last executing test programs:

7.819996578s ago: executing program 0 (id=1886):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x54815}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

7.448572987s ago: executing program 0 (id=1892):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4800)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101001, 0x0)
close(r5)
socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}})
r6 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4)

6.453568512s ago: executing program 0 (id=1896):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f6164b11d7cf302ca932e56a7ed20656372797074667320757365723a7d20"], 0x2b, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000480)="bc5986ffa62b18f9df15470243f89d053305c679f06682db201f82c9db3a36d4e4b7257ab2065d3fe42bacf4aefd5bdd8bbc854b4fe3678a5056d23200eb1427ccb25c33cd81df1788b890e99a6d5271bac3626a33c93f537aa584", 0x5b, 0xfffffffffffffffe)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x80000001, 0x511640)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
r1 = dup(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, <r3=>0x0}, 0x2020)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}})
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffa, 0x82ab01)
socket$inet_tcp(0x2, 0x1, 0x0)
write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f)
write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xd18e, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0)
read(r1, &(0x7f0000000040), 0x0)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046})
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000280)=""/74, 0x4a}], 0x1)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20080014}, 0x4004000)
pselect6(0x40, &(0x7f0000000080)={0x10, 0x0, 0x6, 0x9, 0xa48f, 0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000540)={[{@redirect_dir_off}, {@userxattr}]})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

6.441760872s ago: executing program 2 (id=1897):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x40, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000b40))
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
prlimit64(0x0, 0x5, 0x0, &(0x7f00000016c0))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, <r5=>0xffffffffffffffff, {0x29}}, './file0\x00'})
ioprio_set$pid(0x2, 0x0, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x64)
socket(0x2, 0x80805, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
r6 = open(0x0, 0x84242, 0x1df2a23c5997fad6)
sendfile(r6, r6, &(0x7f0000000080), 0x7f03)
fallocate(r2, 0x0, 0x1, 0x7)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r7 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2)

6.417858423s ago: executing program 1 (id=1898):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @local}, {0x2, 0x4e23, @empty}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8, 0xfffe})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="a61001002f", 0x5, 0x7ffffffe)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

5.470079866s ago: executing program 3 (id=1900):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r5, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2)
close(r3)
socket(0x40000000015, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r5, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="84db0b9ef1cafdab", 0xa888}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004015)

5.469265896s ago: executing program 0 (id=1901):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsopen(0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2c, 0x800000000004}, &(0x7f0000bbdffc))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'xfrm0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x3a)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff03000000"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000600)={0x14, 0x0, 0x0}, &(0x7f0000001800)={0x1c, &(0x7f0000000640)=ANY=[], 0x0, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x40}})
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}})
mmap(&(0x7f0000cda000/0x4000)=nil, 0x4000, 0x9, 0x12, 0xffffffffffffffff, 0x173b000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)

5.410803147s ago: executing program 2 (id=1902):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x54815}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5.277023211s ago: executing program 4 (id=1903):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)

5.160978074s ago: executing program 4 (id=1904):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, 0x0, 0x0)

4.773337253s ago: executing program 3 (id=1905):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe)
keyctl$revoke(0x3, r3)
add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)="6a9031c2d2f647e6ee164e02c2832642a30098b7f46758361b920bb9b2a55d0493235ba354095f3d4ce94c24779bf3f0b2f453fec24ee7ebf228dbecf7d1652d6caa1a47a959c37378cca7273419243065f948fcaf053f6fe74e6238bb35f0db3a6fbf635152de78931f1d4b958ddc0df723", 0x72, r3)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
shutdown(r4, 0x1)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x598, 0xe0, 0xe0, 0x0, 0x0, 0x1c0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x48000000, {}, [@common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x7ff, 0x2, 0x1, [0xff, 0x4239, 0x1, 0x8001, 0xb1, 0xfff5, 0x5, 0xd, 0xfff, 0x3, 0xb, 0xa, 0x5, 0x10, 0x2, 0xc], 0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000880)={0x999, 0x75, 0x2, {0x98e, "d61beebfa5542d68638e436f2987b45c20ddc9b8032456354a36ebf51108a2c83e2d59825ef1c627bb06aa2cd098b180d941edc04a025195e9d5a6642e5ab450b79247a5ebe48c7788a2124298520ca42eac897947f0059ba303b959d8642c8380d4ee3f2d4103dd1f7063ebd37ef60f652c358790ba313d3b220a47493a4ae3b68aa26770c5939a2b88c6b22c3dd6c6f9182736a7a3c525f27368cb7c35071ef7fd7b1b2f084e1069d82932466618c8806365a4ece503605019e3689e0d612de42aab90beddebcc661cb707625912b56b2dae71ec570fff0fb696f509909dea12b24d405dbc10df7dbea36fbc7111050bfb049151ec6367214c23979b5ae8ed70f5e68a643fc38b10152def45ee124b875fea57601bf5636c101ea1332dbd1ecdf8c01b20ef5ba1c9dfee1559ee4395a6a6eb43a71aefe5711d8e08ed3687dc0e3777f8c40743ecde111e9f9663eae3b5547a0e9400f20ddaef74cdccab7f768f2dae0ca51f628c36821b27babe7b57c5f0892708d61eec067cef38ad77e464c489c4b6a5c413af8e5459e046d301d53551ffd99064ed95610895ff4f6a445d3ccbdfc77cbd36bea14f40c75ca1eaa42e5e8400f467d08a539c74fcc7dcf92edc14b8d2a7c9cf21617a568f375968c7407d5714d695544378a00683b53a3f816c6331a271714735cfb92dec0f11957c0e722acceb819afad3d5ced84f97dbf7c3034fd5a7508c31643ad75ea3c858d6b70e1b1a8990cdb6ee7b458e123db9f91e36982df2c3ef3e1070380e977288c5a115e5df4cafc4f23f2235c6b86f02cea204e22ba87a750981c9b791c3fae8a624e9cae2a85e2911fab68c00a9e3c5c1ffa3142063c268559c1d5f9e548107a05359e6b130fb54adc322772d2f5c86ba841e73e719cefed9f3b0a8c0d15ff8bea5b24a0eb8f65afc8535b9883afb23b9677df7eabe1cdb7637734b2e525c0f7309c64426b78159dac25aa8192c89256a781d9db142f845effbb688477abdeb5e5b119b498cd8070a436bc29fc9823d1f51e3e4c7da693080cc3e5232c18c003899949ad94637963aa83884aa2216308c7a898d5ad43a9103d2fc07153e67605b5a28a83cbaaab0dd4a48a2756b04f63c00639edaf7755d33d3a582a7e724f32426cca8848402c3fef4a765429f345d9a77ee55429c5d8f41b1e291f237ca740ec9a69634180be19656a56053ebabe7599c0a742e226be9392627a5d2efbb2e4c20e9fb743c5825d466babf92cb12a0d599147406a08c9d1e8cb137d01b73f22d606f621a0108b470f781b896f6593c07f51dab0f16fce3380ea3d44feb25dfd80de28b8beab02ab666ac4118dad1d29ea1b7d3ea461a0e905cdd8162d7a7e0ea5b0245a68860e54b6bebef36bf5e22b0e81fc7400d9f87955f9d4c0872ca57727050bd742bc8ff9189613ea19d06e93d04785b17967cf53889e9ffe04c0cbb5eeafe8a82c1a5c5e4a047f9cff137963c6f13fb4f0589cc1158a1d7d9cfd4cc37ba587875704cb9d5d3d92938e226a56088586f19f6cc3792b72293745334b16b0da2ba41c43657621680bae18912c13711197c3d84a43c46d12d03031b44829f67b825febff021d7b46bb5b710a8b54c83b917ed382b9736459fc9570453d741ea7ff4c0b5657fdc41c277f03f1d419432429b0a9477123639ae127c90de0060f1c000536d3f0dddee9ba37d33b1e6de7b2202ef4e5306c6d4c54b9599e27226f7876803e59bc7d1b3d30bb1bf5e616508cee95e748739d8fc14abc095b81dc863322e8037689c0cca182586039683beef683b7b91073e3705d49090fdac79f303499f1399f056b89231022b697177347c88b0cc7a0795c09a288f738ddc96f24d0b5c87280d93107d1a41a05b0cf31e1a9f1f53dfa0cc8514250beac5e35f3ff42331b5508c06dfcb3bccb58b84c12cf59afc8f7b553a2a5f1e95f949ea6e1c60b95536e83582878e73a26f081281830306931d731c23f57d37139ddb04cddc182b3e9beffb298cddabe1688c61ee4e2f40c2901e44a630bed3b4afbab42b0b3bc876b315760e68dc9a01fe2878379c6b65ef23be56793404946e923961fe07c876963e4873286d80945716a83ab70b3b6c8e099082ba5483eaa42624b18bc1d46be8eb6729f73159b5aaa119d2bf12e50e41447d1ba0aab09f6811abe26e91a07bf4252bbbbda5e446ec6a62d04b1aaad633e62da781b3951494dad34a5cd236c12e382d5f5200ab8a5e4ed2af8d7e12154c6a27b0a2f3adca22b46bb27e636ed7134b1cdf3255e652c7a8f0ae2064b7503ac83246c58fc9ca1c18c246e2ab2a801cbd35413ada7158ee8730e026de305b095bbfb447da29654c7243d4493cdb7c7c03692cf2f6cea66ff6c48164553588453467278ee0ae711f359d3ecdfbf0ea8186c675a7bdb079b43ec27ceb3d24b705fb5852bcdf95df9e1d43aa189f549163ae13e02e2ea0ba4b7e3aeeae81c0df64ce69dfa96d0c49eb5c6a807ba18a2f2d446e0f5ffb16fbdae3446646be0470757d63795f31df6c313b7f1a33b0d2e561ae848bf98f45531c9bc292c1eab4a36b42793282916a2fdc864dd4f742a212da1981f5793486a1c5533935af65a0201fa3bf67374f15564af407ef78f0b0409684d2c3bd6d0bd351264aee716ecca952a5525b17372a77e3c5556aa124ad5764d3b989fe57c1cbf6868a397a5f33da4d97c5ca01d50300cb7b63c7d274e98de3316953c4c5f46a06a87e36f364dbfbcf5ba436b1061cda9134d924c05978663d95c16e07591c7b26abb95e6ac396ec79fddc019f06dc4672fe2830994bf67aedee31dada4b52384fa630c52e1ba5e7aed7cb36d5ab65b458278307cac6adfe7a54ca936b8718eeb278be58cfaae24cbf4b89143f1dcecbaa9598707181867b238bf372e13bcce06b59b4b7b69e16c1082005fdbffe24b3e555fdc09989614ae2b3b6a19f0225c24584c005df32ae311c6a9b3b49fd1f2ac7e905c5f684d0890c87ccb7989104c0f764c6c6025dfff285139f736e6d0c73e4fc09b88012eac0cf7e610f00fb7d17e24595a0854cfbe03d927b3a3c946c55a6c9d0e70bb12062137af618cbad5f624f9e2bf145e48936f70ae10c46728f171f715bfc9a613cef46eb3ad68c9859e48282e3f98878aab22f70db86fdd0243894e8f29c0a9544b2aaaf3f16db115ecacda3de4f0ec9a7ffd6ada379b403b19faa927b7a010a9822eb1803bd2da451d5aa1ca9e75dff4ef233e27c58741af838244fb78b54bf9463d286c030d2f097830a6c1183ad96388c777cddb051771b6afeae04cd560b307a701c00332b60b86f322044ab425a68c5194c925f0fac4c111fb0053ca66a61db758a7afa3660f8f90e0c504b83fbf446076f002ce977fd35fc777ef977d54360a0099e9803b3c0290fa78fcaa234b5550249b1e3a06b2a599e2f198d"}}, 0x999)
unshare(0x22020600)
syz_open_dev$usbfs(0x0, 0x9, 0x141301)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r7 = fsmount(r6, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x20}, 0x4000004)
openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)

4.621015137s ago: executing program 2 (id=1906):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)}, 0x0)

4.183670588s ago: executing program 4 (id=1907):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, 0x0, 0x0)
bind$tipc(r1, 0x0, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

4.094106109s ago: executing program 4 (id=1908):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff08, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x66642a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x89}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x2}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

3.733660979s ago: executing program 4 (id=1909):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2)
close(r4)
socket(0x40000000015, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="84db0b9ef1cafdab", 0x8}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004015)

3.351020048s ago: executing program 3 (id=1910):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x3481cc60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)

3.28518147s ago: executing program 2 (id=1911):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

3.184479672s ago: executing program 1 (id=1912):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f6164b11d7cf302ca932e56a7ed20656372797074667320757365723a7d20"], 0x2b, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000480)="bc5986ffa62b18f9df15470243f89d053305c679f06682db201f82c9db3a36d4e4b7257ab2065d3fe42bacf4aefd5bdd8bbc854b4fe3678a5056d23200eb1427ccb25c33cd81df1788b890e99a6d5271bac3626a33c93f537aa584", 0x5b, 0xfffffffffffffffe)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x80000001, 0x511640)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
r1 = dup(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, <r3=>0x0}, 0x2020)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}})
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffa, 0x82ab01)
socket$inet_tcp(0x2, 0x1, 0x0)
write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f)
write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xd18e, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0)
read(r1, &(0x7f0000000040), 0x0)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046})
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000280)=""/74, 0x4a}], 0x1)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20080014}, 0x4004000)
pselect6(0x40, &(0x7f0000000080)={0x10, 0x0, 0x6, 0x9, 0xa48f, 0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000540)={[{@redirect_dir_off}, {@userxattr}]})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

