123.941072][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  123.948435][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  123.957646][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  123.966915][ T3693] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.974028][ T3693] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.981810][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  123.990213][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  123.998722][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  124.007147][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  124.015593][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  124.025709][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  124.035445][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  124.043401][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  124.064380][ T3653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.076052][ T3651] device veth1_vlan entered promiscuous mode
[  124.089406][ T3650] device veth1_vlan entered promiscuous mode
[  124.097005][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  124.104559][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  124.112415][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  124.120881][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  124.130083][ T3655] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.150063][ T3652] device veth0_macvtap entered promiscuous mode
[  124.165499][ T3654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  124.176420][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  124.192151][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  124.200487][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  124.210058][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  124.218732][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  124.227863][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  124.237126][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  124.245563][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  124.254150][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  124.262797][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  124.273712][ T3652] device veth1_macvtap entered promiscuous mode
[  124.303601][ T3651] device veth0_macvtap entered promiscuous mode
[  124.314966][ T3652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.339643][ T3654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.349468][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  124.357995][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  124.366133][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  124.374685][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  124.383834][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  124.392565][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  124.401419][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  124.408826][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  124.420234][ T3652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.437203][ T3652] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.446032][ T3652] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.455033][ T3652] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.464291][ T3652] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.482460][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  124.491402][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  124.501443][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  124.509523][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  124.517907][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  124.526050][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  124.534739][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  124.542488][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  124.550017][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  124.557760][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  124.569238][ T3650] device veth0_macvtap entered promiscuous mode
[  124.580459][ T3651] device veth1_macvtap entered promiscuous mode
[  124.591571][ T3655] device veth0_vlan entered promiscuous mode
[  124.599817][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  124.608122][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  124.616865][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  124.636592][ T3651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.647755][ T3651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.659858][ T3651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.667676][ T3653] device veth0_vlan entered promiscuous mode
[  124.677073][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  124.685405][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  124.693877][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  124.702983][ T3650] device veth1_macvtap entered promiscuous mode
[  124.718729][ T3655] device veth1_vlan entered promiscuous mode
[  124.727781][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  124.738049][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  124.746097][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  124.755161][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  124.765532][ T3651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.776226][ T3651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.787523][ T3651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.797838][ T3651] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.806893][ T3651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.815896][ T3651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.824848][ T3651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.842840][ T3653] device veth1_vlan entered promiscuous mode
[  124.854900][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.865746][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.875866][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.888708][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.900017][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.908201][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  124.916458][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  124.925025][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  124.933700][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  124.942627][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  124.976642][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.987366][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.997552][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.010785][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.021510][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.052491][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  125.060316][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  125.068571][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  125.077748][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  125.086375][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  125.095883][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  125.104205][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  125.112822][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  125.123713][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  125.131596][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  125.142640][ T3650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.152048][ T3650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.161152][ T3650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.169989][ T3650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.180284][ T3654] device veth0_vlan entered promiscuous mode
[  125.189372][ T3655] device veth0_macvtap entered promiscuous mode
[  125.206294][ T3653] device veth0_macvtap entered promiscuous mode
[  125.215677][ T3653] device veth1_macvtap entered promiscuous mode
[  125.226055][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  125.234095][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  125.242764][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  125.251428][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  125.261300][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  125.261489][   T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.282051][ T3655] device veth1_macvtap entered promiscuous mode
[  125.283393][   T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.310796][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  125.321398][ T3654] device veth1_vlan entered promiscuous mode
[  125.347931][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.359162][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.369658][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.380450][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.390519][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.401272][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.412820][ T3655] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.423500][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.424329][ T3653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.431492][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.443147][ T3653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.459279][ T3653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.469851][ T3653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.479988][ T3653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.491558][ T3653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.501662][ T3653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.512497][ T3653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.523575][ T3653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.546223][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  125.558593][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  125.567316][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  125.575469][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  125.584017][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  125.593568][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.600772][ T3644] Bluetooth: hci2: command 0x040f tx timeout
[  125.605973][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.610054][ T3643] Bluetooth: hci3: command 0x040f tx timeout
[  125.619917][ T3649] Bluetooth: hci0: command 0x040f tx timeout
[  125.625928][ T3644] Bluetooth: hci4: command 0x040f tx timeout
[  125.632019][ T3638] Bluetooth: hci5: command 0x040f tx timeout
[  125.644704][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.655469][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.665538][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.677323][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.680922][ T3638] Bluetooth: hci1: command 0x040f tx timeout
[  125.688675][ T3655] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.718902][ T3653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.729936][ T3653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.740166][ T3653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.751232][ T3653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.761365][ T3653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.773228][ T3653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.783179][ T3653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.793975][ T3653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.804997][ T3653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.815138][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  125.823685][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  125.832378][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  125.841146][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  125.850280][   T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.852553][ T3655] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.860246][   T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.868017][ T3655] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.883006][ T3655] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.892872][ T3655] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.905974][ T3654] device veth0_macvtap entered promiscuous mode
[  125.922895][ T3653] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.933089][ T3653] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.942551][ T3653] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.951471][ T3653] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.962221][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  125.969975][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  125.978445][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  125.987642][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  125.999647][ T3654] device veth1_macvtap entered promiscuous mode
[  126.066159][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.078303][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.090382][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
01:08:22 executing program 1:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000001c0)=@string={0x4, 0x3, "c523"}}, {0x6, &(0x7f0000000280)=@string={0x6, 0x3, "523ebeb2"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40d}}]})

[  126.109606][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.121937][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.134354][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.146239][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.156965][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.167745][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.178332][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.189464][ T3654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.209008][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  126.209765][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.216538][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.234416][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.239991][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.249734][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  126.257482][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  126.265990][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  126.274588][  T147] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  126.308663][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.319366][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.319383][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.336225][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.346097][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.356531][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.367063][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.377608][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.387469][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.398082][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.409101][ T3695] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  126.411082][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.427806][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.439373][ T3654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.462106][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.469943][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.485181][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  126.495243][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
01:08:23 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740))

01:08:23 executing program 2:
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000540))
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_create(0x4, &(0x7f0000000280)={0x0, 0xa, 0x0, @thr={&(0x7f0000000340)="4da9a5f14d666333b625ddb9fff6663032481f58142d2cbefc0c5e7179f81184c68cc3b1bdfa1dee79b0e65b0b142df3cce9101ff20d809576e8c3f7c321f757b30da4422b248f13d6eead04d8138243be419c357cf652900d25dfb48c6c1905e481467bb86ad7a3da55f5afdb94c896da10c0a57469aba9fdf2ecedd824434fb2c1a20969bf9c8485f4a78c79186f3efb460bf2306fc7aa983395e2e24da7871c", 0x0}}, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x50}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
getpid()
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

[  126.506652][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  126.528968][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  126.556030][ T3654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.566514][ T3654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.575680][ T3654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.586601][ T3654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.606759][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.624402][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
01:08:23 executing program 4:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7f})

[  126.664448][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  126.672055][ T3695] usb 2-1: Using ep0 maxpacket: 32
[  126.704132][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
01:08:23 executing program 4:
pipe(&(0x7f0000000100))

[  126.735977][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.744993][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.758866][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
01:08:23 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)

[  126.779426][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  126.796889][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  126.811101][ T3695] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  126.825186][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.838180][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.848335][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  126.873576][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.882655][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.892631][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
01:08:23 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x760, 0x118, 0x328, 0x450, 0x450, 0x0, 0x690, 0x690, 0x690, 0x690, 0x690, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'wg2\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x38}, [], [], 'ip6tnl0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x218, 0x240, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @inet=@rpfilter={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c0)

01:08:23 executing program 5:
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x10}}}}}]}}]}}, 0x0)

01:08:23 executing program 0:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockname(r0, 0x0, &(0x7f0000000080))

01:08:23 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x0, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}})

01:08:23 executing program 0:
getrusage(0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)

[  127.010910][ T3695] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  127.021148][ T3695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.039194][ T3695] usb 2-1: Product: Ѝ
[  127.045910][ T3695] usb 2-1: Manufacturer: 㹒늾
[  127.051397][ T3695] usb 2-1: SerialNumber: syz
01:08:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000003900000101000000000600007f000600002fbad10ffdffffffee000001000000000014000000000009aafee7000000006f0000000a"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x390}]})

[  127.099232][ T3731] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  127.121983][ T3695] cdc_ether: probe of 2-1:1.0 failed with error -22
[  127.281520][ T3688] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  127.337503][ T3690] usb 2-1: USB disconnect, device number 2
[  127.680879][ T3649] Bluetooth: hci3: command 0x0419 tx timeout
[  127.681002][ T3688] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  127.686900][ T3649] Bluetooth: hci5: command 0x0419 tx timeout
[  127.686925][ T3649] Bluetooth: hci4: command 0x0419 tx timeout
[  127.705836][ T3638] Bluetooth: hci0: command 0x0419 tx timeout
[  127.718482][ T3649] Bluetooth: hci2: command 0x0419 tx timeout
[  127.760772][ T3649] Bluetooth: hci1: command 0x0419 tx timeout
01:08:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000003900000101000000000600007f000600002fbad10ffdffffffee000001000000000014000000000009aafee7000000006f0000000a"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x390}]})

01:08:24 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x0, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}})

01:08:24 executing program 2:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000001c0)=@string={0x4, 0x3, "c523"}}, {0x6, &(0x7f0000000280)=@string={0x6, 0x3, "523ebeb2"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40d}}, {0x0, 0x0}]})

01:08:24 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x20000740)

01:08:24 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xa, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:24 executing program 1:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]})

