last executing test programs:

48.499152652s ago: executing program 3 (id=38):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040)

48.365761832s ago: executing program 3 (id=40):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x59, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)='d', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='$', 0x1}], 0x1}}], 0x2, 0x2090)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3)
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)="60d274560bd696081546c236cac4fad0f9e20279d6a3efcf461753dc3ef629acf0a6219f4a55dacaf58a2ba578f2f3521f45d938b99ebfe4134b0aaceafb655a02e28ee985bf6155005d75d9f5423cd88a5554d4eda452bc9ae58635418b596da50d9d6f6b09858cae53cd6c6fa4e68a2d57b8e7164b68922f2a9caea5d08302301494bc82f00343b38848711f2dd965af47f8c2c9306cd17425ea5f92d7", 0x9e}], 0x1)

48.234674142s ago: executing program 3 (id=41):
ftruncate(0xffffffffffffffff, 0x1000006)
openat$cuse(0xffffff9c, 0x0, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00f5ff150081060001"], 0x4c)

47.740340698s ago: executing program 3 (id=45):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x3)

47.460845151s ago: executing program 3 (id=48):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @mcast1, 0x3}, 0x80, 0x0}, 0x8000)

47.328372534s ago: executing program 0 (id=49):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x55}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x40040)

47.257342058s ago: executing program 0 (id=50):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a08000280040006"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

47.148317366s ago: executing program 0 (id=51):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

46.465833121s ago: executing program 3 (id=54):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001f00)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40408d0}, 0x20040814)

46.241055946s ago: executing program 32 (id=54):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001f00)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40408d0}, 0x20040814)

46.109726179s ago: executing program 0 (id=56):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x3)

45.741022885s ago: executing program 0 (id=58):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}}, 0x0)

44.6745226s ago: executing program 0 (id=68):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0x6, 0x4)
recvmmsg(r0, &(0x7f0000005440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=""/195, 0xc3}, 0x81}], 0x1, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

44.496179111s ago: executing program 33 (id=68):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0x6, 0x4)
recvmmsg(r0, &(0x7f0000005440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=""/195, 0xc3}, 0x81}], 0x1, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

2.961901587s ago: executing program 1 (id=397):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004097}, 0x80)

2.744171765s ago: executing program 1 (id=400):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d00000002500010324bd7002", @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0xd0}, 0x1, 0x0, 0x0, 0x4008}, 0x0)

2.490843297s ago: executing program 1 (id=406):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0xb0000000}, 0xd, 0xb, 0x4, 0x1, 0x5, 'syz0\x00', "96d4fd6246bdc42b7f9e10dab6626b776b7002b182016800", "69d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a0100534173", [{0x4, 0x1, {0x2, 0x565}}, {0xfffa, 0x2, {0x0, 0x6}}, {0xc, 0x1, {0x3, 0x76f0}}, {0x6, 0x6, {0x3}}, {0x0, 0x6, {0x0, 0xfffffff6}}, {0x7b84, 0x8, {0x3, 0x1}}, {0x6, 0x0, {0x2, 0xc46}}, {0x66af, 0xe, {0x1, 0x4}}, {0x2, 0x9, {0x0, 0x20}}, {0x2, 0x4, {0x0, 0x200}}, {0x402, 0x0, {0x2, 0x10}}, {0x401, 0x5, {0x2, 0xf8d7}}, {0x3bc, 0xb, {0x2, 0x4}}, {0x23b, 0x3, {0x2, 0x4}}, {0x10, 0x8, {0x2, 0x6}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x7, 0x1, {0x1, 0xd}}, {0x100, 0x7fff, {0x2, 0x2}}, {0x80, 0x7, {0x3, 0x7}}, {0xfdc3, 0x400, {0x3, 0x6}}, {0xff7f, 0xd3, {0x1, 0xc3e2}}, {0x3, 0xcc, {0x3, 0x4}}, {0x10c4, 0x6, {0x1, 0xff}}, {0x5, 0xcddd}, {0xf, 0xfff7, {0x2, 0x7fffffff}}, {0x2, 0xfffb, {0x1, 0x7ff}}, {0xc9, 0x0, {0x1, 0x9}}, {0x8, 0x80, {0x2, 0x1ff}}, {0x3, 0x6e9, {0x2, 0x1ff}}, {0x6, 0x1, {0x2, 0x100000}}, {0x824b, 0x5, {0x0, 0x9}}, {0x6, 0x5, {0x3, 0x8}}, {0x9, 0x5, {0x2, 0xfffffffc}}, {0x8, 0xb7c5, {0x3, 0x8a52}}, {0x10, 0xdfe4, {0x2, 0x8}}, {0x1ff, 0x9, {0x2, 0xfffffffe}}, {0xf918, 0x5, {0x1, 0x2}}, {0x6, 0xc62a, {0x1, 0x7}}, {0xffff, 0x800, {0x2, 0x1}}, {0x2, 0x2, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040)

2.260177784s ago: executing program 1 (id=410):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000380)=ANY=[], 0x4c)

2.246643004s ago: executing program 5 (id=411):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'team_slave_0\x00', 0x1})

1.928676989s ago: executing program 5 (id=415):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
socketpair(0x1d, 0x1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4001000)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)

1.34031562s ago: executing program 5 (id=423):
r0 = socket(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x110, 0xa, "a3"}], 0x18}, 0x0)

1.128332993s ago: executing program 5 (id=426):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0)

1.054899933s ago: executing program 4 (id=428):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0)
close(r0)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0xff04, 0x0)

982.9674ms ago: executing program 1 (id=429):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x3)

856.414361ms ago: executing program 2 (id=430):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002180)=ANY=[@ANYBLOB='(\x00\x00\x00l\x00!'], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

856.234832ms ago: executing program 4 (id=431):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc0880ead5b66fbcdce3d9eab556a705251e618294a83651f60a84c9f5d1938837e786a6d0bdd7fcf50e", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

787.406776ms ago: executing program 5 (id=432):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f006b545dbb6bb31de67db7ca029a51160006000500a80006002000064007d57f5494007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7c6f4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4834559eb4edbb57a5025ccca9e00b60db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bff5756bf14ed5a009f846943ece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb000000df4f", 0xe0}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x80048d0)

746.108422ms ago: executing program 1 (id=433):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904000012070103000905010200000000000905820200"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

745.933924ms ago: executing program 2 (id=434):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffc}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

