Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts.
2022/07/12 03:16:37 fuzzer started
2022/07/12 03:16:38 dialing manager at 10.128.0.169:46699
syzkaller login: [   41.620440][ T3607] cgroup: Unknown subsys name 'net'
[   41.750765][ T3607] cgroup: Unknown subsys name 'rlimit'
2022/07/12 03:16:38 syscalls: 3384
2022/07/12 03:16:38 code coverage: enabled
2022/07/12 03:16:38 comparison tracing: enabled
2022/07/12 03:16:38 extra coverage: enabled
2022/07/12 03:16:38 delay kcov mmap: enabled
2022/07/12 03:16:38 setuid sandbox: enabled
2022/07/12 03:16:38 namespace sandbox: enabled
2022/07/12 03:16:38 Android sandbox: /sys/fs/selinux/policy does not exist
2022/07/12 03:16:38 fault injection: enabled
2022/07/12 03:16:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2022/07/12 03:16:38 net packet injection: enabled
2022/07/12 03:16:38 net device setup: enabled
2022/07/12 03:16:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/07/12 03:16:38 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/07/12 03:16:38 USB emulation: enabled
2022/07/12 03:16:38 hci packet injection: enabled
2022/07/12 03:16:38 wifi device emulation: enabled
2022/07/12 03:16:38 802.15.4 emulation: enabled
2022/07/12 03:16:38 fetching corpus: 0, signal 0/2000 (executing program)
2022/07/12 03:16:38 fetching corpus: 50, signal 27217/31052 (executing program)
2022/07/12 03:16:38 fetching corpus: 100, signal 49292/54774 (executing program)
2022/07/12 03:16:39 fetching corpus: 150, signal 59905/67092 (executing program)
2022/07/12 03:16:39 fetching corpus: 200, signal 71498/80281 (executing program)
2022/07/12 03:16:39 fetching corpus: 250, signal 83435/93725 (executing program)
2022/07/12 03:16:39 fetching corpus: 300, signal 90422/102271 (executing program)
2022/07/12 03:16:39 fetching corpus: 350, signal 96129/109542 (executing program)
2022/07/12 03:16:40 fetching corpus: 400, signal 106933/121640 (executing program)
2022/07/12 03:16:40 fetching corpus: 450, signal 113281/129380 (executing program)
2022/07/12 03:16:40 fetching corpus: 500, signal 122024/139341 (executing program)
2022/07/12 03:16:40 fetching corpus: 550, signal 126120/144871 (executing program)
2022/07/12 03:16:40 fetching corpus: 599, signal 131115/151169 (executing program)
2022/07/12 03:16:41 fetching corpus: 649, signal 137070/158379 (executing program)
2022/07/12 03:16:41 fetching corpus: 699, signal 141474/164073 (executing program)
2022/07/12 03:16:41 fetching corpus: 749, signal 145784/169648 (executing program)
2022/07/12 03:16:41 fetching corpus: 799, signal 151050/176115 (executing program)
2022/07/12 03:16:41 fetching corpus: 849, signal 155397/181634 (executing program)
2022/07/12 03:16:42 fetching corpus: 899, signal 159437/186851 (executing program)
2022/07/12 03:16:42 fetching corpus: 949, signal 163094/191728 (executing program)
2022/07/12 03:16:42 fetching corpus: 999, signal 166139/195950 (executing program)
2022/07/12 03:16:42 fetching corpus: 1049, signal 170889/201769 (executing program)
2022/07/12 03:16:42 fetching corpus: 1099, signal 174122/206160 (executing program)
2022/07/12 03:16:43 fetching corpus: 1149, signal 178463/211538 (executing program)
2022/07/12 03:16:43 fetching corpus: 1199, signal 180990/215223 (executing program)
2022/07/12 03:16:43 fetching corpus: 1249, signal 183889/219220 (executing program)
2022/07/12 03:16:43 fetching corpus: 1298, signal 185808/222329 (executing program)
2022/07/12 03:16:44 fetching corpus: 1348, signal 189391/226942 (executing program)
2022/07/12 03:16:44 fetching corpus: 1398, signal 192133/230735 (executing program)
2022/07/12 03:16:44 fetching corpus: 1448, signal 195541/235096 (executing program)
2022/07/12 03:16:44 fetching corpus: 1498, signal 198399/239002 (executing program)
2022/07/12 03:16:44 fetching corpus: 1548, signal 200899/242519 (executing program)
2022/07/12 03:16:45 fetching corpus: 1597, signal 203633/246251 (executing program)
2022/07/12 03:16:45 fetching corpus: 1647, signal 206094/249713 (executing program)
2022/07/12 03:16:45 fetching corpus: 1696, signal 209081/253619 (executing program)
2022/07/12 03:16:45 fetching corpus: 1746, signal 211504/257031 (executing program)
2022/07/12 03:16:45 fetching corpus: 1796, signal 213743/260261 (executing program)
2022/07/12 03:16:46 fetching corpus: 1846, signal 215807/263315 (executing program)
2022/07/12 03:16:46 fetching corpus: 1896, signal 218578/266980 (executing program)
2022/07/12 03:16:46 fetching corpus: 1946, signal 222146/271341 (executing program)
2022/07/12 03:16:46 fetching corpus: 1996, signal 224496/274615 (executing program)
2022/07/12 03:16:47 fetching corpus: 2046, signal 227094/278025 (executing program)
2022/07/12 03:16:47 fetching corpus: 2096, signal 228627/280553 (executing program)
2022/07/12 03:16:47 fetching corpus: 2146, signal 230336/283203 (executing program)
2022/07/12 03:16:47 fetching corpus: 2196, signal 232365/286154 (executing program)
2022/07/12 03:16:48 fetching corpus: 2246, signal 234541/289157 (executing program)
2022/07/12 03:16:48 fetching corpus: 2295, signal 236184/291713 (executing program)
2022/07/12 03:16:48 fetching corpus: 2345, signal 238130/294487 (executing program)
2022/07/12 03:16:48 fetching corpus: 2395, signal 240214/297456 (executing program)
2022/07/12 03:16:48 fetching corpus: 2445, signal 241516/299754 (executing program)
2022/07/12 03:16:49 fetching corpus: 2495, signal 243478/302526 (executing program)
2022/07/12 03:16:49 fetching corpus: 2545, signal 245450/305290 (executing program)
2022/07/12 03:16:49 fetching corpus: 2595, signal 247012/307712 (executing program)
2022/07/12 03:16:49 fetching corpus: 2645, signal 249414/310783 (executing program)
2022/07/12 03:16:49 fetching corpus: 2695, signal 251373/313454 (executing program)
2022/07/12 03:16:50 fetching corpus: 2745, signal 253204/316043 (executing program)
2022/07/12 03:16:50 fetching corpus: 2795, signal 255451/318979 (executing program)
2022/07/12 03:16:50 fetching corpus: 2845, signal 257172/321488 (executing program)
2022/07/12 03:16:50 fetching corpus: 2895, signal 258417/323585 (executing program)
2022/07/12 03:16:50 fetching corpus: 2945, signal 259927/325907 (executing program)
2022/07/12 03:16:51 fetching corpus: 2995, signal 261589/328311 (executing program)
2022/07/12 03:16:51 fetching corpus: 3045, signal 263282/330738 (executing program)
2022/07/12 03:16:51 fetching corpus: 3095, signal 264961/333107 (executing program)
2022/07/12 03:16:51 fetching corpus: 3145, signal 266440/335356 (executing program)
2022/07/12 03:16:51 fetching corpus: 3195, signal 267819/337464 (executing program)
2022/07/12 03:16:52 fetching corpus: 3245, signal 269215/339611 (executing program)
2022/07/12 03:16:52 fetching corpus: 3293, signal 270607/341783 (executing program)
2022/07/12 03:16:52 fetching corpus: 3343, signal 272036/343942 (executing program)
2022/07/12 03:16:52 fetching corpus: 3393, signal 273384/346015 (executing program)
2022/07/12 03:16:53 fetching corpus: 3442, signal 274375/347839 (executing program)
2022/07/12 03:16:53 fetching corpus: 3491, signal 275622/349820 (executing program)
2022/07/12 03:16:53 fetching corpus: 3541, signal 277255/352079 (executing program)
2022/07/12 03:16:53 fetching corpus: 3591, signal 278227/353835 (executing program)
2022/07/12 03:16:53 fetching corpus: 3641, signal 279480/355806 (executing program)
2022/07/12 03:16:53 fetching corpus: 3690, signal 280684/357735 (executing program)
2022/07/12 03:16:53 fetching corpus: 3740, signal 281760/359590 (executing program)
2022/07/12 03:16:54 fetching corpus: 3790, signal 283775/362062 (executing program)
2022/07/12 03:16:54 fetching corpus: 3840, signal 285555/364311 (executing program)
2022/07/12 03:16:54 fetching corpus: 3890, signal 286819/366223 (executing program)
2022/07/12 03:16:55 fetching corpus: 3939, signal 287903/368010 (executing program)
2022/07/12 03:16:55 fetching corpus: 3988, signal 288877/369753 (executing program)
2022/07/12 03:16:55 fetching corpus: 4037, signal 290283/371804 (executing program)
2022/07/12 03:16:55 fetching corpus: 4087, signal 291127/373441 (executing program)
2022/07/12 03:16:55 fetching corpus: 4136, signal 291855/374903 (executing program)
2022/07/12 03:16:56 fetching corpus: 4186, signal 292711/376493 (executing program)
2022/07/12 03:16:56 fetching corpus: 4235, signal 293791/378220 (executing program)
2022/07/12 03:16:56 fetching corpus: 4285, signal 294910/380002 (executing program)
2022/07/12 03:16:56 fetching corpus: 4335, signal 296153/381904 (executing program)
2022/07/12 03:16:56 fetching corpus: 4385, signal 297385/383741 (executing program)
2022/07/12 03:16:56 fetching corpus: 4435, signal 298513/385489 (executing program)
2022/07/12 03:16:57 fetching corpus: 4485, signal 299952/387469 (executing program)
2022/07/12 03:16:57 fetching corpus: 4535, signal 302084/389886 (executing program)
2022/07/12 03:16:57 fetching corpus: 4585, signal 303117/391547 (executing program)
2022/07/12 03:16:57 fetching corpus: 4635, signal 304547/393471 (executing program)
2022/07/12 03:16:58 fetching corpus: 4685, signal 305827/395276 (executing program)
2022/07/12 03:16:58 fetching corpus: 4735, signal 307085/397044 (executing program)
2022/07/12 03:16:58 fetching corpus: 4785, signal 307914/398531 (executing program)
2022/07/12 03:16:58 fetching corpus: 4835, signal 308887/400068 (executing program)
2022/07/12 03:16:58 fetching corpus: 4885, signal 310047/401775 (executing program)
2022/07/12 03:16:59 fetching corpus: 4934, signal 310796/403182 (executing program)
2022/07/12 03:16:59 fetching corpus: 4984, signal 312314/405126 (executing program)
2022/07/12 03:16:59 fetching corpus: 5033, signal 313396/406742 (executing program)
2022/07/12 03:16:59 fetching corpus: 5083, signal 314723/408457 (executing program)
2022/07/12 03:17:00 fetching corpus: 5132, signal 316012/410196 (executing program)
2022/07/12 03:17:00 fetching corpus: 5182, signal 316877/411670 (executing program)
2022/07/12 03:17:00 fetching corpus: 5232, signal 317926/413260 (executing program)
2022/07/12 03:17:00 fetching corpus: 5282, signal 318910/414819 (executing program)
2022/07/12 03:17:00 fetching corpus: 5332, signal 319697/416197 (executing program)
2022/07/12 03:17:01 fetching corpus: 5382, signal 320542/417600 (executing program)
2022/07/12 03:17:01 fetching corpus: 5432, signal 321113/418868 (executing program)
2022/07/12 03:17:01 fetching corpus: 5482, signal 321758/420165 (executing program)
2022/07/12 03:17:01 fetching corpus: 5531, signal 322797/421700 (executing program)
2022/07/12 03:17:02 fetching corpus: 5581, signal 323751/423162 (executing program)
2022/07/12 03:17:02 fetching corpus: 5630, signal 324479/424508 (executing program)
2022/07/12 03:17:02 fetching corpus: 5680, signal 325186/425849 (executing program)
2022/07/12 03:17:02 fetching corpus: 5730, signal 325971/427238 (executing program)
2022/07/12 03:17:02 fetching corpus: 5780, signal 326872/428623 (executing program)
2022/07/12 03:17:03 fetching corpus: 5830, signal 327847/430060 (executing program)
2022/07/12 03:17:03 fetching corpus: 5880, signal 328838/431495 (executing program)
2022/07/12 03:17:03 fetching corpus: 5930, signal 329835/432995 (executing program)
2022/07/12 03:17:03 fetching corpus: 5978, signal 330728/434381 (executing program)
2022/07/12 03:17:04 fetching corpus: 6028, signal 331460/435706 (executing program)
2022/07/12 03:17:04 fetching corpus: 6078, signal 332429/437134 (executing program)
2022/07/12 03:17:04 fetching corpus: 6128, signal 333520/438625 (executing program)
2022/07/12 03:17:04 fetching corpus: 6178, signal 334479/439975 (executing program)
2022/07/12 03:17:04 fetching corpus: 6228, signal 335176/441186 (executing program)
2022/07/12 03:17:04 fetching corpus: 6278, signal 335795/442361 (executing program)
2022/07/12 03:17:05 fetching corpus: 6328, signal 336715/443717 (executing program)
2022/07/12 03:17:05 fetching corpus: 6375, signal 337536/444967 (executing program)
2022/07/12 03:17:05 fetching corpus: 6425, signal 338177/446132 (executing program)
2022/07/12 03:17:05 fetching corpus: 6475, signal 339307/447541 (executing program)
2022/07/12 03:17:06 fetching corpus: 6525, signal 340081/448771 (executing program)
2022/07/12 03:17:06 fetching corpus: 6574, signal 340895/450027 (executing program)
2022/07/12 03:17:06 fetching corpus: 6623, signal 341616/451291 (executing program)
2022/07/12 03:17:06 fetching corpus: 6673, signal 342668/452670 (executing program)
2022/07/12 03:17:07 fetching corpus: 6723, signal 343493/453968 (executing program)
2022/07/12 03:17:07 fetching corpus: 6773, signal 344322/455208 (executing program)
2022/07/12 03:17:07 fetching corpus: 6823, signal 345099/456416 (executing program)
2022/07/12 03:17:07 fetching corpus: 6873, signal 348262/458828 (executing program)
2022/07/12 03:17:07 fetching corpus: 6923, signal 349279/460171 (executing program)
[   71.047028][ T1239] ieee802154 phy0 wpan0: encryption failed: -22
[   71.053500][ T1239] ieee802154 phy1 wpan1: encryption failed: -22
2022/07/12 03:17:07 fetching corpus: 6972, signal 350541/461603 (executing program)
2022/07/12 03:17:08 fetching corpus: 7022, signal 351319/462780 (executing program)
2022/07/12 03:17:08 fetching corpus: 7072, signal 351932/463889 (executing program)
2022/07/12 03:17:08 fetching corpus: 7122, signal 353002/465196 (executing program)
2022/07/12 03:17:08 fetching corpus: 7172, signal 353819/466390 (executing program)
2022/07/12 03:17:09 fetching corpus: 7222, signal 354869/467681 (executing program)
2022/07/12 03:17:09 fetching corpus: 7272, signal 355555/468809 (executing program)
2022/07/12 03:17:09 fetching corpus: 7322, signal 356294/469994 (executing program)
2022/07/12 03:17:09 fetching corpus: 7372, signal 357074/471154 (executing program)
2022/07/12 03:17:09 fetching corpus: 7420, signal 357915/472314 (executing program)
2022/07/12 03:17:10 fetching corpus: 7470, signal 358785/473496 (executing program)
2022/07/12 03:17:10 fetching corpus: 7520, signal 359580/474651 (executing program)
2022/07/12 03:17:10 fetching corpus: 7570, signal 360066/475622 (executing program)
2022/07/12 03:17:10 fetching corpus: 7620, signal 360928/476791 (executing program)
2022/07/12 03:17:10 fetching corpus: 7670, signal 361753/477929 (executing program)
2022/07/12 03:17:11 fetching corpus: 7719, signal 362502/479022 (executing program)
2022/07/12 03:17:11 fetching corpus: 7768, signal 363217/480045 (executing program)
2022/07/12 03:17:11 fetching corpus: 7818, signal 364007/481107 (executing program)
2022/07/12 03:17:11 fetching corpus: 7868, signal 364887/482244 (executing program)
2022/07/12 03:17:11 fetching corpus: 7918, signal 365968/483480 (executing program)
2022/07/12 03:17:11 fetching corpus: 7968, signal 366540/484465 (executing program)
2022/07/12 03:17:12 fetching corpus: 8018, signal 367162/485453 (executing program)
2022/07/12 03:17:12 fetching corpus: 8068, signal 367826/486463 (executing program)
2022/07/12 03:17:12 fetching corpus: 8118, signal 368847/487641 (executing program)
2022/07/12 03:17:12 fetching corpus: 8168, signal 369662/488676 (executing program)
2022/07/12 03:17:12 fetching corpus: 8217, signal 370333/489688 (executing program)
[   76.176538][  T142] cfg80211: failed to load regulatory.db
2022/07/12 03:17:13 fetching corpus: 8267, signal 371230/490763 (executing program)
2022/07/12 03:17:13 fetching corpus: 8317, signal 371828/491729 (executing program)
2022/07/12 03:17:13 fetching corpus: 8367, signal 372514/492755 (executing program)
