DUID 00:04:a3:03:08:15:93:78:e3:1f:4c:1c:fb:56:e6:f5:4b:05
forked to background, child pid 4693
[   30.431348][ T4694] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.441149][ T4694] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.169' (ECDSA) to the list of known hosts.
2023/06/16 13:38:35 fuzzer started
2023/06/16 13:38:36 dialing manager at 10.128.0.169:30004
syzkaller login: [   56.362335][ T5023] cgroup: Unknown subsys name 'net'
[   56.469619][ T5023] cgroup: Unknown subsys name 'rlimit'
2023/06/16 13:38:39 syscalls: 3833
2023/06/16 13:38:39 code coverage: enabled
2023/06/16 13:38:39 comparison tracing: enabled
2023/06/16 13:38:39 extra coverage: enabled
2023/06/16 13:38:39 delay kcov mmap: enabled
2023/06/16 13:38:39 setuid sandbox: enabled
2023/06/16 13:38:39 namespace sandbox: enabled
2023/06/16 13:38:39 Android sandbox: /sys/fs/selinux/policy does not exist
2023/06/16 13:38:39 fault injection: enabled
2023/06/16 13:38:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2023/06/16 13:38:39 net packet injection: enabled
2023/06/16 13:38:39 net device setup: enabled
2023/06/16 13:38:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2023/06/16 13:38:39 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/06/16 13:38:39 NIC VF setup: PCI device 0000:00:11.0 is not available
2023/06/16 13:38:39 USB emulation: enabled
2023/06/16 13:38:39 hci packet injection: enabled
2023/06/16 13:38:39 wifi device emulation: enabled
2023/06/16 13:38:39 802.15.4 emulation: enabled
2023/06/16 13:38:39 swap file: enabled
2023/06/16 13:38:39 fetching corpus: 0, signal 0/2000 (executing program)
[   57.790723][ T5023] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   57.804433][ T5023] syz-executor (5023) used greatest stack depth: 22616 bytes left
2023/06/16 13:38:39 fetching corpus: 50, signal 48003/51788 (executing program)
2023/06/16 13:38:39 fetching corpus: 100, signal 68801/74299 (executing program)
2023/06/16 13:38:39 fetching corpus: 150, signal 84155/91364 (executing program)
2023/06/16 13:38:40 fetching corpus: 200, signal 99860/108715 (executing program)
2023/06/16 13:38:40 fetching corpus: 250, signal 111998/122454 (executing program)
2023/06/16 13:38:40 fetching corpus: 300, signal 125647/137606 (executing program)
2023/06/16 13:38:40 fetching corpus: 350, signal 132842/146386 (executing program)
2023/06/16 13:38:40 fetching corpus: 400, signal 139517/154608 (executing program)
2023/06/16 13:38:40 fetching corpus: 450, signal 152880/169295 (executing program)
2023/06/16 13:38:41 fetching corpus: 500, signal 161135/178952 (executing program)
2023/06/16 13:38:41 fetching corpus: 550, signal 166968/186210 (executing program)
2023/06/16 13:38:41 fetching corpus: 600, signal 172944/193584 (executing program)
2023/06/16 13:38:41 fetching corpus: 650, signal 177401/199435 (executing program)
2023/06/16 13:38:41 fetching corpus: 700, signal 184001/207359 (executing program)
2023/06/16 13:38:41 fetching corpus: 750, signal 188644/213359 (executing program)
2023/06/16 13:38:41 fetching corpus: 800, signal 194942/220907 (executing program)
2023/06/16 13:38:42 fetching corpus: 850, signal 199031/226374 (executing program)
2023/06/16 13:38:42 fetching corpus: 900, signal 203231/231910 (executing program)
2023/06/16 13:38:42 fetching corpus: 950, signal 206646/236693 (executing program)
2023/06/16 13:38:42 fetching corpus: 1000, signal 211432/242720 (executing program)
2023/06/16 13:38:42 fetching corpus: 1050, signal 215931/248497 (executing program)
2023/06/16 13:38:42 fetching corpus: 1100, signal 219266/253122 (executing program)
2023/06/16 13:38:42 fetching corpus: 1150, signal 222607/257718 (executing program)
2023/06/16 13:38:43 fetching corpus: 1200, signal 225717/262062 (executing program)
2023/06/16 13:38:43 fetching corpus: 1250, signal 228614/266247 (executing program)
2023/06/16 13:38:43 fetching corpus: 1300, signal 231669/270583 (executing program)
2023/06/16 13:38:43 fetching corpus: 1350, signal 237692/277674 (executing program)
2023/06/16 13:38:43 fetching corpus: 1400, signal 241270/282395 (executing program)
2023/06/16 13:38:44 fetching corpus: 1450, signal 244520/286823 (executing program)
2023/06/16 13:38:44 fetching corpus: 1500, signal 248053/291555 (executing program)
2023/06/16 13:38:44 fetching corpus: 1550, signal 250781/295471 (executing program)
2023/06/16 13:38:44 fetching corpus: 1600, signal 254639/300373 (executing program)
2023/06/16 13:38:44 fetching corpus: 1650, signal 258008/304856 (executing program)
2023/06/16 13:38:44 fetching corpus: 1700, signal 260928/308907 (executing program)
2023/06/16 13:38:45 fetching corpus: 1750, signal 264293/313337 (executing program)
2023/06/16 13:38:45 fetching corpus: 1800, signal 266666/316873 (executing program)
2023/06/16 13:38:45 fetching corpus: 1850, signal 268400/319838 (executing program)
2023/06/16 13:38:45 fetching corpus: 1900, signal 270996/323554 (executing program)
2023/06/16 13:38:45 fetching corpus: 1950, signal 273951/327532 (executing program)
2023/06/16 13:38:45 fetching corpus: 2000, signal 276345/330999 (executing program)
2023/06/16 13:38:46 fetching corpus: 2050, signal 278145/333942 (executing program)
2023/06/16 13:38:46 fetching corpus: 2100, signal 281883/338612 (executing program)
2023/06/16 13:38:46 fetching corpus: 2150, signal 284991/342692 (executing program)
2023/06/16 13:38:46 fetching corpus: 2200, signal 287568/346316 (executing program)
2023/06/16 13:38:46 fetching corpus: 2250, signal 289896/349711 (executing program)
2023/06/16 13:38:46 fetching corpus: 2300, signal 293232/353997 (executing program)
2023/06/16 13:38:47 fetching corpus: 2350, signal 295037/356876 (executing program)
2023/06/16 13:38:47 fetching corpus: 2400, signal 297036/359923 (executing program)
2023/06/16 13:38:47 fetching corpus: 2450, signal 299024/362978 (executing program)
2023/06/16 13:38:47 fetching corpus: 2500, signal 305410/369836 (executing program)
2023/06/16 13:38:47 fetching corpus: 2550, signal 308292/373603 (executing program)
2023/06/16 13:38:48 fetching corpus: 2600, signal 315542/381161 (executing program)
2023/06/16 13:38:48 fetching corpus: 2650, signal 317140/383784 (executing program)
2023/06/16 13:38:48 fetching corpus: 2700, signal 319500/387004 (executing program)
2023/06/16 13:38:48 fetching corpus: 2750, signal 320576/389160 (executing program)
2023/06/16 13:38:48 fetching corpus: 2800, signal 323923/393319 (executing program)
2023/06/16 13:38:48 fetching corpus: 2850, signal 326550/396806 (executing program)
2023/06/16 13:38:49 fetching corpus: 2900, signal 328304/399560 (executing program)
2023/06/16 13:38:49 fetching corpus: 2950, signal 332243/404068 (executing program)
2023/06/16 13:38:49 fetching corpus: 3000, signal 334054/406781 (executing program)
2023/06/16 13:38:49 fetching corpus: 3050, signal 336181/409823 (executing program)
2023/06/16 13:38:49 fetching corpus: 3100, signal 337485/412148 (executing program)
2023/06/16 13:38:49 fetching corpus: 3150, signal 339065/414587 (executing program)
2023/06/16 13:38:49 fetching corpus: 3200, signal 340387/416862 (executing program)
2023/06/16 13:38:50 fetching corpus: 3250, signal 341566/419009 (executing program)
2023/06/16 13:38:50 fetching corpus: 3300, signal 342930/421312 (executing program)
2023/06/16 13:38:50 fetching corpus: 3350, signal 344151/423489 (executing program)
2023/06/16 13:38:50 fetching corpus: 3400, signal 345958/426190 (executing program)
2023/06/16 13:38:50 fetching corpus: 3450, signal 347588/428682 (executing program)
2023/06/16 13:38:50 fetching corpus: 3500, signal 349901/431743 (executing program)
2023/06/16 13:38:51 fetching corpus: 3550, signal 357352/439079 (executing program)
2023/06/16 13:38:51 fetching corpus: 3600, signal 358984/441585 (executing program)
2023/06/16 13:38:51 fetching corpus: 3650, signal 360947/444302 (executing program)
2023/06/16 13:38:51 fetching corpus: 3700, signal 363077/447161 (executing program)
2023/06/16 13:38:51 fetching corpus: 3750, signal 365500/450225 (executing program)
2023/06/16 13:38:52 fetching corpus: 3800, signal 367220/452750 (executing program)
2023/06/16 13:38:52 fetching corpus: 3850, signal 368797/455117 (executing program)
2023/06/16 13:38:52 fetching corpus: 3900, signal 370488/457540 (executing program)
2023/06/16 13:38:52 fetching corpus: 3950, signal 372996/460632 (executing program)
2023/06/16 13:38:52 fetching corpus: 4000, signal 376350/464435 (executing program)
2023/06/16 13:38:53 fetching corpus: 4050, signal 378638/467316 (executing program)
[   71.405927][ T1228] ieee802154 phy0 wpan0: encryption failed: -22
[   71.412361][ T1228] ieee802154 phy1 wpan1: encryption failed: -22
2023/06/16 13:38:53 fetching corpus: 4100, signal 380216/469688 (executing program)
2023/06/16 13:38:53 fetching corpus: 4150, signal 381586/471860 (executing program)
2023/06/16 13:38:53 fetching corpus: 4200, signal 384414/475226 (executing program)
2023/06/16 13:38:53 fetching corpus: 4250, signal 385905/477454 (executing program)
2023/06/16 13:38:53 fetching corpus: 4300, signal 387737/479936 (executing program)
2023/06/16 13:38:54 fetching corpus: 4350, signal 389282/482244 (executing program)
2023/06/16 13:38:54 fetching corpus: 4400, signal 391301/484843 (executing program)
2023/06/16 13:38:54 fetching corpus: 4450, signal 392864/487119 (executing program)
2023/06/16 13:38:54 fetching corpus: 4500, signal 394656/489575 (executing program)
2023/06/16 13:38:54 fetching corpus: 4550, signal 395696/491444 (executing program)
2023/06/16 13:38:55 fetching corpus: 4600, signal 396993/493493 (executing program)
2023/06/16 13:38:55 fetching corpus: 4650, signal 398550/495709 (executing program)
2023/06/16 13:38:55 fetching corpus: 4700, signal 399790/497643 (executing program)
2023/06/16 13:38:55 fetching corpus: 4750, signal 401213/499752 (executing program)
2023/06/16 13:38:55 fetching corpus: 4800, signal 402834/502046 (executing program)
2023/06/16 13:38:55 fetching corpus: 4850, signal 404612/504391 (executing program)
2023/06/16 13:38:55 fetching corpus: 4900, signal 405870/506338 (executing program)
2023/06/16 13:38:56 fetching corpus: 4950, signal 407272/508404 (executing program)
2023/06/16 13:38:56 fetching corpus: 5000, signal 408190/510091 (executing program)
2023/06/16 13:38:56 fetching corpus: 5050, signal 410060/512508 (executing program)
2023/06/16 13:38:56 fetching corpus: 5100, signal 411421/514530 (executing program)
2023/06/16 13:38:56 fetching corpus: 5150, signal 413018/516722 (executing program)
2023/06/16 13:38:56 fetching corpus: 5200, signal 414211/518578 (executing program)
2023/06/16 13:38:57 fetching corpus: 5250, signal 415447/520461 (executing program)
2023/06/16 13:38:57 fetching corpus: 5300, signal 416971/522589 (executing program)
2023/06/16 13:38:57 fetching corpus: 5350, signal 418208/524528 (executing program)
2023/06/16 13:38:57 fetching corpus: 5400, signal 419199/526269 (executing program)
2023/06/16 13:38:57 fetching corpus: 5450, signal 420475/528173 (executing program)
2023/06/16 13:38:57 fetching corpus: 5500, signal 421499/529879 (executing program)
2023/06/16 13:38:58 fetching corpus: 5550, signal 423041/531948 (executing program)
2023/06/16 13:38:58 fetching corpus: 5600, signal 424202/533773 (executing program)
[   76.525344][  T775] cfg80211: failed to load regulatory.db
2023/06/16 13:38:58 fetching corpus: 5650, signal 425526/535705 (executing program)
2023/06/16 13:38:58 fetching corpus: 5700, signal 427289/537961 (executing program)
2023/06/16 13:38:58 fetching corpus: 5750, signal 428614/539892 (executing program)
2023/06/16 13:38:59 fetching corpus: 5800, signal 429948/541845 (executing program)
2023/06/16 13:38:59 fetching corpus: 5850, signal 432771/544845 (executing program)
2023/06/16 13:38:59 fetching corpus: 5900, signal 434689/547170 (executing program)
2023/06/16 13:38:59 fetching corpus: 5950, signal 436344/549223 (executing program)
2023/06/16 13:38:59 fetching corpus: 6000, signal 437071/550648 (executing program)
2023/06/16 13:38:59 fetching corpus: 6050, signal 438257/552388 (executing program)
2023/06/16 13:39:00 fetching corpus: 6100, signal 440036/554568 (executing program)
2023/06/16 13:39:00 fetching corpus: 6150, signal 441303/556394 (executing program)
2023/06/16 13:39:00 fetching corpus: 6200, signal 442391/558038 (executing program)
2023/06/16 13:39:00 fetching corpus: 6250, signal 443672/559888 (executing program)
2023/06/16 13:39:01 fetching corpus: 6300, signal 444903/561675 (executing program)
2023/06/16 13:39:01 fetching corpus: 6350, signal 445639/563111 (executing program)
2023/06/16 13:39:01 fetching corpus: 6400, signal 446695/564750 (executing program)
2023/06/16 13:39:01 fetching corpus: 6450, signal 448364/566787 (executing program)
2023/06/16 13:39:01 fetching corpus: 6500, signal 449210/568318 (executing program)
2023/06/16 13:39:01 fetching corpus: 6550, signal 450225/569896 (executing program)
2023/06/16 13:39:02 fetching corpus: 6599, signal 451727/571748 (executing program)
2023/06/16 13:39:02 fetching corpus: 6649, signal 452979/573463 (executing program)
2023/06/16 13:39:02 fetching corpus: 6699, signal 453696/574829 (executing program)
2023/06/16 13:39:02 fetching corpus: 6749, signal 454633/576363 (executing program)
2023/06/16 13:39:02 fetching corpus: 6799, signal 455602/577933 (executing program)
2023/06/16 13:39:02 fetching corpus: 6849, signal 456424/579405 (executing program)
2023/06/16 13:39:02 fetching corpus: 6899, signal 457211/580823 (executing program)
2023/06/16 13:39:03 fetching corpus: 6949, signal 458513/582543 (executing program)
2023/06/16 13:39:03 fetching corpus: 6999, signal 459398/583990 (executing program)
2023/06/16 13:39:03 fetching corpus: 7049, signal 460087/585303 (executing program)
2023/06/16 13:39:03 fetching corpus: 7099, signal 462135/587516 (executing program)
2023/06/16 13:39:03 fetching corpus: 7149, signal 463536/589294 (executing program)
2023/06/16 13:39:04 fetching corpus: 7199, signal 464599/590874 (executing program)
2023/06/16 13:39:04 fetching corpus: 7249, signal 465834/592518 (executing program)
2023/06/16 13:39:04 fetching corpus: 7299, signal 466859/594038 (executing program)
2023/06/16 13:39:04 fetching corpus: 7349, signal 467546/595323 (executing program)
2023/06/16 13:39:04 fetching corpus: 7399, signal 468102/596532 (executing program)
2023/06/16 13:39:04 fetching corpus: 7449, signal 468864/597883 (executing program)
2023/06/16 13:39:04 fetching corpus: 7499, signal 470220/599545 (executing program)
2023/06/16 13:39:05 fetching corpus: 7549, signal 471026/600888 (executing program)
2023/06/16 13:39:05 fetching corpus: 7599, signal 472738/602875 (executing program)
2023/06/16 13:39:05 fetching corpus: 7649, signal 473412/604102 (executing program)
2023/06/16 13:39:05 fetching corpus: 7699, signal 474332/605547 (executing program)
2023/06/16 13:39:05 fetching corpus: 7749, signal 475181/606929 (executing program)
2023/06/16 13:39:05 fetching corpus: 7799, signal 476160/608353 (executing program)
2023/06/16 13:39:06 fetching corpus: 7849, signal 477285/609894 (executing program)
2023/06/16 13:39:06 fetching corpus: 7899, signal 477976/611141 (executing program)
2023/06/16 13:39:06 fetching corpus: 7949, signal 478670/612395 (executing program)
2023/06/16 13:39:06 fetching corpus: 7999, signal 479837/613887 (executing program)
2023/06/16 13:39:06 fetching corpus: 8049, signal 480599/615185 (executing program)
2023/06/16 13:39:06 fetching corpus: 8099, signal 481356/616498 (executing program)
2023/06/16 13:39:06 fetching corpus: 8149, signal 482236/617840 (executing program)
2023/06/16 13:39:07 fetching corpus: 8199, signal 482966/619096 (executing program)
2023/06/16 13:39:07 fetching corpus: 8249, signal 483754/620401 (executing program)
2023/06/16 13:39:07 fetching corpus: 8299, signal 485699/622381 (executing program)
2023/06/16 13:39:07 fetching corpus: 8349, signal 486583/623719 (executing program)
2023/06/16 13:39:07 fetching corpus: 8399, signal 487651/625155 (executing program)
2023/06/16 13:39:07 fetching corpus: 8449, signal 488395/626418 (executing program)
2023/06/16 13:39:08 fetching corpus: 8499, signal 489085/627645 (executing program)
2023/06/16 13:39:08 fetching corpus: 8549, signal 490603/629336 (executing program)
2023/06/16 13:39:08 fetching corpus: 8599, signal 491343/630539 (executing program)
2023/06/16 13:39:08 fetching corpus: 8649, signal 492365/631946 (executing program)
2023/06/16 13:39:08 fetching corpus: 8699, signal 493249/633213 (executing program)
2023/06/16 13:39:08 fetching corpus: 8749, signal 493884/634391 (executing program)
2023/06/16 13:39:09 fetching corpus: 8799, signal 494526/635561 (executing program)
2023/06/16 13:39:09 fetching corpus: 8849, signal 495207/636780 (executing program)
2023/06/16 13:39:09 fetching corpus: 8899, signal 495925/637980 (executing program)
2023/06/16 13:39:09 fetching corpus: 8949, signal 497355/639565 (executing program)
2023/06/16 13:39:09 fetching corpus: 8999, signal 498150/640747 (executing program)
2023/06/16 13:39:09 fetching corpus: 9049, signal 498622/641771 (executing program)
2023/06/16 13:39:10 fetching corpus: 9099, signal 499436/642993 (executing program)
2023/06/16 13:39:10 fetching corpus: 9149, signal 500066/644077 (executing program)
2023/06/16 13:39:10 fetching corpus: 9199, signal 500903/645328 (executing program)
2023/06/16 13:39:10 fetching corpus: 9249, signal 501779/646604 (executing program)
2023/06/16 13:39:10 fetching corpus: 9299, signal 502479/647765 (executing program)
2023/06/16 13:39:10 fetching corpus: 9349, signal 502936/648772 (executing program)
2023/06/16 13:39:10 fetching corpus: 9399, signal 503693/649919 (executing program)
2023/06/16 13:39:11 fetching corpus: 9449, signal 505088/651421 (executing program)
2023/06/16 13:39:11 fetching corpus: 9499, signal 505614/652495 (executing program)
2023/06/16 13:39:11 fetching corpus: 9549, signal 506349/653673 (executing program)
2023/06/16 13:39:11 fetching corpus: 9599, signal 507130/654850 (executing program)
2023/06/16 13:39:11 fetching corpus: 9649, signal 508004/656071 (executing program)
2023/06/16 13:39:11 fetching corpus: 9699, signal 509272/657511 (executing program)
2023/06/16 13:39:12 fetching corpus: 9749, signal 510237/658783 (executing program)
2023/06/16 13:39:12 fetching corpus: 9799, signal 511062/660017 (executing program)
2023/06/16 13:39:12 fetching corpus: 9849, signal 512327/661448 (executing program)
2023/06/16 13:39:12 fetching corpus: 9899, signal 512973/662521 (executing program)
2023/06/16 13:39:12 fetching corpus: 9949, signal 513880/663755 (executing program)
2023/06/16 13:39:12 fetching corpus: 9999, signal 514546/664854 (executing program)
2023/06/16 13:39:13 fetching corpus: 10049, signal 515372/666006 (executing program)
2023/06/16 13:39:13 fetching corpus: 10099, signal 516098/667137 (executing program)
2023/06/16 13:39:13 fetching corpus: 10149, signal 517205/668496 (executing program)
2023/06/16 13:39:13 fetching corpus: 10199, signal 517767/669556 (executing program)
2023/06/16 13:39:13 fetching corpus: 10249, signal 518243/670519 (executing program)
2023/06/16 13:39:13 fetching corpus: 10299, signal 519062/671650 (executing program)
2023/06/16 13:39:14 fetching corpus: 10349, signal 519897/672743 (executing program)
2023/06/16 13:39:14 fetching corpus: 10399, signal 520542/673813 (executing program)
2023/06/16 13:39:14 fetching corpus: 10449, signal 521251/674900 (executing program)
2023/06/16 13:39:14 fetching corpus: 10499, signal 521982/676014 (executing program)
2023/06/16 13:39:15 fetching corpus: 10549, signal 522556/676995 (executing program)
2023/06/16 13:39:15 fetching corpus: 10599, signal 523133/678010 (executing program)
2023/06/16 13:39:15 fetching corpus: 10649, signal 523982/679147 (executing program)
2023/06/16 13:39:15 fetching corpus: 10699, signal 524966/680295 (executing program)
2023/06/16 13:39:15 fetching corpus: 10749, signal 525493/681256 (executing program)
2023/06/16 13:39:15 fetching corpus: 10799, signal 526806/682605 (executing program)
2023/06/16 13:39:15 fetching corpus: 10849, signal 527539/683700 (executing program)
2023/06/16 13:39:16 fetching corpus: 10899, signal 528132/684673 (executing program)
2023/06/16 13:39:16 fetching corpus: 10949, signal 528695/685634 (executing program)
2023/06/16 13:39:16 fetching corpus: 10999, signal 529370/686633 (executing program)
2023/06/16 13:39:16 fetching corpus: 11049, signal 530022/687658 (executing program)
2023/06/16 13:39:16 fetching corpus: 11099, signal 531134/688858 (executing program)
2023/06/16 13:39:16 fetching corpus: 11149, signal 532105/689994 (executing program)
2023/06/16 13:39:17 fetching corpus: 11199, signal 532869/691025 (executing program)
2023/06/16 13:39:17 fetching corpus: 11249, signal 533765/692124 (executing program)
2023/06/16 13:39:17 fetching corpus: 11299, signal 534450/693129 (executing program)
2023/06/16 13:39:17 fetching corpus: 11349, signal 535043/694125 (executing program)
2023/06/16 13:39:17 fetching corpus: 11399, signal 535884/695170 (executing program)
2023/06/16 13:39:17 fetching corpus: 11449, signal 536461/696099 (executing program)
2023/06/16 13:39:18 fetching corpus: 11499, signal 537808/697355 (executing program)
2023/06/16 13:39:18 fetching corpus: 11549, signal 538155/698251 (executing program)
2023/06/16 13:39:18 fetching corpus: 11599, signal 539021/699341 (executing program)
2023/06/16 13:39:18 fetching corpus: 11649, signal 539529/700204 (executing program)
2023/06/16 13:39:18 fetching corpus: 11699, signal 539947/701096 (executing program)
2023/06/16 13:39:18 fetching corpus: 11749, signal 540875/702153 (executing program)
2023/06/16 13:39:18 fetching corpus: 11799, signal 541775/703185 (executing program)
2023/06/16 13:39:19 fetching corpus: 11849, signal 542518/704166 (executing program)
2023/06/16 13:39:19 fetching corpus: 11899, signal 543095/705070 (executing program)
2023/06/16 13:39:19 fetching corpus: 11949, signal 543625/705979 (executing program)
2023/06/16 13:39:19 fetching corpus: 11999, signal 544367/706929 (executing program)
2023/06/16 13:39:19 fetching corpus: 12049, signal 545094/707906 (executing program)
2023/06/16 13:39:20 fetching corpus: 12099, signal 545873/708920 (executing program)
2023/06/16 13:39:20 fetching corpus: 12149, signal 546639/709884 (executing program)
2023/06/16 13:39:20 fetching corpus: 12199, signal 547287/710821 (executing program)
2023/06/16 13:39:20 fetching corpus: 12249, signal 547952/711697 (executing program)
2023/06/16 13:39:20 fetching corpus: 12299, signal 548665/712625 (executing program)
2023/06/16 13:39:21 fetching corpus: 12349, signal 549042/713444 (executing program)
2023/06/16 13:39:21 fetching corpus: 12399, signal 549752/714318 (executing program)
2023/06/16 13:39:21 fetching corpus: 12449, signal 550285/715209 (executing program)
2023/06/16 13:39:21 fetching corpus: 12499, signal 550719/716073 (executing program)
2023/06/16 13:39:21 fetching corpus: 12549, signal 551311/717004 (executing program)
2023/06/16 13:39:21 fetching corpus: 12599, signal 551909/717938 (executing program)
2023/06/16 13:39:21 fetching corpus: 12649, signal 552608/718885 (executing program)
2023/06/16 13:39:22 fetching corpus: 12699, signal 553071/719748 (executing program)
2023/06/16 13:39:22 fetching corpus: 12749, signal 553840/720663 (executing program)
2023/06/16 13:39:22 fetching corpus: 12799, signal 554446/721559 (executing program)
2023/06/16 13:39:22 fetching corpus: 12849, signal 555291/722506 (executing program)
2023/06/16 13:39:22 fetching corpus: 12899, signal 556652/723665 (executing program)
2023/06/16 13:39:22 fetching corpus: 12949, signal 557226/724552 (executing program)
2023/06/16 13:39:23 fetching corpus: 12999, signal 557756/725374 (executing program)
2023/06/16 13:39:23 fetching corpus: 13049, signal 558216/726200 (executing program)
2023/06/16 13:39:23 fetching corpus: 13099, signal 559090/727168 (executing program)
2023/06/16 13:39:23 fetching corpus: 13149, signal 559675/727999 (executing program)
2023/06/16 13:39:23 fetching corpus: 13199, signal 560071/728739 (executing program)
2023/06/16 13:39:23 fetching corpus: 13249, signal 560725/729608 (executing program)
2023/06/16 13:39:24 fetching corpus: 13299, signal 561266/730429 (executing program)
2023/06/16 13:39:24 fetching corpus: 13349, signal 561828/731270 (executing program)
2023/06/16 13:39:24 fetching corpus: 13399, signal 562635/732194 (executing program)
2023/06/16 13:39:24 fetching corpus: 13449, signal 563299/733020 (executing program)
2023/06/16 13:39:24 fetching corpus: 13499, signal 564266/734001 (executing program)
2023/06/16 13:39:25 fetching corpus: 13549, signal 564897/734817 (executing program)
2023/06/16 13:39:25 fetching corpus: 13599, signal 565409/735617 (executing program)
2023/06/16 13:39:25 fetching corpus: 13649, signal 566117/736495 (executing program)
2023/06/16 13:39:25 fetching corpus: 13699, signal 566562/737273 (executing program)
2023/06/16 13:39:25 fetching corpus: 13749, signal 566874/737999 (executing program)
2023/06/16 13:39:25 fetching corpus: 13799, signal 567691/738881 (executing program)
2023/06/16 13:39:26 fetching corpus: 13849, signal 568374/739720 (executing program)
2023/06/16 13:39:26 fetching corpus: 13899, signal 568841/740520 (executing program)
2023/06/16 13:39:26 fetching corpus: 13949, signal 569210/741233 (executing program)
2023/06/16 13:39:26 fetching corpus: 13999, signal 569851/742022 (executing program)
2023/06/16 13:39:26 fetching corpus: 14049, signal 570443/742819 (executing program)
2023/06/16 13:39:26 fetching corpus: 14099, signal 571045/743652 (executing program)
2023/06/16 13:39:26 fetching corpus: 14149, signal 571753/744481 (executing program)
2023/06/16 13:39:27 fetching corpus: 14199, signal 572334/745244 (executing program)
2023/06/16 13:39:27 fetching corpus: 14249, signal 572911/746042 (executing program)
2023/06/16 13:39:27 fetching corpus: 14299, signal 573503/746818 (executing program)
2023/06/16 13:39:27 fetching corpus: 14349, signal 574076/747597 (executing program)
2023/06/16 13:39:27 fetching corpus: 14399, signal 574523/748333 (executing program)
2023/06/16 13:39:28 fetching corpus: 14449, signal 575091/749109 (executing program)
2023/06/16 13:39:28 fetching corpus: 14499, signal 575744/749865 (executing program)
2023/06/16 13:39:28 fetching corpus: 14549, signal 576212/750575 (executing program)
2023/06/16 13:39:28 fetching corpus: 14599, signal 577429/751528 (executing program)
2023/06/16 13:39:28 fetching corpus: 14649, signal 577944/752268 (executing program)
2023/06/16 13:39:28 fetching corpus: 14699, signal 578387/753040 (executing program)
2023/06/16 13:39:28 fetching corpus: 14749, signal 578947/753786 (executing program)
2023/06/16 13:39:29 fetching corpus: 14799, signal 579471/754499 (executing program)
2023/06/16 13:39:29 fetching corpus: 14849, signal 580010/755213 (executing program)
2023/06/16 13:39:29 fetching corpus: 14899, signal 580388/755853 (executing program)
2023/06/16 13:39:29 fetching corpus: 14949, signal 581001/756589 (executing program)
2023/06/16 13:39:29 fetching corpus: 14999, signal 581528/757334 (executing program)
2023/06/16 13:39:29 fetching corpus: 15049, signal 582127/758090 (executing program)
2023/06/16 13:39:30 fetching corpus: 15099, signal 582470/758774 (executing program)
2023/06/16 13:39:30 fetching corpus: 15149, signal 583129/759500 (executing program)
2023/06/16 13:39:30 fetching corpus: 15199, signal 583700/760226 (executing program)
2023/06/16 13:39:30 fetching corpus: 15249, signal 584457/761000 (executing program)
2023/06/16 13:39:30 fetching corpus: 15299, signal 584933/761633 (executing program)
2023/06/16 13:39:30 fetching corpus: 15349, signal 585480/762390 (executing program)
2023/06/16 13:39:30 fetching corpus: 15399, signal 586160/763119 (executing program)
2023/06/16 13:39:31 fetching corpus: 15449, signal 586737/763832 (executing program)
2023/06/16 13:39:31 fetching corpus: 15499, signal 587153/764555 (executing program)
2023/06/16 13:39:31 fetching corpus: 15549, signal 587663/765214 (executing program)
2023/06/16 13:39:31 fetching corpus: 15599, signal 588264/765930 (executing program)
2023/06/16 13:39:31 fetching corpus: 15649, signal 588922/766660 (executing program)
2023/06/16 13:39:32 fetching corpus: 15699, signal 589428/767363 (executing program)
2023/06/16 13:39:32 fetching corpus: 15749, signal 589816/767999 (executing program)
2023/06/16 13:39:32 fetching corpus: 15799, signal 590289/768711 (executing program)
2023/06/16 13:39:32 fetching corpus: 15849, signal 590749/769399 (executing program)
2023/06/16 13:39:32 fetching corpus: 15899, signal 591250/770076 (executing program)
2023/06/16 13:39:32 fetching corpus: 15949, signal 591721/770744 (executing program)
2023/06/16 13:39:33 fetching corpus: 15999, signal 592232/771401 (executing program)
2023/06/16 13:39:33 fetching corpus: 16049, signal 592507/772018 (executing program)
2023/06/16 13:39:33 fetching corpus: 16099, signal 593040/772678 (executing program)
2023/06/16 13:39:33 fetching corpus: 16149, signal 593463/773311 (executing program)
2023/06/16 13:39:33 fetching corpus: 16199, signal 593787/773940 (executing program)
2023/06/16 13:39:33 fetching corpus: 16249, signal 594267/774608 (executing program)
2023/06/16 13:39:33 fetching corpus: 16299, signal 595223/775361 (executing program)
2023/06/16 13:39:34 fetching corpus: 16349, signal 595655/775984 (executing program)
2023/06/16 13:39:34 fetching corpus: 16399, signal 596117/776602 (executing program)
2023/06/16 13:39:34 fetching corpus: 16449, signal 596684/777250 (executing program)
2023/06/16 13:39:34 fetching corpus: 16499, signal 597003/777887 (executing program)
2023/06/16 13:39:34 fetching corpus: 16549, signal 597523/778513 (executing program)
2023/06/16 13:39:34 fetching corpus: 16599, signal 597906/779140 (executing program)
2023/06/16 13:39:35 fetching corpus: 16649, signal 598383/779747 (executing program)
2023/06/16 13:39:35 fetching corpus: 16699, signal 598967/780391 (executing program)
2023/06/16 13:39:35 fetching corpus: 16749, signal 599589/781061 (executing program)
2023/06/16 13:39:35 fetching corpus: 16799, signal 600102/781707 (executing program)
2023/06/16 13:39:35 fetching corpus: 16849, signal 600627/782317 (executing program)
2023/06/16 13:39:35 fetching corpus: 16899, signal 600947/782922 (executing program)
2023/06/16 13:39:36 fetching corpus: 16949, signal 601597/783580 (executing program)
2023/06/16 13:39:36 fetching corpus: 16999, signal 601894/784136 (executing program)
2023/06/16 13:39:36 fetching corpus: 17049, signal 602286/784720 (executing program)
2023/06/16 13:39:36 fetching corpus: 17099, signal 602715/785328 (executing program)
2023/06/16 13:39:36 fetching corpus: 17149, signal 603433/785946 (executing program)
2023/06/16 13:39:36 fetching corpus: 17199, signal 603963/786519 (executing program)
2023/06/16 13:39:37 fetching corpus: 17249, signal 604469/787128 (executing program)
2023/06/16 13:39:37 fetching corpus: 17299, signal 604837/787699 (executing program)
2023/06/16 13:39:37 fetching corpus: 17349, signal 605345/788281 (executing program)
2023/06/16 13:39:37 fetching corpus: 17399, signal 605747/788861 (executing program)
2023/06/16 13:39:37 fetching corpus: 17449, signal 606068/789439 (executing program)
2023/06/16 13:39:37 fetching corpus: 17499, signal 606529/790029 (executing program)
2023/06/16 13:39:38 fetching corpus: 17549, signal 606927/790593 (executing program)
2023/06/16 13:39:38 fetching corpus: 17599, signal 607377/791188 (executing program)
2023/06/16 13:39:38 fetching corpus: 17649, signal 607946/791750 (executing program)
2023/06/16 13:39:38 fetching corpus: 17699, signal 608445/792314 (executing program)
2023/06/16 13:39:38 fetching corpus: 17749, signal 608941/792922 (executing program)
2023/06/16 13:39:39 fetching corpus: 17799, signal 609327/793494 (executing program)
2023/06/16 13:39:39 fetching corpus: 17849, signal 609928/794087 (executing program)
2023/06/16 13:39:39 fetching corpus: 17899, signal 610356/794651 (executing program)
2023/06/16 13:39:39 fetching corpus: 17949, signal 610695/795194 (executing program)
2023/06/16 13:39:39 fetching corpus: 17999, signal 611240/795772 (executing program)
2023/06/16 13:39:39 fetching corpus: 18049, signal 611682/796314 (executing program)
2023/06/16 13:39:40 fetching corpus: 18099, signal 612802/796918 (executing program)
2023/06/16 13:39:40 fetching corpus: 18149, signal 613192/797456 (executing program)
2023/06/16 13:39:40 fetching corpus: 18199, signal 613587/797990 (executing program)
2023/06/16 13:39:40 fetching corpus: 18249, signal 614063/798548 (executing program)
2023/06/16 13:39:40 fetching corpus: 18299, signal 614459/799065 (executing program)
2023/06/16 13:39:40 fetching corpus: 18349, signal 614877/799603 (executing program)
2023/06/16 13:39:41 fetching corpus: 18399, signal 615235/800181 (executing program)
2023/06/16 13:39:41 fetching corpus: 18449, signal 615647/800731 (executing program)
2023/06/16 13:39:41 fetching corpus: 18499, signal 616142/801288 (executing program)
2023/06/16 13:39:41 fetching corpus: 18549, signal 616506/801823 (executing program)
2023/06/16 13:39:41 fetching corpus: 18599, signal 616846/802352 (executing program)
2023/06/16 13:39:41 fetching corpus: 18649, signal 617231/802896 (executing program)
2023/06/16 13:39:42 fetching corpus: 18699, signal 618119/803429 (executing program)
2023/06/16 13:39:42 fetching corpus: 18749, signal 618558/803952 (executing program)
2023/06/16 13:39:42 fetching corpus: 18799, signal 618991/804443 (executing program)
2023/06/16 13:39:42 fetching corpus: 18849, signal 619505/804930 (executing program)
