last executing test programs:

18m13.915722441s ago: executing program 2 (id=361):
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x4)
fsopen(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000880)='27', 0x2)
getdents(r0, 0x0, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000008c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000049ff0000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x590)

18m13.107904167s ago: executing program 2 (id=368):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
futex_waitv(&(0x7f0000001140)=[{0x0, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)

18m9.72168998s ago: executing program 2 (id=382):
r0 = inotify_init()
openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x20000, 0x105)
inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x449)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2d, &(0x7f00000006c0)=0xb1e0, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', <r6=>0x0})
capset(&(0x7f0000000700)={0x20080522}, 0x0)
r7 = syz_open_dev$sg(&(0x7f0000000780), 0x5dc, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000007c0)={0x0, 0x8, 0xa6})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000)
read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc008011}, 0x20000000)

18m9.38573417s ago: executing program 2 (id=385):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x4000000, &(0x7f00000000c0)={0x11, 0x9, 0x0, 0x1, 0x0, 0x0, @random="c839285e955c"}, 0x14)

18m8.794246197s ago: executing program 2 (id=390):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x604e054)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000f40)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000f80)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002e40)=""/102368, 0x18fe0)
r3 = fsopen(&(0x7f0000000340)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='addr\x00', &(0x7f00000003c0)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000440)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000480)='vers\x00', &(0x7f00000004c0)='3\x00', 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r6, 0x1, 0x30bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000580)='timeo\x00Ms\xac\xc6Md5\xf5IU\xd5\xed\x9a\xc0{R\xbe\xbf\x93\x88\xd7E\xf9\xff\xff\xff\xd2\xedQQ\xca4\x95N)c]>\x0f$*\xc0\x93?T\xc7HF\xe5pI\xb8>x}\x9f8\x8bT\xf3\xda|)[{\xa5\x97\xef\x86\r\xb7\xc5\xbed\x85\xf2\xbf\'\n\xd5s\xdd\xdbh\xc5\xe9)\xe3\xd8\xfd\xc2E\xec\xc7\b\xf4\t\x8b\xb8\x9e\xf7\xff[\xccmb\xe6}\xde\xc7\xf7\xc7\xe4h\xa2\x9b\xc3\\\x97/\xb5Y\xeehD{\xa4\x88\xd7g\x82\xae\x15^\x02\xd6\xaaeW\xb6\x81\x8dq~W\xec\xf8G\xd0mf\xf1z\xb8hG\xd8SN', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

18m6.775853598s ago: executing program 2 (id=391):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x4, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1})
write$tun(r0, &(0x7f00000002c0)=ANY=[], 0x4a)

17m50.457576905s ago: executing program 32 (id=391):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x4, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1})
write$tun(r0, &(0x7f00000002c0)=ANY=[], 0x4a)

14m54.42492114s ago: executing program 3 (id=703):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setns(0xc9, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x4008860)
pipe2(&(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x80000)
splice(r2, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x0)

14m53.404922247s ago: executing program 3 (id=705):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0xc5)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000038c0)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000003900)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000003940), 0x0, 0x0)
read$msr(r2, &(0x7f0000003980)=""/102392, 0x18ff8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f000001c980)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f000001c9c0), 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r4 = gettid()
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f000001ca40), 0x8000)
read(r5, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f000001cb80)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0x40045304, 0x0)
tkill(r4, 0x7)
write$UHID_INPUT(r0, &(0x7f00000007c0)={0xfc, {"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", 0x1000}}, 0x1006)

14m48.335015922s ago: executing program 3 (id=715):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setns(0xc9, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x4008860)
pipe2(&(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x80000)
splice(r2, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x0)

14m44.972429375s ago: executing program 3 (id=721):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r2, &(0x7f0000000540)="94", 0x1)
vmsplice(r3, &(0x7f0000000580)=[{&(0x7f00000005c0)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f00000006c0)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r1, r3, 0x8f5, 0x0)

14m40.459708115s ago: executing program 3 (id=728):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0xc5)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000003840)=0x7)
setrlimit(0xa, &(0x7f0000003880)={0x9, 0x6})
sched_setscheduler(0x0, 0x2, &(0x7f00000038c0)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000003900)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000003940), 0x0, 0x0)
read$msr(r1, &(0x7f0000003980)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f000001c980)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
write(r2, &(0x7f000001c9c0), 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r3 = gettid()
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0x40045304, 0x0)
tkill(r3, 0x7)
write$UHID_INPUT(r0, &(0x7f00000007c0)={0xfc, {"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", 0x1000}}, 0x1006)

14m36.908131228s ago: executing program 3 (id=732):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000c00)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setrlimit(0x4, &(0x7f0000000cc0)={0x5, 0x291})
connect$unix(r0, &(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000d80), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000dc0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000e00)=0x2)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil)
r2 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000e40))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000e80)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x86)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x0)
unlinkat(r5, &(0x7f0000000f00)='./file0\x00', 0x200)
fsopen(&(0x7f0000000f40)='cgroup2\x00', 0x0)
mkdir(&(0x7f0000000fc0)='./trace\x00', 0x1ff)

14m21.063256913s ago: executing program 33 (id=732):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000c00)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setrlimit(0x4, &(0x7f0000000cc0)={0x5, 0x291})
connect$unix(r0, &(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000d80), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000dc0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000e00)=0x2)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil)
r2 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000e40))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000e80)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x86)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x0)
unlinkat(r5, &(0x7f0000000f00)='./file0\x00', 0x200)
fsopen(&(0x7f0000000f40)='cgroup2\x00', 0x0)
mkdir(&(0x7f0000000fc0)='./trace\x00', 0x1ff)

13m50.603655151s ago: executing program 5 (id=802):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x2c, 0x0, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x7e}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0x80, "70609753da30ab84794b00228c76a7782f7171ee6f89951a0cbcb3f08b9f507d0fa04d069a951c5570906475df966f532aae28a3e227ac077b86697617d24fb145c7392f064f3906dad13feabdd34d369d0354cd030788381b38f4fce07a8690dad2d0d41a406d15dd069b6d1a9c33186ae8d828077727e5671a8da7add2d146"}, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0)

13m49.530827003s ago: executing program 5 (id=805):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000001640)="71c11dec6dafbd72", 0x8}, {0x0}], 0x2)

13m48.332793608s ago: executing program 5 (id=807):
socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000007380)=0x3, 0x4)
sendto(r6, &(0x7f00000073c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r7 = dup(r5)
syz_ublk_setup_queues(r7, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0)

13m45.185837862s ago: executing program 5 (id=813):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYBLOB="04000100040001000400"], 0x460}}, 0x0)

13m36.958495324s ago: executing program 5 (id=823):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x24, &(0x7f00000001c0)={0x0, 0x2, 0x407, 0x8})
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000340), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000400)={'vcan0\x00'})
setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f00000004c0), 0x4)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@ipv6_delrule={0x24, 0x21, 0x121, 0x0, 0x1, {0xa, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}]}, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r8 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x1, r8})
close(0x3)

13m35.07327399s ago: executing program 5 (id=826):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@my=0x1})
open(&(0x7f0000000140)='./file1\x00', 0x108842, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000380), 0x4000087, 0x2, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, 0x0, 0x0)
listen(r4, 0x1)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, &(0x7f00000003c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
listen(r5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000440)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x16b, 0x4)

13m19.564067274s ago: executing program 34 (id=826):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@my=0x1})
open(&(0x7f0000000140)='./file1\x00', 0x108842, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000380), 0x4000087, 0x2, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, 0x0, 0x0)
listen(r4, 0x1)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, &(0x7f00000003c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
listen(r5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000440)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x16b, 0x4)

9m29.681310848s ago: executing program 4 (id=1229):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/36, @ANYRES32=r1, @ANYBLOB="010000"], 0x40)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000007140)=[{{&(0x7f0000000e40)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000ec0)=""/117, 0x75}, {&(0x7f0000000f40)=""/121, 0x79}, {&(0x7f0000000fc0)=""/172, 0xac}], 0x3, &(0x7f00000010c0)=""/25, 0x19}, 0x6}, {{&(0x7f0000001100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001180)=""/159, 0x9f}, {&(0x7f0000001240)=""/69, 0x45}, {&(0x7f00000012c0)=""/223, 0xdf}, {&(0x7f00000013c0)=""/153, 0x99}, {&(0x7f0000001600)=""/40, 0x28}, {0x0}], 0x6, &(0x7f0000001780)=""/187, 0xbb}, 0x8}, {{&(0x7f0000001840)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002900)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003900)=""/148, 0x94}, {&(0x7f00000039c0)=""/93, 0x5d}], 0x2, &(0x7f0000003a80)=""/12, 0xc}, 0x9}, {{&(0x7f0000003ac0)=@qipcrtr, 0x80, &(0x7f0000007040)=[{&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)=""/192, 0xc0}, {&(0x7f0000004c00)=""/218, 0xda}, {0x0}, {&(0x7f0000005d00)=""/198, 0xc6}, {&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000006ec0)=""/214, 0xd6}, {&(0x7f0000006fc0)=""/2, 0x2}, {&(0x7f0000007000)}], 0x9, &(0x7f0000007100)=""/58, 0x3a}, 0x2}], 0x5, 0x140, &(0x7f0000007280)={0x77359400})
getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000780)=""/177, &(0x7f0000000840)=0xb1)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00\r'], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0xa, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4000}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000a40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$inet6(0xa, 0x80000, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x7)

9m26.814819947s ago: executing program 4 (id=1233):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x2, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1004, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x2008800, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000000500)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000002540)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004600)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004640)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x24414809, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x8, 0x4}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f00000046c0)='./file0\x00', 0x40042, 0x13)
close(r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004700)='./file0\x00', 0x2c45, 0x0)
flock(r2, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000004740)='./file0\x00', 0x0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(0x3)

9m26.122319463s ago: executing program 4 (id=1234):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000400)={[0x8000, 0x1000000003, 0x1ffffffffffd, 0x5, 0x2d391, 0x3da0000000000, 0x2004cb, 0x80001000, 0xa7c, 0x3, 0x5, 0x9, 0x9, 0x0, 0xfffffffffffffffd, 0x5], 0xeeee8000, 0xa02})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

9m22.230285999s ago: executing program 4 (id=1238):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$tmpfs(0x0, &(0x7f00000006c0)='./file0/../file0\x00', &(0x7f0000000700), 0x0, 0x0)
umount2(&(0x7f0000000740)='./file0/../file0\x00', 0x0)

9m21.975842568s ago: executing program 4 (id=1239):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x2, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1004, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x2008800, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000000500)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000002540)="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", 0x2000, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004600)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004640)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x24414809, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x8, 0x4}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f00000046c0)='./file0\x00', 0x40042, 0x13)
close(r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004700)='./file0\x00', 0x2c45, 0x0)
flock(r2, 0x5)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004740)='./file0\x00', 0x0, 0x80)
dup3(r3, r2, 0x0)
close(0x3)

9m18.940006849s ago: executing program 4 (id=1245):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="040001000400010004"], 0x460}}, 0x0)

9m18.350518389s ago: executing program 35 (id=1245):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="040001000400010004"], 0x460}}, 0x0)

4m1.335840341s ago: executing program 0 (id=1745):
socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000007380)=0x3, 0x4)
sendto(0xffffffffffffffff, &(0x7f00000073c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000007400)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000007440)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0)

4m0.114255804s ago: executing program 0 (id=1746):
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x183341, 0x198)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x14, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000740), &(0x7f0000000000)=r1}, 0x20)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f00000008c0)=ANY=[], 0x0)

3m59.047261589s ago: executing program 0 (id=1749):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x24, &(0x7f00000001c0)={0x0, 0x2, 0x407, 0x8})
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000380), 0x10106, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00'})
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000004c0), 0x4)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000500)={0x10000, 0x1000, 0x8})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@ipv6_delrule={0x24, 0x21, 0x121, 0x0, 0x1, {0xa, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}]}, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r4 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x1, r4})

3m58.57525754s ago: executing program 0 (id=1750):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x1000}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x5, 0xe, 0x0, &(0x7f0000000540)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000580)={'veth1_to_batadv\x00', &(0x7f0000000780)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x88, 0x0, 0xffb, 0x7, 0xb6b, 0x10000000, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0x3, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x1, 0x100000, 0x2, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0x7, 0x40, 0x2, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x2, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x10001, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x8, 0x80180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x40000000, 0x800, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xffffffff, 0x84, 0x100, 0xffffffff, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffc, 0x43, 0x2, 0x5, 0x8, 0x1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1f8, 0x1ff, 0xffffffff]}})
poll(&(0x7f00000009c0), 0x20000000000000b5, 0x9)
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r2, 0xffffffffffffffff, 0xc}, 0x14)
syz_emit_ethernet(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000a00)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
sendto$inet(0xffffffffffffffff, &(0x7f0000000cc0)="ab", 0x1, 0x0, &(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='4', 0x1}, {0x0}], 0x2, &(0x7f0000000e00)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41, 0xc0, 0x2}}], 0x20, 0x2406c804}, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b80)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

3m56.940642711s ago: executing program 0 (id=1756):
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpu.stat\x00', 0x275a, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x183341, 0x198)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x14, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000740), &(0x7f0000000000)=r1}, 0x20)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f00000008c0)=ANY=[], 0x0)

3m56.617251743s ago: executing program 0 (id=1757):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0)
close(r1)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801)

3m41.348710651s ago: executing program 36 (id=1757):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0)
close(r1)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801)