2022/07/12 03:17:13 fetching corpus: 8417, signal 373481/493818 (executing program)
2022/07/12 03:17:13 fetching corpus: 8467, signal 374214/494836 (executing program)
2022/07/12 03:17:14 fetching corpus: 8517, signal 374749/495796 (executing program)
2022/07/12 03:17:14 fetching corpus: 8567, signal 375458/496796 (executing program)
2022/07/12 03:17:14 fetching corpus: 8616, signal 376234/497787 (executing program)
2022/07/12 03:17:14 fetching corpus: 8665, signal 376894/498748 (executing program)
2022/07/12 03:17:14 fetching corpus: 8715, signal 377791/499797 (executing program)
2022/07/12 03:17:14 fetching corpus: 8765, signal 378468/500723 (executing program)
2022/07/12 03:17:14 fetching corpus: 8815, signal 379034/501588 (executing program)
2022/07/12 03:17:14 fetching corpus: 8865, signal 380007/502645 (executing program)
2022/07/12 03:17:14 fetching corpus: 8915, signal 380489/503536 (executing program)
2022/07/12 03:17:14 fetching corpus: 8965, signal 381032/504411 (executing program)
2022/07/12 03:17:15 fetching corpus: 9015, signal 381803/505400 (executing program)
2022/07/12 03:17:15 fetching corpus: 9065, signal 382457/506309 (executing program)
2022/07/12 03:17:15 fetching corpus: 9115, signal 382885/507162 (executing program)
2022/07/12 03:17:15 fetching corpus: 9164, signal 383605/508116 (executing program)
2022/07/12 03:17:15 fetching corpus: 9214, signal 384151/508962 (executing program)
2022/07/12 03:17:15 fetching corpus: 9263, signal 384927/509893 (executing program)
2022/07/12 03:17:15 fetching corpus: 9313, signal 385534/510716 (executing program)
2022/07/12 03:17:15 fetching corpus: 9363, signal 386204/511611 (executing program)
2022/07/12 03:17:15 fetching corpus: 9413, signal 386840/512484 (executing program)
2022/07/12 03:17:16 fetching corpus: 9463, signal 387421/513313 (executing program)
2022/07/12 03:17:16 fetching corpus: 9513, signal 388037/514213 (executing program)
2022/07/12 03:17:16 fetching corpus: 9563, signal 389093/515257 (executing program)
2022/07/12 03:17:16 fetching corpus: 9613, signal 389684/516063 (executing program)
2022/07/12 03:17:16 fetching corpus: 9663, signal 390061/516838 (executing program)
2022/07/12 03:17:16 fetching corpus: 9713, signal 390763/517701 (executing program)
2022/07/12 03:17:16 fetching corpus: 9763, signal 391375/518532 (executing program)
2022/07/12 03:17:16 fetching corpus: 9813, signal 391984/519383 (executing program)
2022/07/12 03:17:16 fetching corpus: 9863, signal 392538/520205 (executing program)
2022/07/12 03:17:16 fetching corpus: 9913, signal 392903/520965 (executing program)
2022/07/12 03:17:17 fetching corpus: 9963, signal 393469/521772 (executing program)
2022/07/12 03:17:17 fetching corpus: 10013, signal 394050/522589 (executing program)
2022/07/12 03:17:17 fetching corpus: 10063, signal 394547/523353 (executing program)
2022/07/12 03:17:17 fetching corpus: 10113, signal 395041/524161 (executing program)
2022/07/12 03:17:17 fetching corpus: 10163, signal 395772/525013 (executing program)
2022/07/12 03:17:17 fetching corpus: 10213, signal 396380/525823 (executing program)
2022/07/12 03:17:17 fetching corpus: 10263, signal 396923/526578 (executing program)
2022/07/12 03:17:17 fetching corpus: 10313, signal 397407/527313 (executing program)
2022/07/12 03:17:17 fetching corpus: 10363, signal 397904/528104 (executing program)
2022/07/12 03:17:18 fetching corpus: 10413, signal 398463/528930 (executing program)
2022/07/12 03:17:18 fetching corpus: 10463, signal 398978/529702 (executing program)
2022/07/12 03:17:18 fetching corpus: 10513, signal 399763/530508 (executing program)
2022/07/12 03:17:18 fetching corpus: 10563, signal 400350/531248 (executing program)
2022/07/12 03:17:18 fetching corpus: 10613, signal 400945/532014 (executing program)
2022/07/12 03:17:18 fetching corpus: 10663, signal 401577/532771 (executing program)
2022/07/12 03:17:18 fetching corpus: 10713, signal 402047/533494 (executing program)
2022/07/12 03:17:18 fetching corpus: 10763, signal 402573/534229 (executing program)
2022/07/12 03:17:18 fetching corpus: 10813, signal 403023/534895 (executing program)
2022/07/12 03:17:18 fetching corpus: 10863, signal 403557/535623 (executing program)
2022/07/12 03:17:19 fetching corpus: 10913, signal 404125/536339 (executing program)
2022/07/12 03:17:19 fetching corpus: 10963, signal 404737/537069 (executing program)
2022/07/12 03:17:19 fetching corpus: 11013, signal 405212/537811 (executing program)
2022/07/12 03:17:19 fetching corpus: 11063, signal 405737/538535 (executing program)
2022/07/12 03:17:19 fetching corpus: 11113, signal 406369/539288 (executing program)
2022/07/12 03:17:19 fetching corpus: 11163, signal 406916/540036 (executing program)
2022/07/12 03:17:19 fetching corpus: 11212, signal 407345/540707 (executing program)
2022/07/12 03:17:19 fetching corpus: 11262, signal 407782/541379 (executing program)
2022/07/12 03:17:19 fetching corpus: 11312, signal 408592/542159 (executing program)
2022/07/12 03:17:19 fetching corpus: 11361, signal 409145/542822 (executing program)
2022/07/12 03:17:20 fetching corpus: 11411, signal 410045/543663 (executing program)
2022/07/12 03:17:20 fetching corpus: 11461, signal 410537/544362 (executing program)
2022/07/12 03:17:20 fetching corpus: 11510, signal 411032/545062 (executing program)
2022/07/12 03:17:20 fetching corpus: 11560, signal 411764/545791 (executing program)
2022/07/12 03:17:20 fetching corpus: 11610, signal 412335/546521 (executing program)
2022/07/12 03:17:20 fetching corpus: 11660, signal 412892/547197 (executing program)
2022/07/12 03:17:20 fetching corpus: 11710, signal 413553/547876 (executing program)
2022/07/12 03:17:20 fetching corpus: 11760, signal 413963/548490 (executing program)
2022/07/12 03:17:20 fetching corpus: 11810, signal 414478/549093 (executing program)
2022/07/12 03:17:20 fetching corpus: 11860, signal 415843/549858 (executing program)
2022/07/12 03:17:21 fetching corpus: 11910, signal 416278/550527 (executing program)
2022/07/12 03:17:21 fetching corpus: 11960, signal 416888/551181 (executing program)
2022/07/12 03:17:21 fetching corpus: 12010, signal 417315/551836 (executing program)
2022/07/12 03:17:21 fetching corpus: 12060, signal 417811/552475 (executing program)
2022/07/12 03:17:21 fetching corpus: 12110, signal 418422/553138 (executing program)
2022/07/12 03:17:21 fetching corpus: 12160, signal 419025/553774 (executing program)
2022/07/12 03:17:21 fetching corpus: 12210, signal 419514/554347 (executing program)
2022/07/12 03:17:21 fetching corpus: 12259, signal 420298/554987 (executing program)
2022/07/12 03:17:21 fetching corpus: 12309, signal 420950/555595 (executing program)
2022/07/12 03:17:21 fetching corpus: 12359, signal 421564/556245 (executing program)
2022/07/12 03:17:22 fetching corpus: 12409, signal 422098/556881 (executing program)
2022/07/12 03:17:22 fetching corpus: 12459, signal 422540/557456 (executing program)
2022/07/12 03:17:22 fetching corpus: 12509, signal 423087/558068 (executing program)
2022/07/12 03:17:22 fetching corpus: 12559, signal 423517/558668 (executing program)
2022/07/12 03:17:22 fetching corpus: 12609, signal 424179/559281 (executing program)
2022/07/12 03:17:22 fetching corpus: 12659, signal 424752/559873 (executing program)
2022/07/12 03:17:22 fetching corpus: 12709, signal 425212/560484 (executing program)
2022/07/12 03:17:22 fetching corpus: 12759, signal 425604/561066 (executing program)
2022/07/12 03:17:22 fetching corpus: 12809, signal 426396/561659 (executing program)
2022/07/12 03:17:23 fetching corpus: 12858, signal 426851/562218 (executing program)
2022/07/12 03:17:23 fetching corpus: 12907, signal 427347/562824 (executing program)
2022/07/12 03:17:23 fetching corpus: 12957, signal 428486/563475 (executing program)
2022/07/12 03:17:23 fetching corpus: 13007, signal 428895/564029 (executing program)
2022/07/12 03:17:23 fetching corpus: 13057, signal 429388/564600 (executing program)
2022/07/12 03:17:23 fetching corpus: 13107, signal 429854/565138 (executing program)
2022/07/12 03:17:23 fetching corpus: 13157, signal 430442/565673 (executing program)
2022/07/12 03:17:23 fetching corpus: 13207, signal 430824/566213 (executing program)
2022/07/12 03:17:23 fetching corpus: 13256, signal 431172/566742 (executing program)
2022/07/12 03:17:24 fetching corpus: 13306, signal 431546/567298 (executing program)
2022/07/12 03:17:24 fetching corpus: 13356, signal 431875/567837 (executing program)
2022/07/12 03:17:24 fetching corpus: 13406, signal 432290/568326 (executing program)
2022/07/12 03:17:24 fetching corpus: 13456, signal 432623/568848 (executing program)
2022/07/12 03:17:24 fetching corpus: 13506, signal 433157/569383 (executing program)
2022/07/12 03:17:24 fetching corpus: 13556, signal 433786/569930 (executing program)
2022/07/12 03:17:24 fetching corpus: 13606, signal 434144/570414 (executing program)
2022/07/12 03:17:24 fetching corpus: 13656, signal 434734/570930 (executing program)
2022/07/12 03:17:24 fetching corpus: 13706, signal 435139/571437 (executing program)
2022/07/12 03:17:25 fetching corpus: 13756, signal 435638/571988 (executing program)
2022/07/12 03:17:25 fetching corpus: 13806, signal 436082/572514 (executing program)
2022/07/12 03:17:25 fetching corpus: 13856, signal 436567/573005 (executing program)
2022/07/12 03:17:25 fetching corpus: 13906, signal 437119/573519 (executing program)
2022/07/12 03:17:25 fetching corpus: 13956, signal 437806/574019 (executing program)
2022/07/12 03:17:25 fetching corpus: 14006, signal 438234/574503 (executing program)
2022/07/12 03:17:25 fetching corpus: 14056, signal 438702/575012 (executing program)
2022/07/12 03:17:25 fetching corpus: 14106, signal 439083/575525 (executing program)
2022/07/12 03:17:25 fetching corpus: 14156, signal 439660/576020 (executing program)
2022/07/12 03:17:25 fetching corpus: 14206, signal 440226/576511 (executing program)
2022/07/12 03:17:26 fetching corpus: 14256, signal 440601/577010 (executing program)
2022/07/12 03:17:26 fetching corpus: 14306, signal 440972/577477 (executing program)
2022/07/12 03:17:26 fetching corpus: 14356, signal 441494/577904 (executing program)
2022/07/12 03:17:26 fetching corpus: 14406, signal 441943/577904 (executing program)
2022/07/12 03:17:26 fetching corpus: 14456, signal 442278/577904 (executing program)
2022/07/12 03:17:26 fetching corpus: 14506, signal 442870/577904 (executing program)
2022/07/12 03:17:26 fetching corpus: 14556, signal 443206/577904 (executing program)
2022/07/12 03:17:26 fetching corpus: 14606, signal 443589/577904 (executing program)
2022/07/12 03:17:26 fetching corpus: 14656, signal 443920/577904 (executing program)
2022/07/12 03:17:26 fetching corpus: 14705, signal 444545/577904 (executing program)
2022/07/12 03:17:27 fetching corpus: 14755, signal 445043/577904 (executing program)
2022/07/12 03:17:27 fetching corpus: 14805, signal 445411/577904 (executing program)
2022/07/12 03:17:27 fetching corpus: 14854, signal 445788/577904 (executing program)
2022/07/12 03:17:27 fetching corpus: 14901, signal 446111/577904 (executing program)
2022/07/12 03:17:27 fetching corpus: 14951, signal 446402/577904 (executing program)
2022/07/12 03:17:27 fetching corpus: 15001, signal 446808/577904 (executing program)
2022/07/12 03:17:27 fetching corpus: 15050, signal 447356/577904 (executing program)
2022/07/12 03:17:27 fetching corpus: 15100, signal 447777/577904 (executing program)
2022/07/12 03:17:27 fetching corpus: 15149, signal 448248/577904 (executing program)
2022/07/12 03:17:28 fetching corpus: 15199, signal 448595/577907 (executing program)
2022/07/12 03:17:28 fetching corpus: 15249, signal 449092/577907 (executing program)
2022/07/12 03:17:28 fetching corpus: 15298, signal 449483/577907 (executing program)
2022/07/12 03:17:28 fetching corpus: 15348, signal 450085/577907 (executing program)
2022/07/12 03:17:28 fetching corpus: 15397, signal 450458/577907 (executing program)
2022/07/12 03:17:28 fetching corpus: 15447, signal 450818/577907 (executing program)
2022/07/12 03:17:28 fetching corpus: 15496, signal 451179/577907 (executing program)
2022/07/12 03:17:28 fetching corpus: 15546, signal 451561/577907 (executing program)
2022/07/12 03:17:28 fetching corpus: 15596, signal 451955/577907 (executing program)
2022/07/12 03:17:28 fetching corpus: 15646, signal 452524/577907 (executing program)
2022/07/12 03:17:29 fetching corpus: 15696, signal 452854/577911 (executing program)
2022/07/12 03:17:29 fetching corpus: 15745, signal 453522/577911 (executing program)
2022/07/12 03:17:29 fetching corpus: 15795, signal 455172/577911 (executing program)
2022/07/12 03:17:29 fetching corpus: 15845, signal 455611/577911 (executing program)
2022/07/12 03:17:29 fetching corpus: 15895, signal 456062/577911 (executing program)
2022/07/12 03:17:29 fetching corpus: 15945, signal 456514/577911 (executing program)
2022/07/12 03:17:29 fetching corpus: 15995, signal 456936/577911 (executing program)
2022/07/12 03:17:29 fetching corpus: 16045, signal 457326/577915 (executing program)
2022/07/12 03:17:29 fetching corpus: 16095, signal 457736/577915 (executing program)
2022/07/12 03:17:30 fetching corpus: 16145, signal 458112/577915 (executing program)
2022/07/12 03:17:30 fetching corpus: 16195, signal 458425/577915 (executing program)
2022/07/12 03:17:30 fetching corpus: 16245, signal 458763/577915 (executing program)
2022/07/12 03:17:30 fetching corpus: 16295, signal 459138/577915 (executing program)
2022/07/12 03:17:30 fetching corpus: 16345, signal 459476/577915 (executing program)
2022/07/12 03:17:30 fetching corpus: 16394, signal 459860/577915 (executing program)
2022/07/12 03:17:30 fetching corpus: 16444, signal 460150/577915 (executing program)
2022/07/12 03:17:30 fetching corpus: 16494, signal 460645/577915 (executing program)
2022/07/12 03:17:30 fetching corpus: 16544, signal 460945/577915 (executing program)
2022/07/12 03:17:30 fetching corpus: 16594, signal 461245/577915 (executing program)
2022/07/12 03:17:31 fetching corpus: 16643, signal 461716/577915 (executing program)
2022/07/12 03:17:31 fetching corpus: 16692, signal 462109/577919 (executing program)
2022/07/12 03:17:31 fetching corpus: 16742, signal 462466/577919 (executing program)
2022/07/12 03:17:31 fetching corpus: 16791, signal 462974/577919 (executing program)
2022/07/12 03:17:31 fetching corpus: 16841, signal 463301/577919 (executing program)
2022/07/12 03:17:31 fetching corpus: 16890, signal 463714/577919 (executing program)
2022/07/12 03:17:31 fetching corpus: 16940, signal 463968/577921 (executing program)
2022/07/12 03:17:31 fetching corpus: 16990, signal 464350/577921 (executing program)
2022/07/12 03:17:31 fetching corpus: 17040, signal 464731/577921 (executing program)
2022/07/12 03:17:31 fetching corpus: 17090, signal 465278/577921 (executing program)
2022/07/12 03:17:32 fetching corpus: 17140, signal 465672/577921 (executing program)
2022/07/12 03:17:32 fetching corpus: 17190, signal 465968/577940 (executing program)
2022/07/12 03:17:32 fetching corpus: 17240, signal 466263/577940 (executing program)
2022/07/12 03:17:32 fetching corpus: 17290, signal 466719/577940 (executing program)
2022/07/12 03:17:32 fetching corpus: 17340, signal 467089/577940 (executing program)
2022/07/12 03:17:32 fetching corpus: 17390, signal 467435/577940 (executing program)
2022/07/12 03:17:32 fetching corpus: 17439, signal 467735/577940 (executing program)
2022/07/12 03:17:32 fetching corpus: 17489, signal 468091/577942 (executing program)
2022/07/12 03:17:32 fetching corpus: 17539, signal 468437/577942 (executing program)