676.267141ms ago: executing program 4 (id=435):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a3000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000"], 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

540.456043ms ago: executing program 5 (id=436):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000090601020000000400000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00000179efb8835ee81f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000c000)
socket$nl_route(0x10, 0x3, 0x0)

540.243512ms ago: executing program 2 (id=437):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000380)=ANY=[], 0x4c)

485.157594ms ago: executing program 4 (id=438):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)={0x14, 0x13, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

410.692956ms ago: executing program 2 (id=439):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33)

280.764643ms ago: executing program 2 (id=440):
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001940)={&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}, 0x1}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000040"], 0x18}, 0x40800)

280.577962ms ago: executing program 4 (id=441):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x3)

19.717486ms ago: executing program 4 (id=442):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1401, 0xe2bf65dfa717cd3, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

0s ago: executing program 2 (id=443):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f3966", 0x5d6}], 0x1}, 0x9fc)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000003e39cffff00000a00804000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ac1414aa000000000000000000000000ff34000000020000080000000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000000000000000000000000000000000000200000000"], 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x4000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts.
[   75.962011][ T5593] cgroup: Unknown subsys name 'net'
[   76.201024][ T5593] cgroup: Unknown subsys name 'cpuset'
[   76.257014][ T5593] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   77.915016][ T5593] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   80.294950][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.301528][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.313024][   T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   80.331251][   T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.332340][   T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.333701][   T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.334401][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.338084][ T4923] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   80.341108][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   80.342943][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   80.344396][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   80.348650][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.348747][   T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.367877][   T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.369399][   T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.376923][   T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.391919][   T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.393575][   T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.399478][   T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.404773][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.428367][ T5615] Bluetooth: hci3: command tx timeout
[   82.428479][ T5615] Bluetooth: hci0: command tx timeout
[   82.507327][ T5610] Bluetooth: hci2: command tx timeout
[   82.507437][ T5610] Bluetooth: hci1: command tx timeout
[   82.532034][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.533263][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.533454][ T5608] bridge_slave_0: entered allmulticast mode
[   82.535789][ T5608] bridge_slave_0: entered promiscuous mode
[   82.595696][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.595876][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.596038][ T5608] bridge_slave_1: entered allmulticast mode
[   82.602664][ T5608] bridge_slave_1: entered promiscuous mode
[   82.626280][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.626675][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.626837][ T5605] bridge_slave_0: entered allmulticast mode
[   82.631377][ T5605] bridge_slave_0: entered promiscuous mode
[   82.633154][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.633423][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.633985][ T5606] bridge_slave_0: entered allmulticast mode
[   82.635660][ T5606] bridge_slave_0: entered promiscuous mode
[   82.696512][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.696815][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.697129][ T5605] bridge_slave_1: entered allmulticast mode
[   82.700593][ T5605] bridge_slave_1: entered promiscuous mode
[   82.701794][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.701949][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.702090][ T5606] bridge_slave_1: entered allmulticast mode
[   82.703750][ T5606] bridge_slave_1: entered promiscuous mode
[   82.770844][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.771118][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.771354][ T5607] bridge_slave_0: entered allmulticast mode
[   82.773215][ T5607] bridge_slave_0: entered promiscuous mode
[   82.818509][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.818882][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.819213][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.819688][ T5607] bridge_slave_1: entered allmulticast mode
[   82.821469][ T5607] bridge_slave_1: entered promiscuous mode
[   82.883607][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.906028][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.913689][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.955767][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.961148][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.992914][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.270467][ T5608] team0: Port device team_slave_0 added
[   83.273866][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.314339][ T5608] team0: Port device team_slave_1 added
[   83.343594][ T5605] team0: Port device team_slave_0 added
[   83.346280][ T5606] team0: Port device team_slave_0 added
[   83.396714][ T5605] team0: Port device team_slave_1 added
[   83.403462][ T5606] team0: Port device team_slave_1 added
[   83.429946][ T5607] team0: Port device team_slave_0 added
[   83.460775][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.460787][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.460800][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.464903][ T5607] team0: Port device team_slave_1 added
[   83.532494][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.532504][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.532518][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.556069][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.556085][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.556109][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.563365][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.563381][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.563403][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.620086][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.620127][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.620151][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.623969][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.623983][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.624006][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.644795][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.644810][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.644834][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.689701][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.689717][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.689740][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.834905][ T5608] hsr_slave_0: entered promiscuous mode
[   83.837968][ T5608] hsr_slave_1: entered promiscuous mode
[   83.895260][ T5605] hsr_slave_0: entered promiscuous mode
[   83.896747][ T5605] hsr_slave_1: entered promiscuous mode