3.141388003s ago: executing program 2 (id=1913):
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776", 0x80, 0x840, 0x0, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaac7533137cd4e1eaaaaaaaaaaaa"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000580)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7)

3.070632085s ago: executing program 4 (id=1914):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_connect$uac2(0x5, 0xad, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x4068, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0xa3, 0x80, 0x2, {0x8, 0xb, 0x0, 0x0, 0x1, 0x2, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x5, 0xe, 0x86}, [@mixer_unit={0x5, 0x24, 0x4, 0x3, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x80, 0x9, 0xfa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x100, 0x6, 0x1}, @as_header={0x10, 0x24, 0x1, 0x1, 0xae, 0x0, 0x1002, 0x1, 0x3, 0xc}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x81, 0x0, "", '(['}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xe, 0x0, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0xf, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xc, 0xff, 0x1, {0x8, 0x25, 0x1, 0x81, 0xc, 0x1, 0x7}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x2, 0x60, 0x58, 0x20}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")
dup(0xffffffffffffffff)

2.726827863s ago: executing program 3 (id=1915):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r5, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2)
close(r3)
socket(0x40000000015, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r5, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="84db0b9ef1cafdab", 0xa888}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004015)

2.543714568s ago: executing program 3 (id=1916):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x54815}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.266471605s ago: executing program 1 (id=1917):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {0x0}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, 0x0, 0x0)

1.286922989s ago: executing program 1 (id=1918):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, 0x0, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r0, 0x0, 0x0)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

1.209723491s ago: executing program 1 (id=1919):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
close(r2)
ppoll(0x0, 0x0, 0x0, &(0x7f000000c240), 0x8)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r5, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r6=>0x0, 0x29, 0xfb, 0x2, 0x2, 0x2, @remote, @mcast1, 0x7, 0x8, 0x0, 0x9}})
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x88}, 0x4000)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0d5}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.108643713s ago: executing program 0 (id=1920):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe)
keyctl$revoke(0x3, r3)
add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)="6a9031c2d2f647e6ee164e02c2832642a30098b7f46758361b920bb9b2a55d0493235ba354095f3d4ce94c24779bf3f0b2f453fec24ee7ebf228dbecf7d1652d6caa1a47a959c37378cca7273419243065f948fcaf053f6fe74e6238bb35f0db3a6fbf635152de78931f1d4b958ddc0df723", 0x72, r3)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
shutdown(r4, 0x1)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c8, 0xe0, 0xe0, 0x0, 0x0, 0x1c0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x108, 0x130, 0x48000000, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e21, 0x4e21]}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x7ff, 0x2, 0x1, [0xff, 0x4239, 0x1, 0x8001, 0xb1, 0xfff5, 0x5, 0xd, 0xfff, 0x3, 0xb, 0xa, 0x5, 0x10, 0x2, 0xc], 0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000880)={0x999, 0x75, 0x2, {0x98e, "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"}}, 0x999)
unshare(0x22020600)
syz_open_dev$usbfs(0x0, 0x9, 0x141301)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r7 = fsmount(r6, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x20}, 0x4000004)
openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)

129.592387ms ago: executing program 0 (id=1921):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)}, 0x0)

113.041527ms ago: executing program 1 (id=1922):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @local}, {0x2, 0x4e23, @empty}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8, 0xfffe})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="a61001002f", 0x5, 0x7ffffffe)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

90.561998ms ago: executing program 3 (id=1923):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x89Z7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\x06\x00\x00\x00\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
ftruncate(r1, 0xfffd)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r2, 0x0)
clock_gettime(0xfffffffffffffff1, &(0x7f0000000000))

0s ago: executing program 2 (id=1924):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2)
close(r4)
socket(0x40000000015, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="84db0b9ef1cafdab", 0x8}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004015)

kernel console output (not intermixed with test programs):