2022/07/12 03:17:32 fetching corpus: 17589, signal 468836/577942 (executing program)
2022/07/12 03:17:32 fetching corpus: 17639, signal 469262/577942 (executing program)
2022/07/12 03:17:33 fetching corpus: 17688, signal 469566/577942 (executing program)
2022/07/12 03:17:33 fetching corpus: 17738, signal 470152/577942 (executing program)
2022/07/12 03:17:33 fetching corpus: 17787, signal 470452/577942 (executing program)
2022/07/12 03:17:33 fetching corpus: 17837, signal 470757/577942 (executing program)
2022/07/12 03:17:33 fetching corpus: 17887, signal 471097/577942 (executing program)
2022/07/12 03:17:33 fetching corpus: 17937, signal 471384/577942 (executing program)
2022/07/12 03:17:33 fetching corpus: 17987, signal 471714/577942 (executing program)
2022/07/12 03:17:33 fetching corpus: 18037, signal 472734/577942 (executing program)
2022/07/12 03:17:33 fetching corpus: 18087, signal 472923/577942 (executing program)
2022/07/12 03:17:33 fetching corpus: 18137, signal 473192/577942 (executing program)
2022/07/12 03:17:33 fetching corpus: 18187, signal 473789/577942 (executing program)
2022/07/12 03:17:33 fetching corpus: 18236, signal 474402/577942 (executing program)
2022/07/12 03:17:34 fetching corpus: 18285, signal 474863/577942 (executing program)
2022/07/12 03:17:34 fetching corpus: 18335, signal 475094/577942 (executing program)
2022/07/12 03:17:34 fetching corpus: 18385, signal 475558/577942 (executing program)
2022/07/12 03:17:34 fetching corpus: 18434, signal 476101/577942 (executing program)
2022/07/12 03:17:34 fetching corpus: 18483, signal 476431/577942 (executing program)
2022/07/12 03:17:34 fetching corpus: 18533, signal 476704/577943 (executing program)
2022/07/12 03:17:34 fetching corpus: 18583, signal 477295/577943 (executing program)
2022/07/12 03:17:35 fetching corpus: 18633, signal 477684/577943 (executing program)
2022/07/12 03:17:35 fetching corpus: 18683, signal 477996/577943 (executing program)
2022/07/12 03:17:35 fetching corpus: 18733, signal 478343/577943 (executing program)
2022/07/12 03:17:35 fetching corpus: 18783, signal 478812/577943 (executing program)
2022/07/12 03:17:35 fetching corpus: 18833, signal 479127/577943 (executing program)
2022/07/12 03:17:35 fetching corpus: 18883, signal 479506/577943 (executing program)
2022/07/12 03:17:35 fetching corpus: 18933, signal 479883/577943 (executing program)
2022/07/12 03:17:35 fetching corpus: 18983, signal 480193/577943 (executing program)
2022/07/12 03:17:35 fetching corpus: 19032, signal 480847/577943 (executing program)
2022/07/12 03:17:35 fetching corpus: 19082, signal 481207/577943 (executing program)
2022/07/12 03:17:35 fetching corpus: 19132, signal 481496/577943 (executing program)
2022/07/12 03:17:35 fetching corpus: 19182, signal 481984/577943 (executing program)
2022/07/12 03:17:35 fetching corpus: 19232, signal 482303/577943 (executing program)
2022/07/12 03:17:36 fetching corpus: 19281, signal 482582/577943 (executing program)
2022/07/12 03:17:36 fetching corpus: 19331, signal 482928/577943 (executing program)
2022/07/12 03:17:36 fetching corpus: 19381, signal 483235/577943 (executing program)
2022/07/12 03:17:36 fetching corpus: 19431, signal 483557/577943 (executing program)
2022/07/12 03:17:36 fetching corpus: 19480, signal 483884/577944 (executing program)
2022/07/12 03:17:36 fetching corpus: 19530, signal 484252/577944 (executing program)
2022/07/12 03:17:36 fetching corpus: 19580, signal 484533/577944 (executing program)
2022/07/12 03:17:36 fetching corpus: 19629, signal 484833/577944 (executing program)
2022/07/12 03:17:36 fetching corpus: 19679, signal 485122/577944 (executing program)
2022/07/12 03:17:36 fetching corpus: 19729, signal 485461/577944 (executing program)
2022/07/12 03:17:37 fetching corpus: 19779, signal 485755/577944 (executing program)
2022/07/12 03:17:37 fetching corpus: 19829, signal 486064/577944 (executing program)
2022/07/12 03:17:37 fetching corpus: 19879, signal 486390/577944 (executing program)
2022/07/12 03:17:37 fetching corpus: 19929, signal 486860/577944 (executing program)
2022/07/12 03:17:37 fetching corpus: 19979, signal 487212/577944 (executing program)
2022/07/12 03:17:37 fetching corpus: 20029, signal 487485/577944 (executing program)
2022/07/12 03:17:37 fetching corpus: 20079, signal 487817/577944 (executing program)
2022/07/12 03:17:37 fetching corpus: 20129, signal 488102/577944 (executing program)
2022/07/12 03:17:37 fetching corpus: 20179, signal 488369/577944 (executing program)
2022/07/12 03:17:37 fetching corpus: 20229, signal 488694/577944 (executing program)
2022/07/12 03:17:37 fetching corpus: 20279, signal 489264/577944 (executing program)
2022/07/12 03:17:38 fetching corpus: 20328, signal 489565/577944 (executing program)
2022/07/12 03:17:38 fetching corpus: 20378, signal 489862/577944 (executing program)
2022/07/12 03:17:38 fetching corpus: 20428, signal 490328/577944 (executing program)
2022/07/12 03:17:38 fetching corpus: 20477, signal 490574/577944 (executing program)
2022/07/12 03:17:38 fetching corpus: 20527, signal 490882/577944 (executing program)
2022/07/12 03:17:38 fetching corpus: 20577, signal 491181/577944 (executing program)
2022/07/12 03:17:38 fetching corpus: 20627, signal 491572/577944 (executing program)
2022/07/12 03:17:38 fetching corpus: 20677, signal 491997/577944 (executing program)
2022/07/12 03:17:38 fetching corpus: 20726, signal 492261/577944 (executing program)
2022/07/12 03:17:39 fetching corpus: 20776, signal 492623/577944 (executing program)
2022/07/12 03:17:39 fetching corpus: 20826, signal 492939/577944 (executing program)
2022/07/12 03:17:39 fetching corpus: 20876, signal 493270/577944 (executing program)
2022/07/12 03:17:39 fetching corpus: 20926, signal 493665/577944 (executing program)
2022/07/12 03:17:39 fetching corpus: 20976, signal 493904/577944 (executing program)
2022/07/12 03:17:39 fetching corpus: 21026, signal 494280/577944 (executing program)
2022/07/12 03:17:39 fetching corpus: 21074, signal 494623/577944 (executing program)
2022/07/12 03:17:39 fetching corpus: 21124, signal 495018/577944 (executing program)
2022/07/12 03:17:39 fetching corpus: 21173, signal 495567/577944 (executing program)
2022/07/12 03:17:39 fetching corpus: 21223, signal 495953/577944 (executing program)
2022/07/12 03:17:39 fetching corpus: 21272, signal 496284/577944 (executing program)
2022/07/12 03:17:40 fetching corpus: 21322, signal 496635/577962 (executing program)
2022/07/12 03:17:40 fetching corpus: 21372, signal 497001/577962 (executing program)
2022/07/12 03:17:40 fetching corpus: 21422, signal 497319/577962 (executing program)
2022/07/12 03:17:40 fetching corpus: 21472, signal 497606/577962 (executing program)
2022/07/12 03:17:40 fetching corpus: 21521, signal 497859/577962 (executing program)
2022/07/12 03:17:40 fetching corpus: 21571, signal 498238/577962 (executing program)
2022/07/12 03:17:40 fetching corpus: 21621, signal 498507/577962 (executing program)
2022/07/12 03:17:40 fetching corpus: 21671, signal 498810/577962 (executing program)
2022/07/12 03:17:40 fetching corpus: 21721, signal 499164/577962 (executing program)
2022/07/12 03:17:40 fetching corpus: 21771, signal 500134/577962 (executing program)
2022/07/12 03:17:41 fetching corpus: 21821, signal 500541/577962 (executing program)
2022/07/12 03:17:41 fetching corpus: 21871, signal 500911/577962 (executing program)
2022/07/12 03:17:41 fetching corpus: 21921, signal 501147/577962 (executing program)
2022/07/12 03:17:41 fetching corpus: 21971, signal 501399/577962 (executing program)
2022/07/12 03:17:41 fetching corpus: 22021, signal 501696/577962 (executing program)
2022/07/12 03:17:41 fetching corpus: 22071, signal 502088/577962 (executing program)
2022/07/12 03:17:41 fetching corpus: 22121, signal 502412/577962 (executing program)
2022/07/12 03:17:41 fetching corpus: 22170, signal 502679/577963 (executing program)
2022/07/12 03:17:41 fetching corpus: 22220, signal 502947/577963 (executing program)
2022/07/12 03:17:41 fetching corpus: 22269, signal 503257/577964 (executing program)
2022/07/12 03:17:41 fetching corpus: 22319, signal 503765/577964 (executing program)
2022/07/12 03:17:42 fetching corpus: 22369, signal 504165/577964 (executing program)
2022/07/12 03:17:42 fetching corpus: 22419, signal 504575/577964 (executing program)
2022/07/12 03:17:42 fetching corpus: 22469, signal 504913/577964 (executing program)
2022/07/12 03:17:42 fetching corpus: 22519, signal 505209/577964 (executing program)
2022/07/12 03:17:42 fetching corpus: 22568, signal 505480/577964 (executing program)
2022/07/12 03:17:42 fetching corpus: 22618, signal 505756/577964 (executing program)
2022/07/12 03:17:42 fetching corpus: 22668, signal 506079/577964 (executing program)
2022/07/12 03:17:42 fetching corpus: 22718, signal 506279/577964 (executing program)
2022/07/12 03:17:42 fetching corpus: 22768, signal 506582/577964 (executing program)
2022/07/12 03:17:42 fetching corpus: 22818, signal 507162/577964 (executing program)
2022/07/12 03:17:42 fetching corpus: 22867, signal 507453/577966 (executing program)
2022/07/12 03:17:42 fetching corpus: 22916, signal 507801/577966 (executing program)
2022/07/12 03:17:43 fetching corpus: 22966, signal 508202/577976 (executing program)
2022/07/12 03:17:43 fetching corpus: 23016, signal 508534/577976 (executing program)
2022/07/12 03:17:43 fetching corpus: 23066, signal 508864/577976 (executing program)
2022/07/12 03:17:43 fetching corpus: 23116, signal 509243/577976 (executing program)
2022/07/12 03:17:43 fetching corpus: 23166, signal 509548/577976 (executing program)
2022/07/12 03:17:43 fetching corpus: 23215, signal 510507/577976 (executing program)
2022/07/12 03:17:43 fetching corpus: 23265, signal 510771/577976 (executing program)
2022/07/12 03:17:43 fetching corpus: 23315, signal 511145/577976 (executing program)
2022/07/12 03:17:43 fetching corpus: 23364, signal 511415/577985 (executing program)
2022/07/12 03:17:44 fetching corpus: 23414, signal 511690/577985 (executing program)
2022/07/12 03:17:44 fetching corpus: 23464, signal 512070/577985 (executing program)
2022/07/12 03:17:44 fetching corpus: 23513, signal 512346/577985 (executing program)
2022/07/12 03:17:44 fetching corpus: 23563, signal 512683/577985 (executing program)
2022/07/12 03:17:44 fetching corpus: 23613, signal 513048/577985 (executing program)
2022/07/12 03:17:44 fetching corpus: 23663, signal 513323/577985 (executing program)
2022/07/12 03:17:44 fetching corpus: 23713, signal 513560/577985 (executing program)
2022/07/12 03:17:44 fetching corpus: 23763, signal 513855/577988 (executing program)
2022/07/12 03:17:44 fetching corpus: 23813, signal 514136/577988 (executing program)
2022/07/12 03:17:44 fetching corpus: 23863, signal 514425/577988 (executing program)
2022/07/12 03:17:45 fetching corpus: 23913, signal 514642/577988 (executing program)
2022/07/12 03:17:45 fetching corpus: 23963, signal 515076/577988 (executing program)
2022/07/12 03:17:45 fetching corpus: 24013, signal 515541/577988 (executing program)
2022/07/12 03:17:45 fetching corpus: 24063, signal 515772/577988 (executing program)
2022/07/12 03:17:45 fetching corpus: 24113, signal 516085/577988 (executing program)
2022/07/12 03:17:45 fetching corpus: 24163, signal 516350/577988 (executing program)
2022/07/12 03:17:45 fetching corpus: 24213, signal 516805/577988 (executing program)
2022/07/12 03:17:45 fetching corpus: 24263, signal 517081/577988 (executing program)
2022/07/12 03:17:46 fetching corpus: 24313, signal 517353/577997 (executing program)
2022/07/12 03:17:46 fetching corpus: 24363, signal 517618/577997 (executing program)
2022/07/12 03:17:46 fetching corpus: 24413, signal 517891/577997 (executing program)
2022/07/12 03:17:46 fetching corpus: 24463, signal 518152/577997 (executing program)
2022/07/12 03:17:46 fetching corpus: 24513, signal 518428/577997 (executing program)
2022/07/12 03:17:46 fetching corpus: 24563, signal 518649/577997 (executing program)
2022/07/12 03:17:46 fetching corpus: 24613, signal 518873/577997 (executing program)
2022/07/12 03:17:46 fetching corpus: 24663, signal 519417/577997 (executing program)
2022/07/12 03:17:46 fetching corpus: 24713, signal 519681/577997 (executing program)
2022/07/12 03:17:46 fetching corpus: 24763, signal 519986/577997 (executing program)
2022/07/12 03:17:46 fetching corpus: 24813, signal 520381/577997 (executing program)
2022/07/12 03:17:47 fetching corpus: 24862, signal 520789/577997 (executing program)
2022/07/12 03:17:47 fetching corpus: 24912, signal 521114/577997 (executing program)
2022/07/12 03:17:47 fetching corpus: 24962, signal 521413/577997 (executing program)
2022/07/12 03:17:47 fetching corpus: 25012, signal 521652/577997 (executing program)
2022/07/12 03:17:47 fetching corpus: 25062, signal 521907/577997 (executing program)
2022/07/12 03:17:47 fetching corpus: 25112, signal 522113/577997 (executing program)
2022/07/12 03:17:47 fetching corpus: 25162, signal 522334/577997 (executing program)
2022/07/12 03:17:47 fetching corpus: 25212, signal 522548/577997 (executing program)
2022/07/12 03:17:47 fetching corpus: 25262, signal 522841/577997 (executing program)
2022/07/12 03:17:48 fetching corpus: 25312, signal 523263/577997 (executing program)
2022/07/12 03:17:48 fetching corpus: 25362, signal 523531/578003 (executing program)
2022/07/12 03:17:48 fetching corpus: 25412, signal 523796/578003 (executing program)
2022/07/12 03:17:48 fetching corpus: 25462, signal 524002/578003 (executing program)
2022/07/12 03:17:48 fetching corpus: 25512, signal 524327/578003 (executing program)
2022/07/12 03:17:48 fetching corpus: 25562, signal 524730/578003 (executing program)
2022/07/12 03:17:48 fetching corpus: 25612, signal 524947/578003 (executing program)
2022/07/12 03:17:48 fetching corpus: 25662, signal 525191/578003 (executing program)
2022/07/12 03:17:48 fetching corpus: 25712, signal 525427/578003 (executing program)
2022/07/12 03:17:48 fetching corpus: 25762, signal 525670/578003 (executing program)
2022/07/12 03:17:49 fetching corpus: 25812, signal 525970/578004 (executing program)
2022/07/12 03:17:49 fetching corpus: 25862, signal 526292/578004 (executing program)
2022/07/12 03:17:49 fetching corpus: 25912, signal 526599/578004 (executing program)
2022/07/12 03:17:49 fetching corpus: 25962, signal 526858/578004 (executing program)
2022/07/12 03:17:49 fetching corpus: 26012, signal 527125/578004 (executing program)
2022/07/12 03:17:49 fetching corpus: 26062, signal 527363/578004 (executing program)
2022/07/12 03:17:49 fetching corpus: 26112, signal 527685/578004 (executing program)
2022/07/12 03:17:49 fetching corpus: 26162, signal 528031/578004 (executing program)
2022/07/12 03:17:49 fetching corpus: 26211, signal 528298/578004 (executing program)
2022/07/12 03:17:49 fetching corpus: 26260, signal 528567/578004 (executing program)
2022/07/12 03:17:50 fetching corpus: 26309, signal 528952/578004 (executing program)
2022/07/12 03:17:50 fetching corpus: 26359, signal 529152/578004 (executing program)
2022/07/12 03:17:50 fetching corpus: 26409, signal 529425/578004 (executing program)
2022/07/12 03:17:50 fetching corpus: 26459, signal 529737/578004 (executing program)
2022/07/12 03:17:50 fetching corpus: 26509, signal 529995/578004 (executing program)
2022/07/12 03:17:50 fetching corpus: 26557, signal 530274/578004 (executing program)
2022/07/12 03:17:50 fetching corpus: 26607, signal 530586/578004 (executing program)
2022/07/12 03:17:50 fetching corpus: 26657, signal 530849/578004 (executing program)