[   83.898748][ T5605] debugfs: 'hsr0' already exists in 'hsr'
[   83.898862][ T5605] Cannot create hsr debugfs directory
[   83.913150][ T5606] hsr_slave_0: entered promiscuous mode
[   83.915127][ T5606] hsr_slave_1: entered promiscuous mode
[   83.917348][ T5606] debugfs: 'hsr0' already exists in 'hsr'
[   83.917371][ T5606] Cannot create hsr debugfs directory
[   83.963862][ T5607] hsr_slave_0: entered promiscuous mode
[   83.965009][ T5607] hsr_slave_1: entered promiscuous mode
[   83.965940][ T5607] debugfs: 'hsr0' already exists in 'hsr'
[   83.965961][ T5607] Cannot create hsr debugfs directory
[   84.506930][ T5610] Bluetooth: hci3: command tx timeout
[   84.507023][ T5615] Bluetooth: hci0: command tx timeout
[   84.596894][ T5610] Bluetooth: hci2: command tx timeout
[   84.596979][ T5615] Bluetooth: hci1: command tx timeout
[   84.925901][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   84.999480][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.005348][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.027441][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.031741][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.062609][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.084814][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.113161][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.258596][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.301023][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.305909][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.340185][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.344502][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.382142][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.404341][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.441278][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.564388][ T5605] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.592833][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.598026][ T5605] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.633409][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.638288][ T5605] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.671491][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.702150][ T5605] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.732277][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.860454][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.892565][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.912216][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.952111][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.954830][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.976232][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.989240][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   86.029853][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.079244][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.161712][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[   86.214646][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.214989][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.271221][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.279869][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.280034][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.371668][ T5606] 8021q: adding VLAN 0 to HW filter on device team0
[   86.417397][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.417524][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.438073][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.483275][   T91] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.483439][   T91] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.577682][ T5605] 8021q: adding VLAN 0 to HW filter on device team0
[   86.596991][ T5610] Bluetooth: hci3: command tx timeout
[   86.597074][ T5615] Bluetooth: hci0: command tx timeout
[   86.625939][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.660365][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.661490][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.668440][ T5610] Bluetooth: hci2: command tx timeout
[   86.668525][ T5615] Bluetooth: hci1: command tx timeout
[   86.729800][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.729891][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.815445][ T1622] cfg80211: failed to load regulatory.db
[   86.863486][ T5607] 8021q: adding VLAN 0 to HW filter on device team0
[   86.910426][   T91] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.910552][   T91] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.952703][   T91] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.952929][   T91] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.519538][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.949327][ T5608] veth0_vlan: entered promiscuous mode
[   88.035761][ T5608] veth1_vlan: entered promiscuous mode
[   88.101551][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.275680][ T5608] veth0_macvtap: entered promiscuous mode
[   88.311435][ T5608] veth1_macvtap: entered promiscuous mode
[   88.410657][ T5606] veth0_vlan: entered promiscuous mode
[   88.449920][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.503913][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.524294][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.534915][ T5606] veth1_vlan: entered promiscuous mode
[   88.560838][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.591868][ T2195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.625698][ T2195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.639856][ T2195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.645994][ T2195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.670711][ T5615] Bluetooth: hci0: command tx timeout
[   88.670738][ T5615] Bluetooth: hci3: command tx timeout
[   88.746693][ T5610] Bluetooth: hci1: command tx timeout
[   88.747890][ T5615] Bluetooth: hci2: command tx timeout
[   88.974456][ T5606] veth0_macvtap: entered promiscuous mode
[   89.097454][ T5606] veth1_macvtap: entered promiscuous mode
[   89.146641][ T5605] veth0_vlan: entered promiscuous mode
[   89.181288][ T5607] veth0_vlan: entered promiscuous mode
[   89.242740][ T5605] veth1_vlan: entered promiscuous mode
[   89.254397][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.274474][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.274504][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.308934][ T5607] veth1_vlan: entered promiscuous mode
[   89.322515][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.378486][   T91] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.384612][   T91] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.412846][   T91] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.429639][   T91] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.430539][   T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.430570][   T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.635771][ T5605] veth0_macvtap: entered promiscuous mode
[   89.834558][ T5605] veth1_macvtap: entered promiscuous mode
[   89.923901][ T5607] veth0_macvtap: entered promiscuous mode
[   90.005482][ T5607] veth1_macvtap: entered promiscuous mode
[   90.098917][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.098936][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.144550][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.181415][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.202614][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.234586][   T91] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.252290][   T91] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.273046][   T91] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.279503][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.319921][   T91] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.322867][   T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.322884][   T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.446684][   T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.466205][   T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.483147][   T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.502525][   T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.363822][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.363841][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.451583][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.451595][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.600806][ T2195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.600824][ T2195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.777303][   T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.777321][   T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.912456][ T5797] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET)