2m21.524460988s ago: executing program 1 (id=1882):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000500)="ebe3a0e9796cfd1647e299f4e376fdba128a80b372219d205e81f4a7fe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304800"/77, 0x4d}, {&(0x7f0000000a80)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000b80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="909dc1c3675eb8723b6ee9e156b29fc6a367df20c38952998c96773f6855d456eaade580f190ccd14cc073811ee5463236d9c025e46bbe64fa", 0x39}, {&(0x7f0000000c80)="8b46d247c33cdfb412caf14bf7fa8ab46a4fb7d3106ac7e5", 0x18}, {&(0x7f0000000cc0)="a64d68f1f40aa88bcb1baf793401dcb6a92c7366dba6ad65fd1ae778afcc295091b6d37f0f20a7f95fa21f8191741067fd072ea8086e664f63ddaf4e85d26fcdc40779368a181fc5362fb32ffc8eaee8407e5be330b4b8c09ab60395c8344f94524047f1af26861b5c8aea", 0x6b}, {&(0x7f0000000d40)="a834a2f966bb056d7c4fafe3d3816be86d5269bdafbb5f155b19ae7adde6d4b0bdbb27ea979f787ed07e99bd281117d34c20d9b40cb3ef2a37952e415e6c40f41550f6af6c8688ffc551cc3dce5556e48d26117989403064ebaa7060dd754152a04e0fcb75c7a05ddd31bc61c3fcde9ef36e1ded6c97da21549ae3f86f2fb66ff05ff0ec4d50d60d66dc3197", 0x8c}, {&(0x7f0000000e00)="6d7bbc790240b441bba9be", 0xb}, {&(0x7f0000000e40)="3da6a84ccd3c8245db15e800bbe07f2f491b92f6a8f1132a6ef8842605", 0x1d}], 0x6, &(0x7f0000000e80)=[@iv={0xc8, 0x117, 0x2, 0xaf, "8582c4726ce8aabc28b2027b2273132788a86ed96469477554a99366ca592173dc4d85e73eb2dc8dac1de57fc69aa554a6ea86af73faeb957c912c3c34da91eb02b469ef54c7efcc2794d2c07dcd1714c3d02fe7d71c9721693e5642aa365c35b019b79447fd816ad19a7be917efb1e551e9d4d3a869b8b6d0ab1dbb56fe5638da7cc93a0748a30c3dcc7b01a1def00fe3027ede27d6462a2e4ef2c057690ab8c33451572c6fca02755c1519ede75f"}], 0xc8, 0x841}], 0x2, 0x40800)
recvmsg(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001000)=""/60, 0xffffffda}, {&(0x7f00000020c0)=""/4085, 0x1000}, {&(0x7f0000000000)=""/221, 0xec}, {&(0x7f0000000180)=""/36, 0x24}], 0x4}, 0x20)

2m20.513669761s ago: executing program 1 (id=1884):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="2c0023800500130001000000080014"], 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x4040040)

2m19.888236841s ago: executing program 1 (id=1888):
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000ed0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r3 = socket$inet6(0xa, 0x3, 0x3c)
writev(r3, &(0x7f0000000640)=[{&(0x7f0000000680)="06c3", 0x2}, {&(0x7f00000006c0)="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", 0x600}, {&(0x7f0000000cc0)="4c7911315ed07e13be5391e38b57247dcbfa424aaec74724dd2da16f11eb", 0x1e}], 0x3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan0\x00', <r4=>0x0})
r5 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000d40)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000e40)={'wlan0\x00', 0x1})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0)

2m14.183403038s ago: executing program 1 (id=1897):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
writev(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan0\x00', <r2=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0)

2m13.83565482s ago: executing program 1 (id=1900):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x40010, r1, 0x9fd3e000)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./tracing\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000880)={0x1, &(0x7f00000008c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2m10.420275223s ago: executing program 1 (id=1901):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r1 = getpid()
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000006c0)={@mcast2, @empty, @local, 0x1ff, 0x40, 0x6, 0x0, 0x1, 0x40001})
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000280), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x8000, 0xfffffffc)
faccessat(0xffffffffffffff9c, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000240), 0x4)
mount$9p_fd(0x0, &(0x7f0000000500)='.\x00', &(0x7f0000000540), 0x52840, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESDEC=r0, @ANYBLOB="2c0025496c49098c65d0ea6f23108c0f44063eb5d0f44451f44f70148e8e5b9392043b471562ea6b9baf0b566552097f4aeb6bf90a2ab2bd43b4e271e7400cbdf94b270ee2567d9022881c25b43c5ae74de544ada705a0624dbd2dd560ac4fd7d2be798e379cc00ed4e7c35c740a1a311a8cbf"])
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008c000000b70000000100000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m7.193962709s ago: executing program 6 (id=2027):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c40000001300010400000000000000000000000000000000000000000000000100250c0000000000000000000000000112341234000000000a00804000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000)
sendto$inet6(r1, 0x0, 0x36, 0x0, &(0x7f00000001c0)={0xa, 0x1234, 0x0, @loopback, 0x2000}, 0x1c)

1m6.675881732s ago: executing program 6 (id=2028):
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x20)
bind$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1m5.966377479s ago: executing program 6 (id=2032):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580))
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x64e98, 0xb6a0d}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x48092)

1m5.566768722s ago: executing program 6 (id=2035):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0))
r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ftruncate(r1, 0x8008976)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_usb_connect(0x3, 0x32, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000480)=[{0xffffffff, 0x4, 0x6, 0x6}, {0x2, 0x5, 0x2, 0x8}, {0x5, 0x4, 0x3, 0x6}], 0x10, 0x4}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8008010)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001fcffffffffffff00"/49], 0xb8}}, 0x2c000010)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x2c000010)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, &(0x7f0000000300))
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

1m1.687951248s ago: executing program 6 (id=2046):
openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44d0)
openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0)
syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x2b73, 0x3c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xb2, 0x80, 0x7, {0x8, 0xb, 0x0, 0x1, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x8, 0x14, {0x8, 0x25, 0x1, 0x0, 0x3, 0x10, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xff, 0x8, 0x96, {0x8, 0x25, 0x1, 0x2, 0xf, 0x1}}}}}}}}]}}, 0x0)

59.757420826s ago: executing program 6 (id=2050):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
recvmmsg(r0, &(0x7f0000001640)=[{{&(0x7f0000000300)=@xdp, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000380)=""/138}, {&(0x7f0000000440)=""/122}, {&(0x7f0000000540)=""/60}, {&(0x7f0000000580)=""/48}, {&(0x7f00000005c0)=""/4086}]}, 0x100}], 0xefac5e4abd76da, 0x0, 0x0)

44.558777527s ago: executing program 37 (id=2050):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
recvmmsg(r0, &(0x7f0000001640)=[{{&(0x7f0000000300)=@xdp, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000380)=""/138}, {&(0x7f0000000440)=""/122}, {&(0x7f0000000540)=""/60}, {&(0x7f0000000580)=""/48}, {&(0x7f00000005c0)=""/4086}]}, 0x100}], 0xefac5e4abd76da, 0x0, 0x0)

10.229016247s ago: executing program 9 (id=2187):
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00', @in6=@empty, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x0, 0xff}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffe}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)

7.89196006s ago: executing program 9 (id=2194):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x40, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="401001"], 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000140)="9001000000000000")
read$char_usb(r2, &(0x7f0000001640)=""/243, 0xf3)

7.460084257s ago: executing program 8 (id=2195):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
recvmsg$unix(r0, 0x0, 0x40010120)
socket$packet(0x11, 0x3, 0x300)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_setup(0xf00, &(0x7f00000008c0)={0x0, 0xd4ad, 0x10000, 0x0, 0x4e}, 0x0, 0x0, &(0x7f00000009c0))
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x3, 0x10d}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x80, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e48, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000840)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xffb9, 0x4, 0x0, 0x0}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r8 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0, &(0x7f0000000300)=<r11=>0x0)
syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r12=>0x0)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
r14 = dup(r13)
syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x20fb87, 0x400, 0xfffffffd, 0x12b}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0)
connect$l2tp6(r14, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r15=>0xffffffffffffffff})
recvmmsg(r15, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/71, 0x47}, 0x4}], 0x1, 0x40000002, 0x0)

5.449333974s ago: executing program 8 (id=2198):
syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x98)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x48000, 0x10b)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000480)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2000c844)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004)
sendto$inet(r0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0)

5.287087279s ago: executing program 7 (id=2199):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8a, 0x101})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents(r1, &(0x7f00000001c0)=""/81, 0x51)

5.084069185s ago: executing program 8 (id=2200):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x61ab02)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x8100, 0x5a)
r2 = openat$cgroup_int(r1, &(0x7f0000000300)='cpu.idle\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x80)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000002060102000000000060000000000000050000001000030062697870d063de9cfada746d61703a706f72740005000100070000000000000000000000000000000000000007795fae899f3117cbb7d3b3c17f8ac95e54787a555f23fb2cdd6e9114ba3705df30e20478b5abbea376f7d4c200d003be4f5d796e9f071d1df8e6471fe81596b76066a3cb19c7dd1f210264f418127d4e1ed8041d1b0ee2394d0f99"], 0x48}}, 0x8080)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r6 = eventfd(0x80000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x24000000)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000400)={0x48})
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000480)={0xc})
ioctl(r7, 0x3b90, &(0x7f00000004c0)="2800000000000000efbeadde0300000005")
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r6)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff})

5.046812203s ago: executing program 7 (id=2201):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@hyper, 0x6})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x1})

4.656199563s ago: executing program 7 (id=2202):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x2000000)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1000, 0x0, 0x0, {<r1=>0x0, {'syz', 0x0, '0\x00'}}})
ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x80000, 0x0, 0x0, @by_dev={r1}, {0x8, @core='@cancel_deferred_remove'}})

4.227101926s ago: executing program 7 (id=2203):
r0 = syz_open_dev$dvb_dvr(&(0x7f00000001c0), 0x0, 0x40)
readv(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/222, 0xde}], 0x1)

4.159918505s ago: executing program 8 (id=2204):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={<r1=>0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000780)={r1, @in6={{0xa, 0x4e20, 0x3, @private1, 0xcda}}}, &(0x7f0000000840)=0x84)

4.005941866s ago: executing program 9 (id=2205):
r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0x2ffc, 0x72cac2621a8481aa, &(0x7f00000000c0)}]})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x1, r1})

3.915736018s ago: executing program 8 (id=2206):
syz_emit_ethernet(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x40000000015, 0x805, 0x0)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000005c0)={r3, r3, 0x7, 0x0, 0x0, 0xe, 0x9c, 0x8, 0x9, 0x3, 0x2, 0x9, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000680)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
getsockopt(r1, 0x114, 0x271f, 0x0, &(0x7f0000019a80))
r4 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)

3.907937076s ago: executing program 7 (id=2207):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r3 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, 0x0, 0x800)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0)
read$msr(r2, &(0x7f00000002c0)=""/102392, 0x18ff8)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x210001)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000019640)=ANY=[@ANYBLOB="02000000040000000400000022bf"], 0x48)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x573f1000)

1.740215268s ago: executing program 7 (id=2208):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
rt_sigprocmask(0x0, &(0x7f0000003380)={[0xffffffffffffffff]}, 0x0, 0x8)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000080)={0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.603628061s ago: executing program 9 (id=2209):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8a, 0x101})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents(r1, &(0x7f00000001c0)=""/81, 0x51)

280.701926ms ago: executing program 9 (id=2210):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@hyper, 0x6})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x1})

53.559139ms ago: executing program 8 (id=2211):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f00000005c0)="8c", 0x1)

0s ago: executing program 9 (id=2212):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffffffff, 0x61ab02)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x8100, 0x5a)
r2 = openat$cgroup_int(r1, &(0x7f0000000300)='cpu.idle\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x80)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000002060102000000000060000000000000050000001000030062697870d063de9cfada746d61703a706f72740005000100070000000000000000000000000000000000000007795fae899f3117cbb7d3b3c17f8ac95e54787a555f23fb2cdd6e9114ba3705df30e20478b5abbea376f7d4c200d003be4f5d796e9f071d1df8e6471fe81596b76066a3cb19c7dd1f210264f418127d4e1ed8041d1b0ee2394d0f99"], 0x48}}, 0x8080)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r6 = eventfd(0x80000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x24000000)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000400)={0x48})
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000480)={0xc})
ioctl(r7, 0x3b90, &(0x7f00000004c0)="2800000000000000efbeadde0300000005")
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r6)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff})

kernel console output (not intermixed with test programs):