2022/07/12 03:17:51 fetching corpus: 26706, signal 531083/578004 (executing program)
2022/07/12 03:17:51 fetching corpus: 26756, signal 531390/578004 (executing program)
2022/07/12 03:17:51 fetching corpus: 26806, signal 531594/578004 (executing program)
2022/07/12 03:17:51 fetching corpus: 26856, signal 531813/578004 (executing program)
2022/07/12 03:17:51 fetching corpus: 26906, signal 532146/578004 (executing program)
2022/07/12 03:17:51 fetching corpus: 26954, signal 532428/578004 (executing program)
2022/07/12 03:17:51 fetching corpus: 27004, signal 532775/578004 (executing program)
2022/07/12 03:17:51 fetching corpus: 27053, signal 533193/578004 (executing program)
2022/07/12 03:17:51 fetching corpus: 27103, signal 533507/578004 (executing program)
2022/07/12 03:17:51 fetching corpus: 27152, signal 533768/578004 (executing program)
2022/07/12 03:17:52 fetching corpus: 27201, signal 534057/578004 (executing program)
2022/07/12 03:17:52 fetching corpus: 27250, signal 534338/578004 (executing program)
2022/07/12 03:17:52 fetching corpus: 27300, signal 534544/578004 (executing program)
2022/07/12 03:17:52 fetching corpus: 27350, signal 534857/578004 (executing program)
2022/07/12 03:17:52 fetching corpus: 27400, signal 535163/578004 (executing program)
2022/07/12 03:17:52 fetching corpus: 27450, signal 535423/578004 (executing program)
2022/07/12 03:17:52 fetching corpus: 27500, signal 535764/578004 (executing program)
2022/07/12 03:17:52 fetching corpus: 27550, signal 536003/578004 (executing program)
2022/07/12 03:17:52 fetching corpus: 27600, signal 536354/578004 (executing program)
2022/07/12 03:17:52 fetching corpus: 27650, signal 536542/578004 (executing program)
2022/07/12 03:17:52 fetching corpus: 27700, signal 537106/578004 (executing program)
2022/07/12 03:17:53 fetching corpus: 27750, signal 537366/578004 (executing program)
2022/07/12 03:17:53 fetching corpus: 27800, signal 537560/578004 (executing program)
2022/07/12 03:17:53 fetching corpus: 27850, signal 537839/578004 (executing program)
2022/07/12 03:17:53 fetching corpus: 27900, signal 538050/578004 (executing program)
2022/07/12 03:17:53 fetching corpus: 27950, signal 538236/578004 (executing program)
2022/07/12 03:17:53 fetching corpus: 28000, signal 538516/578004 (executing program)
2022/07/12 03:17:53 fetching corpus: 28050, signal 538743/578004 (executing program)
2022/07/12 03:17:53 fetching corpus: 28100, signal 539169/578004 (executing program)
2022/07/12 03:17:53 fetching corpus: 28150, signal 539407/578004 (executing program)
2022/07/12 03:17:54 fetching corpus: 28200, signal 539711/578004 (executing program)
2022/07/12 03:17:54 fetching corpus: 28250, signal 539967/578004 (executing program)
2022/07/12 03:17:54 fetching corpus: 28300, signal 540232/578004 (executing program)
2022/07/12 03:17:54 fetching corpus: 28349, signal 540408/578004 (executing program)
2022/07/12 03:17:54 fetching corpus: 28399, signal 540697/578004 (executing program)
2022/07/12 03:17:54 fetching corpus: 28449, signal 540852/578004 (executing program)
2022/07/12 03:17:54 fetching corpus: 28499, signal 541219/578004 (executing program)
2022/07/12 03:17:54 fetching corpus: 28549, signal 541507/578004 (executing program)
2022/07/12 03:17:54 fetching corpus: 28599, signal 541786/578004 (executing program)
2022/07/12 03:17:54 fetching corpus: 28649, signal 542034/578004 (executing program)
2022/07/12 03:17:55 fetching corpus: 28699, signal 542341/578004 (executing program)
2022/07/12 03:17:55 fetching corpus: 28749, signal 542623/578004 (executing program)
2022/07/12 03:17:55 fetching corpus: 28799, signal 542900/578004 (executing program)
2022/07/12 03:17:55 fetching corpus: 28847, signal 543164/578004 (executing program)
2022/07/12 03:17:55 fetching corpus: 28897, signal 543365/578004 (executing program)
2022/07/12 03:17:55 fetching corpus: 28947, signal 543557/578004 (executing program)
2022/07/12 03:17:55 fetching corpus: 28997, signal 543796/578004 (executing program)
2022/07/12 03:17:55 fetching corpus: 29047, signal 544013/578007 (executing program)
2022/07/12 03:17:55 fetching corpus: 29096, signal 544304/578007 (executing program)
2022/07/12 03:17:55 fetching corpus: 29146, signal 544608/578007 (executing program)
2022/07/12 03:17:55 fetching corpus: 29196, signal 544831/578007 (executing program)
2022/07/12 03:17:56 fetching corpus: 29245, signal 545056/578007 (executing program)
2022/07/12 03:17:56 fetching corpus: 29295, signal 545267/578007 (executing program)
2022/07/12 03:17:56 fetching corpus: 29345, signal 545453/578007 (executing program)
2022/07/12 03:17:56 fetching corpus: 29395, signal 545661/578007 (executing program)
2022/07/12 03:17:56 fetching corpus: 29444, signal 545833/578007 (executing program)
2022/07/12 03:17:56 fetching corpus: 29494, signal 546166/578007 (executing program)
2022/07/12 03:17:56 fetching corpus: 29544, signal 546383/578007 (executing program)
2022/07/12 03:17:56 fetching corpus: 29592, signal 546654/578007 (executing program)
2022/07/12 03:17:56 fetching corpus: 29641, signal 546907/578008 (executing program)
2022/07/12 03:17:57 fetching corpus: 29691, signal 547239/578008 (executing program)
2022/07/12 03:17:57 fetching corpus: 29741, signal 547501/578008 (executing program)
2022/07/12 03:17:57 fetching corpus: 29791, signal 547832/578008 (executing program)
2022/07/12 03:17:57 fetching corpus: 29841, signal 548062/578008 (executing program)
2022/07/12 03:17:57 fetching corpus: 29890, signal 548453/578008 (executing program)
2022/07/12 03:17:57 fetching corpus: 29940, signal 548675/578015 (executing program)
2022/07/12 03:17:57 fetching corpus: 29990, signal 548891/578017 (executing program)
2022/07/12 03:17:57 fetching corpus: 30040, signal 549148/578017 (executing program)
2022/07/12 03:17:57 fetching corpus: 30090, signal 549386/578017 (executing program)
2022/07/12 03:17:57 fetching corpus: 30140, signal 549612/578017 (executing program)
2022/07/12 03:17:58 fetching corpus: 30190, signal 549851/578018 (executing program)
2022/07/12 03:17:58 fetching corpus: 30239, signal 550112/578018 (executing program)
2022/07/12 03:17:58 fetching corpus: 30289, signal 550340/578018 (executing program)
2022/07/12 03:17:58 fetching corpus: 30339, signal 550653/578018 (executing program)
2022/07/12 03:17:58 fetching corpus: 30389, signal 550928/578018 (executing program)
2022/07/12 03:17:58 fetching corpus: 30438, signal 551248/578018 (executing program)
2022/07/12 03:17:58 fetching corpus: 30488, signal 551555/578018 (executing program)
2022/07/12 03:17:58 fetching corpus: 30538, signal 551779/578018 (executing program)
2022/07/12 03:17:58 fetching corpus: 30588, signal 551961/578018 (executing program)
2022/07/12 03:17:58 fetching corpus: 30638, signal 552152/578020 (executing program)
2022/07/12 03:17:59 fetching corpus: 30688, signal 552386/578020 (executing program)
2022/07/12 03:17:59 fetching corpus: 30738, signal 552632/578020 (executing program)
2022/07/12 03:17:59 fetching corpus: 30788, signal 552841/578020 (executing program)
2022/07/12 03:17:59 fetching corpus: 30838, signal 553066/578020 (executing program)
2022/07/12 03:17:59 fetching corpus: 30887, signal 553333/578020 (executing program)
2022/07/12 03:17:59 fetching corpus: 30937, signal 553606/578020 (executing program)
2022/07/12 03:17:59 fetching corpus: 30985, signal 553839/578031 (executing program)
2022/07/12 03:17:59 fetching corpus: 31035, signal 554039/578031 (executing program)
2022/07/12 03:18:00 fetching corpus: 31085, signal 554237/578031 (executing program)
2022/07/12 03:18:00 fetching corpus: 31134, signal 554837/578031 (executing program)
2022/07/12 03:18:00 fetching corpus: 31184, signal 555081/578031 (executing program)
2022/07/12 03:18:00 fetching corpus: 31234, signal 555343/578031 (executing program)
2022/07/12 03:18:00 fetching corpus: 31284, signal 555518/578031 (executing program)
2022/07/12 03:18:00 fetching corpus: 31333, signal 555758/578031 (executing program)
2022/07/12 03:18:00 fetching corpus: 31383, signal 556144/578031 (executing program)
2022/07/12 03:18:00 fetching corpus: 31433, signal 556352/578031 (executing program)
2022/07/12 03:18:00 fetching corpus: 31482, signal 556530/578032 (executing program)
2022/07/12 03:18:00 fetching corpus: 31532, signal 556770/578032 (executing program)
2022/07/12 03:18:01 fetching corpus: 31582, signal 556993/578033 (executing program)
2022/07/12 03:18:01 fetching corpus: 31631, signal 557471/578036 (executing program)
2022/07/12 03:18:01 fetching corpus: 31681, signal 557981/578036 (executing program)
2022/07/12 03:18:01 fetching corpus: 31731, signal 558259/578036 (executing program)
2022/07/12 03:18:01 fetching corpus: 31780, signal 558611/578038 (executing program)
2022/07/12 03:18:01 fetching corpus: 31830, signal 558883/578038 (executing program)
2022/07/12 03:18:01 fetching corpus: 31879, signal 559056/578038 (executing program)
2022/07/12 03:18:01 fetching corpus: 31929, signal 559294/578038 (executing program)
2022/07/12 03:18:01 fetching corpus: 31979, signal 559516/578038 (executing program)
2022/07/12 03:18:02 fetching corpus: 32029, signal 559729/578038 (executing program)
2022/07/12 03:18:02 fetching corpus: 32079, signal 559912/578038 (executing program)
2022/07/12 03:18:02 fetching corpus: 32129, signal 560132/578038 (executing program)
2022/07/12 03:18:02 fetching corpus: 32179, signal 560384/578038 (executing program)
2022/07/12 03:18:02 fetching corpus: 32229, signal 560746/578038 (executing program)
2022/07/12 03:18:02 fetching corpus: 32278, signal 560952/578039 (executing program)
2022/07/12 03:18:02 fetching corpus: 32328, signal 561173/578039 (executing program)
2022/07/12 03:18:02 fetching corpus: 32377, signal 561471/578039 (executing program)
2022/07/12 03:18:02 fetching corpus: 32427, signal 561696/578039 (executing program)
2022/07/12 03:18:02 fetching corpus: 32476, signal 561924/578044 (executing program)
2022/07/12 03:18:03 fetching corpus: 32526, signal 562151/578044 (executing program)
2022/07/12 03:18:03 fetching corpus: 32576, signal 562367/578044 (executing program)
2022/07/12 03:18:03 fetching corpus: 32626, signal 562690/578044 (executing program)
2022/07/12 03:18:03 fetching corpus: 32676, signal 562899/578044 (executing program)
2022/07/12 03:18:03 fetching corpus: 32726, signal 563030/578044 (executing program)
2022/07/12 03:18:03 fetching corpus: 32776, signal 563273/578044 (executing program)
2022/07/12 03:18:03 fetching corpus: 32826, signal 563534/578044 (executing program)
2022/07/12 03:18:03 fetching corpus: 32876, signal 563748/578044 (executing program)
2022/07/12 03:18:03 fetching corpus: 32926, signal 563976/578044 (executing program)
2022/07/12 03:18:04 fetching corpus: 32976, signal 564145/578044 (executing program)
2022/07/12 03:18:04 fetching corpus: 33026, signal 564372/578044 (executing program)
2022/07/12 03:18:04 fetching corpus: 33076, signal 564590/578044 (executing program)
2022/07/12 03:18:04 fetching corpus: 33126, signal 565032/578044 (executing program)
2022/07/12 03:18:04 fetching corpus: 33176, signal 565263/578044 (executing program)
2022/07/12 03:18:04 fetching corpus: 33226, signal 565530/578044 (executing program)
2022/07/12 03:18:04 fetching corpus: 33276, signal 565723/578044 (executing program)
2022/07/12 03:18:04 fetching corpus: 33326, signal 565910/578044 (executing program)
2022/07/12 03:18:04 fetching corpus: 33375, signal 566107/578044 (executing program)
2022/07/12 03:18:05 fetching corpus: 33425, signal 566319/578044 (executing program)
2022/07/12 03:18:05 fetching corpus: 33475, signal 566568/578044 (executing program)
2022/07/12 03:18:05 fetching corpus: 33525, signal 566904/578044 (executing program)
2022/07/12 03:18:05 fetching corpus: 33575, signal 567079/578044 (executing program)
2022/07/12 03:18:05 fetching corpus: 33625, signal 567419/578044 (executing program)
2022/07/12 03:18:05 fetching corpus: 33673, signal 567574/578057 (executing program)
2022/07/12 03:18:05 fetching corpus: 33723, signal 567754/578057 (executing program)
2022/07/12 03:18:05 fetching corpus: 33772, signal 567921/578057 (executing program)
2022/07/12 03:18:05 fetching corpus: 33822, signal 568129/578057 (executing program)
2022/07/12 03:18:05 fetching corpus: 33872, signal 568328/578057 (executing program)
2022/07/12 03:18:05 fetching corpus: 33922, signal 568560/578057 (executing program)
2022/07/12 03:18:06 fetching corpus: 33972, signal 568747/578057 (executing program)
2022/07/12 03:18:06 fetching corpus: 34022, signal 568955/578057 (executing program)
2022/07/12 03:18:06 fetching corpus: 34072, signal 569232/578057 (executing program)
2022/07/12 03:18:06 fetching corpus: 34122, signal 569456/578057 (executing program)
2022/07/12 03:18:06 fetching corpus: 34172, signal 569696/578057 (executing program)
2022/07/12 03:18:06 fetching corpus: 34222, signal 569959/578057 (executing program)
2022/07/12 03:18:06 fetching corpus: 34272, signal 570201/578057 (executing program)
2022/07/12 03:18:07 fetching corpus: 34322, signal 570440/578057 (executing program)
2022/07/12 03:18:07 fetching corpus: 34370, signal 570623/578057 (executing program)
2022/07/12 03:18:07 fetching corpus: 34420, signal 570826/578057 (executing program)
2022/07/12 03:18:07 fetching corpus: 34470, signal 571029/578057 (executing program)
2022/07/12 03:18:07 fetching corpus: 34520, signal 571295/578057 (executing program)
2022/07/12 03:18:07 fetching corpus: 34570, signal 571551/578057 (executing program)
2022/07/12 03:18:07 fetching corpus: 34620, signal 571734/578057 (executing program)
2022/07/12 03:18:07 fetching corpus: 34670, signal 572095/578057 (executing program)
2022/07/12 03:18:07 fetching corpus: 34720, signal 572278/578057 (executing program)
2022/07/12 03:18:07 fetching corpus: 34755, signal 572450/578057 (executing program)
2022/07/12 03:18:07 fetching corpus: 34755, signal 572450/578057 (executing program)
[  132.485769][ T1239] ieee802154 phy0 wpan0: encryption failed: -22
[  132.492219][ T1239] ieee802154 phy1 wpan1: encryption failed: -22
2022/07/12 03:18:10 starting 6 fuzzer processes
03:18:10 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010800000000084)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001200)=0x5, 0x4)
sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='d', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5b8cc42e5f0c492da621f707b81342eaa044bb44f90571d5a6ffffcbd83ee593cb7aa4e47a5ec4aee0a8af4921075463f798290c7b1089c91140ce66715dcf6eb3fa3e25", 0x44}, {&(0x7f00000004c0)="1f8a63ef02a9c63598347ce7436bcd67641e350a0a0ac77c925472", 0x1b}, {&(0x7f0000000140)="d9198b73296f515263877c12d92510933f45c4c40fbb3fc5657a2d426700ba50a177666d4ff45e380a8e16d53dcf27366b5476298f4623c1e82f2cae66fbdad48e46f1a7974c6c9a268ab462db9a17c6c3a06dedb7c8796a6a65330b9fc95fd9e3cae223bf6ca5167773a1857d17dafd5dd7789353853bea52270fee92cc5841d866c83508845aae452b469770ff2f1c4a4675b1b0509d27cb9f398008d0af6bce823ca5f413526d8ff4b5113c49cf9556ee05f105e58f788c0a469f1e811617c19adf4ba1dcff7b2b896facba32ebee72cdf4979222d6ca09bc3b0f9258a0d5fd9d7eb95ce3e64957", 0xe9}, {&(0x7f0000000680)="9588ade73c622bcbf05e9e708ab41f8279a8c780df448213f7f5f7c0d7cf229e85fa16e822681944f042465783657d0365529d1ec56d32aa412b50e1ddef8db04dd4906b61b12b939f4010da6f62228b29ac4cce11ac6cd03a42897e5e9c0bc141929a6bcb064bce04ce4499f1eaf4234468104d8df3342c6c78ab9f0c042c47408a32170c21da65a03c0e779a018d2ed2050f2ec354558840faab19ce5da0efe59bb11051bf5229dcad0955d2bf155dbc3f0cc6b368e752bf", 0xb9}, {&(0x7f0000000c00)="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", 0x398}], 0x5}}], 0x2, 0x4000040)