[   94.194929][ T5797] syzkaller1: entered promiscuous mode
[   94.194954][ T5797] syzkaller1: entered allmulticast mode
[   94.463200][ T5780] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   94.757846][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   94.757940][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   94.757963][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   94.831039][ T5780] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[   94.831078][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.831097][ T5780] usb 3-1: Product: syz
[   94.831111][ T5780] usb 3-1: Manufacturer: syz
[   94.831126][ T5780] usb 3-1: SerialNumber: syz
[   94.915327][ T5780] usb 3-1: config 0 descriptor??
[   95.362035][ T5780] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[   95.537229][ T5711] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   95.683248][ T5718] usb 3-1: USB disconnect, device number 2
[   95.764724][ T5711] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 214, changing to 7
[   95.764754][ T5711] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 172, changing to 7
[   95.813996][ T5711] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   95.814026][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.814045][ T5711] usb 1-1: Product: syz
[   95.814058][ T5711] usb 1-1: Manufacturer: syz
[   95.814071][ T5711] usb 1-1: SerialNumber: syz
[   96.058237][ T1622] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   96.201713][ T1622] usb 4-1: device descriptor read/64, error -71
[   97.275025][ T1622] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   97.458792][ T1622] usb 4-1: device descriptor read/64, error -71
[   97.582240][ T1622] usb usb4-port1: attempt power cycle
[   97.815431][ T5711] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   97.850034][ T5711] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   98.016352][ T5826] capability: warning: `syz.1.20' uses 32-bit capabilities (legacy support in use)
[   98.018213][ T5826] program syz.1.20 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   98.036492][ T1622] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   98.085037][ T1622] usb 4-1: device descriptor read/8, error -71
[   98.212578][ T5711] usb 1-1: USB disconnect, device number 2
[   98.650941][ T5833] ALSA: mixer_oss: invalid OSS volume ''
[   99.326200][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   99.678208][ T5837] No control pipe specified
[   99.783604][ T5838] syzkaller1: entered promiscuous mode
[   99.783629][ T5838] syzkaller1: entered allmulticast mode
[  100.121995][ T5711] IPVS: starting estimator thread 0...
[  100.209433][ T5855] tipc: Can't bind to reserved service type 1
[  100.228809][ T5851] IPVS: using max 10 ests per chain, 24000 per kthread
[  100.437826][ T5861] No control pipe specified
[  100.451725][  T823] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  100.527147][ T5711] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  100.589387][  T823] usb 2-1: device descriptor read/64, error -71
[  100.691970][ T5711] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 214, changing to 7
[  100.692027][ T5711] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 172, changing to 7
[  100.701163][ T5711] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  100.701192][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.701211][ T5711] usb 1-1: Product: syz
[  100.701224][ T5711] usb 1-1: Manufacturer: syz
[  100.701237][ T5711] usb 1-1: SerialNumber: syz
[  100.877897][  T823] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  101.012129][  T823] usb 2-1: device descriptor read/64, error -71
[  101.072846][ T5711] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  101.074749][ T5711] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  101.116730][  T823] usb usb2-port1: attempt power cycle
[  101.309339][ T5883] No control pipe specified
[  101.359222][ T5711] usb 1-1: USB disconnect, device number 3
[  101.486551][  T823] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  101.512385][  T823] usb 2-1: device descriptor read/8, error -71
[  101.777729][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.876516][  T823] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  101.898521][  T823] usb 2-1: device descriptor read/8, error -71
[  102.006721][  T823] usb usb2-port1: unable to enumerate USB device
[  102.039341][ T5899] netlink: 'syz.0.50': attribute type 1 has an invalid length.
[  103.158380][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  103.193735][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  103.194743][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  103.217899][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  103.218904][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  103.338956][ T1189] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.930864][ T1189] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.128558][ T5934] netlink: 128 bytes leftover after parsing attributes in process `syz.1.63'.
[  104.128646][ T5934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.689846][ T1189] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.122620][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  105.153163][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  105.155988][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  105.172236][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  105.175831][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  105.244737][ T5615] Bluetooth: hci3: command tx timeout
[  105.293460][ T1189] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.167483][ T1189] bridge_slave_1: left allmulticast mode
[  107.167661][ T1189] bridge_slave_1: left promiscuous mode
[  107.175296][ T1189] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.230765][ T5615] Bluetooth: hci2: command tx timeout
[  107.310531][ T5615] Bluetooth: hci3: command tx timeout
[  107.452916][ T1189] bridge_slave_0: left allmulticast mode
[  107.452951][ T1189] bridge_slave_0: left promiscuous mode
[  107.471269][ T1189] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.397118][ T1189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.457048][ T1189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.481822][ T1189] bond0 (unregistering): Released all slaves
[  108.548929][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1
[  108.957591][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.957876][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.958178][ T5911] bridge_slave_0: entered allmulticast mode
[  108.969573][ T5911] bridge_slave_0: entered promiscuous mode
[  109.045211][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.045528][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.045802][ T5911] bridge_slave_1: entered allmulticast mode
[  109.052282][ T5911] bridge_slave_1: entered promiscuous mode
[  109.306582][ T5615] Bluetooth: hci2: command tx timeout
[  109.387048][ T5615] Bluetooth: hci3: command tx timeout
[  109.406508][ T5691] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  109.563445][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  109.563476][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  109.563497][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  109.569699][ T5691] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  109.569715][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.569725][ T5691] usb 3-1: Product: syz
[  109.569733][ T5691] usb 3-1: Manufacturer: syz
[  109.569740][ T5691] usb 3-1: SerialNumber: syz
[  109.711358][ T5691] usb 3-1: config 0 descriptor??
[  109.783063][ T5911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.875376][ T5911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.121788][ T5691] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  110.290368][ T5698] usb 3-1: USB disconnect, device number 3
[  111.018569][ T5911] team0: Port device team_slave_0 added
[  111.085339][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2