cc 0x1001 length: 249 > 9
[ 1032.114198][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1032.132508][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1032.994862][T10104] Bluetooth: hci0: command tx timeout
[ 1034.209408][T10104] Bluetooth: hci3: command tx timeout
[ 1035.079488][T10104] Bluetooth: hci0: command tx timeout
[ 1035.667853][T13615] rxe_eth0 speed is unknown, defaulting to 1000
[ 1036.429452][T10104] Bluetooth: hci3: command tx timeout
[ 1036.638694][T13662] rxe_eth0 speed is unknown, defaulting to 1000
[ 1038.202805][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'.
[ 1038.512330][T10104] Bluetooth: hci3: command tx timeout
[ 1038.983535][T13575] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1038.983804][T13575] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1038.984124][T13575] bridge_slave_0: entered allmulticast mode
[ 1038.986109][T13575] bridge_slave_0: entered promiscuous mode
[ 1039.130766][T11884] bridge_slave_1: left allmulticast mode
[ 1039.130798][T11884] bridge_slave_1: left promiscuous mode
[ 1039.130976][T11884] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1039.300389][T11884] bridge_slave_0: left allmulticast mode
[ 1039.300421][T11884] bridge_slave_0: left promiscuous mode
[ 1039.300635][T11884] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1039.764859][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'.
[ 1040.099797][T11884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1040.229776][T11884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1040.311018][T11884] bond0 (unregistering): Released all slaves
[ 1040.370382][T13575] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1040.370575][T13575] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1040.370781][T13575] bridge_slave_1: entered allmulticast mode
[ 1040.373972][T13575] bridge_slave_1: entered promiscuous mode
[ 1040.589160][T10104] Bluetooth: hci3: command tx timeout
[ 1040.844130][T13575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1040.952083][T13575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1042.543112][T13575] team0: Port device team_slave_0 added
[ 1043.056423][T11884] hsr_slave_0: left promiscuous mode
[ 1043.093912][T11884] hsr_slave_1: left promiscuous mode
[ 1043.094914][T11884] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1043.133911][T11884] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1044.361214][T11884] team0 (unregistering): Port device team_slave_1 removed
[ 1044.450718][T11884] team0 (unregistering): Port device team_slave_0 removed
[ 1046.881892][T13575] team0: Port device team_slave_1 added
[ 1047.143783][T13615] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1047.144007][T13615] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1047.144227][T13615] bridge_slave_0: entered allmulticast mode
[ 1047.170228][T13615] bridge_slave_0: entered promiscuous mode
[ 1047.257159][T13615] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1047.257326][T13615] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1047.257554][T13615] bridge_slave_1: entered allmulticast mode
[ 1047.284632][T13615] bridge_slave_1: entered promiscuous mode
[ 1047.293646][T13575] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1047.293716][T13575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1047.293797][T13575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1047.473104][T13575] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1047.473126][T13575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1047.473157][T13575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1047.867497][T13615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1047.896621][T13662] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1047.896759][T13662] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1047.896951][T13662] bridge_slave_0: entered allmulticast mode
[ 1047.900979][T13662] bridge_slave_0: entered promiscuous mode
[ 1047.947726][T13615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1047.955619][T13662] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1047.955951][T13662] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1047.956485][T13662] bridge_slave_1: entered allmulticast mode
[ 1047.980384][T13662] bridge_slave_1: entered promiscuous mode
[ 1048.849856][T13615] team0: Port device team_slave_0 added
[ 1048.879056][T13575] hsr_slave_0: entered promiscuous mode
[ 1048.881319][T13575] hsr_slave_1: entered promiscuous mode
[ 1048.883592][T13575] debugfs: 'hsr0' already exists in 'hsr'
[ 1048.883618][T13575] Cannot create hsr debugfs directory
[ 1048.958532][T13662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1048.991586][T13615] team0: Port device team_slave_1 added
[ 1049.033582][T13662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1049.835533][T13615] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1049.835553][T13615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1049.835578][T13615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1050.060543][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1645'.
[ 1050.083342][T13662] team0: Port device team_slave_0 added
[ 1050.350568][ T5261] 8021q: adding VLAN 0 to HW filter on device eth17
[ 1050.352309][T13615] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1050.352329][T13615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1050.352358][T13615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1051.317421][T13662] team0: Port device team_slave_1 added
[ 1051.513690][T13662] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1051.513711][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1051.513740][T13662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1051.638049][T13662] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1051.638071][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1051.638098][T13662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1053.502988][T13615] hsr_slave_0: entered promiscuous mode
[ 1053.507607][T13615] hsr_slave_1: entered promiscuous mode
[ 1053.526410][T13615] debugfs: 'hsr0' already exists in 'hsr'
[ 1053.526491][T13615] Cannot create hsr debugfs directory
[ 1054.172898][T13662] hsr_slave_0: entered promiscuous mode
[ 1054.173968][T13662] hsr_slave_1: entered promiscuous mode
[ 1054.176221][T13662] debugfs: 'hsr0' already exists in 'hsr'
[ 1054.176243][T13662] Cannot create hsr debugfs directory
[ 1058.602537][ T5261] 8021q: adding VLAN 0 to HW filter on device eth18
[ 1061.313074][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'.
[ 1061.450949][T13880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1659'.
[ 1066.369264][T11884] bridge_slave_1: left allmulticast mode
[ 1066.369333][T11884] bridge_slave_1: left promiscuous mode
[ 1066.369515][T11884] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1066.500469][T11884] bridge_slave_0: left allmulticast mode
[ 1066.500494][T11884] bridge_slave_0: left promiscuous mode
[ 1066.500673][T11884] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1066.658414][T13983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1675'.
[ 1066.752268][T11884] bridge_slave_1: left allmulticast mode
[ 1066.752296][T11884] bridge_slave_1: left promiscuous mode
[ 1066.752471][T11884] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1066.911599][T11884] bridge_slave_0: left allmulticast mode
[ 1066.911628][T11884] bridge_slave_0: left promiscuous mode
[ 1066.911807][T11884] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1067.350411][T11884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1067.473071][T11884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1067.533897][T11884] bond0 (unregistering): Released all slaves
[ 1067.874520][T11884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1067.952462][T11884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1068.010791][T11884] bond0 (unregistering): Released all slaves
[ 1068.036013][ T5261] 8021q: adding VLAN 0 to HW filter on device eth17
[ 1068.594437][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'.
[ 1069.326791][T14012] netlink: 'syz.1.1682': attribute type 1 has an invalid length.
[ 1069.389351][T14015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'.
[ 1069.505161][T14012] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1069.573697][T14015] bridge1: entered promiscuous mode
[ 1069.603986][T14015] bond3: (slave bridge1): making interface the new active one
[ 1069.605762][T14015] bond3: (slave bridge1): Enslaving as an active interface with an up link
[ 1069.953962][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[ 1069.954033][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[ 1071.029755][T11884] hsr_slave_0: left promiscuous mode
[ 1071.070019][T11884] hsr_slave_1: left promiscuous mode
[ 1071.071211][T11884] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1071.119950][T11884] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1071.332303][T11884] hsr_slave_0: left promiscuous mode
[ 1071.372948][T11884] hsr_slave_1: left promiscuous mode
[ 1071.375898][T11884] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1071.411123][T11884] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1072.319680][T11884] team0 (unregistering): Port device team_slave_1 removed
[ 1072.380104][T11884] team0 (unregistering): Port device team_slave_0 removed
[ 1073.079708][T11884] team0 (unregistering): Port device team_slave_1 removed
[ 1073.129685][T11884] team0 (unregistering): Port device team_slave_0 removed
[ 1073.520892][T14085] Bluetooth: MGMT ver 1.23
[ 1073.732671][T14091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1699'.
[ 1074.306340][T13575] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1074.535928][T13575] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1074.605928][T13575] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1074.717798][T13575] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1074.723497][T13575] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1074.821695][T13575] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1074.943517][T13575] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1074.962438][T13575] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1075.318275][T13615] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1075.539934][T13615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1075.596510][T13615] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1075.649762][T13615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1075.729113][T13615] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1075.779344][T13615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1077.258669][T13615] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1077.322529][T13615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1077.545480][T13575] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1077.851931][T13575] 8021q: adding VLAN 0 to HW filter on device team0
[ 1077.975288][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1077.975509][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1078.046246][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1078.046412][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1078.112589][T13662] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1078.143198][T13662] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1078.145621][T13662] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1078.211666][T13662] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1078.221947][T13662] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1078.263488][T13662] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1078.294178][T13662] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1078.366126][T13662] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1078.867769][T13615] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1078.998368][T13615] 8021q: adding VLAN 0 to HW filter on device team0
[ 1079.154801][  T584] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1079.155818][  T584] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1079.266587][  T584] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1079.311610][  T584] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1079.470006][T13662] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1079.572400][T13662] 8021q: adding VLAN 0 to HW filter on device team0
[ 1079.680056][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1079.680190][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1079.746992][T11885] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1079.748331][T11885] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1083.397555][T13615] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1083.647862][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1083.687533][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1083.710804][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1083.715614][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1083.716744][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1084.514808][T13662] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1086.155507][ T5615] Bluetooth: hci4: command tx timeout
[ 1086.864229][T10104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1086.917734][T10104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1086.932791][T10104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1086.933955][T10104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1086.935027][T10104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1087.424593][T14196] rxe_eth0 speed is unknown, defaulting to 1000
[ 1088.188955][T10104] Bluetooth: hci4: command tx timeout
[ 1088.255237][T13662] veth0_vlan: entered promiscuous mode
[ 1088.395030][T13662] veth1_vlan: entered promiscuous mode
[ 1088.451241][T14241] rxe_eth0 speed is unknown, defaulting to 1000
[ 1088.993623][T10104] Bluetooth: hci0: command tx timeout
[ 1089.107101][T13662] veth0_macvtap: entered promiscuous mode
[ 1089.304470][T13662] veth1_macvtap: entered promiscuous mode
[ 1089.487690][T14294] netlink: 'syz.0.1733': attribute type 4 has an invalid length.
[ 1089.739111][ T1513] bridge_slave_1: left allmulticast mode
[ 1089.739149][ T1513] bridge_slave_1: left promiscuous mode
[ 1089.739431][ T1513] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1089.872338][ T1513] bridge_slave_0: left allmulticast mode
[ 1089.872376][ T1513] bridge_slave_0: left promiscuous mode
[ 1089.872631][ T1513] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1090.268984][T10104] Bluetooth: hci4: command tx timeout
[ 1091.817870][T10104] Bluetooth: hci0: command tx timeout
[ 1092.329680][ T1513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1092.409971][ T1513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1092.431321][ T1513] bond0 (unregistering): Released all slaves
[ 1092.543112][T10104] Bluetooth: hci4: command tx timeout
[ 1092.880474][ T5615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1092.911702][ T5615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1092.932214][ T5615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1092.933958][ T5615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1092.934790][ T5615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1093.425135][T14296] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1093.869059][T10104] Bluetooth: hci0: command tx timeout
[ 1094.214782][T14296] geneve2: left promiscuous mode
[ 1094.547951][T14313] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[ 1094.556971][T14312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1095.047688][T14196] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1095.047918][T14196] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1095.048407][T14196] bridge_slave_0: entered allmulticast mode
[ 1095.075060][T14196] bridge_slave_0: entered promiscuous mode
[ 1095.107177][T14196] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1095.107296][T14196] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1095.107468][T14196] bridge_slave_1: entered allmulticast mode
[ 1095.153921][T10104] Bluetooth: hci5: command tx timeout
[ 1095.158080][T14196] bridge_slave_1: entered promiscuous mode
[ 1095.835515][T14196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1095.899462][T14307] rxe_eth0 speed is unknown, defaulting to 1000
[ 1095.931479][T14196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1096.242473][T14196] team0: Port device team_slave_0 added
[ 1096.300596][T14196] team0: Port device team_slave_1 added
[ 1096.616686][T14196] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1096.616706][T14196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1096.616737][T14196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1096.795700][T14196] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1096.795720][T14196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1096.795753][T14196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1097.229036][T10104] Bluetooth: hci5: command tx timeout
[ 1097.558987][T10104] Bluetooth: hci0: command tx timeout
[ 1098.363022][ T1513] hsr_slave_0: left promiscuous mode
[ 1098.400380][ T1513] hsr_slave_1: left promiscuous mode
[ 1098.401744][ T1513] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1098.450225][ T1513] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1099.041802][ T1513] team0 (unregistering): Port device team_slave_1 removed
[ 1099.092276][ T1513] team0 (unregistering): Port device team_slave_0 removed
[ 1099.308950][ T5615] Bluetooth: hci5: command tx timeout
[ 1099.333724][ T5261] 8021q: adding VLAN 0 to HW filter on device eth17
[ 1099.334571][T14373] syzkaller0: entered promiscuous mode
[ 1099.334594][T14373] syzkaller0: entered allmulticast mode
[ 1099.568748][T14196] hsr_slave_0: entered promiscuous mode
[ 1099.577844][T14196] hsr_slave_1: entered promiscuous mode
[ 1099.588305][T14196] debugfs: 'hsr0' already exists in 'hsr'
[ 1099.588328][T14196] Cannot create hsr debugfs directory
[ 1099.599244][T14241] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1099.599399][T14241] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1099.599592][T14241] bridge_slave_0: entered allmulticast mode
[ 1099.637470][T14241] bridge_slave_0: entered promiscuous mode
[ 1099.684177][T14241] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1099.684306][T14241] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1099.684482][T14241] bridge_slave_1: entered allmulticast mode
[ 1099.686309][T14241] bridge_slave_1: entered promiscuous mode
[ 1100.343518][T14241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1100.410158][T14241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1101.389337][ T5615] Bluetooth: hci5: command tx timeout
[ 1101.670752][T14241] team0: Port device team_slave_0 added
[ 1101.701957][T14241] team0: Port device team_slave_1 added
[ 1101.966952][T14241] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1101.966972][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1101.966999][T14241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1102.355265][T14241] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1102.355285][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1102.355311][T14241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1102.720103][T14407] syzkaller0: entered promiscuous mode
[ 1102.720133][T14407] syzkaller0: entered allmulticast mode
[ 1117.287602][T10104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1117.353287][T10104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1117.354767][T10104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1117.355983][T10104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1117.356754][T10104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1118.014882][ T5261] 8021q: adding VLAN 0 to HW filter on device eth18