 69.164757][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.172984][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.182019][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.192037][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.200635][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.216924][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.245343][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.258786][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.272045][ T4187] device veth0_macvtap entered promiscuous mode
[   69.302834][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   69.311169][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.319482][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.328534][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.345196][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.357601][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.366658][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.376172][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.418053][ T4187] device veth1_macvtap entered promiscuous mode
[   69.433354][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.442686][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.451657][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.468969][ T4189] device veth0_macvtap entered promiscuous mode
[   69.478681][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.499196][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.499252][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.517239][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.527232][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.538343][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.550098][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.564615][ T4185] device veth0_macvtap entered promiscuous mode
[   69.597599][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.606336][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.616354][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.627463][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.636673][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   69.645758][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   69.655360][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.676197][ T4189] device veth1_macvtap entered promiscuous mode
[   69.692701][ T4185] device veth1_macvtap entered promiscuous mode
[   69.701466][ T1325] Bluetooth: hci2: command 0x040f tx timeout
[   69.708064][ T1325] Bluetooth: hci4: command 0x040f tx timeout
[   69.715665][ T1325] Bluetooth: hci1: command 0x040f tx timeout
[   69.721125][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.723242][ T1325] Bluetooth: hci0: command 0x040f tx timeout
[   69.743049][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.753170][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.763863][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.774750][ T4233] Bluetooth: hci3: command 0x040f tx timeout
[   69.782852][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.792207][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.800483][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.808810][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.817897][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.841949][ T4229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.849789][ T4229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.873183][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.882344][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.894534][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.904336][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.916988][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.937064][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.951498][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.966803][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.977848][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.987847][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.998387][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.012604][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.030424][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.048909][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.071411][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.083777][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.096184][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.107434][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.117623][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.128432][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.138569][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.149282][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.162134][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.169758][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.186972][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.197075][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.205266][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.215371][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.247750][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.262588][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.272480][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.283496][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.294603][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.305360][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.322694][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.352726][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.364224][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.374278][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.387740][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.417677][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.429822][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.439887][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.450588][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.462435][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.469785][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.478601][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.489053][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.498961][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.510633][ T4229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.521556][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.530283][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.538411][ T4229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.548428][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.557289][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.578037][ T4267] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3'.
[   70.591752][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.604267][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.617394][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.629115][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.642003][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.771095][ T4229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.778962][ T4229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.833293][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.932491][ T4229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.940388][ T4229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.981546][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.989400][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.997175][ T4229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.015236][ T4229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.023772][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.041340][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   71.070022][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.088798][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.099825][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.141920][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.148713][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.220460][ T4282] netlink: 'syz.3.11': attribute type 29 has an invalid length.
[   71.225783][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.251141][ T4282] netlink: 'syz.3.11': attribute type 29 has an invalid length.
[   71.261558][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.297207][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.321536][ T4287] netlink: 'syz.3.11': attribute type 29 has an invalid length.
[   71.343208][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.427093][ T4282] netlink: 'syz.3.11': attribute type 29 has an invalid length.
[   71.457048][ T4282] netlink: 'syz.3.11': attribute type 29 has an invalid length.
[   71.518383][ T4293] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[   71.739224][ T4306] netlink: 'syz.3.16': attribute type 39 has an invalid length.
[   71.769512][ T4303] =======================================================
[   71.769512][ T4303] WARNING: The mand mount option has been deprecated and
[   71.769512][ T4303]          and is ignored by this kernel. Remove the mand
[   71.769512][ T4303]          option from the mount to silence this warning.
[   71.769512][ T4303] =======================================================
[   71.772242][ T4200] Bluetooth: hci0: command 0x0419 tx timeout
[   71.837268][ T4304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'.
[   71.973291][ T4200] Bluetooth: hci1: command 0x0419 tx timeout
[   71.975599][ T4303] overlayfs: conflicting options: userxattr,redirect_dir=off
[   72.005354][ T4200] Bluetooth: hci4: command 0x0419 tx timeout
[   72.025570][ T4200] Bluetooth: hci2: command 0x0419 tx timeout
[   72.054720][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[   72.422762][ T4333] netlink: 'syz.1.30': attribute type 10 has an invalid length.
[   72.470023][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.478340][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.596133][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.603337][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.611949][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.619156][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.664204][ T4333] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   72.674612][ T4339] device bridge0 entered promiscuous mode
[   72.915474][ T4358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.38'.
[   72.981498][ T4358] : renamed from caif0
[   73.018664][ T4358] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[   73.087200][ T4360] netlink: 'syz.2.40': attribute type 10 has an invalid length.
[   73.122828][ T4360] netlink: 164 bytes leftover after parsing attributes in process `syz.2.40'.
[   73.320440][ T4368] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[   73.860092][ T4381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'.
[   73.969509][ T4371] overlayfs: conflicting options: userxattr,redirect_dir=off
[   74.091930][ T1325] Bluetooth: hci4: command 0x0405 tx timeout
[   74.738081][ T4405] netlink: 3 bytes leftover after parsing attributes in process `syz.1.51'.
[   75.288430][ T4417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'.
[   76.206880][ T4430] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[   76.326653][ T4434] overlayfs: conflicting options: userxattr,redirect_dir=off
[   76.856717][ T4442] netlink: 'syz.1.62': attribute type 10 has an invalid length.
[   76.865734][ T4442] netlink: 152 bytes leftover after parsing attributes in process `syz.1.62'.
[   76.927198][ T4442] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   77.273627][ T4454] fuse: Bad value for 'fd'
[   77.436638][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'.
[   78.266562][ T4461] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   78.382102][ T4468] netlink: 'syz.2.70': attribute type 10 has an invalid length.
[   78.445988][ T4468] team0: Device wg1 is of different type
[   78.555336][ T4472] netlink: 'syz.1.71': attribute type 10 has an invalid length.
[   78.597670][ T4472] netlink: 40 bytes leftover after parsing attributes in process `syz.1.71'.
[   78.683917][ T4472] netlink: 'syz.1.71': attribute type 10 has an invalid length.
[   78.740967][ T4472] netlink: 40 bytes leftover after parsing attributes in process `syz.1.71'.
[   78.979449][ T4480] netlink: 'syz.0.74': attribute type 10 has an invalid length.
[   79.252052][ T4480] device syz_tun entered promiscuous mode
[   79.295171][ T4480] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   80.189480][ T4499] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[   80.377524][ T4500] overlayfs: conflicting options: userxattr,redirect_dir=off
[   82.580803][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   82.590812][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   82.600789][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!!
[   82.610792][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!!
[   82.620798][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!!
[   82.630788][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   82.640798][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   82.650794][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   82.660792][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   82.670815][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   86.631875][ T1110] cfg80211: failed to load regulatory.db
[   87.042394][ T4564] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[   87.325743][ T4565] overlayfs: conflicting options: userxattr,redirect_dir=off
[   88.495177][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'.
[   90.759512][ T4605] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[   91.098608][ T4618] syz.4.119 uses obsolete (PF_INET,SOCK_PACKET)
[   91.123928][ T4605] overlayfs: conflicting options: userxattr,redirect_dir=off
[   91.216056][ T4618] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   92.181639][ T4633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'.
[   92.763588][ T4194] Bluetooth: hci0: command 0x0c1a tx timeout
[   93.220019][ T4638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'.
[   93.288785][ T4638] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.505433][ T4642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.126'.
[   94.656235][ T4650] netlink: 'syz.2.129': attribute type 10 has an invalid length.
[   94.739474][ T4650] device syz_tun entered promiscuous mode
[   94.827098][ T4650] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   94.999019][ T4655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'.
[   95.089053][ T4660] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[   95.162112][   T26] audit: type=1326 audit(1785926887.591:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.3.131" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b5a33f019 code=0x0
[   95.252747][ T4660] overlayfs: conflicting options: userxattr,redirect_dir=off
[   95.590612][ T4668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.134'.
[   95.620137][ T4668] device sit0 entered promiscuous mode
[   95.653836][ T4668] netlink: 'syz.1.134': attribute type 1 has an invalid length.
[   95.684703][ T4668] netlink: 9 bytes leftover after parsing attributes in process `syz.1.134'.
[   97.263444][ T4696] tipc: Failed to remove unknown binding: 66,0,0/0:999999908/999999910
[   97.278865][ T4696] tipc: Failed to remove unknown binding: 66,0,0/0:999999908/999999909
[   97.295814][ T4696] tipc: Failed to remove unknown binding: 66,0,0/0:999999908/999999910
[   97.317637][ T4696] tipc: Failed to remove unknown binding: 66,0,0/0:999999908/999999909
[   97.452428][ T4697] device bond1 entered promiscuous mode
[   97.459121][ T4697] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.480539][ T4701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'.
[   97.545709][   T26] audit: type=1326 audit(1785926889.971:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4695 comm="syz.2.145" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21ea1f7019 code=0x0
[   97.574037][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'.
[   97.670095][ T4697] device bridge1 entered promiscuous mode
[   97.696556][ T4697] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   97.756856][ T4705] netlink: 'syz.3.146': attribute type 10 has an invalid length.
[   97.802264][ T4705] device syz_tun entered promiscuous mode
[   97.837835][ T4705] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   97.871126][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[   97.891735][ T4422] bond0: (slave bond_slave_0): interface is now down
[   97.916691][ T4422] bond0: (slave bond_slave_1): interface is now down
[   97.942619][ T4422] bond0: (slave syz_tun): interface is now down
[   97.994306][ T4422] bond0: now running without any active interface!
[   98.499297][ T4718] device syzkaller0 entered promiscuous mode
[   98.529947][ T4722] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[   98.709367][ T4722] overlayfs: conflicting options: userxattr,redirect_dir=off
[   99.378489][ T4742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.158'.
[   99.489952][ T4746] netlink: 52 bytes leftover after parsing attributes in process `syz.2.157'.
[   99.534509][ T4746] ieee802154 phy1 wpan1: encryption failed: -22
[  100.376595][ T4752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'.
[  100.693528][ T4777] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  100.734378][ T4777] fuse: Bad value for 'fd'
[  100.761706][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'.
[  100.866103][ T4777] overlayfs: conflicting options: userxattr,redirect_dir=off
[  102.019735][ T4803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'.
[  102.159383][ T4805] fuse: Bad value for 'fd'
[  102.184022][ T4808] tipc: Started in network mode
[  102.189274][ T4808] tipc: Node identity ac14140f, cluster identity 4711
[  102.198067][ T4808] tipc: Enabled bearer <udp:syz2>, priority 10
[  103.049147][ T4821] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  103.086774][ T4821] fuse: Bad value for 'fd'
[  103.312461][ T1110] tipc: Node number set to 2886997007
[  103.332652][ T4825] input: syz0 as /devices/virtual/input/input5
[  103.395704][ T4821] overlayfs: conflicting options: userxattr,redirect_dir=off