01:08:24 executing program 4:
socket$inet6(0xa, 0x0, 0xfffffc00)

[  127.861256][ T3688] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  127.903411][ T3688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.927332][ T3688] usb 6-1: Product: syz
[  127.935776][ T3688] usb 6-1: Manufacturer: syz
[  127.956638][ T3688] usb 6-1: SerialNumber: syz
[  128.005394][ T3688] cdc_ether: probe of 6-1:1.0 failed with error -22
[  128.122546][ T3695] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  128.162589][  T147] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  128.206794][ T3694] usb 6-1: USB disconnect, device number 2
[  128.360808][ T3695] usb 3-1: Using ep0 maxpacket: 32
[  128.401995][  T147] usb 2-1: Using ep0 maxpacket: 32
[  128.481606][ T3695] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  128.520777][  T147] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  128.570777][  T147] usb 2-1: language id specifier not provided by device, defaulting to English
01:08:25 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff)

01:08:25 executing program 4:
chown(&(0x7f0000000ac0)='./file0\x00', 0xffffffffffffffff, 0x0)
unlink(&(0x7f00000001c0)='./file0\x00')

01:08:25 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x0, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}})

01:08:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000003900000101000000000600007f000600002fbad10ffdffffffee000001000000000014000000000009aafee7000000006f0000000a"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x390}]})

[  128.690780][  T147] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  128.699911][  T147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.708229][  T147] usb 2-1: Product: syz
01:08:25 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))

[  128.734952][  T147] usb 2-1: Manufacturer: syz
[  128.742752][  T147] usb 2-1: SerialNumber: syz
01:08:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000580), 0x4)

01:08:25 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff)

[  128.791278][  T147] cdc_ether: probe of 2-1:1.0 failed with error -22
[  128.940857][ T3695] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  128.950288][ T3695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.958650][ T3695] usb 3-1: Product: Ѝ
[  128.963245][ T3695] usb 3-1: Manufacturer: 㹒늾
[  128.993496][ T3690] usb 2-1: USB disconnect, device number 3
[  129.012328][ T3695] cdc_ether: probe of 3-1:1.0 failed with error -22
[  129.212930][ T3695] usb 3-1: USB disconnect, device number 2
01:08:26 executing program 2:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000001c0)=@string={0x4, 0x3, "c523"}}, {0x6, &(0x7f0000000280)=@string={0x6, 0x3, "523ebeb2"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40d}}, {0x0, 0x0}]})

01:08:26 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff)

01:08:26 executing program 4:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000100)="96", 0x1}], 0x2, 0x80, 0x0, 0x0)

01:08:26 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x0, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}})

01:08:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000003900000101000000000600007f000600002fbad10ffdffffffee000001000000000014000000000009aafee7000000006f0000000a"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x390}]})

01:08:26 executing program 1:
bpf$PROG_LOAD_XDP(0x7, 0x0, 0x0)

01:08:26 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff)

01:08:26 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x0, 0xcf, 0x0, 0x5, 0x3}})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x2, 0x0, @ioapic})

01:08:26 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, 0x0)

01:08:26 executing program 5:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}]}}]}}, 0x0)

01:08:26 executing program 1:
fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x0)

01:08:26 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000040)='/dev/kvm\x00', 0x9, 0x0)

[  130.060716][ T3693] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  130.130707][ T3690] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  130.300730][ T3693] usb 3-1: Using ep0 maxpacket: 32
[  130.390676][ T3690] usb 6-1: Using ep0 maxpacket: 32
[  130.420745][ T3693] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  130.552000][ T3690] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  130.731328][ T3690] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  130.740377][ T3690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.748757][ T3690] usb 6-1: Product: syz
[  130.753094][ T3690] usb 6-1: Manufacturer: syz
[  130.757762][ T3690] usb 6-1: SerialNumber: syz
[  130.781492][ T3804] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  130.790763][ T3693] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  130.799880][ T3693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.808381][ T3693] usb 3-1: Product: Ѝ
[  130.812598][ T3693] usb 3-1: Manufacturer: 㹒늾
[  130.812782][ T3690] cdc_ether: probe of 6-1:1.0 failed with error -22
[  130.851367][ T3693] cdc_ether: probe of 3-1:1.0 failed with error -22
[  131.022148][ T3694] usb 6-1: USB disconnect, device number 3
[  131.057240][ T3693] usb 3-1: USB disconnect, device number 3
01:08:28 executing program 3:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005240)={0x77359400})

01:08:28 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x69, &(0x7f0000000300)=""/105, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:28 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

01:08:28 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'syztnl0\x00', 0x0})

01:08:28 executing program 2:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000001c0)=@string={0x4, 0x3, "c523"}}, {0x6, &(0x7f0000000280)=@string={0x6, 0x3, "523ebeb2"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40d}}, {0x0, 0x0}]})

01:08:28 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=@raw=[@kfunc, @alu, @cb_func, @ldst], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:28 executing program 3:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0)

01:08:28 executing program 0:
openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x3bf80bc93a27df54, 0x0)

01:08:28 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xa, &(0x7f0000002440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:28 executing program 4:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1f, 0x0, 0x7f})

01:08:28 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x7f, 0xbd, &(0x7f0000000080)=""/189, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:28 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2000000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x12, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRES32, @ANYRES16=r2, @ANYRESDEC], 0x0, 0x80, 0x6d, &(0x7f0000000240)=""/109, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5}, 0x10}, 0x80)

01:08:28 executing program 1:
openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getresuid(&(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00))

01:08:28 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', 0x0})

01:08:28 executing program 4:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

01:08:28 executing program 4:
fspick(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x0)

[  131.890701][ T3694] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  131.920850][ T3693] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  132.130815][ T3694] usb 3-1: Using ep0 maxpacket: 32
[  132.160714][ T3693] usb 4-1: Using ep0 maxpacket: 32
[  132.250695][ T3694] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  132.281833][ T3693] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  132.291668][ T3693] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  132.302891][ T3693] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  132.312746][ T3693] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  132.324252][ T3693] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  132.489213][ T1238] ieee802154 phy0 wpan0: encryption failed: -22
[  132.495532][ T1238] ieee802154 phy1 wpan1: encryption failed: -22
[  132.503336][ T3693] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  132.512399][ T3693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.520389][ T3693] usb 4-1: Product: syz
[  132.525047][ T3693] usb 4-1: Manufacturer: syz
[  132.529635][ T3693] usb 4-1: SerialNumber: syz
[  132.581860][ T3693] cdc_ether: probe of 4-1:1.0 failed with error -22
[  132.621298][ T3694] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  132.630404][ T3694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.638495][ T3694] usb 3-1: Product: Ѝ
[  132.642991][ T3694] usb 3-1: Manufacturer: 㹒늾
[  132.682371][ T3694] cdc_ether: probe of 3-1:1.0 failed with error -22
[  132.783270][ T3690] usb 4-1: USB disconnect, device number 2
[  132.888192][  T147] usb 3-1: USB disconnect, device number 4
01:08:29 executing program 2:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000001c0)=@string={0x4, 0x3, "c523"}}, {0x6, &(0x7f0000000280)=@string={0x6, 0x3, "523ebeb2"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40d}}, {0x0, 0x0}]})

01:08:29 executing program 1:
getresuid(&(0x7f0000000a80), 0x0, 0x0)

01:08:29 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:29 executing program 4:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})

01:08:29 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae6a, &(0x7f0000000040)={0x0, 0xfffffffe})

01:08:29 executing program 3:
bpf$PROG_LOAD_XDP(0x12, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:29 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x884}, 0x48)

01:08:29 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x0, 0x0, 0x5}, 0x48)

01:08:29 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700000085980904e4ff11070103000905010200ffe000000905821264"], 0x0)
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x572, 0xcb01, 0x97f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc1, 0x63, 0xa1}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

01:08:30 executing program 1:
setrlimit(0x0, &(0x7f0000000480)={0x0, 0x8})
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x1a4}, {&(0x7f0000000140)=""/85, 0x354}, {&(0x7f0000000fc0)=""/4093, 0x29b}, {&(0x7f0000000400)=""/106, 0x6}, {&(0x7f0000000740)=""/73, 0x3b3}, {&(0x7f0000000200)=""/77, 0x2db}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa8}], 0xc4, &(0x7f0000000280)=""/191, 0x41, 0x40000000}}], 0x400000000000194, 0x0, &(0x7f0000003700)={0x77359400})

01:08:30 executing program 0:
fsopen(&(0x7f0000000000)='ext2\x00', 0x0)

01:08:30 executing program 0:
fsopen(&(0x7f0000000000)='ext2\x00', 0x0)