[ 1118.044782][T14241] hsr_slave_0: entered promiscuous mode
[ 1118.051769][T14241] hsr_slave_1: entered promiscuous mode
[ 1118.063208][T14241] debugfs: 'hsr0' already exists in 'hsr'
[ 1118.063230][T14241] Cannot create hsr debugfs directory
[ 1118.228500][T14451] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1766'.
[ 1119.549286][ T5615] Bluetooth: hci3: command tx timeout
[ 1119.910551][T14307] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1119.910735][T14307] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1119.910895][T14307] bridge_slave_0: entered allmulticast mode
[ 1119.913978][T14307] bridge_slave_0: entered promiscuous mode
[ 1119.958229][T14307] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1119.959299][T14307] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1119.959454][T14307] bridge_slave_1: entered allmulticast mode
[ 1119.962616][T14307] bridge_slave_1: entered promiscuous mode
[ 1121.741131][T10104] Bluetooth: hci3: command tx timeout
[ 1121.867283][T14443] rxe_eth0 speed is unknown, defaulting to 1000
[ 1122.411599][T14307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1122.456913][T14307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1122.947756][T14307] team0: Port device team_slave_0 added
[ 1122.959696][T14477] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1773'.
[ 1122.987395][T14307] team0: Port device team_slave_1 added
[ 1123.361453][T14307] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1123.361472][T14307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1123.361499][T14307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1123.422205][T14307] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1123.422222][T14307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1123.422251][T14307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1123.789973][T10104] Bluetooth: hci3: command tx timeout
[ 1124.132113][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1775'.
[ 1124.204836][T14484] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 1124.392401][T14484] batman_adv: batadv0: Removing interface: syzkaller0
[ 1124.652956][T14307] hsr_slave_0: entered promiscuous mode
[ 1124.654313][T14307] hsr_slave_1: entered promiscuous mode
[ 1124.655180][T14307] debugfs: 'hsr0' already exists in 'hsr'
[ 1124.655215][T14307] Cannot create hsr debugfs directory
[ 1125.869394][T10104] Bluetooth: hci3: command tx timeout
[ 1126.538111][T14494] netlink: 'syz.1.1778': attribute type 4 has an invalid length.
[ 1127.037355][T14443] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1127.037579][T14443] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1127.038126][T14443] bridge_slave_0: entered allmulticast mode
[ 1127.048292][T14443] bridge_slave_0: entered promiscuous mode
[ 1127.839809][T14443] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1127.839932][T14443] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1127.840127][T14443] bridge_slave_1: entered allmulticast mode
[ 1127.843911][T14443] bridge_slave_1: entered promiscuous mode
[ 1127.929314][T14443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1127.930653][ T6869] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1127.930685][ T6869] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1127.965651][T14443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1128.019184][T14443] team0: Port device team_slave_0 added
[ 1128.023087][T14443] team0: Port device team_slave_1 added
[ 1128.183045][T14505] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1780'.
[ 1128.239301][ T1513] bridge_slave_1: left allmulticast mode
[ 1128.239337][ T1513] bridge_slave_1: left promiscuous mode
[ 1128.239594][ T1513] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1128.351710][ T1513] bridge_slave_0: left allmulticast mode
[ 1128.351751][ T1513] bridge_slave_0: left promiscuous mode
[ 1128.352033][ T1513] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1128.609357][ T1513] bridge_slave_1: left allmulticast mode
[ 1128.609395][ T1513] bridge_slave_1: left promiscuous mode
[ 1128.610859][ T1513] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1128.760094][ T1513] bridge_slave_0: left allmulticast mode
[ 1128.760122][ T1513] bridge_slave_0: left promiscuous mode
[ 1128.760299][ T1513] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1129.579690][ T1513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1129.659812][ T1513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1129.682434][ T1513] bond0 (unregistering): Released all slaves
[ 1130.270022][ T1513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1130.349884][ T1513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1130.371420][ T1513] bond0 (unregistering): Released all slaves
[ 1130.412994][T14443] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1130.413015][T14443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1130.413045][T14443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1130.459101][ T5261] 8021q: adding VLAN 0 to HW filter on device eth19
[ 1131.056173][T14443] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1131.056195][T14443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1131.056227][T14443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1131.182637][T14443] hsr_slave_0: entered promiscuous mode
[ 1131.183795][T14443] hsr_slave_1: entered promiscuous mode
[ 1131.185249][T14443] debugfs: 'hsr0' already exists in 'hsr'
[ 1131.185271][T14443] Cannot create hsr debugfs directory
[ 1131.186916][ T6869] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1131.391588][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[ 1131.391656][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[ 1132.579188][   T58] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1132.579230][   T58] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.579618][   T58] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1132.579661][   T58] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1132.579701][   T58] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1132.579729][   T58] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.579769][   T58] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1132.579798][   T58] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.579837][   T58] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1132.711750][T14196] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1132.812887][T14196] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1132.818618][T14196] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1133.108754][T14196] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1133.163251][T14196] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1133.269877][T14196] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1133.272528][ T5261] 8021q: adding VLAN 0 to HW filter on device eth20
[ 1133.660598][T14196] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1133.730574][T14196] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1133.909171][ T1513] hsr_slave_0: left promiscuous mode
[ 1133.960735][ T1513] hsr_slave_1: left promiscuous mode
[ 1133.962033][ T1513] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1134.000456][ T1513] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1134.319220][ T1513] hsr_slave_0: left promiscuous mode
[ 1134.360467][ T1513] hsr_slave_1: left promiscuous mode
[ 1134.361798][ T1513] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1134.410271][ T1513] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1134.501575][ T1513] veth1_macvtap: left promiscuous mode
[ 1134.501699][ T1513] veth0_macvtap: left promiscuous mode
[ 1134.501898][ T1513] veth1_vlan: left promiscuous mode
[ 1134.502029][ T1513] veth0_vlan: left promiscuous mode
[ 1135.429808][ T1513] team0 (unregistering): Port device team_slave_1 removed
[ 1135.471100][ T1513] team0 (unregistering): Port device team_slave_0 removed
[ 1135.969668][ T1513] team0 (unregistering): Port device team_slave_1 removed
[ 1136.020677][ T1513] team0 (unregistering): Port device team_slave_0 removed
[ 1137.816227][T14583] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1787'.
[ 1140.294245][T14196] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1140.386525][T14196] 8021q: adding VLAN 0 to HW filter on device team0
[ 1140.455379][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1140.455528][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1140.495837][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1140.496074][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1142.821383][T14241] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1142.917463][T14241] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1142.977154][T14241] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1143.013121][T14241] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1143.014627][T14241] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1143.215243][T14241] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1143.263811][T14196] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1143.315343][T14241] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1143.421469][T14241] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1144.770317][T14307] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1145.173458][T14307] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1145.196091][T14307] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1145.947671][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1145.992445][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1146.008483][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1146.016768][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1146.019159][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1146.181803][T14307] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1146.298931][T14307] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1146.461825][T14307] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1146.479104][T14307] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1146.536899][T14307] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1146.582232][T14680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'.
[ 1146.582263][T14680] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1794'.
[ 1147.558503][T14443] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1147.582799][T14443] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1147.586584][T14443] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1147.633625][T14443] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1147.656282][T14443] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1147.694123][T14443] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1147.694700][T14671] rxe_eth0 speed is unknown, defaulting to 1000
[ 1147.746217][T14443] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1147.783131][T14443] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1148.188682][T10104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1148.250374][T10104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1148.285749][T10104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1148.329939][T10104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1148.330636][T10104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1148.439426][T10104] Bluetooth: hci2: command tx timeout
[ 1148.889874][T14307] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1149.087175][T14307] 8021q: adding VLAN 0 to HW filter on device team0
[ 1149.164772][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1149.164883][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1149.256494][T14704] rxe_eth0 speed is unknown, defaulting to 1000
[ 1149.287370][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1149.287550][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1149.348415][T14443] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1150.053489][T14443] 8021q: adding VLAN 0 to HW filter on device team0
[ 1150.144423][T14735] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1800'.
[ 1150.173437][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1150.173547][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1150.442368][T14737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1801'.
[ 1150.442394][T14737] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1801'.
[ 1150.497640][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1150.497739][ T6869] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1150.514183][T10104] Bluetooth: hci0: command tx timeout
[ 1150.514661][T10104] Bluetooth: hci2: command tx timeout
[ 1150.580981][T14743] block nbd0: not configured, cannot reconfigure
[ 1150.645358][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'.
[ 1150.816895][T14671] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1150.817109][T14671] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1150.817277][T14671] bridge_slave_0: entered allmulticast mode
[ 1150.835141][T14671] bridge_slave_0: entered promiscuous mode
[ 1150.858761][T14671] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1150.859244][T14671] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1150.859447][T14671] bridge_slave_1: entered allmulticast mode
[ 1150.862177][T14671] bridge_slave_1: entered promiscuous mode
[ 1151.065917][T14671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1151.109083][T14671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1151.373991][T14671] team0: Port device team_slave_0 added
[ 1151.400833][T14671] team0: Port device team_slave_1 added
[ 1151.529577][T14671] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1151.529593][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1151.529612][T14671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1151.587435][T14671] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1151.587455][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1151.587484][T14671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1151.982180][T14671] hsr_slave_0: entered promiscuous mode
[ 1151.983073][T14671] hsr_slave_1: entered promiscuous mode
[ 1151.986779][T14671] debugfs: 'hsr0' already exists in 'hsr'
[ 1151.986792][T14671] Cannot create hsr debugfs directory
[ 1152.258019][T14704] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1152.258223][T14704] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1152.258385][T14704] bridge_slave_0: entered allmulticast mode
[ 1152.267369][T14704] bridge_slave_0: entered promiscuous mode
[ 1152.312234][T14704] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1152.312363][T14704] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1152.312477][T14704] bridge_slave_1: entered allmulticast mode
[ 1152.313952][T14704] bridge_slave_1: entered promiscuous mode
[ 1152.398347][T14307] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1152.620569][ T5615] Bluetooth: hci2: command tx timeout
[ 1152.620669][T10104] Bluetooth: hci0: command tx timeout
[ 1153.230576][ T1513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1153.310187][ T1513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1153.351918][ T1513] bond0 (unregistering): Released all slaves
[ 1153.392387][T14704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1153.447177][T14704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1153.667964][T14704] team0: Port device team_slave_0 added
[ 1153.744275][T14704] team0: Port device team_slave_1 added
[ 1153.906742][T14704] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1153.906761][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1153.906789][T14704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1154.003992][T14704] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1154.004010][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1154.004036][T14704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1154.254259][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1154.309898][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1154.314879][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1154.316034][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1154.317044][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1154.669523][T10104] Bluetooth: hci0: command tx timeout
[ 1154.669555][T10104] Bluetooth: hci2: command tx timeout
[ 1156.254011][T14775] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1156.301303][T14775] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1156.429012][ T5615] Bluetooth: hci4: command tx timeout
[ 1156.749044][ T5615] Bluetooth: hci0: command tx timeout
[ 1157.374006][T14775] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[ 1157.374706][T14775] geneve2: left promiscuous mode
[ 1157.440610][T14775] bridge0: left promiscuous mode
[ 1157.578286][T14775] bridge1: left promiscuous mode
[ 1157.665286][ T5261] 8021q: adding VLAN 0 to HW filter on device eth17
[ 1157.742560][T14806] batman_adv: batadv0: Adding interface: syzkaller0
[ 1157.742580][T14806] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1157.742613][T14806] batman_adv: batadv0: Interface activated: syzkaller0
[ 1158.021155][T14803] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 1158.120917][T14803] batman_adv: batadv0: Removing interface: syzkaller0
[ 1159.848464][ T5615] Bluetooth: hci4: command tx timeout
[ 1160.184620][T14443] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1160.208486][T14704] hsr_slave_0: entered promiscuous mode
[ 1160.214821][T14704] hsr_slave_1: entered promiscuous mode
[ 1160.217258][T14704] debugfs: 'hsr0' already exists in 'hsr'
[ 1160.217276][T14704] Cannot create hsr debugfs directory
[ 1160.706109][T14822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1808'.
[ 1160.706136][T14822] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1808'.
[ 1161.084038][T14773] rxe_eth0 speed is unknown, defaulting to 1000
[ 1161.869221][ T5615] Bluetooth: hci4: command tx timeout
[ 1162.272687][ T1513] hsr_slave_0: left promiscuous mode
[ 1162.290776][ T1513] hsr_slave_1: left promiscuous mode
[ 1162.292284][ T1513] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1162.809475][ T1513] team0 (unregistering): Port device team_slave_1 removed
[ 1162.869742][ T1513] team0 (unregistering): Port device team_slave_0 removed
[ 1163.112758][ T5261] 8021q: adding VLAN 0 to HW filter on device eth18
[ 1163.562528][T14443] veth0_vlan: entered promiscuous mode
[ 1163.613198][T14443] veth1_vlan: entered promiscuous mode
[ 1163.949344][ T5615] Bluetooth: hci4: command tx timeout
[ 1163.951196][T14443] veth0_macvtap: entered promiscuous mode
[ 1163.972152][T14443] veth1_macvtap: entered promiscuous mode
[ 1164.303522][T14773] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1164.303712][T14773] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1164.303923][T14773] bridge_slave_0: entered allmulticast mode
[ 1164.305675][T14773] bridge_slave_0: entered promiscuous mode
[ 1164.337851][T14443] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1164.338495][T14773] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1164.338944][T14773] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1164.339102][T14773] bridge_slave_1: entered allmulticast mode
[ 1164.341044][T14773] bridge_slave_1: entered promiscuous mode
[ 1164.399974][T14443] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1164.407981][ T6866] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1164.408703][ T6867] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1164.468391][T14773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1164.481196][T14773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1164.724161][T14773] team0: Port device team_slave_0 added
[ 1164.735023][T14773] team0: Port device team_slave_1 added