[  105.695714][ T4890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'.
[  106.497042][ T4903] xt_hashlimit: size too large, truncated to 1048576
[  108.355984][ T4943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'.
[  110.627748][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'.
[  110.691776][ T4998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.248'.
[  110.767843][ T4998] device gretap0 entered promiscuous mode
[  111.737952][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'.
[  111.820936][ T5020] netlink: 44 bytes leftover after parsing attributes in process `syz.1.256'.
[  111.917598][ T5027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.260'.
[  111.932849][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'.
[  111.942144][ T5025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.262'.
[  112.640739][ T5020] netlink: 44 bytes leftover after parsing attributes in process `syz.1.256'.
[  112.839602][ T5039] ip_tables: iptables: counters copy to user failed while replacing table
[  112.852226][ T5039] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  114.884687][ T5070] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  118.834472][ T5145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.300'.
[  122.569179][ T5185] netlink: 72 bytes leftover after parsing attributes in process `syz.2.315'.
[  122.612714][ T5185] netlink: 48 bytes leftover after parsing attributes in process `syz.2.315'.
[  124.266184][ T5212] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  124.748867][ T5212] overlayfs: conflicting options: userxattr,redirect_dir=off
[  125.439040][ T5235] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  125.474954][ T5210] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.629778][ T5217] hid-generic 0005:16C0:5505.0001: collection stack underflow
[  126.654628][ T5217] hid-generic 0005:16C0:5505.0001: item 0 2 0 12 parsing failed
[  126.671758][ T5217] hid-generic: probe of 0005:16C0:5505.0001 failed with error -22
[  126.740565][ T5210] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.833840][ T5210] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.338807][ T5210] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.348922][ T5210] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.358926][ T5210] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.368111][ T5210] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.744352][ T5276] netlink: 72 bytes leftover after parsing attributes in process `syz.3.339'.
[  131.617318][ T5276] device syz_tun left promiscuous mode
[  131.755004][ T5276] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.762511][ T5276] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.842746][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.352712][ T5276] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.432085][ T5276] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.836538][ T5276] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.847995][ T5276] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.864022][ T5276] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.875717][ T5276] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.011049][ T5334] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  134.167305][ T5340] tipc: Started in network mode
[  134.188716][ T5340] tipc: Node identity 62ebd4c23eca, cluster identity 4711
[  134.249365][ T5340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.296708][ T5343] device syzkaller0 entered promiscuous mode
[  134.705205][ T5340] tipc: Resetting bearer <eth:syzkaller0>
[  135.337883][ T4232] tipc: Node number set to 1545721026
[  135.586554][ T5339] tipc: Resetting bearer <eth:syzkaller0>
[  135.651589][ T5339] tipc: Disabling bearer <eth:syzkaller0>
[  135.768317][ T5352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'.
[  135.879177][   T26] audit: type=1326 audit(1785926928.305:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.4.360" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6376f6b019 code=0x0
[  136.137265][ T5365] device syzkaller0 entered promiscuous mode
[  136.218181][ T5376] fuse: Bad value for 'fd'
[  138.700425][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'.
[  138.764705][   T26] audit: type=1326 audit(1785926931.195:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.2.380" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21ea1f7019 code=0x0
[  139.311684][ T5427] fuse: Bad value for 'fd'
[  139.704606][ T5435] fuse: Bad value for 'fd'
[  140.140489][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'.
[  140.425563][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'.
[  140.547160][   T26] audit: type=1326 audit(1785926932.975:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.4.392" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6376f6b019 code=0x0
[  140.638076][ T5458] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  141.211382][ T5477] fuse: Bad value for 'fd'
[  141.568623][ T5484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'.
[  141.822489][ T5488] fuse: Bad value for 'fd'
[  142.790683][ T5503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'.
[  143.001517][   T26] audit: type=1326 audit(1785926935.435:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5502 comm="syz.1.407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5138f019 code=0x0
[  143.293723][ T5520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'.
[  144.772544][ T5546] netlink: 'syz.0.420': attribute type 4 has an invalid length.
[  145.598366][ T5548] syz.0.420 (5548) used greatest stack depth: 19344 bytes left
[  145.968747][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'.
[  146.772927][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'.
[  146.913229][   T26] audit: type=1326 audit(1785926939.345:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5571 comm="syz.2.426" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21ea1f7019 code=0x0
[  148.718052][ T3851] device veth1_vlan left promiscuous mode
[  148.765960][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  149.011422][ T5617] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  149.115386][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'.
[  149.397702][ T5632] overlayfs: conflicting options: userxattr,redirect_dir=off
[  150.135193][ T5652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.439'.
[  150.247074][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'.
[  150.497968][   T26] audit: type=1326 audit(1785926942.925:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5650 comm="syz.1.439" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5138f019 code=0x0
[  152.233363][ T5683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'.
[  152.331044][ T5683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'.
[  153.135769][ T5694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'.
[  153.840838][ T5704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.450'.
[  153.951720][ T5709] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  154.013060][ T5707] device bridge_slave_1 left promiscuous mode
[  154.071313][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.265081][ T5707] device bridge_slave_0 left promiscuous mode
[  154.279346][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.340100][ T5709] overlayfs: conflicting options: userxattr,redirect_dir=off
[  155.704328][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'.
[  155.722112][ T5738] Cannot find set identified by id 0 to match
[  155.730180][ T5728] device syzkaller0 entered promiscuous mode
[  155.840355][ T5725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.454'.
[  155.897743][ T5739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'.
[  155.977921][   T26] audit: type=1326 audit(1785926948.405:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5723 comm="syz.1.454" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5138f019 code=0x0
[  158.022509][ T5762] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  158.353661][ T5762] overlayfs: conflicting options: userxattr,redirect_dir=off
[  159.251512][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'.
[  159.512082][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'.
[  159.950641][ T5789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.473'.
[  160.043759][ T5783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'.
[  160.125713][   T26] audit: type=1326 audit(1785926952.555:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.1.473" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5138f019 code=0x0
[  160.230371][ T5798] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  160.398235][ T5803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.542661][ T5800] overlayfs: conflicting options: userxattr,redirect_dir=off
[  160.960932][ T4200] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  161.112315][ T5807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'.
[  161.172246][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'.
[  161.511016][ T4200] usb 4-1: config 0 has an invalid interface number: 231 but max is 0
[  161.533436][ T4200] usb 4-1: config 0 has no interface number 0
[  161.539865][ T4200] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  161.711060][ T4200] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  161.750790][ T4200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.810891][ T4200] usb 4-1: Product: syz
[  161.830854][ T4200] usb 4-1: Manufacturer: syz
[  161.845963][ T4200] usb 4-1: SerialNumber: syz
[  161.874136][ T4200] usb 4-1: config 0 descriptor??
[  161.912053][ T5803] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  161.969850][ T4200] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, f2:1f:f2:bb:c4:2f
[  163.190866][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'.
[  164.967617][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'.
[  165.149105][ T4201] Bluetooth: hci4: link tx timeout
[  165.154657][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  165.212570][ T4200] usb 4-1: USB disconnect, device number 2
[  165.220217][ T4200] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  165.592764][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'.
[  167.221047][ T5219] Bluetooth: hci4: command 0x0406 tx timeout
[  168.107247][ T5982] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  168.981185][ T5982] can: request_module (can-proto-0) failed.
[  169.676933][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'.
[  170.596260][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'.
[  171.193154][ T6031] netlink: 'syz.3.543': attribute type 4 has an invalid length.
[  173.403863][ T6044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.419830][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'.
[  173.980941][ T4265] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  174.691053][ T4265] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[  174.699297][ T4265] usb 3-1: config 0 has no interface number 0
[  174.753607][ T6064] device bridge0 entered promiscuous mode
[  174.761282][ T6064] device vlan2 entered promiscuous mode
[  174.769668][ T4265] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  174.783739][ T6065] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  174.808238][ T6065] xt_nfacct: accounting object `' does not exist
[  175.031732][ T4265] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  175.789564][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.862048][ T4265] usb 3-1: Product: syz
[  175.866527][ T4265] usb 3-1: Manufacturer: syz
[  175.933236][ T4265] usb 3-1: SerialNumber: syz
[  176.801150][ T6084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.559'.
[  176.833238][ T4265] usb 3-1: config 0 descriptor??
[  176.904200][ T6086] netlink: 'syz.0.561': attribute type 1 has an invalid length.
[  176.931216][ T4265] usb 3-1: can't set config #0, error -71
[  176.964373][ T4201] Bluetooth: hci4: link tx timeout
[  176.969538][ T4201] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  176.999760][ T4265] usb 3-1: USB disconnect, device number 2
[  177.307722][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.565'.
[  179.491457][ T6122] device vlan2 entered promiscuous mode
[  179.521692][ T4265] hid-generic 0005:16C0:5505.0002: item fetching failed at offset 0/2
[  179.531029][ T4265] hid-generic: probe of 0005:16C0:5505.0002 failed with error -22
[  179.540224][ T6122] device dummy0 entered promiscuous mode
[  180.187172][ T6147] Zero length message leads to an empty skb
[  181.071552][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'.
[  183.553480][ T6175] device vlan2 entered promiscuous mode
[  183.559080][ T6175] device gretap0 entered promiscuous mode
[  185.851059][   T21] Bluetooth: hci3: command 0x0406 tx timeout
[  186.150388][   T21] Bluetooth: hci0: command 0x0406 tx timeout
[  186.194546][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'.
[  186.214759][   T21] Bluetooth: hci1: command 0x0406 tx timeout
[  186.254463][   T21] Bluetooth: hci2: command 0x0406 tx timeout
[  187.674939][ T6229] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  190.397606][ T6257] netlink: 'syz.1.613': attribute type 4 has an invalid length.
[  190.686894][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'.
[  193.270064][ T6289] Illegal XDP return value 4294967262, expect packet loss!
[  193.531948][ T6289] device ipvlan2 entered promiscuous mode
[  193.569607][ T6289] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  193.613563][ T6289] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  193.657687][ T6289] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  193.704567][ T6295] can: request_module (can-proto-0) failed.
[  194.012600][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.118245][ T6302] 0: reclassify loop, rule prio 0, protocol 700
[  195.596962][ T6318] tipc: Started in network mode
[  195.736755][ T6318] tipc: Node identity 8a201d68cd3b, cluster identity 4711
[  195.744206][ T6318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.761405][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'.
[  195.801734][ T6318] device syzkaller0 entered promiscuous mode
[  196.627240][ T6318] tipc: Resetting bearer <eth:syzkaller0>
[  196.664423][ T6317] tipc: Resetting bearer <eth:syzkaller0>
[  196.742196][ T6317] tipc: Disabling bearer <eth:syzkaller0>
[  196.783815][ T6328] netlink: 'syz.1.633': attribute type 4 has an invalid length.
[  196.913021][ T6330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.360791][ T4231] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  197.771216][ T4231] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[  198.320731][ T4231] usb 3-1: config 0 has no interface number 0
[  198.519855][ T4231] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  199.012303][ T4231] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  199.029910][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.059274][ T4231] usb 3-1: Product: syz
[  199.067525][ T4231] usb 3-1: Manufacturer: syz
[  199.073527][ T4231] usb 3-1: SerialNumber: syz
[  199.097066][ T4231] usb 3-1: config 0 descriptor??
[  199.133358][ T6330] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  199.254864][ T4231] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, a6:99:58:5f:06:38
[  200.017301][ T6369] device syzkaller0 entered promiscuous mode
[  200.046391][ T6372] fuse: Unknown parameter 'grou00000000000000000000'
[  200.111831][ T6372] input: syz0 as /devices/virtual/input/input6
[  200.328481][ T6379] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.342624][ T6379] device syzkaller0 entered promiscuous mode
[  200.392884][ T6379] tipc: Resetting bearer <eth:syzkaller0>
[  200.435398][ T6378] tipc: Resetting bearer <eth:syzkaller0>
[  200.476474][ T6378] tipc: Disabling bearer <eth:syzkaller0>
[  200.727073][ T6387] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  200.881673][ T6387] can: request_module (can-proto-0) failed.
[  201.971027][ T4231] usb 3-1: USB disconnect, device number 3
[  202.179937][ T4231] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  203.089442][ T6427] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  203.141282][ T6412] device syzkaller0 entered promiscuous mode
[  203.330067][ T6436] fuse: Unknown parameter 'grou00000000000000000000'
[  203.368254][ T6436] input: syz0 as /devices/virtual/input/input7
[  203.385430][ T6428] overlayfs: conflicting options: userxattr,redirect_dir=off
[  203.394182][ T6435] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.410124][ T6435] device syzkaller0 entered promiscuous mode
[  203.454051][ T6435] tipc: Resetting bearer <eth:syzkaller0>
[  203.485580][ T6434] tipc: Resetting bearer <eth:syzkaller0>
[  203.511679][ T6434] tipc: Disabling bearer <eth:syzkaller0>
[  203.698069][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'.
[  204.463826][ T6469] device syzkaller0 entered promiscuous mode
[  205.693996][ T6483] device syzkaller0 entered promiscuous mode
[  205.893497][ T6494] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.922502][ T6494] tipc: Resetting bearer <eth:syzkaller0>
[  205.978045][ T6493] tipc: Disabling bearer <eth:syzkaller0>
[  206.401126][ T6506] fuse: Unknown parameter 'group_i00000000000000000000'
[  206.612943][ T6506] input: syz0 as /devices/virtual/input/input8
[  206.774784][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'.
[  207.077474][ T6528] device syzkaller0 entered promiscuous mode
[  207.250463][ T6532] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.273974][ T6532] tipc: Resetting bearer <eth:syzkaller0>
[  207.293339][ T6531] tipc: Disabling bearer <eth:syzkaller0>
[  208.526580][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'.
[  208.542379][ T6567] netlink: 'syz.3.700': attribute type 4 has an invalid length.
[  208.559223][ T6568] fuse: Unknown parameter 'group_i00000000000000000000'
[  208.604785][ T6568] input: syz0 as /devices/virtual/input/input9
[  208.668090][ T6570] device syzkaller0 entered promiscuous mode
[  210.512574][ T6590] netlink: 'syz.1.708': attribute type 1 has an invalid length.
[  210.553362][ T6590] device bond2 entered promiscuous mode
[  210.559359][ T6590] 8021q: adding VLAN 0 to HW filter on device bond2
[  210.597830][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'.
[  210.619067][ T6590] bond2: (slave bridge1): making interface the new active one
[  210.651245][ T6590] device bridge1 entered promiscuous mode