[  133.680628][ T3694] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  133.730701][ T3689] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  133.770775][  T147] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  133.920712][ T3694] usb 5-1: Using ep0 maxpacket: 32
[  133.980693][ T3689] usb 3-1: Using ep0 maxpacket: 32
[  134.010635][  T147] usb 4-1: Using ep0 maxpacket: 8
[  134.120680][ T3694] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  134.120831][ T3689] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  134.146557][  T147] usb 4-1: config index 0 descriptor too short (expected 5924, got 36)
[  134.154899][  T147] usb 4-1: config 0 has an invalid interface number: 228 but max is -1
[  134.163521][  T147] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  134.172629][  T147] usb 4-1: config 0 has no interface number 0
[  134.178728][  T147] usb 4-1: config 0 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  134.191597][  T147] usb 4-1: config 0 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  134.201903][  T147] usb 4-1: config 0 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 100
[  134.212500][  T147] usb 4-1: config 0 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  134.225836][  T147] usb 4-1: config 0 interface 228 has no altsetting 0
[  134.290749][ T3694] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  134.299883][ T3694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.308584][ T3694] usb 5-1: Product: syz
[  134.312795][ T3694] usb 5-1: Manufacturer: syz
[  134.317383][ T3694] usb 5-1: SerialNumber: syz
[  134.350757][  T147] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  134.359823][  T147] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  134.361752][ T3694] cdc_ether: probe of 5-1:1.0 failed with error -22
[  134.368472][  T147] usb 4-1: Product: syz
[  134.381708][  T147] usb 4-1: SerialNumber: syz
[  134.387290][  T147] usb 4-1: config 0 descriptor??
[  134.442392][  T147] hub 4-1:0.228: bad descriptor, ignoring hub
[  134.448501][  T147] hub: probe of 4-1:0.228 failed with error -5
[  134.530750][ T3689] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  134.539886][ T3689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.548325][ T3689] usb 3-1: Product: Ѝ
[  134.552638][ T3689] usb 3-1: Manufacturer: 㹒늾
[  134.570360][ T3690] usb 5-1: USB disconnect, device number 2
[  134.601379][ T3689] cdc_ether: probe of 3-1:1.0 failed with error -22
[  134.651788][  T147] usblp 4-1:0.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  134.806961][ T3694] usb 3-1: USB disconnect, device number 5
[  135.140727][ T3874] usb 4-1: reset high-speed USB device number 3 using dummy_hcd
01:08:31 executing program 0:
fsopen(&(0x7f0000000000)='ext2\x00', 0x0)

01:08:31 executing program 5:
bpf$PROG_LOAD_XDP(0xd, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0)

01:08:31 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

01:08:31 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020)

01:08:31 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r2, 0x800)
lseek(r2, 0x200, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)=<r4=>0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x3)
sendfile(r2, r3, 0x0, 0x10000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x2})
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/172, 0x20000243}], 0x1)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

01:08:31 executing program 0:
fsopen(&(0x7f0000000000)='ext2\x00', 0x0)

01:08:31 executing program 5:
bpf$PROG_LOAD_XDP(0xf, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  135.380649][ T3874] usb 4-1: Using ep0 maxpacket: 8
[  135.800721][    C0] usblp0: nonzero read bulk status received: -71
[  135.990790][ T3693] usb 4-1: USB disconnect, device number 3
[  136.000863][ T3693] usblp0: removed
01:08:33 executing program 3:
bpf$PROG_LOAD_XDP(0xe, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:33 executing program 4:
socket$inet(0x2, 0x0, 0x80000000)

01:08:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r2, 0x800)
lseek(r2, 0x200, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)=<r4=>0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x3)
sendfile(r2, r3, 0x0, 0x10000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x2})
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/172, 0x20000243}], 0x1)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

01:08:33 executing program 0:
accept4(0xffffffffffffffff, 0x0, 0x0, 0xb3cac896ce3938af)

01:08:33 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

01:08:33 executing program 5:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

01:08:33 executing program 1:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109023b000101000000090400000002060000052406000005240000000d240f01000000000000000000090518f1ac"], 0x0)

01:08:33 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x2, &(0x7f0000000000)=@raw=[@cb_func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:33 executing program 4:
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)

01:08:33 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x1, &(0x7f0000005240)={0x77359400})

01:08:33 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:33 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r2, 0x800)
lseek(r2, 0x200, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)=<r4=>0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x3)
sendfile(r2, r3, 0x0, 0x10000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x2})
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/172, 0x20000243}], 0x1)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

01:08:33 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000400))

01:08:33 executing program 3:
socketpair(0x5, 0x0, 0x0, &(0x7f0000000100))

01:08:33 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000005240)={0x77359400})

01:08:33 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14)

01:08:33 executing program 4:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000740))

[  136.760708][  T147] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  136.820743][    T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  137.010626][  T147] usb 6-1: Using ep0 maxpacket: 32
[  137.140829][  T147] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  137.200861][    T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.211183][    T7] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x18, skipping
[  137.222013][    T7] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  137.390820][    T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  137.400831][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.403480][  T147] usb 6-1: string descriptor 0 read error: -22
[  137.415920][    T7] usb 2-1: Product: syz
[  137.415975][  T147] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  137.420132][    T7] usb 2-1: Manufacturer: syz
[  137.429762][  T147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.433839][    T7] usb 2-1: SerialNumber: syz
[  137.482839][    T7] cdc_ether: probe of 2-1:1.0 failed with error -22
[  137.485531][  T147] cdc_ether: probe of 6-1:1.0 failed with error -22
[  137.683971][ T3693] usb 6-1: USB disconnect, device number 4
[  137.690874][  T147] usb 2-1: USB disconnect, device number 4
01:08:34 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x520, 0x118, 0x328, 0x450, 0x450, 0x0, 0x690, 0x690, 0x690, 0x690, 0x690, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'wg2\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev, [], [], 'ip6tnl0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)

01:08:34 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000e00), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)

01:08:34 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r2, 0x800)
lseek(r2, 0x200, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)=<r4=>0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x3)
sendfile(r2, r3, 0x0, 0x10000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x2})
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000240)=""/172, 0x20000243}], 0x1)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

01:08:34 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000001c0)=@string={0x4, 0x3, "c523"}}, {0x0, 0x0}, {0x6, &(0x7f0000000280)=@string={0x6, 0x3, "523ebeb2"}}]})

01:08:34 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r0, 0x0, &(0x7f0000000080))

01:08:34 executing program 4:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}]}}]}}, 0x0)

01:08:34 executing program 5:
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x1}}}}}]}}]}}, 0x0)

01:08:34 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:34 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ed", 0x1}], 0x1}}], 0x1, 0x0)
recvmmsg$unix(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0)
write$cgroup_pid(r2, &(0x7f0000000380), 0xfdef)

01:08:34 executing program 1:
open$dir(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0)

01:08:34 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect(r0, &(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "2e175e5ccfb14734c341518d567eda930c0b7e22e402dcd4b546f7e13d8ec8dde41ee129adde9ad11afbd061b9412c38a59668d4cc75c370be1e109d11c10b"}, 0x80)

01:08:34 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000003900000101000000000600007f000600002fbad10ffdffffffee000001000000000014000000000009aafee7000000006f0000000a"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x38f, 0x0, 0xb7a}]})

01:08:34 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x0)

01:08:34 executing program 3:
lsetxattr$trusted_overlay_nlink(0x0, 0x0, &(0x7f0000000080)={'U+'}, 0x16, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))

01:08:34 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000200)=""/223, 0x11f, 0xdf, 0x1}, 0x20)

[  138.480742][ T3693] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  138.500702][  T147] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  138.527510][    T7] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  138.730621][ T3693] usb 5-1: Using ep0 maxpacket: 32
[  138.740673][  T147] usb 1-1: Using ep0 maxpacket: 32
[  138.850877][ T3693] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  138.890755][    T7] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  138.950743][  T147] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  139.021208][ T3693] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  139.030280][ T3693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.038472][ T3693] usb 5-1: Product: syz
[  139.042882][ T3693] usb 5-1: Manufacturer: syz
[  139.047493][ T3693] usb 5-1: SerialNumber: syz
[  139.070779][    T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  139.071165][ T3936] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  139.081792][    T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.096006][ T3693] cdc_ether: probe of 5-1:1.0 failed with error -22
[  139.108859][    T7] usb 6-1: Product: syz
[  139.113820][    T7] usb 6-1: Manufacturer: syz
[  139.118452][    T7] usb 6-1: SerialNumber: syz
[  139.161473][    T7] cdc_ether: probe of 6-1:1.0 failed with error -22
[  139.298519][ T3689] usb 5-1: USB disconnect, device number 3
[  139.362543][ T3690] usb 6-1: USB disconnect, device number 5
[  139.380763][  T147] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  139.389821][  T147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.397874][  T147] usb 1-1: Product: 㹒늾
[  139.402441][  T147] usb 1-1: SerialNumber: syz
[  139.441539][  T147] cdc_ether: probe of 1-1:1.0 failed with error -22
[  139.645446][  T147] usb 1-1: USB disconnect, device number 2
01:08:36 executing program 0:
rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x8)

01:08:36 executing program 2:
bpf$PROG_LOAD_XDP(0x7, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:36 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @pic={0x0, 0x8, 0x0, 0x2}})

01:08:36 executing program 1:
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getresuid(&(0x7f0000000a80), &(0x7f0000000ac0), 0x0)

01:08:36 executing program 4:
getresuid(&(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00))

01:08:36 executing program 5:
openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x40400, 0x0)

01:08:36 executing program 2:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={0x0, 0x0, 0xc}, 0x10)

01:08:36 executing program 5:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700000085980904e4ff11070103000905010200ffe000000905821264"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

01:08:36 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000040)={'sit0\x00', 0x0})

01:08:36 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0)

01:08:36 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

01:08:36 executing program 0:
syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff)

01:08:36 executing program 0:
lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800))

01:08:36 executing program 4:
chown(&(0x7f0000000ac0)='./file0\x00', 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff)

01:08:36 executing program 3:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000001c0)=@string={0x4, 0x3, "c523"}}, {0x6, &(0x7f0000000280)=@string={0x6, 0x3, "523ebeb2"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40d}}]})

01:08:36 executing program 2:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x4c}, 0x4c}}, 0x0)

01:08:36 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockname(r0, 0x0, &(0x7f00000009c0))