2023/06/16 13:39:42 fetching corpus: 18899, signal 619900/805467 (executing program)
2023/06/16 13:39:42 fetching corpus: 18949, signal 620275/805947 (executing program)
2023/06/16 13:39:42 fetching corpus: 18999, signal 620531/806454 (executing program)
2023/06/16 13:39:43 fetching corpus: 19049, signal 620823/806968 (executing program)
2023/06/16 13:39:43 fetching corpus: 19099, signal 621143/807467 (executing program)
2023/06/16 13:39:43 fetching corpus: 19149, signal 621687/807986 (executing program)
2023/06/16 13:39:43 fetching corpus: 19199, signal 622076/808466 (executing program)
2023/06/16 13:39:43 fetching corpus: 19249, signal 622756/808998 (executing program)
2023/06/16 13:39:44 fetching corpus: 19299, signal 623642/809539 (executing program)
2023/06/16 13:39:44 fetching corpus: 19349, signal 624152/810046 (executing program)
2023/06/16 13:39:44 fetching corpus: 19399, signal 624761/810542 (executing program)
2023/06/16 13:39:44 fetching corpus: 19449, signal 626012/811070 (executing program)
2023/06/16 13:39:44 fetching corpus: 19499, signal 626470/811547 (executing program)
2023/06/16 13:39:44 fetching corpus: 19549, signal 626998/812049 (executing program)
2023/06/16 13:39:45 fetching corpus: 19599, signal 627382/812534 (executing program)
2023/06/16 13:39:45 fetching corpus: 19649, signal 627841/813043 (executing program)
2023/06/16 13:39:45 fetching corpus: 19699, signal 628474/813546 (executing program)
2023/06/16 13:39:45 fetching corpus: 19749, signal 628971/814037 (executing program)
2023/06/16 13:39:45 fetching corpus: 19799, signal 629499/814499 (executing program)
2023/06/16 13:39:45 fetching corpus: 19849, signal 629981/814987 (executing program)
2023/06/16 13:39:45 fetching corpus: 19899, signal 630636/815489 (executing program)
2023/06/16 13:39:46 fetching corpus: 19949, signal 631698/815987 (executing program)
2023/06/16 13:39:46 fetching corpus: 19999, signal 632008/816469 (executing program)
2023/06/16 13:39:46 fetching corpus: 20049, signal 632593/816921 (executing program)
2023/06/16 13:39:46 fetching corpus: 20099, signal 632926/817374 (executing program)
2023/06/16 13:39:46 fetching corpus: 20149, signal 633274/817844 (executing program)
2023/06/16 13:39:46 fetching corpus: 20199, signal 633863/818317 (executing program)
2023/06/16 13:39:47 fetching corpus: 20249, signal 634369/818785 (executing program)
2023/06/16 13:39:47 fetching corpus: 20299, signal 634908/819257 (executing program)
2023/06/16 13:39:47 fetching corpus: 20349, signal 635285/819687 (executing program)
2023/06/16 13:39:47 fetching corpus: 20399, signal 635886/820156 (executing program)
2023/06/16 13:39:47 fetching corpus: 20449, signal 636379/820590 (executing program)
2023/06/16 13:39:48 fetching corpus: 20499, signal 636808/820800 (executing program)
2023/06/16 13:39:48 fetching corpus: 20549, signal 637239/820800 (executing program)
2023/06/16 13:39:48 fetching corpus: 20599, signal 637587/820800 (executing program)
2023/06/16 13:39:48 fetching corpus: 20649, signal 637967/820800 (executing program)
2023/06/16 13:39:48 fetching corpus: 20699, signal 639030/820801 (executing program)
2023/06/16 13:39:49 fetching corpus: 20749, signal 639433/820801 (executing program)
2023/06/16 13:39:49 fetching corpus: 20799, signal 639798/820801 (executing program)
2023/06/16 13:39:49 fetching corpus: 20849, signal 640114/820801 (executing program)
2023/06/16 13:39:49 fetching corpus: 20899, signal 640532/820802 (executing program)
2023/06/16 13:39:49 fetching corpus: 20949, signal 640778/820802 (executing program)
2023/06/16 13:39:49 fetching corpus: 20999, signal 641311/820802 (executing program)
2023/06/16 13:39:50 fetching corpus: 21049, signal 641714/820802 (executing program)
2023/06/16 13:39:50 fetching corpus: 21099, signal 642178/820802 (executing program)
2023/06/16 13:39:50 fetching corpus: 21149, signal 642579/820802 (executing program)
2023/06/16 13:39:50 fetching corpus: 21199, signal 642924/820802 (executing program)
2023/06/16 13:39:50 fetching corpus: 21249, signal 643601/820802 (executing program)
2023/06/16 13:39:51 fetching corpus: 21299, signal 643915/820802 (executing program)
2023/06/16 13:39:51 fetching corpus: 21349, signal 644277/820802 (executing program)
2023/06/16 13:39:51 fetching corpus: 21399, signal 644690/820802 (executing program)
2023/06/16 13:39:51 fetching corpus: 21449, signal 644961/820802 (executing program)
2023/06/16 13:39:51 fetching corpus: 21499, signal 645348/820802 (executing program)
2023/06/16 13:39:51 fetching corpus: 21549, signal 645790/820802 (executing program)
2023/06/16 13:39:51 fetching corpus: 21599, signal 646105/820802 (executing program)
2023/06/16 13:39:51 fetching corpus: 21649, signal 646435/820802 (executing program)
2023/06/16 13:39:52 fetching corpus: 21699, signal 646768/820802 (executing program)
2023/06/16 13:39:52 fetching corpus: 21749, signal 647038/820802 (executing program)
2023/06/16 13:39:52 fetching corpus: 21799, signal 647344/820802 (executing program)
2023/06/16 13:39:52 fetching corpus: 21849, signal 647778/820802 (executing program)
2023/06/16 13:39:52 fetching corpus: 21899, signal 648143/820802 (executing program)
2023/06/16 13:39:52 fetching corpus: 21949, signal 648447/820802 (executing program)
2023/06/16 13:39:52 fetching corpus: 21999, signal 648786/820809 (executing program)
2023/06/16 13:39:53 fetching corpus: 22049, signal 649119/820809 (executing program)
2023/06/16 13:39:53 fetching corpus: 22099, signal 649365/820809 (executing program)
2023/06/16 13:39:53 fetching corpus: 22149, signal 649642/820809 (executing program)
2023/06/16 13:39:53 fetching corpus: 22199, signal 649954/820809 (executing program)
2023/06/16 13:39:53 fetching corpus: 22249, signal 650502/820809 (executing program)
2023/06/16 13:39:54 fetching corpus: 22299, signal 651682/820809 (executing program)
2023/06/16 13:39:54 fetching corpus: 22349, signal 652013/820809 (executing program)
2023/06/16 13:39:54 fetching corpus: 22399, signal 652687/820809 (executing program)
2023/06/16 13:39:54 fetching corpus: 22449, signal 653002/820809 (executing program)
[  132.845848][ T1228] ieee802154 phy0 wpan0: encryption failed: -22
[  132.852173][ T1228] ieee802154 phy1 wpan1: encryption failed: -22
2023/06/16 13:39:54 fetching corpus: 22499, signal 653323/820809 (executing program)
2023/06/16 13:39:54 fetching corpus: 22549, signal 653714/820809 (executing program)
2023/06/16 13:39:54 fetching corpus: 22599, signal 654247/820813 (executing program)
2023/06/16 13:39:55 fetching corpus: 22649, signal 654648/820813 (executing program)
2023/06/16 13:39:55 fetching corpus: 22699, signal 655106/820813 (executing program)
2023/06/16 13:39:55 fetching corpus: 22749, signal 655596/820813 (executing program)
2023/06/16 13:39:55 fetching corpus: 22799, signal 655989/820813 (executing program)
2023/06/16 13:39:55 fetching corpus: 22849, signal 656312/820813 (executing program)
2023/06/16 13:39:56 fetching corpus: 22899, signal 656893/820813 (executing program)
2023/06/16 13:39:56 fetching corpus: 22949, signal 657168/820813 (executing program)
2023/06/16 13:39:56 fetching corpus: 22999, signal 657718/820813 (executing program)
2023/06/16 13:39:56 fetching corpus: 23049, signal 658257/820813 (executing program)
2023/06/16 13:39:56 fetching corpus: 23099, signal 658619/820813 (executing program)
2023/06/16 13:39:56 fetching corpus: 23149, signal 658917/820813 (executing program)
2023/06/16 13:39:56 fetching corpus: 23199, signal 659652/820813 (executing program)
2023/06/16 13:39:57 fetching corpus: 23249, signal 659888/820813 (executing program)
2023/06/16 13:39:57 fetching corpus: 23299, signal 660261/820813 (executing program)
2023/06/16 13:39:57 fetching corpus: 23349, signal 660588/820813 (executing program)
2023/06/16 13:39:57 fetching corpus: 23399, signal 661251/820813 (executing program)
2023/06/16 13:39:57 fetching corpus: 23449, signal 661573/820813 (executing program)
2023/06/16 13:39:58 fetching corpus: 23499, signal 664228/820813 (executing program)
2023/06/16 13:39:58 fetching corpus: 23549, signal 664765/820813 (executing program)
2023/06/16 13:39:58 fetching corpus: 23599, signal 664975/820813 (executing program)
2023/06/16 13:39:58 fetching corpus: 23649, signal 665232/820813 (executing program)
2023/06/16 13:39:58 fetching corpus: 23699, signal 665669/820814 (executing program)
2023/06/16 13:39:59 fetching corpus: 23749, signal 666059/820814 (executing program)
2023/06/16 13:39:59 fetching corpus: 23799, signal 666416/820814 (executing program)
2023/06/16 13:39:59 fetching corpus: 23849, signal 666815/820814 (executing program)
2023/06/16 13:39:59 fetching corpus: 23899, signal 667119/820814 (executing program)
2023/06/16 13:39:59 fetching corpus: 23949, signal 667433/820814 (executing program)
2023/06/16 13:40:00 fetching corpus: 23999, signal 667805/820814 (executing program)
2023/06/16 13:40:00 fetching corpus: 24049, signal 668063/820814 (executing program)
2023/06/16 13:40:00 fetching corpus: 24099, signal 668534/820814 (executing program)
2023/06/16 13:40:00 fetching corpus: 24149, signal 668811/820814 (executing program)
2023/06/16 13:40:00 fetching corpus: 24199, signal 669211/820814 (executing program)
2023/06/16 13:40:00 fetching corpus: 24249, signal 669583/820814 (executing program)
2023/06/16 13:40:01 fetching corpus: 24299, signal 669925/820814 (executing program)
2023/06/16 13:40:01 fetching corpus: 24349, signal 670160/820814 (executing program)
2023/06/16 13:40:01 fetching corpus: 24399, signal 670506/820814 (executing program)
2023/06/16 13:40:01 fetching corpus: 24449, signal 670905/820814 (executing program)
2023/06/16 13:40:01 fetching corpus: 24499, signal 671458/820814 (executing program)
2023/06/16 13:40:02 fetching corpus: 24549, signal 671786/820814 (executing program)
2023/06/16 13:40:02 fetching corpus: 24599, signal 672149/820814 (executing program)
2023/06/16 13:40:02 fetching corpus: 24649, signal 672531/820814 (executing program)
2023/06/16 13:40:02 fetching corpus: 24699, signal 672827/820818 (executing program)
2023/06/16 13:40:02 fetching corpus: 24749, signal 673263/820818 (executing program)
2023/06/16 13:40:02 fetching corpus: 24799, signal 673528/820818 (executing program)
2023/06/16 13:40:02 fetching corpus: 24849, signal 673849/820818 (executing program)
2023/06/16 13:40:03 fetching corpus: 24899, signal 674101/820818 (executing program)
2023/06/16 13:40:03 fetching corpus: 24949, signal 674526/820818 (executing program)
2023/06/16 13:40:03 fetching corpus: 24999, signal 675081/820818 (executing program)
2023/06/16 13:40:03 fetching corpus: 25049, signal 675486/820818 (executing program)
2023/06/16 13:40:03 fetching corpus: 25099, signal 675981/820818 (executing program)
2023/06/16 13:40:03 fetching corpus: 25149, signal 676369/820818 (executing program)
2023/06/16 13:40:04 fetching corpus: 25199, signal 676913/820818 (executing program)
2023/06/16 13:40:04 fetching corpus: 25249, signal 677238/820818 (executing program)
2023/06/16 13:40:04 fetching corpus: 25299, signal 677691/820818 (executing program)
2023/06/16 13:40:04 fetching corpus: 25349, signal 677996/820818 (executing program)
2023/06/16 13:40:04 fetching corpus: 25399, signal 678517/820818 (executing program)
2023/06/16 13:40:04 fetching corpus: 25449, signal 678863/820818 (executing program)
2023/06/16 13:40:05 fetching corpus: 25499, signal 679275/820819 (executing program)
2023/06/16 13:40:05 fetching corpus: 25549, signal 679618/820819 (executing program)
2023/06/16 13:40:05 fetching corpus: 25599, signal 679832/820819 (executing program)
2023/06/16 13:40:05 fetching corpus: 25649, signal 680124/820819 (executing program)
2023/06/16 13:40:05 fetching corpus: 25699, signal 680467/820819 (executing program)
2023/06/16 13:40:06 fetching corpus: 25749, signal 680997/820819 (executing program)
2023/06/16 13:40:06 fetching corpus: 25799, signal 681286/820819 (executing program)
2023/06/16 13:40:06 fetching corpus: 25849, signal 681726/820819 (executing program)
2023/06/16 13:40:06 fetching corpus: 25899, signal 681949/820819 (executing program)
2023/06/16 13:40:06 fetching corpus: 25949, signal 682249/820819 (executing program)
2023/06/16 13:40:06 fetching corpus: 25999, signal 682513/820819 (executing program)
2023/06/16 13:40:06 fetching corpus: 26049, signal 682899/820819 (executing program)
2023/06/16 13:40:07 fetching corpus: 26099, signal 683237/820819 (executing program)
2023/06/16 13:40:07 fetching corpus: 26149, signal 683577/820819 (executing program)
2023/06/16 13:40:07 fetching corpus: 26199, signal 683983/820819 (executing program)
2023/06/16 13:40:07 fetching corpus: 26249, signal 684268/820819 (executing program)
2023/06/16 13:40:07 fetching corpus: 26299, signal 684537/820819 (executing program)
2023/06/16 13:40:08 fetching corpus: 26349, signal 684762/820819 (executing program)
2023/06/16 13:40:08 fetching corpus: 26399, signal 685139/820819 (executing program)
2023/06/16 13:40:08 fetching corpus: 26449, signal 685360/820819 (executing program)
2023/06/16 13:40:08 fetching corpus: 26499, signal 685690/820819 (executing program)
2023/06/16 13:40:08 fetching corpus: 26549, signal 685988/820819 (executing program)
2023/06/16 13:40:08 fetching corpus: 26599, signal 686301/820819 (executing program)
2023/06/16 13:40:08 fetching corpus: 26649, signal 686646/820819 (executing program)
2023/06/16 13:40:09 fetching corpus: 26699, signal 686872/820819 (executing program)
2023/06/16 13:40:09 fetching corpus: 26749, signal 687125/820819 (executing program)
2023/06/16 13:40:09 fetching corpus: 26799, signal 687393/820819 (executing program)
2023/06/16 13:40:09 fetching corpus: 26849, signal 687587/820819 (executing program)
2023/06/16 13:40:09 fetching corpus: 26899, signal 687971/820819 (executing program)
2023/06/16 13:40:09 fetching corpus: 26949, signal 688274/820819 (executing program)
2023/06/16 13:40:10 fetching corpus: 26999, signal 688660/820819 (executing program)
2023/06/16 13:40:10 fetching corpus: 27049, signal 689036/820819 (executing program)
2023/06/16 13:40:10 fetching corpus: 27099, signal 689719/820819 (executing program)
2023/06/16 13:40:10 fetching corpus: 27149, signal 690336/820819 (executing program)
2023/06/16 13:40:10 fetching corpus: 27199, signal 690759/820819 (executing program)
2023/06/16 13:40:11 fetching corpus: 27249, signal 691064/820820 (executing program)
2023/06/16 13:40:11 fetching corpus: 27299, signal 691535/820820 (executing program)
2023/06/16 13:40:11 fetching corpus: 27349, signal 691777/820820 (executing program)
2023/06/16 13:40:11 fetching corpus: 27399, signal 692091/820820 (executing program)
2023/06/16 13:40:11 fetching corpus: 27449, signal 692417/820820 (executing program)
2023/06/16 13:40:11 fetching corpus: 27499, signal 692686/820820 (executing program)
2023/06/16 13:40:12 fetching corpus: 27549, signal 693105/820820 (executing program)
2023/06/16 13:40:12 fetching corpus: 27599, signal 693432/820820 (executing program)
2023/06/16 13:40:12 fetching corpus: 27649, signal 693801/820820 (executing program)
2023/06/16 13:40:12 fetching corpus: 27699, signal 694122/820820 (executing program)
2023/06/16 13:40:12 fetching corpus: 27749, signal 694361/820820 (executing program)
2023/06/16 13:40:12 fetching corpus: 27799, signal 694661/820820 (executing program)
2023/06/16 13:40:12 fetching corpus: 27849, signal 694938/820820 (executing program)
2023/06/16 13:40:13 fetching corpus: 27899, signal 695331/820820 (executing program)
2023/06/16 13:40:13 fetching corpus: 27949, signal 695652/820820 (executing program)
2023/06/16 13:40:13 fetching corpus: 27999, signal 696221/820820 (executing program)
2023/06/16 13:40:13 fetching corpus: 28049, signal 696447/820820 (executing program)
2023/06/16 13:40:13 fetching corpus: 28099, signal 696850/820820 (executing program)
2023/06/16 13:40:14 fetching corpus: 28149, signal 697070/820820 (executing program)
2023/06/16 13:40:14 fetching corpus: 28199, signal 697440/820820 (executing program)
2023/06/16 13:40:14 fetching corpus: 28249, signal 697712/820820 (executing program)
2023/06/16 13:40:14 fetching corpus: 28299, signal 697951/820822 (executing program)
2023/06/16 13:40:14 fetching corpus: 28349, signal 698181/820822 (executing program)
2023/06/16 13:40:14 fetching corpus: 28399, signal 698658/820822 (executing program)
2023/06/16 13:40:14 fetching corpus: 28449, signal 699004/820822 (executing program)
2023/06/16 13:40:15 fetching corpus: 28499, signal 699390/820822 (executing program)
2023/06/16 13:40:15 fetching corpus: 28549, signal 699784/820822 (executing program)
2023/06/16 13:40:15 fetching corpus: 28599, signal 700275/820822 (executing program)
2023/06/16 13:40:15 fetching corpus: 28649, signal 700587/820822 (executing program)
2023/06/16 13:40:15 fetching corpus: 28699, signal 700999/820822 (executing program)
2023/06/16 13:40:16 fetching corpus: 28749, signal 701413/820822 (executing program)
2023/06/16 13:40:16 fetching corpus: 28799, signal 703316/820822 (executing program)
2023/06/16 13:40:16 fetching corpus: 28849, signal 703691/820822 (executing program)
2023/06/16 13:40:16 fetching corpus: 28899, signal 703937/820822 (executing program)
2023/06/16 13:40:16 fetching corpus: 28949, signal 704199/820822 (executing program)
2023/06/16 13:40:16 fetching corpus: 28999, signal 704433/820825 (executing program)
2023/06/16 13:40:16 fetching corpus: 29049, signal 704654/820825 (executing program)
2023/06/16 13:40:17 fetching corpus: 29099, signal 704888/820825 (executing program)
2023/06/16 13:40:17 fetching corpus: 29149, signal 705148/820825 (executing program)
2023/06/16 13:40:17 fetching corpus: 29199, signal 705584/820825 (executing program)
2023/06/16 13:40:17 fetching corpus: 29249, signal 705995/820825 (executing program)
2023/06/16 13:40:17 fetching corpus: 29299, signal 706303/820825 (executing program)
2023/06/16 13:40:17 fetching corpus: 29349, signal 706709/820825 (executing program)
2023/06/16 13:40:17 fetching corpus: 29399, signal 706905/820825 (executing program)
2023/06/16 13:40:18 fetching corpus: 29449, signal 707271/820825 (executing program)
2023/06/16 13:40:18 fetching corpus: 29499, signal 707535/820825 (executing program)
2023/06/16 13:40:18 fetching corpus: 29549, signal 707917/820825 (executing program)
2023/06/16 13:40:18 fetching corpus: 29599, signal 708296/820825 (executing program)
2023/06/16 13:40:18 fetching corpus: 29649, signal 708523/820825 (executing program)
2023/06/16 13:40:18 fetching corpus: 29699, signal 708789/820825 (executing program)
2023/06/16 13:40:18 fetching corpus: 29749, signal 709013/820825 (executing program)
2023/06/16 13:40:19 fetching corpus: 29799, signal 709271/820825 (executing program)
2023/06/16 13:40:19 fetching corpus: 29849, signal 709568/820825 (executing program)
2023/06/16 13:40:19 fetching corpus: 29899, signal 709790/820825 (executing program)
2023/06/16 13:40:19 fetching corpus: 29949, signal 710109/820825 (executing program)
2023/06/16 13:40:19 fetching corpus: 29999, signal 710357/820825 (executing program)
2023/06/16 13:40:19 fetching corpus: 30049, signal 710640/820825 (executing program)
2023/06/16 13:40:20 fetching corpus: 30099, signal 710974/820825 (executing program)
2023/06/16 13:40:20 fetching corpus: 30149, signal 711281/820825 (executing program)
2023/06/16 13:40:20 fetching corpus: 30199, signal 711642/820825 (executing program)
2023/06/16 13:40:20 fetching corpus: 30249, signal 711894/820825 (executing program)
2023/06/16 13:40:20 fetching corpus: 30299, signal 712223/820825 (executing program)
2023/06/16 13:40:21 fetching corpus: 30349, signal 712472/820825 (executing program)
2023/06/16 13:40:21 fetching corpus: 30399, signal 712741/820825 (executing program)
2023/06/16 13:40:21 fetching corpus: 30449, signal 713112/820826 (executing program)
2023/06/16 13:40:21 fetching corpus: 30499, signal 713424/820826 (executing program)
2023/06/16 13:40:21 fetching corpus: 30549, signal 713681/820826 (executing program)
2023/06/16 13:40:21 fetching corpus: 30599, signal 713939/820826 (executing program)
2023/06/16 13:40:21 fetching corpus: 30649, signal 714187/820826 (executing program)
2023/06/16 13:40:22 fetching corpus: 30699, signal 714519/820828 (executing program)
2023/06/16 13:40:22 fetching corpus: 30749, signal 714931/820828 (executing program)
2023/06/16 13:40:22 fetching corpus: 30799, signal 715709/820828 (executing program)
2023/06/16 13:40:22 fetching corpus: 30849, signal 715893/820828 (executing program)
2023/06/16 13:40:22 fetching corpus: 30899, signal 716115/820828 (executing program)
2023/06/16 13:40:22 fetching corpus: 30949, signal 716432/820828 (executing program)
2023/06/16 13:40:23 fetching corpus: 30999, signal 716832/820828 (executing program)
2023/06/16 13:40:23 fetching corpus: 31049, signal 717130/820828 (executing program)
2023/06/16 13:40:23 fetching corpus: 31099, signal 717432/820829 (executing program)
2023/06/16 13:40:23 fetching corpus: 31149, signal 718010/820829 (executing program)
2023/06/16 13:40:23 fetching corpus: 31199, signal 718258/820829 (executing program)
2023/06/16 13:40:23 fetching corpus: 31249, signal 718612/820829 (executing program)
2023/06/16 13:40:24 fetching corpus: 31299, signal 718985/820829 (executing program)
2023/06/16 13:40:24 fetching corpus: 31349, signal 720757/820833 (executing program)
2023/06/16 13:40:24 fetching corpus: 31399, signal 721044/820833 (executing program)
2023/06/16 13:40:24 fetching corpus: 31449, signal 721329/820833 (executing program)
2023/06/16 13:40:24 fetching corpus: 31499, signal 721676/820833 (executing program)
2023/06/16 13:40:24 fetching corpus: 31549, signal 722054/820833 (executing program)
2023/06/16 13:40:24 fetching corpus: 31599, signal 722269/820833 (executing program)
2023/06/16 13:40:25 fetching corpus: 31649, signal 722586/820833 (executing program)
2023/06/16 13:40:25 fetching corpus: 31699, signal 722969/820833 (executing program)
2023/06/16 13:40:25 fetching corpus: 31749, signal 723169/820833 (executing program)
2023/06/16 13:40:25 fetching corpus: 31799, signal 723496/820833 (executing program)
2023/06/16 13:40:25 fetching corpus: 31849, signal 723772/820833 (executing program)
2023/06/16 13:40:25 fetching corpus: 31899, signal 724013/820833 (executing program)
2023/06/16 13:40:26 fetching corpus: 31949, signal 724223/820833 (executing program)
2023/06/16 13:40:26 fetching corpus: 31999, signal 724547/820833 (executing program)
2023/06/16 13:40:26 fetching corpus: 32049, signal 724793/820833 (executing program)
2023/06/16 13:40:26 fetching corpus: 32099, signal 725044/820833 (executing program)
2023/06/16 13:40:26 fetching corpus: 32149, signal 725314/820833 (executing program)
2023/06/16 13:40:26 fetching corpus: 32199, signal 725621/820833 (executing program)
2023/06/16 13:40:27 fetching corpus: 32249, signal 725865/820833 (executing program)
2023/06/16 13:40:27 fetching corpus: 32299, signal 726138/820833 (executing program)
2023/06/16 13:40:27 fetching corpus: 32349, signal 726399/820833 (executing program)
2023/06/16 13:40:27 fetching corpus: 32399, signal 726623/820833 (executing program)
2023/06/16 13:40:28 fetching corpus: 32449, signal 726928/820833 (executing program)
2023/06/16 13:40:28 fetching corpus: 32499, signal 727186/820833 (executing program)
2023/06/16 13:40:28 fetching corpus: 32549, signal 727574/820833 (executing program)
2023/06/16 13:40:28 fetching corpus: 32599, signal 727901/820833 (executing program)
2023/06/16 13:40:28 fetching corpus: 32649, signal 728161/820834 (executing program)
2023/06/16 13:40:28 fetching corpus: 32699, signal 728406/820835 (executing program)
2023/06/16 13:40:29 fetching corpus: 32749, signal 728615/820835 (executing program)
2023/06/16 13:40:29 fetching corpus: 32799, signal 728892/820836 (executing program)
2023/06/16 13:40:29 fetching corpus: 32849, signal 729069/820836 (executing program)
2023/06/16 13:40:29 fetching corpus: 32899, signal 729341/820836 (executing program)
2023/06/16 13:40:29 fetching corpus: 32949, signal 729607/820836 (executing program)
2023/06/16 13:40:29 fetching corpus: 32999, signal 729756/820836 (executing program)
2023/06/16 13:40:29 fetching corpus: 33049, signal 729972/820836 (executing program)
2023/06/16 13:40:30 fetching corpus: 33099, signal 730391/820836 (executing program)
2023/06/16 13:40:30 fetching corpus: 33149, signal 730714/820836 (executing program)
2023/06/16 13:40:30 fetching corpus: 33199, signal 731015/820836 (executing program)
2023/06/16 13:40:30 fetching corpus: 33249, signal 731224/820836 (executing program)
2023/06/16 13:40:30 fetching corpus: 33299, signal 731507/820836 (executing program)
2023/06/16 13:40:31 fetching corpus: 33349, signal 731668/820836 (executing program)
2023/06/16 13:40:31 fetching corpus: 33399, signal 731890/820836 (executing program)
2023/06/16 13:40:31 fetching corpus: 33449, signal 732199/820836 (executing program)
2023/06/16 13:40:31 fetching corpus: 33499, signal 732422/820836 (executing program)
2023/06/16 13:40:31 fetching corpus: 33549, signal 732646/820836 (executing program)
2023/06/16 13:40:31 fetching corpus: 33599, signal 732942/820836 (executing program)
2023/06/16 13:40:32 fetching corpus: 33649, signal 733272/820842 (executing program)
2023/06/16 13:40:32 fetching corpus: 33699, signal 733461/820842 (executing program)
2023/06/16 13:40:32 fetching corpus: 33749, signal 733683/820842 (executing program)
2023/06/16 13:40:32 fetching corpus: 33799, signal 733942/820842 (executing program)
2023/06/16 13:40:32 fetching corpus: 33849, signal 734198/820842 (executing program)
2023/06/16 13:40:32 fetching corpus: 33899, signal 734364/820842 (executing program)
2023/06/16 13:40:32 fetching corpus: 33949, signal 734575/820842 (executing program)
2023/06/16 13:40:33 fetching corpus: 33999, signal 734833/820842 (executing program)
2023/06/16 13:40:33 fetching corpus: 34049, signal 735076/820842 (executing program)
2023/06/16 13:40:33 fetching corpus: 34099, signal 735277/820842 (executing program)
2023/06/16 13:40:33 fetching corpus: 34149, signal 735492/820842 (executing program)
2023/06/16 13:40:33 fetching corpus: 34199, signal 735824/820842 (executing program)
2023/06/16 13:40:33 fetching corpus: 34249, signal 736021/820842 (executing program)
2023/06/16 13:40:34 fetching corpus: 34299, signal 736172/820842 (executing program)
2023/06/16 13:40:34 fetching corpus: 34349, signal 736395/820845 (executing program)
2023/06/16 13:40:34 fetching corpus: 34399, signal 736733/820845 (executing program)
2023/06/16 13:40:34 fetching corpus: 34449, signal 736972/820845 (executing program)
2023/06/16 13:40:34 fetching corpus: 34499, signal 737212/820850 (executing program)
2023/06/16 13:40:34 fetching corpus: 34549, signal 738150/820850 (executing program)
2023/06/16 13:40:35 fetching corpus: 34599, signal 738443/820850 (executing program)
2023/06/16 13:40:35 fetching corpus: 34649, signal 738681/820850 (executing program)
2023/06/16 13:40:35 fetching corpus: 34699, signal 738903/820850 (executing program)
2023/06/16 13:40:35 fetching corpus: 34749, signal 739182/820851 (executing program)
2023/06/16 13:40:35 fetching corpus: 34799, signal 739654/820851 (executing program)
2023/06/16 13:40:36 fetching corpus: 34849, signal 739873/820851 (executing program)
2023/06/16 13:40:36 fetching corpus: 34899, signal 740160/820851 (executing program)
2023/06/16 13:40:36 fetching corpus: 34949, signal 740529/820853 (executing program)
2023/06/16 13:40:36 fetching corpus: 34999, signal 740752/820853 (executing program)
2023/06/16 13:40:36 fetching corpus: 35049, signal 741044/820853 (executing program)
2023/06/16 13:40:36 fetching corpus: 35099, signal 741383/820853 (executing program)
2023/06/16 13:40:36 fetching corpus: 35149, signal 742299/820853 (executing program)
2023/06/16 13:40:37 fetching corpus: 35199, signal 742508/820853 (executing program)
2023/06/16 13:40:37 fetching corpus: 35249, signal 742671/820853 (executing program)
2023/06/16 13:40:37 fetching corpus: 35299, signal 742865/820857 (executing program)
2023/06/16 13:40:37 fetching corpus: 35349, signal 743135/820857 (executing program)
2023/06/16 13:40:37 fetching corpus: 35399, signal 743625/820857 (executing program)
2023/06/16 13:40:37 fetching corpus: 35449, signal 743912/820857 (executing program)
2023/06/16 13:40:38 fetching corpus: 35499, signal 744219/820857 (executing program)
2023/06/16 13:40:38 fetching corpus: 35549, signal 744884/820857 (executing program)
2023/06/16 13:40:38 fetching corpus: 35599, signal 745135/820857 (executing program)
2023/06/16 13:40:38 fetching corpus: 35649, signal 745401/820858 (executing program)
2023/06/16 13:40:38 fetching corpus: 35699, signal 745670/820858 (executing program)
2023/06/16 13:40:38 fetching corpus: 35749, signal 745933/820858 (executing program)
2023/06/16 13:40:39 fetching corpus: 35799, signal 746283/820858 (executing program)
2023/06/16 13:40:39 fetching corpus: 35849, signal 746483/820858 (executing program)
2023/06/16 13:40:39 fetching corpus: 35899, signal 746820/820858 (executing program)
2023/06/16 13:40:39 fetching corpus: 35949, signal 747065/820858 (executing program)
2023/06/16 13:40:39 fetching corpus: 35999, signal 747310/820858 (executing program)
2023/06/16 13:40:39 fetching corpus: 36048, signal 747609/820858 (executing program)
2023/06/16 13:40:40 fetching corpus: 36098, signal 747828/820858 (executing program)
2023/06/16 13:40:40 fetching corpus: 36148, signal 748037/820858 (executing program)
2023/06/16 13:40:40 fetching corpus: 36198, signal 748257/820858 (executing program)
2023/06/16 13:40:40 fetching corpus: 36248, signal 748612/820858 (executing program)
2023/06/16 13:40:40 fetching corpus: 36298, signal 748856/820858 (executing program)
2023/06/16 13:40:40 fetching corpus: 36348, signal 749255/820858 (executing program)
2023/06/16 13:40:41 fetching corpus: 36398, signal 749553/820858 (executing program)
2023/06/16 13:40:41 fetching corpus: 36448, signal 749838/820858 (executing program)
2023/06/16 13:40:41 fetching corpus: 36498, signal 750073/820859 (executing program)
2023/06/16 13:40:42 fetching corpus: 36548, signal 750296/820859 (executing program)
2023/06/16 13:40:42 fetching corpus: 36598, signal 750577/820859 (executing program)
2023/06/16 13:40:42 fetching corpus: 36648, signal 750849/820859 (executing program)
2023/06/16 13:40:42 fetching corpus: 36698, signal 751063/820861 (executing program)
2023/06/16 13:40:42 fetching corpus: 36748, signal 751333/820861 (executing program)
2023/06/16 13:40:42 fetching corpus: 36798, signal 751616/820861 (executing program)
2023/06/16 13:40:42 fetching corpus: 36847, signal 751833/820862 (executing program)
2023/06/16 13:40:43 fetching corpus: 36897, signal 752047/820863 (executing program)
2023/06/16 13:40:43 fetching corpus: 36947, signal 752334/820863 (executing program)
2023/06/16 13:40:43 fetching corpus: 36997, signal 752507/820863 (executing program)
2023/06/16 13:40:43 fetching corpus: 37047, signal 752746/820863 (executing program)
2023/06/16 13:40:43 fetching corpus: 37097, signal 753782/820863 (executing program)
2023/06/16 13:40:43 fetching corpus: 37147, signal 754156/820864 (executing program)
2023/06/16 13:40:44 fetching corpus: 37197, signal 754506/820864 (executing program)
2023/06/16 13:40:44 fetching corpus: 37247, signal 754742/820864 (executing program)
2023/06/16 13:40:44 fetching corpus: 37297, signal 754868/820864 (executing program)
2023/06/16 13:40:44 fetching corpus: 37347, signal 755104/820865 (executing program)
2023/06/16 13:40:44 fetching corpus: 37397, signal 755264/820865 (executing program)
2023/06/16 13:40:44 fetching corpus: 37447, signal 755624/820865 (executing program)
2023/06/16 13:40:44 fetching corpus: 37497, signal 755816/820865 (executing program)
2023/06/16 13:40:45 fetching corpus: 37547, signal 756184/820865 (executing program)
2023/06/16 13:40:45 fetching corpus: 37597, signal 756516/820865 (executing program)
2023/06/16 13:40:45 fetching corpus: 37647, signal 756844/820865 (executing program)
2023/06/16 13:40:45 fetching corpus: 37697, signal 757099/820865 (executing program)
2023/06/16 13:40:46 fetching corpus: 37747, signal 757316/820865 (executing program)
2023/06/16 13:40:46 fetching corpus: 37797, signal 757537/820865 (executing program)
2023/06/16 13:40:46 fetching corpus: 37847, signal 757707/820865 (executing program)
2023/06/16 13:40:46 fetching corpus: 37897, signal 758009/820865 (executing program)
2023/06/16 13:40:46 fetching corpus: 37947, signal 758201/820865 (executing program)
2023/06/16 13:40:46 fetching corpus: 37997, signal 758434/820865 (executing program)
2023/06/16 13:40:46 fetching corpus: 38047, signal 758614/820865 (executing program)
2023/06/16 13:40:47 fetching corpus: 38097, signal 758780/820865 (executing program)
2023/06/16 13:40:47 fetching corpus: 38147, signal 759084/820865 (executing program)
2023/06/16 13:40:47 fetching corpus: 38197, signal 759265/820866 (executing program)
2023/06/16 13:40:47 fetching corpus: 38247, signal 759530/820866 (executing program)
2023/06/16 13:40:47 fetching corpus: 38297, signal 759795/820866 (executing program)
2023/06/16 13:40:47 fetching corpus: 38347, signal 760122/820866 (executing program)
2023/06/16 13:40:47 fetching corpus: 38397, signal 760429/820866 (executing program)
2023/06/16 13:40:48 fetching corpus: 38447, signal 760695/820866 (executing program)
2023/06/16 13:40:48 fetching corpus: 38452, signal 760705/820866 (executing program)
2023/06/16 13:40:48 fetching corpus: 38452, signal 760705/820866 (executing program)
2023/06/16 13:40:50 starting 6 fuzzer processes
13:40:50 executing program 0:
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000080), 0xfffffcdc)