03:18:10 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4a})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]})

03:18:10 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x5420)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x5423)

03:18:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
read(r0, &(0x7f00000001c0)=""/88, 0x58)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r3, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

03:18:10 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0x0, 0xacf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000280))

03:18:10 executing program 4:
syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "69a334", 0x0, 0x67, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2}}}}, 0x0)

[  134.811563][ T3635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  134.820234][ T3635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  134.828337][ T3635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  134.836354][ T3635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  134.844208][ T3635] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  134.851420][ T3635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  134.890514][ T3633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.899646][ T3640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.919473][ T3644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  134.937472][ T3646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.944491][ T3647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  134.945080][ T3647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  134.952041][ T3646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  134.966272][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  134.968431][ T3646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  134.975647][ T3648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  134.982628][ T3646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  134.990745][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  134.997781][ T3646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  135.005393][ T3648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  135.016603][ T3646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  135.024454][ T3648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  135.030673][ T3646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  135.045380][ T3648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  135.045601][ T3646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  135.054135][ T3648] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  135.060596][ T3646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  135.067183][ T3648] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  135.074655][ T3646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  135.081255][ T3648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  135.088480][ T3646] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  135.095255][ T3648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  135.105545][ T3646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  135.113818][ T3648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  135.136928][ T3647] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  135.155847][ T3646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  135.321917][ T3637] chnl_net:caif_netlink_parms(): no params data found
[  135.503280][ T3637] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.511347][ T3637] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.519846][ T3637] device bridge_slave_0 entered promiscuous mode
[  135.530917][ T3637] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.538487][ T3637] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.546555][ T3637] device bridge_slave_1 entered promiscuous mode
[  135.659915][ T3637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.669169][ T3650] chnl_net:caif_netlink_parms(): no params data found
[  135.680084][ T3656] chnl_net:caif_netlink_parms(): no params data found
[  135.709225][ T3637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.740326][ T3651] chnl_net:caif_netlink_parms(): no params data found
[  135.754842][ T3652] chnl_net:caif_netlink_parms(): no params data found
[  135.780086][ T3637] team0: Port device team_slave_0 added
[  135.790201][ T3655] chnl_net:caif_netlink_parms(): no params data found
[  135.820989][ T3637] team0: Port device team_slave_1 added
[  135.913345][ T3637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.920703][ T3637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.947187][ T3637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.982745][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.990152][ T3656] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.998472][ T3656] device bridge_slave_0 entered promiscuous mode
[  136.010923][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.020205][ T3656] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.028565][ T3656] device bridge_slave_1 entered promiscuous mode
[  136.040467][ T3637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.048205][ T3637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.074551][ T3637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.106772][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.113906][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.122062][ T3650] device bridge_slave_0 entered promiscuous mode
[  136.138061][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.145433][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.153368][ T3650] device bridge_slave_1 entered promiscuous mode
[  136.231374][ T3637] device hsr_slave_0 entered promiscuous mode
[  136.238866][ T3637] device hsr_slave_1 entered promiscuous mode
[  136.252478][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.259973][ T3651] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.268076][ T3651] device bridge_slave_0 entered promiscuous mode
[  136.287285][ T3656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.296574][ T3655] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.303670][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.312671][ T3655] device bridge_slave_0 entered promiscuous mode
[  136.321513][ T3655] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.329103][ T3655] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.337886][ T3655] device bridge_slave_1 entered promiscuous mode
[  136.345906][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.353011][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.361866][ T3652] device bridge_slave_0 entered promiscuous mode
[  136.369480][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.376835][ T3651] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.385308][ T3651] device bridge_slave_1 entered promiscuous mode
[  136.395326][ T3650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.406996][ T3656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.431646][ T3652] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.438871][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.447391][ T3652] device bridge_slave_1 entered promiscuous mode
[  136.473431][ T3650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.545628][ T3655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.556751][ T3652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.568236][ T3651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.592798][ T3650] team0: Port device team_slave_0 added
[  136.603687][ T3656] team0: Port device team_slave_0 added
[  136.611625][ T3655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.622171][ T3652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.633470][ T3651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.656682][ T3650] team0: Port device team_slave_1 added
[  136.671217][ T3656] team0: Port device team_slave_1 added
[  136.746068][ T3651] team0: Port device team_slave_0 added
[  136.752572][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.759689][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.787039][ T3650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.806154][ T3655] team0: Port device team_slave_0 added
[  136.816518][ T3652] team0: Port device team_slave_0 added
[  136.832582][ T3651] team0: Port device team_slave_1 added
[  136.838684][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.846209][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.872579][ T3650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.895415][   T14] Bluetooth: hci0: command 0x0409 tx timeout
[  136.903655][ T3656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.911464][ T3656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.938935][ T3656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.952554][ T3655] team0: Port device team_slave_1 added
[  136.960248][ T3652] team0: Port device team_slave_1 added
[  136.990999][ T3656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.998432][ T3656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.024824][ T3656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.065353][ T3650] device hsr_slave_0 entered promiscuous mode
[  137.072068][ T3650] device hsr_slave_1 entered promiscuous mode
[  137.079371][ T3650] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.087442][ T3650] Cannot create hsr debugfs directory
[  137.113557][ T3651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.120641][ T3651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.147187][ T3651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.169989][ T3655] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.177062][ T3655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.203476][ T3655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.204236][  T145] Bluetooth: hci3: command 0x0409 tx timeout
[  137.214311][   T14] Bluetooth: hci5: command 0x0409 tx timeout
[  137.226449][  T145] Bluetooth: hci2: command 0x0409 tx timeout
[  137.227869][ T3652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.239570][ T3652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.240251][   T14] Bluetooth: hci4: command 0x0409 tx timeout
[  137.272660][   T14] Bluetooth: hci1: command 0x0409 tx timeout
[  137.278837][ T3652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.295873][ T3652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.302874][ T3652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.329116][ T3652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.343604][ T3651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.351124][ T3651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.377615][ T3651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.405513][ T3655] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.412717][ T3655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.441933][ T3655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.478706][ T3656] device hsr_slave_0 entered promiscuous mode
[  137.485904][ T3656] device hsr_slave_1 entered promiscuous mode
[  137.492587][ T3656] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.500258][ T3656] Cannot create hsr debugfs directory
[  137.560378][ T3651] device hsr_slave_0 entered promiscuous mode
[  137.567154][ T3651] device hsr_slave_1 entered promiscuous mode
[  137.573602][ T3651] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.582312][ T3651] Cannot create hsr debugfs directory
[  137.603202][ T3652] device hsr_slave_0 entered promiscuous mode
[  137.611330][ T3652] device hsr_slave_1 entered promiscuous mode
[  137.620545][ T3652] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.632286][ T3652] Cannot create hsr debugfs directory
[  137.802452][ T3655] device hsr_slave_0 entered promiscuous mode
[  137.819232][ T3655] device hsr_slave_1 entered promiscuous mode
[  137.829041][ T3655] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  137.837339][ T3655] Cannot create hsr debugfs directory
[  137.925274][ T3637] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  137.983649][ T3637] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  138.039241][ T3637] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  138.057359][ T3637] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  138.345410][ T3650] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  138.360784][ T3650] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  138.371488][ T3650] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  138.396772][ T3650] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  138.443917][ T3637] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.459708][ T3651] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  138.472536][ T3651] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  138.498571][  T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  138.508040][  T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  138.522873][ T3651] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  138.533515][ T3637] 8021q: adding VLAN 0 to HW filter on device team0
[  138.561673][ T3651] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  138.593816][ T3656] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  138.603793][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  138.612764][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  138.621663][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.629035][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.637759][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  138.647983][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  138.657119][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.664274][ T3682] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.685589][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  138.694653][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  138.703756][ T3656] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  138.721286][ T3656] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  138.734732][ T3656] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  138.764779][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  138.773456][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  138.790865][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  138.799782][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  138.813745][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  138.822938][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  138.832881][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  138.860768][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  138.872533][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  138.881860][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  138.896952][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  138.950692][ T3650] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.975308][ T3684] Bluetooth: hci0: command 0x041b tx timeout
[  138.986300][ T3652] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  139.006301][ T3652] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  139.023586][ T3652] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  139.037310][ T3652] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  139.061352][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  139.069719][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  139.078573][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  139.086949][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  139.098685][ T3650] 8021q: adding VLAN 0 to HW filter on device team0
[  139.111219][ T3637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.144131][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  139.152906][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  139.162311][ T3688] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.170102][ T3688] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.179376][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  139.188400][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  139.197699][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.204913][ T3688] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.213177][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  139.225894][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  139.254806][ T3655] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  139.264356][ T3655] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  139.280399][ T3655] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  139.286230][   T26] Bluetooth: hci4: command 0x041b tx timeout
[  139.287821][ T3688] Bluetooth: hci1: command 0x041b tx timeout
[  139.293278][   T26] Bluetooth: hci5: command 0x041b tx timeout
[  139.299997][ T3688] Bluetooth: hci3: command 0x041b tx timeout
[  139.313273][   T26] Bluetooth: hci2: command 0x041b tx timeout
[  139.354888][ T3655] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  139.363526][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  139.373518][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  139.382359][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  139.391506][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  139.400536][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  139.409295][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  139.417909][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  139.427921][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  139.436660][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  139.452137][ T3651] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.476338][ T3650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  139.489623][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  139.500617][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  139.509233][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  139.517742][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  139.568107][ T3651] 8021q: adding VLAN 0 to HW filter on device team0
[  139.601366][ T3650] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.616425][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  139.625199][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  139.633164][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  139.642327][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  139.651683][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  139.659580][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  139.679547][ T3656] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.690195][ T3637] device veth0_vlan entered promiscuous mode
[  139.708889][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  139.718037][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  139.726418][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  139.735803][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  139.744634][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.751838][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.760062][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  139.769234][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  139.777939][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.785380][ T3681] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.833060][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  139.841659][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  139.851066][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  139.862176][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  139.871552][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  139.880743][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  139.894968][ T3656] 8021q: adding VLAN 0 to HW filter on device team0
[  139.906540][ T3637] device veth1_vlan entered promiscuous mode
[  139.941716][ T3652] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.952419][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  139.961188][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  139.970636][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  139.979602][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  139.988627][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  139.997574][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  140.006269][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.013342][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.021345][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  140.030173][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  140.039602][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  140.088727][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  140.098566][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  140.107679][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.114863][ T3681] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.122492][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  140.131241][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  140.148609][ T3652] 8021q: adding VLAN 0 to HW filter on device team0
[  140.161167][ T3651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.172888][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  140.200683][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  140.209270][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  140.217663][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  140.227074][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  140.236055][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  140.245757][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  140.255170][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  140.266189][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  140.278680][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  140.288333][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  140.297382][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  140.306473][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  140.339219][ T3656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.351036][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  140.380136][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  140.388503][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  140.398647][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  140.407873][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.415660][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.423823][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  140.433137][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  140.441996][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.449739][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.458379][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  140.468032][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  140.476946][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  140.487532][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  140.496029][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  140.504947][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  140.536547][ T3655] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.553425][ T3656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.566422][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  140.577188][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  140.585630][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  140.611649][ T3637] device veth0_macvtap entered promiscuous mode
[  140.626515][ T3637] device veth1_macvtap entered promiscuous mode
[  140.639718][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  140.648840][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  140.657564][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  140.669022][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  140.678021][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  140.687243][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  140.696153][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  140.705336][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  140.714580][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  140.723371][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  140.732012][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  140.740230][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  140.774601][ T3651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.783859][ T3650] device veth0_vlan entered promiscuous mode
[  140.792731][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  140.801316][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  140.809939][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  140.818211][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  140.828688][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  140.837527][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  140.846627][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  140.858109][ T3655] 8021q: adding VLAN 0 to HW filter on device team0
[  140.866842][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  140.900761][ T3637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.918184][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  140.930145][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  140.938291][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  140.950083][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  140.959234][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  140.968658][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  140.977561][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.985169][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.993501][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  141.002733][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  141.013785][ T3650] device veth1_vlan entered promiscuous mode
[  141.042164][ T3637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.050880][ T3688] Bluetooth: hci0: command 0x040f tx timeout
[  141.057556][ T3637] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.070321][ T3637] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.079416][ T3637] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.089310][ T3637] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.100905][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  141.109258][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  141.117866][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  141.127103][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  141.136523][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  141.145788][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.153004][ T3681] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.161049][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  141.170087][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  141.192289][ T3652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.205201][ T3656] device veth0_vlan entered promiscuous mode
[  141.235110][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  141.243271][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  141.252246][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  141.261713][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  141.293376][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  141.303305][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  141.312511][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  141.322911][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  141.346914][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  141.357607][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  141.364569][   T26] Bluetooth: hci2: command 0x040f tx timeout
[  141.367166][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  141.384941][ T3684] Bluetooth: hci5: command 0x040f tx timeout
[  141.391352][ T3684] Bluetooth: hci3: command 0x040f tx timeout
[  141.398173][ T3684] Bluetooth: hci1: command 0x040f tx timeout
[  141.404641][ T3684] Bluetooth: hci4: command 0x040f tx timeout
[  141.416690][ T3656] device veth1_vlan entered promiscuous mode
[  141.445390][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  141.455981][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  141.465288][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  141.473854][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  141.483828][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  141.492627][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  141.501616][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  141.511987][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  141.552091][ T3652] device veth0_vlan entered promiscuous mode
[  141.587727][ T3651] device veth0_vlan entered promiscuous mode
[  141.601172][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  141.617585][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  141.626962][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  141.635873][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  141.645144][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  141.653639][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  141.663250][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  141.673511][ T3650] device veth0_macvtap entered promiscuous mode
[  141.690779][ T3650] device veth1_macvtap entered promiscuous mode
[  141.708542][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  141.713483][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.726134][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.727262][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  141.742298][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  141.750574][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  141.758794][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  141.767228][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  141.775511][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  141.785992][ T3652] device veth1_vlan entered promiscuous mode
[  141.796681][ T3651] device veth1_vlan entered promiscuous mode
[  141.823251][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  141.831130][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  141.852302][ T3655] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.884645][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  141.897397][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.910037][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.926456][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.927062][ T3656] device veth0_macvtap entered promiscuous mode
[  141.935430][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.951626][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  141.962518][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  141.972277][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  141.981525][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  141.990307][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  141.999085][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  142.036428][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  142.048274][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.062587][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.076069][ T3656] device veth1_macvtap entered promiscuous mode
[  142.087504][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  142.096018][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  142.105958][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  142.116586][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  142.125300][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  142.135805][ T3651] device veth0_macvtap entered promiscuous mode
[  142.176107][ T3650] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.188106][ T3650] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.197775][ T3650] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.207178][ T3650] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.228483][ T3651] device veth1_macvtap entered promiscuous mode
[  142.243027][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  142.252021][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  142.262616][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  142.271834][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  142.287593][ T3652] device veth0_macvtap entered promiscuous mode
[  142.298388][  T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  142.307648][  T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  142.320289][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  142.330666][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  142.341884][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.352439][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  142.363551][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.377772][ T3656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.391529][ T3655] device veth0_vlan entered promiscuous mode
[  142.406555][ T3652] device veth1_macvtap entered promiscuous mode
[  142.424633][  T142] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  142.432847][  T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  142.458840][  T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
03:18:19 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010800000000084)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001200)=0x5, 0x4)
sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='d', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5b8cc42e5f0c492da621f707b81342eaa044bb44f90571d5a6ffffcbd83ee593cb7aa4e47a5ec4aee0a8af4921075463f798290c7b1089c91140ce66715dcf6eb3fa3e25", 0x44}, {&(0x7f00000004c0)="1f8a63ef02a9c63598347ce7436bcd67641e350a0a0ac77c925472", 0x1b}, {&(0x7f0000000140)="d9198b73296f515263877c12d92510933f45c4c40fbb3fc5657a2d426700ba50a177666d4ff45e380a8e16d53dcf27366b5476298f4623c1e82f2cae66fbdad48e46f1a7974c6c9a268ab462db9a17c6c3a06dedb7c8796a6a65330b9fc95fd9e3cae223bf6ca5167773a1857d17dafd5dd7789353853bea52270fee92cc5841d866c83508845aae452b469770ff2f1c4a4675b1b0509d27cb9f398008d0af6bce823ca5f413526d8ff4b5113c49cf9556ee05f105e58f788c0a469f1e811617c19adf4ba1dcff7b2b896facba32ebee72cdf4979222d6ca09bc3b0f9258a0d5fd9d7eb95ce3e64957", 0xe9}, {&(0x7f0000000680)="9588ade73c622bcbf05e9e708ab41f8279a8c780df448213f7f5f7c0d7cf229e85fa16e822681944f042465783657d0365529d1ec56d32aa412b50e1ddef8db04dd4906b61b12b939f4010da6f62228b29ac4cce11ac6cd03a42897e5e9c0bc141929a6bcb064bce04ce4499f1eaf4234468104d8df3342c6c78ab9f0c042c47408a32170c21da65a03c0e779a018d2ed2050f2ec354558840faab19ce5da0efe59bb11051bf5229dcad0955d2bf155dbc3f0cc6b368e752bf", 0xb9}, {&(0x7f0000000c00)="4903e6112eadc0b398871790011decc9674b710c769b494e537d2551bceacacaba6c3b8642cb217c51eceb6c20e6e665445058e2a720de3f52d1d7664fb7a19de3c4c86b4c90e12b6848ea95cf26969e53c7b2cf45bd5bb2523186de7bef92766d482eb02f8f0770952bb6f13bacdec83670a4a5391f16d48ea5cb006e9c0a128e5412cc170c7e3f04dfc149cca3510deb8f8c039d4750c9f680a959a2a3f24ef4ffa5d01738c4687400f43174609e8431971a21d75edf4633ebbeccc7417f3c7106f735a1c422eff1fb15132cfd66502b21f0cac2110c5424cbef6f30b52173c1f4b8639ec1eb16687b1a9d7a7ccbf95e54c6e8d1b21d073d6119dfdf33389633d90d3a25983dfdf4c637e68477f78bf2d6c815703bf7ed59b97f1f491560d66aac07b6057b0c1ef5527df029facf5e9635112001a08fd05dfa9c358d273b495ddd79655eb7aaa751929f3dd8ad871051de02ee2418ac00b6cb38ec3f955b2fd2cfaef63b1224bfd1883c91e8426b24cae0cbdadb09a992e3bf9a07449e335ada0f96b5387964db989e600ac5d317776182b34ad7a622547dd307f8b5211a7bc9a849228c4a2f8d2c224b9ab840147c0214811e79dfb9a4adf714eb266c2175535436a01bee4602af4c30af0f0d9802a1ee095d873fe2e75c24a5563e7cde443fb8d13d9e537d6e054f5e8fb0409091d5e37fe10feb8ffcc2d54c54e003fa29956916087b6c1ee90d882f1dad23cc2a8028fd52a235e6cbf128f2a45f3017048f1e1e089fa352030e341f1f5b578cfbd8f7dbd9bb15aad0724adabeead4139dbb3624f6bcb3b0e090af2478e3977d0d09733a36a46a7e5e1038e55e9b1e43d01438ef319ce4cc4488ce5c3a0a2b5fc37b44dc24918561783df6d9f87bb30d269106660da5fd86fb7ecf2cbbee2a0477ab33f13dd616b8b6ac6f05b0c26771fa3b2aedffdbb8d28b9c6769d61e4cc06d427c778edfe7fd82beb201c6894ab681c431c4b1ad804f4fcf63e84f97043458e5f8f96fbf32c2d5a77a4d9e4b191f2757b4ba216a067fe7c71e6e72fa908ac9d3ccbc6e85ef1c74efafa90032a38f84907bb3971ad35303fdb606c1b57e882cc0b08bee665ab251d4cb55f65f2c603d30785d9f16c524d8c6063c1fa1c680422680e9e01aacf877cefea44fd57dcb4def905a799aa72b134c8de8553bb5ce72f2821ff6a9daba5726e0f28ee8ed41a98e03ac1b2db1e716ad5fcfe2687324471f6ad693a935a7dc4d606c93d126fe07eda54f6a02c97082fbe2a09ea356cabbe603f24b11a35ba2", 0x398}], 0x5}}], 0x2, 0x4000040)

[  142.480702][  T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  142.499006][  T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
03:18:19 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010800000000084)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001200)=0x5, 0x4)
sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='d', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5b8cc42e5f0c492da621f707b81342eaa044bb44f90571d5a6ffffcbd83ee593cb7aa4e47a5ec4aee0a8af4921075463f798290c7b1089c91140ce66715dcf6eb3fa3e25", 0x44}, {&(0x7f00000004c0)="1f8a63ef02a9c63598347ce7436bcd67641e350a0a0ac77c925472", 0x1b}, {&(0x7f0000000140)="d9198b73296f515263877c12d92510933f45c4c40fbb3fc5657a2d426700ba50a177666d4ff45e380a8e16d53dcf27366b5476298f4623c1e82f2cae66fbdad48e46f1a7974c6c9a268ab462db9a17c6c3a06dedb7c8796a6a65330b9fc95fd9e3cae223bf6ca5167773a1857d17dafd5dd7789353853bea52270fee92cc5841d866c83508845aae452b469770ff2f1c4a4675b1b0509d27cb9f398008d0af6bce823ca5f413526d8ff4b5113c49cf9556ee05f105e58f788c0a469f1e811617c19adf4ba1dcff7b2b896facba32ebee72cdf4979222d6ca09bc3b0f9258a0d5fd9d7eb95ce3e64957", 0xe9}, {&(0x7f0000000680)="9588ade73c622bcbf05e9e708ab41f8279a8c780df448213f7f5f7c0d7cf229e85fa16e822681944f042465783657d0365529d1ec56d32aa412b50e1ddef8db04dd4906b61b12b939f4010da6f62228b29ac4cce11ac6cd03a42897e5e9c0bc141929a6bcb064bce04ce4499f1eaf4234468104d8df3342c6c78ab9f0c042c47408a32170c21da65a03c0e779a018d2ed2050f2ec354558840faab19ce5da0efe59bb11051bf5229dcad0955d2bf155dbc3f0cc6b368e752bf", 0xb9}, {&(0x7f0000000c00)="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", 0x398}], 0x5}}], 0x2, 0x4000040)

[  142.525882][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  142.542402][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.561804][ T3656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
03:18:19 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010800000000084)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001200)=0x5, 0x4)
sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='d', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5b8cc42e5f0c492da621f707b81342eaa044bb44f90571d5a6ffffcbd83ee593cb7aa4e47a5ec4aee0a8af4921075463f798290c7b1089c91140ce66715dcf6eb3fa3e25", 0x44}, {&(0x7f00000004c0)="1f8a63ef02a9c63598347ce7436bcd67641e350a0a0ac77c925472", 0x1b}, {&(0x7f0000000140)="d9198b73296f515263877c12d92510933f45c4c40fbb3fc5657a2d426700ba50a177666d4ff45e380a8e16d53dcf27366b5476298f4623c1e82f2cae66fbdad48e46f1a7974c6c9a268ab462db9a17c6c3a06dedb7c8796a6a65330b9fc95fd9e3cae223bf6ca5167773a1857d17dafd5dd7789353853bea52270fee92cc5841d866c83508845aae452b469770ff2f1c4a4675b1b0509d27cb9f398008d0af6bce823ca5f413526d8ff4b5113c49cf9556ee05f105e58f788c0a469f1e811617c19adf4ba1dcff7b2b896facba32ebee72cdf4979222d6ca09bc3b0f9258a0d5fd9d7eb95ce3e64957", 0xe9}, {&(0x7f0000000680)="9588ade73c622bcbf05e9e708ab41f8279a8c780df448213f7f5f7c0d7cf229e85fa16e822681944f042465783657d0365529d1ec56d32aa412b50e1ddef8db04dd4906b61b12b939f4010da6f62228b29ac4cce11ac6cd03a42897e5e9c0bc141929a6bcb064bce04ce4499f1eaf4234468104d8df3342c6c78ab9f0c042c47408a32170c21da65a03c0e779a018d2ed2050f2ec354558840faab19ce5da0efe59bb11051bf5229dcad0955d2bf155dbc3f0cc6b368e752bf", 0xb9}, {&(0x7f0000000c00)="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", 0x398}], 0x5}}], 0x2, 0x4000040)