01:08:36 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
fspick(r0, &(0x7f0000000680)='./file0\x00', 0x0)

01:08:36 executing program 4:
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]})

[  140.490735][    T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  140.640726][  T147] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  140.660686][ T3693] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  140.730721][    T7] usb 6-1: Using ep0 maxpacket: 8
[  140.870780][    T7] usb 6-1: config index 0 descriptor too short (expected 5924, got 36)
[  140.880109][    T7] usb 6-1: config 0 has an invalid interface number: 228 but max is -1
[  140.889406][    T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  140.890611][  T147] usb 4-1: Using ep0 maxpacket: 32
[  140.900528][    T7] usb 6-1: config 0 has no interface number 0
[  140.909673][    T7] usb 6-1: config 0 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  140.922380][    T7] usb 6-1: config 0 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  140.932784][    T7] usb 6-1: config 0 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 100
[  140.944379][    T7] usb 6-1: config 0 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  140.957952][    T7] usb 6-1: config 0 interface 228 has no altsetting 0
[  141.090749][ T3693] usb 5-1: not running at top speed; connect to a high speed hub
[  141.100863][  T147] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  141.120785][    T7] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  141.129918][    T7] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  141.138267][    T7] usb 6-1: Product: syz
[  141.142593][    T7] usb 6-1: SerialNumber: syz
[  141.148321][    T7] usb 6-1: config 0 descriptor??
[  141.191380][ T3693] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  141.201901][    T7] hub 6-1:0.228: bad descriptor, ignoring hub
[  141.208036][ T3693] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  141.217889][    T7] hub: probe of 6-1:0.228 failed with error -5
[  141.224374][ T3693] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  141.271918][  T147] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  141.281102][  T147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.289087][  T147] usb 4-1: Product: Ѝ
[  141.293827][  T147] usb 4-1: Manufacturer: 㹒늾
[  141.298701][  T147] usb 4-1: SerialNumber: syz
[  141.341359][  T147] cdc_ether: probe of 4-1:1.0 failed with error -22
[  141.402137][    T7] usblp 6-1:0.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  141.510719][ T3693] usb 5-1: string descriptor 0 read error: -22
[  141.517792][ T3693] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  141.528337][ T3693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.542715][ T3690] usb 4-1: USB disconnect, device number 4
[  141.579234][ T3693] cdc_ether: probe of 5-1:1.0 failed with error -22
[  141.592193][ T3693] usb 6-1: USB disconnect, device number 6
[  141.602789][ T3693] usblp0: removed
[  141.775197][    T7] usb 5-1: USB disconnect, device number 4
01:08:38 executing program 5:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700000085980904e4ff11070103000905010200ffe000000905821264"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

01:08:38 executing program 0:
socket(0x10, 0x803, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
dup(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r3 = epoll_create1(0x0)
write$binfmt_script(r2, &(0x7f00000005c0)=ANY=[@ANYRES64=r3], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10012, r1, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$FIONREAD(r4, 0x541c, &(0x7f0000000000))

01:08:38 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

01:08:38 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={<r0=>0xffffffffffffffff})
getsockname(r0, &(0x7f0000000840)=@phonet, &(0x7f00000008c0)=0x80)

01:08:38 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x2, &(0x7f0000000000)=@raw=[@kfunc, @alu], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:38 executing program 1:
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020)
syz_clone(0x41082000, &(0x7f0000000000)="c5764aaa928e42e86201bcb215a4fc61820158d3519b2f314343d6faaf6c90fe418c19812c224c082dbb8e5a88db961d93d73209c8af8ad2ed0f6dfbd00751acbca619773ceead3094c75c3872b5f28ff87c6bbe02799ee17f0bddb97123ace88da527bd4842ab59254d93c076d1cae60c5d181cccdba22dc0bf5ccb690ca2527ccf124b6d9988d99fc23dd140098083e5c0de30ddbe69e1fd7be25ebe7cbc8e39cabfa4be7a34b088efc5d544", 0xad, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="522bb5cf56d83c747a")

01:08:38 executing program 3:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0xffffffffffffffff, 0xfffffe99)

01:08:38 executing program 2:
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

01:08:38 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000480)={0x0, 0x0, @pic={0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x2000}})

01:08:38 executing program 3:
socket$inet(0x2, 0x2, 0x7f)

01:08:38 executing program 2:
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x2})
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/172, 0x20000243}], 0x1)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

01:08:38 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCGIDLE(r0, 0x8010743f, 0x0)

[  142.413501][  T147] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  142.690700][  T147] usb 6-1: Using ep0 maxpacket: 8
[  142.850722][  T147] usb 6-1: config index 0 descriptor too short (expected 5924, got 36)
[  142.859054][  T147] usb 6-1: config 0 has an invalid interface number: 228 but max is -1
[  142.867620][  T147] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  142.876556][  T147] usb 6-1: config 0 has no interface number 0
[  142.882724][  T147] usb 6-1: config 0 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  142.894148][  T147] usb 6-1: config 0 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  142.904451][  T147] usb 6-1: config 0 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 100
[  142.915089][  T147] usb 6-1: config 0 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  142.928432][  T147] usb 6-1: config 0 interface 228 has no altsetting 0
[  143.050736][  T147] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  143.059879][  T147] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  143.068264][  T147] usb 6-1: Product: syz
[  143.072530][  T147] usb 6-1: SerialNumber: syz
[  143.078304][  T147] usb 6-1: config 0 descriptor??
[  143.121111][  T147] hub 6-1:0.228: bad descriptor, ignoring hub
[  143.127289][  T147] hub: probe of 6-1:0.228 failed with error -5
[  143.332160][  T147] usblp 6-1:0.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  143.510621][    C1] usblp0: nonzero read bulk status received: -71
[  143.538050][ T3689] usb 6-1: USB disconnect, device number 7
[  143.544951][ T3689] usblp0: removed
01:08:40 executing program 5:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700000085980904e4ff11070103000905010200ffe000000905821264"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

01:08:40 executing program 0:
unlink(&(0x7f0000000700)='./file0\x00')

01:08:40 executing program 2:
r0 = fspick(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='(*][-+}:\x00', &(0x7f0000000640)=':*\x00', 0x0)
clock_getres(0x6, &(0x7f0000000000))
syz_usb_connect$cdc_ecm(0x2, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x8, 0x10, 0xcf, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "7d9f"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x6c4}, [@acm={0x4, 0x24, 0x2, 0x4}, @obex={0x5}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x8, 0x9d, 0x1, 0x39}, @obex={0x5, 0x24, 0x15, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xf0, 0x0, 0x80}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xe2, 0x7, 0xf8, 0x40, 0x4}, 0x62, &(0x7f0000000100)={0x5, 0xf, 0x62, 0x1, [@generic={0x5d, 0x10, 0x0, "bd25eaab57bb2cd2a08b125b7d707747f21b0509ff959eaa1af69b08e1cf18bb9fd803ddca2e2b0db4e45a5e244fe84c97d621126f0beebf59640156789a3b1f7f85ad83fed8889306653310e0720fcfd9e9deac646101e55450"}]}, 0x8, [{0x3e, &(0x7f00000001c0)=@string={0x3e, 0x3, "c5231998162b0d070155d9f412301610f754b153a6c4f34e2eaaafc33768d40495cd56bd4b86a8dd37a3c8ca626c61cad321d6657f2cd2350446acc8"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc0c}}, {0x0, 0x0}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x140c}}, {0x6c, &(0x7f00000003c0)=@string={0x6c, 0x3, "401331c931aad39152a3225ff97309bac24c6c8a25d3c9f2d86dd9e74fe0c966c72aaf9c801e51c15658224b518927e337b7bc9bbf66607508f80091f168325a54097993dca9915a36481542ae9398079143640c0d444c93c409259929c9de319859c0b84fb2b7ee8816"}}, {0x2, &(0x7f0000000440)=@string={0x2}}, {0x58, &(0x7f0000000480)=@string={0x58, 0x3, "25453ebc6cc66b37807713f05f087674c059a77288ef826c15b53ea329b1c0672c5b76d236fc9e4b115f69dc6cb0bda58796766b0c23364f1b257659ac513cb30c7d750d1fe6840e388a287c2e0f61454b61a88b2baf"}}]})

01:08:40 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockname(r0, &(0x7f0000000940)=@ll, &(0x7f00000009c0)=0x80)

01:08:40 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x1, 0x0)

01:08:40 executing program 3:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
readlink(0x0, 0x0, 0x0)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff)

01:08:40 executing program 1:
clock_gettime(0x7, &(0x7f00000021c0))

01:08:40 executing program 4:
chown(&(0x7f0000000ac0)='./file0\x00', 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)

01:08:40 executing program 0:
rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8)

01:08:40 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40086607, &(0x7f0000000400))

01:08:40 executing program 4:
setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0)

01:08:40 executing program 1:
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xf0}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@generic={0xa, 0x10, 0x3, "bd25eaab57bb2c"}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})