13:40:50 executing program 2:
r0 = socket(0x1, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)

13:40:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}})

13:40:50 executing program 5:
openat$fuse(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0)

13:40:50 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="ff7fffff0600ffff0000000700000000e140ff7ce143651bdc515e393fc77f90b8697bafb3c00cadf213"]})

13:40:50 executing program 4:
r0 = socket(0x1, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f00000004c0)={'gretap0\x00', 0x0})

[  188.779121][ T5019] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5019 'syz-fuzzer'
[  189.306411][   T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.315410][   T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.334571][ T5059] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.342359][ T5062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.349899][ T5062] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  189.357537][ T5062] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  189.368411][ T5062] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.383170][ T5059] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  189.395728][ T5064] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  189.415303][ T5067] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  189.421992][ T5072] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  189.422638][ T5067] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.430099][ T5072] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  189.446568][ T4432] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  189.454949][ T5067] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.456782][ T4432] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  189.462460][ T5067] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  189.471315][ T4432] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  189.477381][ T5067] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.484008][ T4432] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  189.490485][ T5067] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  189.497746][ T4432] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  189.504807][ T5067] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  189.520307][   T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  189.529460][ T5067] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  189.532042][   T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  189.537117][ T5067] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  189.552000][ T5067] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  189.574776][ T5067] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  189.582840][ T5067] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  189.591033][ T5067] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  189.598919][ T5067] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  189.606852][ T5067] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  189.615383][ T5067] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  189.628259][ T5067] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  189.635875][ T5067] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  189.976448][ T5074] chnl_net:caif_netlink_parms(): no params data found
[  190.143041][ T5057] chnl_net:caif_netlink_parms(): no params data found
[  190.179865][ T5055] chnl_net:caif_netlink_parms(): no params data found
[  190.193638][ T5060] chnl_net:caif_netlink_parms(): no params data found
[  190.228396][ T5065] chnl_net:caif_netlink_parms(): no params data found
[  190.270093][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.277352][ T5074] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.287486][ T5074] bridge_slave_0: entered allmulticast mode
[  190.294433][ T5074] bridge_slave_0: entered promiscuous mode
[  190.336492][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.343583][ T5074] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.351068][ T5074] bridge_slave_1: entered allmulticast mode
[  190.358459][ T5074] bridge_slave_1: entered promiscuous mode
[  190.381022][ T5070] chnl_net:caif_netlink_parms(): no params data found
[  190.432067][ T5057] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.439544][ T5057] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.446943][ T5057] bridge_slave_0: entered allmulticast mode
[  190.453577][ T5057] bridge_slave_0: entered promiscuous mode
[  190.486518][ T5074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.503788][ T5057] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.511134][ T5057] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.518894][ T5057] bridge_slave_1: entered allmulticast mode
[  190.525973][ T5057] bridge_slave_1: entered promiscuous mode
[  190.548869][ T5074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.607223][ T5055] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.614591][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.621839][ T5055] bridge_slave_0: entered allmulticast mode
[  190.628742][ T5055] bridge_slave_0: entered promiscuous mode
[  190.678666][ T5074] team0: Port device team_slave_0 added
[  190.684990][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.692078][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.700478][ T5055] bridge_slave_1: entered allmulticast mode
[  190.707229][ T5055] bridge_slave_1: entered promiscuous mode
[  190.715785][ T5057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.724938][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.731970][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.740341][ T5060] bridge_slave_0: entered allmulticast mode
[  190.747081][ T5060] bridge_slave_0: entered promiscuous mode
[  190.754117][ T5065] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.761311][ T5065] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.768769][ T5065] bridge_slave_0: entered allmulticast mode
[  190.775481][ T5065] bridge_slave_0: entered promiscuous mode
[  190.786415][ T5065] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.793501][ T5065] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.800793][ T5065] bridge_slave_1: entered allmulticast mode
[  190.807330][ T5065] bridge_slave_1: entered promiscuous mode
[  190.818341][ T5074] team0: Port device team_slave_1 added
[  190.836922][ T5057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.846325][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.853367][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.860651][ T5060] bridge_slave_1: entered allmulticast mode
[  190.867229][ T5060] bridge_slave_1: entered promiscuous mode
[  190.954316][ T5055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.965951][ T5057] team0: Port device team_slave_0 added
[  190.982563][ T5070] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.989901][ T5070] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.997202][ T5070] bridge_slave_0: entered allmulticast mode
[  191.003705][ T5070] bridge_slave_0: entered promiscuous mode
[  191.013839][ T5065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.023604][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.030808][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.057047][ T5074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.071314][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.078355][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.104447][ T5074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.117774][ T5055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.128335][ T5057] team0: Port device team_slave_1 added
[  191.144598][ T5060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.154148][ T5070] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.161264][ T5070] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.168660][ T5070] bridge_slave_1: entered allmulticast mode
[  191.175839][ T5070] bridge_slave_1: entered promiscuous mode
[  191.183541][ T5065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.225951][ T5060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.266731][ T5057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.273707][ T5057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.299747][ T5057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.341285][ T5074] hsr_slave_0: entered promiscuous mode
[  191.347635][ T5074] hsr_slave_1: entered promiscuous mode
[  191.357053][ T5055] team0: Port device team_slave_0 added
[  191.365938][ T5057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.372896][ T5057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.398856][ T5057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.420473][ T5070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.432596][ T5065] team0: Port device team_slave_0 added
[  191.450317][ T5055] team0: Port device team_slave_1 added
[  191.461800][ T5060] team0: Port device team_slave_0 added
[  191.470088][ T5070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.480250][ T5065] team0: Port device team_slave_1 added
[  191.508995][ T5055] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.516101][ T5055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.542653][ T5055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.555239][ T5060] team0: Port device team_slave_1 added
[  191.564992][ T5064] Bluetooth: hci1: command 0x0409 tx timeout
[  191.571297][ T5064] Bluetooth: hci0: command 0x0409 tx timeout
[  191.578144][ T5067] Bluetooth: hci2: command 0x0409 tx timeout
[  191.601448][ T5055] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.608477][ T5055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.635184][ T5055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.644131][ T5067] Bluetooth: hci3: command 0x0409 tx timeout
[  191.645820][ T5059] Bluetooth: hci5: command 0x0409 tx timeout
[  191.707388][ T5070] team0: Port device team_slave_0 added
[  191.722602][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.730219][ T5059] Bluetooth: hci4: command 0x0409 tx timeout
[  191.731074][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.762900][ T5065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.781662][ T5057] hsr_slave_0: entered promiscuous mode
[  191.787960][ T5057] hsr_slave_1: entered promiscuous mode
[  191.794057][ T5057] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  191.802158][ T5057] Cannot create hsr debugfs directory
[  191.823779][ T5070] team0: Port device team_slave_1 added
[  191.833147][ T5060] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.840222][ T5060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.866226][ T5060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.879083][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.886455][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.912495][ T5065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.946671][ T5060] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.953648][ T5060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.979904][ T5060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.006675][ T5055] hsr_slave_0: entered promiscuous mode
[  192.012947][ T5055] hsr_slave_1: entered promiscuous mode
[  192.019062][ T5055] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  192.026908][ T5055] Cannot create hsr debugfs directory
[  192.095761][ T5070] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.102724][ T5070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.130090][ T5070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.168408][ T5060] hsr_slave_0: entered promiscuous mode
[  192.174654][ T5060] hsr_slave_1: entered promiscuous mode
[  192.180645][ T5060] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  192.192151][ T5060] Cannot create hsr debugfs directory
[  192.212579][ T5070] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.219598][ T5070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.245818][ T5070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.261879][ T5065] hsr_slave_0: entered promiscuous mode
[  192.268559][ T5065] hsr_slave_1: entered promiscuous mode
[  192.274894][ T5065] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  192.282452][ T5065] Cannot create hsr debugfs directory
[  192.408396][ T5070] hsr_slave_0: entered promiscuous mode
[  192.415097][ T5070] hsr_slave_1: entered promiscuous mode
[  192.420998][ T5070] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  192.429185][ T5070] Cannot create hsr debugfs directory
[  192.653094][ T5074] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  192.696909][ T5074] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  192.706831][ T5074] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  192.740701][ T5074] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  192.803274][ T5057] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  192.821831][ T5057] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  192.831717][ T5057] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  192.851363][ T5057] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  192.911237][ T5055] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  192.920871][ T5055] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  192.939519][ T5055] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  192.967066][ T5055] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  193.046166][ T5060] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  193.060340][ T5060] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  193.071898][ T5074] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.101548][ T5060] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  193.116443][ T5074] 8021q: adding VLAN 0 to HW filter on device team0
[  193.149638][ T5060] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  193.187489][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.194840][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.243285][ T5057] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.252944][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.260117][ T5118] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.270864][ T5065] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  193.292088][ T5065] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  193.343170][ T5065] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  193.352306][ T5065] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  193.382771][ T5057] 8021q: adding VLAN 0 to HW filter on device team0
[  193.448252][ T5070] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  193.475888][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.483018][ T5114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.494440][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.501565][ T5114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.539378][ T5055] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.556487][ T5070] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  193.568591][ T5070] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  193.582495][ T5070] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  193.613124][ T5055] 8021q: adding VLAN 0 to HW filter on device team0
[  193.648046][ T5059] Bluetooth: hci2: command 0x041b tx timeout
[  193.658316][ T5064] Bluetooth: hci0: command 0x041b tx timeout
[  193.658375][ T5067] Bluetooth: hci1: command 0x041b tx timeout
[  193.678374][ T5060] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.724044][ T5067] Bluetooth: hci3: command 0x041b tx timeout
[  193.724450][ T5064] Bluetooth: hci5: command 0x041b tx timeout
[  193.747852][ T2520] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.755031][ T2520] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.778325][ T2520] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.785551][ T2520] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.814565][ T5064] Bluetooth: hci4: command 0x041b tx timeout
[  193.876684][ T5074] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.980053][ T5065] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.012973][ T5060] 8021q: adding VLAN 0 to HW filter on device team0
[  194.084648][ T2520] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.091771][ T2520] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.145233][ T5057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.166061][ T5070] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.196784][ T5065] 8021q: adding VLAN 0 to HW filter on device team0
[  194.205268][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.212382][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.265393][ T5070] 8021q: adding VLAN 0 to HW filter on device team0
[  194.291793][ T1228] ieee802154 phy0 wpan0: encryption failed: -22
[  194.298669][ T1228] ieee802154 phy1 wpan1: encryption failed: -22
[  194.299876][ T5060] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  194.336065][ T5060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.366878][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.374046][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.388285][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.395425][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.439219][ T5057] veth0_vlan: entered promiscuous mode
[  194.462480][ T5057] veth1_vlan: entered promiscuous mode
[  194.486618][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.493711][ T5122] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.510497][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.517589][ T5122] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.539695][ T5065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  194.551416][ T5065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.591503][ T5055] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.641168][ T5074] veth0_vlan: entered promiscuous mode
[  194.705950][ T5057] veth0_macvtap: entered promiscuous mode
[  194.738655][ T5074] veth1_vlan: entered promiscuous mode
[  194.771907][ T5057] veth1_macvtap: entered promiscuous mode
[  194.823377][ T5057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.850969][ T5055] veth0_vlan: entered promiscuous mode
[  194.891542][ T5057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.917865][ T5055] veth1_vlan: entered promiscuous mode
[  194.938332][ T5074] veth0_macvtap: entered promiscuous mode
[  194.962347][ T5057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.972701][ T5057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.983251][ T5057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.992316][ T5057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.016528][ T5074] veth1_macvtap: entered promiscuous mode
[  195.061519][ T5065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.088119][ T5074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.115722][ T5074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.131829][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.160599][ T5055] veth0_macvtap: entered promiscuous mode
[  195.192087][ T5074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.207388][ T5074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.219618][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.237547][ T5055] veth1_macvtap: entered promiscuous mode
[  195.282130][ T5074] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.298004][ T5074] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.307014][ T5074] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.316873][ T5074] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.331754][ T5060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.389043][ T5070] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.435399][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.449546][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.460090][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.470918][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.482847][ T5055] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.567593][ T2520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.576589][ T2520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.605077][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.615849][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.627997][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.638773][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.655372][ T5055] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.716066][ T5055] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.725069][ T5064] Bluetooth: hci1: command 0x040f tx timeout
[  195.732170][ T5055] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.743903][ T5059] Bluetooth: hci2: command 0x040f tx timeout
[  195.743952][ T5064] Bluetooth: hci0: command 0x040f tx timeout
[  195.756904][ T5055] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.765900][ T5055] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.788447][ T5070] veth0_vlan: entered promiscuous mode
[  195.804609][ T5064] Bluetooth: hci3: command 0x040f tx timeout
[  195.810662][ T5064] Bluetooth: hci5: command 0x040f tx timeout
[  195.830520][ T5157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.847166][ T4767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.858201][ T5157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.869219][ T5060] veth0_vlan: entered promiscuous mode
[  195.874884][ T4767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.882956][ T5065] veth0_vlan: entered promiscuous mode
[  195.894515][ T5064] Bluetooth: hci4: command 0x040f tx timeout
[  195.930743][ T5070] veth1_vlan: entered promiscuous mode
[  195.972931][ T5157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.981618][ T5157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.982652][ T5060] veth1_vlan: entered promiscuous mode
[  196.008854][ T5065] veth1_vlan: entered promiscuous mode
[  196.032951][ T5114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.080913][ T5114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
13:40:57 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x8, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  196.179077][ T5060] veth0_macvtap: entered promiscuous mode
13:40:57 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0xc, 0x0, &(0x7f0000000040))