[  111.134390][ T6076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.98'.
[  111.164358][ T5911] team0: Port device team_slave_1 added
[  111.396510][ T5615] Bluetooth: hci2: command tx timeout
[  111.409756][ T6080] No control pipe specified
[  111.476525][ T5615] Bluetooth: hci3: command tx timeout
[  112.106039][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.106054][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.106077][ T5911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.368199][ T1189] hsr_slave_0: left promiscuous mode
[  112.406573][ T5595] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  112.414658][ T1189] hsr_slave_1: left promiscuous mode
[  112.416101][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.416149][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.428414][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.428442][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.518122][ T1189] veth1_macvtap: left promiscuous mode
[  112.518405][ T1189] veth0_macvtap: left promiscuous mode
[  112.518734][ T1189] veth1_vlan: left promiscuous mode
[  112.521511][ T1189] veth0_vlan: left promiscuous mode
[  112.558204][ T5595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  112.558237][ T5595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  112.558256][ T5595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  112.560375][ T5595] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  112.560402][ T5595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.560420][ T5595] usb 3-1: Product: syz
[  112.560429][ T5595] usb 3-1: Manufacturer: syz
[  112.560437][ T5595] usb 3-1: SerialNumber: syz
[  112.563382][ T5595] usb 3-1: config 0 descriptor??
[  112.848857][ T5595] adutux 3-1:0.0: ADU208  now attached to /dev/usb/adutux0
[  112.897780][ T5595] usb 3-1: USB disconnect, device number 4
[  113.407617][ T1189] team0 (unregistering): Port device team_slave_1 removed
[  113.439530][ T6095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'.
[  113.466517][ T5615] Bluetooth: hci2: command tx timeout
[  113.467199][ T1189] team0 (unregistering): Port device team_slave_0 removed
[  113.518230][ T5615] block nbd0: Receive control failed (result -1)
[  113.872652][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.872668][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  113.872692][ T5911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.088606][ T6103] No control pipe specified
[  114.300817][ T5911] hsr_slave_0: entered promiscuous mode
[  114.304915][ T5911] hsr_slave_1: entered promiscuous mode
[  115.702300][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3
[  115.702970][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.704212][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.704505][ T5952] bridge_slave_0: entered allmulticast mode
[  115.712575][ T5952] bridge_slave_0: entered promiscuous mode
[  116.066997][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.067369][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.067688][ T5952] bridge_slave_1: entered allmulticast mode
[  116.070852][ T5952] bridge_slave_1: entered promiscuous mode
[  116.273323][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.320203][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.832416][ T1189] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.081003][ T5952] team0: Port device team_slave_0 added
[  117.126026][ T5952] team0: Port device team_slave_1 added
[  117.325443][ T1189] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.430468][ T6168] No control pipe specified
[  117.609495][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.609512][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  117.609534][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.656798][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.656815][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  117.656840][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.890054][ T1189] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.335046][ T1189] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.461946][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4
[  118.505567][ T5952] hsr_slave_0: entered promiscuous mode
[  118.524916][ T5952] hsr_slave_1: entered promiscuous mode
[  118.532898][ T5952] debugfs: 'hsr0' already exists in 'hsr'
[  118.532921][ T5952] Cannot create hsr debugfs directory
[  118.672811][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'.
[  118.672846][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'.
[  118.909196][ T6203] No control pipe specified
[  118.930403][ T5911] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  119.017134][ T5911] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  119.088286][ T5911] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  119.160907][ T5911] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  119.243575][ T5911] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  119.290090][ T5911] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  119.315320][ T5911] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  119.355516][ T5911] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  120.187090][ T1189] bridge_slave_1: left allmulticast mode
[  120.187123][ T1189] bridge_slave_1: left promiscuous mode
[  120.187395][ T1189] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.312954][ T1189] bridge_slave_0: left allmulticast mode
[  120.312978][ T1189] bridge_slave_0: left promiscuous mode
[  120.313150][ T1189] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.356522][ T5691] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  120.497117][ T5691] usb 3-1: device descriptor read/64, error -71
[  120.767088][ T5691] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  120.896531][ T5691] usb 3-1: device descriptor read/64, error -71
[  121.019832][ T5691] usb usb3-port1: attempt power cycle
[  121.117260][ T1189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.176971][ T1189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.218745][ T1189] bond0 (unregistering): Released all slaves
[  121.366615][ T5691] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  121.401770][ T5691] usb 3-1: device descriptor read/8, error -71
[  121.619516][ T6237] Bluetooth: MGMT ver 1.23
[  121.646221][ T5691] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  121.667147][ T5691] usb 3-1: device descriptor read/8, error -71
[  121.782719][ T5691] usb usb3-port1: unable to enumerate USB device
[  122.591894][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5
[  122.744297][ T5952] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  122.773209][ T5952] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  122.779661][ T5952] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  122.900225][ T5952] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  122.924398][ T5952] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  122.956248][ T6265] netlink: 'syz.1.142': attribute type 39 has an invalid length.
[  122.968455][ T5952] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  123.066742][ T5952] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  123.126969][ T5952] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  123.248317][ T6269] autofs: Unknown parameter '0x0000000000000000'
[  123.275365][ T1189] hsr_slave_0: left promiscuous mode
[  123.327128][ T1189] hsr_slave_1: left promiscuous mode
[  123.327934][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.327951][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.371676][ T1189] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.371694][ T1189] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.429599][ T1189] veth1_macvtap: left promiscuous mode
[  123.429661][ T1189] veth0_macvtap: left promiscuous mode
[  123.429828][ T1189] veth1_vlan: left promiscuous mode
[  123.429970][ T1189] veth0_vlan: left promiscuous mode
[  124.169862][ T1189] team0 (unregistering): Port device team_slave_1 removed
[  124.216940][ T1189] team0 (unregistering): Port device team_slave_0 removed
[  124.671791][ T5911] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.951999][ T5911] 8021q: adding VLAN 0 to HW filter on device team0
[  124.977827][ T6289] netlink: 40 bytes leftover after parsing attributes in process `syz.1.148'.
[  124.977858][ T6289] nbd: socks must be embedded in a SOCK_ITEM attr