[  142.601881][ T3656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.626568][ T3656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.656348][  T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  142.669249][  T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  142.677522][  T142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  142.686917][  T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
03:18:19 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1aa1, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x1012, r2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00002f7000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="1c0066420f2de4440f32672e26f2420f70090666b892008ed0362e36410f07660f3882a1040000000f00960d000000f3470fc25a00aac4c2f934555c", 0x3c}], 0x1, 0x11, &(0x7f0000000280)=[@dstype0={0x6, 0xc}], 0x1)
r4 = syz_clone(0x5200, 0x0, 0x8b, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
creat(0x0, 0x0)
write$binfmt_script(r5, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYBLOB="3ef5b624f3f6c3589d128e801783d05998f4b523c0845c25943a2d52d4e07e4383295515492a681da8589edb82b18474d180d0d31cbefc68130685ae6bdd426477c4860f5ce137342e0fbf7f2a2eb0ce4edbae37784e285afc8418f5cb33aeac567688eb867e296e9f8320e6d61ef65e9a5d20d348f1b704a4b6a62b2f81fa4562874d443cd5da0f0a30424d585d80b12b15088e"], 0xfecc)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8)
read$FUSE(r6, &(0x7f00000075c0)={0x2020}, 0x2020)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, r6, 0x0, 0x9, &(0x7f0000000040)='/dev/kvm\x00'}, 0x30)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
syz_clone(0x20000, &(0x7f0000000200)="d7fee776c7e6b86e85528bf4424451ce46017c9b2cf55e8a437cbc163b8b306e72fa79cb89492ae5b566", 0x2a, 0x0, &(0x7f0000000600), 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)

[  142.711565][ T3651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  142.728284][ T3651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.741362][ T3651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  142.747039][ T3700] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  142.770646][ T3651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.783090][ T3651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  142.796649][ T3651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.825105][ T3651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.837160][ T3655] device veth1_vlan entered promiscuous mode
[  142.861828][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  142.870290][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  142.879536][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  142.912539][ T3656] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.921882][ T3656] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.931041][ T3656] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.940081][ T3656] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.957069][ T3651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  142.968711][ T3651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.979783][ T3651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  142.991355][ T3651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.001893][ T3651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  143.012662][ T3651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.027793][ T3651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.039686][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  143.061405][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.071987][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  143.083190][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.093388][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  143.104477][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.114877][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  143.126593][ T3688] Bluetooth: hci0: command 0x0419 tx timeout
[  143.133305][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.146003][ T3652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.153606][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  143.162396][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  143.176398][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  143.188301][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  143.233979][ T3651] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.243185][ T3651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.254655][ T3651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.266029][ T3651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.293463][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  143.304935][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.316258][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  143.327905][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.339015][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  143.350338][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.360990][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  143.375958][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.388222][ T3652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.425872][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  143.435390][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  143.451938][ T3655] device veth0_macvtap entered promiscuous mode
[  143.455299][ T3690] Bluetooth: hci4: command 0x0419 tx timeout
[  143.462047][ T3652] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.472661][ T3690] Bluetooth: hci1: command 0x0419 tx timeout
[  143.474137][ T3652] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.481236][ T3690] Bluetooth: hci3: command 0x0419 tx timeout
[  143.496873][ T3690] Bluetooth: hci5: command 0x0419 tx timeout
[  143.499529][ T3652] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.503100][ T3690] Bluetooth: hci2: command 0x0419 tx timeout
[  143.518884][ T3652] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.547525][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.561132][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.568683][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  143.589359][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  143.601453][ T3655] device veth1_macvtap entered promiscuous mode
03:18:20 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

[  143.667405][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  143.685717][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  143.694566][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
03:18:20 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x80}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xb1}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x0, 0x98}, 0x38, &(0x7f00000000c0)={0x5, 0xf, 0x38, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x3, 0x7}, @generic={0xa, 0x10, 0x3, "f49555005f856d"}]}, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[  143.759680][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  143.777391][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.789101][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  143.804664][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.814968][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  143.828742][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.838983][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  143.850659][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.860813][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  143.871601][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.884912][ T3655] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.904833][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.912956][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.939107][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  143.951582][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  143.961404][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  143.971073][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  143.982589][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.996696][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  144.009416][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.024306][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  144.038132][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.048747][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  144.061500][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.072419][ T3655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  144.085186][ T3655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.097738][ T3655] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.105448][ T3684] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  144.125701][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  144.135434][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  144.155051][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.163236][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.163444][ T3655] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.185030][ T3655] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.193929][ T3655] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.202926][ T3655] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.219233][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  144.263252][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.272637][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.302102][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  144.361267][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.374448][ T3684] usb 1-1: Using ep0 maxpacket: 8
[  144.375441][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.409782][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  144.466311][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.516376][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.554952][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  144.595937][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.617187][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  144.627554][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
03:18:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4018aee1, &(0x7f0000000140)={0x1, 0x0, [{0x0, 0x0, 0xfffffffffffffffe}]})

03:18:21 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
chmod(&(0x7f0000000080)='./file0\x00', 0x86937d3a29001e2e)
chdir(&(0x7f0000000040)='./file0\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)

[  144.640645][ T3684] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  144.683610][    T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.694161][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  144.694510][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  144.717273][    T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.736220][ T3684] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  144.757374][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  144.774843][ T3684] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  144.867097][ T3684] usb 1-1: language id specifier not provided by device, defaulting to English
[  144.890840][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.921968][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.948038][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  144.973949][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.982709][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
03:18:21 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x5420)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x5423)

[  145.049172][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  145.064602][ T3684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  145.087501][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.102335][ T3684] usb 1-1: Product: syz
[  145.117647][ T3684] usb 1-1: Manufacturer: syz
[  145.123478][ T3684] usb 1-1: SerialNumber: syz
03:18:22 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000000c0)="f73fb2c1", 0x4}], 0x1}}], 0x1, 0x0)

03:18:22 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x21, 0x0, 0x10)

03:18:22 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @broadcast}})

03:18:22 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x5420)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x5423)

03:18:22 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010140}]})

03:18:22 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xf00, &(0x7f0000000500)=[{&(0x7f0000000000)="14000000340005877f7f33dea3686a85020235fc", 0x14}], 0x1}, 0x0)

03:18:22 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x5420)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x5423)

03:18:22 executing program 1:
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)

[  145.462066][ T3684] cdc_ether: probe of 1-1:1.0 failed with error -22
[  145.550874][ T3684] usb 1-1: USB disconnect, device number 2
03:18:22 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x80}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xb1}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x0, 0x98}, 0x38, &(0x7f00000000c0)={0x5, 0xf, 0x38, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x3, 0x7}, @generic={0xa, 0x10, 0x3, "f49555005f856d"}]}, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

03:18:22 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x8, 0x101002)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000100)={{0x0, 0x3, 0xfffffffe, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f00000000c0), 0x0, '\x00', [0x6, 0x0, 0x5c44, 0x400]})
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc)
ftruncate(r3, 0x200002)
sendfile(r2, r3, 0x0, 0x80001d00c0d0)

03:18:22 executing program 1:
r0 = io_uring_setup(0x4, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x16, &(0x7f0000000080), 0x300)

03:18:22 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x2, &(0x7f0000000040)={<r1=>0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000580)=0x9c)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r1}, 0x14)

03:18:22 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000080)=ANY=[])
syz_usb_disconnect(r1)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r1)

03:18:22 executing program 2:
getrusage(0x1, &(0x7f0000000080))

03:18:22 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="360f019907000000660f3a0a4bab0066ba410066ed0f01b5e80000008fc978c2a100000100660f38828b155cfc0366baf80cb868169385ef66bafc0ced2e660fc2da849a63a00d4c2b01b89b0634b40f23c00f21f83500000d000f23f8", 0x5d}], 0x1, 0x38, 0x0, 0xfffffffffffffded)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:18:22 executing program 2:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
inotify_init1(0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000080)={0x3f}, 0x0, 0x0, 0x0, 0x0)

03:18:22 executing program 1:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e)

03:18:22 executing program 2:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='n', @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)

03:18:22 executing program 1:
syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}}}}}, 0x0)

03:18:23 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="360f019907000000660f3a0a4bab0066ba410066ed0f01b5e80000008fc978c2a100000100660f38828b155cfc0366baf80cb868169385ef66bafc0ced2e660fc2da849a63a00d4c2b01b89b0634b40f23c00f21f83500000d000f23f8", 0x5d}], 0x1, 0x38, 0x0, 0xfffffffffffffded)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  146.274241][ T3689] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  146.305711][ T3684] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  146.534444][ T3689] usb 5-1: Using ep0 maxpacket: 32
[  146.594138][ T3684] usb 1-1: Using ep0 maxpacket: 8
[  146.654242][ T3689] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  146.675815][ T3689] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  146.724385][ T3689] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  146.733819][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  146.743962][ T3689] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  146.761175][ T3689] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  146.794168][ T3689] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  146.811268][ T3689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.824611][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  146.826952][ T3689] usb 5-1: config 0 descriptor??
[  146.839220][ T3684] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  146.864536][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  146.882451][ T3684] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  146.894598][ T3684] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  146.974497][ T3684] usb 1-1: language id specifier not provided by device, defaulting to English
[  147.114310][ T3684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  147.126444][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.134862][ T3689] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  147.139525][ T3689] usb 5-1: USB disconnect, device number 2
[  147.173809][ T3689] usblp0: removed
[  147.183826][ T3684] usb 1-1: Product: syz
[  147.198195][ T3684] usb 1-1: Manufacturer: syz
[  147.204740][ T3684] usb 1-1: SerialNumber: syz
[  147.514723][ T3684] cdc_ether: probe of 1-1:1.0 failed with error -22
[  147.533565][ T3684] usb 1-1: USB disconnect, device number 3
[  147.704391][ T3689] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  147.944152][ T3689] usb 5-1: Using ep0 maxpacket: 32
03:18:24 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x80}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xb1}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x0, 0x98}, 0x38, &(0x7f00000000c0)={0x5, 0xf, 0x38, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x3, 0x7}, @generic={0xa, 0x10, 0x3, "f49555005f856d"}]}, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

03:18:24 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="360f019907000000660f3a0a4bab0066ba410066ed0f01b5e80000008fc978c2a100000100660f38828b155cfc0366baf80cb868169385ef66bafc0ced2e660fc2da849a63a00d4c2b01b89b0634b40f23c00f21f83500000d000f23f8", 0x5d}], 0x1, 0x38, 0x0, 0xfffffffffffffded)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:18:24 executing program 1:
syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}}}}}, 0x0)

03:18:24 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x8, 0x101002)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000100)={{0x0, 0x3, 0xfffffffe, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f00000000c0), 0x0, '\x00', [0x6, 0x0, 0x5c44, 0x400]})
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc)
ftruncate(r3, 0x200002)
sendfile(r2, r3, 0x0, 0x80001d00c0d0)

[  148.064277][ T3689] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  148.072975][ T3689] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  148.211320][ T3689] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  148.253149][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  148.308322][ T3689] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  148.356837][ T3684] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  148.358646][ T3689] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  148.418319][ T3689] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  148.453314][ T3689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.498027][ T3689] usb 5-1: config 0 descriptor??
[  148.624104][ T3684] usb 1-1: Using ep0 maxpacket: 8
[  148.776748][ T3689] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  148.894430][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  148.932042][ T3684] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  148.968020][ T3684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  148.989286][ T3684] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  149.011353][ T3684] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  149.082248][ T3684] usb 1-1: language id specifier not provided by device, defaulting to English
[  149.224400][ T3684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  149.233539][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.251846][ T3684] usb 1-1: Product: syz
[  149.256890][ T3684] usb 1-1: Manufacturer: syz
[  149.261679][ T3684] usb 1-1: SerialNumber: syz
[  149.340733][  T142] usb 5-1: USB disconnect, device number 3
[  149.512993][ T3796] usblp0: removed
[  149.585304][ T3684] cdc_ether: probe of 1-1:1.0 failed with error -22
[  149.597031][ T3684] usb 1-1: USB disconnect, device number 4
03:18:27 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000080)=ANY=[])
syz_usb_disconnect(r1)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r1)

03:18:27 executing program 2:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='n', @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)

03:18:27 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="360f019907000000660f3a0a4bab0066ba410066ed0f01b5e80000008fc978c2a100000100660f38828b155cfc0366baf80cb868169385ef66bafc0ced2e660fc2da849a63a00d4c2b01b89b0634b40f23c00f21f83500000d000f23f8", 0x5d}], 0x1, 0x38, 0x0, 0xfffffffffffffded)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:18:27 executing program 1:
syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}}}}}, 0x0)

03:18:27 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x8, 0x101002)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000100)={{0x0, 0x3, 0xfffffffe, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f00000000c0), 0x0, '\x00', [0x6, 0x0, 0x5c44, 0x400]})
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc)
ftruncate(r3, 0x200002)
sendfile(r2, r3, 0x0, 0x80001d00c0d0)

03:18:27 executing program 0:
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x40, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x80}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xb1}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x0, 0x98}, 0x38, &(0x7f00000000c0)={0x5, 0xf, 0x38, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x3, 0x7}, @generic={0xa, 0x10, 0x3, "f49555005f856d"}]}, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

03:18:27 executing program 1:
syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}}}}}, 0x0)

03:18:27 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000080)=ANY=[])
syz_usb_disconnect(r1)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r1)

[  150.534661][   T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd
03:18:27 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x8, 0x101002)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000100)={{0x0, 0x3, 0xfffffffe, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f00000000c0), 0x0, '\x00', [0x6, 0x0, 0x5c44, 0x400]})
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc)
ftruncate(r3, 0x200002)
sendfile(r2, r3, 0x0, 0x80001d00c0d0)

03:18:27 executing program 5:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='n', @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)

[  150.624204][  T142] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  150.664401][ T3684] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  150.784100][   T22] usb 1-1: Using ep0 maxpacket: 8
[  150.864142][  T142] usb 5-1: Using ep0 maxpacket: 32
[  150.924172][ T3684] usb 2-1: Using ep0 maxpacket: 32
[  150.985674][  T142] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  151.001067][  T142] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  151.014370][   T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  151.027554][   T22] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  151.038129][   T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  151.045411][ T3684] usb 2-1: config index 0 descriptor too short (expected 63524, got 36)
[  151.070209][   T22] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  151.071183][  T142] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  151.090334][ T3684] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  151.122427][ T3684] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  151.134482][   T22] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  151.150908][  T142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  151.164147][ T3684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  151.183936][  T142] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  151.194546][ T3684] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  151.204466][  T142] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  151.220477][ T3684] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  151.233734][  T142] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  151.242991][ T3684] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  151.244348][   T22] usb 1-1: language id specifier not provided by device, defaulting to English
[  151.252249][  T142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.269275][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.292719][ T3684] usb 2-1: config 0 descriptor??
[  151.352511][  T142] usb 5-1: config 0 descriptor??
03:18:28 executing program 2:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='n', @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)

[  151.445969][   T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  151.473003][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.513067][   T22] usb 1-1: Product: syz
[  151.558171][   T22] usb 1-1: Manufacturer: syz
[  151.565954][ T3684] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  151.595103][   T22] usb 1-1: SerialNumber: syz
[  151.618848][ T3684] usb 2-1: USB disconnect, device number 2
[  151.656373][  T142] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  151.699381][ T3684] usblp0: removed
[  151.728129][  T142] usb 5-1: USB disconnect, device number 4
[  151.772629][  T142] usblp1: removed
03:18:28 executing program 3:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='n', @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)

[  151.985036][   T22] cdc_ether: probe of 1-1:1.0 failed with error -22
[  152.009440][   T22] usb 1-1: USB disconnect, device number 5
[  152.214264][ T3684] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  152.274303][  T142] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  152.464112][ T3684] usb 2-1: Using ep0 maxpacket: 32
[  152.527863][  T142] usb 5-1: Using ep0 maxpacket: 32
[  152.588276][ T3684] usb 2-1: config index 0 descriptor too short (expected 63524, got 36)
[  152.603691][ T3684] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  152.630340][ T3684] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  152.644445][  T142] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  152.657096][  T142] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  152.667752][ T3684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  152.677650][  T142] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  152.686732][ T3684] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  152.704172][  T142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  152.717569][ T3684] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  152.734258][  T142] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  152.753664][ T3684] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  152.763642][  T142] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  152.784929][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.796529][  T142] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  152.814380][ T3684] usb 2-1: config 0 descriptor??
[  152.819516][  T142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.840184][  T142] usb 5-1: config 0 descriptor??
[  153.091762][ T3684] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  153.125275][  T142] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  153.658094][  T142] usb 2-1: USB disconnect, device number 3
[  153.842670][ T3836] usblp0: removed
03:18:31 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000080)=ANY=[])
syz_usb_disconnect(r1)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r1)

03:18:31 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x8, 0x101002)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000100)={{0x0, 0x3, 0xfffffffe, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f00000000c0), 0x0, '\x00', [0x6, 0x0, 0x5c44, 0x400]})
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc)
ftruncate(r3, 0x200002)
sendfile(r2, r3, 0x0, 0x80001d00c0d0)

03:18:31 executing program 5:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='n', @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)

03:18:31 executing program 2:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='n', @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)

03:18:31 executing program 3:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='n', @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)

03:18:31 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000080)=ANY=[])
syz_usb_disconnect(r1)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r1)

[  155.117208][  T142] usb 5-1: USB disconnect, device number 5
[  155.182919][  T142] usblp1: removed
[  155.454263][ T3681] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  155.614202][  T142] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  155.704094][ T3681] usb 2-1: Using ep0 maxpacket: 32
[  155.828359][ T3681] usb 2-1: config index 0 descriptor too short (expected 63524, got 36)
[  155.843795][ T3681] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  155.864160][  T142] usb 5-1: Using ep0 maxpacket: 32
[  155.881994][ T3681] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  155.916938][ T3681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  155.970702][ T3681] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  155.984470][  T142] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  156.005336][ T3681] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  156.014709][  T142] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  156.042566][ T3681] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  156.054250][ T3681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.075473][ T3681] usb 2-1: config 0 descriptor??
[  156.106299][  T142] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  156.141992][  T142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
03:18:33 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x8, 0x101002)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000100)={{0x0, 0x3, 0xfffffffe, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f00000000c0), 0x0, '\x00', [0x6, 0x0, 0x5c44, 0x400]})
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc)
ftruncate(r3, 0x200002)
sendfile(r2, r3, 0x0, 0x80001d00c0d0)