[  196.221925][ T5070] veth0_macvtap: entered promiscuous mode
[  196.263002][ T5070] veth1_macvtap: entered promiscuous mode
[  196.286266][ T5060] veth1_macvtap: entered promiscuous mode
[  196.327034][ T5065] veth0_macvtap: entered promiscuous mode
[  196.343978][ T5114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.359527][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.362831][ T5114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
13:40:58 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x28}}, 0x0)

13:40:58 executing program 5:
bpf$PROG_LOAD_XDP(0x4, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  196.401230][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.426194][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
13:40:58 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}, 0x1, 0x0, 0x6000}, 0x0)

[  196.467021][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.481411][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.492601][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.510149][ T5070] batman_adv: batadv0: Interface activated: batadv_slave_0
13:40:58 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
recvmsg(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0)

13:40:58 executing program 5:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
recvmsg(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x12161)

[  196.562544][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.609227][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.630200][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.654376][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.672059][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.685019][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.695619][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.706757][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.718912][ T5060] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.732989][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.744881][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.754741][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.765687][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.775910][ T5060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.790698][ T5060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.802404][ T5060] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.816672][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.828128][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.838163][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.850958][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.861018][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.871593][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.882392][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.893089][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.904759][ T5070] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.912951][ T5065] veth1_macvtap: entered promiscuous mode
[  196.935463][ T5060] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.944395][ T5060] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.953095][ T5060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.962066][ T5060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.978612][ T5070] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.988292][ T5070] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.997375][ T5070] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.006717][ T5070] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.047628][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.059371][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.069670][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.086809][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
13:40:58 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
recvmmsg(r0, &(0x7f0000004500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/214}, {&(0x7f0000000100)=""/246}, {&(0x7f0000000200)=""/64}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/59}, {&(0x7f00000002c0)=""/122}], 0x0, &(0x7f00000003c0)=""/245}}, {{&(0x7f00000004c0)=@pppol2tpin6, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000540)=""/4096}, {&(0x7f0000004600)=""/91}, {&(0x7f00000015c0)=""/114}, {&(0x7f0000001640)=""/146}, {&(0x7f0000001700)=""/222}, {&(0x7f0000001800)=""/112}, {&(0x7f0000001880)=""/228}, {&(0x7f0000001980)}, {&(0x7f00000019c0)=""/104}], 0x0, &(0x7f0000001b00)=""/178}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000001bc0)=""/14}, {&(0x7f0000001c00)=""/36}, {&(0x7f0000001c40)=""/187}, {&(0x7f0000001d00)=""/82}, {&(0x7f0000001d80)=""/4096}, {&(0x7f0000002d80)=""/158}, {&(0x7f0000002e40)}, {&(0x7f0000002e80)=""/247}, {&(0x7f0000002f80)=""/163}, {&(0x7f0000003040)=""/162}], 0x0, &(0x7f00000031c0)=""/129}}, {{&(0x7f0000003280)=@in={0x2, 0x0, @empty}, 0x0, &(0x7f0000004400)=[{&(0x7f0000003300)=""/4096}, {&(0x7f0000004300)=""/252}], 0x0, &(0x7f0000004440)=""/138}}], 0x40000000000010f, 0x2, 0x0)

[  197.103515][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.115529][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.135351][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.146847][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.157069][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.168794][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.186789][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.256108][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.268809][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.279121][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.290652][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.302075][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.316612][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.327336][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.338173][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.348521][ T5065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.360059][ T5065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.371966][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.455644][ T5065] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.465819][ T5065] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.475525][ T5065] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.485012][ T5065] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.534266][ T5119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.542130][ T5119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.561966][ T5115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.572646][ T5115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.610715][ T5116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.619365][ T5116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.649699][ T4767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.662130][ T4767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.693221][ T4767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.712080][ T4767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
13:40:59 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000100)={@random="03ff796659bf", @random="2ffe81fe7df4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @multicast1}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "1cf07696f352c23ca0981c657b9c45b99846c8e393278a8c", "550e153fd5e2e466b0fde25cf44e52d7b6ff8bb449466515ac5ff699d905f86a"}}}}}}, 0x0)

13:40:59 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0)

[  197.792722][ T5119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.801435][ T5119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.804124][ T5064] Bluetooth: hci0: command 0x0419 tx timeout
[  197.814652][ T5067] Bluetooth: hci2: command 0x0419 tx timeout
[  197.816308][ T5064] Bluetooth: hci1: command 0x0419 tx timeout
13:40:59 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a1, &(0x7f0000000000))

[  197.896193][ T5064] Bluetooth: hci5: command 0x0419 tx timeout
[  197.902251][ T5064] Bluetooth: hci3: command 0x0419 tx timeout
[  197.964667][ T5059] Bluetooth: hci4: command 0x0419 tx timeout
13:40:59 executing program 4:
socket$can_j1939(0x1d, 0x2, 0x7)
pselect6(0x40, &(0x7f0000000240)={0x8}, 0x0, &(0x7f00000002c0)={0x2}, &(0x7f0000000300)={0x0, 0x989680}, 0x0)

13:40:59 executing program 2:
bpf$PROG_LOAD_XDP(0x19, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:40:59 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001980)={'vxcan1\x00'})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080))
pipe(&(0x7f0000000500))

13:40:59 executing program 5:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000300)=@framed={{}, [@cb_func]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:40:59 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x9, &(0x7f0000000000), 0x10)

13:40:59 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x1, &(0x7f00000000c0)=@raw=[@ldst], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)

13:40:59 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x5}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20)

13:40:59 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xe, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:40:59 executing program 5:
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000000))
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)

13:40:59 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
recvmsg(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0)

13:40:59 executing program 3:
bpf$PROG_LOAD_XDP(0x8, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:40:59 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x12, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:41:00 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  198.229757][ T5210] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use)
13:41:00 executing program 0:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x40086602, &(0x7f0000000000))

13:41:00 executing program 5:
syz_clone(0x40000000, 0x0, 0x3d, 0x0, 0x0, 0x0)

13:41:00 executing program 4:
syz_clone(0x8046500, 0x0, 0x0, 0x0, 0x0, 0x0)

13:41:00 executing program 1:
r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil)
r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil)
shmctl$IPC_SET(r2, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}})
shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x0)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/202)
msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000bf91823f31d157699480256b3a5f90c06c5d450ad396ea68b50c60304386977447e7877c6eb01000126c29c301172d5bd8c8aaa400000006a15cf572bf5fe76b1a38cf7456c4fe0800b2013cde0c588fdf9ea3ee3b445f42b2ce2e00ef54f64a5361e751f9fe80028de55fc6c9660fed73e05c9c3efbd2ac2ebb100"], 0x21, 0x800)
r3 = shmget$private(0x0, 0xe000, 0x8, &(0x7f0000ff2000/0xe000)=nil)
shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ff9000/0x3000)=nil)
msgsnd(r3, &(0x7f00000000c0)={0x1, "0bf91823f31bf63f1d323347b4a5f90c06c5d450ad396ea68b"}, 0x21, 0x800)
r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff2000/0x4000)=nil)
shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_INFO(r4, 0x3, &(0x7f0000000540)=""/236)
memfd_create(&(0x7f0000000200)='-B\xd5Nh\xc5\x01\x00p#\xcf\x11/\xc8\xd0:\x9c\xc0\xad\x89\x9ck\xde\xc5\xddUE\xbf8M\xcd\xfb\xcc\x97\x00\x04\xa9=\xa2\xcdJx\xa9\xb2\x04K\x98\x93?\x88X\xf7\xd6\x1d\xa1\xce\x8b\x19\xc24\xd6\xfe7\x0f\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00|\x00\xeb\xc7=Y\xb5Zo\x96o\xd0O\xe6\xd9\x06\xd8?\xea\x98Zl\xd5\x1d\xfe\xab%\x00\x00\x00\x80\xfe\xe1&\x1f\x16\r<&\x83.n\xc5\xd4#<JX\x91\xe5\x14M\xa0\xc1\xaaw\xe9n\x1d\x11\x14\xd1\xf0\x9c\\r\xa5\xc2-\x9d=Z\x88\xf5\tgx~^\xffr\rc\x15\xb66\xc7A\x01\x93\xe3\"\bY\x0f\xc9\x0e\xab\xbd\xbf\x18\xb9m\xc6\x0e\xb9\xa6\xd8W\xdc\x06\xd0\xf8\xa8 J\xe2\xc5\xb9\x1f\x7fn\x06\x17\xcc\xc3\xf5>\xdaS,\x11\xd2\xb5\xf3lY\xd5\xc8\x10\"g6\xda\x03\x91d}\xb38\xc3`\xb2A\xd1\x16Yl\xa3\xce\x7fCQ\xa9\x19\x02_\xa2ha\xdbA\xe7\x17e\x19\xb17\xf4Z\xfa\xa3\x88\xf25h\xbdq\x01\x00s\xe6\x18\xb5\r\x9a\x82\x1aj6\xbc\xd8NR-\x9c\bh#w7\xa7\xd4\xa9\xb0\xb9X\xe2\xab#W\x85yo\xdaS\xff\x1cy\xf4\x19\x17}\xdb\xd1\xc4\xa8\x8a\xf0\xd0\x9e\xd9\xa8E\xcf8\xb5y\xd0\x1c\nX2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9d\xcf\xa4\x90?\x86%\xc6\x90\x8d\xa7\x81\t\xd7d#\x8d!\xcb\x80\x9c~\x19\xcf5h\xd1\xeb\x91K\xbd\x91c\xfa\x11\x80\x00}\xd3\x9c\x90\xa8\x02]\xd6\x18\xe7\xee\x18M\xe4\xff', 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0)
shmat(r0, &(0x7f0000ff3000/0x4000)=nil, 0x1000)
close(r5)
shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff7000/0x2000)=nil)
shmctl$SHM_UNLOCK(r1, 0xc)
shmget$private(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil)

13:41:00 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000780)="de8baa97dfa2098f5d000f3bd75c56db12a903eebdfc7bbe43c338c31f50acfeb82776807b3215bd44ad9411ff4a8f8282b9720e70477b899b1ecdcd6603dac8bdf783b5b0218cb5401131144962305cbec33361884fb617806e6a7bae9d8dc240dd4423fcfddd619934694279287b00e33ce23a026d91ebab5f03c3d09264a6a3e4f1c96645dbe841ca2ae67456712e1fc7a9f1277c3cd6330efb119876a532e4b4c16f3d34ce5d2532242347fb823541dc7fa501e03acd9eb2fc4c3cf61d0cff4d58388fc5b8b516a626d51f372325570a965f478bd2b9278b7c7f0b06029897923e8abd03", 0xe6, 0x900, 0x0, 0x0)

13:41:00 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
write$P9_RLOPEN(r1, 0x0, 0x0)

13:41:00 executing program 2:
r0 = msgget(0x2, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setresuid(0x0, r1, 0x0)
msgctl$IPC_STAT(r0, 0x2, 0x0)

13:41:00 executing program 3:
sendto$packet(0xffffffffffffffff, 0x0, 0xffffffffffffff6b, 0x0, 0x0, 0x0)

13:41:00 executing program 1:
clock_getres(0x7, &(0x7f0000002480))

13:41:00 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0)

13:41:00 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
write(r0, &(0x7f0000000700)="da", 0x1)

13:41:00 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00', 0x2})

13:41:00 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_aout(r0, &(0x7f0000000000)={{0x107, 0x0, 0x0, 0x50}, "", ['\x00']}, 0x120)

13:41:00 executing program 5:
syz_clone(0x40000000, 0x0, 0x3d, 0x0, 0x0, 0x0)

13:41:00 executing program 1:
mq_open(&(0x7f00000002c0)='[[[.\xc5\xad_)\a\x00\x00\x00\x00\x00\x00\x00\xbeF\xca\x85\xdf\xa4\x96\xa9\xbc:\xf2\xabsi\xbef\x11\xa0\xff`[\x04 3\xad\x01\xeel \x91HUK{$\xb7.\x00\xe6\xe5&!03f\xc3\xc2wc\x02\v\xc3m~f\x83\x16*\xd1\x0fl\xb8\xcf\x1cN#\xc2$\x12\x02\x14\x00*y\xc2\x93\xa5\xb4\nr\xdf$\xe2a\xa71\x97\xe6\x0f\xdd\xb1G\xce\x9b\xebb\xc4\xa4\xe0\xe6\xc9\xbc1\x95E\xd8\x85\x9ex1\xf9\xa0\n^\xe6\xa07\xcc\xf118+OL\xe6R\xc20\x174\xb3\x82\xf6\xeb\x10>1R\xeegU\xd2z*\x82#zs\r\xc1.F\x02\xca\xa7\x8dv\xfd\x96\xaf\n9\xf2\xdd\x9db\x8d\x84+\xe9\xe9\xfb\x99Ul\f>\xa9\xea\xad\x184\x1f\n\xc7E\xee(N\xf4\'\x191\xfcm\x04x\xfaN\x96\xba\xe9lh\n\x8f6\xe1UTJ\xa5\xe5\xf5\xf6\xb8#\xb2\xc5\xbbq[\xf6\x1aov\xc8\xd0J\x94\xb8-\bw\x1c\x1a\xec\x85\x10\x04\x10h\x8c\xfeR\xd6t\\\xa0+\x18{\xb3\xb9m1\xba&\x05b\x04X\xa3\xf1\xd3t\bE9\x8b\f\xa4}\x03\x83\xa6U\xb9\x1eo,M$\x0f\xe1~\xdcS\x00h,\x7f\xc4\xec\x8b\x06\x90\x9e{\xcf\x9fj\xbf\x8c\xd4\x90\x1c\x94\xe6e\xbf\xcay#\xd9]\t\x01h\x0f\x99\x90\xf2\'{\xb1\x11\xf6IL \xec\xbfd\xfb\xda\xe8\xf5\x80\x90r\x06\xb23\x1e2\'\x9c\v3\xa6', 0x40, 0x0, &(0x7f0000000040)={0x5, 0xff, 0x9, 0x8000000000000000})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000240), &(0x7f0000000280)=0x4)

13:41:00 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0xfffffd72)

13:41:00 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x248600, 0x0)

13:41:00 executing program 0:
getitimer(0x8eeb4e08967ef59f, 0x0)

13:41:00 executing program 3:
mq_open(&(0x7f0000000000)='#(--\x00', 0x40, 0x0, &(0x7f0000000880)={0xffffffffffff8001, 0x800008, 0x8005231, 0x2})

13:41:00 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)

13:41:00 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4)

13:41:00 executing program 1:
getrandom(&(0x7f0000000040)=""/235, 0xeb, 0x1)

13:41:00 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$FUSE(r0, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x169c)
setregid(0x0, r1)

13:41:00 executing program 3:
unshare(0xc000000)

13:41:00 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)='E', 0x1)

13:41:01 executing program 5:
syz_clone(0x40000000, 0x0, 0x3d, 0x0, 0x0, 0x0)

13:41:01 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)

13:41:01 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)

13:41:01 executing program 2:
mq_open(&(0x7f0000000040)='\x98!\x7f\x00\x00\x9bb\xc0AK\xab\x96K\f\xb8U\xc8\x9f8t\xf8\xf4\x94\x11X\xc9<\xf2\xee\x88\xa0\xecPn\x86 a\x16', 0x40, 0x108, 0x0)

13:41:01 executing program 4:
unshare(0x80200)

13:41:01 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$FUSE(r0, 0x0, 0xfffffe69)

13:41:01 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x200200, 0x0)

13:41:01 executing program 2:
mq_open(&(0x7f00000002c0)='($-\x00', 0x0, 0x0, 0x0)

13:41:01 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$tun(r0, 0x0, 0x0)

13:41:01 executing program 0:
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x9, 0x0)

13:41:01 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000240), &(0x7f0000000280)=0x4)

13:41:01 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0)

13:41:02 executing program 5:
syz_clone(0x40000000, 0x0, 0x3d, 0x0, 0x0, 0x0)

13:41:02 executing program 3:
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x0, 0x0)

13:41:02 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0)

13:41:02 executing program 4:
mq_open(&(0x7f0000000080)='\x1b\x87\x806#\x00\x00-\x0f\xb0\t\xa2\xbf\"@\xd1\xbe\xe5\xae^\x92\xa4\xfd/c\xd2\x05&\xc7\xa2}r\x86u\xf4\xe5T\xae\x98_Y .\xfa\xff*\xdb\x16\x06D\xa0\xe0\x05\x19\x17r\xe7[$\x87\xb9o8\x8d\xb2\xc2\x1f\xf9\xc4\x85\xc3\xab\x15>\tJ\xe2\x03\xdf\xb4\x8ci\\\x93\x01\xee/\xc4\x9a$\xad\x94\x91>\xa5\x85\xe2t2\xb5\x9c\x9e\xec+\x10\x9a\xa8I0\xb4\xc1J\x9fa\xf5u\xb82\r\xc1;\x1e\xbe)\xae\x82\xfa \xebr.\xa1#\xfd\xe6L\xd48D\xf1\x85k', 0x0, 0x12a, 0x0)

13:41:02 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080), &(0x7f0000000040)=0x4)

13:41:02 executing program 2:
setrlimit(0x7, &(0x7f00000002c0))

13:41:02 executing program 0:
unshare(0x20010000)

13:41:02 executing program 3:
clock_nanosleep(0x7, 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0)

13:41:02 executing program 1:
r0 = getegid()
getresgid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
setregid(r0, r1)

13:41:02 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x602000, 0x0)

13:41:02 executing program 4:
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000280)="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", 0xfffffffffffffde2)
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14)
recvfrom$packet(r0, &(0x7f00000008c0)=""/4096, 0x1000, 0x2, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x6, 0x3ff}, 0x14)
mq_open(&(0x7f0000000100)='\x05\x1d\xca\xdb\x98\x1f\x8a\x15u!\xed\"k\x00\x00\x00\x00', 0x40, 0x31, &(0x7f0000000880)={0x1, 0xfd, 0x3f, 0x2})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
tkill(0x0, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'gretap0\x00', <r3=>r1, 0x40, 0x40, 0x9, 0x9, {{0xe, 0x4, 0x2, 0x4, 0x38, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast2, @private=0xa010101, {[@lsrr={0x83, 0xf, 0x3c, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @noop, @ssrr={0x89, 0x13, 0x1b, [@private=0xa010101, @empty, @remote, @broadcast]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', r3, 0x8046, 0x7cf, 0x4, 0xffffff50, {{0x22, 0x4, 0x0, 0x2d, 0x88, 0x66, 0x0, 0x20, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x17, 0x35, [@dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010100, @rand_addr=0x64010100, @broadcast, @private=0xa010102]}, @cipso={0x86, 0x4e, 0x3, [{0x6, 0x10, "312c53f21fb6f3662f6f062ae954"}, {0x7, 0xd, "1695b06b6a18a2ca8fb02a"}, {0x5, 0xc, "34c45ca48c1297beb820"}, {0x7, 0x2}, {0x2, 0xa, "5f187df381f9214d"}, {0x6, 0x3, "f2"}, {0x2, 0x10, "c9f63793c91147c60b65ec65c2ee"}]}, @rr={0x7, 0x7, 0x4, [@local]}, @ra={0x94, 0x4}, @noop]}}}}})

13:41:02 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$FUSE(r0, 0x0, 0xffffffffffffff6b)

13:41:02 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000002300), 0x220002, 0x0)

13:41:02 executing program 3:
mq_open(&(0x7f0000000000)='#(--\x00', 0x40, 0x0, 0x0)

13:41:02 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)

13:41:02 executing program 1:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8927, &(0x7f0000000000))

13:41:02 executing program 4:
getresuid(&(0x7f0000000140)=<r0=>0x0, &(0x7f0000000180), &(0x7f00000001c0))
setresuid(0xee01, r0, 0x0)

13:41:02 executing program 1:
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
clock_nanosleep(0x0, 0x0, &(0x7f0000000080)={0x0, r0+60000000}, 0x0)

13:41:02 executing program 0:
getrusage(0xffffffffffffffff, &(0x7f0000002040))

13:41:02 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f00000001c0), 0x4)

13:41:02 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$FUSE(r0, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x169c)
setgid(r1)

13:41:03 executing program 3:
getrandom(&(0x7f00000000c0)=""/52, 0x34, 0x3)

13:41:03 executing program 5:
r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80000)
setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000140)="48fc978b16baa84cce39b28f107d701308b59438f950ebe6c183f541905903736484e9cede37bc42dfc0afa00b7cf0a5894177f7377f965820cacf42aeaaa550ee83f6f1c02303c7e0e4a550e36ad23c77fb3851e45474709342645acc07ae5dcf0ce7b4c16958ff3ad0805719925b8ec1dee779460add991c93f94a5f3524f09ef9ff44af8915712f650b8d38ae994acb846bafe09e47d704a1f746a3ce72dbd6e8286b9dc4fb6a1384db308ef5b6ab3ad2a36bb52d8578418ae2a802cf1a1f8b612d191843865d43430f7d89e425c214efe4", 0xd3)
r1 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r0, 0x0, 0x0, 0x10, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4)
setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000080)="d6f2d7e438818906134fdf13bbc7ae88d92bb11415be3794f8cc7970890cf0a3bf8ec308182f681366c202c1cd8709e481e41a95d72c9f25", 0x38)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x7}, 0x4)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x6, @random="542b2dd6750d"}, 0x10)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x7}, 0x4)
mq_open(&(0x7f00000002c0)='($-\x00', 0x40, 0x80, &(0x7f0000000300)={0x0, 0x3, 0x7, 0x8})

13:41:03 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4)

13:41:03 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4)

13:41:03 executing program 3:
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setuid(r0)

13:41:03 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4)

13:41:03 executing program 2:
unshare(0x480a0000)

13:41:03 executing program 4:
prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0x2181}, 0x0)

13:41:03 executing program 3:
prlimit64(0x0, 0x5, 0x0, &(0x7f0000000040))

13:41:03 executing program 1:
mq_open(&(0x7f0000000080)='#\x1a--\x00UA\xb4~\xcd\xf8\xa1\xd3\x14\xdfv\xaf\xca\x86^\x10\x97\x8eY\x80Z>\xb9C\x91\xceQ\\\xc4\x19e\x05\xe8\x875R\x98\x97?i\xfa\x00\xa1\xf4G\xbaQ\"\xdd\x1ah\xe2\x8a:x\x98x\x90S\x1f\xbc\xb0\xfe\xef\xe5\xf4\xaefn\x06\xc9\xdb\xc3}\"\xc3\xd92\x8e\xaa:\x19\x99\x15\x89\x89E~\xb90\xd6zR\x110\xa2E%\xacu()r\xdf\'0\x13\x84\fr\xe1Ws@\x86\xe0\xfej\xc9\f\xb9\xc3-\xc1\xa0J\xab\xac\xc2&ZVJ\x13l\xdb%\xef\xa0\x89\t\xfdS\xca\xb4\xe2Y\xba\xeb\xbb\xed{\\\xab\'\xb3\xe1\xc9\x90\xcc\xfe\x98O\xda[\x92\xa0x\xebpXW9w\x06\v*\x9c\\\x8e<{0\xd5Yt\xa7\x1a.>\xf9\x8e\x93\x87\xf2\r\xefh\xf3lJ\aAj\xf7i\x15Tu\x81\xd1&\xacdZ\x05\'\x15|\xf4\xe6\x11( ]\xb7\xa7.\xf1\xcb[\xb3', 0x842, 0xc8, &(0x7f0000000880)={0xffefffffffdf8001, 0x104, 0x8001, 0x577})

13:41:03 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020)

13:41:03 executing program 0:
unshare(0x8080000)

13:41:03 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18140, 0x0)

13:41:03 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x4e}]}, 0x10)

13:41:03 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x6000, 0x0)

13:41:03 executing program 3:
r0 = gettid()
prlimit64(r0, 0x2, 0x0, &(0x7f0000000040))

13:41:03 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0)

13:41:03 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000000)='Q', 0x1)

13:41:03 executing program 4:
mq_open(&(0x7f00000000c0)='[[[.)4\\@$(\a\x00\x00\x00\x00\x00\x00\x00\xbeF\xca\x85\xdf\xa4\x96\xa9\xbc:\xf2\xabsi\xbef\x11\xa0\xe6`[\x04 3\xad\x01\xeel \x91HUK{$\xb7.\x00\xe6\xe5&)03f\xc3\xc2wG\x02\v\xc3m~f\x83\x16*\xd1\x0fl\xb8\xcf\x1cN#\xc2$\x12\x02\x14\x00*y\xc2\x93\xa5\xb4\nr', 0x40, 0x52, &(0x7f0000000040)={0x5, 0xff, 0x9, 0x8000000000000000})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000240), &(0x7f0000000280)=0x4)

13:41:03 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x6a)

13:41:03 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0)

13:41:03 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0)

13:41:03 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

13:41:03 executing program 4:
getgroups(0x1, &(0x7f0000000040)=[<r0=>0x0])
setresgid(0xee01, 0x0, r0)

13:41:03 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={0x0, <r0=>0x0})
setitimer(0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, &(0x7f0000000080))

13:41:04 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002f80)={0x1, &(0x7f0000002f40)=[{0xaab}]}, 0x10)

13:41:04 executing program 3:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000480)=0xffffffffffffffff)

13:41:04 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xff}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x10}}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000140)=@string={0x4, 0x3, "24ad"}}]})

13:41:04 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@empty, @empty}, 0x8)

13:41:04 executing program 4:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000100)=@string={0x2}}]})

13:41:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}})

[  202.325692][ T5403] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
13:41:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001240)={0x14}, 0x14}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000001b00)={&(0x7f00000018c0), 0xc, &(0x7f0000001ac0)={&(0x7f0000001900)={0x14}, 0x14}}, 0x0)

13:41:04 executing program 3:
openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)

13:41:04 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

13:41:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback}}}})

13:41:04 executing program 2:
socket$inet(0x2, 0x0, 0x10000)

13:41:04 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0)

[  202.624417][ T5118] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  202.624441][   T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd
13:41:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
inotify_add_watch(r0, 0x0, 0x56000080)

13:41:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @private}, 0x1d5})

[  202.984158][   T22] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 16
[  202.998941][   T22] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x3 has invalid wMaxPacketSize 0
[  203.017973][   T22] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 0
[  203.037364][   T22] usb 1-1: config 1 interface 0 has no altsetting 0
[  203.061038][ T5118] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  203.131401][ T5118] usb 5-1: language id specifier not provided by device, defaulting to English
[  203.264263][ T5118] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  203.273362][ T5118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.288501][ T5118] usb 5-1: Product: syz
[  203.292727][ T5118] usb 5-1: Manufacturer: syz
[  203.294280][   T22] usb 1-1: string descriptor 0 read error: -22
[  203.299537][ T5118] usb 5-1: SerialNumber: syz
[  203.307616][   T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  203.325900][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.374405][ T5407] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  203.375438][ T5118] cdc_ether: probe of 5-1:1.0 failed with error -22
[  203.395203][   T22] cdc_ether: probe of 1-1:1.0 failed with error -22
[  203.587365][ T5118] usb 5-1: USB disconnect, device number 2
[  203.602961][   T26] usb 1-1: USB disconnect, device number 2
13:41:05 executing program 1:
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x0, 0x1}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xb7}}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})

13:41:05 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x2, 0x5, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xce11}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x40)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002f80)={0x1, &(0x7f0000002f40)=[{0xaab}]}, 0x10)

13:41:05 executing program 3:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
getsockname(r0, 0x0, 0x0)

13:41:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={0x0, 0x14}}, 0x0)

13:41:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @local}, {0x2, 0x0, @local}, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})

13:41:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000002580), 0xffffffffffffffff)

13:41:05 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002f80)={0x1, &(0x7f0000002f40)=[{}]}, 0x10)

13:41:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000002580), 0xffffffffffffffff)

13:41:05 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000002b40)=@base={0x0, 0x0, 0x0, 0x0, 0xe1c}, 0x48)

13:41:06 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10}}}}}]}}]}}, 0x0)

13:41:06 executing program 4:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000044c0)={0xffffffffffffffff}, 0x4)

13:41:06 executing program 2:
clock_gettime(0x0, &(0x7f0000000000)={0x0, <r0=>0x0})
setitimer(0x2, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, &(0x7f0000000080))