[  210.666569][ T6590] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  210.732095][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  210.780844][   T26] audit: type=1326 audit(1785927003.179:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.1.708" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5138f019 code=0x0
[  210.969722][ T6608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  211.250836][ T4265] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  211.563187][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'.
[  211.691230][ T4265] usb 1-1: config 0 has an invalid interface number: 231 but max is 0
[  211.704297][ T4265] usb 1-1: config 0 has no interface number 0
[  211.720941][ T4265] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  211.921260][ T4265] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  211.934926][ T4265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.947657][ T6618] fuse: Unknown parameter 'group_i00000000000000000000'
[  211.980753][ T4265] usb 1-1: Product: syz
[  211.995352][ T4265] usb 1-1: Manufacturer: syz
[  212.003215][ T6618] input: syz0 as /devices/virtual/input/input10
[  212.029849][ T4265] usb 1-1: SerialNumber: syz
[  212.064607][ T4265] usb 1-1: config 0 descriptor??
[  212.101082][ T6608] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  212.137645][ T4265] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 7e:42:d3:e9:bb:a2
[  214.060268][ T6658] device syzkaller0 entered promiscuous mode
[  214.137797][ T6660] netlink: 'syz.2.724': attribute type 1 has an invalid length.
[  214.166245][ T6660] device bond2 entered promiscuous mode
[  214.178783][ T6660] 8021q: adding VLAN 0 to HW filter on device bond2
[  214.212155][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'.
[  214.300383][ T6660] bond2: (slave bridge0): making interface the new active one
[  214.354898][ T6660] device bridge0 entered promiscuous mode
[  214.368628][   T26] audit: type=1326 audit(1785927006.786:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.2.724" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21ea1f7019 code=0x0
[  214.373843][ T6660] bond2: (slave bridge0): Enslaving as an active interface with an up link
[  214.407370][  T307] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  214.925399][ T6692] fuse: Unknown parameter 'group_id00000000000000000000'
[  214.942204][ T6692] input: syz0 as /devices/virtual/input/input11
[  215.431588][ T1110] usb 1-1: USB disconnect, device number 2
[  215.445355][ T1110] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  216.621570][ T6723] device syzkaller0 entered promiscuous mode
[  216.849465][ T6725] device syzkaller0 entered promiscuous mode
[  217.185474][ T6741] netlink: 'syz.3.741': attribute type 1 has an invalid length.
[  217.251647][ T6741] device bond1 entered promiscuous mode
[  217.257773][ T6741] 8021q: adding VLAN 0 to HW filter on device bond1
[  217.318246][ T6741] bond1: (slave bridge1): making interface the new active one
[  217.400332][ T6741] device bridge1 entered promiscuous mode
[  217.408916][ T6741] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  217.428121][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  217.435686][   T26] audit: type=1326 audit(1785927009.846:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.3.741" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b5a33f019 code=0x0
[  218.144505][ T6760] device syzkaller0 entered promiscuous mode
[  218.651297][ T6782] netlink: 132 bytes leftover after parsing attributes in process `syz.2.746'.
[  219.221282][ T6784] fuse: Unknown parameter 'group_id00000000000000000000'
[  219.380321][ T6783] input: syz0 as /devices/virtual/input/input12
[  219.579302][ T6790] device syzkaller0 entered promiscuous mode
[  219.785318][ T6799] device syzkaller0 entered promiscuous mode
[  221.002872][ T6824] device syzkaller0 entered promiscuous mode
[  221.050618][ T6828] netlink: 'syz.3.756': attribute type 1 has an invalid length.
[  221.140117][ T6831] netlink: 'syz.2.759': attribute type 4 has an invalid length.
[  221.156015][ T6828] device bond2 entered promiscuous mode
[  221.203270][ T6828] 8021q: adding VLAN 0 to HW filter on device bond2
[  221.326890][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'.
[  221.383419][ T6833] bond2: (slave bridge2): making interface the new active one
[  221.391382][ T6833] device bridge2 entered promiscuous mode
[  221.398200][ T6833] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  221.409072][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  221.486340][ T6842] netlink: 132 bytes leftover after parsing attributes in process `syz.0.760'.
[  221.537801][   T26] audit: type=1326 audit(1785927013.963:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.3.756" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b5a33f019 code=0x0
[  222.424983][ T6856] device syzkaller0 entered promiscuous mode
[  223.317250][ T6858] device syzkaller0 entered promiscuous mode
[  223.521190][ T6876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.820796][ T4231] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  224.742576][ T6894] device syzkaller0 entered promiscuous mode
[  224.816474][ T4231] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[  224.828234][ T4231] usb 3-1: config 0 has no interface number 0
[  224.874611][ T4231] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  225.035900][ T6901] can: request_module (can-proto-0) failed.
[  225.100994][ T4231] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  225.171139][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.233423][ T4231] usb 3-1: Product: syz
[  225.259893][ T4231] usb 3-1: Manufacturer: syz
[  225.271354][ T4231] usb 3-1: SerialNumber: syz
[  225.302092][ T4231] usb 3-1: config 0 descriptor??
[  225.320981][ T6876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  225.347556][ T4231] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 7e:82:7c:cd:9a:d8
[  225.994089][ T6927] device syzkaller0 entered promiscuous mode
[  226.300070][ T6933] device syzkaller0 entered promiscuous mode
[  227.838623][   T21] usb 3-1: USB disconnect, device number 4
[  227.850027][   T21] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  228.087287][ T6962] device syzkaller0 entered promiscuous mode
[  228.230173][ T6967] device syzkaller0 entered promiscuous mode
[  228.553572][ T6998] netlink: 52 bytes leftover after parsing attributes in process `syz.0.797'.
[  228.628310][ T6998] ieee802154 phy1 wpan1: encryption failed: -22
[  230.189734][ T7019] can: request_module (can-proto-0) failed.
[  230.369430][ T7032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.150173][ T7041] device syzkaller0 entered promiscuous mode
[  231.276075][ T7045] netlink: 'syz.4.809': attribute type 4 has an invalid length.
[  231.298441][ T7043] device syzkaller0 entered promiscuous mode
[  231.320814][ T4265] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  232.500384][ T4265] usb 2-1: config 0 has an invalid interface number: 231 but max is 0
[  232.526293][ T4265] usb 2-1: config 0 has no interface number 0
[  232.546011][ T4265] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  232.818245][ T7077] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  232.966788][ T4265] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  232.992052][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.032312][ T7078] overlayfs: conflicting options: userxattr,redirect_dir=off
[  233.033458][ T4265] usb 2-1: Product: syz
[  233.054730][ T4265] usb 2-1: Manufacturer: syz
[  233.070765][ T4265] usb 2-1: SerialNumber: syz
[  233.261359][ T4265] usb 2-1: config 0 descriptor??
[  233.291301][ T4265] usb 2-1: can't set config #0, error -71
[  233.302422][ T4265] usb 2-1: USB disconnect, device number 2
[  234.394110][ T7097] netlink: 52 bytes leftover after parsing attributes in process `syz.2.823'.
[  234.449486][ T7097] ieee802154 phy1 wpan1: encryption failed: -22
[  234.784501][ T7099] device syzkaller0 entered promiscuous mode
[  234.916121][ T7105] device syzkaller0 entered promiscuous mode
[  236.080823][ T7125] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  236.092929][ T7119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.421373][ T5219] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  237.020276][ T7138] netlink: 52 bytes leftover after parsing attributes in process `syz.0.834'.
[  237.032076][ T7138] ieee802154 phy1 wpan1: encryption failed: -22
[  237.060652][ T7133] overlayfs: conflicting options: userxattr,redirect_dir=off
[  237.304549][ T5219] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[  237.323386][ T5219] usb 3-1: config 0 has no interface number 0
[  237.350109][ T5219] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  237.880890][ T5219] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  237.890028][ T5219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.907198][ T5219] usb 3-1: Product: syz
[  237.918900][ T5219] usb 3-1: Manufacturer: syz
[  237.936380][ T5219] usb 3-1: SerialNumber: syz
[  237.959328][ T5219] usb 3-1: config 0 descriptor??
[  238.001089][ T7128] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  238.046707][ T5219] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, d2:c0:c9:35:e4:bd
[  239.747562][ T7174] device syzkaller0 entered promiscuous mode
[  239.894735][ T7180] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.939279][ T7179] tipc: Disabling bearer <eth:syzkaller0>
[  241.029423][ T7193] netlink: 52 bytes leftover after parsing attributes in process `syz.1.845'.
[  241.048096][ T7193] ieee802154 phy1 wpan1: encryption failed: -22
[  241.106727][ T4265] usb 3-1: USB disconnect, device number 5
[  241.114347][ T4265] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  242.054088][ T7201] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  244.991998][ T7247] device syzkaller0 entered promiscuous mode
[  246.714801][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.860'.
[  246.727295][ T7269] device vlan2 entered promiscuous mode
[  246.773671][ T7271] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  246.922473][ T7273] overlayfs: conflicting options: userxattr,redirect_dir=off
[  247.803146][ T7291] fuse: Bad value for 'fd'
[  247.832664][ T7291] input: syz0 as /devices/virtual/input/input13
[  247.948445][ T7299] netlink: 'syz.3.865': attribute type 4 has an invalid length.
[  247.992543][ T7298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.018424][ T7296] tipc: Disabling bearer <eth:syzkaller0>
[  248.878809][ T7308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.868'.
[  251.175588][ T7338] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  251.416698][ T7343] tipc: Started in network mode
[  251.423512][ T7343] tipc: Node identity 328059146add, cluster identity 4711
[  251.436089][ T7343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.470580][ T7342] tipc: Disabling bearer <eth:syzkaller0>
[  251.483739][ T7344] overlayfs: conflicting options: userxattr,redirect_dir=off
[  252.434241][ T7356] netlink: 'syz.3.881': attribute type 4 has an invalid length.
[  254.785429][ T7385] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.815898][ T7384] tipc: Disabling bearer <eth:syzkaller0>
[  255.245834][ T7394] can: request_module (can-proto-0) failed.
[  255.452935][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  256.984460][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'.
[  257.023889][ T7410] device vlan2 entered promiscuous mode
[  257.093062][ T7410] device gretap0 entered promiscuous mode
[  257.234467][ T7423] device syzkaller0 entered promiscuous mode
[  258.379009][ T5219] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  258.870991][ T5219] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[  258.879345][ T5219] usb 3-1: config 0 has no interface number 0
[  259.357745][ T5219] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  259.520939][ T5219] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  259.570611][ T5219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.638817][ T5219] usb 3-1: Product: syz
[  260.451138][ T5219] usb 3-1: Manufacturer: syz
[  260.455948][ T5219] usb 3-1: SerialNumber: syz
[  260.462805][ T5219] usb 3-1: config 0 descriptor??
[  260.558375][ T7440] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  260.604371][ T5219] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 66:61:9f:6a:7e:d9
[  260.669443][ T7473] device syzkaller0 entered promiscuous mode
[  260.708294][ T7473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.736421][ T7473] tipc: Resetting bearer <eth:syzkaller0>
[  260.762800][ T7472] tipc: Resetting bearer <eth:syzkaller0>
[  260.808684][ T7472] tipc: Disabling bearer <eth:syzkaller0>
[  260.937378][ T5330] usb 3-1: USB disconnect, device number 6
[  260.950528][ T5330] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  261.125599][ T7440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.036906][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'.
[  263.240238][ T7513] netlink: 'syz.2.924': attribute type 4 has an invalid length.
[  264.955280][ T7531] device syzkaller0 entered promiscuous mode
[  267.084799][ T7559] can: request_module (can-proto-0) failed.
[  268.612704][ T7607] device syzkaller0 entered promiscuous mode
[  270.648061][ T7651] netlink: 52 bytes leftover after parsing attributes in process `syz.2.957'.
[  270.719665][ T7651] ieee802154 phy1 wpan1: encryption failed: -22
[  271.390410][ T7671] device syzkaller0 entered promiscuous mode
[  273.721978][ T7703] netlink: 52 bytes leftover after parsing attributes in process `syz.3.969'.
[  273.758121][ T7703] ieee802154 phy1 wpan1: encryption failed: -22
[  273.789338][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.822649][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.831938][ T7699] can: request_module (can-proto-0) failed.
[  275.580679][    C1] sched: RT throttling activated
[  275.880938][ T7751] device syzkaller0 entered promiscuous mode
[  277.049695][ T7760] netlink: 52 bytes leftover after parsing attributes in process `syz.0.984'.
[  277.095153][ T7760] ieee802154 phy1 wpan1: encryption failed: -22
[  277.221791][ T7765] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14
[  277.718313][ T7779] netlink: 'syz.4.991': attribute type 4 has an invalid length.
[  279.061449][ T4265] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  279.521254][ T4265] usb 2-1: config 0 has an invalid interface number: 231 but max is 0
[  279.557385][ T4265] usb 2-1: config 0 has no interface number 0
[  279.632920][ T4265] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  279.769578][ T7799] ieee802154 phy1 wpan1: encryption failed: -22
[  279.933767][ T7797] netlink: 52 bytes leftover after parsing attributes in process `syz.4.997'.
[  279.961236][ T4265] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  279.982882][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.012971][ T4265] usb 2-1: Product: syz
[  280.014393][ T7801] device syzkaller0 entered promiscuous mode
[  280.017605][ T4265] usb 2-1: Manufacturer: syz
[  280.076624][ T4265] usb 2-1: SerialNumber: syz
[  280.101041][ T4265] usb 2-1: config 0 descriptor??
[  280.131377][ T7788] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  280.186784][ T4265] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 3e:87:ca:99:b5:b7
[  280.758605][ T7838] netlink: 'syz.4.1007': attribute type 4 has an invalid length.
[  281.335256][ T7858] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1009'.
[  281.447139][ T7858] ieee802154 phy1 wpan1: encryption failed: -22
[  282.446105][ T7873] device syzkaller0 entered promiscuous mode
[  282.561625][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'.
[  282.581196][ T4265] usb 2-1: USB disconnect, device number 3
[  282.601729][ T4265] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  282.624153][ T7787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  282.637306][ T7879] device vlan2 entered promiscuous mode
[  283.609134][ T7913] overlayfs: conflicting options: userxattr,redirect_dir=off
[  285.477389][ T7940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.678723][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1029'.
[  285.789087][ T7954] device vlan2 entered promiscuous mode
[  285.850942][ T4265] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  285.975638][ T7960] device syzkaller0 entered promiscuous mode
[  286.331304][ T4265] usb 1-1: config 0 has an invalid interface number: 231 but max is 0
[  286.348238][ T4265] usb 1-1: config 0 has no interface number 0
[  286.394043][ T4265] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  286.681396][ T4265] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  286.695389][ T4265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.730861][ T4265] usb 1-1: Product: syz
[  286.748129][ T4265] usb 1-1: Manufacturer: syz
[  286.770564][ T4265] usb 1-1: SerialNumber: syz
[  286.809050][ T4265] usb 1-1: config 0 descriptor??
[  286.851867][ T7940] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  286.887711][ T4265] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 76:3b:cc:6a:3b:05
[  288.253643][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'.
[  288.318146][ T8006] device vlan2 entered promiscuous mode
[  288.371085][ T8006] device gretap0 entered promiscuous mode
[  288.420855][ T8012] netlink: 'syz.1.1042': attribute type 12 has an invalid length.
[  289.560042][ T1110] usb 1-1: USB disconnect, device number 3
[  289.581744][ T1110] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  289.646398][ T8027] device syzkaller0 entered promiscuous mode
[  289.809908][ T8026] device syzkaller0 entered promiscuous mode
[  291.704469][ T8067] device syzkaller0 entered promiscuous mode
[  292.892312][ T8067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.801943][ T8067] tipc: Resetting bearer <eth:syzkaller0>
[  293.933778][ T8094] device syzkaller0 entered promiscuous mode
[  294.216208][ T8066] tipc: Resetting bearer <eth:syzkaller0>
[  294.963527][ T8066] tipc: Disabling bearer <eth:syzkaller0>
[  295.939901][ T4200] hid-generic 0005:10CF:5505.0003: item fetching failed at offset 0/2
[  295.965585][ T4200] hid-generic: probe of 0005:10CF:5505.0003 failed with error -22
[  299.676329][ T8170] device syzkaller0 entered promiscuous mode