[  125.041572][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.042058][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.114435][  T182] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.114676][  T182] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.306785][ T5698] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  125.435245][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.476460][ T5698] usb 3-1: Using ep0 maxpacket: 32
[  125.482415][ T5698] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  125.482443][ T5698] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  125.482462][ T5698] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.482480][ T5698] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 81
[  125.482515][ T5698] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  125.482537][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.541331][ T5698] usb 3-1: config 0 descriptor??
[  125.799627][ T5952] 8021q: adding VLAN 0 to HW filter on device team0
[  125.802742][ T5718] usb 3-1: USB disconnect, device number 9
[  125.831971][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.832141][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.890128][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.908966][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.940302][ T1189] IPVS: stop unused estimator thread 0...
[  126.064925][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6
[  126.200564][ T6311] autofs: Unknown parameter '0x0000000000000000'
[  126.359296][ T5718] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  126.507890][ T5718] usb 3-1: Using ep0 maxpacket: 32
[  126.510097][ T5718] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  126.510122][ T5718] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  126.510141][ T5718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.510158][ T5718] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 81
[  126.510189][ T5718] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  126.510208][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.533940][ T5718] usb 3-1: config 0 descriptor??
[  127.279074][ T5911] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.712994][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.015563][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7
[  128.173330][ T6377] block nbd1: not configured, cannot reconfigure
[  128.191362][ T5822] usb 3-1: USB disconnect, device number 10
[  128.463467][ T5911] veth0_vlan: entered promiscuous mode
[  128.581226][ T5911] veth1_vlan: entered promiscuous mode
[  128.795752][ T5952] veth0_vlan: entered promiscuous mode
[  128.911295][ T5952] veth1_vlan: entered promiscuous mode
[  128.963401][ T5911] veth0_macvtap: entered promiscuous mode
[  129.010500][ T5911] veth1_macvtap: entered promiscuous mode
[  129.121531][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.218029][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.230166][ T5952] veth0_macvtap: entered promiscuous mode
[  129.283595][ T5952] veth1_macvtap: entered promiscuous mode
[  129.354988][ T1189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.361428][ T1189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.361588][ T1189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.361623][ T1189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.748263][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.870831][ T5691] IPVS: starting estimator thread 0...
[  129.985267][ T6431] IPVS: using max 11 ests per chain, 26400 per kthread
[  130.102064][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.392303][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8
[  130.517660][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.524134][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.572351][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.611784][  T161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.611859][  T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.611871][  T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.993386][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.993404][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.846944][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.846961][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.958491][ T5822] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  132.108441][ T5822] usb 2-1: Using ep0 maxpacket: 32
[  132.110736][ T5822] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  132.110763][ T5822] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  132.110783][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.110800][ T5822] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  132.110847][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  132.110868][ T5822] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  132.110907][ T5822] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  132.110930][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.145652][ T5822] usb 2-1: config 0 descriptor??
[  132.168959][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.168979][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.226623][ T5780] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  132.398557][ T5780] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 214, changing to 7
[  132.398602][ T5780] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 172, changing to 7
[  132.403512][ T5780] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  132.403540][ T5780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.403559][ T5780] usb 5-1: Product: syz
[  132.403572][ T5780] usb 5-1: Manufacturer: syz
[  132.403586][ T5780] usb 5-1: SerialNumber: syz
[  132.544453][ T5718] usb 2-1: USB disconnect, device number 6
[  132.861931][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  132.862086][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  133.004331][ T5780] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  133.004788][ T5780] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  133.082824][ T5780] usb 5-1: USB disconnect, device number 2
[  133.126655][ T5718] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  133.286666][ T5718] usb 2-1: Using ep0 maxpacket: 32
[  133.288451][ T5718] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  133.288477][ T5718] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  133.288496][ T5718] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.288514][ T5718] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  133.288564][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  133.288577][ T5718] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  133.288599][ T5718] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  133.288610][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.329699][ T5718] usb 2-1: config 0 descriptor??
[  133.533628][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  133.762640][ T6503] netlink: 92 bytes leftover after parsing attributes in process `syz.4.197'.
[  134.698244][ T5822] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  134.856528][ T5822] usb 6-1: device descriptor read/64, error -71
[  135.015011][ T5595] usb 2-1: USB disconnect, device number 7
[  135.156527][ T5822] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  135.184188][ T6553] netlink: 256 bytes leftover after parsing attributes in process `syz.1.214'.
[  135.317466][ T5822] usb 6-1: device descriptor read/64, error -71
[  135.426899][ T5822] usb usb6-port1: attempt power cycle
[  135.839617][ T5822] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  135.863818][ T5822] usb 6-1: device descriptor read/8, error -71
[  136.129323][ T5822] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  136.149660][ T5822] usb 6-1: device descriptor read/8, error -71
[  136.260282][ T5822] usb usb6-port1: unable to enumerate USB device
[  136.760606][ T5615] Bluetooth: hci2: command tx timeout
[  137.266870][ T5760] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  137.419284][ T5760] usb 2-1: Using ep0 maxpacket: 32
[  137.444007][ T5760] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  137.444035][ T5760] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  137.444054][ T5760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.444071][ T5760] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  137.444116][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  137.444136][ T5760] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  137.444158][ T5760] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  137.444197][ T5760] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  137.444220][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.494010][ T5760] usb 2-1: config 0 descriptor??