[  204.434107][ T5113] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  204.698684][ T5119] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  204.810025][ T5113] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  204.825656][ T5113] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  204.849414][ T5113] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  205.024194][ T5113] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  205.041201][ T5113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.067814][ T5113] usb 2-1: Product: syz
[  205.075238][ T5119] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  205.082229][ T5113] usb 2-1: Manufacturer: syz
[  205.107106][ T5113] usb 2-1: SerialNumber: syz
[  205.144347][ T5433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  205.284234][ T5119] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  205.298906][ T5119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.319249][ T5119] usb 1-1: Product: syz
[  205.329043][ T5119] usb 1-1: Manufacturer: syz
[  205.340375][ T5119] usb 1-1: SerialNumber: syz
[  205.384300][ T5448] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  205.406155][ T5119] cdc_ether: probe of 1-1:1.0 failed with error -22
[  205.407335][ T5113] cdc_ether: probe of 2-1:1.0 failed with error -22
[  205.453577][ T5113] usb 2-1: USB disconnect, device number 2
[  205.620597][ T5119] usb 1-1: USB disconnect, device number 3
13:41:07 executing program 1:
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0)

13:41:07 executing program 3:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x4, &(0x7f0000000140)=@string={0x4, 0x3, "24ad"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]})

13:41:07 executing program 5:
openat$vsock(0xffffffffffffff9c, &(0x7f0000002c40), 0x40, 0x0)

13:41:07 executing program 4:
epoll_pwait(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0x0, &(0x7f00000002c0)={[0x2]}, 0x8)

13:41:07 executing program 2:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)

13:41:07 executing program 2:
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}], 0x30}, 0x8840)

13:41:07 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @local}, {0x2, 0x0, @local}, 0x54})

13:41:07 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002f80)={0x0, 0x0}, 0x10)

13:41:07 executing program 1:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x0, 0x0}]})

13:41:07 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, 0x0)

13:41:07 executing program 2:
r0 = socket$igmp(0x2, 0x3, 0x2)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @private}, 0x10)

13:41:07 executing program 5:
syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@obex={0x5}]}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})

13:41:07 executing program 4:
syz_usb_connect$cdc_ecm(0x0, 0x68, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x7, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x2f, {{0x6, 0x24, 0x6, 0x0, 0x0, "96"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x51229559, 0x2, 0x8000, 0x1}, [@obex={0x5, 0x24, 0x15, 0x7}, @obex={0x5, 0x24, 0x15, 0x8}, @dmm={0x7, 0x24, 0x14, 0x8001}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x0, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x80, 0x6, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1f, 0x6, 0xb7}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x40, 0x2, 0x80, 0xff, 0xb7}, 0x37, &(0x7f00000000c0)={0x5, 0xf, 0x37, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x7fff000, 0xf, 0x7, [0xff3fc0, 0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "78a4f47651e49a6655cf1e87a771a323"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0xf, 0x2}]}, 0x3, [{0x26, &(0x7f0000000100)=@string={0x26, 0x3, "0027c27c1312c1d1f9560674d6e46e9ee065d3d67192c2b9fe0a9c6a208c77ac5c000feb"}}, {0xbc, &(0x7f0000000140)=@string={0xbc, 0x3, "24adc871e762f66a857d7c0a2cb59f31c035504fe6be54924a5bba13f1c50f9d8d3d7fb3c39e10a4af44badcaed534b096f472c08ff66e211efd317fab2fb10d188a335cd1ebf75ed6d7639791c44841f33b018e4c06d9a3bf24c5af765c44d86578221dfc239ca162c0e4cabf47e03d13d07345b8273ec3600608907f95c6d9fe4afa5794b1e249d586d7481957fbee488dbe2f28de9a1dbbede12b57e05f5cde6dbfc16b09e21d4792aedba891be5e9a2b6f61925f4052b9cf"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x81d}}]})
accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  206.234063][   T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  206.433990][   T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  206.494436][ T5119] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  206.538566][ T5118] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  206.564376][  T775] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  206.604396][   T26] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  206.654286][   T26] usb 4-1: language id specifier not provided by device, defaulting to English
[  206.774162][   T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  206.783677][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.797142][   T22] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  206.812757][   T26] usb 4-1: Manufacturer: 괤
[  206.823103][   T26] usb 4-1: SerialNumber: syz
[  206.864135][   T22] usb 2-1: language id specifier not provided by device, defaulting to English
[  206.875960][   T26] cdc_ether: probe of 4-1:1.0 failed with error -22
[  206.884535][ T5119] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  206.944367][ T5118] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.959559][ T5118] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.970164][  T775] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 16
[  206.980155][  T775] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x3 has invalid wMaxPacketSize 0
[  206.990232][ T5118] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  207.000393][  T775] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 0
[  207.010614][ T5118] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  207.022316][  T775] usb 5-1: config 1 interface 0 has no altsetting 0
[  207.029972][ T5118] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  207.040323][ T5118] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  207.071629][   T26] usb 4-1: USB disconnect, device number 2
[  207.086747][ T5119] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  207.099766][ T5119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.107940][ T5119] usb 6-1: Product: syz
[  207.113047][ T5119] usb 6-1: Manufacturer: syz
[  207.119288][ T5119] usb 6-1: SerialNumber: syz
[  207.166348][ T5119] cdc_ether: probe of 6-1:1.0 failed with error -22
[  207.194166][   T22] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  207.203395][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.218518][   T22] usb 2-1: Product: syz
[  207.222775][   T22] usb 2-1: SerialNumber: syz
[  207.234184][  T775] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  207.243305][  T775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.251635][ T5118] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  207.261726][ T5118] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.270955][  T775] usb 5-1: Product: ࠝ
[  207.275704][   T22] cdc_ether: probe of 2-1:1.0 failed with error -22
[  207.276471][ T5118] usb 1-1: Product: syz
[  207.292989][  T775] usb 5-1: Manufacturer: 괤燈拧櫶綅੼딬㆟㗀佐뻦鉔孊Ꮊ엱鴏㶍덿黃ꐐ䒯햮뀴쁲Ⅾﴞ缱⾫න記尳廷ퟖ靣쒑䅈㯳踁ٌꏙⒿ꿅屶硥ᴢ⏼ꆜ쁢쫤䞿㷠퀓䕳➸쌾٠逈长䫾基놔䧢蛕䣗圙赈⾾ᶚ⯡屟淞솿५ᷢ鉇醨庾⮚慯徒剀쾹
[  207.325544][ T5118] usb 1-1: Manufacturer: syz
[  207.331190][ T5118] usb 1-1: SerialNumber: syz
[  207.337932][  T775] usb 5-1: SerialNumber: syz
[  207.364849][ T5478] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  207.373429][   T22] usb 6-1: USB disconnect, device number 2
[  207.389627][ T5118] cdc_ether: probe of 1-1:1.0 failed with error -22
[  207.482449][ T5115] usb 2-1: USB disconnect, device number 3
13:41:09 executing program 3:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x4, &(0x7f0000000140)=@string={0x4, 0x3, "24ad"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]})

13:41:09 executing program 2:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0)

[  207.588898][ T4767] usb 1-1: USB disconnect, device number 4
13:41:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001240)={0x14}, 0x14}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000001b00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001900)={0x14}, 0x14}}, 0x0)

13:41:09 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x2, 0x5, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xce11}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, 0x0, 0x20}, 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002f80)={0x1, &(0x7f0000002f40)=[{0xaab}]}, 0x10)

[  207.730106][  T775] cdc_ether: probe of 5-1:1.0 failed with error -22
[  207.749292][  T775] usb 5-1: USB disconnect, device number 3
13:41:09 executing program 2:
epoll_pwait(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0x0, 0x0, 0x0)

13:41:09 executing program 5:
syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@obex={0x5}]}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})

13:41:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, 0xffffffffffffffff}, 0x0)

13:41:09 executing program 1:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x0, 0x0}]})

[  207.963987][ T5113] usb 4-1: new high-speed USB device number 3 using dummy_hcd
13:41:09 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000049c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004980)}, 0x80)

13:41:09 executing program 2:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0)

13:41:09 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)

13:41:09 executing program 2:
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
socketpair(0x0, 0x0, 0x0, &(0x7f0000001b00))

[  208.223962][ T5115] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  208.336055][ T5113] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  208.354660][   T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  208.394597][ T5113] usb 4-1: language id specifier not provided by device, defaulting to English
[  208.524200][ T5113] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  208.542033][ T5113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.559892][ T5113] usb 4-1: Manufacturer: 괤
[  208.567534][ T5113] usb 4-1: SerialNumber: syz
[  208.615121][ T5113] cdc_ether: probe of 4-1:1.0 failed with error -22
[  208.624250][ T5115] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  208.714094][   T26] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  208.784021][   T26] usb 2-1: language id specifier not provided by device, defaulting to English
[  208.804048][ T5115] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  208.813111][ T5115] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.833916][ T5115] usb 6-1: Product: syz
[  208.838121][ T5115] usb 6-1: Manufacturer: syz
[  208.842733][ T5115] usb 6-1: SerialNumber: syz
[  208.844355][  T775] usb 4-1: USB disconnect, device number 3
[  208.935341][ T5115] cdc_ether: probe of 6-1:1.0 failed with error -22
[  209.104661][   T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  209.113934][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.122018][   T26] usb 2-1: Product: syz
[  209.126314][   T26] usb 2-1: SerialNumber: syz
[  209.153573][  T775] usb 6-1: USB disconnect, device number 3
[  209.195406][   T26] cdc_ether: probe of 2-1:1.0 failed with error -22
13:41:11 executing program 3:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x4, &(0x7f0000000140)=@string={0x4, 0x3, "24ad"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]})

13:41:11 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f0000001440))

13:41:11 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @private=0xa010102}, 0x10)

13:41:11 executing program 2:
openat$vsock(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0)

13:41:11 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)

[  209.467921][ T5118] usb 2-1: USB disconnect, device number 4
13:41:11 executing program 5:
syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@obex={0x5}]}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})

13:41:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}, 0x10)

[  209.734430][  T775] usb 4-1: new high-speed USB device number 4 using dummy_hcd
13:41:11 executing program 1:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x0, 0x0}]})

[  209.964034][ T5115] usb 6-1: new high-speed USB device number 4 using dummy_hcd
13:41:11 executing program 4:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, 0x0)

13:41:11 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@obex={0x5}, @dmm={0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xb7}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa}, 0x0, 0x0, 0x2, [{0x5, &(0x7f0000000100)=@string={0x5, 0x3, "0027c2"}}, {0x64, &(0x7f0000000140)=@string={0x64, 0x3, "24adc871e762f66a857d7c0a2cb59f31c035504fe6be54924a5bba13f1c50f9d8d3d7fb3c39e10a4af44badcaed534b096f472c08ff66e211efd317fab2fb10d188a335cd1ebf75ed6d7639791c44841f33b018e4c06d9a3bf24c5af765c44d86578"}}]})

13:41:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0xfffffffffffffffc}}, 0x0)

13:41:11 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)

[  210.114365][  T775] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  210.174250][  T775] usb 4-1: language id specifier not provided by device, defaulting to English
[  210.304861][  T775] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.314113][ T4767] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  210.322742][  T775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.331325][  T775] usb 4-1: Manufacturer: 괤
[  210.336364][  T775] usb 4-1: SerialNumber: syz
[  210.343980][ T5118] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  210.346129][ T5115] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  210.395336][  T775] cdc_ether: probe of 4-1:1.0 failed with error -22
[  210.526956][ T5115] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.540116][ T5115] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.548347][ T5115] usb 6-1: Product: syz
[  210.552524][ T5115] usb 6-1: Manufacturer: syz
[  210.561211][ T5115] usb 6-1: SerialNumber: syz
[  210.605451][ T5115] cdc_ether: probe of 6-1:1.0 failed with error -22
[  210.617075][  T775] usb 4-1: USB disconnect, device number 4
[  210.714306][ T4767] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 16
[  210.724301][ T4767] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x3 has invalid wMaxPacketSize 0
[  210.734434][ T5118] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  210.747953][ T4767] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 0
[  210.757935][ T4767] usb 1-1: config 1 interface 0 has no altsetting 0
[  210.794031][ T5118] usb 2-1: language id specifier not provided by device, defaulting to English
[  210.821308][ T5119] usb 6-1: USB disconnect, device number 4
[  210.944108][ T4767] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.956192][ T4767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.967710][ T4767] usb 1-1: Product: syz
[  210.971982][ T4767] usb 1-1: Manufacturer: 괤燈拧櫶綅੼딬㆟㗀佐뻦鉔孊Ꮊ엱鴏㶍덿黃ꐐ䒯햮뀴쁲Ⅾﴞ缱⾫න記尳廷ퟖ靣쒑䅈㯳踁ٌꏙⒿ꿅屶硥
[  210.990983][ T4767] usb 1-1: SerialNumber: syz
[  211.024546][ T5523] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  211.045263][ T4767] cdc_ether: probe of 1-1:1.0 failed with error -22
13:41:12 executing program 3:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x4, &(0x7f0000000140)=@string={0x4, 0x3, "24ad"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]})

13:41:12 executing program 4:
openat$vsock(0xffffffffffffff9c, 0x0, 0x40, 0x0)

13:41:12 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000002b40)=@base={0x0, 0x0, 0x0, 0x0, 0xe1c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48)

13:41:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff"], 0x17c}}, 0x0)

13:41:12 executing program 2:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0xee00}, 0xc)

[  211.162191][ T5118] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  211.173520][ T5118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.182607][ T5118] usb 2-1: Product: syz
[  211.187809][ T5118] usb 2-1: SerialNumber: syz
[  211.245108][ T5118] cdc_ether: probe of 2-1:1.0 failed with error -22
[  211.268838][ T5119] usb 1-1: USB disconnect, device number 5
13:41:13 executing program 5:
syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@obex={0x5}]}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})

13:41:13 executing program 2:
openat$vsock(0xffffffffffffff9c, &(0x7f0000001480), 0x8001, 0x0)

[  211.462623][ T5157] usb 2-1: USB disconnect, device number 5
[  211.553975][ T5113] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  211.645710][ T5118] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  211.914110][ T5113] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
13:41:13 executing program 1:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x0, 0x0}]})

13:41:13 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000100)="477c65e0a769a5f0557b8c26ff26d359bda500cd7bddd8329e6eca32ada3ee248ed89fdb6449cadb13dfd0deb4b1e09da27dcfb378ef02e52a0f8121024a4b82dc44787c2455b17b5b175441bb8ac9e4d5343223662cd75e10672cbb2e86ed64b5587ab1afa4f4f0861babd12b39562e9e48ab199c0fdc149e1745f44e9a8462c627031580c1807b68ab41c980b173e4", 0x90)

13:41:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x155})

13:41:13 executing program 0:
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040))
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000140))
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb67}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c450}, 0x24004805)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0))
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000300)='veth1_to_bridge\x00')
socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'veth1_vlan\x00', 0x400})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x5, 0x3, 0x46, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0xff57, 0x7, 0x5}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname(r0, &(0x7f00000004c0)=@x25, &(0x7f0000000540)=0x80)
recvmsg(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/211, 0xd3}, {&(0x7f0000001700)=""/127, 0x7f}, {&(0x7f0000001780)=""/220, 0xdc}], 0x4, &(0x7f00000018c0)=""/186, 0xba}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000002100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000002300)=[{&(0x7f0000002140)="fec20035c9d19a60bfc86cb5a2dca98fa97993c961c8bdd1aa1c71d8b00dc3f9c315ea7f25dacdbbf2cfcfc9baf1a4b711974bbbd63397037744aaa2c89aa76e0fc3e96d526f7501104111d6025a0a4135bbcffe084a7ff567bae4f8211e3439c0db5fbc2e5d07d88da6cb89b985e6dbe91bfb6afb617e2c0ce85cd1a93fe6ed28ca558db176fcc1b9d2d3c82080a345d1d454cc9a81d53ac2f8bb86196220f2001bb393c3b5844ebdbded", 0xab}, {&(0x7f0000002240)="1223b2fd3794fc6d3190073e70e89be475298a1b914a8c382cf7fa2da8b57e383c5dd53312873fac5a268caf0bf088f30457475427aaf42604c57dca3f122dbf483cb51e8592eff387806b8b3341b9109cc3960b507eb419b6c0557b7d7037c0e7e0567c7b04f267cb0744f7a39fdcf3e59e4a7949c41e8a5735717b9a0bf43bd07fdc01444be7ee63a2b6cc488606da906a1ac01374abe249f796cee77bd2ff112c587d81bc02eaf43e50d4", 0xac}], 0x2, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@rr={0x7, 0x23, 0x9f, [@local, @empty, @empty, @remote, @empty, @multicast1, @empty, @empty]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x50, 0x0, 0x1, [0x1000, 0x10001]}, @ssrr={0x89, 0x3}, @lsrr={0x83, 0x3, 0xa9}, @cipso={0x86, 0x4f, 0x3, [{0x2, 0x12, "6ef22bb5e0fba0ae06b5cbbb1015fb18"}, {0x2, 0x10, "fac481e965ce41593120021d3e5a"}, {0x0, 0x10, "6164b6021158a13b50338775b551"}, {0x2, 0x8, "8fd1bb49ca55"}, {0x6, 0xa, "54c304e79ba89313"}, {0x0, 0x5, 'C</'}]}, @timestamp_addr={0x44, 0x34, 0xdb, 0x1, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfb98}, {@remote, 0xd7f2}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x80}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x117b}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x715}}], 0x190}, 0x24044)

[  211.964186][ T5113] usb 4-1: language id specifier not provided by device, defaulting to English
13:41:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x155})

[  212.044139][ T5118] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  212.094951][ T5113] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  212.112111][ T5113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.135770][ T5113] usb 4-1: Manufacturer: 괤
[  212.156545][ T5113] usb 4-1: SerialNumber: syz
[  212.195826][ T5113] cdc_ether: probe of 4-1:1.0 failed with error -22
[  212.234163][ T5118] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  212.244518][ T5118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.252533][ T5118] usb 6-1: Product: syz
[  212.256797][ T5118] usb 6-1: Manufacturer: syz
[  212.261411][ T5118] usb 6-1: SerialNumber: syz
[  212.306053][ T5118] cdc_ether: probe of 6-1:1.0 failed with error -22
[  212.354134][ T5157] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  212.415707][ T5118] usb 4-1: USB disconnect, device number 5
[  212.525054][ T5113] usb 6-1: USB disconnect, device number 5
[  212.784913][ T5157] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  212.834091][ T5157] usb 2-1: language id specifier not provided by device, defaulting to English
13:41:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={0x0}}, 0x4004081)

13:41:14 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

13:41:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x155})

13:41:14 executing program 3:
syz_usb_connect$cdc_ecm(0x0, 0x5b, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@obex={0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x0, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x80}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x40, 0x2, 0x80, 0xff}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}})

13:41:14 executing program 0:
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
socketpair(0x0, 0x0, 0x0, 0x0)

13:41:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x155})

13:41:14 executing program 4:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0)

[  213.194930][ T5157] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  213.209769][ T5157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.218554][ T5157] usb 2-1: Product: syz
[  213.222718][ T5157] usb 2-1: SerialNumber: syz
[  213.254023][ T5115] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  213.274942][ T5157] cdc_ether: probe of 2-1:1.0 failed with error -22
[  213.491379][ T5118] usb 2-1: USB disconnect, device number 6
[  213.654156][ T5115] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 16
[  213.667908][ T5115] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x3 has invalid wMaxPacketSize 0
[  213.678974][ T5115] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 0
[  213.688777][ T5115] usb 4-1: config 1 interface 0 has no altsetting 0
[  213.885943][ T5115] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  213.895340][ T5115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.903398][ T5115] usb 4-1: Product: syz
[  213.907637][ T5115] usb 4-1: Manufacturer: syz
[  213.912257][ T5115] usb 4-1: SerialNumber: syz
[  213.934433][ T5559] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  213.955029][ T5115] cdc_ether: probe of 4-1:1.0 failed with error -22
13:41:15 executing program 5:
socket$rds(0x15, 0x5, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

13:41:15 executing program 0:
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14}}], 0x18}, 0x8840)

13:41:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0)

13:41:15 executing program 2:
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x1800)

13:41:15 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x0, @private}, 0x10, 0x0}, 0x0)

13:41:15 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})

13:41:15 executing program 5:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, 0x0, 0x0)

13:41:15 executing program 2:
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000280), r0)

[  214.173109][ T5118] usb 4-1: USB disconnect, device number 6
[  214.444066][ T5157] usb 1-1: new high-speed USB device number 6 using dummy_hcd
13:41:16 executing program 3:
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

13:41:16 executing program 1:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, 0x0, 0x0)

13:41:16 executing program 5:
memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)

13:41:16 executing program 4:
clock_gettime(0xb, &(0x7f0000000580))

13:41:16 executing program 2:
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)

13:41:16 executing program 5:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0)

13:41:16 executing program 2:
syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01bcf0", 0x10, 0x3a, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @ndisc_ra}}}}}, 0x0)

13:41:16 executing program 1:
syz_clone3(&(0x7f0000000340)={0x2a000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58)

13:41:16 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x0, 0x0, 0x3b62157a}, 0x48)

[  214.844133][ T5157] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  215.074066][ T5157] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  215.083126][ T5157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.091346][ T5157] usb 1-1: Product: syz
[  215.095833][ T5157] usb 1-1: Manufacturer: syz
[  215.100519][ T5157] usb 1-1: SerialNumber: syz
[  215.124526][ T5115] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  215.147375][ T5157] cdc_ether: probe of 1-1:1.0 failed with error -22
[  215.350010][ T4767] usb 1-1: USB disconnect, device number 6
[  215.364048][ T5115] usb 6-1: Using ep0 maxpacket: 16
[  215.484078][ T5115] usb 6-1: unable to get BOS descriptor or descriptor too short
[  215.544076][ T5115] usb 6-1: unable to read config index 0 descriptor/start: -71
[  215.551693][ T5115] usb 6-1: can't read configurations, error -71
13:41:17 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0)

13:41:17 executing program 2:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x634c80, 0x0)

13:41:17 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x800, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x2}, 0x48)

13:41:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1800400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0)

13:41:17 executing program 1:
pselect6(0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x8]}, 0x8})

13:41:17 executing program 4:
socket$isdn(0x22, 0x3, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)

13:41:17 executing program 2:
syz_clone(0x44025400, &(0x7f0000000040)="f004244363a58092e89c3fdca96bd7fe5dfdce71c530b619fa7220e4bdf4d80e1dc7c814e42e438caddb66c805c67cc3f6f43141cc79dda78e2b89fe89430fab7e93d4258c1c7844e23492d51b0f3b15c7063e53f0d5ebb9c6fffbd219a2", 0x5e, &(0x7f00000000c0), &(0x7f0000000100), 0x0)

13:41:17 executing program 3:
openat$bsg(0xffffffffffffff9c, 0x0, 0x400000, 0x0)

13:41:17 executing program 5:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080), 0x4)

13:41:17 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001340)=[{0x0}, {0x0}], 0x2}, 0x0)

13:41:17 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}}, 0x0)

13:41:17 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48)

13:41:17 executing program 3:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'})

13:41:17 executing program 0:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000001440)={&(0x7f0000000080)=@tipc=@id, 0x80, 0x0}, 0x0)

13:41:17 executing program 5:
pselect6(0x40, &(0x7f0000000380)={0x6}, &(0x7f00000003c0)={0x4}, 0x0, &(0x7f0000000440)={0x0, 0x3938700}, 0x0)

13:41:17 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

13:41:17 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f00000001c0), 0x4)

13:41:18 executing program 5:
syz_clone3(&(0x7f0000000200)={0x8004400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  216.544192][   T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  216.804027][   T22] usb 5-1: Using ep0 maxpacket: 8
13:41:18 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:41:18 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240), 0x10}, 0x80)

13:41:18 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x0, 0x0, 0x401}, 0x48)

13:41:18 executing program 1:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@host})

13:41:18 executing program 5:
bpf$MAP_CREATE(0x21, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:41:18 executing program 3:
mq_open(&(0x7f0000000040)='$\x00', 0x0, 0x0, 0x0)

[  216.924203][   T22] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  216.932528][   T22] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  216.954036][   T22] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  216.963686][   T22] usb 5-1: config 250 has no interface number 0
[  216.970667][   T22] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  216.992612][   T22] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
13:41:18 executing program 1:
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x4, @thr={0x0, 0x0}})

13:41:18 executing program 0:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x44201, 0x0)

13:41:18 executing program 5:
syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x240)

[  217.047243][   T22] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  217.109536][   T22] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  217.140713][   T22] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  217.216295][   T22] usb 5-1: config 250 interface 228 has no altsetting 0
[  217.334219][   T22] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  217.346129][   T22] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  217.359104][   T22] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  217.369469][   T22] usb 5-1: config 250 has no interface number 0
[  217.375916][   T22] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  217.387744][   T22] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  217.401246][   T22] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  217.413180][   T22] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  217.423609][   T22] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  217.437513][   T22] usb 5-1: config 250 interface 228 has no altsetting 0
[  217.524743][   T22] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  217.533254][   T22] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  217.542199][   T22] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  217.551911][   T22] usb 5-1: config 250 has no interface number 0
[  217.561075][   T22] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  217.573955][   T22] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  217.584610][   T22] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  217.595242][   T22] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  217.605794][   T22] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  217.620157][   T22] usb 5-1: config 250 interface 228 has no altsetting 0
[  217.784245][   T22] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  217.793325][   T22] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  217.802336][   T22] usb 5-1: Product: syz
[  217.807154][   T22] usb 5-1: Manufacturer: syz
[  217.811784][   T22] usb 5-1: SerialNumber: syz
[  217.866501][   T22] hub 5-1:250.228: bad descriptor, ignoring hub
[  217.872854][   T22] hub: probe of 5-1:250.228 failed with error -5
[  218.093428][   T22] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0xAC25 pid 0x99C6
[  218.435923][ T5157] usb 5-1: USB disconnect, device number 4
[  218.466427][ T5157] usblp0: removed
13:41:20 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

13:41:20 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0xfffffffffffffffe, 0x1, {0xa, 0x4e24, 0xffffffff, @private0, 0x5}, r1}}, 0x38)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x40, 0x0, 0x31}, 0xc)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x48005)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev}, &(0x7f00000002c0)=0xc)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000091}, 0x40850)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {r1, 0x8, "c02970", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {&(0x7f0000000580), r1, 0x1ff}}, 0x18)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x422400, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000006c0), 0x13f, 0x1}}, 0x20)
socket$inet6(0xa, 0x5, 0xfffffffe)
syz_clone(0x20000000, &(0x7f0000000880)="5d8a8694215b29dbfab774770a015919f19d77704829e84974c2d2afea0f9bf6351996c26c7de2ab364882fba56cf4c0616553c4089d62737f8caf612f493fb9697e6e977f5baf7ff380fdc0355b4c72dede7c5942152d8d2a0295fd797e246e0771585e72e120d36cefb0748d81a7e3ec3adaa423d3af", 0x77, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)="f741778d2e86f520a3a5698947cbb60e61d2341a2d7c6ca2cdced0ce39ee7d12e7868a0ee4484c6bf94e7095ed08f67d2917f1059ec83eb4b992cbce3719e57ebce44840a311a762d205c41f4ffd8ba128c712a7bef4bbe970c9fe3441c64e51bb0bbc1ac420772c0d6b23ae00161718451e9862db14dace86a838815aedeb2b50128856617d4e9e8c5179aa231ae3eede8c753e9583fe1b4d78f4b79e392c2d0b62557fe8cfc6b80a54bb5895eb8c766a4cc0b93dd5c176aaab64b582b7503dcb")
syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000cc0)={'erspan0\x00', &(0x7f0000000c00)={'erspan0\x00', 0x0, 0x10, 0x20, 0x40, 0x10001, {{0x1c, 0x4, 0x1, 0x30, 0x70, 0x64, 0x0, 0x78, 0x4, 0x0, @multicast2, @multicast1, {[@rr={0x7, 0xb, 0x55, [@dev={0xac, 0x14, 0x14, 0x34}, @multicast2]}, @rr={0x7, 0x23, 0x55, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010101, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x8c, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xf, 0x79, [@rand_addr=0x64010100, @multicast2, @broadcast]}, @timestamp={0x44, 0x1c, 0x7c, 0x0, 0x4, [0x40, 0x3, 0x1ff, 0x0, 0x4, 0x10001]}, @noop]}}}}})
socket$nl_generic(0x10, 0x3, 0x10)

13:41:20 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x3, &(0x7f00000013c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @cb_func], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:41:20 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0)

13:41:20 executing program 5:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000001440)={&(0x7f0000000080)=@tipc=@id, 0x80, &(0x7f0000001340)=[{0x0}, {0x0}], 0x2}, 0x0)

13:41:20 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x800, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48)

13:41:20 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000080)={0x1, 0x0, [{}]})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_rr_get_interval(r1, &(0x7f0000000240))
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_rr_get_interval(r2, &(0x7f0000000240))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

13:41:20 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)

13:41:20 executing program 3:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)

13:41:20 executing program 0:
openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001040), 0x119801, 0x0)

13:41:20 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000080))
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)

13:41:20 executing program 3:
pselect6(0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)={0x0, 0x3938700}, 0x0)