[  300.137108][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  300.206941][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  300.265052][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  300.333139][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  300.391689][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  300.433380][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  300.470107][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  302.661378][ T8215] overlayfs: conflicting options: userxattr,redirect_dir=off
[  303.277747][ T8230] device syzkaller0 entered promiscuous mode
[  303.395758][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'.
[  303.493901][ T8240] device vlan2 entered promiscuous mode
[  303.906767][ T8260] netlink: 'syz.0.1103': attribute type 4 has an invalid length.
[  304.626801][ T8272] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.239471][ T8272] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.455154][ T8272] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.716978][ T8272] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.822546][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1113'.
[  305.844601][ T8287] device vlan2 entered promiscuous mode
[  305.998998][ T8272] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.071258][ T8272] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.163889][ T8272] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.211319][ T8272] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.222508][ T8298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1116'.
[  306.479560][ T8304] device syzkaller0 entered promiscuous mode
[  306.543683][ T8308] device syzkaller0 entered promiscuous mode
[  308.056196][ T8345] overlayfs: conflicting options: userxattr,redirect_dir=off
[  308.066313][ T8339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1128'.
[  308.232188][    C1] vcan0: j1939_tp_rxtimer: 0xffff888064186000: rx timeout, send abort
[  308.544067][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'.
[  308.638485][ T8368] overlayfs: conflicting options: userxattr,redirect_dir=off
[  308.725930][ T8364] device syzkaller0 entered promiscuous mode
[  308.741902][    C1] vcan0: j1939_tp_rxtimer: 0xffff888064186000: abort rx timeout. Force session deactivation
[  309.886636][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1140'.
[  309.998930][ T8394] netlink: 'syz.1.1144': attribute type 4 has an invalid length.
[  310.398367][ T8413] device syzkaller0 entered promiscuous mode
[  310.426851][ T8413] tipc: Started in network mode
[  310.434417][ T8413] tipc: Node identity f25050920b37, cluster identity 4711
[  310.442148][ T8413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.451119][ T8412] tipc: Resetting bearer <eth:syzkaller0>
[  310.472445][ T8412] tipc: Disabling bearer <eth:syzkaller0>
[  310.492468][ T8418] overlayfs: conflicting options: userxattr,redirect_dir=off
[  312.372247][ T8442] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1155'.
[  312.413087][ T8442] bond0: (slave bond_slave_1): Releasing backup interface
[  312.821426][ T8467] device syzkaller0 entered promiscuous mode
[  315.125132][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1168'.
[  315.168762][ T8496] netlink: 'syz.4.1168': attribute type 1 has an invalid length.
[  315.277708][ T8501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1168'.
[  315.340581][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1171'.
[  315.587634][ T8511] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý' is invalid
[  315.597459][ T8506] device syzkaller0 entered promiscuous mode
[  317.770440][ T8537] device syzkaller0 entered promiscuous mode
[  317.813191][ T8537] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.835491][ T8536] tipc: Resetting bearer <eth:syzkaller0>
[  317.928525][ T8536] tipc: Disabling bearer <eth:syzkaller0>
[  318.257349][ T8547] device syzkaller0 entered promiscuous mode
[  319.304529][ T8560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1189'.
[  320.384135][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'.
[  320.720960][ T8590] device syzkaller0 entered promiscuous mode
[  320.730324][ T8590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.745090][ T8589] tipc: Resetting bearer <eth:syzkaller0>
[  320.790863][ T8589] tipc: Disabling bearer <eth:syzkaller0>
[  321.329012][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'.
[  321.412345][ T8599] device syzkaller0 entered promiscuous mode
[  322.088152][ T8615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1203'.
[  323.016881][ T8604] syz.2.1197 (8604) used greatest stack depth: 18032 bytes left
[  323.049920][ T8625] device syzkaller0 entered promiscuous mode
[  323.127757][ T8625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.153148][ T8624] tipc: Resetting bearer <eth:syzkaller0>
[  323.240555][ T8624] tipc: Disabling bearer <eth:syzkaller0>
[  323.443674][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'.
[  323.465318][ T8639] overlayfs: conflicting options: userxattr,redirect_dir=off
[  324.187756][ T8648] device syzkaller0 entered promiscuous mode
[  325.547515][ T8671] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1218'.
[  325.822850][ T8685] device syzkaller0 entered promiscuous mode
[  325.823210][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'.
[  326.213492][ T8703] device batadv1 entered promiscuous mode
[  326.667497][ T8722] device syzkaller0 entered promiscuous mode
[  326.800883][ T8728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.111522][ T8741] device syzkaller0 entered promiscuous mode
[  327.207216][ T8741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  327.288007][ T8739] tipc: Resetting bearer <eth:syzkaller0>
[  327.447666][ T8739] tipc: Disabling bearer <eth:syzkaller0>
[  327.585696][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'.
[  327.874721][ T8769] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1240'.
[  327.965776][ T8771] bond0: (slave bond_slave_1): Releasing backup interface
[  328.184949][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1242'.
[  328.255667][ T8777] device vlan3 entered promiscuous mode
[  328.699065][ T8784] device syzkaller0 entered promiscuous mode
[  328.706290][ T8799] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1247'.
[  329.755593][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'.
[  330.525264][ T8834] device syz_tun left promiscuous mode
[  330.548932][ T8834] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.591327][ T8834] 8021q: adding VLAN 0 to HW filter on device team0
[  330.637180][ T8849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.658711][ T8834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  330.841905][ T8856] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý' is invalid
[  331.067124][ T8859] overlayfs: conflicting options: userxattr,redirect_dir=off
[  332.951064][ T8899] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1266'.
[  333.470143][ T8911] device syzkaller0 entered promiscuous mode
[  333.543166][ T8916] device syzkaller0 entered promiscuous mode
[  333.569541][ T8916] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.739559][ T8915] tipc: Resetting bearer <eth:syzkaller0>
[  333.971755][ T8915] tipc: Disabling bearer <eth:syzkaller0>
[  334.362917][ T8940] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý' is invalid
[  334.672272][ T8940] overlayfs: conflicting options: userxattr,redirect_dir=off
[  334.814304][ T8955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  335.196105][ T8944] device syzkaller0 entered promiscuous mode
[  335.940878][ T4200] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  336.130782][ T4200] usb 3-1: device descriptor read/64, error -71
[  336.401439][ T4200] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  336.480498][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1282'.
[  336.630878][ T4200] usb 3-1: device descriptor read/64, error -71
[  336.752065][ T4200] usb usb3-port1: attempt power cycle
[  337.200932][ T4200] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  337.393648][ T4200] usb 3-1: device descriptor read/8, error -71
[  337.507399][ T9012] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1286'.
[  339.362141][ T9026] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1291'.
[  339.448782][ T9031] device syzkaller0 entered promiscuous mode
[  339.992532][ T9050] netlink: 'syz.2.1297': attribute type 1 has an invalid length.
[  340.092904][ T9050] device bond3 entered promiscuous mode
[  340.098766][ T9050] 8021q: adding VLAN 0 to HW filter on device bond3
[  340.287047][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'.
[  340.446416][ T9071] bond3: (slave bridge2): making interface the new active one
[  340.470812][ T9071] device bridge2 entered promiscuous mode
[  340.510742][ T9071] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  340.521000][   T26] audit: type=1326 audit(1785927132.954:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.2.1297" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21ea1f7019 code=0x0
[  340.636851][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  340.679039][ T9074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.870881][ T4231] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  341.060832][ T4231] usb 4-1: device descriptor read/64, error -71
[  341.235541][ T9086] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1304'.
[  341.330818][ T4231] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  341.932213][ T9082] device syzkaller0 entered promiscuous mode
[  342.210713][ T4231] usb 4-1: device descriptor read/64, error -71
[  342.331217][ T4231] usb usb4-port1: attempt power cycle
[  342.614550][ T9107] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  342.742818][ T4231] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  342.853441][ T4231] usb 4-1: device descriptor read/8, error -71
[  342.962107][ T9111] device syzkaller0 entered promiscuous mode
[  343.131305][ T4231] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  343.188476][ T9124] netlink: 'syz.2.1313': attribute type 4 has an invalid length.
[  343.233187][ T4231] usb 4-1: device descriptor read/8, error -71
[  343.350937][ T4231] usb usb4-port1: unable to enumerate USB device
[  343.705356][ T9134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1314'.
[  344.436071][ T9136] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1316'.
[  344.594821][ T9142] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  344.643470][ T9136] bond0: (slave bond_slave_1): Releasing backup interface
[  344.818898][ T9142] overlayfs: conflicting options: userxattr,redirect_dir=off
[  344.869534][ T9153] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  345.480050][ T9164] device syzkaller0 entered promiscuous mode
[  345.644041][ T9166] can: request_module (can-proto-0) failed.
[  346.405728][ T9174] netlink: 'syz.3.1328': attribute type 4 has an invalid length.
[  346.626494][ T9179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1330'.
[  346.687146][ T9179] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.1330'.
[  346.709327][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1330'.
[  346.723051][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1330'.
[  346.740335][ T9179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1330'.
[  346.750263][ T9184] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  346.765198][ T9185] netlink: 'syz.0.1329': attribute type 1 has an invalid length.
[  346.810984][ T9185] device bond1 entered promiscuous mode
[  346.816797][ T9185] 8021q: adding VLAN 0 to HW filter on device bond1
[  346.945779][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'.
[  346.997438][ T9185] bond1: (slave bridge1): making interface the new active one
[  347.059427][ T9185] device bridge1 entered promiscuous mode
[  347.066417][ T9185] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  347.080850][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  347.099009][   T26] audit: type=1326 audit(1785927139.524:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9183 comm="syz.0.1329" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe107267019 code=0x0
[  347.197497][ T9206] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  347.477734][ T9207] overlayfs: conflicting options: userxattr,redirect_dir=off
[  348.302268][ T9211] fuse: Bad value for 'group_id'
[  348.383236][ T9220] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  348.523115][ T9226] device syzkaller0 entered promiscuous mode
[  348.546424][ T9220] can: request_module (can-proto-0) failed.
[  349.329200][ T9235] 0: reclassify loop, rule prio 0, protocol 700
[  349.551964][ T9243] netlink: 'syz.3.1349': attribute type 1 has an invalid length.
[  349.604205][ T9243] device bond4 entered promiscuous mode
[  349.612416][ T9243] 8021q: adding VLAN 0 to HW filter on device bond4
[  349.644862][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'.
[  349.664856][ T9250] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  349.689928][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'.
[  349.752946][ T9246] bond4: (slave bridge3): making interface the new active one
[  349.817375][ T9246] device bridge3 entered promiscuous mode
[  349.838844][ T9246] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  349.847771][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  349.858538][   T26] audit: type=1326 audit(1785927142.284:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9242 comm="syz.3.1349" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b5a33f019 code=0x0
[  349.897172][ T9251] overlayfs: conflicting options: userxattr,redirect_dir=off
[  350.090733][ T9257] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  350.187665][ T9258] overlayfs: conflicting options: userxattr,redirect_dir=off
[  350.493994][ T9261] device syzkaller0 entered promiscuous mode
[  350.585224][ T9263] device syzkaller0 entered promiscuous mode
[  350.764675][ T9274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1355'.
[  350.817571][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'.
[  350.874848][ T9283] sctp: [Deprecated]: syz.1.1358 (pid 9283) Use of struct sctp_assoc_value in delayed_ack socket option.
[  350.874848][ T9283] Use struct sctp_sack_info instead
[  350.916056][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1355'.
[  350.964852][ T9278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1355'.
[  350.996494][ T9278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1355'.
[  351.167510][ T9295] device syzkaller0 entered promiscuous mode
[  351.193377][ T9300] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  351.207117][ T9295] TC_ACT_REPEAT abuse ?
[  351.272979][ T9298] netlink: 'syz.4.1364': attribute type 1 has an invalid length.
[  351.295638][ T9298] device bond1 entered promiscuous mode
[  351.300313][ T9303] overlayfs: conflicting options: userxattr,redirect_dir=off
[  351.311090][ T9298] 8021q: adding VLAN 0 to HW filter on device bond1
[  351.326200][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'.
[  351.389494][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'.
[  351.448966][ T9298] bond1: (slave bridge1): making interface the new active one
[  351.495332][ T9298] device bridge1 entered promiscuous mode
[  351.507479][ T9298] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  351.518658][   T26] audit: type=1326 audit(1785927143.934:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9297 comm="syz.4.1364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6376f6b019 code=0x0
[  351.542102][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  351.833935][ T9314] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1367'.
[  352.450235][ T9319] device syzkaller0 entered promiscuous mode
[  352.623208][ T9325] "syz.2.1371" (9325) uses obsolete ecb(arc4) skcipher
[  354.296778][ T9363] device syzkaller0 entered promiscuous mode
[  354.715828][ T9388] __nla_validate_parse: 3 callbacks suppressed
[  354.715844][ T9388] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1395'.
[  354.886653][ T9392] netlink: 'syz.2.1397': attribute type 1 has an invalid length.
[  355.137096][ T9406] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  355.187681][ T9392] device bond4 entered promiscuous mode
[  355.203164][ T9392] 8021q: adding VLAN 0 to HW filter on device bond4
[  355.236382][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1397'.
[  355.265639][ T9400] bond4: (slave bridge3): making interface the new active one
[  355.273520][ T9400] device bridge3 entered promiscuous mode
[  355.280530][ T9400] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  355.299299][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  355.329063][ T9409] overlayfs: conflicting options: userxattr,redirect_dir=off
[  355.452237][ T9417] bond0: (slave bond_slave_1): Releasing backup interface
[  355.479642][ T9414] device syzkaller0 entered promiscuous mode
[  355.526828][ T9418] device syzkaller0 entered promiscuous mode
[  355.609637][ T9423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1406'.
[  355.691306][ T9423] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.698787][ T9423] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.741191][ T9423] device bridge_slave_1 left promiscuous mode
[  355.747514][ T9423] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.816907][ T9423] device bridge_slave_0 left promiscuous mode
[  355.831103][ T9423] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.924867][ T9427] device syzkaller0 entered promiscuous mode
[  356.095826][ T9439] netlink: 'syz.0.1410': attribute type 4 has an invalid length.
[  356.158880][ T9441] netlink: 'syz.1.1412': attribute type 1 has an invalid length.
[  356.427656][ T9441] device bond3 entered promiscuous mode
[  356.433781][ T9441] 8021q: adding VLAN 0 to HW filter on device bond3
[  356.441441][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1412'.
[  357.267453][ T9467] device syzkaller0 entered promiscuous mode
[  357.304110][ T9470] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  357.336070][   T26] audit: type=1107 audit(1785927149.764:20): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  357.424023][ T9472] netlink: 'syz.2.1419': attribute type 1 has an invalid length.
[  357.555807][ T9470] overlayfs: conflicting options: userxattr,redirect_dir=off
[  358.813000][ T9514] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1427'.
[  358.849083][ T9510] netlink: 'syz.1.1429': attribute type 1 has an invalid length.