[ 1164.852134][T14773] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1164.852158][T14773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1164.852177][T14773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1164.958233][T14773] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1164.958250][T14773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1164.958273][T14773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1165.153761][T14853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1165.153789][T14853] nci: nci_start_poll: failed to set local general bytes
[ 1165.313181][T14848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1167.066218][T14671] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1167.109178][T14671] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1167.282264][T14671] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1167.328565][T14671] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1167.352468][T14773] hsr_slave_0: entered promiscuous mode
[ 1167.356159][T14773] hsr_slave_1: entered promiscuous mode
[ 1167.356839][T14773] debugfs: 'hsr0' already exists in 'hsr'
[ 1167.356852][T14773] Cannot create hsr debugfs directory
[ 1167.716783][T14671] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1167.752976][T14671] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1167.755899][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1167.755920][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1167.990915][ T5261] 8021q: adding VLAN 0 to HW filter on device eth19
[ 1167.994169][T14671] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1168.062082][T14671] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1169.634567][ T6866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1169.634591][ T6866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1169.938047][ T1005] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1169.959621][T14704] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1169.994443][T14704] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1170.055608][T14704] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1170.084101][T14704] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1170.117496][ T1005] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1170.117565][ T1005] usb 2-1: New USB device found: idVendor=2a39, idProduct=3fd4, bcdDevice=0.40
[ 1170.137815][ T1005] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1170.138490][ T1005] usb 2-1: language id specifier not provided by device, defaulting to English
[ 1170.181202][ T1005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1170.181230][ T1005] usb 2-1: Product: syz
[ 1170.181244][ T1005] usb 2-1: Manufacturer: �
[ 1170.181258][ T1005] usb 2-1: SerialNumber: syz
[ 1170.231074][T14704] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1170.305683][T14704] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1170.355479][T14704] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1170.426965][T14704] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1170.760023][ T1005] usb 2-1: unit 4 not found!
[ 1170.883891][ T1005] usb 2-1: USB disconnect, device number 49
[ 1171.064639][T14905] udevd[14905]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1171.750649][ T1513] bridge_slave_1: left allmulticast mode
[ 1171.750684][ T1513] bridge_slave_1: left promiscuous mode
[ 1171.750906][ T1513] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1171.951849][ T1513] bridge_slave_0: left allmulticast mode
[ 1171.951876][ T1513] bridge_slave_0: left promiscuous mode
[ 1171.952048][ T1513] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1172.219929][ T1513] bridge_slave_1: left allmulticast mode
[ 1172.219965][ T1513] bridge_slave_1: left promiscuous mode
[ 1172.220195][ T1513] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1172.391603][ T1513] bridge_slave_0: left allmulticast mode
[ 1172.392097][ T1513] bridge_slave_0: left promiscuous mode
[ 1172.392270][ T1513] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1172.635213][ T1513] bridge_slave_1: left allmulticast mode
[ 1172.635269][ T1513] bridge_slave_1: left promiscuous mode
[ 1172.635523][ T1513] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1172.750222][ T1513] bridge_slave_0: left allmulticast mode
[ 1172.750246][ T1513] bridge_slave_0: left promiscuous mode
[ 1172.750464][ T1513] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1174.223213][ T1513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1174.289622][ T1513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1174.345676][ T1513] bond0 (unregistering): Released all slaves
[ 1174.990606][ T1513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1175.071670][ T1513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1175.134065][ T1513] bond0 (unregistering): Released all slaves
[ 1175.803907][ T1513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1175.881176][ T1513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1175.923319][ T1513] bond0 (unregistering): Released all slaves
[ 1175.996846][ T5261] 8021q: adding VLAN 0 to HW filter on device eth20
[ 1176.952844][T14671] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1177.532976][T14671] 8021q: adding VLAN 0 to HW filter on device team0
[ 1177.682770][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1177.685122][ T6867] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1177.791348][T14704] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1178.443318][ T6867] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1178.443454][ T6867] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1178.757721][T14999] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1837'.
[ 1178.794118][T14704] 8021q: adding VLAN 0 to HW filter on device team0
[ 1178.837933][T12870] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1178.838102][T12870] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1178.905336][T12870] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1178.905484][T12870] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1179.502285][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'.
[ 1179.528172][T15006] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1179.538415][T15006] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1179.785594][T15006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1179.799626][T15006] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1180.869187][ T1513] hsr_slave_0: left promiscuous mode
[ 1180.909127][ T1513] hsr_slave_1: left promiscuous mode
[ 1180.910207][ T1513] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1180.931401][T15032] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1846'.
[ 1180.960678][ T1513] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1181.019167][T10302] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1181.159079][ T1513] hsr_slave_0: left promiscuous mode
[ 1181.176606][T10302] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1181.176656][T10302] usb 2-1: New USB device found: idVendor=2a39, idProduct=3fd4, bcdDevice=0.40
[ 1181.177938][T10302] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1181.178579][T10302] usb 2-1: language id specifier not provided by device, defaulting to English
[ 1181.206960][ T1513] hsr_slave_1: left promiscuous mode
[ 1181.218412][ T1513] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1181.229614][T10302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1181.229637][T10302] usb 2-1: Product: syz
[ 1181.229650][T10302] usb 2-1: Manufacturer: �
[ 1181.229665][T10302] usb 2-1: SerialNumber: syz
[ 1181.262024][ T1513] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1181.419735][ T1513] hsr_slave_0: left promiscuous mode
[ 1181.440184][ T1513] hsr_slave_1: left promiscuous mode
[ 1181.441280][ T1513] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1181.491921][ T1513] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1181.508393][T10302] usb 2-1: unit 4 not found!
[ 1181.566800][T10302] usb 2-1: USB disconnect, device number 50
[ 1181.614641][T15038] udevd[15038]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1182.149586][ T1513] team0 (unregistering): Port device team_slave_1 removed
[ 1182.211124][ T1513] team0 (unregistering): Port device team_slave_0 removed
[ 1182.680095][ T1513] team0 (unregistering): Port device team_slave_1 removed
[ 1182.732215][ T1513] team0 (unregistering): Port device team_slave_0 removed
[ 1183.200522][ T1513] team0 (unregistering): Port device team_slave_1 removed
[ 1183.250352][ T1513] team0 (unregistering): Port device team_slave_0 removed
[ 1183.587114][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1850'.
[ 1184.034188][T14773] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1184.096001][T14773] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1184.098695][T14773] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1184.143977][T14773] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1184.158152][T14773] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1184.226699][T14773] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1184.240981][T14773] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1184.316618][T14773] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1184.730053][T14671] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1185.116681][T14773] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1185.139128][ T6867] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1185.139257][ T6867] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1185.210875][T14773] 8021q: adding VLAN 0 to HW filter on device team0
[ 1185.285369][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1185.285551][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1185.334743][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1185.334915][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1185.852673][T14704] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1186.889135][T14671] veth0_vlan: entered promiscuous mode
[ 1186.937106][T14671] veth1_vlan: entered promiscuous mode
[ 1187.011914][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'.
[ 1187.164659][T14671] veth0_macvtap: entered promiscuous mode
[ 1187.212606][T14671] veth1_macvtap: entered promiscuous mode
[ 1187.301560][T14671] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1187.352535][T14704] veth0_vlan: entered promiscuous mode
[ 1187.355734][T14671] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1187.475597][T14704] veth1_vlan: entered promiscuous mode
[ 1187.990021][ T6866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1187.990042][ T6866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1187.996314][T14704] veth0_macvtap: entered promiscuous mode
[ 1188.293437][T14704] veth1_macvtap: entered promiscuous mode
[ 1188.406021][T14773] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1188.647192][T12870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1188.647216][T12870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1188.672770][T12870] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1188.673260][T12870] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1188.702249][T14704] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1188.743561][T14704] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1189.455958][T15168] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1865'.
[ 1189.638977][ T5944] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1189.639018][ T5944] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1189.639050][ T5944] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1189.639081][ T5944] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1189.639107][ T5944] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1189.836045][T15177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1867'.
[ 1191.477442][T14773] veth0_vlan: entered promiscuous mode
[ 1191.731671][ T5895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1191.731694][ T5895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1192.476249][ T6866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1192.476273][ T6866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1192.820895][T14773] veth1_vlan: entered promiscuous mode
[ 1192.835066][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[ 1192.835138][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[ 1194.132943][T15226] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1874'.
[ 1194.415827][T14773] veth0_macvtap: entered promiscuous mode
[ 1194.460545][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1194.463292][T14773] veth1_macvtap: entered promiscuous mode
[ 1196.678362][T14773] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1196.736246][T14773] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1196.970626][T15223] syz.8.1873 (15223) used greatest stack depth: 18088 bytes left
[ 1198.234815][T15278] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1884'.
[ 1198.346582][ T6869] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1199.770117][ T5895] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1199.777560][  T584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1199.777578][  T584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1204.186739][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1895'.
[ 1204.254484][ T1513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1204.254508][ T1513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1204.358039][ T5895] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1204.370656][T11884] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1208.600972][ T5755] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1210.772791][ T5755] usb 9-1: Using ep0 maxpacket: 8
[ 1211.326602][ T5755] usb 9-1: device descriptor read/all, error -71
[ 1211.636693][T15381] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1907'.
[ 1211.636720][T15381] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1907'.
[ 1211.679127][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1908'.
[ 1211.679160][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1908'.
[ 1211.986385][T10104] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1212.024348][T10104] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1212.138976][ T1513] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1212.149657][ T6866] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1212.151657][ T1513] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1212.151696][ T1513] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1213.207166][T10104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1213.225556][T10104] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1213.232599][T10104] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1214.685853][T15424] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1914'.
[ 1215.211568][ T5598] syz_tun (unregistering): left allmulticast mode
[ 1215.301041][ T5598] bond0: (slave syz_tun): Releasing backup interface
[ 1215.429359][ T5745] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1215.469232][ T5615] Bluetooth: hci5: command tx timeout
[ 1215.579846][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1920'.
[ 1215.605852][T15445] bridge1: entered promiscuous mode
[ 1215.618921][ T5745] usb 8-1: Using ep0 maxpacket: 8
[ 1215.620749][ T5745] usb 8-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 1215.621969][ T5745] usb 8-1: config 2 has an invalid interface number: 31 but max is 0
[ 1215.621993][ T5745] usb 8-1: config 2 has no interface number 0
[ 1215.622033][ T5745] usb 8-1: config 2 interface 31 has no altsetting 0
[ 1215.624786][ T5745] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1215.624813][ T5745] usb 8-1: Product: syz
[ 1215.624830][ T5745] usb 8-1: Manufacturer: syz
[ 1215.624847][ T5745] usb 8-1: SerialNumber: syz
[ 1217.726879][ T5615] Bluetooth: hci5: command tx timeout
[ 1217.737361][ T5745] ch9200 8-1:2.31: probe with driver ch9200 failed with error -32
[ 1218.203196][T15459] block nbd0: not configured, cannot reconfigure
[ 1219.626081][T14797] usb 8-1: USB disconnect, device number 2
[ 1219.789994][ T5615] Bluetooth: hci5: command tx timeout
[ 1221.595607][T14797] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1221.779703][T14797] usb 10-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01
[ 1221.780862][T14797] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1221.780885][T14797] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1221.789602][T14797] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1221.789630][T14797] usb 10-1: Product: syz
[ 1221.789648][T14797] usb 10-1: Manufacturer: syz
[ 1221.789665][T14797] usb 10-1: SerialNumber: syz
[ 1221.844683][T14797] usb 10-1: config 0 descriptor??
[ 1221.872144][ T5615] Bluetooth: hci5: command tx timeout
[ 1221.942919][T15396] rxe_eth0 speed is unknown, defaulting to 1000
[ 1223.243728][T15492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1223.474338][ T5956] usb 10-1: USB disconnect, device number 2
[ 1223.697713][T15511] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1934'.
[ 1227.497342][T15553] kAFS: unable to lookup cell '/,c¾ûL'
[ 1230.283092][T15547] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input11
[ 1230.403743][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1944'.
[ 1233.307192][ T6869] bond1 (unregistering): (slave bridge0): Releasing active interface
[ 1235.415095][ T6869] bond3 (unregistering): (slave bridge1): Releasing active interface
[ 1235.782949][ T6869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1235.869744][ T6869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1235.900331][ T6869] bond0 (unregistering): Released all slaves
[ 1235.920001][ T6869] bond1 (unregistering): Released all slaves
[ 1235.951695][ T6869] bond2 (unregistering): Released all slaves
[ 1235.984525][ T6869] bond3 (unregistering): Released all slaves
[ 1236.072743][ T5261] 8021q: adding VLAN 0 to HW filter on device eth21
[ 1238.135504][T15396] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1238.135755][T15396] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1238.136002][T15396] bridge_slave_0: entered allmulticast mode
[ 1238.138646][T15396] bridge_slave_0: entered promiscuous mode
[ 1240.629652][T15396] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1240.848478][T15396] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1240.848735][T15396] bridge_slave_1: entered allmulticast mode
[ 1240.935804][T15396] bridge_slave_1: entered promiscuous mode
[ 1241.086123][T15637] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12
[ 1241.170180][T10104] Bluetooth: hci3: command 0x0406 tx timeout
[ 1241.595101][ T5261] 8021q: adding VLAN 0 to HW filter on device eth22
[ 1243.693637][T15396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1243.771449][T15396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1244.098466][T15665] nvme_fabrics: missing parameter 'nqn=%s'
[ 1244.462890][T15396] team0: Port device team_slave_0 added
[ 1244.577222][T15396] team0: Port device team_slave_1 added
[ 1244.929762][T15685] 8021q: adding VLAN 0 to HW filter on device macsec1
[ 1245.281811][T14801] bond_slave_0: entered promiscuous mode
[ 1245.281861][T14801] bond_slave_1: entered promiscuous mode
[ 1245.542635][T15396] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1245.542655][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1245.542684][T15396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1245.844281][ T5956] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[ 1245.989802][ T5956] usb 8-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[ 1245.991324][ T5956] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1245.991376][ T5956] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[ 1245.991403][ T5956] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10
[ 1245.991431][ T5956] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64