[  219.274002][ T5157] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  219.514074][ T5157] usb 5-1: Using ep0 maxpacket: 8
[  219.634100][ T5157] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  219.642411][ T5157] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  219.651849][ T5157] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  219.661156][ T5157] usb 5-1: config 250 has no interface number 0
[  219.667619][ T5157] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  219.679508][ T5157] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  219.690245][ T5157] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  219.700896][ T5157] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  219.711421][ T5157] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  219.728057][ T5157] usb 5-1: config 250 interface 228 has no altsetting 0
[  219.814466][ T5157] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  219.834922][ T5157] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  219.843546][ T5157] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  219.853247][ T5157] usb 5-1: config 250 has no interface number 0
[  219.860154][ T5157] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  219.872382][ T5157] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  219.882906][ T5157] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  219.894156][ T5157] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  219.904569][ T5157] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  219.918110][ T5157] usb 5-1: config 250 interface 228 has no altsetting 0
[  220.024702][ T5157] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  220.032999][ T5157] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  220.042336][ T5157] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  220.051496][ T5157] usb 5-1: config 250 has no interface number 0
[  220.058032][ T5157] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  220.069635][ T5157] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  220.080112][ T5157] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  220.091234][ T5157] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  220.101629][ T5157] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  220.115245][ T5157] usb 5-1: config 250 interface 228 has no altsetting 0
[  220.274129][ T5157] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  220.283208][ T5157] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  220.291782][ T5157] usb 5-1: Product: syz
[  220.296111][ T5157] usb 5-1: Manufacturer: syz
[  220.300715][ T5157] usb 5-1: SerialNumber: syz
[  220.346476][ T5157] hub 5-1:250.228: bad descriptor, ignoring hub
[  220.352768][ T5157] hub: probe of 5-1:250.228 failed with error -5
[  220.567429][ T5157] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0xAC25 pid 0x99C6
[  220.915085][   T22] usb 5-1: USB disconnect, device number 5
[  220.938630][   T22] usblp0: removed
13:41:23 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

13:41:23 executing program 1:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700), 0x80402, 0x0)

13:41:23 executing program 2:
bpf$MAP_CREATE(0x22, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:41:23 executing program 0:
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100), 0x0)

13:41:23 executing program 3:
socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f00000001c0), 0x4)
ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, 0x0)

13:41:23 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000040)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:41:23 executing program 1:
openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0)

13:41:23 executing program 3:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000c40), 0x10)

13:41:23 executing program 5:
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x9, &(0x7f00000013c0)=@raw=[@call, @ldst={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @func, @initr0, @cb_func], &(0x7f0000001440)='GPL\x00', 0x5, 0x9c, &(0x7f0000001480)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[0xffffffffffffffff]}, 0x80)

13:41:23 executing program 0:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x70001, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x84040, 0x0)

13:41:23 executing program 2:
syz_clone3(&(0x7f0000001300)={0x8081280, 0x0, &(0x7f0000000140), &(0x7f0000000180), {}, &(0x7f00000001c0)=""/4096, 0x1000, 0x0, 0x0}, 0x58)

13:41:23 executing program 5:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000380)=@raw=[@kfunc], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  221.784114][   T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  222.033946][   T26] usb 5-1: Using ep0 maxpacket: 8
[  222.154202][   T26] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  222.162482][   T26] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  222.171225][   T26] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  222.181157][   T26] usb 5-1: config 250 has no interface number 0
[  222.187767][   T26] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  222.199550][   T26] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  222.210667][   T26] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  222.222438][   T26] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  222.233361][   T26] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  222.247740][   T26] usb 5-1: config 250 interface 228 has no altsetting 0
[  222.334195][   T26] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  222.342464][   T26] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  222.351183][   T26] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  222.361229][   T26] usb 5-1: config 250 has no interface number 0
[  222.374057][   T26] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  222.386754][   T26] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  222.397350][   T26] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  222.407698][   T26] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  222.418008][   T26] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  222.431518][   T26] usb 5-1: config 250 interface 228 has no altsetting 0
[  222.513963][   T26] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  222.522378][   T26] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  222.531346][   T26] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  222.540512][   T26] usb 5-1: config 250 has no interface number 0
[  222.549105][   T26] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  222.560804][   T26] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  222.571341][   T26] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  222.582512][   T26] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  222.593643][   T26] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  222.607716][   T26] usb 5-1: config 250 interface 228 has no altsetting 0
[  222.774188][   T26] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  222.783269][   T26] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  222.792647][   T26] usb 5-1: Product: syz
[  222.797769][   T26] usb 5-1: Manufacturer: syz
[  222.802365][   T26] usb 5-1: SerialNumber: syz
[  222.845138][   T26] hub 5-1:250.228: bad descriptor, ignoring hub
[  222.851455][   T26] hub: probe of 5-1:250.228 failed with error -5
[  223.056013][   T26] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0xAC25 pid 0x99C6
[  223.410641][   T26] usb 5-1: USB disconnect, device number 6
[  223.424715][   T26] usblp0: removed
13:41:25 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

13:41:25 executing program 3:
openat$pfkey(0xffffffffffffff9c, 0x0, 0x440802, 0x0)

13:41:25 executing program 0:
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x40, 0x0, 0x31}, 0xc)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x48005)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev}, &(0x7f00000002c0)=0xc)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00'})
write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {r0, 0x8, "c02970", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {&(0x7f0000000580), r0, 0x1ff}}, 0x18)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x422400, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv0\x00', <r3=>0x0})
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000007c0)={0x0, 0x1, 0x4, r3, 0x67}, 0xc)
syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980))
socket(0x1d, 0x800, 0x9)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)

13:41:25 executing program 5:
bpf$MAP_CREATE(0x1d, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:41:25 executing program 1:
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)

13:41:25 executing program 2:
bpf$MAP_CREATE(0x9, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:41:25 executing program 3:
syz_clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0], 0x1}, 0x58)
clock_gettime(0x2, &(0x7f0000000000))

13:41:25 executing program 5:
syz_clone3(&(0x7f00000005c0)={0x40100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13:41:25 executing program 0:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600))

13:41:25 executing program 2:
syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x240)

13:41:25 executing program 1:
syz_clone3(&(0x7f0000000200)={0x8004400, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/158, 0x9e, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58)

13:41:25 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$damon_contexts(r0, 0x0, 0x5)

[  224.234188][ T5116] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  224.493936][ T5116] usb 5-1: Using ep0 maxpacket: 8
[  224.614018][ T5116] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  224.622322][ T5116] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  224.630819][ T5116] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  224.640892][ T5116] usb 5-1: config 250 has no interface number 0
[  224.647286][ T5116] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  224.658914][ T5116] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  224.669472][ T5116] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  224.679791][ T5116] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  224.690637][ T5116] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  224.706418][ T5116] usb 5-1: config 250 interface 228 has no altsetting 0
[  224.784118][ T5116] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  224.792398][ T5116] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  224.806254][ T5116] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  224.818767][ T5116] usb 5-1: config 250 has no interface number 0
[  224.826098][ T5116] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  224.838927][ T5116] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  224.849568][ T5116] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  224.859899][ T5116] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  224.870246][ T5116] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  224.883758][ T5116] usb 5-1: config 250 interface 228 has no altsetting 0
[  224.984233][ T5116] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  224.992599][ T5116] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  225.001177][ T5116] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  225.013013][ T5116] usb 5-1: config 250 has no interface number 0
[  225.019589][ T5116] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  225.031229][ T5116] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  225.046573][ T5116] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  225.056964][ T5116] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  225.067258][ T5116] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  225.080779][ T5116] usb 5-1: config 250 interface 228 has no altsetting 0
[  225.244270][ T5116] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  225.253717][ T5116] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  225.263126][ T5116] usb 5-1: Product: syz
[  225.268998][ T5116] usb 5-1: Manufacturer: syz
[  225.273588][ T5116] usb 5-1: SerialNumber: syz
[  225.316062][ T5116] hub 5-1:250.228: bad descriptor, ignoring hub
[  225.322417][ T5116] hub: probe of 5-1:250.228 failed with error -5
[  225.525607][ T5116] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0xAC25 pid 0x99C6
[  225.856494][ T5115] usb 5-1: USB disconnect, device number 7
[  225.874184][ T5115] usblp0: removed
13:41:28 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)

13:41:28 executing program 5:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x6}}, 0x10)

13:41:28 executing program 3:
syz_clone(0x49000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100))

13:41:28 executing program 0:
clock_gettime(0x1, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

13:41:28 executing program 2:
syz_clone(0x44025400, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)

13:41:28 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r0)
sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0)

13:41:28 executing program 0:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000840), 0x4000, 0x0)

13:41:28 executing program 5:
r0 = socket$inet(0x2, 0x0, 0x2)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @broadcast}, &(0x7f0000000080)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000280)={@loopback, @local}, &(0x7f00000002c0)=0xc)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000a80)={'nat\x00', 0x0, 0x0, 0x0, [0x800, 0x1, 0x9, 0x0, 0x40, 0x7]}, &(0x7f0000000b00)=0x78)

13:41:28 executing program 1:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001880), 0x4100, 0x0)

13:41:28 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000080)={0x1, 0x0, [{}]})
socket$rds(0x15, 0x5, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)}, 0x80)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000001b00), 0x8)

13:41:28 executing program 1:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0xe8402, 0x0)

13:41:28 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000001c40)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}})

[  226.784237][ T5116] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  227.044083][ T5116] usb 5-1: Using ep0 maxpacket: 8
[  227.194197][ T5116] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  227.202478][ T5116] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  227.214253][ T5116] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  227.223323][ T5116] usb 5-1: config 250 has no interface number 0
[  227.229868][ T5116] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  227.241682][ T5116] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  227.255325][ T5116] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  227.265950][ T5116] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  227.278455][ T5116] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  227.292706][ T5116] usb 5-1: config 250 interface 228 has no altsetting 0
[  227.374056][ T5116] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  227.382362][ T5116] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  227.407373][ T5116] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  227.422915][ T5116] usb 5-1: config 250 has no interface number 0
[  227.430784][ T5116] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  227.450093][ T5116] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  227.460918][ T5116] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  227.478810][ T5116] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  227.493685][ T5116] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  227.519450][ T5116] usb 5-1: config 250 interface 228 has no altsetting 0
[  227.614413][ T5116] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  227.629668][ T5116] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  227.647540][ T5116] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  227.660509][ T5116] usb 5-1: config 250 has no interface number 0
[  227.670684][ T5116] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  227.689980][ T5116] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  227.700734][ T5116] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  227.719543][ T5116] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  227.744050][ T5116] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  227.765129][ T5116] usb 5-1: config 250 interface 228 has no altsetting 0
[  227.924170][ T5116] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  227.933347][ T5116] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  227.942278][ T5116] usb 5-1: Product: syz
[  227.946798][ T5116] usb 5-1: Manufacturer: syz
[  227.951535][ T5116] usb 5-1: SerialNumber: syz
[  228.013080][ T5116] hub 5-1:250.228: bad descriptor, ignoring hub
[  228.024902][ T5116] hub: probe of 5-1:250.228 failed with error -5
[  228.217297][ T5116] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0xAC25 pid 0x99C6
[  228.574455][ T4767] usb 5-1: USB disconnect, device number 8
[  228.589010][ T4767] usblp0: removed
13:41:30 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:41:30 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, 0x0)

13:41:30 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0xfffffffffffffffe, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x38)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)

13:41:30 executing program 3:
pselect6(0x40, &(0x7f0000000380), 0x0, &(0x7f0000000400)={0x5}, &(0x7f0000000440)={0x0, 0x3938700}, 0x0)

13:41:30 executing program 0:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2001)

13:41:30 executing program 2:
syz_clone(0x44025400, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)

13:41:30 executing program 1:
clock_gettime(0x4, &(0x7f0000000580))

13:41:30 executing program 0:
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0)
clock_gettime(0x1, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000001300)={0x8081280, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {}, &(0x7f00000001c0)=""/4096, 0x1000, 0x0, &(0x7f00000012c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58)

13:41:30 executing program 5:
clock_gettime(0x0, &(0x7f0000000580))

13:41:30 executing program 3:
clock_gettime(0x6, &(0x7f0000000000))
sched_rr_get_interval(0x0, &(0x7f0000000240))

13:41:30 executing program 1:
openat$pfkey(0xffffffffffffff9c, 0x0, 0x4d2000, 0x0)

13:41:31 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x0, 0x1, &(0x7f00000013c0)=@raw=[@call], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  229.424068][ T5118] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  229.673924][ T5118] usb 5-1: Using ep0 maxpacket: 8
[  229.794182][ T5118] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  229.802497][ T5118] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  229.822071][ T5118] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  229.831232][ T5118] usb 5-1: config 250 has no interface number 0
[  229.837984][ T5118] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  229.849679][ T5118] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  229.861820][ T5118] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  229.872183][ T5118] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  229.882920][ T5118] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  229.896695][ T5118] usb 5-1: config 250 interface 228 has no altsetting 0
[  229.974111][ T5118] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  229.982381][ T5118] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  229.996228][ T5118] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  230.009830][ T5118] usb 5-1: config 250 has no interface number 0
[  230.017512][ T5118] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  230.031827][ T5118] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  230.048539][ T5118] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  230.061035][ T5118] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  230.071466][ T5118] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  230.085727][ T5118] usb 5-1: config 250 interface 228 has no altsetting 0
[  230.164261][ T5118] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  230.172635][ T5118] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  230.183960][ T5118] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  230.193063][ T5118] usb 5-1: config 250 has no interface number 0
[  230.199632][ T5118] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  230.211667][ T5118] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  230.223638][ T5118] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  230.234117][ T5118] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  230.244628][ T5118] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  230.258244][ T5118] usb 5-1: config 250 interface 228 has no altsetting 0
[  230.434115][ T5118] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  230.443212][ T5118] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  230.453613][ T5118] usb 5-1: Product: syz
[  230.458285][ T5118] usb 5-1: Manufacturer: syz
[  230.462979][ T5118] usb 5-1: SerialNumber: syz
[  230.505711][ T5118] hub 5-1:250.228: bad descriptor, ignoring hub
[  230.512023][ T5118] hub: probe of 5-1:250.228 failed with error -5
[  230.726608][ T5118] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0xAC25 pid 0x99C6
[  231.064406][ T4767] usb 5-1: USB disconnect, device number 9
[  231.081440][ T4767] usblp0: removed
13:41:33 executing program 4:
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:41:33 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], 0x2c}}, 0x0)

13:41:33 executing program 1:
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_advertising_info={{}, {0x1, [{0x0, 0x0, @fixed, 0x7, "057c13c196a096"}]}}}}, 0x16)

13:41:33 executing program 0:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0xa, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:41:33 executing program 3:
syz_clone3(&(0x7f0000000340)={0x2a000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13:41:33 executing program 2:
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)

13:41:33 executing program 2:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@bcast, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

13:41:33 executing program 5:
bpf$MAP_CREATE(0x3, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:41:33 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

13:41:33 executing program 1:
bpf$MAP_CREATE(0x11, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:41:33 executing program 3:
r0 = socket(0x2, 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r1, &(0x7f0000000200)={0x10, 0x2}, 0x10)
connect$inet(r1, &(0x7f0000000900)={0x48, 0x2}, 0x10)
r2 = dup2(r1, r0)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x26, &(0x7f0000000040), 0x8)

13:41:33 executing program 0:
syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x0)

[  231.944042][   T22] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  232.183993][   T22] usb 5-1: Using ep0 maxpacket: 8
[  232.304167][   T22] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  232.313201][   T22] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  232.325722][   T22] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  232.334858][   T22] usb 5-1: config 250 has no interface number 0
[  232.341128][   T22] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  232.352783][   T22] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  232.367572][   T22] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  232.377933][   T22] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  232.392003][   T22] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  232.409321][   T22] usb 5-1: config 250 interface 228 has no altsetting 0
[  232.494072][   T22] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  232.502341][   T22] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  232.510927][   T22] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  232.520757][   T22] usb 5-1: config 250 has no interface number 0
[  232.527112][   T22] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  232.540728][   T22] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  232.552137][   T22] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  232.562477][   T22] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  232.572769][   T22] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  232.586354][   T22] usb 5-1: config 250 interface 228 has no altsetting 0
[  232.664016][   T22] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  232.672305][   T22] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  232.684279][   T22] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  232.693334][   T22] usb 5-1: config 250 has no interface number 0
[  232.699739][   T22] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  232.711361][   T22] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  232.722933][   T22] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  232.733368][   T22] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  232.743716][   T22] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  232.758630][   T22] usb 5-1: config 250 interface 228 has no altsetting 0
[  232.934034][   T22] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  232.943180][   T22] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  232.955660][   T22] usb 5-1: Product: syz
[  232.959832][   T22] usb 5-1: Manufacturer: syz
[  232.966569][   T22] usb 5-1: SerialNumber: syz
[  233.014990][   T22] hub 5-1:250.228: bad descriptor, ignoring hub
[  233.021289][   T22] hub: probe of 5-1:250.228 failed with error -5
[  233.225274][   T22] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0xAC25 pid 0x99C6
[  233.264797][   T22] usb 5-1: USB disconnect, device number 10
[  233.278531][   T22] usblp0: removed
13:41:35 executing program 4:
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:41:35 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0)

13:41:35 executing program 5:
sched_rr_get_interval(0x0, &(0x7f0000000240))

13:41:35 executing program 2:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40}}}}}]}}]}}, 0x0)

13:41:35 executing program 1:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
connect$nfc_raw(r0, 0x0, 0x0)

13:41:35 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0xfffffffffffffffe, 0x1, {0xa, 0x4e24, 0xffffffff, @private0, 0x5}, r1}}, 0x38)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x40, 0x0, 0x31}, 0xc)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x48005)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev}, &(0x7f00000002c0)=0xc)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000091}, 0x40850)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {r1, 0x8, "c02970", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {&(0x7f0000000580), r1, 0x1ff}}, 0x18)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x422400, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000006c0)={<r5=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000740)={0xa, 0x4, 0xfa00, {r5}}, 0xc)
r6 = socket$inet6(0xa, 0x5, 0xfffffffe)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000780)={'batadv0\x00', <r7=>0x0})
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000007c0)={0x0, 0x1, 0x4, r7, 0x67}, 0xc)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000840)={0x5000000000000, <r8=>r6, 0x2})
syz_clone(0x20000000, &(0x7f0000000880)="5d8a8694215b29dbfab774770a015919f19d77704829e84974c2d2afea0f9bf6351996c26c7de2ab364882fba56cf4c0616553c4089d62737f8caf612f493fb9697e6e977f5baf7ff380fdc035", 0x4d, 0x0, &(0x7f0000000940), &(0x7f0000000980)="f741778d2e86f520a3a56989")
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0)
r9 = socket(0x1d, 0x0, 0x9)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0)
socket(0xa, 0x0, 0x0)

13:41:35 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x7, &(0x7f00000013c0)=@raw=[@call, @ldst={0x1}, @initr0, @func, @cb_func], &(0x7f0000001440)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000015c0)={0x0, 0xd, 0x7f, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001600)=[0xffffffffffffffff]}, 0x80)

13:41:35 executing program 3:
io_setup(0x8000, &(0x7f0000000100))

13:41:35 executing program 1:
bpf$MAP_CREATE(0x16, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:41:35 executing program 5:
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000001840)={{0x2, 0x0, @local}, {0x0, @random="500f81807ff9"}, 0x8, {0x2, 0x0, @loopback}, 'pimreg\x00'})

13:41:35 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x13f}}, 0x20)

13:41:35 executing program 5:
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

[  234.068315][ T5116] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  234.104059][ T5118] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  234.333935][ T5116] usb 3-1: Using ep0 maxpacket: 16
[  234.353940][ T5118] usb 5-1: Using ep0 maxpacket: 8
[  234.393995][ T5157] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[  234.454185][ T5116] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  234.474105][ T5118] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  234.483262][ T5118] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  234.492608][ T5118] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  234.501808][ T5118] usb 5-1: config 250 has no interface number 0
[  234.508170][ T5118] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  234.520138][ T5118] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  234.530919][ T5118] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  234.541284][ T5118] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  234.551660][ T5118] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  234.566424][ T5118] usb 5-1: config 250 interface 228 has no altsetting 0
[  234.644073][ T5116] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  234.644130][ T5118] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  234.653419][ T5116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.669427][ T5118] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  234.674444][ T5116] usb 3-1: Product: syz
[  234.681134][ T5118] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  234.682226][ T5116] usb 3-1: Manufacturer: syz
[  234.696729][ T5116] usb 3-1: SerialNumber: syz
[  234.698023][ T5118] usb 5-1: config 250 has no interface number 0
[  234.711277][ T5118] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  234.724459][ T5846] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  234.729477][ T5118] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  234.742116][ T5118] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  234.758513][ T5118] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  234.769939][ T5157] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  234.783777][ T5118] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  234.797936][ T5118] usb 5-1: config 250 interface 228 has no altsetting 0
[  234.884161][ T5118] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  234.892458][ T5118] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  234.901209][ T5118] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  234.910295][ T5118] usb 5-1: config 250 has no interface number 0
[  234.916795][ T5118] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  234.929348][ T5118] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  234.940143][ T5118] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  234.950507][ T5118] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  234.961033][ T5118] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  234.967974][   T22] usb 3-1: USB disconnect, device number 2
[  234.976419][ T5118] usb 5-1: config 250 interface 228 has no altsetting 0
[  235.014091][ T5157] usb 6-1: string descriptor 0 read error: -22
[  235.020404][ T5157] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  235.029719][ T5157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.054329][ T5862] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  235.154047][ T5118] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  235.163231][ T5118] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  235.171954][ T5118] usb 5-1: Product: syz
[  235.176389][ T5118] usb 5-1: Manufacturer: syz
[  235.182679][ T5118] usb 5-1: SerialNumber: syz
[  235.226125][ T5118] hub 5-1:250.228: bad descriptor, ignoring hub
[  235.232568][ T5118] hub: probe of 5-1:250.228 failed with error -5
[  235.288296][ T4767] usb 6-1: USB disconnect, device number 8
[  235.436584][ T5118] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0xAC25 pid 0x99C6
[  235.478338][ T5118] usb 5-1: USB disconnect, device number 11
[  235.492438][ T5118] usblp0: removed
13:41:37 executing program 4:
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:41:37 executing program 1:
bpf$MAP_CREATE(0x4, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:41:37 executing program 3:
mq_open(&(0x7f0000000040)='\x1b\x00', 0x0, 0x0, 0x0)

13:41:37 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0xfffffffffffffffe, 0x1, {0xa, 0x4e24, 0xffffffff, @private0, 0x5}, r1}}, 0x38)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x40, 0x0, 0x31}, 0xc)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x48005)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev}, &(0x7f00000002c0)=0xc)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000091}, 0x40850)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {r1, 0x8, "c02970", "1ce79d9882c2ec02b4c40a188bb90a9f7cc6a4a06af5e39d3828eab0f259a8f0f5355855447386e1cb9e92c50d98dad578a2409bb5e7d66dca127068c2fdcaa93cdca46faefa59bf1ba69ea6e68431d0dd12e2b46c81baa51adcd1cdfc5db3a6d5970692ad3153d38e702748cea49a5a514c264205dd608f4463e337320d6f654b5e434dfe6395b41b5f9511b80ac2679c9141e52d5cd5fe8b2d0188c4f0786546300897c0a5d30c46b0fff7e1a3efee6e237ddd025210aae107dece6c9e19b644e84cc2a32cf68aed0953c625807492cef316396e9295475a7ed560b819797dc8aae4b27259f73caf039eed7ea12e39e9f0ac420c7e1f9f3a2b386bd727e8eb"}}, 0x110)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {&(0x7f0000000580), r1, 0x1ff}}, 0x18)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x422400, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000006c0)={<r5=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000740)={0xa, 0x4, 0xfa00, {r5}}, 0xc)
r6 = socket$inet6(0xa, 0x5, 0xfffffffe)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000780)={'batadv0\x00', <r7=>0x0})
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000007c0)={0x0, 0x1, 0x4, r7, 0x67}, 0xc)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000840)={0x5000000000000, <r8=>r6, 0x2})
syz_clone(0x20000000, &(0x7f0000000880)="5d8a8694215b29dbfab774770a015919f19d77704829e84974c2d2afea0f9bf6351996c26c7de2ab364882fba56cf4c0616553c4089d62737f8caf612f493fb9697e6e977f5baf7ff380fdc035", 0x4d, 0x0, &(0x7f0000000940), &(0x7f0000000980)="f741778d2e86f520a3a56989")
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0)
r9 = socket(0x1d, 0x0, 0x9)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(r9, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0)
socket(0xa, 0x0, 0x0)

13:41:37 executing program 2:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40}}}}}]}}]}}, 0x0)

13:41:37 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x4000001)

13:41:37 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0)

13:41:37 executing program 3:
syz_clone3(&(0x7f0000001300)={0x8081280, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13:41:37 executing program 1:
syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@broadcast, @random="d6a095dd2e5c", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "614d8b", 0x18, 0x3a, 0x0, @private2, @private2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00'}}}}}}, 0x0)

13:41:37 executing program 1:
syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x0)

13:41:37 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000001840)={{0x2, 0x0, @local}, {0x0, @random="500f81807ff9"}, 0x0, {0x2, 0x0, @loopback}, 'pimreg\x00'})

13:41:37 executing program 3:
bpf$MAP_CREATE(0x6, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

[  236.274003][   T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  236.284322][   T26] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  236.533927][   T26] usb 5-1: Using ep0 maxpacket: 8
[  236.539042][   T22] usb 3-1: Using ep0 maxpacket: 16
[  236.684222][   T26] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  236.692678][   T22] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  236.705585][   T26] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  236.718236][   T26] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  236.727425][   T26] usb 5-1: config 250 has no interface number 0
[  236.733746][   T26] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  236.745491][   T26] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  236.756067][   T26] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  236.766821][   T26] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  236.777186][   T26] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  236.790803][   T26] usb 5-1: config 250 interface 228 has no altsetting 0
[  236.874079][   T26] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  236.882377][   T26] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  236.891152][   T22] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  236.900256][   T26] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  236.909371][   T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.917417][   T26] usb 5-1: config 250 has no interface number 0
[  236.932796][   T22] usb 3-1: Product: syz
[  236.939094][   T22] usb 3-1: Manufacturer: syz
[  236.943713][   T22] usb 3-1: SerialNumber: syz
[  236.948395][   T26] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  236.962602][   T26] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  236.973131][   T26] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  236.983699][ T5873] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  236.990965][   T26] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  237.004895][   T26] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  237.018469][   T26] usb 5-1: config 250 interface 228 has no altsetting 0
[  237.103991][   T26] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  237.112290][   T26] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  237.126444][   T26] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  237.138605][   T26] usb 5-1: config 250 has no interface number 0
[  237.145004][   T26] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  237.159946][   T26] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  237.171813][   T26] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  237.188432][   T26] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  237.198766][   T26] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  237.227956][   T26] usb 5-1: config 250 interface 228 has no altsetting 0
[  237.233813][ T5118] usb 3-1: USB disconnect, device number 3
[  237.394754][   T26] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  237.403934][   T26] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  237.412382][   T26] usb 5-1: Product: syz
[  237.416900][   T26] usb 5-1: Manufacturer: syz
[  237.421521][   T26] usb 5-1: SerialNumber: syz
[  237.465232][   T26] hub 5-1:250.228: bad descriptor, ignoring hub
[  237.471549][   T26] hub: probe of 5-1:250.228 failed with error -5
[  237.677841][   T26] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0xAC25 pid 0x99C6
[  237.714694][   T26] usb 5-1: USB disconnect, device number 12
[  237.727422][   T26] usblp0: removed
13:41:39 executing program 4:
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:41:39 executing program 5:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x3a)

13:41:39 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
r1 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={r1, 0x0, 0x0, 0x1000})

13:41:39 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x800, 0x1}, 0x48)

13:41:39 executing program 0:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x43e6, 0x4)

13:41:39 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:41:39 executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'team_slave_1\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000000c40)={0x1d, r2}, 0x10)

13:41:39 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f00000005c0)='GPL\x00', 0x8, 0x96, &(0x7f0000000600)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0), 0x8, 0x10, 0x0}, 0x80)

13:41:39 executing program 2:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_rr_get_interval(r0, &(0x7f0000000240))

13:41:40 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x3, &(0x7f00000013c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @cb_func], &(0x7f0000001440)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:41:40 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
r1 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={r1, 0x0, 0x0, 0x1000})

13:41:40 executing program 0:
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)

13:41:40 executing program 4:
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:41:40 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'team_slave_1\x00', <r1=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:41:40 executing program 5:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4028c0, 0x0)
socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0)
ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000240))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x9, &(0x7f00000013c0)=@raw=[@call={0x85, 0x0, 0x0, 0x78}, @ldst={0x1, 0x0, 0x0, 0x3, 0x1}, @initr0, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}, @cb_func={0x18, 0x4}], &(0x7f0000001440)='GPL\x00', 0x5, 0x9c, &(0x7f0000001480)=""/156, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000015c0)={0x0, 0xd, 0x7f, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001600)=[0xffffffffffffffff]}, 0x80)

13:41:40 executing program 2:
openat$tun(0xffffffffffffff9c, 0x0, 0xe47f7a6509cf0775, 0x0)

13:41:40 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
r1 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={r1, 0x0, 0x0, 0x1000})

13:41:40 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, 0x0)

13:41:40 executing program 2:
pselect6(0x40, &(0x7f0000000380)={0x6}, &(0x7f00000003c0)={0x4}, &(0x7f0000000400)={0x5}, 0x0, 0x0)

13:41:40 executing program 0:
syz_clone(0x20210080, 0x0, 0x0, 0x0, 0x0, 0x0)

13:41:40 executing program 5:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x1c9103, 0x0)

13:41:40 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
r1 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={r1, 0x0, 0x0, 0x1000})

13:41:40 executing program 1:
syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140))

13:41:40 executing program 2:
syz_clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58)