[  144.330631][ T3693] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  144.380726][ T3694] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  144.450633][ T3689] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  144.650777][ T3694] usb 6-1: Using ep0 maxpacket: 8
[  144.750710][ T3693] usb 3-1: not running at top speed; connect to a high speed hub
[  144.770717][ T3694] usb 6-1: config index 0 descriptor too short (expected 5924, got 36)
[  144.779115][ T3694] usb 6-1: config 0 has an invalid interface number: 228 but max is -1
[  144.788686][ T3694] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  144.797923][ T3694] usb 6-1: config 0 has no interface number 0
[  144.805989][ T3694] usb 6-1: config 0 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  144.817812][ T3694] usb 6-1: config 0 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  144.829258][ T3694] usb 6-1: config 0 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 100
[  144.839625][ T3693] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  144.850583][ T3694] usb 6-1: config 0 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  144.852836][ T3689] usb 2-1: not running at top speed; connect to a high speed hub
[  144.864629][ T3693] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  144.882970][ T3694] usb 6-1: config 0 interface 228 has no altsetting 0
[  144.889827][ T3693] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  144.903001][ T3693] usb 3-1: config 1 interface 0 has no altsetting 0
[  144.990780][ T3689] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  145.000542][ T3689] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  145.000876][ T3694] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  145.013412][ T3689] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  145.021293][ T3694] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  145.042622][ T3694] usb 6-1: Product: syz
[  145.046930][ T3694] usb 6-1: SerialNumber: syz
[  145.053409][ T3694] usb 6-1: config 0 descriptor??
[  145.091519][ T3694] hub 6-1:0.228: bad descriptor, ignoring hub
[  145.097653][ T3694] hub: probe of 6-1:0.228 failed with error -5
[  145.280703][ T3693] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  145.289763][ T3693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.298126][ T3693] usb 3-1: Manufacturer: ఌ
[  145.304834][ T3694] usblp 6-1:0.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  145.316287][ T3693] usb 3-1: SerialNumber: Ⰱ
[  145.321941][ T3689] usb 2-1: string descriptor 0 read error: -22
[  145.328178][ T3689] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  145.337628][ T3689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.350756][ T4037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  145.358173][ T4037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  145.370997][ T4056] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  145.391414][ T3689] cdc_ether: probe of 2-1:1.0 failed with error -22
[  145.480608][    C1] usblp0: nonzero read bulk status received: -71
[  145.509805][ T3694] usb 6-1: USB disconnect, device number 8
[  145.516875][ T3694] usblp0: removed
[  145.594382][    T7] usb 2-1: USB disconnect, device number 5
[  145.631951][ T3693] cdc_ether: probe of 3-1:1.0 failed with error -71
[  145.643109][ T3693] usb 3-1: USB disconnect, device number 6
01:08:42 executing program 5:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700000085980904e4ff11070103000905010200ffe000000905821264"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

01:08:42 executing program 4:
openat$dir(0xffffffffffffff9c, 0x0, 0x400842, 0x0)

01:08:42 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

01:08:42 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x598, 0x118, 0x328, 0x450, 0x450, 0x0, 0x690, 0x690, 0x690, 0x690, 0x690, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'wg2\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev, [], [], 'ip6tnl0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8)

01:08:42 executing program 0:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0)

01:08:42 executing program 4:
timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00')
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0xc0a81, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000540)={0x0, 0x0, 0x7f, 0x0, 0x4, "5d7877234bc51a40a47816fb07ca26b5cb67b5", 0xffff})

01:08:42 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x760, 0x118, 0x328, 0x450, 0x450, 0x0, 0x690, 0x690, 0x690, 0x690, 0x690, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'wg2\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev, [], [], 'ip6tnl0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x218, 0x240, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @inet=@rpfilter={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c0)

01:08:42 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ppoll(&(0x7f00000000c0)=[{r1, 0x0, 0xb00}, {0xffffffffffffffff, 0x0, 0x64}, {r2, 0x3248}], 0x3, 0x0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/219, 0xdb}, {0x0}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f00000004c0)=""/165, 0xa5}], 0x5, &(0x7f0000000580)=""/149, 0x95}, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000380)=0x1, 0x4)
close(r0)

01:08:42 executing program 3:
pipe(&(0x7f0000000b40)={<r0=>0xffffffffffffffff})
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0)

01:08:42 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)

01:08:42 executing program 3:
readlink(&(0x7f00000053c0)='./file0\x00', &(0x7f0000005400)=""/134, 0x86)

01:08:42 executing program 0:
chown(&(0x7f0000000ac0)='./file0\x00', 0xffffffffffffffff, 0x0)

[  146.320703][ T3689] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  146.560709][ T3689] usb 6-1: Using ep0 maxpacket: 8
[  146.700813][ T3689] usb 6-1: config index 0 descriptor too short (expected 5924, got 36)
[  146.709153][ T3689] usb 6-1: config 0 has an invalid interface number: 228 but max is -1
[  146.717673][ T3689] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  146.726758][ T3689] usb 6-1: config 0 has no interface number 0
[  146.733395][ T3689] usb 6-1: config 0 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  146.745004][ T3689] usb 6-1: config 0 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  146.755425][ T3689] usb 6-1: config 0 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 100
[  146.765877][ T3689] usb 6-1: config 0 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  146.779330][ T3689] usb 6-1: config 0 interface 228 has no altsetting 0
[  146.911382][ T3689] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  146.920455][ T3689] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  146.929245][ T3689] usb 6-1: Product: syz
[  146.933569][ T3689] usb 6-1: SerialNumber: syz
[  146.942493][ T3689] usb 6-1: config 0 descriptor??
[  146.983620][ T3689] hub 6-1:0.228: bad descriptor, ignoring hub
[  146.992597][ T3689] hub: probe of 6-1:0.228 failed with error -5
[  147.212523][ T3689] usblp 6-1:0.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  147.379957][ T3689] usb 6-1: USB disconnect, device number 9
[  147.386896][ T3689] usblp0: removed
01:08:44 executing program 3:
fspick(0xffffffffffffff9c, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000600)='(*][-+}:\x00', &(0x7f0000000640)=':*\x00', 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x51, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x6c4}, [@acm={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x6}}}}}]}}]}}, 0x0)

01:08:44 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000200)=""/223, 0x11f, 0xdf, 0x1}, 0x20)

01:08:44 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x10}, 0x80)

01:08:44 executing program 2:
fsopen(&(0x7f0000000040)='ncpfs\x00', 0x0)

01:08:44 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0xc0a81, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000540)={0x0, 0x3, 0x7f, 0x0, 0x4, "5d7877234bc51a40a47816fb07ca26b5cb67b5"})
creat(0x0, 0x0)

01:08:44 executing program 5:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})

01:08:44 executing program 0:
lsetxattr$trusted_overlay_nlink(&(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000c40)='./file1\x00', 0x0, 0x0, 0x0, 0x0)

01:08:44 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10}, 0x48)

01:08:44 executing program 1:
pipe(&(0x7f0000000240))
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)

01:08:44 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1004000, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x81}]}})

01:08:44 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0xffff9ee2})

01:08:44 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  148.210820][  T147] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  148.250636][ T3692] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  148.511789][ T3692] usb 6-1: Using ep0 maxpacket: 32
[  148.610868][  T147] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  148.710756][ T3692] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  148.780702][  T147] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  148.789744][  T147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.797990][  T147] usb 4-1: Product: syz
[  148.802512][  T147] usb 4-1: Manufacturer: syz
[  148.807111][  T147] usb 4-1: SerialNumber: syz
[  148.830852][ T4093] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  148.838045][ T4093] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  148.851304][  T147] cdc_ether: probe of 4-1:1.0 failed with error -22
[  148.880864][ T3692] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  148.889939][ T3692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.897985][ T3692] usb 6-1: Product: syz
[  148.902218][ T3692] usb 6-1: Manufacturer: syz
[  148.906795][ T3692] usb 6-1: SerialNumber: syz
[  148.951304][ T3692] cdc_ether: probe of 6-1:1.0 failed with error -22
[  149.055867][ T3693] usb 4-1: USB disconnect, device number 5
[  149.155075][ T3692] usb 6-1: USB disconnect, device number 10
01:08:46 executing program 3:
socketpair(0x1a, 0x0, 0x0, &(0x7f00000010c0))

01:08:46 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000008900000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc4})
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x40000000)

01:08:46 executing program 1:
socketpair(0x2c, 0x0, 0x0, &(0x7f00000000c0))

01:08:46 executing program 4:
timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00')
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0xc0a81, 0x0)
sendfile(r1, r0, 0x0, 0x7ffff00b)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000540)={0x0, 0x3, 0x7f, 0x0, 0x4, "5d7877234bc51a40a47816fb07ca26b5cb67b5", 0xffff})
timer_create(0x0, 0x0, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)

01:08:46 executing program 0:
bpf$PROG_LOAD_XDP(0x3, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:46 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000051c0)=[{{&(0x7f0000000780)=@ll, 0x80, &(0x7f0000002dc0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x1, 0x0)

01:08:46 executing program 0:
clock_gettime(0x7c1ad35adb8ab186, 0x0)

01:08:46 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000200)=""/223, 0x11f, 0xdf, 0x1}, 0x20)

01:08:46 executing program 2:
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getresuid(&(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00))

01:08:46 executing program 3:
unshare(0x0)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_create(0x4, &(0x7f0000000280)={0x0, 0xa, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000580)="3bcc181fcea075339fbfdf3641fe34fafd7d6bfbda7b617d25d11e1fcb526d2b6ab9dee1c9db04db026e1719c8f6ce3e30e72a38eff76f39c87322d2d06bf703473719cbce06e094b85129cf286509a1959b02eefd722eb1d0d1eaeadcaac30656fc0938e88236bb72f0f4909d41bda521cf82a9519e1020d38a0329dde8aa242aac594c677bdb24a89ddc6a33"}}, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100bc141440080002007f0020110c00028005000100000000001c002280080003400000000008000177f2267a000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000"], 0x80}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x7)

01:08:46 executing program 4:
pipe(&(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0)

01:08:46 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700000085980904e4ff11070103000905010200ffe000"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_clone(0x40224400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x572, 0xcb01, 0x97f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc1, 0x63, 0xa1}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