[  156.175893][  T142] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  156.200116][  T142] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  156.231086][  T142] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  156.243101][  T142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.262144][  T142] usb 5-1: config 0 descriptor??
[  156.345951][ T3681] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  156.413740][ T3681] usb 2-1: USB disconnect, device number 4
[  156.465554][ T3681] usblp0: removed
[  156.557546][  T142] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  156.627361][  T142] usb 5-1: USB disconnect, device number 6
[  156.682302][  T142] usblp0: removed
03:18:33 executing program 3:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='n', @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)

03:18:33 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x8, 0x101002)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000100)={{0x0, 0x3, 0xfffffffe, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f00000000c0), 0x0, '\x00', [0x6, 0x0, 0x5c44, 0x400]})
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc)
ftruncate(r3, 0x200002)
sendfile(r2, r3, 0x0, 0x80001d00c0d0)

[  157.004144][ T3681] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  157.174381][  T142] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  157.265512][ T3681] usb 2-1: Using ep0 maxpacket: 32
03:18:34 executing program 5:
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='n', @ANYRES32=<r1=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8)

[  157.414305][ T3681] usb 2-1: config index 0 descriptor too short (expected 63524, got 36)
[  157.424147][  T142] usb 5-1: Using ep0 maxpacket: 32
[  157.431551][ T3681] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  157.490867][ T3681] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  157.544358][  T142] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  157.559266][ T3681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  157.562301][  T142] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  157.610458][  T142] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  157.624265][  T142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  157.634560][  T142] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  157.638044][ T3681] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  157.644742][  T142] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  157.713041][ T3681] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  157.751989][ T3681] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
03:18:34 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x8, 0x101002)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000100)={{0x0, 0x3, 0xfffffffe, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f00000000c0), 0x0, '\x00', [0x6, 0x0, 0x5c44, 0x400]})
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc)
ftruncate(r3, 0x200002)
sendfile(r2, r3, 0x0, 0x80001d00c0d0)

[  157.779946][ T3681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.821176][  T142] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  157.840123][  T142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.846791][ T3681] usb 2-1: config 0 descriptor??
[  157.870699][  T142] usb 5-1: config 0 descriptor??
[  158.127911][ T3681] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  158.174848][  T142] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
03:18:35 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x8, 0x101002)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000100)={{0x0, 0x3, 0xfffffffe, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f00000000c0), 0x0, '\x00', [0x6, 0x0, 0x5c44, 0x400]})
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc)
ftruncate(r3, 0x200002)
sendfile(r2, r3, 0x0, 0x80001d00c0d0)

[  158.687371][  T142] usb 2-1: USB disconnect, device number 5
[  158.879833][ T3874] usblp0: removed
03:18:36 executing program 4:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000080)=ANY=[])
syz_usb_disconnect(r1)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r1)

03:18:36 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="360f019907000000660f3a0a4bab0066ba410066ed0f01b5e80000008fc978c2a100000100660f38828b155cfc0366baf80cb868169385ef66bafc0ced2e660fc2da849a63a00d4c2b01b89b0634b40f23c00f21f83500000d000f23f8", 0x5d}], 0x1, 0x38, 0x0, 0xfffffffffffffded)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:18:36 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="360f019907000000660f3a0a4bab0066ba410066ed0f01b5e80000008fc978c2a100000100660f38828b155cfc0366baf80cb868169385ef66bafc0ced2e660fc2da849a63a00d4c2b01b89b0634b40f23c00f21f83500000d000f23f8", 0x5d}], 0x1, 0x38, 0x0, 0xfffffffffffffded)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:18:36 executing program 0:
fsopen(&(0x7f00000002c0)='pipefs\x00', 0x0)

03:18:36 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x8, 0x101002)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000100)={{0x0, 0x3, 0xfffffffe, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f00000000c0), 0x0, '\x00', [0x6, 0x0, 0x5c44, 0x400]})
r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc)
ftruncate(r3, 0x200002)
sendfile(r2, r3, 0x0, 0x80001d00c0d0)

03:18:36 executing program 1:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020f003176c400000000001090224f80000000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x95, &(0x7f0000000080)=ANY=[])
syz_usb_disconnect(r1)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r1)

03:18:37 executing program 0:
add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000040)="89", 0x1, 0xffffffffffffffff)

[  160.176836][   T14] usb 5-1: USB disconnect, device number 7
[  160.215782][   T14] usblp1: removed
03:18:37 executing program 0:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0x3, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x8, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x950e2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="976e254a90ff67ed08128100f27e447697d6054645697fd63839a20f06f1aba5ff39119e4cff90969bde6f90e0fff4e65842fc81c96aad99873e7b1c544a0d80d1499a8849e054e3f840c2ec29b6f0138bf005c0fa4e7af6cc5d17b14f0e1d10f9c1ae6d571a541d3c15717602", 0x0, 0x10001, 0x0, 0xa4015c388a4fb51c, r2}])

03:18:37 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="360f019907000000660f3a0a4bab0066ba410066ed0f01b5e80000008fc978c2a100000100660f38828b155cfc0366baf80cb868169385ef66bafc0ced2e660fc2da849a63a00d4c2b01b89b0634b40f23c00f21f83500000d000f23f8", 0x5d}], 0x1, 0x38, 0x0, 0xfffffffffffffded)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:18:37 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="360f019907000000660f3a0a4bab0066ba410066ed0f01b5e80000008fc978c2a100000100660f38828b155cfc0366baf80cb868169385ef66bafc0ced2e660fc2da849a63a00d4c2b01b89b0634b40f23c00f21f83500000d000f23f8", 0x5d}], 0x1, 0x38, 0x0, 0xfffffffffffffded)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  160.490842][   T27] audit: type=1804 audit(1657595917.255:2): pid=3901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/15/file0/bus" dev="ramfs" ino=33274 res=1 errno=0
[  160.513410][  T142] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  160.606391][   T27] audit: type=1804 audit(1657595917.295:3): pid=3900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/15/file0/bus" dev="ramfs" ino=33274 res=1 errno=0
[  160.694394][   T14] usb 5-1: new high-speed USB device number 8 using dummy_hcd
03:18:37 executing program 0:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0x3, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x8, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x950e2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="976e254a90ff67ed08128100f27e447697d6054645697fd63839a20f06f1aba5ff39119e4cff90969bde6f90e0fff4e65842fc81c96aad99873e7b1c544a0d80d1499a8849e054e3f840c2ec29b6f0138bf005c0fa4e7af6cc5d17b14f0e1d10f9c1ae6d571a541d3c15717602", 0x0, 0x10001, 0x0, 0xa4015c388a4fb51c, r2}])

[  160.764254][  T142] usb 2-1: Using ep0 maxpacket: 32
03:18:37 executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="360f019907000000660f3a0a4bab0066ba410066ed0f01b5e80000008fc978c2a100000100660f38828b155cfc0366baf80cb868169385ef66bafc0ced2e660fc2da849a63a00d4c2b01b89b0634b40f23c00f21f83500000d000f23f8", 0x5d}], 0x1, 0x38, 0x0, 0xfffffffffffffded)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  160.884502][  T142] usb 2-1: config index 0 descriptor too short (expected 63524, got 36)
[  160.900847][  T142] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  160.934181][   T14] usb 5-1: Using ep0 maxpacket: 32
[  160.958256][  T142] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  160.967909][   T27] audit: type=1804 audit(1657595917.735:4): pid=3914 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/16/file0/bus" dev="ramfs" ino=33351 res=1 errno=0
[  161.004834][  T142] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  161.031504][   T27] audit: type=1804 audit(1657595917.765:5): pid=3914 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/16/file0/bus" dev="ramfs" ino=33351 res=1 errno=0
[  161.040541][  T142] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  161.064857][   T14] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  161.085134][   T14] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  161.106939][   T14] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  161.126723][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  161.143117][  T142] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  161.170668][   T14] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  161.184223][  T142] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  161.193425][   T14] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  161.206986][  T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.216840][   T14] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  161.247112][  T142] usb 2-1: config 0 descriptor??
[  161.262919][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.308566][   T14] usb 5-1: config 0 descriptor??
[  161.525582][  T142] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  161.578385][   T14] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  161.594454][  T142] usb 2-1: USB disconnect, device number 6
[  161.605473][  T142] usblp0: removed
[  161.619508][   T14] usb 5-1: USB disconnect, device number 8
[  161.631824][   T14] usblp1: removed
[  162.074969][  T142] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  162.144120][   T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  162.314222][  T142] usb 2-1: Using ep0 maxpacket: 32
[  162.384088][   T14] usb 5-1: Using ep0 maxpacket: 32
[  162.434149][  T142] usb 2-1: config index 0 descriptor too short (expected 63524, got 36)
[  162.442564][  T142] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  162.465114][  T142] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  162.484322][  T142] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  162.504350][   T14] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  162.512742][   T14] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  162.520975][  T142] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  162.531482][  T142] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  162.544551][   T14] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  162.553470][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  162.563242][  T142] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  162.572484][   T14] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  162.582401][  T142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.591339][   T14] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  162.613171][  T142] usb 2-1: config 0 descriptor??
[  162.618957][   T14] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  162.628102][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.656391][   T14] usb 5-1: config 0 descriptor??
[  162.875996][  T142] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  162.918682][   T14] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  163.434910][ T3681] usb 2-1: USB disconnect, device number 7
[  163.623049][ T3917] usblp0: removed
03:18:41 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1}, 0x0)
sendmsg$alg(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='y', 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001700)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
recvmmsg$unix(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)=""/195, 0xc3}], 0x1}}], 0x1, 0x0, 0x0)

03:18:41 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="360f019907000000660f3a0a4bab0066ba410066ed0f01b5e80000008fc978c2a100000100660f38828b155cfc0366baf80cb868169385ef66bafc0ced2e660fc2da849a63a00d4c2b01b89b0634b40f23c00f21f83500000d000f23f8", 0x5d}], 0x1, 0x38, 0x0, 0xfffffffffffffded)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:18:41 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "1241eab5fa001cbcb62d7f7100"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c0000000000000100"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000440)={0x0, 0x0, 0x7, 0x3, 0x0, "fd9e546bdd68528e94ca6d0044062eaa56db03"})
syz_fuse_handle_req(r2, &(0x7f0000004400)="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", 0x2000, &(0x7f0000008fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r2, &(0x7f0000006a40)={0x2020}, 0x2020)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

03:18:41 executing program 0:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0x3, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x8, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x950e2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="976e254a90ff67ed08128100f27e447697d6054645697fd63839a20f06f1aba5ff39119e4cff90969bde6f90e0fff4e65842fc81c96aad99873e7b1c544a0d80d1499a8849e054e3f840c2ec29b6f0138bf005c0fa4e7af6cc5d17b14f0e1d10f9c1ae6d571a541d3c15717602", 0x0, 0x10001, 0x0, 0xa4015c388a4fb51c, r2}])

03:18:41 executing program 3:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x401, 0x8, 0x81})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff})
r3 = dup(r1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x8, 0xd8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x7c})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x2, 0x1, 0x80000001})
r4 = fcntl$dupfd(r2, 0x0, r2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0xf31, 0x81, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1})
close_range(r0, 0xffffffffffffffff, 0x0)

[  164.890275][   T14] usb 5-1: USB disconnect, device number 9
[  164.898400][   T14] usblp1: removed
[  164.953094][   T27] audit: type=1804 audit(1657595921.715:6): pid=3924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/17/file0/bus" dev="ramfs" ino=32693 res=1 errno=0
03:18:41 executing program 4:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000050cb5320450c10108e49010203010902"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f00000000c0)='9', 0x1)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000d40)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
write$char_usb(r1, 0x0, 0x0)

[  165.013736][   T27] audit: type=1804 audit(1657595921.715:7): pid=3924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/17/file0/bus" dev="ramfs" ino=32693 res=1 errno=0
03:18:41 executing program 0:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
io_setup(0x3, &(0x7f0000000180)=<r3=>0x0)
io_submit(r3, 0x8, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x950e2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="976e254a90ff67ed08128100f27e447697d6054645697fd63839a20f06f1aba5ff39119e4cff90969bde6f90e0fff4e65842fc81c96aad99873e7b1c544a0d80d1499a8849e054e3f840c2ec29b6f0138bf005c0fa4e7af6cc5d17b14f0e1d10f9c1ae6d571a541d3c15717602", 0x0, 0x10001, 0x0, 0xa4015c388a4fb51c, r2}])

03:18:41 executing program 3:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x401, 0x8, 0x81})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff})
r3 = dup(r1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x8, 0xd8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x7c})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x2, 0x1, 0x80000001})
r4 = fcntl$dupfd(r2, 0x0, r2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0xf31, 0x81, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1})
close_range(r0, 0xffffffffffffffff, 0x0)

03:18:41 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9)
sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0)

03:18:42 executing program 5:
mmap(&(0x7f0000c62000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x3eda, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
readv(r0, &(0x7f0000000240)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1)

[  165.238518][ T3939] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  165.265279][   T27] audit: type=1804 audit(1657595922.035:8): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/18/file0/bus" dev="ramfs" ino=32746 res=1 errno=0
03:18:42 executing program 5:
mmap(&(0x7f0000c62000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x3eda, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
readv(r0, &(0x7f0000000240)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1)

[  165.340384][   T27] audit: type=1804 audit(1657595922.065:9): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/newroot/18/file0/bus" dev="ramfs" ino=32746 res=1 errno=0
[  165.361853][    C1] vkms_vblank_simulate: vblank timer overrun
03:18:42 executing program 3:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x401, 0x8, 0x81})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff})
r3 = dup(r1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x8, 0xd8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x7c})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x2, 0x1, 0x80000001})
r4 = fcntl$dupfd(r2, 0x0, r2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0xf31, 0x81, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1})
close_range(r0, 0xffffffffffffffff, 0x0)

03:18:42 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1}, 0x0)
sendmsg$alg(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='y', 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001700)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
recvmmsg$unix(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)=""/195, 0xc3}], 0x1}}], 0x1, 0x0, 0x0)

03:18:42 executing program 5:
mmap(&(0x7f0000c62000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x3eda, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
readv(r0, &(0x7f0000000240)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1)

03:18:42 executing program 0:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1}, 0x0)
sendmsg$alg(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='y', 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001700)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
recvmmsg$unix(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)=""/195, 0xc3}], 0x1}}], 0x1, 0x0, 0x0)

[  165.464328][   T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd
03:18:42 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000240)=ANY=[], 0x20)
unlink(0x0)
sendfile(r4, r4, &(0x7f00000001c0), 0xa198)
open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x89800)
r5 = getpid()
sched_setaffinity(r5, 0x8, &(0x7f00000000c0)=0x5)

03:18:42 executing program 5:
mmap(&(0x7f0000c62000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x3eda, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
readv(r0, &(0x7f0000000240)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1)

[  165.734149][   T14] usb 5-1: Using ep0 maxpacket: 32
[  165.854414][   T14] usb 5-1: config 0 has no interfaces?
[  166.014364][   T14] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  166.023475][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.044724][   T14] usb 5-1: Product: syz
[  166.049067][   T14] usb 5-1: Manufacturer: syz
[  166.053788][   T14] usb 5-1: SerialNumber: syz
[  166.071289][   T14] usb 5-1: config 0 descriptor??
03:18:44 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000240)=ANY=[], 0x20)
unlink(0x0)
sendfile(r4, r4, &(0x7f00000001c0), 0xa198)
open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x89800)
r5 = getpid()
sched_setaffinity(r5, 0x8, &(0x7f00000000c0)=0x5)

03:18:44 executing program 3:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x401, 0x8, 0x81})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff})
r3 = dup(r1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x8, 0xd8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x7c})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x2, 0x1, 0x80000001})
r4 = fcntl$dupfd(r2, 0x0, r2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0xf31, 0x81, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x1})
close_range(r0, 0xffffffffffffffff, 0x0)

03:18:44 executing program 5:
futex(&(0x7f0000000040)=0x1, 0x8, 0x0, 0x0, 0x0, 0x0)

03:18:44 executing program 0:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1}, 0x0)
sendmsg$alg(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='y', 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001700)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
recvmmsg$unix(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)=""/195, 0xc3}], 0x1}}], 0x1, 0x0, 0x0)

03:18:44 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000240)=ANY=[], 0x20)
unlink(0x0)
sendfile(r4, r4, &(0x7f00000001c0), 0xa198)
open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x89800)
r5 = getpid()
sched_setaffinity(r5, 0x8, &(0x7f00000000c0)=0x5)

03:18:44 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1}, 0x0)
sendmsg$alg(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='y', 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001700)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
recvmmsg$unix(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)=""/195, 0xc3}], 0x1}}], 0x1, 0x0, 0x0)

[  168.069289][ T3689] usb 5-1: USB disconnect, device number 10
03:18:44 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0x1e8, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)

[  168.224933][ T3986] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
03:18:45 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc}}}}, 0x28}}, 0x0)

03:18:45 executing program 3:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0xcb4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc}]}}]}, 0xb0}}, 0x0)

03:18:45 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc}}}}, 0x28}}, 0x0)

03:18:45 executing program 3:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"})
syz_open_pts(r1, 0x0)
syz_open_dev$video(&(0x7f00000066c0), 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200), 0x0)

03:18:45 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc}}}}, 0x28}}, 0x0)

03:18:46 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000240)=ANY=[], 0x20)
unlink(0x0)
sendfile(r4, r4, &(0x7f00000001c0), 0xa198)
open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x89800)
r5 = getpid()
sched_setaffinity(r5, 0x8, &(0x7f00000000c0)=0x5)

03:18:46 executing program 3:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"})
syz_open_pts(r1, 0x0)
syz_open_dev$video(&(0x7f00000066c0), 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200), 0x0)

03:18:46 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc}}}}, 0x28}}, 0x0)

03:18:46 executing program 0:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1}, 0x0)
sendmsg$alg(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='y', 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001700)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
recvmmsg$unix(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)=""/195, 0xc3}], 0x1}}], 0x1, 0x0, 0x0)

03:18:46 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1}, 0x0)
sendmsg$alg(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='y', 0x1}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001700)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
recvmmsg$unix(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)=""/195, 0xc3}], 0x1}}], 0x1, 0x0, 0x0)

03:18:46 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000240)=ANY=[], 0x20)
unlink(0x0)
sendfile(r4, r4, &(0x7f00000001c0), 0xa198)
open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x89800)
r5 = getpid()
sched_setaffinity(r5, 0x8, &(0x7f00000000c0)=0x5)

03:18:46 executing program 3:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"})
syz_open_pts(r1, 0x0)
syz_open_dev$video(&(0x7f00000066c0), 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200), 0x0)

03:18:46 executing program 5:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000005180)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)

03:18:46 executing program 5:
r0 = gettid()
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfb]}, 0x8, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
read$FUSE(r1, &(0x7f0000001600)={0x2020}, 0x202c)
tkill(r0, 0x7)

03:18:46 executing program 3:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000000000000000001d00"})
syz_open_pts(r1, 0x0)
syz_open_dev$video(&(0x7f00000066c0), 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200), 0x0)