13:41:41 executing program 4:
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:41:41 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x1000})

13:41:41 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x1, 0x0)
dup2(r0, r1)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r2, &(0x7f0000000180)={0x10, 0x2}, 0x10)
r3 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r4 = dup2(r2, r3)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f0000000240)=ANY=[@ANYBLOB="01", @ANYRES32=<r5=>0x0], &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x1a, &(0x7f0000000140)={r5}, &(0x7f00000002c0)=0x8)

13:41:41 executing program 5:
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x0, 0x3f}}, [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x5, &(0x7f00000008c0)={0x5, 0xf, 0x5}})

13:41:41 executing program 1:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0)

13:41:41 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x106, 0x1}, 0x48)

13:41:41 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0)

13:41:41 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x1000})

13:41:41 executing program 1:
pselect6(0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)={0x0, 0x3938700}, 0x0)

13:41:41 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0)
pidfd_send_signal(r0, 0x0, 0x0, 0x0)

13:41:41 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x1000})

13:41:41 executing program 0:
syz_clone3(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
syz_clone(0x44025400, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)

[  239.674169][   T26] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  239.913949][   T26] usb 6-1: Using ep0 maxpacket: 16
13:41:41 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:41:41 executing program 2:
memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x2)

13:41:41 executing program 3:
r0 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000600)={r0, 0x0, 0x0, 0x1000})

[  240.114094][   T26] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  240.124314][   T26] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  240.294017][   T26] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  240.303816][   T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.317552][   T26] usb 6-1: Product: syz
[  240.321714][   T26] usb 6-1: Manufacturer: syz
[  240.330325][   T26] usb 6-1: SerialNumber: syz
[  240.354147][ T5943] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  240.617774][   T26] usb 6-1: USB disconnect, device number 9
13:41:42 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000480)={0x10, 0x2}, 0x10)

13:41:42 executing program 1:
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), 0xffffffffffffffff)

13:41:42 executing program 0:
syz_clone3(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
syz_clone(0x44025400, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)

13:41:42 executing program 3:
r0 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000600)={r0, 0x0, 0x0, 0x1000})

13:41:42 executing program 2:
openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)

13:41:42 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:41:42 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48)

13:41:42 executing program 2:
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9e, 0x80, 0x3f, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xe0, 0x7, 0x3f}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x1}}]}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4}}]})
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)

13:41:42 executing program 3:
r0 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000600)={r0, 0x0, 0x0, 0x1000})

13:41:42 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0xfffffffffffffffe, 0x1, {0xa, 0x4e24, 0xffffffff, @private0, 0x5}}}, 0x38)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {0x0}}, 0x18)
socket$inet6(0xa, 0x0, 0xfffffffe)
syz_clone(0x20000000, &(0x7f0000000880), 0x0, &(0x7f0000000900), 0x0, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x804)
socket$nl_generic(0x10, 0x3, 0x10)

13:41:43 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x8ed, 0xffffffffffffffff, 0x800}, 0x48)

13:41:43 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r1 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={r1, 0x0, 0x0, 0x1000})

13:41:43 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x1, &(0x7f00000013c0)=@raw=[@call], &(0x7f0000001440)='GPL\x00', 0x0, 0x9c, &(0x7f0000001480)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:41:43 executing program 5:
bpf$MAP_CREATE(0x17, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:41:43 executing program 0:
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0)
ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, 0x0)
socket$rds(0x15, 0x5, 0x0)

13:41:43 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r1 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={r1, 0x0, 0x0, 0x1000})

13:41:43 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

13:41:43 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:41:43 executing program 5:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)

[  241.624082][ T5118] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  241.891475][ T5118] usb 3-1: Using ep0 maxpacket: 16
[  242.054008][ T5118] usb 3-1: unable to get BOS descriptor or descriptor too short
[  242.134087][ T5118] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  242.304172][ T5118] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  242.322755][ T5118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.330974][ T5118] usb 3-1: Product: syz
[  242.335793][ T5118] usb 3-1: Manufacturer: syz
[  242.340494][ T5118] usb 3-1: SerialNumber: syz
[  242.374440][ T5995] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  242.642239][ T5118] usb 3-1: USB disconnect, device number 4
13:41:44 executing program 2:
r0 = syz_clone(0x820000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r0], 0x1}, 0x58)

13:41:44 executing program 5:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000080)={0x38, 0x2, r3})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r5, 0x0, &(0x7f00007fe000/0x800000)=nil, 0x800000})

13:41:44 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
r1 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={r1, 0x0, 0x0, 0x1000})

13:41:44 executing program 0:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x101100, 0x0)

13:41:44 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

13:41:44 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:41:44 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
r1 = memfd_create(0x0, 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={r1, 0x0, 0x0, 0x1000})

13:41:44 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  243.168474][ T6024] iommufd_mock iommufd_mock0: Adding to iommu group 0
13:41:45 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
r1 = memfd_create(0x0, 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={r1, 0x0, 0x0, 0x1000})

13:41:45 executing program 2:
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)

13:41:45 executing program 0:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c5500, 0x0)

13:41:45 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
r1 = memfd_create(0x0, 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={r1, 0x0, 0x0, 0x1000})

[  243.434163][ T5113] usb 5-1: new high-speed USB device number 13 using dummy_hcd
13:41:45 executing program 2:
bpf$MAP_CREATE(0xf, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:41:45 executing program 5:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000080)={0x38, 0x2, r3})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r5, 0x0, &(0x7f00007fe000/0x800000)=nil, 0x800000})

13:41:45 executing program 1:
setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@empty, @remote, 0x0, "3eee0c234edc76c80e11332451bb5dacea0082bc42836ddc57fdc9608143ee59"}, 0x3c)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600))

13:41:45 executing program 0:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c5500, 0x0)

13:41:45 executing program 3:
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
r0 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000600)={r0, 0x0, 0x0, 0x1000})

[  243.644704][ T5113] usb 5-1: device descriptor read/64, error 18
[  243.668855][ T6023] iommufd_mock iommufd_mock0: Removing from iommu group 0
[  243.802500][ T6059] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  243.934082][ T5113] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  243.965585][ T6057] iommufd_mock iommufd_mock0: Removing from iommu group 0
[  244.134064][ T5113] usb 5-1: device descriptor read/64, error 18
[  244.266386][ T5113] usb usb5-port1: attempt power cycle
[  244.673961][ T5113] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  244.844166][ T5113] usb 5-1: device descriptor read/8, error -61
[  245.123976][ T5113] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  245.294141][ T5113] usb 5-1: device descriptor read/8, error -61
[  245.415063][ T5113] usb usb5-port1: unable to enumerate USB device
13:41:47 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:41:47 executing program 2:
mlock(&(0x7f0000000000/0x3000)=nil, 0x3000)
munmap(&(0x7f0000000000/0x4000)=nil, 0x4000)

13:41:47 executing program 3:
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
r0 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000600)={r0, 0x0, 0x0, 0x1000})

13:41:47 executing program 0:
clock_gettime(0xef000000, 0x0)

13:41:47 executing program 1:
bpf$MAP_CREATE(0x12, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:41:47 executing program 5:
syz_emit_ethernet(0x176, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01bcf0", 0x140, 0x3a, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, [{0x5, 0xf, "fff548ee25cb9b9cc02aedcd69704b2d6c9860c104aef99dbfd44f60ae7e742f0a671823fdb0166e77b8d78d5f70ca5c9dce9d19475996d555d8b6351cf0fea3c2f9d2f2ffb224fe36f8a4171250414ce29bca05f7a6d351d97ea6a195aa1b950c34464b0ce7957ee68322c44f1b0cfd23c47d3d2670142f03"}, {0x3, 0x16, "0cbd3bfec1e41dd4b07cbbed54646205b2610e582370ce015b37f2c7aedf04b8213524f52879edc2b95a628d01c1b55627dc7b06ec909d25ec586558c951616b89f1618d384efac7bcb4a1921ebe7ee46733d3e7c838b90353097176b76ae72cb0b71856425f504e0c5161f96af2ebcf650e57577858025a219be423cb0715afa23aa5eef3f0652ab69adc5ddbb7736fc57b96cd6b503ce017cd5b4dac8201d2ac694d6f5742dc3bb32ba7a2abc68f51816b9a"}]}}}}}}, 0x0)

13:41:47 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mq_timedreceive(r0, 0x0, 0x0, 0x0, &(0x7f0000000140))

13:41:47 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x1, &(0x7f00000013c0)=@raw=[@call], &(0x7f0000001440)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:41:47 executing program 3:
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
r0 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000600)={r0, 0x0, 0x0, 0x1000})

13:41:47 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)

13:41:47 executing program 0:
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000001300)={0x8081280, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13:41:48 executing program 5:
syz_clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080), {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58)

[  246.593930][ T5157] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  246.783981][ T5157] usb 5-1: device descriptor read/64, error 18
[  247.053959][ T5157] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  247.244100][ T5157] usb 5-1: device descriptor read/64, error 18
[  247.365690][ T5157] usb usb5-port1: attempt power cycle
[  247.774066][ T5157] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  247.944035][ T5157] usb 5-1: device descriptor read/8, error -61
[  248.223952][ T5157] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  248.394204][ T5157] usb 5-1: device descriptor read/8, error -61
[  248.514681][ T5157] usb usb5-port1: unable to enumerate USB device
13:41:50 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:41:50 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0)

13:41:50 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
accept$netrom(r0, 0x0, 0x0)

13:41:50 executing program 1:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)

13:41:50 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x3, &(0x7f00000013c0)=@raw=[@ldst={0x0, 0x0, 0x1}, @initr0], &(0x7f0000001440)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:41:50 executing program 5:
socket$rds(0x15, 0x5, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x634c80, 0x0)

13:41:50 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:41:51 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0)

13:41:51 executing program 1:
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0xfff}, 0x0, 0x0)

13:41:51 executing program 2:
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000d40), 0x2, 0x0)

13:41:51 executing program 5:
syz_clone3(&(0x7f0000001300)={0x8081280, &(0x7f0000000100), 0x0, 0x0, {}, &(0x7f00000001c0)=""/4096, 0x1000, 0x0, 0x0}, 0x58)

13:41:51 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x0, 0x0, 0x0, &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  249.614079][   T26] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  249.804090][   T26] usb 5-1: device descriptor read/64, error 18
[  250.074057][   T26] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  250.273959][   T26] usb 5-1: device descriptor read/64, error 18
[  250.395040][   T26] usb usb5-port1: attempt power cycle
[  250.805987][   T26] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  250.974180][   T26] usb 5-1: device descriptor read/8, error -61
[  251.248374][   T26] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  251.444135][   T26] usb 5-1: device descriptor read/8, error -61
[  251.572881][   T26] usb usb5-port1: unable to enumerate USB device
13:41:54 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:41:54 executing program 2:
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)

13:41:54 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0)

13:41:54 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48)

13:41:54 executing program 0:
openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)

13:41:54 executing program 5:
syz_clone3(&(0x7f0000001300)={0x8081280, &(0x7f0000000100), 0x0, 0x0, {}, &(0x7f00000001c0)=""/4096, 0x1000, 0x0, 0x0}, 0x58)

13:41:54 executing program 0:
mq_open(&(0x7f0000000000)='^.\\!/%\'\x00', 0x0, 0x0, 0x0)

13:41:54 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x3a)

13:41:54 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x1000})

13:41:54 executing program 2:
bpf$MAP_CREATE(0x2, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:41:54 executing program 0:
syz_emit_ethernet(0x5c, &(0x7f00000005c0)={@broadcast, @random="d6a095dd2e5c", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "614d8b", 0x26, 0x3a, 0x0, @private2, @private2, {[@dstopts], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', [{}, {}, {}]}}}}}}, 0x0)

13:41:54 executing program 1:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x105000)

[  252.677812][ T5115] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  252.884073][ T5115] usb 5-1: device descriptor read/64, error 18
[  253.153962][ T5115] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  253.344029][ T5115] usb 5-1: device descriptor read/64, error 18
[  253.467234][ T5115] usb usb5-port1: attempt power cycle
[  253.874030][ T5115] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  254.054175][ T5115] usb 5-1: device descriptor read/8, error -61
[  254.324013][ T5115] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  254.494225][ T5115] usb 5-1: device descriptor read/8, error -61
[  254.614024][ T5115] usb usb5-port1: unable to enumerate USB device
13:41:57 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:41:57 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x1000})

13:41:57 executing program 5:
bpf$MAP_CREATE(0x1e, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:41:57 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:41:57 executing program 1:
sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2a8, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x44, 0x13, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [{0x8, 0x1, ']\\@!'}, {0x8, 0x1, '%)*+'}, {0xb, 0x1, '}*(:!^v'}]}, {0x14, 0x0, 0x0, 0x1, [{0x5, 0x1, '.'}, {0x4}, {0x4}]}, {0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, '[/'}]}]}, @NFC_ATTR_LLC_SDP={0x15c, 0x13, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, '$!'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x6, 0x1, '#{'}, {0x9, 0x1, '\\)\'\\!'}, {0x4}]}, {0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, ')'}, {0xb, 0x1, ',%\xcd\'$.\\'}, {0x5, 0x1, '#'}, {0x4}]}, {0x34, 0x0, 0x0, 0x1, [{0x9, 0x1, '%+&(:'}, {0x4}, {0x5, 0x1, 'Y'}, {0xa, 0x1, '-@%/\'/'}, {0xa, 0x1, ']%--*,'}]}, {0x28, 0x0, 0x0, 0x1, [{0xb, 0x1, '[@/-%a\"'}, {0x4}, {0x14, 0x1, '\\,[*}^\x97\\{#\\/##%@'}]}, {0x48, 0x0, 0x0, 0x1, [{0x5, 0x1, '('}, {0x7, 0x1, '-%&'}, {0x4}, {0x5, 0x1, '\\'}, {0x17, 0x1, '\\\\@].+*$\\[#\xf1-#++\'-\x00'}, {0x5, 0x1, '/'}, {0x7, 0x1, '#!\xfc'}]}, {0x34, 0x0, 0x0, 0x1, [{0x4}, {0x4}, {0x9, 0x1, ':$\xca*{'}, {0x9, 0x1, '\\.#/('}, {0x4}, {0x4}, {0x6, 0x1, '\\$'}]}, {0x34, 0x0, 0x0, 0x1, [{0x7, 0x1, '\x9a()'}, {0x4}, {0x4}, {0x7, 0x1, '@:/'}, {0x6, 0x1, '&/'}, {0x4}, {0x4}, {0x6, 0x1, ',}'}]}]}, @NFC_ATTR_LLC_SDP={0x30, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0x9, 0x1, '\\}[:l'}]}, {0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, '&\''}]}, {0x10, 0x0, 0x0, 0x1, [{0x4}, {0x5, 0x1, '*'}]}]}, @NFC_ATTR_LLC_SDP={0x68, 0x13, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [{0xc, 0x1, '\\#[*{&\'&'}, {0x5, 0x1, '{'}, {0x5, 0x1, '{'}, {0x5, 0x1, '('}, {0x4}, {0x6, 0x1, '-,'}, {0x7, 0x1, '\\/\''}, {0x7, 0x1, '[!,'}]}, {0x20, 0x0, 0x0, 0x1, [{0x6, 0x1, '!&'}, {0x6, 0x1, '])'}, {0x9, 0x1, '-}:\\!'}]}]}, @NFC_ATTR_LLC_SDP={0x5c, 0x13, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [{0x4}, {0x7, 0x1, '.#$'}, {0x6, 0x1, '!+'}]}, {0x8, 0x0, 0x0, 0x1, [{0x4}]}, {0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, '.:'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x5, 0x1, '\\'}, {0x6, 0x1, '}*'}, {0x4}, {0x4}, {0x5, 0x1, '.'}, {0x5, 0x1, ')'}]}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x2, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44000)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3ff}, [@jmp={0x5, 0x0, 0x0, 0x9, 0x9, 0x18, 0x4}]}, &(0x7f00000005c0)='GPL\x00', 0x8, 0x96, &(0x7f0000000600)=""/150, 0x40f00, 0xc, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000006c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x6, 0x8, 0x5}, 0x10}, 0x80)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000840))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
r1 = pidfd_getfd(r0, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x800, 0x1, 0x100, r1, 0x7, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x2}, 0x48)
ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000a40)=0x7)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000a80)={'hsr0\x00'})
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000b00))
socket$isdn(0x22, 0x3, 0x3)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000dc0))
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e40))
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000e80))
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000ec0))
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000f00))
sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x0)

13:41:57 executing program 0:
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000080)={0x38, 0x2, r3})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r5, 0x0, &(0x7f00007fe000/0x800000)=nil, 0x800000})

13:41:57 executing program 5:
syz_emit_ethernet(0xe, &(0x7f0000000000)={@multicast, @multicast, @void, {@mpls_mc}}, 0x0)

13:41:57 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x0, 0x1}}, 0x20)
syz_clone(0x20000000, &(0x7f0000000880), 0x0, 0x0, &(0x7f0000000940), &(0x7f0000000980)="f741778d2e86f520a3a5698947cbb60e61d2341a2d7c6ca2cdced0ce39ee7d12e7868a0ee4484c6bf94e7095ed08f67d2917f1059ec83eb4b992cbce3719e57ebce44840a311a762d205c41f4ffd8ba128c712a7bef4bbe970c9fe3441c64e51bb0bbc1ac420772c0d6b23ae00161718451e9862db14dace86")
syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff)
socket(0xa, 0x800, 0x5)

13:41:57 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x1000})

13:41:57 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x1, &(0x7f00000013c0)=@raw=[@func], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  255.476715][ T6147] iommufd_mock iommufd_mock0: Adding to iommu group 0
13:41:57 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0xfffffffffffffffe, 0x1, {0xa, 0x4e24, 0xffffffff, @private0, 0x5}}}, 0x38)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x40}, 0xc)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x0, 0x70bd27, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x48005)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@dev, @initdev}, &(0x7f00000002c0)=0xc)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00'})
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {&(0x7f0000000580)}}, 0x18)
socket$inet6(0xa, 0x5, 0xfffffffe)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv0\x00', <r2=>0x0})
syz_clone(0x20000000, &(0x7f0000000880), 0x0, &(0x7f0000000900), 0x0, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x40050}, 0x804)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000cc0)={'erspan0\x00', &(0x7f0000000c00)={'erspan0\x00', r2, 0x10, 0x20, 0x40, 0x10001, {{0xa, 0x4, 0x1, 0x30, 0x28, 0x64, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1, {[@rr={0x7, 0xb, 0x55, [@dev={0xac, 0x14, 0x14, 0x34}, @multicast2]}, @ssrr={0x89, 0x7, 0x0, [@multicast2]}]}}}}})
socket$nl_generic(0x10, 0x3, 0x10)

13:41:57 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
r1 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={r1})

[  255.721734][ T6143] iommufd_mock iommufd_mock0: Removing from iommu group 0
[  255.744947][ T1228] ieee802154 phy0 wpan0: encryption failed: -22
[  255.751282][ T1228] ieee802154 phy1 wpan1: encryption failed: -22
[  255.884144][ T5118] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  256.073948][ T5118] usb 5-1: device descriptor read/64, error 18
[  256.354052][ T5118] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  256.563955][ T5118] usb 5-1: device descriptor read/64, error 18
[  256.686074][ T5118] usb usb5-port1: attempt power cycle
[  257.104051][ T5118] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  257.294011][ T5118] usb 5-1: device descriptor read/8, error -61
[  257.564169][ T5118] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  257.753987][ T5118] usb 5-1: device descriptor read/8, error -61
[  257.875323][ T5118] usb usb5-port1: unable to enumerate USB device
13:42:00 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:42:00 executing program 1:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0)

13:42:00 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
r1 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={r1})

13:42:00 executing program 0:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0)

13:42:00 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x0, 0x1}}, 0x20)
syz_clone(0x20000000, &(0x7f0000000880), 0x0, 0x0, &(0x7f0000000940), &(0x7f0000000980)="f741778d2e86f520a3a5698947cbb60e61d2341a2d7c6ca2cdced0ce39ee7d12e7868a0ee4484c6bf94e7095ed08f67d2917f1059ec83eb4b992cbce3719e57ebce44840a311a762d205c41f4ffd8ba128c712a7bef4bbe970c9fe3441c64e51bb0bbc1ac420772c0d6b23ae00161718451e9862db14dace86")
syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff)
socket(0xa, 0x800, 0x5)

13:42:00 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48)

13:42:00 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
r1 = memfd_create(&(0x7f00000005c0)='team_slave_1\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={r1})

13:42:00 executing program 5:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'team_slave_1\x00'})

13:42:00 executing program 1:
bpf$MAP_CREATE(0x8, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:42:00 executing program 1:
bpf$MAP_CREATE(0x15, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:42:00 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)

13:42:00 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0xfffffffffffffffe, 0x1, {0xa, 0x4e24, 0xffffffff, @private0, 0x5}}}, 0x38)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x40}, 0xc)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x0, 0x70bd27, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x48005)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@dev, @initdev}, &(0x7f00000002c0)=0xc)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00'})
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {&(0x7f0000000580)}}, 0x18)
socket$inet6(0xa, 0x5, 0xfffffffe)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv0\x00', <r2=>0x0})
syz_clone(0x20000000, &(0x7f0000000880), 0x0, &(0x7f0000000900), 0x0, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x40050}, 0x804)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000cc0)={'erspan0\x00', &(0x7f0000000c00)={'erspan0\x00', r2, 0x10, 0x20, 0x40, 0x10001, {{0xa, 0x4, 0x1, 0x30, 0x28, 0x64, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1, {[@rr={0x7, 0xb, 0x55, [@dev, @multicast2]}, @ssrr={0x89, 0x7, 0x0, [@multicast2]}]}}}}})
socket$nl_generic(0x10, 0x3, 0x10)

[  258.791560][ T6192] Zero length message leads to an empty skb
[  258.814293][ T5113] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  258.873975][ T5115] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  259.063917][ T5113] usb 1-1: Using ep0 maxpacket: 16
[  259.074190][ T5115] usb 5-1: device descriptor read/64, error 18
[  259.184055][ T5113] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  259.343999][ T5115] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  259.354208][ T5113] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  259.363290][ T5113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.373326][ T5113] usb 1-1: Product: syz
[  259.378936][ T5113] usb 1-1: Manufacturer: syz
[  259.383557][ T5113] usb 1-1: SerialNumber: syz
[  259.534028][ T5115] usb 5-1: device descriptor read/64, error 18
[  259.628535][ T5113] usb 1-1: USB disconnect, device number 7
[  259.654212][ T5115] usb usb5-port1: attempt power cycle
[  260.063993][ T5115] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  260.234046][ T5115] usb 5-1: device descriptor read/8, error -61
[  260.513951][ T5115] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  260.684432][ T5115] usb 5-1: device descriptor read/8, error -61
[  260.806664][ T5115] usb usb5-port1: unable to enumerate USB device
13:42:03 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa00"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:42:03 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000a80)={'hsr0\x00'})

13:42:03 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:42:03 executing program 5:
syz_clone3(&(0x7f0000000200)={0x800, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/237, 0xed, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x58)

13:42:03 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c03"], 0x2c}}, 0x0)

13:42:03 executing program 0:
socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x9, &(0x7f00000013c0)=@raw=[@call, @ldst={0x1}, @initr0, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}, @cb_func], &(0x7f0000001440)='GPL\x00', 0x5, 0x9c, &(0x7f0000001480)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x9}, 0x10}, 0x80)

13:42:03 executing program 0:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, 0x0)

13:42:03 executing program 5:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x3a)

13:42:03 executing program 3:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x3c9401)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)

13:42:03 executing program 1:
pselect6(0x40, &(0x7f0000000380)={0x6}, &(0x7f00000003c0)={0x4}, &(0x7f0000000400)={0x5}, &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x8]}, 0x8})

13:42:03 executing program 2:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0})

13:42:03 executing program 0:
socket$inet(0x2, 0xc0a, 0x0)

[  262.063968][ T4767] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  262.084257][ T5157] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  262.323948][ T4767] usb 3-1: Using ep0 maxpacket: 16
[  262.344037][ T5157] usb 5-1: Using ep0 maxpacket: 8
[  262.474140][ T5157] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  262.482512][ T5157] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  262.493090][ T5157] usb 5-1: config 250 has no interfaces?
[  262.499135][ T4767] usb 3-1: unable to get BOS descriptor or descriptor too short
[  262.594967][ T5157] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  262.603354][ T4767] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  262.616380][ T5157] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  262.628035][ T5157] usb 5-1: config 250 has no interfaces?
[  262.724146][ T5157] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  262.733522][ T5157] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  262.744661][ T5157] usb 5-1: config 250 has no interfaces?
[  262.824045][ T4767] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  262.834339][ T4767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.842383][ T4767] usb 3-1: Product: syz
[  262.846902][ T4767] usb 3-1: Manufacturer: syz
[  262.851544][ T4767] usb 3-1: SerialNumber: syz
[  262.913999][ T5157] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  262.923150][ T5157] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  262.932871][ T5157] usb 5-1: Product: syz
[  262.937342][ T5157] usb 5-1: Manufacturer: syz
[  262.941932][ T5157] usb 5-1: SerialNumber: syz
[  263.101702][ T5115] usb 3-1: USB disconnect, device number 5
13:42:06 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa00"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:42:06 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0xfffffffffffffffe, 0x1, {0xa, 0x4e24, 0xffffffff, @private0}}}, 0x38)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
syz_clone(0x20000000, &(0x7f0000000880), 0x0, &(0x7f0000000900), 0x0, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x40050}, 0x0)

13:42:06 executing program 3:
syz_emit_ethernet(0x5d, &(0x7f00000005c0)={@broadcast, @random="d6a095dd2e5c", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "614d8b", 0x27, 0x3a, 0x0, @private2, @private2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', [{0x0, 0x0, "ef"}, {0x0, 0x0, 'U'}, {0x0, 0x1, "8297e5661031f2"}]}}}}}}, 0x0)

13:42:06 executing program 1:
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000001d40)={'broute\x00'}, &(0x7f0000001dc0)=0x78)

13:42:06 executing program 0:
syz_clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0], 0x1}, 0x58)
clock_gettime(0x0, &(0x7f0000000000))

13:42:06 executing program 2:
openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001040), 0x119801, 0x0)

[  264.681555][ T4767] usb 5-1: USB disconnect, device number 37
13:42:06 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00'})

13:42:06 executing program 2:
socket$inet(0x2, 0xc0a, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000080))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@loopback, @local}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, 0x0)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0)
socket$inet(0x2, 0x0, 0xfffffffb)

13:42:06 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0)

13:42:06 executing program 2:
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x20}, &(0x7f0000000140))

13:42:06 executing program 0:
openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)

13:42:06 executing program 1:
clock_gettime(0x2, &(0x7f0000000580))

[  265.012248][ T6248] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org.
[  265.193954][ T4767] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  265.434074][ T4767] usb 5-1: Using ep0 maxpacket: 8
[  265.554133][ T4767] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  265.562684][ T4767] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  265.573254][ T4767] usb 5-1: config 250 has no interfaces?
[  265.654082][ T4767] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  265.662358][ T4767] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  265.672836][ T4767] usb 5-1: config 250 has no interfaces?
[  265.754855][ T4767] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  265.763159][ T4767] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  265.773485][ T4767] usb 5-1: config 250 has no interfaces?
[  265.964292][ T4767] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  265.973385][ T4767] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  265.982682][ T4767] usb 5-1: Product: syz
[  265.986929][ T4767] usb 5-1: Manufacturer: syz
[  265.991529][ T4767] usb 5-1: SerialNumber: syz
13:42:09 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa00"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:42:09 executing program 2:
syz_clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58)

13:42:09 executing program 3:
mq_open(&(0x7f0000000040)='\x1b\x00', 0x40, 0x0, &(0x7f0000000080)={0x0, 0x44c1, 0x100000001, 0x40})

13:42:09 executing program 0:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x450002)

13:42:09 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:42:09 executing program 1:
bpf$MAP_CREATE(0xd, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

[  267.766457][ T4767] usb 5-1: USB disconnect, device number 38
13:42:09 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x0)

13:42:09 executing program 3:
socket$inet6(0xa, 0x2, 0x100)

13:42:09 executing program 5:
syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0)

13:42:09 executing program 0:
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)

13:42:09 executing program 1:
bpf$MAP_CREATE(0x23, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:42:09 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[  268.233959][ T4767] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  268.474060][ T4767] usb 5-1: Using ep0 maxpacket: 8
[  268.614086][ T4767] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  268.625786][ T4767] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  268.636558][ T4767] usb 5-1: config 250 has no interfaces?
[  268.713953][ T4767] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  268.722405][ T4767] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  268.736792][ T4767] usb 5-1: config 250 has no interfaces?
[  268.814535][ T4767] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  268.822814][ T4767] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  268.833152][ T4767] usb 5-1: config 250 has no interfaces?
[  269.004147][ T4767] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  269.013238][ T4767] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  269.021899][ T4767] usb 5-1: Product: syz
[  269.026571][ T4767] usb 5-1: Manufacturer: syz
[  269.031284][ T4767] usb 5-1: SerialNumber: syz
13:42:12 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff110701030009"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:42:12 executing program 5:
syz_clone3(&(0x7f0000000200)={0x20880000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x58)

13:42:12 executing program 1:
clock_gettime(0x5, &(0x7f0000000580))

13:42:12 executing program 2:
memfd_create(&(0x7f00000002c0)=',\x00', 0x5)