01:08:46 executing program 2:
syz_usb_connect$cdc_ecm(0x2, 0x51, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x6c4}, [@acm={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x6}}}}}]}}]}}, 0x0)

01:08:46 executing program 0:
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000140), 0x8)

01:08:46 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0)
getsockname$packet(r0, 0x0, 0x0)

01:08:46 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000051c0)=[{{&(0x7f0000000780)=@ll, 0x80, &(0x7f0000002dc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x1, &(0x7f0000005240)={0x77359400})

01:08:46 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

01:08:46 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10}, 0x80)

01:08:46 executing program 5:
readlink(0x0, &(0x7f0000000280)=""/75, 0x4b)

01:08:46 executing program 4:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x140, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)

01:08:46 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000580), 0x4)

[  149.832194][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  150.001351][ T3693] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  150.040635][  T147] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  150.280897][  T147] usb 2-1: Using ep0 maxpacket: 8
[  150.390771][ T3693] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  150.411718][  T147] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  150.420068][  T147] usb 2-1: config 0 has an invalid interface number: 228 but max is -1
[  150.428583][  T147] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.439214][  T147] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  150.448376][  T147] usb 2-1: config 0 has no interface number 0
[  150.454661][  T147] usb 2-1: config 0 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  150.466492][  T147] usb 2-1: config 0 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  150.476964][  T147] usb 2-1: config 0 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17
01:08:47 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x884, 0xffffffffffffffff, 0x2}, 0x48)

01:08:47 executing program 5:
socketpair(0x9, 0x0, 0x0, &(0x7f0000000400))

[  150.490658][  T147] usb 2-1: config 0 interface 228 has no altsetting 0
[  150.560753][ T3693] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  150.569872][ T3693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.579104][ T3693] usb 3-1: Product: syz
[  150.583501][ T3693] usb 3-1: Manufacturer: syz
[  150.588743][ T3693] usb 3-1: SerialNumber: syz
[  150.610806][ T4144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  150.618065][ T4144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  150.625451][  T147] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  150.631650][ T3693] cdc_ether: probe of 3-1:1.0 failed with error -22
[  150.634526][  T147] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  150.649315][  T147] usb 2-1: Product: syz
[  150.654074][  T147] usb 2-1: SerialNumber: syz
[  150.659371][  T147] usb 2-1: config 0 descriptor??
[  150.713435][  T147] hub 2-1:0.228: bad descriptor, ignoring hub
[  150.719540][  T147] hub: probe of 2-1:0.228 failed with error -5
[  150.834849][ T3693] usb 3-1: USB disconnect, device number 7
[  151.518621][ T4167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.528237][ T4167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
01:08:49 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:49 executing program 4:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}})

01:08:49 executing program 0:
write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_clone(0x41082000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="522bb5cf56d83c747a")
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, {{0xc5, 0x0, 0x2, r0}}}, 0x28)

01:08:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000003900000101000000000600007f000600002fbad10ffdffffffee000001000000000014000000000009aafee7000000006f0000000a"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x186, 0x0, 0xb7a}]})

01:08:49 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x570, 0x118, 0x328, 0x450, 0x450, 0x0, 0x690, 0x690, 0x690, 0x690, 0x690, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'wg2\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev, [], [], 'ip6tnl0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)

01:08:49 executing program 2:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})

01:08:49 executing program 3:
clock_gettime(0x0, &(0x7f0000001700))
clock_gettime(0x7, &(0x7f0000001780))

01:08:49 executing program 1:
ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000000))
pipe(&(0x7f0000000100))

01:08:49 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae6a, &(0x7f0000000040)={0xffff9ee2})

01:08:49 executing program 3:
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0xcf, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xe2, 0x7, 0xf8, 0x40, 0x4}, 0x88, &(0x7f0000000100)={0x5, 0xf, 0x88, 0x1, [@generic={0x83, 0x10, 0x3, "bd25eaab57bb2cd2a08b125b7d707747f21b0509ff959eaa1af69b08e1cf18bb9fd803ddca2e2b0db4e45a5e244fe84c97d621126f0beebf59640156789a3b1f7f85ad83fed8889306653310e0720fcfd9e9deac646101e55450f965bf6a8f85f2cd173264b508b96c7445d721377773c994c7454a5adbbb413bf35843945c0a"}]}, 0x4, [{0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x140c}}, {0x0, 0x0}, {0x2, &(0x7f0000000480)=@string={0x2}}]})

[  152.833122][ T3689] usb 2-1: USB disconnect, device number 6
01:08:49 executing program 0:
timer_settime(0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00')
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000540)={0x0, 0x3, 0x7f, 0x0, 0x0, "5d7877234bc51a40a47816fb07ca26b5cb67b5"})

01:08:49 executing program 0:
lsetxattr$trusted_overlay_nlink(&(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0, 0x0)

01:08:49 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  152.876308][ T4178] kvm [4176]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0xb7a
[  153.010702][ T3693] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  153.020688][ T3692] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  153.120732][    T7] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  153.251114][ T3693] usb 5-1: Using ep0 maxpacket: 32
[  153.270764][ T3692] usb 3-1: Using ep0 maxpacket: 32
[  153.450720][ T3693] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  153.450813][ T3692] usb 3-1: unable to get BOS descriptor or descriptor too short
[  153.520818][    T7] usb 4-1: not running at top speed; connect to a high speed hub
[  153.571824][ T3692] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  153.605252][    T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  153.615045][    T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  153.625970][    T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  153.642036][ T3693] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  153.651409][ T3693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.659423][ T3693] usb 5-1: Product: syz
[  153.664632][ T3693] usb 5-1: Manufacturer: syz
[  153.669275][ T3693] usb 5-1: SerialNumber: syz
[  153.711845][ T3693] cdc_ether: probe of 5-1:1.0 failed with error -22
[  153.751012][ T3692] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  153.760079][ T3692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.768446][ T3692] usb 3-1: Product: syz
[  153.772913][ T3692] usb 3-1: Manufacturer: syz
[  153.777497][ T3692] usb 3-1: SerialNumber: syz
[  153.821321][ T3692] cdc_ether: probe of 3-1:1.0 failed with error -22
[  153.870728][    T7] usb 4-1: string descriptor 0 read error: -22
[  153.876982][    T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  153.886561][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.912939][ T3692] usb 5-1: USB disconnect, device number 5
[  153.931457][    T7] cdc_ether: probe of 4-1:1.0 failed with error -22
[  154.022675][ T3690] usb 3-1: USB disconnect, device number 8
[  154.132759][    T7] usb 4-1: USB disconnect, device number 6
01:08:50 executing program 4:
modify_ldt$write2(0x11, &(0x7f0000000180), 0x10)

01:08:50 executing program 0:
syz_clone(0x100880, 0x0, 0x0, 0x0, 0x0, 0x0)

01:08:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae6a, &(0x7f0000000040)={0xffff9ee2})

01:08:50 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)

01:08:51 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2000000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000002200)=@file={0x0, './file0\x00'}, 0x6e)

01:08:51 executing program 5:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff)

01:08:51 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'})

01:08:51 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f00000051c0)=[{{&(0x7f0000000780)=@ll, 0x80, &(0x7f0000002dc0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x1, &(0x7f0000005240)={0x77359400})

01:08:51 executing program 3:
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xf0, 0x0, 0x80}}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@generic={0xa, 0x10, 0x3, "bd25eaab57bb2c"}]}})

01:08:51 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae6a, &(0x7f0000000040)={0xffff9ee2})

01:08:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000003900000101000000000600007f000600002fbad10ffdffffffee000001000000000014000000000009aafee7000000006f0000000a"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x390, 0x0, 0xb7a}]})

01:08:51 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700000085980904e4ff"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

01:08:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000003900000101"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x480}]})

01:08:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000003900000101"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x480}]})

01:08:51 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae6a, &(0x7f0000000040)={0xffff9ee2})

01:08:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000003900000101"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x480}]})

[  154.920658][ T3690] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  154.970898][ T3689] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  155.170626][ T3690] usb 1-1: Using ep0 maxpacket: 8
[  155.300829][ T3690] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[  155.309184][ T3690] usb 1-1: config 0 has an invalid interface number: 228 but max is -1
[  155.317525][ T3690] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.327790][ T3690] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  155.336718][ T3690] usb 1-1: config 0 has no interface number 0
[  155.342888][ T3690] usb 1-1: config 0 interface 228 has no altsetting 0
01:08:51 executing program 2:
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x80, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x6}}}}}]}}]}}, 0x0)

01:08:51 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000003900000101000000000600007f000600002fbad10ffdffffffee000001000000000014000000000009aafee7000000006f0000000a"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x390, 0x0, 0xb7a}]})

01:08:51 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:51 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000003900000101"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x480}]})