03:18:46 executing program 5:
r0 = gettid()
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfb]}, 0x8, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
read$FUSE(r1, &(0x7f0000001600)={0x2020}, 0x202c)
tkill(r0, 0x7)

03:18:46 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180), 0x4)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)

03:18:48 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000240)=ANY=[], 0x20)
unlink(0x0)
sendfile(r4, r4, &(0x7f00000001c0), 0xa198)
open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x89800)
r5 = getpid()
sched_setaffinity(r5, 0x8, &(0x7f00000000c0)=0x5)

03:18:48 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone(0x4a108000, 0x0, 0xf0ff1f00000000, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000080))

03:18:48 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000800200000000000000010000d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00', r0}, 0x10)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cgroup.max.descendants\x00', 0x2, 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000340), 0x440000, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, r2, 0x22}, 0x10)
dup(r1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, r2, 0x21}, 0x10)
r3 = socket(0x11, 0x2, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x400001, 0x8a)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)})
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x6c, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_IKEY={0x8, 0x4, 0x1f}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x9}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x6c}}, 0x0)

03:18:48 executing program 5:
r0 = gettid()
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfb]}, 0x8, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
read$FUSE(r1, &(0x7f0000001600)={0x2020}, 0x202c)
tkill(r0, 0x7)

03:18:48 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc0189436, &(0x7f00000001c0))

03:18:48 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e)
r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
write$P9_RGETLOCK(r4, &(0x7f0000000240)=ANY=[], 0x20)
unlink(0x0)
sendfile(r4, r4, &(0x7f00000001c0), 0xa198)
open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x89800)
r5 = getpid()
sched_setaffinity(r5, 0x8, &(0x7f00000000c0)=0x5)

03:18:48 executing program 3:
socket$inet(0x2, 0x5, 0x6)

03:18:48 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xfe, 0xe9, 0x8, 0xfe6, 0x9800, 0x195d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xeb, 0x14}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

03:18:48 executing program 5:
r0 = gettid()
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfb]}, 0x8, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
read$FUSE(r1, &(0x7f0000001600)={0x2020}, 0x202c)
tkill(r0, 0x7)

03:18:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010003904000000000000000001010000", @ANYRES32=r2, @ANYBLOB="0b00000000000000140012800b000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r7=>0x0})
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r7, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="bb44072ebb"], 0x20000600}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0)

[  172.086575][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
03:18:48 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

03:18:48 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone(0x4a108000, 0x0, 0xf0ff1f00000000, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000080))

[  172.223496][ T4076] binder: 4075:4076 ioctl c0306201 0 returned -14
[  172.237030][   T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  172.534290][   T14] usb 1-1: Using ep0 maxpacket: 8
[  172.674276][   T14] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[  172.690527][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.721444][   T14] usb 1-1: config 0 descriptor??
[  173.215653][   T14] CoreChips: probe of 1-1:0.0 failed with error -71
[  173.251407][   T14] usb 1-1: USB disconnect, device number 6
03:18:50 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone(0x4a108000, 0x0, 0xf0ff1f00000000, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000080))

03:18:50 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010003904000000000000000001010000", @ANYRES32=r2, @ANYBLOB="0b00000000000000140012800b000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r7=>0x0})
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r7, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="bb44072ebb"], 0x20000600}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0)

03:18:50 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone(0x4a108000, 0x0, 0xf0ff1f00000000, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000080))

03:18:50 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_aout(r3, 0x0, 0x1)
splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x2000000001e, 0x0)
vmsplice(r3, &(0x7f00000002c0)=[{&(0x7f0000000240)="e1", 0x1}], 0x1, 0x0)
write$binfmt_elf64(r1, 0x0, 0x0)

03:18:50 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xfe, 0xe9, 0x8, 0xfe6, 0x9800, 0x195d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xeb, 0x14}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[  173.748570][ T4087] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  174.097293][   T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  174.384131][   T14] usb 1-1: Using ep0 maxpacket: 8
[  174.514305][   T14] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[  174.544149][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.589162][   T14] usb 1-1: config 0 descriptor??
03:18:51 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone(0x4a108000, 0x0, 0xf0ff1f00000000, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000080))

03:18:51 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_aout(r3, 0x0, 0x1)
splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x2000000001e, 0x0)
vmsplice(r3, &(0x7f00000002c0)=[{&(0x7f0000000240)="e1", 0x1}], 0x1, 0x0)
write$binfmt_elf64(r1, 0x0, 0x0)

03:18:51 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010003904000000000000000001010000", @ANYRES32=r2, @ANYBLOB="0b00000000000000140012800b000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r7=>0x0})
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r7, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="bb44072ebb"], 0x20000600}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0)

03:18:51 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_S_PARM(r0, 0xc0d05604, &(0x7f0000000180)={0x3, @output})

[  175.075273][ T4111] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  175.094267][   T14] CoreChips: probe of 1-1:0.0 failed with error -71
[  175.128601][   T14] usb 1-1: USB disconnect, device number 7
03:18:52 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_aout(r3, 0x0, 0x1)
splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x2000000001e, 0x0)
vmsplice(r3, &(0x7f00000002c0)=[{&(0x7f0000000240)="e1", 0x1}], 0x1, 0x0)
write$binfmt_elf64(r1, 0x0, 0x0)

03:18:52 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, 0xe)

03:18:52 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, 0xe)

03:18:52 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone(0x4a108000, 0x0, 0xf0ff1f00000000, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000080))

03:18:52 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010003904000000000000000001010000", @ANYRES32=r2, @ANYBLOB="0b00000000000000140012800b000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r7=>0x0})
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r7, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe63dfc0d1629edc3ff3fc", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="bb44072ebb"], 0x20000600}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0)

03:18:52 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_aout(r3, 0x0, 0x1)
splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x2000000001e, 0x0)
vmsplice(r3, &(0x7f00000002c0)=[{&(0x7f0000000240)="e1", 0x1}], 0x1, 0x0)
write$binfmt_elf64(r1, 0x0, 0x0)

03:18:52 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, 0xe)

03:18:52 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4b, 0xfe, 0xe9, 0x8, 0xfe6, 0x9800, 0x195d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2c, 0xeb, 0x14}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

03:18:52 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="360f019907000000660f3a0a4bab0066ba410066ed0f01b5e80000008fc978c2a100000100660f38828b155cfc0366baf80cb868169385ef66bafc0ced2e660fc2da849a63a00d4c2b01b89b0634b40f23c00f21f83500000d000f23f8", 0x5d}], 0x1, 0x38, 0x0, 0xfffffffffffffded)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:18:52 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, 0xe)

[  176.191439][ T4138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
03:18:53 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}, @RTA_GATEWAY={0x8, 0x4, @multicast2=0xc000180}]}, 0x38}}, 0x0)

03:18:53 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x19)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0)
read$watch_queue(r0, &(0x7f0000000080)=""/14, 0xe)

03:18:53 executing program 4:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2000000000000006, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000380)={0x1, 0x6}, 0x2)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000), 0x2)

03:18:53 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x19)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0)
read$watch_queue(r0, &(0x7f0000000080)=""/14, 0xe)

[  176.454686][ T3689] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  176.535230][ T4163] misc userio: Can't change port type on an already running userio instance
03:18:53 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x19)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0)
read$watch_queue(r0, &(0x7f0000000080)=""/14, 0xe)

[  176.704254][ T3689] usb 1-1: Using ep0 maxpacket: 8
[  176.824427][ T3689] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=19.5d
[  176.833584][ T3689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.843760][ T3689] usb 1-1: config 0 descriptor??
03:18:53 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone(0x4a108000, 0x0, 0xf0ff1f00000000, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000080))

03:18:53 executing program 5:
pipe2$watch_queue(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x19)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0)
read$watch_queue(r0, &(0x7f0000000080)=""/14, 0xe)

03:18:53 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x19)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0)
read$watch_queue(r0, &(0x7f0000000080)=""/14, 0xe)

03:18:53 executing program 2:
pipe2$watch_queue(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x19)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0)
read$watch_queue(r0, &(0x7f0000000080)=""/14, 0xe)

[  177.117657][  T142] ==================================================================
[  177.125758][  T142] BUG: KASAN: use-after-free in kill_fasync+0x45e/0x470
[  177.132716][  T142] Read of size 8 at addr ffff88807d1e5568 by task kworker/0:2/142
[  177.140540][  T142] 
[  177.142890][  T142] CPU: 0 PID: 142 Comm: kworker/0:2 Not tainted 5.19.0-rc6-syzkaller-00026-g5a29232d870d #0
[  177.152975][  T142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[  177.163051][  T142] Workqueue: events key_garbage_collector
[  177.168809][  T142] Call Trace:
[  177.172104][  T142]  <TASK>
[  177.175050][  T142]  dump_stack_lvl+0xcd/0x134
[  177.179678][  T142]  print_address_description.constprop.0.cold+0xeb/0x495
[  177.186744][  T142]  ? kill_fasync+0x45e/0x470
[  177.191359][  T142]  kasan_report.cold+0xf4/0x1c6
[  177.196236][  T142]  ? kill_fasync+0x45e/0x470
[  177.201026][  T142]  kill_fasync+0x45e/0x470
[  177.205472][  T142]  post_one_notification.isra.0+0x6e4/0x990
[  177.211396][  T142]  remove_watch_from_object+0x35a/0x9d0
[  177.216969][  T142]  ? __post_watch_notification+0x840/0x840
[  177.222800][  T142]  ? do_raw_spin_lock+0x120/0x2a0
[  177.228022][  T142]  key_gc_unused_keys.constprop.0+0x2e5/0x600
[  177.234121][  T142]  key_garbage_collector+0x3d7/0x920
[  177.239434][  T142]  process_one_work+0x996/0x1610
[  177.244402][  T142]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[  177.249800][  T142]  ? rwlock_bug.part.0+0x90/0x90
[  177.254758][  T142]  ? _raw_spin_lock_irq+0x41/0x50
[  177.259808][  T142]  worker_thread+0x665/0x1080
[  177.264512][  T142]  ? __kthread_parkme+0x15f/0x220
[  177.269572][  T142]  ? process_one_work+0x1610/0x1610
[  177.274786][  T142]  kthread+0x2e9/0x3a0
[  177.278869][  T142]  ? kthread_complete_and_exit+0x40/0x40
[  177.284516][  T142]  ret_from_fork+0x1f/0x30
[  177.288960][  T142]  </TASK>
[  177.291971][  T142] 
[  177.294283][  T142] Allocated by task 4173:
[  177.298600][  T142]  kasan_save_stack+0x1e/0x40
[  177.303283][  T142]  __kasan_kmalloc+0xa9/0xd0
[  177.307870][  T142]  alloc_pipe_info+0x105/0x590
[  177.312633][  T142]  create_pipe_files+0x8d/0x880
[  177.317494][  T142]  do_pipe2+0x96/0x1b0
[  177.321562][  T142]  __x64_sys_pipe2+0x50/0x70
[  177.326153][  T142]  do_syscall_64+0x35/0xb0
[  177.330614][  T142]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  177.336530][  T142] 
[  177.339167][  T142] Freed by task 4171:
[  177.343514][  T142]  kasan_save_stack+0x1e/0x40
[  177.348217][  T142]  kasan_set_track+0x21/0x30
[  177.352824][  T142]  kasan_set_free_info+0x20/0x30
[  177.357760][  T142]  ____kasan_slab_free+0x166/0x1a0
[  177.362868][  T142]  slab_free_freelist_hook+0x8b/0x1c0
[  177.368255][  T142]  kfree+0xd6/0x4d0
[  177.372058][  T142]  pipe_release+0x2b6/0x310
[  177.376560][  T142]  __fput+0x277/0x9d0
[  177.380536][  T142]  task_work_run+0xdd/0x1a0
[  177.385038][  T142]  exit_to_user_mode_prepare+0x23c/0x250
[  177.390668][  T142]  syscall_exit_to_user_mode+0x19/0x50
[  177.396121][  T142]  do_syscall_64+0x42/0xb0
[  177.400547][  T142]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[  177.406437][  T142] 
[  177.408752][  T142] The buggy address belongs to the object at ffff88807d1e5400
[  177.408752][  T142]  which belongs to the cache kmalloc-cg-512 of size 512
[  177.423055][  T142] The buggy address is located 360 bytes inside of
[  177.423055][  T142]  512-byte region [ffff88807d1e5400, ffff88807d1e5600)
[  177.436352][  T142] 
[  177.438671][  T142] The buggy address belongs to the physical page:
[  177.445074][  T142] page:ffffea0001f47900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d1e4
[  177.455234][  T142] head:ffffea0001f47900 order:2 compound_mapcount:0 compound_pincount:0
[  177.463551][  T142] memcg:ffff8880253b0e01
[  177.467780][  T142] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  177.475764][  T142] raw: 00fff00000010200 ffffea000098e600 dead000000000002 ffff888011842dc0
[  177.484348][  T142] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff8880253b0e01
[  177.492920][  T142] page dumped because: kasan: bad access detected
[  177.499341][  T142] page_owner tracks the page as allocated
[  177.505061][  T142] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3637, tgid 3637 (syz-executor.0), ts 138436926263, free_ts 138257995646
[  177.526774][  T142]  get_page_from_freelist+0x1290/0x3b70
[  177.532328][  T142]  __alloc_pages+0x1c7/0x510
[  177.536915][  T142]  alloc_pages+0x1aa/0x310
[  177.541326][  T142]  allocate_slab+0x26c/0x3c0
[  177.545920][  T142]  ___slab_alloc+0x9c4/0xe20
[  177.550511][  T142]  __slab_alloc.constprop.0+0x4d/0xa0
[  177.555885][  T142]  kmem_cache_alloc_trace+0x310/0x3f0
[  177.561256][  T142]  ipv6_add_addr+0x352/0x1dc0
[  177.565935][  T142]  addrconf_add_linklocal+0x1c8/0x590
[  177.571305][  T142]  addrconf_addr_gen+0x37e/0x3d0
[  177.576238][  T142]  addrconf_dev_config+0x255/0x410
[  177.581342][  T142]  addrconf_notify+0xdbb/0x1ba0
[  177.586203][  T142]  notifier_call_chain+0xb5/0x200
[  177.591230][  T142]  call_netdevice_notifiers_info+0xb5/0x130
[  177.597122][  T142]  __dev_notify_flags+0x110/0x2b0
[  177.602143][  T142]  dev_change_flags+0x112/0x170
[  177.606989][  T142] page last free stack trace:
[  177.611650][  T142]  free_pcp_prepare+0x549/0xd20
[  177.616498][  T142]  free_unref_page+0x19/0x6a0
[  177.621169][  T142]  __unfreeze_partials+0x17c/0x1a0
[  177.626281][  T142]  qlist_free_all+0x6a/0x170
[  177.630881][  T142]  kasan_quarantine_reduce+0x180/0x200
[  177.636335][  T142]  __kasan_slab_alloc+0xa2/0xc0
[  177.641180][  T142]  kmem_cache_alloc_trace+0x26d/0x3f0
[  177.646550][  T142]  kobject_uevent_env+0x235/0x1660
[  177.651660][  T142]  __kobject_del+0x169/0x200
[  177.656245][  T142]  kobject_put+0x2b6/0x540
[  177.660743][  T142]  net_rx_queue_update_kobjects+0x3f3/0x510
[  177.666635][  T142]  netif_set_real_num_rx_queues+0x161/0x200
[  177.672524][  T142]  veth_init_queues+0x14d/0x190
[  177.677371][  T142]  veth_newlink+0x687/0x9a0
[  177.681869][  T142]  __rtnl_newlink+0x1087/0x17e0
[  177.686729][  T142]  rtnl_newlink+0x64/0xa0
[  177.691052][  T142] 
[  177.693368][  T142] Memory state around the buggy address:
[  177.698986][  T142]  ffff88807d1e5400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.707038][  T142]  ffff88807d1e5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.715088][  T142] >ffff88807d1e5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.723137][  T142]                                                           ^
[  177.730578][  T142]  ffff88807d1e5580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.738721][  T142]  ffff88807d1e5600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  177.746772][  T142] ==================================================================
[  177.758568][ T3689] CoreChips: probe of 1-1:0.0 failed with error -71
[  177.793213][ T3689] usb 1-1: USB disconnect, device number 8
[  177.833854][  T142] Kernel panic - not syncing: panic_on_warn set ...
[  177.840495][  T142] CPU: 0 PID: 142 Comm: kworker/0:2 Not tainted 5.19.0-rc6-syzkaller-00026-g5a29232d870d #0
[  177.850584][  T142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[  177.860638][  T142] Workqueue: events key_garbage_collector
[  177.866366][  T142] Call Trace:
[  177.869635][  T142]  <TASK>
[  177.872573][  T142]  dump_stack_lvl+0xcd/0x134
[  177.877164][  T142]  panic+0x2d7/0x636
[  177.881055][  T142]  ? panic_print_sys_info.part.0+0x10b/0x10b
[  177.887035][  T142]  ? preempt_schedule_common+0x59/0xc0
[  177.892495][  T142]  ? kill_fasync+0x45e/0x470
[  177.897081][  T142]  ? preempt_schedule_thunk+0x16/0x18
[  177.902455][  T142]  ? kill_fasync+0x45e/0x470
[  177.907042][  T142]  end_report.part.0+0x3f/0x7c
[  177.911820][  T142]  kasan_report.cold+0x93/0x1c6
[  177.916670][  T142]  ? kill_fasync+0x45e/0x470
[  177.921259][  T142]  kill_fasync+0x45e/0x470
[  177.925679][  T142]  post_one_notification.isra.0+0x6e4/0x990
[  177.931670][  T142]  remove_watch_from_object+0x35a/0x9d0
[  177.937222][  T142]  ? __post_watch_notification+0x840/0x840
[  177.943040][  T142]  ? do_raw_spin_lock+0x120/0x2a0
[  177.948087][  T142]  key_gc_unused_keys.constprop.0+0x2e5/0x600
[  177.954157][  T142]  key_garbage_collector+0x3d7/0x920
[  177.959462][  T142]  process_one_work+0x996/0x1610
[  177.964404][  T142]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[  177.969775][  T142]  ? rwlock_bug.part.0+0x90/0x90
[  177.974726][  T142]  ? _raw_spin_lock_irq+0x41/0x50
[  177.979804][  T142]  worker_thread+0x665/0x1080
[  177.984501][  T142]  ? __kthread_parkme+0x15f/0x220
[  177.989546][  T142]  ? process_one_work+0x1610/0x1610
[  177.994746][  T142]  kthread+0x2e9/0x3a0
[  177.998809][  T142]  ? kthread_complete_and_exit+0x40/0x40
[  178.004443][  T142]  ret_from_fork+0x1f/0x30
[  178.008866][  T142]  </TASK>
[  178.012083][  T142] Kernel Offset: disabled
[  178.016402][  T142] Rebooting in 86400 seconds..