13:42:12 executing program 3:
openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f00000004c0), 0x282080, 0x0)

13:42:12 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000180)={@x25, {0x0}, 0x0}, 0xa0)

[  270.862854][   T22] usb 5-1: USB disconnect, device number 39
13:42:12 executing program 3:
syz_clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x58)

13:42:12 executing program 0:
bpf$MAP_CREATE(0xa, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:42:12 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

13:42:12 executing program 1:
syz_clone3(&(0x7f00000005c0)={0x1000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13:42:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], 0x2c}}, 0x0)

13:42:12 executing program 2:
bpf$MAP_CREATE(0xe, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

[  271.314014][   T22] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  271.563970][   T22] usb 5-1: Using ep0 maxpacket: 8
[  271.684126][   T22] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  271.692437][   T22] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  271.704054][   T22] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  271.714397][   T22] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  271.723455][   T22] usb 5-1: config 250 has no interface number 0
[  271.729917][   T22] usb 5-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  271.744597][   T22] usb 5-1: config 250 interface 228 has no altsetting 0
[  271.823985][   T22] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  271.832311][   T22] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  271.841952][   T22] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  271.852303][   T22] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  271.861381][   T22] usb 5-1: config 250 has no interface number 0
[  271.867692][   T22] usb 5-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  271.881216][   T22] usb 5-1: config 250 interface 228 has no altsetting 0
[  271.974061][   T22] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  271.982430][   T22] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  271.991001][   T22] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  272.001337][   T22] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  272.010453][   T22] usb 5-1: config 250 has no interface number 0
[  272.016850][   T22] usb 5-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  272.031983][   T22] usb 5-1: config 250 interface 228 has no altsetting 0
[  272.204193][   T22] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  272.213285][   T22] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  272.222013][   T22] usb 5-1: Product: syz
[  272.226411][   T22] usb 5-1: Manufacturer: syz
[  272.231032][   T22] usb 5-1: SerialNumber: syz
[  272.285185][   T22] hub 5-1:250.228: bad descriptor, ignoring hub
[  272.294554][   T22] hub: probe of 5-1:250.228 failed with error -5
13:42:15 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700})

13:42:15 executing program 5:
mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x1})

13:42:15 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff110701030009"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:42:15 executing program 1:
socket$inet(0x2, 0x0, 0xfffffffb)

13:42:15 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff}})

13:42:15 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000580)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f00000005c0)='GPL\x00', 0x8, 0x96, &(0x7f0000000600)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:42:15 executing program 5:
syz_clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
clock_gettime(0x0, &(0x7f0000000000))
syz_clone(0x44025400, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)

13:42:15 executing program 1:
syz_clone3(&(0x7f0000000200)={0x8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13:42:15 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x800, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48)

13:42:15 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x1, &(0x7f00000013c0)=@raw=[@call], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

13:42:15 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00'})

13:42:15 executing program 3:
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0)

13:42:15 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'caif0\x00'})

13:42:15 executing program 0:
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  274.197631][ T5113] usb 5-1: reset high-speed USB device number 40 using dummy_hcd
[  274.454139][ T5113] usb 5-1: Using ep0 maxpacket: 8
[  275.237134][   T26] usb 5-1: USB disconnect, device number 40
13:42:17 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff110701030009"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:42:17 executing program 2:
clock_gettime(0x3, &(0x7f0000000580))

13:42:17 executing program 1:
bpf$MAP_CREATE(0x10, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:42:17 executing program 0:
mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}})

13:42:17 executing program 5:
bpf$MAP_CREATE(0x1c, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:42:17 executing program 3:
socket$inet6(0xa, 0x0, 0x31f)

13:42:17 executing program 3:
bpf$MAP_CREATE(0x13, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

13:42:17 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000080)={0x4, 0x8}, 0x10)

13:42:17 executing program 5:
syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640)="b964cd7652715bf528409f58b5fab7af6e8bf99e8a1bcc89bb5b65d19195f2bf1b9d00b08583d44623d5")

13:42:17 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe00000090582028c"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)

13:42:17 executing program 2:
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c030000", @ANYRES16=0x0, @ANYBLOB="00002bbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="813d573ae891b8d9d465f508000100", @ANYRES32, @ANYRESHEX, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0xc004)

13:42:17 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00'})
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {0x0}}, 0x18)
socket$inet6(0xa, 0x0, 0xfffffffe)
syz_clone(0x20000000, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

[  276.034019][ T4767] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  276.103925][ T5119] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  276.273903][ T4767] usb 5-1: Using ep0 maxpacket: 8
[  276.354029][ T5119] usb 2-1: Using ep0 maxpacket: 8
[  276.424606][ T4767] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  276.432947][ T4767] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  276.441635][ T4767] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  276.453254][ T4767] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  276.462415][ T4767] usb 5-1: config 250 has no interface number 0
[  276.468792][ T4767] usb 5-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  276.482601][ T4767] usb 5-1: config 250 interface 228 has no altsetting 0
[  276.490018][ T5119] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  276.498516][ T5119] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  276.507350][ T5119] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  276.516721][ T5119] usb 2-1: config 250 has no interface number 0
[  276.522979][ T5119] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  276.536093][ T5119] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  276.546778][ T5119] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 140
[  276.559881][ T5119] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  276.573624][ T5119] usb 2-1: config 250 interface 228 has no altsetting 0
[  276.580883][ T4767] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  276.589228][ T4767] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  276.597893][ T4767] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  276.608743][ T4767] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  276.618002][ T4767] usb 5-1: config 250 has no interface number 0
[  276.624764][ T4767] usb 5-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  276.638473][ T4767] usb 5-1: config 250 interface 228 has no altsetting 0
[  276.664817][ T5119] usb 2-1: config index 1 descriptor too short (expected 5924, got 36)
[  276.673112][ T5119] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  276.681844][ T5119] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  276.692070][ T5119] usb 2-1: config 250 has no interface number 0
[  276.698720][ T5119] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  276.710606][ T5119] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  276.721368][ T5119] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 140
[  276.732302][ T4767] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  276.740863][ T5119] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  276.757216][ T4767] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  276.765773][ T4767] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  276.776096][ T5119] usb 2-1: config 250 interface 228 has no altsetting 0
[  276.783118][ T4767] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  276.792230][ T4767] usb 5-1: config 250 has no interface number 0
[  276.798625][ T4767] usb 5-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  276.812181][ T4767] usb 5-1: config 250 interface 228 has no altsetting 0
[  276.854079][ T5119] usb 2-1: config index 2 descriptor too short (expected 5924, got 36)
[  276.866819][ T5119] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  276.876692][ T5119] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  276.889678][ T5119] usb 2-1: config 250 has no interface number 0
[  276.896361][ T5119] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  276.908236][ T5119] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  276.919016][ T5119] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 140
[  276.929787][ T5119] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  276.943649][ T5119] usb 2-1: config 250 interface 228 has no altsetting 0
[  276.984183][ T4767] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  276.993265][ T4767] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  277.002807][ T4767] usb 5-1: Product: syz
[  277.007479][ T4767] usb 5-1: Manufacturer: syz
[  277.012110][ T4767] usb 5-1: SerialNumber: syz
[  277.065321][ T4767] hub 5-1:250.228: bad descriptor, ignoring hub
[  277.071633][ T4767] hub: probe of 5-1:250.228 failed with error -5
[  277.124127][ T5119] usb 2-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  277.133204][ T5119] usb 2-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  277.142121][ T5119] usb 2-1: Product: syz
[  277.146485][ T5119] usb 2-1: Manufacturer: syz
[  277.151084][ T5119] usb 2-1: SerialNumber: syz
[  277.194989][ T5119] hub 2-1:250.228: bad descriptor, ignoring hub
[  277.201333][ T5119] hub: probe of 2-1:250.228 failed with error -5
[  277.406291][ T5119] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0xAC25 pid 0x99C6
[  277.465564][ T5119] usb 2-1: USB disconnect, device number 7
[  277.479316][ T5119] usblp0: removed
[  278.013949][ T5119] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  278.253994][ T5119] usb 2-1: Using ep0 maxpacket: 8
[  278.384415][ T5119] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  278.393309][ T5119] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  278.402674][ T5119] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  278.411774][ T5119] usb 2-1: config 250 has no interface number 0
[  278.418094][ T5119] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  278.429714][ T5119] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  278.440190][ T5119] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 140
[  278.450705][ T5119] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  278.464443][ T5119] usb 2-1: config 250 interface 228 has no altsetting 0
[  278.564078][ T5119] usb 2-1: config index 1 descriptor too short (expected 5924, got 36)
[  278.572382][ T5119] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  278.580910][ T5119] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  278.590790][ T5119] usb 2-1: config 250 has no interface number 0
[  278.598682][ T5119] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  278.610391][ T5119] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  278.620930][ T5119] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 140
[  278.631452][ T5119] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  278.645018][ T5119] usb 2-1: config 250 interface 228 has no altsetting 0
13:42:20 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe0"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:42:20 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000080)={0x4, 0x8}, 0x10)

13:42:20 executing program 5:
syz_clone(0x280400, 0x0, 0x0, 0x0, 0x0, 0x0)

13:42:20 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000580)=@framed={{}, [@jmp]}, &(0x7f00000005c0)='GPL\x00', 0x8, 0x96, &(0x7f0000000600)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0), 0x8, 0x10, 0x0}, 0x80)

13:42:20 executing program 2:
syz_clone3(&(0x7f0000001300)={0x8081280, &(0x7f0000000100), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13:42:20 executing program 3:
pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x3]}, 0x8})

[  278.740605][ T5119] usb 2-1: config index 2 descriptor too short (expected 5924, got 36)
[  278.768063][ T5119] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
13:42:20 executing program 1:
mq_open(&(0x7f0000000000)='\',}.^!{{$\x00', 0x0, 0x0, 0x0)

[  278.819057][ T5119] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
13:42:20 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

13:42:20 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000080)={0x4, 0x8}, 0x10)

13:42:20 executing program 3:
sendto$isdn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

13:42:20 executing program 1:
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  278.890178][ T5119] usb 2-1: config 250 has no interface number 0
[  278.905290][ T5119] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
13:42:20 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0xfffffffffffffffe, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x38)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {0x0}}, 0x18)
socket$inet6(0xa, 0x0, 0x0)
syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)

[  278.971811][ T5119] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  279.007441][ T5119] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 140
[  279.067770][ T4767] usb 5-1: reset high-speed USB device number 41 using dummy_hcd
[  279.084379][ T5119] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  279.134857][ T5119] usb 2-1: config 250 interface 228 has no altsetting 0
[  279.174020][ T5119] usb 2-1: string descriptor 0 read error: -71
[  279.180334][ T5119] usb 2-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  279.212292][ T5119] usb 2-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  279.267625][ T5119] usb 2-1: can't set config #250, error -71
[  279.297701][ T5119] usb 2-1: USB disconnect, device number 8
[  279.353991][ T4767] usb 5-1: Using ep0 maxpacket: 8
[  279.434199][ T4767] usb 5-1: device firmware changed
[  279.442751][ T4767] usb 5-1: USB disconnect, device number 41
[  279.826915][ T4767] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  280.094065][ T4767] usb 5-1: Using ep0 maxpacket: 8
[  280.214516][ T4767] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  280.222805][ T4767] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  280.241521][ T4767] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  280.269907][ T4767] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  280.298467][ T4767] usb 5-1: config 250 has no interface number 0
[  280.318557][ T4767] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  280.354715][ T4767] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  280.373901][ T4767] usb 5-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  280.403898][ T4767] usb 5-1: config 250 interface 228 has no altsetting 0
[  280.484972][ T4767] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  280.493293][ T4767] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  280.515139][ T4767] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  280.534197][ T4767] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  280.544467][ T4767] usb 5-1: config 250 has no interface number 0
[  280.550736][ T4767] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  280.562462][ T4767] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  280.572966][ T4767] usb 5-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  280.586934][ T4767] usb 5-1: config 250 interface 228 has no altsetting 0
[  280.704269][ T4767] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  280.712552][ T4767] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  280.721568][ T4767] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  280.731880][ T4767] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  280.740952][ T4767] usb 5-1: config 250 has no interface number 0
[  280.748784][ T4767] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  280.760409][ T4767] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  280.771073][ T4767] usb 5-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  280.784520][ T4767] usb 5-1: config 250 interface 228 has no altsetting 0
[  280.944146][ T4767] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  280.954436][ T4767] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  280.962885][ T4767] usb 5-1: Product: syz
[  280.967979][ T4767] usb 5-1: Manufacturer: syz
[  280.972597][ T4767] usb 5-1: SerialNumber: syz
[  281.014935][ T4767] hub 5-1:250.228: bad descriptor, ignoring hub
[  281.021235][ T4767] hub: probe of 5-1:250.228 failed with error -5
13:42:24 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe0"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:42:24 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700), 0x10}, 0x80)

13:42:24 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)={0x0, 0x1, [{}]})

13:42:24 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000080)={0x4, 0x8}, 0x10)

13:42:24 executing program 5:
syz_clone(0xba0000, 0x0, 0x0, 0x0, 0x0, 0x0)

13:42:24 executing program 2:
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0)

13:42:24 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x1d, 0x0, 0x9)

13:42:24 executing program 3:
socket$inet6(0xa, 0x5, 0xfffffffe)

13:42:24 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000300)=0x1)

13:42:24 executing program 0:
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x8}, 0x10)

13:42:24 executing program 5:
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe00, 0x0)

13:42:24 executing program 2:
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0xfffffffffffffffe, 0x1, {0xa, 0x4e24, 0xffffffff, @private0, 0x5}, r1}}, 0x38)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x40, 0x0, 0x31}, 0xc)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @initdev}, &(0x7f00000002c0)=0xc)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x200, 0x70bd26, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000091}, 0x40850)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {r1, 0x8, "c02970", "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"}}, 0x110)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {&(0x7f0000000580), r1, 0x1ff}}, 0x18)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x422400, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000006c0), 0x13f, 0x1}}, 0x20)
socket$inet6(0xa, 0x5, 0xfffffffe)
syz_clone(0x20000000, &(0x7f0000000880)="5d8a8694215b29dbfab774770a015919f19d77704829e84974c2d2afea0f9bf6351996c26c7de2ab364882fba56cf4c0616553c4089d62737f8caf612f493fb9697e6e977f5baf7ff380fdc0355b4c72dede7c5942152d8d2a0295fd797e246e0771585e72e120d36cefb0748d81a7e3ec3adaa423d3af", 0x77, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)="f741778d2e86f520a3a5698947cbb60e61d2341a2d7c6ca2cdced0ce39ee7d12e7868a0ee4484c6bf94e7095ed08f67d2917f1059ec83eb4b992cbce3719e57ebce44840a311a762d205c41f4ffd8ba128c712a7bef4bbe970c9fe3441c64e51bb0bbc1ac420772c0d6b23ae00161718451e9862db14dace86a838815aedeb2b50128856617d4e9e8c5179aa231ae3eede8c753e9583fe1b4d78f4b79e392c2d0b62557fe8cfc6b80a54bb5895eb8c766a4cc0b93d")
syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000cc0)={'erspan0\x00', &(0x7f0000000c00)={'erspan0\x00', 0x0, 0x10, 0x20, 0x40, 0x10001, {{0x1b, 0x4, 0x1, 0x30, 0x6c, 0x64, 0x0, 0x78, 0x4, 0x0, @multicast2, @multicast1, {[@rr={0x7, 0xb, 0x55, [@dev={0xac, 0x14, 0x14, 0x34}, @multicast2]}, @rr={0x7, 0x1f, 0x55, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x8c, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xf, 0x79, [@rand_addr=0x64010100, @multicast2, @broadcast]}, @timestamp={0x44, 0x1c, 0x7c, 0x0, 0x4, [0x40, 0x3, 0x1ff, 0x0, 0x4, 0x10001]}, @noop]}}}}})

[  282.875154][   T26] usb 5-1: reset high-speed USB device number 42 using dummy_hcd
[  283.123941][   T26] usb 5-1: Using ep0 maxpacket: 8
[  283.904116][   T26] usb 5-1: USB disconnect, device number 42
13:42:26 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe0"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:42:26 executing program 0:
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x8}, 0x10)

13:42:26 executing program 3:
mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x2, @thr={0x0, 0x0}})

13:42:26 executing program 1:
syz_clone3(&(0x7f0000000200)={0x20880000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13:42:26 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x1, 0x7f, 0x106, 0x1}, 0x48)

13:42:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

13:42:26 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2)
ioctl$UDMABUF_CREATE(r0, 0x5450, 0x0)

13:42:26 executing program 0:
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x8}, 0x10)

13:42:26 executing program 5:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r1 = memfd_create(&(0x7f00000000c0)='/dev/vcs\x00', 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x0, 0x1000000})

13:42:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

13:42:26 executing program 5:
socket(0x22, 0x0, 0xfffffffa)

13:42:26 executing program 1:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000580), 0x2)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x1000})

[  284.645286][ T5113] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  284.903987][ T5113] usb 5-1: Using ep0 maxpacket: 8
[  285.033907][ T5113] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  285.042220][ T5113] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  285.052293][ T5113] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  285.066302][ T5113] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  285.075702][ T5113] usb 5-1: config 250 has no interface number 0
[  285.082003][ T5113] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  285.094100][ T5113] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  285.113880][ T5113] usb 5-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  285.127670][ T5113] usb 5-1: config 250 interface 228 has no altsetting 0
[  285.223971][ T5113] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  285.232302][ T5113] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  285.241151][ T5113] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  285.251919][ T5113] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  285.262398][ T5113] usb 5-1: config 250 has no interface number 0
[  285.269636][ T5113] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  285.282428][ T5113] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  285.295845][ T5113] usb 5-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  285.309708][ T5113] usb 5-1: config 250 interface 228 has no altsetting 0
[  285.394016][ T5113] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  285.402329][ T5113] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  285.415096][ T5113] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  285.425738][ T5113] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  285.435200][ T5113] usb 5-1: config 250 has no interface number 0
[  285.441503][ T5113] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  285.453440][ T5113] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  285.465484][ T5113] usb 5-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  285.479218][ T5113] usb 5-1: config 250 interface 228 has no altsetting 0
[  285.694123][ T5113] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  285.703211][ T5113] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  285.712151][ T5113] usb 5-1: Product: syz
[  285.716662][ T5113] usb 5-1: Manufacturer: syz
[  285.721275][ T5113] usb 5-1: SerialNumber: syz
[  285.767174][ T5113] hub 5-1:250.228: bad descriptor, ignoring hub
[  285.773463][ T5113] hub: probe of 5-1:250.228 failed with error -5
13:42:29 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe0000009"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:42:29 executing program 3:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000))

13:42:29 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000080)={0x4, 0x8}, 0x10)

13:42:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

13:42:29 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001240), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)

13:42:29 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000003d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000046000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)

13:42:29 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002bc0)=ANY=[@ANYBLOB="5401"], 0x160)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
utimes(&(0x7f0000000000)='./file0\x00', 0x0)

13:42:29 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000080)={0x4, 0x8}, 0x10)

13:42:29 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000080)={0x4, 0x8}, 0x10)

13:42:29 executing program 5:
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='D', 0x1, 0xffffffffffffffff)

[  287.449096][ T6459] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
13:42:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

13:42:29 executing program 0:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x8}, 0x10)

[  287.704402][ T5157] usb 5-1: reset high-speed USB device number 43 using dummy_hcd
[  287.973955][ T5157] usb 5-1: Using ep0 maxpacket: 8
[  288.765965][   T22] usb 5-1: USB disconnect, device number 43
13:42:30 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe0000009"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:42:30 executing program 5:
io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0)

13:42:30 executing program 3:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000140)={@private, @empty, 0x0, "1fb961e9688abd1c6b63e832b07cf92f8a093c9cdfdb15e835cbf18afaef67ab"}, 0x3c)

13:42:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000003d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0)
pipe(&(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x28201)
poll(0x0, 0x0, 0x929)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{}, {}, {}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {}, {0x1}, {}, {}, {}, {}, 0x10020, 0x0, 0x0, 0x112200})

13:42:30 executing program 0:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x8}, 0x10)

13:42:30 executing program 1:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x100000007})

13:42:30 executing program 5:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$alg(r0, 0x0, 0x0)

13:42:30 executing program 0:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x8}, 0x10)

13:42:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x14, r1, 0xf23}, 0x14}}, 0x0)

13:42:30 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0)

13:42:31 executing program 1:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2)
ioctl$UDMABUF_CREATE(r0, 0xc0189436, &(0x7f0000000240))

13:42:31 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0)

[  289.484994][ T5119] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  289.733920][ T5119] usb 5-1: Using ep0 maxpacket: 8
[  289.854156][ T5119] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  289.863047][ T5119] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  289.873003][ T5119] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  289.882806][ T5119] usb 5-1: config 250 has no interface number 0
[  289.889509][ T5119] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  289.901302][ T5119] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  289.912020][ T5119] usb 5-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  289.925483][ T5119] usb 5-1: config 250 interface 228 has no altsetting 0
[  290.003949][ T5119] usb 5-1: config index 1 descriptor too short (expected 5924, got 36)
[  290.012433][ T5119] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  290.025738][ T5119] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  290.036729][ T5119] usb 5-1: config 250 has no interface number 0
[  290.043031][ T5119] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  290.057011][ T5119] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  290.069499][ T5119] usb 5-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  290.083515][ T5119] usb 5-1: config 250 interface 228 has no altsetting 0
[  290.174064][ T5119] usb 5-1: config index 2 descriptor too short (expected 5924, got 36)
[  290.182367][ T5119] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  290.191133][ T5119] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  290.200864][ T5119] usb 5-1: config 250 has no interface number 0
[  290.207522][ T5119] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  290.219262][ T5119] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  290.231011][ T5119] usb 5-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  290.244545][ T5119] usb 5-1: config 250 interface 228 has no altsetting 0
[  290.403949][ T5119] usb 5-1: New USB device found, idVendor=ac25, idProduct=99c6, bcdDevice=76.31
[  290.412995][ T5119] usb 5-1: New USB device strings: Mfr=181, Product=232, SerialNumber=23
[  290.422138][ T5119] usb 5-1: Product: syz
[  290.426363][ T5119] usb 5-1: Manufacturer: syz
[  290.430943][ T5119] usb 5-1: SerialNumber: syz
[  290.476203][ T5119] hub 5-1:250.228: bad descriptor, ignoring hub
[  290.482496][ T5119] hub: probe of 5-1:250.228 failed with error -5
13:42:33 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe0000009"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:42:33 executing program 5:
r0 = semget$private(0x0, 0x2, 0x0)
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1}, {}], 0x2, &(0x7f00000000c0))

13:42:33 executing program 3:
semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0)
r0 = semget(0x1, 0x1, 0xe1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
semctl$SEM_STAT_ANY(r0, 0x4, 0x14, &(0x7f0000000040)=""/249)
semctl$IPC_RMID(r0, 0x0, 0x0)

13:42:33 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x7}})

13:42:33 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0)

13:42:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25}]}]}, 0x4c}}, 0x0)

13:42:34 executing program 0:
memfd_create(&(0x7f0000000000)='-\'\x00', 0x0)

13:42:34 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505330, &(0x7f0000000400)={0x700, 0x0, 0x0, 'queue0\x00'})

13:42:34 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x4}})

13:42:34 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r1, 0x0, 0x0, 0x2000})

13:42:34 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000005480)=[{0x0, 0x0, 0x0}], 0x1, 0x4008035)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x9)

13:42:34 executing program 2:
openat$vcs(0xffffffffffffff9c, 0x0, 0x402001, 0x0)

[  292.508442][ T5157] usb 5-1: reset high-speed USB device number 44 using dummy_hcd
[  292.773952][ T5157] usb 5-1: Using ep0 maxpacket: 8
[  293.568243][ T5157] usb 5-1: USB disconnect, device number 44
13:42:35 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0d0100000901000825acc6993176b5e817030902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

13:42:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffffe}, 0x0)

13:42:35 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
accept4$alg(r0, 0x0, 0x0, 0x400)

13:42:35 executing program 3:
add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='H', 0x1, 0xfffffffffffffffb)

13:42:35 executing program 2:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2)
ioctl$UDMABUF_CREATE(r0, 0x5451, 0x0)

13:42:35 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000005480)=[{0x0, 0x0, 0x0}], 0x1, 0x4008035)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x9)

[  294.021144][ T5157] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN
[  294.032914][ T5157] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[  294.041337][ T5157] CPU: 0 PID: 5157 Comm: kworker/0:8 Not tainted 6.4.0-rc6-next-20230616-syzkaller #0
[  294.050898][ T5157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[  294.051427][ T6551] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET)
[  294.060951][ T5157] Workqueue: cryptd cryptd_queue_worker
[  294.061109][ T5157] RIP: 0010:crypto_shash_finup+0x53/0x160
[  294.061144][ T5157] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 05 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5d 00 48 8d 7b 20 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d8 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b
[  294.061167][ T5157] RSP: 0018:ffffc90005247ba0 EFLAGS: 00010202
[  294.061186][ T5157] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  294.061202][ T5157] RDX: 0000000000000004 RSI: ffffffff83e08aaf RDI: 0000000000000020
13:42:35 executing program 2:
socket(0x2, 0xa, 0x8)

13:42:35 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0xc020660b, 0x0)

13:42:35 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x10000, 0x1, 0x200})

13:42:35 executing program 3:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000240))

13:42:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x2c, r1, 0xf23, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x0)

[  294.061216][ T5157] RBP: ffff888066103308 R08: 0000000000000005 R09: 0000000000000000
[  294.061231][ T5157] R10: 0000000000000000 R11: 1ffffffff21e6ecf R12: ffff888043a8d000
[  294.061247][ T5157] R13: ffff888043b877d0 R14: 0000000000000009 R15: 0000000000000000
[  294.061262][ T5157] FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  294.061285][ T5157] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  294.061301][ T5157] CR2: 0000001b2f524000 CR3: 000000001935e000 CR4: 00000000003506f0
13:42:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x2c, r1, 0xf23, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x0)

[  294.061316][ T5157] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  294.061330][ T5157] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  294.061344][ T5157] Call Trace:
[  294.061351][ T5157]  <TASK>
[  294.061358][ T5157]  ? die_addr+0x3c/0xa0
[  294.194585][ T5157]  ? exc_general_protection+0x129/0x230
[  294.200293][ T5157]  ? asm_exc_general_protection+0x26/0x30
[  294.206126][ T5157]  ? crypto_shash_finup+0x1f/0x160
[  294.211267][ T5157]  ? crypto_shash_finup+0x53/0x160
[  294.216411][ T5157]  shash_ahash_finup+0xdf/0x3a0
[  294.221289][ T5157]  ? shash_async_setkey+0x240/0x240
[  294.226520][ T5157]  ? mark_held_locks+0x9f/0xe0
[  294.231347][ T5157]  cryptd_hash_finup+0xce/0x120
[  294.236230][ T5157]  ? cryptd_hash_digest+0x1a0/0x1a0
[  294.241455][ T5157]  cryptd_queue_worker+0x130/0x1d0
[  294.246591][ T5157]  process_one_work+0xa34/0x16f0
[  294.251585][ T5157]  ? lock_sync+0x190/0x190
[  294.256031][ T5157]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[  294.261435][ T5157]  ? rcu_is_watching+0x12/0xb0
[  294.266224][ T5157]  ? spin_bug+0x1c0/0x1c0
[  294.270584][ T5157]  ? lock_acquire+0x32/0xc0
[  294.275126][ T5157]  ? worker_thread+0x16d/0x10c0
[  294.280009][ T5157]  worker_thread+0x67d/0x10c0
[  294.284715][ T5157]  ? process_one_work+0x16f0/0x16f0
[  294.289953][ T5157]  kthread+0x344/0x440
[  294.294048][ T5157]  ? kthread_complete_and_exit+0x40/0x40
[  294.299708][ T5157]  ret_from_fork+0x1f/0x30
[  294.304203][ T5157]  </TASK>
[  294.307237][ T5157] Modules linked in:
[  294.320232][ T5157] ---[ end trace 0000000000000000 ]---
[  294.326044][ T5157] RIP: 0010:crypto_shash_finup+0x53/0x160
[  294.331827][ T5157] Code: fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 05 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 5d 00 48 8d 7b 20 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 d8 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b
[  294.352159][ T5157] RSP: 0018:ffffc90005247ba0 EFLAGS: 00010202
[  294.354044][   T22] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  294.358599][ T5157] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  294.375371][ T5157] RDX: 0000000000000004 RSI: ffffffff83e08aaf RDI: 0000000000000020
[  294.383434][ T5157] RBP: ffff888066103308 R08: 0000000000000005 R09: 0000000000000000
[  294.391621][ T5157] R10: 0000000000000000 R11: 1ffffffff21e6ecf R12: ffff888043a8d000
[  294.399765][ T5157] R13: ffff888043b877d0 R14: 0000000000000009 R15: 0000000000000000
[  294.407904][ T5157] FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  294.417258][ T5157] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  294.423883][ T5157] CR2: 0000001b2f524000 CR3: 000000002c029000 CR4: 00000000003506f0
[  294.432021][ T5157] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  294.440291][ T5157] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  294.448492][ T5157] Kernel panic - not syncing: Fatal exception
[  294.454628][ T5157] Kernel Offset: disabled
[  294.459031][ T5157] Rebooting in 86400 seconds..