[ 1245.991459][ T5956] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[ 1245.991484][ T5956] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1245.991561][ T5956] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1245.994753][ T5956] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1245.994772][ T5956] usb 8-1: Product: syz
[ 1245.994782][ T5956] usb 8-1: Manufacturer: syz
[ 1245.994792][ T5956] usb 8-1: SerialNumber: syz
[ 1246.122044][ T5956] usb 8-1: config 0 descriptor??
[ 1246.125738][T15700] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1246.157908][ T5956] ati_remote 8-1:0.0: Initializing ati_remote hardware failed.
[ 1246.172260][ T5956] ati_remote 8-1:0.0: probe with driver ati_remote failed with error -5
[ 1246.174054][T15396] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1246.174069][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1246.174096][T15396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1246.425330][ T5956] usb 8-1: USB disconnect, device number 3
[ 1246.763600][ T6869] hsr_slave_0: left promiscuous mode
[ 1246.962494][T14797] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1247.011723][ T6869] hsr_slave_1: left promiscuous mode
[ 1247.012460][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1247.084474][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1247.118912][T14797] usb 7-1: Using ep0 maxpacket: 8
[ 1247.119576][T14797] usb 7-1: New USB device found: idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 1247.121718][T14797] usb 7-1: config 0 has an invalid interface number: 186 but max is 0
[ 1247.121744][T14797] usb 7-1: config 0 has no interface number 0
[ 1247.121784][T14797] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1247.121808][T14797] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1247.121832][T14797] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 1247.121858][T14797] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1247.121883][T14797] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1247.133056][T14797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1247.133133][T14797] usb 7-1: Product: syz
[ 1247.133183][T14797] usb 7-1: Manufacturer: syz
[ 1247.133227][T14797] usb 7-1: SerialNumber: syz
[ 1247.274111][T14797] usb 7-1: config 0 descriptor??
[ 1247.504065][T14797] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[ 1247.893057][    C0] iowarrior 7-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1
[ 1247.958684][T14797] usb 7-1: USB disconnect, device number 2
[ 1248.189872][ T6869] team0 (unregistering): Port device team_slave_1 removed
[ 1248.250300][ T6869] team0 (unregistering): Port device team_slave_0 removed
[ 1248.693479][T15703] bridge_slave_0: left allmulticast mode
[ 1248.693505][T15703] bridge_slave_0: left promiscuous mode
[ 1248.718047][T15703] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1248.832805][T15703] bridge_slave_1: left allmulticast mode
[ 1248.832837][T15703] bridge_slave_1: left promiscuous mode
[ 1248.833008][T15703] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1248.999506][T15703] bond0: (slave bond_slave_0): Releasing backup interface
[ 1249.082147][T15703] bond0: (slave bond_slave_1): Releasing backup interface
[ 1249.144252][T15703] team0: Port device team_slave_0 removed
[ 1249.186457][T15703] team0: Port device team_slave_1 removed
[ 1249.187265][T15703] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1249.187283][T15703] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1249.231727][T15703] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1249.231851][T15703] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1249.274662][T15703] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1249.454214][T15741] netlink: 'syz.6.1982': attribute type 5 has an invalid length.
[ 1250.062399][   T36] audit: type=1400 audit(1793804203.784:30): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15758 comm="syz.7.1985" saddr=100.1.1.1 daddr=172.20.20.170 dest=20002 netif=wpan0
[ 1250.070152][   T36] audit: type=1400 audit(1793804203.824:31): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15758 comm="syz.7.1985" saddr=100.1.1.1 daddr=172.20.20.170 dest=20002 netif=wpan0
[ 1250.222698][ T5261] 8021q: adding VLAN 0 to HW filter on device eth23
[ 1250.264254][T15396] hsr_slave_0: entered promiscuous mode
[ 1250.266011][T15396] hsr_slave_1: entered promiscuous mode
[ 1251.793379][ T6869] IPVS: stop unused estimator thread 0...
[ 1252.585659][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1998'.
[ 1253.798935][ T5956] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1253.961150][ T5956] usb 10-1: New USB device found: idVendor=056a, idProduct=0063, bcdDevice=0.00
[ 1253.962134][ T5956] usb 10-1: config 0 has no interfaces?
[ 1253.962172][ T5956] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1253.968947][ T5956] usb 10-1: config 0 descriptor??
[ 1254.252492][ T5956] usb 10-1: USB disconnect, device number 3
[ 1254.272143][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[ 1254.272194][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[ 1254.896160][T15861] syzkaller0: entered promiscuous mode
[ 1254.896191][T15861] syzkaller0: entered allmulticast mode
[ 1255.650946][T14802] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1255.690909][T15904] netlink: 'syz.6.2013': attribute type 11 has an invalid length.
[ 1255.690933][T15904] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2013'.
[ 1255.811343][T14802] usb 9-1: Using ep0 maxpacket: 8
[ 1255.812130][T14802] usb 9-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1255.814686][T14802] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1255.814725][T14802] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1255.814767][T14802] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1255.814795][T14802] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1255.814822][T14802] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1255.814849][T14802] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1255.814877][T14802] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1255.814905][T14802] usb 9-1: config 168 interface 0 has no altsetting 0
[ 1255.816271][T14802] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1255.816312][T14802] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1255.816357][T14802] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1255.816389][T14802] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1255.816419][T14802] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1255.816451][T14802] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1255.816482][T14802] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1255.816512][T14802] usb 9-1: config 168 interface 0 has no altsetting 0
[ 1255.919418][T14802] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1255.919835][T14802] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1255.919937][T14802] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1255.920004][T14802] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1255.920261][T14802] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1255.920329][T14802] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1255.920405][T14802] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1255.920477][T14802] usb 9-1: config 168 interface 0 has no altsetting 0
[ 1256.069462][T14802] usb 9-1: string descriptor 0 read error: -22
[ 1256.069877][T14802] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1256.163208][T14802] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1256.568284][T15887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1256.576947][T15887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1256.782641][ T5745] usb 9-1: USB disconnect, device number 4
[ 1268.933476][T15916] bridge0: port 1(team0) entered blocking state
[ 1268.933606][T15916] bridge0: port 1(team0) entered disabled state
[ 1268.953627][T15916] team0: entered allmulticast mode
[ 1269.083736][T15916] team0: entered promiscuous mode
[ 1269.223692][T15927] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1269.490202][T15396] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1269.546441][T15396] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1269.585551][T15396] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1269.624414][T15396] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1269.626514][T15396] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1269.660040][T15942] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2023'.
[ 1269.857856][ T5956] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1269.877723][T15396] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1270.031297][ T5956] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1270.031356][ T5956] usb 9-1: New USB device found: idVendor=05ac, idProduct=0263, bcdDevice=1d.cd
[ 1270.056612][ T5956] usb 9-1: config 3 has an invalid interface number: 151 but max is 0
[ 1270.056638][ T5956] usb 9-1: config 3 has no interface number 0
[ 1270.056669][ T5956] usb 9-1: config 3 interface 151 has no altsetting 0
[ 1270.083383][ T5956] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1270.083410][ T5956] usb 9-1: Product: syz
[ 1270.083425][ T5956] usb 9-1: Manufacturer: syz
[ 1270.083440][ T5956] usb 9-1: SerialNumber: syz
[ 1270.178602][T15947] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1270.417104][T15944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1270.417614][T15944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1270.491645][T15396] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1270.515088][T15960] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2025'.
[ 1270.583972][T15396] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1270.668079][ T6869] bond0: (slave bond_slave_0): interface is now down
[ 1270.668117][ T6869] bond0: (slave bond_slave_1): interface is now down
[ 1270.819078][ T5895] bond0: (slave bond_slave_0): interface is now down
[ 1270.819103][ T5895] bond0: (slave bond_slave_1): interface is now down
[ 1270.973923][ T5956] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:3.151/input/input14
[ 1270.994880][ T6866] bond0: (slave bond_slave_0): interface is now down
[ 1270.994943][ T6866] bond0: (slave bond_slave_1): interface is now down
[ 1271.150896][ T6867] bond0: (slave bond_slave_0): interface is now down
[ 1271.150914][ T6867] bond0: (slave bond_slave_1): interface is now down
[ 1271.241177][T15960] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1271.259069][ T4951] bcm5974 9-1:3.151: could not read from device
[ 1271.301302][ T5895] bond0: (slave bond_slave_0): interface is now down
[ 1271.301318][ T5895] bond0: (slave bond_slave_1): interface is now down
[ 1271.373547][ T5956] usb 9-1: USB disconnect, device number 5
[ 1271.450356][ T5895] bond0: (slave bond_slave_0): interface is now down
[ 1271.450381][ T5895] bond0: (slave bond_slave_1): interface is now down
[ 1271.458643][T15968] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2027'.
[ 1271.594564][ T6867] bond0: (slave bond_slave_0): interface is now down
[ 1271.594588][ T6867] bond0: (slave bond_slave_1): interface is now down
[ 1271.711437][T15948] Bluetooth: hci0: command 0x0406 tx timeout
[ 1271.711457][T13616] Bluetooth: hci2: command 0x0406 tx timeout
[ 1271.903198][ T6867] bond0: now running without any active interface!
[ 1272.420740][T10104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1272.473702][T10104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1272.485200][T10104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1272.496609][T10104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1272.510148][T10104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1274.589972][T15411] Bluetooth: hci1: command tx timeout
[ 1275.258355][T15989] rxe_eth0 speed is unknown, defaulting to 1000
[ 1276.670555][T15411] Bluetooth: hci1: command tx timeout
[ 1277.291830][T14797] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[ 1277.461322][T14797] usb 7-1: New USB device found: idVendor=2b73, idProduct=003c, bcdDevice=0.40
[ 1277.480788][T14797] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4
[ 1277.480819][T14797] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[ 1277.489973][T14797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1277.490040][T14797] usb 7-1: Product: syz
[ 1277.490056][T14797] usb 7-1: Manufacturer: syz
[ 1277.490125][T14797] usb 7-1: SerialNumber: syz
[ 1278.328610][T14797] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71
[ 1278.447720][T14797] usb 7-1: USB disconnect, device number 3
[ 1278.545715][T15965] udevd[15965]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1278.750091][T15411] Bluetooth: hci1: command tx timeout
[ 1278.928892][ T5956] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1279.087770][ T5956] usb 10-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00
[ 1279.106421][ T5956] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1279.106486][ T5956] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1279.684298][ T5956] qmi_wwan 10-1:1.0: cdc-wdm0: USB WDM device
[ 1280.829185][T15411] Bluetooth: hci1: command tx timeout
[ 1280.835117][ T5956] wwan wwan0: port wwan0qmi0 attached
[ 1280.837454][    C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71
[ 1280.837563][    C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes
[ 1280.837768][    C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71
[ 1280.837782][    C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes
[ 1280.837975][    C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71
[ 1280.838034][    C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes
[ 1280.838776][    C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71
[ 1280.838794][    C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes
[ 1280.838992][    C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71
[ 1280.839006][    C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes
[ 1280.839210][    C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71
[ 1280.839224][    C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes
[ 1280.839524][    C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71
[ 1280.839545][    C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes
[ 1280.840065][    C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71
[ 1280.840084][    C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes
[ 1280.840413][    C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71
[ 1280.840467][    C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes
[ 1280.840818][    C1] qmi_wwan 10-1:1.0: nonzero urb status received: -71
[ 1280.840891][    C1] qmi_wwan 10-1:1.0: wdm_int_callback - 0 bytes
[ 1281.132447][    C1] qmi_wwan 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[ 1283.006820][ T5956] qmi_wwan 10-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.9-1, WWAN/QMI device, 9e:84:c2:dc:4b:16
[ 1283.064426][ T5956] usb 10-1: USB disconnect, device number 4
[ 1283.082751][ T5956] qmi_wwan 10-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.9-1, WWAN/QMI device
[ 1284.014296][ T5956] wwan wwan0: port wwan0qmi0 disconnected
[ 1285.254555][T16128] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2062'.
[ 1285.383774][T16128] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1287.144580][ T5956] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[ 1287.338670][ T5956] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1287.347246][ T5956] usb 10-1: not running at top speed; connect to a high speed hub
[ 1287.347289][ T5956] usb 10-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1287.367915][ T5956] usb 10-1: config 14 has an invalid interface number: 57 but max is 1
[ 1287.367944][ T5956] usb 10-1: config 14 has an invalid interface number: 228 but max is 1
[ 1287.367967][ T5956] usb 10-1: config 14 has no interface number 0
[ 1287.367984][ T5956] usb 10-1: config 14 has no interface number 1
[ 1287.368064][ T5956] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1287.368090][ T5956] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1287.368117][ T5956] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1287.368144][ T5956] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[ 1287.368172][ T5956] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[ 1287.368198][ T5956] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1287.368220][ T5956] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1287.368247][ T5956] usb 10-1: config 14 interface 57 has no altsetting 0
[ 1287.368275][ T5956] usb 10-1: config 14 interface 228 has no altsetting 0
[ 1287.520948][ T5956] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1287.520977][ T5956] usb 10-1: Product: syz
[ 1287.520991][ T5956] usb 10-1: Manufacturer: syz
[ 1287.521006][ T5956] usb 10-1: SerialNumber: syz
[ 1287.990805][ T5895] bridge_slave_1: left allmulticast mode
[ 1287.990843][ T5895] bridge_slave_1: left promiscuous mode
[ 1287.991275][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1288.230402][ T5895] bridge_slave_0: left allmulticast mode
[ 1288.230437][ T5895] bridge_slave_0: left promiscuous mode
[ 1288.233918][ T5956] legousbtower 10-1:14.57: interrupt endpoints not found
[ 1288.234765][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1288.615795][ T5956] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[ 1288.701981][ T5956] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[ 1289.387356][T16174] usb 10-1: LEGO USB Tower reset control request failed
[ 1289.523111][ T5745] usb 10-1: USB disconnect, device number 5
[ 1289.652627][ T5745] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected
[ 1289.816510][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1290.044021][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1290.121800][ T5895] bond0 (unregistering): Released all slaves
[ 1290.565225][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2074'.
[ 1290.618274][T16189] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2073'.
[ 1290.700344][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2074'.
[ 1291.308956][T14797] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1291.375735][ T5261] 8021q: adding VLAN 0 to HW filter on device eth21
[ 1291.499072][T14797] usb 9-1: Using ep0 maxpacket: 8
[ 1291.499749][T14797] usb 9-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1291.501010][T14797] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1291.501204][T14797] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1291.501261][T14797] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1291.501281][T14797] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1291.501300][T14797] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1291.501319][T14797] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1291.501339][T14797] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1291.501359][T14797] usb 9-1: config 168 interface 0 has no altsetting 0
[ 1291.502872][T14797] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1291.503006][T14797] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1291.503056][T14797] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1291.503075][T14797] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1291.503093][T14797] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1291.503112][T14797] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1291.503130][T14797] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1291.503149][T14797] usb 9-1: config 168 interface 0 has no altsetting 0
[ 1291.504511][T14797] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1291.504697][T14797] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1291.504742][T14797] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1291.504772][T14797] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1291.504800][T14797] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1291.504829][T14797] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1291.505121][T14797] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1291.505153][T14797] usb 9-1: config 168 interface 0 has no altsetting 0