[  358.866578][ T9514] netlink: 'syz.3.1427': attribute type 9 has an invalid length.
[  358.877695][ T9514] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1427'.
[  358.898430][ T9514] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1427'.
[  358.951442][ T9526] netlink: 'syz.3.1432': attribute type 22 has an invalid length.
[  358.959489][ T9510] device bond4 entered promiscuous mode
[  358.992456][ T9510] 8021q: adding VLAN 0 to HW filter on device bond4
[  359.048879][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1429'.
[  359.064994][   T26] audit: type=1326 audit(1785927151.494:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9508 comm="syz.1.1429" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5138f019 code=0x0
[  359.131136][ T9525] bond4: (slave bridge2): making interface the new active one
[  359.138677][ T9525] device bridge2 entered promiscuous mode
[  359.202915][ T9525] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  359.273617][ T9529] device syzkaller0 entered promiscuous mode
[  359.355352][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  359.501594][ T9555] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  359.841509][ T9557] overlayfs: conflicting options: userxattr,redirect_dir=off
[  359.862354][ T9572] device syzkaller0 entered promiscuous mode
[  360.853536][ T9595] netlink: 'syz.0.1448': attribute type 4 has an invalid length.
[  360.868246][ T9591] netlink: 'syz.4.1445': attribute type 1 has an invalid length.
[  360.921635][ T9591] device bond2 entered promiscuous mode
[  360.937547][ T9591] 8021q: adding VLAN 0 to HW filter on device bond2
[  361.064431][   T26] audit: type=1326 audit(1785927153.494:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.4.1445" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6376f6b019 code=0x0
[  361.079592][ T9604] bond2: (slave bridge2): making interface the new active one
[  361.103536][ T9604] device bridge2 entered promiscuous mode
[  361.111377][ T9604] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  361.123027][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  361.385812][ T9624] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  361.871619][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1459'.
[  362.686730][ T9651] device syzkaller0 entered promiscuous mode
[  362.793507][ T9662] device syzkaller0 entered promiscuous mode
[  362.873624][ T9676] netlink: 'syz.0.1465': attribute type 4 has an invalid length.
[  362.986536][ T9678] netlink: 'syz.4.1467': attribute type 1 has an invalid length.
[  363.021285][ T9678] device bond3 entered promiscuous mode
[  363.031920][ T9678] 8021q: adding VLAN 0 to HW filter on device bond3
[  363.065384][ T9664] device batadv1 entered promiscuous mode
[  363.071765][   T26] audit: type=1326 audit(1785927155.494:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9674 comm="syz.4.1467" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6376f6b019 code=0x0
[  363.172550][ T9683] bond3: (slave bridge3): making interface the new active one
[  363.200606][ T9683] device bridge3 entered promiscuous mode
[  363.223818][ T9683] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  363.270741][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  364.694390][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'.
[  365.592589][ T9738] device batadv1 entered promiscuous mode
[  365.690778][ T9739] device syzkaller0 entered promiscuous mode
[  365.715918][ T9745] device syzkaller0 entered promiscuous mode
[  366.056880][ T9769] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  367.174221][ T9798] device syzkaller0 entered promiscuous mode
[  367.466578][ T9816] netdevsim0: mtu less than device minimum
[  367.713122][ T9823] device syzkaller0 entered promiscuous mode
[  367.735843][ T9826] device syzkaller0 entered promiscuous mode
[  367.750072][ T9828] device syzkaller0 entered promiscuous mode
[  368.001678][ T9835] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  368.111998][ T9838] device syzkaller0 entered promiscuous mode
[  368.166133][ T9839] overlayfs: conflicting options: userxattr,redirect_dir=off
[  368.310436][ T9842] device syzkaller0 entered promiscuous mode
[  368.816399][ T9858] device syzkaller0 entered promiscuous mode
[  368.849002][ T9860] device syzkaller0 entered promiscuous mode
[  369.062756][ T1110] hid-generic 0005:15C2:5505.0004: collection stack underflow
[  369.070291][ T1110] hid-generic 0005:15C2:5505.0004: item 0 2 0 12 parsing failed
[  369.096450][ T1110] hid-generic: probe of 0005:15C2:5505.0004 failed with error -22
[  369.163191][ T9876] device syzkaller0 entered promiscuous mode
[  369.306729][ T9885] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  369.359904][ T9883] device syzkaller0 entered promiscuous mode
[  369.444237][ T9892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  370.294310][ T9900] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  371.141598][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'.
[  371.258377][ T9913] device syzkaller0 entered promiscuous mode
[  371.396925][ T9931] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.423359][ T9931] tipc: Resetting bearer <eth:syzkaller0>
[  371.443158][ T9930] tipc: Disabling bearer <eth:syzkaller0>
[  371.490396][ T9935] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  371.527158][ T9927] device syzkaller0 entered promiscuous mode
[  371.625619][ T9939] device syzkaller0 entered promiscuous mode
[  371.658006][ T9944] overlayfs: conflicting options: userxattr,redirect_dir=off
[  372.542258][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'.
[  372.623358][ T9958] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  373.665611][ T9958] overlayfs: conflicting options: userxattr,redirect_dir=off
[  373.701879][ T9976] netlink: 'syz.3.1558': attribute type 1 has an invalid length.
[  373.884342][ T9982] can: request_module (can-proto-0) failed.
[  373.893334][ T9976] device bond5 entered promiscuous mode
[  373.903530][ T9976] 8021q: adding VLAN 0 to HW filter on device bond5
[  373.926970][ T9980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1558'.
[  373.958650][ T9976] bond5: (slave bridge4): making interface the new active one
[  373.976272][ T9976] device bridge4 entered promiscuous mode
[  374.008791][ T9976] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  374.029879][ T9994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1562'.
[  374.081178][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  374.147218][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'.
[  375.190545][T10017] device syzkaller0 entered promiscuous mode
[  375.337465][T10023] can: request_module (can-proto-0) failed.
[  375.449075][T10029] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  375.480222][T10029] device syzkaller0 entered promiscuous mode
[  375.753332][T10042] device syzkaller0 entered promiscuous mode
[  376.721045][ T4231] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  376.819472][ T5329] Bluetooth: hci0: command 0x0401 tx timeout
[  377.240721][ T4231] usb 1-1: Using ep0 maxpacket: 16
[  377.331241][T10063] can: request_module (can-proto-0) failed.
[  377.648124][T10078] device syzkaller0 entered promiscuous mode
[  377.691331][ T4231] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  377.710237][ T4231] usb 1-1: config 0 has no interface number 0
[  377.716947][ T4231] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  377.727724][ T4231] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  377.832448][T10086] fuse: Unknown parameter 'use00000000000000000000'
[  377.895444][T10087] device batadv1 entered promiscuous mode
[  377.912248][ T4231] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  377.930969][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.939104][ T4231] usb 1-1: Product: syz
[  377.958040][ T4231] usb 1-1: Manufacturer: syz
[  377.962978][ T4231] usb 1-1: SerialNumber: syz
[  377.978959][ T4231] usb 1-1: config 0 descriptor??
[  377.986999][T10089] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  378.011382][T10061] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  378.023444][T10061] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  378.056930][T10089] overlayfs: conflicting options: userxattr,redirect_dir=off
[  378.057043][T10091] netlink: 'syz.2.1595': attribute type 4 has an invalid length.
[  378.274337][T10061] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  378.289031][T10061] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  378.405564][T10102] device syzkaller0 entered promiscuous mode
[  378.482229][T10104] device syzkaller0 entered promiscuous mode
[  378.536559][ T4231] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  378.608499][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'.
[  378.958003][T10122] device syzkaller0 entered promiscuous mode
[  379.018910][T10126] capability: warning: `syz.2.1607' uses deprecated v2 capabilities in a way that may be insecure
[  379.179655][T10134] netlink: 'syz.3.1608': attribute type 4 has an invalid length.
[  379.256030][T10131] netlink: 'syz.2.1609': attribute type 1 has an invalid length.
[  379.279244][T10131] device bond5 entered promiscuous mode
[  379.310931][T10131] 8021q: adding VLAN 0 to HW filter on device bond5
[  379.325981][T10133] device batadv1 entered promiscuous mode
[  379.352766][T10135] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1609'.
[  379.402046][T10136] bond5: (slave bridge4): making interface the new active one
[  379.410168][T10136] device bridge4 entered promiscuous mode
[  379.417404][T10136] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  379.430785][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  379.482539][T10141] device syzkaller0 entered promiscuous mode
[  379.637855][T10148] device syzkaller0 entered promiscuous mode
[  379.647589][T10149] fuse: Unknown parameter 'use00000000000000000000'
[  379.713379][T10151] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  379.760840][T10153] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1615'.
[  379.772109][T10151] overlayfs: conflicting options: userxattr,redirect_dir=off
[  379.985140][T10163] device syzkaller0 entered promiscuous mode
[  380.031265][ T4231] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  380.041848][ T4231] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  380.053988][ T4231] asix: probe of 1-1:0.34 failed with error -71
[  380.081713][ T4231] usb 1-1: USB disconnect, device number 4
[  380.457802][   T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  380.498076][T10169] device batadv1 entered promiscuous mode
[  380.602080][T10171] netlink: 'syz.0.1622': attribute type 1 has an invalid length.
[  380.625437][T10171] device bond2 entered promiscuous mode
[  380.640323][T10171] 8021q: adding VLAN 0 to HW filter on device bond2
[  380.674966][T10171] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1622'.
[  380.729551][T10171] bond2: (slave bridge0): making interface the new active one
[  380.737390][T10171] device bridge0 entered promiscuous mode
[  380.745108][T10171] bond2: (slave bridge0): Enslaving as an active interface with an up link
[  380.764918][T10177] netlink: 'syz.1.1624': attribute type 4 has an invalid length.
[  380.774379][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  380.781024][   T26] audit: type=1326 audit(1785927173.204:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10170 comm="syz.0.1622" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe107267019 code=0x0
[  380.881046][   T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  380.906225][   T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  380.926477][T10183] device syzkaller0 entered promiscuous mode
[  380.954504][   T21] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  380.977607][   T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.018242][   T21] usb 5-1: config 0 descriptor??
[  381.049853][T10186] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1627'.
[  381.137294][T10188] device syzkaller0 entered promiscuous mode
[  381.192809][T10191] device syzkaller0 entered promiscuous mode
[  381.201548][T10192] device syzkaller0 entered promiscuous mode
[  381.209585][T10191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.231452][T10191] tipc: Resetting bearer <eth:syzkaller0>
[  381.238804][T10189] tipc: Resetting bearer <eth:syzkaller0>
[  381.278912][T10189] tipc: Disabling bearer <eth:syzkaller0>
[  381.374531][T10198] fuse: Unknown parameter 'use00000000000000000000'
[  381.471181][T10203] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  381.503358][T10201] device batadv1 entered promiscuous mode
[  381.540163][T10203] overlayfs: conflicting options: userxattr,redirect_dir=off
[  381.557693][   T21] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  381.767280][   T21] usb 5-1: USB disconnect, device number 2
[  382.337915][T10217] device syzkaller0 entered promiscuous mode
[  382.375977][T10219] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1640'.
[  382.453087][T10221] device syzkaller0 entered promiscuous mode
[  382.517691][T10225] device syzkaller0 entered promiscuous mode
[  382.531148][T10225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.551201][T10225] tipc: Resetting bearer <eth:syzkaller0>
[  382.559668][T10224] tipc: Resetting bearer <eth:syzkaller0>
[  382.589447][T10224] tipc: Disabling bearer <eth:syzkaller0>
[  382.741743][T10229] netlink: 'syz.0.1644': attribute type 1 has an invalid length.
[  382.805853][T10229] device bond3 entered promiscuous mode
[  382.833301][T10229] 8021q: adding VLAN 0 to HW filter on device bond3
[  382.851984][T10239] device batadv1 entered promiscuous mode
[  382.901381][T10229] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1644'.
[  383.004083][T10229] bond3: (slave bridge2): making interface the new active one
[  383.046999][T10229] device bridge2 entered promiscuous mode
[  383.095772][T10229] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  383.105426][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  383.113277][   T26] audit: type=1326 audit(1785927175.534:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10226 comm="syz.0.1644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe107267019 code=0x0
[  384.019828][T10255] device syzkaller0 entered promiscuous mode
[  384.099505][T10259] device syzkaller0 entered promiscuous mode
[  384.268571][T10267] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  384.289430][T10266] tipc: Resetting bearer <eth:syzkaller0>
[  384.310894][ T4265] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  384.320480][T10266] tipc: Disabling bearer <eth:syzkaller0>
[  384.329863][T10270] device syzkaller0 entered promiscuous mode
[  384.343823][T10270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.360424][T10270] tipc: Resetting bearer <eth:syzkaller0>
[  384.379777][T10268] tipc: Resetting bearer <eth:syzkaller0>
[  384.400575][T10268] tipc: Disabling bearer <eth:syzkaller0>
[  384.569888][T10278] netlink: 'syz.1.1663': attribute type 4 has an invalid length.
[  384.680798][ T4265] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  384.695988][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.719073][ T4265] usb 4-1: config 0 descriptor??
[  384.967476][T10292] device syzkaller0 entered promiscuous mode
[  385.155128][T10300] fuse: Unknown parameter 'group_id00000000000000000000'
[  385.211140][ T4265] usb 4-1: Cannot set MAC address
[  385.223881][ T4265] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71
[  385.255965][ T4265] usb 4-1: USB disconnect, device number 7
[  385.414300][T10309] device syzkaller0 entered promiscuous mode
[  385.542289][T10311] netlink: 'syz.2.1676': attribute type 4 has an invalid length.
[  385.993183][T10328] device syzkaller0 entered promiscuous mode
[  386.144732][T10337] device syzkaller0 entered promiscuous mode
[  386.229041][T10341] netlink: 'syz.0.1688': attribute type 4 has an invalid length.
[  386.311922][ T4200] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  386.360760][ T4231] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  386.551920][ T4200] usb 2-1: Using ep0 maxpacket: 16
[  386.674468][ T4200] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  386.693068][ T4200] usb 2-1: config 0 has no interface number 0
[  386.718681][ T4200] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  386.762640][ T5219] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  386.770079][ T4200] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  386.921505][ T4200] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  386.986436][ T4200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.142502][ T4200] usb 2-1: Product: syz
[  387.203194][ T4200] usb 2-1: Manufacturer: syz
[  387.263535][ T4200] usb 2-1: SerialNumber: syz
[  387.408482][ T4200] usb 2-1: config 0 descriptor??
[  387.492261][T10333] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  387.541796][T10333] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  387.660939][ T4231] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  387.691041][ T4231] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  387.790980][ T4231] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  387.800097][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  387.820783][ T4231] usb 3-1: SerialNumber: syz
[  387.853838][T10333] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  387.861460][T10335] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  387.871349][T10333] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  387.940978][ T5219] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  387.949189][ T5219] usb 5-1: config 0 has no interface number 0
[  388.091945][T10335] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  388.110844][ T4200] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  388.150795][ T5219] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  388.159866][ T5219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.180673][ T5219] usb 5-1: Product: syz
[  388.184878][ T5219] usb 5-1: Manufacturer: syz
[  388.189499][ T5219] usb 5-1: SerialNumber: syz
[  388.215001][ T5219] usb 5-1: config 0 descriptor??
[  388.276868][T10361] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1695'.
[  388.348769][T10363] device syzkaller0 entered promiscuous mode
[  388.400913][ T4231] cdc_ether: probe of 3-1:1.0 failed with error -71
[  388.431030][ T4231] usb 3-1: USB disconnect, device number 11