[  155.400978][ T3689] usb 4-1: not running at top speed; connect to a high speed hub
[  155.460772][ T3690] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  155.475338][ T3690] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  155.483747][ T3689] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  155.500632][ T3689] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  155.511779][ T3690] usb 1-1: Product: syz
[  155.515958][ T3690] usb 1-1: SerialNumber: syz
[  155.522711][ T3689] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  155.536555][ T3690] usb 1-1: config 0 descriptor??
[  155.581116][ T3690] hub 1-1:0.228: bad descriptor, ignoring hub
[  155.587226][ T3690] hub: probe of 1-1:0.228 failed with error -5
[  155.730786][ T3689] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  155.739950][ T3689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.748042][ T3689] usb 4-1: Product: syz
[  155.752273][ T3689] usb 4-1: Manufacturer: syz
[  155.756893][ T3689] usb 4-1: SerialNumber: syz
[  155.770697][ T3688] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  155.780922][ T4236] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  155.788156][ T4236] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  156.010874][ T3689] cdc_ether: probe of 4-1:1.0 failed with error -71
[  156.019803][ T3689] usb 4-1: USB disconnect, device number 7
[  156.130745][ T3688] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  156.140665][ T3688] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  156.151721][ T3688] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.320867][ T3688] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  156.333041][ T3688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.341658][ T3688] usb 3-1: Product: syz
[  156.345866][ T3688] usb 3-1: Manufacturer: syz
[  156.350500][ T3688] usb 3-1: SerialNumber: syz
[  156.380876][ T4261] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  156.401461][ T3688] cdc_ether: probe of 3-1:1.0 failed with error -22
01:08:53 executing program 3:
bpf$PROG_LOAD_XDP(0x4, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:53 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0x0, 0x0, 0xa914988e}})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x2000}})

01:08:53 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, 0x0}, 0x80)

[  156.610040][ T3688] usb 3-1: USB disconnect, device number 9
01:08:54 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700000085980904e4ff"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

01:08:54 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000003900000101000000000600007f000600002fbad10ffdffffffee000001000000000014000000000009aafee7000000006f0000000a"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x390, 0x0, 0xb7a}]})

01:08:54 executing program 4:
syz_io_uring_setup(0x0, &(0x7f0000000e00), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000e80), &(0x7f0000000ec0))

01:08:54 executing program 3:
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
open$dir(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0)

01:08:54 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x7, &(0x7f0000000000)=@raw=[@map_fd, @kfunc, @alu, @cb_func, @ldst], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000003900000101000000000600007f000600002fbad10ffdffffffee000001000000000014000000000009aafee7000000006f0000000a"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x186}]})

01:08:54 executing program 4:
setxattr$trusted_overlay_upper(&(0x7f0000000c40)='./file1\x00', 0x0, 0x0, 0x0, 0x0)

01:08:54 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000fe000000fe"], &(0x7f0000000200)=""/223, 0x11f, 0xdf, 0x1}, 0x20)

01:08:54 executing program 3:
bpf$PROG_LOAD_XDP(0xe, 0x0, 0x0)

01:08:54 executing program 1:
sched_setscheduler(0x0, 0x0, &(0x7f0000000080))
r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

01:08:54 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)

01:08:54 executing program 3:
mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0xd03)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r1, 0x0)
preadv(r1, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000740)=""/240, 0xf0}], 0x1, 0x0, 0x0)

[  157.950808][  T147] usb 1-1: reset high-speed USB device number 3 using dummy_hcd
[  158.200625][  T147] usb 1-1: Using ep0 maxpacket: 8
[  158.901254][    T7] usb 1-1: USB disconnect, device number 3
01:08:55 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700000085980904e4ff"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

01:08:55 executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x3e6d7ae1)

01:08:55 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@raw=[@kfunc, @cb_func, @ldst], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

01:08:55 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000100), 0x4)

01:08:55 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)

01:08:55 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000003900000101000000000600007f000600002fbad10ffdffffffee000001000000000014000000000009aafee7000000006f0000000a"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x390, 0x0, 0xb7a}]})

01:08:55 executing program 1:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
socket$inet6_tcp(0xa, 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

01:08:55 executing program 3:
mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}})
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xee01, 0x0)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)={0x2b, 0x6, 0x0, {0x1, 0x0, 0x2, 0x0, ')$'}}, 0x2b)

01:08:55 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat6\x00')
preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/80, 0x50}], 0x1, 0x0, 0x0)

01:08:55 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b35, 0x0)

01:08:55 executing program 3:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x28, 0x0, 0x0, {{0xfffffffffffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$lock(r2, 0x5, &(0x7f0000000140))

01:08:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x48, 0x0, 0xb7a}]})

[  159.620680][    T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  159.880616][    T7] usb 1-1: Using ep0 maxpacket: 8
[  160.003370][    T7] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[  160.012445][    T7] usb 1-1: config 0 has an invalid interface number: 228 but max is -1
[  160.020988][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.031362][    T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  160.040226][    T7] usb 1-1: config 0 has no interface number 0
[  160.046478][    T7] usb 1-1: config 0 interface 228 has no altsetting 0
[  160.170969][    T7] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  160.180005][    T7] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  160.188689][    T7] usb 1-1: Product: syz
[  160.193197][    T7] usb 1-1: SerialNumber: syz
[  160.200977][    T7] usb 1-1: config 0 descriptor??
[  160.262307][    T7] hub 1-1:0.228: bad descriptor, ignoring hub
[  160.268417][    T7] hub: probe of 1-1:0.228 failed with error -5
01:08:58 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700000085980904e4ff"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

01:08:58 executing program 2:
syz_clone3(&(0x7f0000000200)={0x10020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58)

01:08:58 executing program 5:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4)
dup3(r1, r0, 0x0)

01:08:58 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0\x00', 0x400})

01:08:58 executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x3e6d7ae1)

01:08:58 executing program 3:
semctl$IPC_INFO(0x0, 0x4, 0x10, 0x0)

01:08:58 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r1 = socket$inet6(0xa, 0x80003, 0x6)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="3a9a", 0x2}], 0x1, 0x0, 0x0, 0x6c06}, 0x0)

01:08:58 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]})

01:08:58 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="bb", 0x1, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2)

01:08:58 executing program 3:
syz_emit_ethernet(0x65a, &(0x7f0000000180)={@broadcast, @remote, @val, {@ipv6}}, 0x0)

01:08:58 executing program 5:
r0 = socket(0x11, 0x800000003, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
dup2(r0, r1)

01:08:59 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x9}]}}, &(0x7f0000000600)=""/4096, 0x26, 0x1000, 0x1}, 0x20)

[  162.650613][    T7] usb 1-1: reset high-speed USB device number 4 using dummy_hcd
[  162.890656][    T7] usb 1-1: Using ep0 maxpacket: 8
[  163.592027][    T7] usb 1-1: USB disconnect, device number 4
01:09:00 executing program 4:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f00002c1000/0x4000)=nil, 0x4000})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4)
dup3(r1, r0, 0x0)

01:09:00 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x52d35ce30131f272})
ioctl$SIOCSIFHWADDR(r0, 0x400454cc, 0x0)

01:09:00 executing program 3:
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x2)

01:09:00 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0xfffffffe, 0x0)

01:09:00 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup3(r0, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0)

01:09:00 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0)

[  164.019515][ T4366] ==================================================================
[  164.027623][ T4366] BUG: KASAN: use-after-free in mas_next_nentry+0x9e4/0xab0
[  164.034941][ T4366] Read of size 8 at addr ffff8880774ff020 by task syz-executor.4/4366
[  164.043110][ T4366] 
[  164.045443][ T4366] CPU: 1 PID: 4366 Comm: syz-executor.4 Not tainted 6.1.0-rc2-syzkaller #0
[  164.054046][ T4366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
[  164.064113][ T4366] Call Trace:
01:09:00 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x25c3, 0x4)
sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0)

01:09:00 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
pwritev(r0, 0x0, 0x0, 0x0, 0x0)

01:09:00 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1, 0x0, &(0x7f0000000840)="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"})

01:09:00 executing program 5:
prlimit64(0x0, 0x0, 0x0, 0x0)
getpid()
r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

01:09:00 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ptype\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/89, 0x59}], 0x1, 0x1a, 0x0)

[  164.067406][ T4366]  <TASK>
[  164.070351][ T4366]  dump_stack_lvl+0xcd/0x134
[  164.074976][ T4366]  print_report+0x15e/0x45d
[  164.079503][ T4366]  ? __phys_addr+0xc4/0x140
[  164.084028][ T4366]  ? mas_next_nentry+0x9e4/0xab0
[  164.088991][ T4366]  kasan_report+0xbb/0x1f0
[  164.093446][ T4366]  ? mas_next_nentry+0x9e4/0xab0
[  164.098415][ T4366]  mas_next_nentry+0x9e4/0xab0
[  164.103211][ T4366]  mas_next+0x1fb/0xc90
[  164.107402][ T4366]  userfaultfd_ioctl+0x33c3/0x4200
[  164.112554][ T4366]  ? tomoyo_execute_permission+0x421/0x4a0
[  164.118423][ T4366]  ? userfaultfd_release+0x680/0x680
[  164.123753][ T4366]  ? lock_release+0x5cb/0x810
[  164.128457][ T4366]  ? __ct_user_exit+0xff/0x150
[  164.133246][ T4366]  ? lock_downgrade+0x6e0/0x6e0
[  164.138136][ T4366]  ? __fget_files+0x26a/0x440
[  164.142847][ T4366]  ? userfaultfd_release+0x680/0x680
[  164.148168][ T4366]  compat_ptr_ioctl+0x67/0x90
[  164.152873][ T4366]  ? vfs_fileattr_get+0xc0/0xc0
[  164.157752][ T4366]  __do_compat_sys_ioctl+0x1c7/0x290
[  164.163072][ T4366]  __do_fast_syscall_32+0x65/0xf0
01:09:00 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000100)=ANY=[], 0x90)