[  137.820119][ T6643] Bluetooth: MGMT ver 1.23
[  137.833305][ T5780] usb 2-1: USB disconnect, device number 8
[  138.271829][ T5780] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  138.431156][ T5780] usb 2-1: Using ep0 maxpacket: 32
[  138.520667][ T5780] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  138.520697][ T5780] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  138.520717][ T5780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.520736][ T5780] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  138.520783][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  138.520804][ T5780] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  138.520826][ T5780] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  138.520866][ T5780] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  138.520889][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.601328][ T5780] usb 2-1: config 0 descriptor??
[  139.897765][ T5780] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  140.036785][ T5780] usb 6-1: device descriptor read/64, error -71
[  140.299368][ T5760] usb 2-1: USB disconnect, device number 9
[  140.339854][ T5780] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  140.470488][ T5780] usb 6-1: device descriptor read/64, error -71
[  140.576896][ T5780] usb usb6-port1: attempt power cycle
[  140.701970][ T6766] syzkaller1: entered promiscuous mode
[  140.701997][ T6766] syzkaller1: entered allmulticast mode
[  140.956623][ T5780] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  140.981287][ T5780] usb 6-1: device descriptor read/8, error -71
[  141.236900][ T5780] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  141.260943][ T5780] usb 6-1: device descriptor read/8, error -71
[  141.366814][ T5780] usb usb6-port1: unable to enumerate USB device
[  141.539078][ T5822] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  141.687148][ T5822] usb 2-1: Using ep0 maxpacket: 32
[  141.689814][ T5822] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  141.689840][ T5822] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  141.689858][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.689876][ T5822] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  141.689923][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  141.689943][ T5822] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  141.689963][ T5822] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  141.690002][ T5822] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  141.690024][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.808005][ T5822] usb 2-1: config 0 descriptor??
[  142.040204][ T5822] usb 2-1: USB disconnect, device number 10
[  142.578143][ T5822] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  142.727175][ T5822] usb 2-1: Using ep0 maxpacket: 32
[  142.731936][ T5822] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  142.731964][ T5822] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  142.731984][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.732001][ T5822] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  142.732060][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  142.732081][ T5822] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  142.732107][ T5822] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  142.732145][ T5822] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  142.732169][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.838661][ T5822] usb 2-1: config 0 descriptor??
[  143.873686][ T6902] netlink: 'syz.5.356': attribute type 5 has an invalid length.
[  143.873707][ T6902] netlink: 24 bytes leftover after parsing attributes in process `syz.5.356'.
[  144.454406][ T5780] usb 2-1: USB disconnect, device number 11
[  145.082697][ T6932] syzkaller1: entered promiscuous mode
[  145.082723][ T6932] syzkaller1: entered allmulticast mode
[  145.341724][ T6962] netlink: 'syz.1.378': attribute type 29 has an invalid length.
[  145.579909][ T6963] netlink: 'syz.1.378': attribute type 29 has an invalid length.
[  145.889003][ T6989] autofs: Unknown parameter 'fd0x0000000000000000'
[  146.368980][ T7008] netlink: 56 bytes leftover after parsing attributes in process `syz.5.395'.
[  146.685368][ T7024] autofs: Unknown parameter 'fd0x0000000000000000'
[  147.158749][ T7042] syzkaller1: entered promiscuous mode
[  147.158775][ T7042] syzkaller1: entered allmulticast mode
[  147.344023][ T7055] netlink: 'syz.5.415': attribute type 29 has an invalid length.
[  148.549435][ T7102] netlink: 'syz.5.432': attribute type 21 has an invalid length.
[  148.549457][ T7102] netlink: 128 bytes leftover after parsing attributes in process `syz.5.432'.
[  148.919390][ T5780] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  149.066928][ T5780] usb 2-1: Using ep0 maxpacket: 32
[  149.071072][ T5780] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  149.071096][ T5780] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  149.071115][ T5780] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  149.071162][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  149.071195][ T5780] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  149.071217][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  149.071238][ T5780] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  149.071259][ T5780] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  149.071297][ T5780] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  149.071318][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.094532][ T5780] usb 2-1: config 0 descriptor??
[  149.315715][ T5780] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  149.372836][ T5780] usb 2-1: USB disconnect, device number 12
[  149.571477][   T34] ==================================================================
[  149.571493][   T34] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60
[  149.571521][   T34] Read of size 1 at addr ffff88803fe3ae90 by task kdevtmpfs/34
[  149.571537][   T34] 
[  149.571558][   T34] CPU: 1 UID: 0 PID: 34 Comm: kdevtmpfs Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  149.571578][   T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  149.571596][   T34] Call Trace:
[  149.571606][   T34]  <TASK>
[  149.571614][   T34]  dump_stack_lvl+0xe8/0x150
[  149.571636][   T34]  print_address_description+0x55/0x1e0
[  149.571661][   T34]  ? _raw_spin_lock_irqsave+0x40/0x60
[  149.571681][   T34]  print_report+0x58/0x70
[  149.571701][   T34]  kasan_report+0x117/0x150
[  149.571722][   T34]  ? _raw_spin_lock_irqsave+0x40/0x60
[  149.571746][   T34]  ? rt_mutex_slowunlock+0xbf/0x8b0
[  149.571763][   T34]  __kasan_check_byte+0x2a/0x40
[  149.571782][   T34]  lock_acquire+0x84/0x350
[  149.571851][   T34]  ? preempt_schedule_common+0x82/0xd0
[  149.571872][   T34]  ? preempt_schedule_thunk+0x16/0x40
[  149.571900][   T34]  ? rcu_is_watching+0x15/0xb0
[  149.571927][   T34]  _raw_spin_lock_irqsave+0x40/0x60
[  149.571947][   T34]  ? rt_mutex_slowunlock+0xbf/0x8b0
[  149.571964][   T34]  rt_mutex_slowunlock+0xbf/0x8b0
[  149.571987][   T34]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  149.572005][   T34]  ? __rcu_read_unlock+0x83/0xe0
[  149.572025][   T34]  ? rt_spin_unlock+0x160/0x200
[  149.572043][   T34]  shrink_dcache_tree+0x30e/0x410
[  149.572063][   T34]  ? __pfx_select_collect+0x10/0x10
[  149.572087][   T34]  ? __pfx_shrink_dcache_tree+0x10/0x10
[  149.572114][   T34]  ? shmem_unlink+0x1d4/0x250
[  149.572138][   T34]  vfs_rmdir+0x43c/0x6f0
[  149.572164][   T34]  devtmpfs_work_loop+0xb7e/0xdf0
[  149.572193][   T34]  ? __pfx_devtmpfs_work_loop+0x10/0x10
[  149.572221][   T34]  ? do_raw_spin_unlock+0xf5/0x210
[  149.572243][   T34]  ? try_to_wake_up+0x863/0x1450
[  149.572265][   T34]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  149.572287][   T34]  devtmpfsd+0x4d/0x50
[  149.572303][   T34]  kthread+0x388/0x470
[  149.572321][   T34]  ? __pfx_devtmpfsd+0x10/0x10
[  149.572334][   T34]  ? __pfx_kthread+0x10/0x10
[  149.572348][   T34]  ret_from_fork+0x514/0xb70
[  149.572364][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  149.572378][   T34]  ? __switch_to+0xc79/0x1410
[  149.572392][   T34]  ? __pfx_kthread+0x10/0x10