[ 1291.834790][T14797] usb 9-1: string descriptor 0 read error: -22
[ 1291.834888][T14797] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1292.002697][T14797] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1292.191225][T15989] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1292.191348][T15989] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1292.191480][T15989] bridge_slave_0: entered allmulticast mode
[ 1292.236590][T15989] bridge_slave_0: entered promiscuous mode
[ 1292.254922][T15989] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1292.255007][T15989] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1292.255131][T15989] bridge_slave_1: entered allmulticast mode
[ 1292.336057][T15989] bridge_slave_1: entered promiscuous mode
[ 1292.348180][T16197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1292.390837][T16197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1292.414344][T16206] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2078'.
[ 1292.414377][T16206] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2078'.
[ 1292.669848][T16189] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1293.352301][ T5895] hsr_slave_0: left promiscuous mode
[ 1293.396959][ T5895] hsr_slave_1: left promiscuous mode
[ 1293.411286][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1293.433587][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1293.500878][T16211] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2080'.
[ 1293.717612][T16213] netlink: 'syz.7.2081': attribute type 1 has an invalid length.
[ 1294.064319][ T5745] usb 9-1: USB disconnect, device number 6
[ 1294.622480][T10104] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1294.668240][T10104] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1294.710678][T10104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1294.717626][T10104] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1294.726009][T10104] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1295.066789][ T5895] team0 (unregistering): Port device team_slave_1 removed
[ 1295.238034][ T5895] team0 (unregistering): Port device team_slave_0 removed
[ 1296.002624][T15989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1296.239037][T16213] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1296.342109][T16214] bond_slave_0: left promiscuous mode
[ 1296.342233][T16214] bond_slave_1: left promiscuous mode
[ 1296.428624][T15989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1296.750863][T15989] team0: Port device team_slave_0 added
[ 1296.773685][T15989] team0: Port device team_slave_1 added
[ 1296.871852][T15989] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1296.871888][T15989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1296.871909][T15989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1296.875259][T15989] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1296.875276][T15989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1296.875323][T15989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1296.976948][T15411] Bluetooth: hci5: command tx timeout
[ 1297.777389][T15989] hsr_slave_0: entered promiscuous mode
[ 1297.778269][T15989] hsr_slave_1: entered promiscuous mode
[ 1298.618563][ T5261] 8021q: adding VLAN 0 to HW filter on device eth22
[ 1299.069005][T15411] Bluetooth: hci5: command tx timeout
[ 1299.186730][T16219] rxe_eth0 speed is unknown, defaulting to 1000
[ 1299.923458][T16276] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2095'.
[ 1300.737680][ T5956] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1300.902681][ T5956] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1300.902733][ T5956] usb 10-1: New USB device found: idVendor=05ac, idProduct=0263, bcdDevice=1d.cd
[ 1300.904353][ T5956] usb 10-1: config 3 has an invalid interface number: 151 but max is 0
[ 1300.904379][ T5956] usb 10-1: config 3 has no interface number 0
[ 1300.904411][ T5956] usb 10-1: config 3 interface 151 has no altsetting 0
[ 1300.948695][ T5956] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1300.948892][ T5956] usb 10-1: Product: syz
[ 1300.948909][ T5956] usb 10-1: Manufacturer: syz
[ 1300.948924][ T5956] usb 10-1: SerialNumber: syz
[ 1301.148868][T15411] Bluetooth: hci5: command tx timeout
[ 1301.208471][T16285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1301.226288][T16285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1301.378352][ T5956] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:3.151/input/input15
[ 1301.456843][ T4951] bcm5974 10-1:3.151: could not read from device
[ 1301.510489][ T5956] usb 10-1: USB disconnect, device number 6
[ 1301.823858][T15946] udevd[15946]: Error opening device "/dev/input/event4": No such file or directory
[ 1301.823964][T15946] udevd[15946]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1301.824061][T15946] udevd[15946]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1301.860724][T15946] udevd[15946]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1301.860844][T15946] udevd[15946]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1302.249097][T14797] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1302.408855][T14797] usb 9-1: Using ep0 maxpacket: 8
[ 1302.409788][T14797] usb 9-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1302.411186][T14797] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1302.411212][T14797] usb 9-1: config 16 has an invalid interface number: 48 but max is 0
[ 1302.411232][T14797] usb 9-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config
[ 1302.411252][T14797] usb 9-1: config 16 has no interface number 0
[ 1302.411282][T14797] usb 9-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30
[ 1302.411319][T14797] usb 9-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102
[ 1302.411347][T14797] usb 9-1: config 16 interface 48 has no altsetting 0
[ 1302.411408][T14797] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1303.228852][T15411] Bluetooth: hci5: command tx timeout
[ 1303.300995][T14797] usb 9-1: string descriptor 0 read error: -71
[ 1303.320636][T14797] usb 9-1: USB disconnect, device number 7
[ 1305.032039][ T6866] IPVS: starting estimator thread 0...
[ 1305.244814][T16345] IPVS: using max 13 ests per chain, 31200 per kthread
[ 1305.588141][T11885] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1305.588181][T11885] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1306.428146][T16355] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2106'.
[ 1306.467581][T16369] process 'syz.8.2113' launched '/dev/fd/6' with NULL argv: empty string added
[ 1306.844540][T11885] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1306.844568][T11885] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1308.004327][T16369] nvme_fabrics: missing parameter 'nqn=%s'
[ 1308.060671][T16219] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1308.060843][T16219] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1308.062206][T16219] bridge_slave_0: entered allmulticast mode
[ 1308.102260][T16219] bridge_slave_0: entered promiscuous mode
[ 1308.132951][T16219] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1308.133085][T16219] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1308.133242][T16219] bridge_slave_1: entered allmulticast mode
[ 1308.136767][T16219] bridge_slave_1: entered promiscuous mode
[ 1308.672510][T11885] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1308.672538][T11885] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1308.746435][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2117'.
[ 1308.819985][T16219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1308.972616][T16219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1309.168879][   T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1309.307401][T11885] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1309.321023][   T10] usb 9-1: Using ep0 maxpacket: 8
[ 1309.321204][T11885] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1309.323887][   T10] usb 9-1: New USB device found: idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1309.355531][   T10] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1309.355563][   T10] usb 9-1: Product: syz
[ 1309.355581][   T10] usb 9-1: Manufacturer: syz
[ 1309.355598][   T10] usb 9-1: SerialNumber: syz
[ 1309.402855][   T10] usb 9-1: config 0 descriptor??
[ 1309.423051][   T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[ 1309.833988][T16219] team0: Port device team_slave_0 added
[ 1309.907897][T16219] team0: Port device team_slave_1 added
[ 1309.930045][   T10] gspca_zc3xx: reg_w_i err -110
[ 1309.930177][   T10] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110
[ 1310.045138][T16413] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2120'.
[ 1310.102805][T16437] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1310.179813][T15989] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1310.217540][T15989] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1310.324304][T15989] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1310.368082][ T5956] usb 9-1: USB disconnect, device number 8
[ 1310.395727][T15989] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1310.400829][T16219] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1310.400877][T16219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1310.400971][T16219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1310.441586][T15989] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1310.515797][T15989] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1310.518500][T16219] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1310.518517][T16219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1310.518546][T16219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1310.524235][T15989] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1310.626115][T15989] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1311.173515][T16475] syz.9.2129 uses obsolete (PF_INET,SOCK_PACKET)
[ 1311.195798][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2128'.
[ 1311.215825][T16219] hsr_slave_0: entered promiscuous mode
[ 1311.217994][T16219] hsr_slave_1: entered promiscuous mode
[ 1311.232794][T16219] debugfs: 'hsr0' already exists in 'hsr'
[ 1311.232815][T16219] Cannot create hsr debugfs directory
[ 1311.625808][   T36] audit: type=1326 audit(1793804265.344:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.7.2133" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90de5afb19 code=0x7ffc0000
[ 1311.625868][   T36] audit: type=1326 audit(1793804265.374:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.7.2133" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90de5afb19 code=0x7ffc0000
[ 1311.627930][   T36] audit: type=1326 audit(1793804265.374:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.7.2133" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90de5afb19 code=0x7ffc0000
[ 1311.627986][   T36] audit: type=1326 audit(1793804265.374:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.7.2133" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90de5afb19 code=0x7ffc0000
[ 1311.628468][   T36] audit: type=1326 audit(1793804265.374:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.7.2133" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f90de5afb19 code=0x7ffc0000
[ 1311.628634][   T36] audit: type=1326 audit(1793804265.374:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.7.2133" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90de5afb19 code=0x7ffc0000
[ 1311.696273][   T36] audit: type=1326 audit(1793804265.424:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.7.2133" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90de5afb19 code=0x7ffc0000
[ 1311.696387][   T36] audit: type=1326 audit(1793804265.444:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.7.2133" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90de5afb19 code=0x7ffc0000
[ 1311.705193][   T36] audit: type=1326 audit(1793804265.374:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.7.2133" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90de5afb19 code=0x7ffc0000
[ 1311.705364][   T36] audit: type=1326 audit(1793804265.454:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16484 comm="syz.7.2133" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f90de5afb19 code=0x7ffc0000
[ 1312.198891][   T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1313.559726][T11885] bridge_slave_1: left promiscuous mode
[ 1313.559982][T11885] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1313.581808][   T10] usb 10-1: Using ep0 maxpacket: 16
[ 1313.582471][   T10] usb 10-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00
[ 1313.583665][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1313.583694][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1313.583721][   T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1313.583750][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1313.664340][   T10] usb 10-1: config 0 descriptor??
[ 1313.775666][T11885] bridge_slave_0: left allmulticast mode
[ 1313.775707][T11885] bridge_slave_0: left promiscuous mode
[ 1313.775998][T11885] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1314.106405][   T10] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max
[ 1314.133693][   T10] microsoft 0003:045E:07DA.0010: unsupported Resolution Multiplier 0
[ 1314.311957][   T10] microsoft 0003:045E:07DA.0010: unsupported Resolution Multiplier 0
[ 1314.316202][   T10] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[ 1314.526236][T14797] usb 10-1: USB disconnect, device number 7
[ 1315.012665][T11885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1315.071580][T11885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1315.161114][T11885] bond0 (unregistering): Released all slaves
[ 1315.698321][T16528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'.
[ 1315.713739][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[ 1315.713807][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[ 1316.482034][T16541] FAULT_INJECTION: forcing a failure.
[ 1316.482034][T16541] name failslab, interval 1, probability 5, space 0, times 9992
[ 1316.482061][T16541] CPU: 0 UID: 0 PID: 16541 Comm: syz.9.2145 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1316.482083][T16541] Tainted: [L]=SOFTLOCKUP
[ 1316.482089][T16541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1316.482099][T16541] Call Trace:
[ 1316.482105][T16541]  <TASK>
[ 1316.482113][T16541]  dump_stack_lvl+0xe8/0x150
[ 1316.482145][T16541]  should_fail_ex+0x447/0x5e0
[ 1316.482175][T16541]  should_failslab+0xa8/0x100
[ 1316.482193][T16541]  ? ptlock_alloc+0x20/0x70
[ 1316.482218][T16541]  kmem_cache_alloc_noprof+0x99/0x680
[ 1316.482244][T16541]  ? ptlock_alloc+0x20/0x70
[ 1316.482272][T16541]  ptlock_alloc+0x20/0x70
[ 1316.482296][T16541]  pte_alloc_one+0x7e/0x380
[ 1316.482320][T16541]  __pte_alloc+0x25/0x1a0
[ 1316.482340][T16541]  do_pte_missing+0x1ba0/0x2970
[ 1316.482361][T16541]  ? __pmd_alloc+0x41b/0x5e0
[ 1316.482387][T16541]  handle_mm_fault+0xf64/0x28c0
[ 1316.482414][T16541]  ? handle_mm_fault+0xeb/0x28c0
[ 1316.482444][T16541]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1316.482477][T16541]  ? __lock_acquire+0x747/0x2de0
[ 1316.482504][T16541]  ? lock_mm_and_find_vma+0xa7/0x340
[ 1316.482531][T16541]  do_user_addr_fault+0x7f6/0x1480
[ 1316.482563][T16541]  exc_page_fault+0x6a/0xc0
[ 1316.482581][T16541]  asm_exc_page_fault+0x26/0x30
[ 1316.482596][T16541] RIP: 0010:rep_movs_alternative+0xf/0xa0
[ 1316.482620][T16541] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 4d 05 00 66 2e
[ 1316.482634][T16541] RSP: 0018:ffffc9000594fcb8 EFLAGS: 00050202
[ 1316.482648][T16541] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004
[ 1316.482661][T16541] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000594fd60
[ 1316.482672][T16541] RBP: ffffc9000594fe68 R08: 0000000000000003 R09: 0000000000000004
[ 1316.482682][T16541] R10: dffffc0000000000 R11: fffff52000b29fac R12: dffffc0000000000
[ 1316.482693][T16541] R13: 0000000000000000 R14: ffffc9000594fd60 R15: 0000000000000000
[ 1316.482716][T16541]  _copy_from_user+0x7a/0xb0
[ 1316.482737][T16541]  do_sock_getsockopt+0x1fa/0x640
[ 1316.482758][T16541]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 1316.482787][T16541]  ? __fget_files+0x3a8/0x420
[ 1316.482810][T16541]  ? __fget_files+0x2a/0x420
[ 1316.482838][T16541]  __x64_sys_getsockopt+0x1aa/0x250
[ 1316.482861][T16541]  do_syscall_64+0x166/0x520
[ 1316.482878][T16541]  ? trace_irq_disable+0x3b/0x140
[ 1316.482895][T16541]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1316.482911][T16541]  ? clear_bhb_loop+0x70/0xc0
[ 1316.482930][T16541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1316.482957][T16541] RIP: 0033:0x7f7ec162fb19
[ 1316.482970][T16541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1316.482981][T16541] RSP: 002b:00007f7ebf87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 1316.482995][T16541] RAX: ffffffffffffffda RBX: 00007f7ec18b5fa0 RCX: 00007f7ec162fb19
[ 1316.483005][T16541] RDX: 000000000000004c RSI: 0000000000000029 RDI: 0000000000000004
[ 1316.483014][T16541] RBP: 00007f7ec16c7b70 R08: 0000000000000000 R09: 0000000000000000
[ 1316.483023][T16541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1316.483031][T16541] R13: 00007f7ec18b6038 R14: 00007f7ec18b5fa0 R15: 00007ffeae876c08
[ 1316.483072][T16541]  </TASK>
[ 1317.259637][ T5745] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1317.412802][ T5745] usb 10-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[ 1317.414377][ T5745] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1317.414404][ T5745] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1317.414425][ T5745] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1317.414474][ T5745] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1317.416791][ T5745] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1317.416817][ T5745] usb 10-1: Product: syz
[ 1317.416833][ T5745] usb 10-1: Manufacturer: syz
[ 1317.528423][ T5745] cdc_wdm 10-1:1.0: skipping garbage
[ 1317.528446][ T5745] cdc_wdm 10-1:1.0: skipping garbage
[ 1317.545690][ T5745] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1317.545715][ T5745] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1317.747128][ T5745] usb 10-1: USB disconnect, device number 8
[ 1318.248900][T14801] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1318.422142][T14801] usb 10-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[ 1318.424602][T14801] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1318.424621][T14801] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1318.424635][T14801] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1318.424667][T14801] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1318.500352][T14801] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1318.500372][T14801] usb 10-1: Product: syz
[ 1318.500382][T14801] usb 10-1: Manufacturer: syz
[ 1318.564374][T14801] cdc_wdm 10-1:1.0: skipping garbage
[ 1318.564391][T14801] cdc_wdm 10-1:1.0: skipping garbage
[ 1318.629167][T14801] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1318.629191][T14801] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1318.797089][T15989] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1319.058419][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2155'.
[ 1319.103545][ T5261] 8021q: adding VLAN 0 to HW filter on device eth21
[ 1319.451002][ T5755] usb 10-1: USB disconnect, device number 9
[ 1320.086990][T16598] device-mapper: table: 248:5: thin-pool: Error opening metadata block device (-ENOENT)