[  164.168130][ T4366]  do_fast_syscall_32+0x2f/0x70
[  164.173014][ T4366]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  164.179381][ T4366] RIP: 0023:0xf7ff1549
[  164.183468][ T4366] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  164.203101][ T4366] RSP: 002b:00000000f7fec5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  164.211532][ T4366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008010aa01
[  164.219528][ T4366] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000
[  164.227518][ T4366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  164.235508][ T4366] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  164.243495][ T4366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  164.251496][ T4366]  </TASK>
[  164.254529][ T4366] 
[  164.256856][ T4366] Allocated by task 4366:
[  164.261187][ T4366]  kasan_save_stack+0x1e/0x40
[  164.265899][ T4366]  kasan_set_track+0x21/0x30
[  164.270520][ T4366]  __kasan_slab_alloc+0x7e/0x80
[  164.275397][ T4366]  kmem_cache_alloc_bulk+0x3e9/0x830
[  164.280722][ T4366]  mas_alloc_nodes+0x309/0x810
[  164.285518][ T4366]  mas_preallocate+0x1b7/0x360
[  164.290309][ T4366]  __vma_adjust+0x18e/0x1ae0
[  164.294938][ T4366]  __split_vma+0x295/0x5c0
[  164.299383][ T4366]  split_vma+0x9f/0xe0
[  164.303480][ T4366]  userfaultfd_ioctl+0x3a8c/0x4200
[  164.308623][ T4366]  compat_ptr_ioctl+0x67/0x90
[  164.313324][ T4366]  __do_compat_sys_ioctl+0x1c7/0x290
[  164.318639][ T4366]  __do_fast_syscall_32+0x65/0xf0
[  164.323698][ T4366]  do_fast_syscall_32+0x2f/0x70
[  164.328580][ T4366]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  164.334934][ T4366] 
[  164.337243][ T4366] Freed by task 4366:
[  164.341200][ T4366]  kasan_save_stack+0x1e/0x40
[  164.345871][ T4366]  kasan_set_track+0x21/0x30
[  164.350449][ T4366]  kasan_save_free_info+0x2a/0x40
[  164.355456][ T4366]  ____kasan_slab_free+0x160/0x1c0
[  164.360562][ T4366]  slab_free_freelist_hook+0x8b/0x1c0
[  164.365945][ T4366]  kmem_cache_free_bulk.part.0+0x205/0x780
[  164.371740][ T4366]  mas_destroy+0x394/0x5c0
[  164.376142][ T4366]  mas_store_prealloc+0xec/0x150
[  164.381066][ T4366]  __vma_adjust+0x772/0x1ae0
[  164.385646][ T4366]  __split_vma+0x295/0x5c0
[  164.390048][ T4366]  split_vma+0x9f/0xe0
[  164.394106][ T4366]  userfaultfd_ioctl+0x3819/0x4200
[  164.399210][ T4366]  compat_ptr_ioctl+0x67/0x90
[  164.403880][ T4366]  __do_compat_sys_ioctl+0x1c7/0x290
[  164.409153][ T4366]  __do_fast_syscall_32+0x65/0xf0
[  164.414170][ T4366]  do_fast_syscall_32+0x2f/0x70
[  164.419012][ T4366]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  164.425333][ T4366] 
[  164.427641][ T4366] The buggy address belongs to the object at ffff8880774ff000
[  164.427641][ T4366]  which belongs to the cache maple_node of size 256
[  164.441589][ T4366] The buggy address is located 32 bytes inside of
[  164.441589][ T4366]  256-byte region [ffff8880774ff000, ffff8880774ff100)
[  164.454761][ T4366] 
[  164.457067][ T4366] The buggy address belongs to the physical page:
[  164.463454][ T4366] page:ffffea0001dd3f80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x774fe
[  164.473594][ T4366] head:ffffea0001dd3f80 order:1 compound_mapcount:0 compound_pincount:0
[  164.481903][ T4366] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  164.489873][ T4366] raw: 00fff00000010200 ffffea00005ef580 dead000000000002 ffff88801184fdc0
[  164.498441][ T4366] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  164.507002][ T4366] page dumped because: kasan: bad access detected
[  164.513391][ T4366] page_owner tracks the page as allocated
[  164.519085][ T4366] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52800(GFP_NOWAIT|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3317, tgid 3317 (dhcpcd-run-hook), ts 23870185556, free_ts 22463175237
[  164.538615][ T4366]  get_page_from_freelist+0x10b5/0x2d50
[  164.544161][ T4366]  __alloc_pages+0x1c7/0x5a0
[  164.548736][ T4366]  alloc_pages+0x1a6/0x270
[  164.553150][ T4366]  allocate_slab+0x213/0x300
[  164.557735][ T4366]  ___slab_alloc+0xa91/0x1400
[  164.562404][ T4366]  kmem_cache_alloc_bulk+0x28b/0x830
[  164.567677][ T4366]  mas_alloc_nodes+0x309/0x810
[  164.572430][ T4366]  mas_node_count_gfp+0x106/0x140
[  164.577446][ T4366]  mas_expected_entries+0x113/0x200
[  164.582645][ T4366]  dup_mmap+0x4ca/0x10b0
[  164.586880][ T4366]  dup_mm+0x91/0x370
[  164.590769][ T4366]  copy_process+0x3bc6/0x7190
[  164.595462][ T4366]  kernel_clone+0xe7/0x980
[  164.599866][ T4366]  __do_sys_clone+0xba/0x100
[  164.604531][ T4366]  do_syscall_64+0x35/0xb0
[  164.608946][ T4366]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  164.614855][ T4366] page last free stack trace:
[  164.619515][ T4366]  free_pcp_prepare+0x65c/0xd90
[  164.624360][ T4366]  free_unref_page+0x19/0x4d0
[  164.629019][ T4366]  __unfreeze_partials+0x17c/0x1a0
[  164.634119][ T4366]  qlist_free_all+0x6a/0x170
[  164.638702][ T4366]  kasan_quarantine_reduce+0x180/0x200
[  164.644162][ T4366]  __kasan_slab_alloc+0x62/0x80
[  164.649006][ T4366]  kmem_cache_alloc+0x2ac/0x3c0
[  164.653846][ T4366]  getname_flags.part.0+0x50/0x4f0
[  164.658954][ T4366]  getname_flags+0x9a/0xe0
[  164.663358][ T4366]  vfs_fstatat+0x73/0xb0
[  164.667590][ T4366]  __do_sys_newfstatat+0x94/0x120
[  164.672604][ T4366]  do_syscall_64+0x35/0xb0
[  164.677013][ T4366]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  164.682897][ T4366] 
[  164.685208][ T4366] Memory state around the buggy address:
[  164.690830][ T4366]  ffff8880774fef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  164.698890][ T4366]  ffff8880774fef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  164.706934][ T4366] >ffff8880774ff000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.714977][ T4366]                                ^
[  164.720077][ T4366]  ffff8880774ff080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.728144][ T4366]  ffff8880774ff100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  164.736183][ T4366] ==================================================================
[  164.751096][ T4366] Kernel panic - not syncing: panic_on_warn set ...
[  164.757711][ T4366] CPU: 1 PID: 4366 Comm: syz-executor.4 Not tainted 6.1.0-rc2-syzkaller #0
[  164.766320][ T4366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
[  164.776380][ T4366] Call Trace:
[  164.779646][ T4366]  <TASK>
[  164.782563][ T4366]  dump_stack_lvl+0xcd/0x134
[  164.787156][ T4366]  panic+0x2c8/0x622
[  164.791047][ T4366]  ? panic_print_sys_info.part.0+0x110/0x110
[  164.797023][ T4366]  ? preempt_schedule_common+0x59/0xc0
[  164.802489][ T4366]  ? preempt_schedule_thunk+0x16/0x18
[  164.807887][ T4366]  end_report.part.0+0x3f/0x7c
[  164.812641][ T4366]  ? mas_next_nentry+0x9e4/0xab0
[  164.817564][ T4366]  kasan_report.cold+0xa/0xf
[  164.822157][ T4366]  ? mas_next_nentry+0x9e4/0xab0
[  164.827108][ T4366]  mas_next_nentry+0x9e4/0xab0
[  164.831865][ T4366]  mas_next+0x1fb/0xc90
[  164.836010][ T4366]  userfaultfd_ioctl+0x33c3/0x4200
[  164.841125][ T4366]  ? tomoyo_execute_permission+0x421/0x4a0
[  164.846964][ T4366]  ? userfaultfd_release+0x680/0x680
[  164.852260][ T4366]  ? lock_release+0x5cb/0x810
[  164.856944][ T4366]  ? __ct_user_exit+0xff/0x150
[  164.861718][ T4366]  ? lock_downgrade+0x6e0/0x6e0
[  164.866576][ T4366]  ? __fget_files+0x26a/0x440
[  164.871272][ T4366]  ? userfaultfd_release+0x680/0x680
[  164.876573][ T4366]  compat_ptr_ioctl+0x67/0x90
[  164.881269][ T4366]  ? vfs_fileattr_get+0xc0/0xc0
[  164.886130][ T4366]  __do_compat_sys_ioctl+0x1c7/0x290
[  164.891434][ T4366]  __do_fast_syscall_32+0x65/0xf0
[  164.896506][ T4366]  do_fast_syscall_32+0x2f/0x70
[  164.901379][ T4366]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[  164.907727][ T4366] RIP: 0023:0xf7ff1549
[  164.911794][ T4366] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  164.931406][ T4366] RSP: 002b:00000000f7fec5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[  164.939823][ T4366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008010aa01
[  164.947797][ T4366] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000
[  164.955768][ T4366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  164.963738][ T4366] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  164.971709][ T4366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  164.979685][ T4366]  </TASK>
[  164.982877][ T4366] Kernel Offset: disabled
[  164.987191][ T4366] Rebooting in 86400 seconds..