[  149.572406][   T34]  ret_from_fork_asm+0x1a/0x30
[  149.572429][   T34]  </TASK>
[  149.572434][   T34] 
[  149.572437][   T34] Allocated by task 34:
[  149.572445][   T34]  kasan_save_track+0x3e/0x80
[  149.572458][   T34]  __kasan_slab_alloc+0x6c/0x80
[  149.572470][   T34]  kmem_cache_alloc_lru_noprof+0x354/0x6b0
[  149.572493][   T34]  __d_alloc+0x37/0x6f0
[  149.572506][   T34]  d_alloc+0x4b/0x190
[  149.572519][   T34]  lookup_one_qstr_excl+0xd8/0x360
[  149.572534][   T34]  filename_create+0x20e/0x370
[  149.572550][   T34]  start_creating_path+0x39/0x150
[  149.572565][   T34]  devtmpfs_work_loop+0x7d7/0xdf0
[  149.572583][   T34]  devtmpfsd+0x4d/0x50
[  149.572595][   T34]  kthread+0x388/0x470
[  149.572609][   T34]  ret_from_fork+0x514/0xb70
[  149.572623][   T34]  ret_from_fork_asm+0x1a/0x30
[  149.572640][   T34] 
[  149.572644][   T34] Freed by task 21:
[  149.572651][   T34]  kasan_save_track+0x3e/0x80
[  149.572664][   T34]  kasan_save_free_info+0x46/0x50
[  149.572683][   T34]  __kasan_slab_free+0x5c/0x80
[  149.572697][   T34]  kmem_cache_free+0x187/0x6c0
[  149.572713][   T34]  rcu_cpu_kthread+0x99e/0x1470
[  149.572734][   T34]  smpboot_thread_fn+0x541/0xa50
[  149.572749][   T34]  kthread+0x388/0x470
[  149.572765][   T34]  ret_from_fork+0x514/0xb70
[  149.572782][   T34]  ret_from_fork_asm+0x1a/0x30
[  149.572811][   T34] 
[  149.572815][   T34] Last potentially related work creation:
[  149.572821][   T34]  kasan_save_stack+0x3e/0x60
[  149.572834][   T34]  kasan_record_aux_stack+0xbd/0xd0
[  149.572854][   T34]  call_rcu+0xee/0x890
[  149.572876][   T34]  dentry_kill+0x4ed/0x890
[  149.572897][   T34]  finish_dput+0x1a/0x260
[  149.572911][   T34]  path_put+0x39/0x60
[  149.572924][   T34]  do_utimes+0x1c6/0x2c0
[  149.572942][   T34]  __x64_sys_utimensat+0x15e/0x240
[  149.572962][   T34]  do_syscall_64+0x174/0x580
[  149.572981][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.572996][   T34] 
[  149.572999][   T34] The buggy address belongs to the object at ffff88803fe3adc0
[  149.572999][   T34]  which belongs to the cache dentry of size 376
[  149.573014][   T34] The buggy address is located 208 bytes inside of
[  149.573014][   T34]  freed 376-byte region [ffff88803fe3adc0, ffff88803fe3af38)
[  149.573029][   T34] 
[  149.573033][   T34] The buggy address belongs to the physical page:
[  149.573057][   T34] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803fe3b658 pfn:0x3fe3a
[  149.573074][   T34] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  149.573087][   T34] memcg:ffff88803fe3bef1
[  149.573095][   T34] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[  149.573117][   T34] page_type: f5(slab)
[  149.573133][   T34] raw: 0080000000000240 ffff88801c68c780 ffffea00017f0210 ffffea0000f85910
[  149.573149][   T34] raw: ffff88803fe3b658 000000080012000b 00000000f5000000 ffff88803fe3bef1
[  149.573163][   T34] head: 0080000000000240 ffff88801c68c780 ffffea00017f0210 ffffea0000f85910
[  149.573178][   T34] head: ffff88803fe3b658 000000080012000b 00000000f5000000 ffff88803fe3bef1
[  149.573192][   T34] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[  149.573206][   T34] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[  149.573215][   T34] page dumped because: kasan: bad access detected
[  149.573230][   T34] page_owner tracks the page as allocated
[  149.573237][   T34] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6241, tgid 6241 (dhcpcd-run-hook), ts 122101795334, free_ts 118807954191
[  149.573267][   T34]  post_alloc_hook+0x1f9/0x250
[  149.573293][   T34]  get_page_from_freelist+0x265c/0x26e0
[  149.573310][   T34]  __alloc_frozen_pages_noprof+0x18d/0x380
[  149.573327][   T34]  allocate_slab+0x76/0x5d0
[  149.573348][   T34]  refill_objects+0x2d9/0x350
[  149.573367][   T34]  __pcs_replace_empty_main+0x331/0x690
[  149.573388][   T34]  kmem_cache_alloc_lru_noprof+0x46b/0x6b0
[  149.573414][   T34]  __d_alloc+0x37/0x6f0
[  149.573430][   T34]  d_alloc_parallel+0xe3/0x1630
[  149.573449][   T34]  __lookup_slow+0x82/0x2f0
[  149.573464][   T34]  lookup_slow+0x53/0x70
[  149.573480][   T34]  link_path_walk+0xd1e/0x18d0
[  149.573496][   T34]  path_lookupat+0xe4/0x8c0
[  149.573510][   T34]  filename_lookup+0x256/0x5d0
[  149.573525][   T34]  vfs_statx+0xfc/0x200
[  149.573547][   T34]  vfs_fstatat+0x11b/0x170
[  149.573571][   T34] page last free pid 5605 tgid 5605 stack trace:
[  149.573581][   T34]  __free_frozen_pages+0x10af/0x1190
[  149.573596][   T34]  __slab_free+0x252/0x2a0
[  149.573612][   T34]  qlist_free_all+0x99/0x100
[  149.573635][   T34]  kasan_quarantine_reduce+0x148/0x160
[  149.573659][   T34]  __kasan_slab_alloc+0x22/0x80
[  149.573675][   T34]  kmem_cache_alloc_noprof+0x354/0x6c0
[  149.573698][   T34]  do_getname+0x2e/0x250
[  149.573720][   T34]  __se_sys_unlinkat+0x4f/0x1a0
[  149.573740][   T34]  do_syscall_64+0x174/0x580
[  149.573758][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.573773][   T34] 
[  149.573776][   T34] Memory state around the buggy address:
[  149.573785][   T34]  ffff88803fe3ad80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  149.573803][   T34]  ffff88803fe3ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  149.573815][   T34] >ffff88803fe3ae80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  149.573822][   T34]                          ^
[  149.573830][   T34]  ffff88803fe3af00: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa
[  149.573841][   T34]  ffff88803fe3af80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  149.573849][   T34] ==================================================================
[  149.573865][   T34] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  149.573879][   T34] CPU: 1 UID: 0 PID: 34 Comm: kdevtmpfs Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  149.573899][   T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  149.573909][   T34] Call Trace:
[  149.573915][   T34]  <TASK>
[  149.573923][   T34]  vpanic+0x56c/0xa60
[  149.573947][   T34]  ? __pfx_vpanic+0x10/0x10
[  149.573972][   T34]  panic+0xc5/0xd0
[  149.573994][   T34]  ? __pfx_panic+0x10/0x10
[  149.574016][   T34]  ? _raw_spin_lock_irqsave+0x40/0x60
[  149.574035][   T34]  ? rcu_is_watching+0x15/0xb0
[  149.574059][   T34]  ? _raw_spin_lock_irqsave+0x40/0x60
[  149.574080][   T34]  ? _raw_spin_lock_irqsave+0x40/0x60
[  149.574100][   T34]  check_panic_on_warn+0x89/0xb0
[  149.574122][   T34]  ? _raw_spin_lock_irqsave+0x40/0x60
[  149.574143][   T34]  end_report+0x73/0x170
[  149.574162][   T34]  ? _raw_spin_lock_irqsave+0x40/0x60
[  149.574187][   T34]  kasan_report+0x128/0x150
[  149.574211][   T34]  ? _raw_spin_lock_irqsave+0x40/0x60
[  149.574235][   T34]  ? rt_mutex_slowunlock+0xbf/0x8b0
[  149.574252][   T34]  __kasan_check_byte+0x2a/0x40
[  149.574270][   T34]  lock_acquire+0x84/0x350
[  149.574292][   T34]  ? preempt_schedule_common+0x82/0xd0
[  149.574310][   T34]  ? preempt_schedule_thunk+0x16/0x40
[  149.574336][   T34]  ? rcu_is_watching+0x15/0xb0
[  149.574361][   T34]  _raw_spin_lock_irqsave+0x40/0x60
[  149.574379][   T34]  ? rt_mutex_slowunlock+0xbf/0x8b0
[  149.574395][   T34]  rt_mutex_slowunlock+0xbf/0x8b0
[  149.574414][   T34]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  149.574432][   T34]  ? __rcu_read_unlock+0x83/0xe0
[  149.574451][   T34]  ? rt_spin_unlock+0x160/0x200
[  149.574469][   T34]  shrink_dcache_tree+0x30e/0x410
[  149.574488][   T34]  ? __pfx_select_collect+0x10/0x10
[  149.574512][   T34]  ? __pfx_shrink_dcache_tree+0x10/0x10
[  149.574538][   T34]  ? shmem_unlink+0x1d4/0x250
[  149.574559][   T34]  vfs_rmdir+0x43c/0x6f0
[  149.574582][   T34]  devtmpfs_work_loop+0xb7e/0xdf0
[  149.574608][   T34]  ? __pfx_devtmpfs_work_loop+0x10/0x10
[  149.574635][   T34]  ? do_raw_spin_unlock+0xf5/0x210
[  149.574655][   T34]  ? try_to_wake_up+0x863/0x1450
[  149.574681][   T34]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  149.574704][   T34]  devtmpfsd+0x4d/0x50
[  149.574722][   T34]  kthread+0x388/0x470
[  149.574742][   T34]  ? __pfx_devtmpfsd+0x10/0x10
[  149.574760][   T34]  ? __pfx_kthread+0x10/0x10
[  149.574780][   T34]  ret_from_fork+0x514/0xb70
[  149.574810][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  149.574830][   T34]  ? __switch_to+0xc79/0x1410
[  149.574849][   T34]  ? __pfx_kthread+0x10/0x10
[  149.574869][   T34]  ret_from_fork_asm+0x1a/0x30
[  149.574899][   T34]  </TASK>
[  149.575159][   T34] Kernel Offset: disabled