[ 1320.087021][T16598] device-mapper: ioctl: error adding target to table
[ 1320.160342][T15989] 8021q: adding VLAN 0 to HW filter on device team0
[ 1321.541514][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1321.541644][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1321.586675][ T6866] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1321.586812][ T6866] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1322.990377][T11885] hsr_slave_0: left promiscuous mode
[ 1323.034188][T11885] hsr_slave_1: left promiscuous mode
[ 1323.037438][T11885] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1323.037462][T11885] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1323.100818][T11885] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1323.100847][T11885] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1323.150695][T14800] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1323.261159][T11885] veth1_macvtap: left promiscuous mode
[ 1323.261226][T11885] veth0_macvtap: left promiscuous mode
[ 1323.262710][T11885] veth1_vlan: left promiscuous mode
[ 1323.264477][T11885] veth0_vlan: left promiscuous mode
[ 1323.309055][T14800] usb 8-1: Using ep0 maxpacket: 8
[ 1323.309772][T14800] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1323.311167][T14800] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[ 1323.311222][T14800] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1323.311240][T14800] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1323.311258][T14800] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1323.311276][T14800] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1323.311306][T14800] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1323.318859][ T5956] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[ 1323.491639][ T5956] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1323.492381][ T5956] usb 9-1: not running at top speed; connect to a high speed hub
[ 1323.492434][ T5956] usb 9-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1323.494044][ T5956] usb 9-1: config 14 has an invalid interface number: 57 but max is 1
[ 1323.494069][ T5956] usb 9-1: config 14 has an invalid interface number: 228 but max is 1
[ 1323.494090][ T5956] usb 9-1: config 14 has no interface number 0
[ 1323.494106][ T5956] usb 9-1: config 14 has no interface number 1
[ 1323.494180][ T5956] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1323.494204][ T5956] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1323.494230][ T5956] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1323.494254][ T5956] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[ 1323.494281][ T5956] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[ 1323.494306][ T5956] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1323.494328][ T5956] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1323.494353][ T5956] usb 9-1: config 14 interface 57 has no altsetting 0
[ 1323.494371][ T5956] usb 9-1: config 14 interface 228 has no altsetting 0
[ 1323.505733][ T5956] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1323.505761][ T5956] usb 9-1: Product: syz
[ 1323.505777][ T5956] usb 9-1: Manufacturer: syz
[ 1323.505795][ T5956] usb 9-1: SerialNumber: syz
[ 1324.306099][ T5745] usb 8-1: USB disconnect, device number 4
[ 1324.409369][ T5956] legousbtower 9-1:14.57: interrupt endpoints not found
[ 1324.805074][ T5956] legousbtower 9-1:14.228: get version request failed: -121
[ 1324.805202][ T5956] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -121
[ 1325.010565][T14799] usb 9-1: USB disconnect, device number 9
[ 1325.320131][T11885] team0 (unregistering): Port device team_slave_1 removed
[ 1325.379597][T11885] team0 (unregistering): Port device team_slave_0 removed
[ 1325.606301][ T5261] 8021q: adding VLAN 0 to HW filter on device eth22
[ 1326.078418][T16679] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2178'.
[ 1326.232212][T16675] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1328.144611][T16731] openvswitch: netlink: Tunnel attr 232 out of range max 16
[ 1328.229782][ T5261] 8021q: adding VLAN 0 to HW filter on device eth23
[ 1329.008140][T16741] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2189'.
[ 1329.164636][T16741] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1329.358304][T16219] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1329.463263][T16219] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1329.487024][T16219] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1329.586310][T16219] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1329.595248][T16219] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1329.793121][T16219] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1329.813357][T16219] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1329.828847][ T5956] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[ 1329.873426][T16219] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1329.947378][T15989] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1329.981756][ T5956] usb 9-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[ 1329.983113][ T5956] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1329.983160][ T5956] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1330.024881][ T5956] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1330.024910][ T5956] usb 9-1: Product: syz
[ 1330.024925][ T5956] usb 9-1: Manufacturer: syz
[ 1330.024941][ T5956] usb 9-1: SerialNumber: syz
[ 1330.075519][ T5956] usb 9-1: config 0 descriptor??
[ 1330.117239][ T5956] ati_remote 9-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints
[ 1330.318960][T14801] usb 9-1: USB disconnect, device number 10
[ 1330.462323][T15989] veth0_vlan: entered promiscuous mode
[ 1330.523631][ T5261] 8021q: adding VLAN 0 to HW filter on device eth24
[ 1330.555039][T15989] veth1_vlan: entered promiscuous mode
[ 1330.643008][T16219] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1330.713160][T16219] 8021q: adding VLAN 0 to HW filter on device team0
[ 1330.758353][T15989] veth0_macvtap: entered promiscuous mode
[ 1330.770925][T12870] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1330.771089][T12870] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1330.803100][T15989] veth1_macvtap: entered promiscuous mode
[ 1330.841712][ T6866] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1330.841828][ T6866] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1330.889135][ T5745] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1331.019884][T15989] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1331.075156][ T5745] usb 10-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[ 1331.090672][ T5745] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1331.090702][ T5745] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1331.090722][ T5745] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1331.090770][ T5745] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1331.095013][ T5745] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1331.095038][ T5745] usb 10-1: Product: syz
[ 1331.095054][ T5745] usb 10-1: Manufacturer: syz
[ 1331.190015][ T5745] cdc_wdm 10-1:1.0: skipping garbage
[ 1331.190051][ T5745] cdc_wdm 10-1:1.0: skipping garbage
[ 1331.218752][ T5745] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1331.218785][ T5745] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1331.225842][T15989] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1331.403254][T14799] usb 10-1: USB disconnect, device number 10
[ 1332.000115][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.002060][  T584] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.002204][  T584] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.184804][T14799] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1332.374384][T14799] usb 10-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[ 1332.402168][T14799] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1332.402202][T14799] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1332.402229][T14799] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1332.402281][T14799] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1332.497182][T14799] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1332.497218][T14799] usb 10-1: Product: syz
[ 1332.497234][T14799] usb 10-1: Manufacturer: syz
[ 1332.606283][ T6867] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1332.645074][T14799] cdc_wdm 10-1:1.0: skipping garbage
[ 1332.645096][T14799] cdc_wdm 10-1:1.0: skipping garbage
[ 1332.672617][T14799] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1332.672639][T14799] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1333.447710][T10104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1333.529145][T10104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1333.532993][T10104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1333.562524][T10104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1333.566018][T10104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1333.758207][T14797] usb 10-1: USB disconnect, device number 11
[ 1333.786950][T16831] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2200'.
[ 1333.867117][T16828] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1334.680261][T16219] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1336.168984][T15411] Bluetooth: hci4: command tx timeout
[ 1336.839434][T16859] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16
[ 1338.192064][T15411] Bluetooth: hci4: command tx timeout
[ 1338.577492][T16883] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2212'.
[ 1338.695247][T12834] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1338.739667][T16885] 
[ 1338.742045][T16885] ======================================================
[ 1338.749081][T16885] WARNING: possible circular locking dependency detected
[ 1338.756133][T16885] syzkaller #0 Tainted: G             L     
[ 1338.762114][T16885] ------------------------------------------------------
[ 1338.769211][T16885] syz.8.2211/16885 is trying to acquire lock:
[ 1338.775268][T16885] ffff8880244f5d60 (&sb->s_type->i_mutex_key#26){+.+.}-{4:4}, at: configfs_depend_item_unlocked+0x153/0x420
[ 1338.786775][T16885] 
[ 1338.786775][T16885] but task is already holding lock:
[ 1338.794128][T16885] ffffffff9020af58 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0xf8/0x550
[ 1338.803355][T16885] 
[ 1338.803355][T16885] which lock already depends on the new lock.
[ 1338.803355][T16885] 
[ 1338.813750][T16885] 
[ 1338.813750][T16885] the existing dependency chain (in reverse order) is:
[ 1338.822786][T16885] 
[ 1338.822786][T16885] -> #3 (tpg_instances_lock){+.+.}-{4:4}:
[ 1338.830701][T16885]        mutex_lock_nested+0x55/0x1d0
[ 1338.836086][T16885]        tcm_alloc_inst+0x65/0x1a0
[ 1338.841217][T16885]        usb_get_function_instance+0xe3/0x2f0
[ 1338.847284][T16885]        function_make+0x127/0x360
[ 1338.852407][T16885]        configfs_mkdir+0x4f6/0x9e0
[ 1338.857642][T16885]        vfs_mkdir+0x417/0x670
[ 1338.862401][T16885]        filename_mkdirat+0x288/0x560
[ 1338.867774][T16885]        __se_sys_mkdirat+0x35/0x150
[ 1338.873072][T16885]        do_syscall_64+0x166/0x520
[ 1338.878182][T16885]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1338.884586][T16885] 
[ 1338.884586][T16885] -> #2 (func_lock){+.+.}-{4:4}:
[ 1338.891715][T16885]        mutex_lock_nested+0x55/0x1d0
[ 1338.897089][T16885]        usb_get_function_instance+0x2e/0x2f0
[ 1338.903153][T16885]        function_make+0x127/0x360
[ 1338.908264][T16885]        configfs_mkdir+0x4f6/0x9e0
[ 1338.913462][T16885]        vfs_mkdir+0x417/0x670
[ 1338.918227][T16885]        filename_mkdirat+0x288/0x560
[ 1338.923689][T16885]        __se_sys_mkdirat+0x35/0x150
[ 1338.928985][T16885]        do_syscall_64+0x166/0x520
[ 1338.934131][T16885]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1338.940544][T16885] 
[ 1338.940544][T16885] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[ 1338.948801][T16885]        mutex_lock_nested+0x55/0x1d0
[ 1338.954204][T16885]        configfs_rmdir+0x5f0/0x950
[ 1338.959404][T16885]        vfs_rmdir+0x3e9/0x700
[ 1338.964172][T16885]        filename_rmdir+0x276/0x510
[ 1338.969383][T16885]        __se_sys_rmdir+0x2e/0x140
[ 1338.974587][T16885]        do_syscall_64+0x166/0x520
[ 1338.979691][T16885]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1338.986097][T16885] 
[ 1338.986097][T16885] -> #0 (&sb->s_type->i_mutex_key#26){+.+.}-{4:4}:
[ 1338.994788][T16885]        __lock_acquire+0x164c/0x2de0
[ 1339.000166][T16885]        lock_acquire+0x115/0x350
[ 1339.005199][T16885]        down_write+0x35/0x50
[ 1339.009883][T16885]        configfs_depend_item_unlocked+0x153/0x420
[ 1339.016401][T16885]        usbg_make_tpg+0x1e0/0x550
[ 1339.021528][T16885]        target_fabric_make_tpg+0xa8/0x6d0
[ 1339.027327][T16885]        configfs_mkdir+0x4f6/0x9e0
[ 1339.032551][T16885]        vfs_mkdir+0x417/0x670
[ 1339.037321][T16885]        filename_mkdirat+0x288/0x560
[ 1339.042683][T16885]        __se_sys_mkdirat+0x35/0x150
[ 1339.047964][T16885]        do_syscall_64+0x166/0x520
[ 1339.053083][T16885]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1339.059528][T16885] 
[ 1339.059528][T16885] other info that might help us debug this:
[ 1339.059528][T16885] 
[ 1339.069756][T16885] Chain exists of:
[ 1339.069756][T16885]   &sb->s_type->i_mutex_key#26 --> func_lock --> tpg_instances_lock
[ 1339.069756][T16885] 
[ 1339.083593][T16885]  Possible unsafe locking scenario:
[ 1339.083593][T16885] 
[ 1339.091054][T16885]        CPU0                    CPU1
[ 1339.096415][T16885]        ----                    ----
[ 1339.101792][T16885]   lock(tpg_instances_lock);
[ 1339.106482][T16885]                                lock(func_lock);
[ 1339.112905][T16885]                                lock(tpg_instances_lock);
[ 1339.120098][T16885]   lock(&sb->s_type->i_mutex_key#26);
[ 1339.125564][T16885] 
[ 1339.125564][T16885]  *** DEADLOCK ***
[ 1339.125564][T16885] 
[ 1339.133699][T16885] locks held by syz.8.2211/16885: 4, last CPU#1:
[ 1339.140020][T16885]  #0: ffff88801efc4528 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1339.149238][T16885]  #1: ffff88806dd7b788 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[ 1339.160037][T16885]  #2: ffffffff8fed0f60 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b0/0x9e0
[ 1339.169781][T16885]  #3: ffffffff9020af58 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0xf8/0x550
[ 1339.179437][T16885] 
[ 1339.179437][T16885] stack backtrace:
[ 1339.185353][T16885] CPU: 1 UID: 0 PID: 16885 Comm: syz.8.2211 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1339.196816][T16885] Tainted: [L]=SOFTLOCKUP
[ 1339.201129][T16885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1339.211183][T16885] Call Trace:
[ 1339.214459][T16885]  <TASK>
[ 1339.217400][T16885]  dump_stack_lvl+0xe8/0x150
[ 1339.222001][T16885]  print_circular_bug+0x2e2/0x300
[ 1339.227020][T16885]  check_noncircular+0x12f/0x150
[ 1339.231952][T16885]  __lock_acquire+0x164c/0x2de0
[ 1339.236833][T16885]  lock_acquire+0x115/0x350
[ 1339.241350][T16885]  ? configfs_depend_item_unlocked+0x153/0x420
[ 1339.247529][T16885]  down_write+0x35/0x50
[ 1339.251696][T16885]  ? configfs_depend_item_unlocked+0x153/0x420
[ 1339.257858][T16885]  configfs_depend_item_unlocked+0x153/0x420
[ 1339.263843][T16885]  usbg_make_tpg+0x1e0/0x550
[ 1339.268435][T16885]  ? __pfx_usbg_make_tpg+0x10/0x10
[ 1339.273550][T16885]  target_fabric_make_tpg+0xa8/0x6d0
[ 1339.278837][T16885]  configfs_mkdir+0x4f6/0x9e0
[ 1339.283522][T16885]  ? __pfx_smack_inode_permission+0x10/0x10
[ 1339.289415][T16885]  ? __pfx_configfs_mkdir+0x10/0x10
[ 1339.294618][T16885]  ? bpf_lsm_inode_mkdir+0x9/0x20
[ 1339.299630][T16885]  ? security_inode_mkdir+0xc3/0x340
[ 1339.304914][T16885]  vfs_mkdir+0x417/0x670
[ 1339.309161][T16885]  filename_mkdirat+0x288/0x560
[ 1339.314015][T16885]  ? __pfx_filename_mkdirat+0x10/0x10
[ 1339.319383][T16885]  ? do_getname+0x151/0x250
[ 1339.323898][T16885]  __se_sys_mkdirat+0x35/0x150
[ 1339.328657][T16885]  do_syscall_64+0x166/0x520
[ 1339.333250][T16885]  ? trace_irq_disable+0x3b/0x140
[ 1339.338276][T16885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1339.344350][T16885]  ? clear_bhb_loop+0x70/0xc0
[ 1339.349027][T16885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1339.354922][T16885] RIP: 0033:0x7fd7844bfb19
[ 1339.359335][T16885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1339.378934][T16885] RSP: 002b:00007fd7826f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1339.387338][T16885] RAX: ffffffffffffffda RBX: 00007fd784746090 RCX: 00007fd7844bfb19
[ 1339.395300][T16885] RDX: 00000000000001ff RSI: 0000200000000540 RDI: ffffffffffffff9c
[ 1339.403317][T16885] RBP: 00007fd784557b70 R08: 0000000000000000 R09: 0000000000000000
[ 1339.411278][T16885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1339.419238][T16885] R13: 00007fd784746128 R14: 00007fd784746090 R15: 00007ffd744ea7a8
[ 1339.427209][T16885]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1339.448527][T16883] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1339.582841][T16219] veth0_vlan: entered promiscuous mode
[ 1339.807092][T12834] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.157356][T12834] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.760497][T12834] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1341.880436][T12834] bridge_slave_1: left allmulticast mode
[ 1341.880463][T12834] bridge_slave_1: left promiscuous mode
[ 1341.880652][T12834] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1342.040435][T12834] bridge_slave_0: left allmulticast mode
[ 1342.040465][T12834] bridge_slave_0: left promiscuous mode
[ 1342.040624][T12834] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1342.759292][T12834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1342.819169][T12834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1342.859903][T12834] bond0 (unregistering): Released all slaves
[ 1343.610430][T12834] hsr_slave_0: left promiscuous mode
[ 1343.649274][T12834] hsr_slave_1: left promiscuous mode
[ 1343.649992][T12834] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1343.650015][T12834] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1343.699473][T12834] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1343.699495][T12834] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1343.759347][T12834] veth1_macvtap: left promiscuous mode
[ 1343.759390][T12834] veth0_macvtap: left promiscuous mode
[ 1343.759473][T12834] veth1_vlan: left promiscuous mode
[ 1343.759533][T12834] veth0_vlan: left promiscuous mode
[ 1344.259195][T12834] team0 (unregistering): Port device team_slave_1 removed
[ 1344.299162][T12834] team0 (unregistering): Port device team_slave_0 removed
[ 1345.630545][T12834] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.670095][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1345.920230][T12834] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1345.970180][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1346.212887][T12834] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.270858][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1346.490356][T12834] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.570704][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1347.170149][ T5261] 8021q: adding VLAN 0 to HW filter on device eth26
[ 1347.640264][ T5261] 8021q: adding VLAN 0 to HW filter on device eth25
[ 1348.070454][T12834] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1348.110811][ T5261] 8021q: adding VLAN 0 to HW filter on device eth27
[ 1348.339958][T12834] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1348.590591][T12834] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1348.657734][ T5261] 8021q: adding VLAN 0 to HW filter on device eth28