[  388.718249][T10370] device syzkaller0 entered promiscuous mode
[  388.917092][ T5219] asix 5-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  388.933942][T10374] netlink: 'syz.2.1701': attribute type 4 has an invalid length.
[  388.938228][ T5219] asix: probe of 5-1:0.251 failed with error -524
[  389.019900][T10376] kvm: pic: single mode not supported
[  389.020325][T10376] kvm: pic: level sensitive irq not supported
[  389.123855][ T5219] usb 5-1: USB disconnect, device number 3
[  389.223448][T10380] device syzkaller0 entered promiscuous mode
[  389.680816][ T4200] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  389.700704][ T4200] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  389.716624][ T4200] asix: probe of 2-1:0.34 failed with error -71
[  389.751688][ T4200] usb 2-1: USB disconnect, device number 4
[  389.942245][T10394] device syzkaller0 entered promiscuous mode
[  390.045459][T10400] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  390.061041][T10402] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1710'.
[  390.155482][T10403] can: request_module (can-proto-0) failed.
[  390.282081][T10406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.312209][T10411] netlink: 'syz.1.1713': attribute type 4 has an invalid length.
[  390.341859][T10406] tipc: Resetting bearer <eth:syzkaller0>
[  390.388233][T10405] tipc: Disabling bearer <eth:syzkaller0>
[  390.499547][T10419] fuse: Unknown parameter 'use00000000000000000000'
[  390.532905][T10418] device syzkaller0 entered promiscuous mode
[  391.628729][T10431] device syzkaller0 entered promiscuous mode
[  391.795881][T10439] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1723'.
[  392.071403][T10445] can: request_module (can-proto-0) failed.
[  392.943635][T10461] device syzkaller0 entered promiscuous mode
[  392.995192][T10465] fuse: Unknown parameter 'use00000000000000000000'
[  393.134170][T10470] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  393.205789][T10472] device syzkaller0 entered promiscuous mode
[  393.482386][T10477] device syzkaller0 entered promiscuous mode
[  394.642434][T10506] device syzkaller0 entered promiscuous mode
[  395.121080][T10453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  396.267613][T10524] fuse: Unknown parameter 'use00000000000000000000'
[  396.538707][T10515] device syzkaller0 entered promiscuous mode
[  396.846390][T10541] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.856534][T10541] tipc: Resetting bearer <eth:syzkaller0>
[  396.899083][T10539] tipc: Disabling bearer <eth:syzkaller0>
[  396.924559][T10544] device syzkaller0 entered promiscuous mode
[  397.221642][T10548] netlink: 'syz.4.1758': attribute type 1 has an invalid length.
[  397.302525][T10548] device bond4 entered promiscuous mode
[  397.309423][T10548] 8021q: adding VLAN 0 to HW filter on device bond4
[  397.317611][T10556] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1758'.
[  397.343037][T10548] bond4: (slave bridge4): making interface the new active one
[  397.364643][T10548] device bridge4 entered promiscuous mode
[  397.411227][   T26] audit: type=1326 audit(1785927189.844:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.4.1758" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6376f6b019 code=0x0
[  397.438464][T10548] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  397.461035][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  398.376565][T10573] can: request_module (can-proto-0) failed.
[  398.396587][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1765'.
[  398.629542][T10585] device syzkaller0 entered promiscuous mode
[  398.693906][T10583] device syzkaller0 entered promiscuous mode
[  399.541331][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1776'.
[  400.090548][T10613] can: request_module (can-proto-0) failed.
[  401.313888][T10639] device syzkaller0 entered promiscuous mode
[  401.403498][T10633] device syzkaller0 entered promiscuous mode
[  401.521006][T10644] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  401.537206][T10644] device syzkaller0 entered promiscuous mode
[  401.986741][T10659] Bluetooth: hci5: Frame reassembly failed (-84)
[  401.995419][ T4424] Bluetooth: hci5: Frame reassembly failed (-84)
[  402.714263][T10666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1791'.
[  403.874760][T10678] device syzkaller0 entered promiscuous mode
[  403.937485][T10681] device syzkaller0 entered promiscuous mode
[  404.010683][ T4233] Bluetooth: hci5: command 0x1003 tx timeout
[  404.016797][ T4201] Bluetooth: hci5: sending frame failed (-49)
[  404.448840][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'.
[  406.090819][ T4233] Bluetooth: hci5: command 0x1001 tx timeout
[  406.100926][ T4201] Bluetooth: hci5: sending frame failed (-49)
[  406.505882][T10721] device syzkaller0 entered promiscuous mode
[  407.193673][T10690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  407.311979][T10725] device syzkaller0 entered promiscuous mode
[  407.387285][T10728] device syzkaller0 entered promiscuous mode
[  408.178703][ T4233] Bluetooth: hci5: command 0x1009 tx timeout
[  408.990433][T10763] device syzkaller0 entered promiscuous mode
[  409.153369][T10766] device syzkaller0 entered promiscuous mode
[  411.038254][T10795] device syzkaller0 entered promiscuous mode
[  411.115151][T10797] netlink: 'syz.0.1835': attribute type 1 has an invalid length.
[  411.149682][T10797] device bond4 entered promiscuous mode
[  411.155863][T10797] 8021q: adding VLAN 0 to HW filter on device bond4
[  411.168038][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'.
[  411.197561][T10797] bond4: (slave bridge3): making interface the new active one
[  411.205214][T10797] device bridge3 entered promiscuous mode
[  411.218098][T10797] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  411.231881][T10800] device batadv1 entered promiscuous mode
[  411.237891][   T26] audit: type=1326 audit(1785927203.664:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10796 comm="syz.0.1835" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe107267019 code=0x0
[  411.265582][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready
[  411.567640][T10816] device syzkaller0 entered promiscuous mode
[  411.869548][T10758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  411.979714][T10824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  412.080777][ T4233] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  412.265714][   T21] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  412.364679][ T4233] usb 5-1: Using ep0 maxpacket: 32
[  412.425835][T10830] device syzkaller0 entered promiscuous mode
[  412.508484][T10832] device batadv1 entered promiscuous mode
[  412.561104][ T4233] usb 5-1: unable to get BOS descriptor or descriptor too short
[  412.630899][   T21] usb 2-1: config 0 has an invalid interface number: 231 but max is 0
[  412.639126][   T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  412.660723][   T21] usb 2-1: config 0 has no interface number 0
[  412.666861][   T21] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  412.680842][ T4233] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  412.690711][   T21] usb 2-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  412.713053][ T4233] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  412.851038][   T21] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  412.860220][ T4231] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  412.871419][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.889302][   T21] usb 2-1: Product: syz
[  412.894926][T10838] device syzkaller0 entered promiscuous mode
[  412.898813][   T21] usb 2-1: Manufacturer: syz
[  412.906063][   T21] usb 2-1: SerialNumber: syz
[  412.922300][   T21] usb 2-1: config 0 descriptor??
[  412.964965][ T4233] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  412.974124][   T21] plusb: probe of 2-1:0.231 failed with error -22
[  412.995191][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.005530][ T4233] usb 5-1: Product: syz
[  413.009743][ T4233] usb 5-1: Manufacturer: syz
[  413.018175][ T4233] usb 5-1: SerialNumber: syz
[  413.110714][ T4231] usb 3-1: Using ep0 maxpacket: 8
[  413.157288][T10841] device syzkaller0 entered promiscuous mode
[  413.230848][ T4231] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  413.256652][ T4231] usb 3-1: config 0 interface 0 has no altsetting 0
[  413.275073][ T4231] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00
[  413.300095][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.326161][ T4231] usb 3-1: config 0 descriptor??
[  413.370961][ T4233] cdc_ncm 5-1:1.0: bind() failure
[  413.388941][ T4233] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  413.404607][ T4233] cdc_ncm 5-1:1.1: bind() failure
[  413.427667][ T4233] usb 5-1: USB disconnect, device number 4
[  413.717539][T10846] fuse: Bad value for 'fd'
[  413.823059][ T4231] lenovo 0003:17EF:60B5.0006: unknown main item tag 0x0
[  413.830162][ T4231] lenovo 0003:17EF:60B5.0006: unknown main item tag 0x0
[  413.837557][ T4231] lenovo 0003:17EF:60B5.0006: unknown main item tag 0x0
[  413.844925][ T4231] lenovo 0003:17EF:60B5.0006: unknown main item tag 0x0
[  413.852458][ T4231] lenovo 0003:17EF:60B5.0006: unknown main item tag 0x0
[  413.859568][ T4231] lenovo 0003:17EF:60B5.0006: unknown main item tag 0x0
[  413.866966][ T4231] lenovo 0003:17EF:60B5.0006: unknown main item tag 0x6
[  413.874346][ T4231] lenovo 0003:17EF:60B5.0006: collection stack underflow
[  413.891785][ T4231] lenovo 0003:17EF:60B5.0006: item 0 4 0 12 parsing failed
[  413.910027][ T4231] lenovo 0003:17EF:60B5.0006: hid_parse failed
[  413.934900][ T4231] lenovo: probe of 0003:17EF:60B5.0006 failed with error -22
[  414.353423][T10859] device syzkaller0 entered promiscuous mode
[  415.032377][ T4233] usb 2-1: USB disconnect, device number 5
[  415.118792][T10865] device syzkaller0 entered promiscuous mode
[  415.232290][T10868] device batadv1 entered promiscuous mode
[  415.374814][T10872] device syzkaller0 entered promiscuous mode
[  415.434713][T10874] device syzkaller0 entered promiscuous mode
[  415.668700][T10880] fuse: Bad value for 'fd'
[  415.847061][T10884] device syzkaller0 entered promiscuous mode
[  415.988469][T10886] netlink: 'syz.1.1870': attribute type 1 has an invalid length.
[  416.009369][T10886] device bond5 entered promiscuous mode
[  416.015236][T10886] 8021q: adding VLAN 0 to HW filter on device bond5
[  416.027848][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'.
[  416.047147][T10886] bond5: (slave bridge3): making interface the new active one
[  416.054738][T10886] device bridge3 entered promiscuous mode
[  416.061840][T10886] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  416.070712][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[  416.087613][   T26] audit: type=1326 audit(1785927208.514:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.1.1870" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5138f019 code=0x0
[  416.869138][T10895] device syzkaller0 entered promiscuous mode
[  416.936725][T10850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  417.226324][T10901] device batadv1 entered promiscuous mode
[  418.197807][T10924] fuse: Invalid rootmode
[  418.283663][T10927] netlink: 'syz.2.1882': attribute type 1 has an invalid length.
[  418.351372][T10927] device bond6 entered promiscuous mode
[  418.357213][T10927] 8021q: adding VLAN 0 to HW filter on device bond6
[  418.374793][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'.
[  418.407913][T10930] device syzkaller0 entered promiscuous mode
[  418.486033][   T26] audit: type=1326 audit(1785927210.914:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10926 comm="syz.2.1882" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21ea1f7019 code=0x0
[  418.517148][T10927] bond6: (slave bridge5): making interface the new active one
[  418.557194][T10927] device bridge5 entered promiscuous mode
[  419.270855][T10927] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  419.352206][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready
[  419.577120][T10945] device syzkaller0 entered promiscuous mode
[  419.778458][T10953] device syzkaller0 entered promiscuous mode
[  420.758398][T10973] fuse: Invalid rootmode
[  420.796517][T10975] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  420.810231][T10975] fuse: Bad value for 'fd'
[  420.866486][T10975] overlayfs: conflicting options: userxattr,redirect_dir=off
[  421.184638][T10983] device syzkaller0 entered promiscuous mode
[  421.845764][T10990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  421.948860][T10988] device syzkaller0 entered promiscuous mode
[  421.997120][T10992] device syzkaller0 entered promiscuous mode
[  422.476764][ T4231] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  422.841102][ T4231] usb 1-1: config 0 has an invalid interface number: 231 but max is 0
[  422.884240][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  423.089628][T11006] device syzkaller0 entered promiscuous mode
[  423.142224][ T4231] usb 1-1: config 0 has no interface number 0
[  423.148453][ T4231] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  423.160405][ T4231] usb 1-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  423.250024][T11012] binder_alloc: 11011: binder_alloc_buf, no vma
[  423.986867][T11019] fuse: Invalid rootmode
[  424.001095][ T4231] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  424.010190][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.049073][ T4231] usb 1-1: Product: syz
[  424.053778][ T4231] usb 1-1: Manufacturer: syz
[  424.058410][ T4231] usb 1-1: SerialNumber: syz
[  424.081758][ T4231] usb 1-1: config 0 descriptor??
[  424.110987][T10990] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  424.133106][ T4231] plusb: probe of 1-1:0.231 failed with error -22
[  424.166466][T11029] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid
[  424.199937][T11029] fuse: Bad value for 'fd'
[  424.235409][T11029] overlayfs: conflicting options: userxattr,redirect_dir=off
[  424.490773][ T4231] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  424.626860][T11035] device syzkaller0 entered promiscuous mode
[  424.824014][T11039] device syzkaller0 entered promiscuous mode
[  424.860883][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  424.878042][ T4231] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  424.888172][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.904779][ T4231] usb 5-1: config 0 descriptor??
[  425.981206][ T4231] usbhid 5-1:0.0: can't add hid device: -71
[  425.987228][ T4231] usbhid: probe of 5-1:0.0 failed with error -71
[  425.996593][ T4231] usb 5-1: USB disconnect, device number 5
[  426.159989][ T5219] usb 1-1: USB disconnect, device number 5
[  427.112675][T11024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  427.211347][ T4231] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  427.224019][T11061] page:ffffea000121e800 refcount:4 mapcount:1 mapping:ffff888023a3a8a0 index:0x0 pfn:0x487a0
[  427.234745][T11061] memcg:ffff888077a98000
[  427.239000][T11061] aops:shmem_aops ino:4c6
[  427.243440][T11061] flags: 0xfff00000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff)
[  427.253285][T11061] raw: 00fff00000080015 ffffea0000b63ac8 ffffea00011cf5c8 ffff888023a3a8a0
[  427.261911][T11061] raw: 0000000000000000 0000000000000000 0000000400000000 ffff888077a98000
[  427.270525][T11061] page dumped because: VM_BUG_ON_PAGE(page_mapped(page))
[  427.277598][T11061] page_owner tracks the page as allocated
[  427.283331][T11061] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 11062, ts 427222427188, free_ts 427139872890
[  427.298206][T11061]  get_page_from_freelist+0x24f6/0x2670
[  427.303862][T11061]  __alloc_pages+0x1ee/0x480
[  427.308485][T11061]  alloc_pages_vma+0x2bc/0x790
[  427.313324][T11061]  shmem_alloc_and_acct_page+0x47f/0xbe0
[  427.319048][T11061]  shmem_getpage_gfp+0x14be/0x2c10
[  427.324191][T11061]  shmem_read_mapping_page_gfp+0x96/0x100
[  427.329941][T11061]  udmabuf_create+0xaa9/0x15b0
[  427.334798][T11061]  udmabuf_ioctl+0x1f3/0x300
[  427.339429][T11061]  __se_sys_ioctl+0xfa/0x170
[  427.341690][T11058] device syzkaller0 entered promiscuous mode
[  427.344141][T11061]  do_syscall_64+0x4c/0xa0
[  427.354585][T11061]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  427.360553][T11061] page last free stack trace:
[  427.365240][T11061]  free_unref_page_prepare+0x637/0x6c0
[  427.370832][T11061]  free_unref_page_list+0x119/0x830
[  427.376059][T11061]  release_pages+0x185f/0x1bd0
[  427.380848][T11061]  __pagevec_release+0x6d/0xe0
[  427.385632][T11061]  shmem_undo_range+0x5cd/0x19a0
[  427.390595][T11061]  shmem_evict_inode+0x1e2/0x9a0
[  427.395616][T11061]  evict+0x4b6/0x8b0
[  427.399544][T11061]  __dentry_kill+0x412/0x630
[  427.404156][T11061]  dentry_kill+0xb8/0x290
[  427.408530][T11061]  dput+0xd8/0x1a0
[  427.412273][T11061]  __fput+0x5a5/0x8c0
[  427.416380][T11061]  task_work_run+0x125/0x1a0
[  427.421094][T11061]  do_exit+0x635/0x2110
[  427.425304][T11061]  do_group_exit+0x12c/0x2f0
[  427.429914][T11061]  get_signal+0x7eb/0x12e0
[  427.434402][T11061]  arch_do_signal_or_restart+0xe6/0x12a0
[  427.440267][T11061] ------------[ cut here ]------------
[  427.445738][T11061] kernel BUG at mm/filemap.c:166!
[  427.450800][T11061] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  427.456887][T11061] CPU: 1 PID: 11061 Comm: syz.3.1923 Not tainted syzkaller #0
[  427.464357][T11061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  427.474440][T11061] RIP: 0010:unaccount_page_cache_page+0x74d/0x860
[  427.480967][T11061] Code: e8 c8 17 db ff 4c 89 f7 48 c7 c6 20 02 33 8a e8 c9 fc 0d 00 0f 0b e8 b2 17 db ff 4c 89 f7 48 c7 c6 60 02 33 8a e8 b3 fc 0d 00 <0f> 0b 48 85 ed 75 59 e8 97 17 db ff eb 5d e8 90 17 db ff 4c 89 f7
[  427.500781][T11061] RSP: 0018:ffffc90003d3f6e8 EFLAGS: 00010046
[  427.506876][T11061] RAX: ca6cc586bce01d00 RBX: 0000000000000000 RCX: 0000000000000000
[  427.514948][T11061] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff520007a7ed0
[  427.522937][T11061] RBP: ffffea000121e808 R08: ffff8880b912795b R09: fffff520007a7e8c
[  427.530930][T11061] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffffea000121e800
[  427.538947][T11061] R13: dffffc0000000000 R14: ffffea000121e800 R15: 1ffffd4000243d01
[  427.546964][T11061] FS:  0000555566166500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  427.555913][T11061] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  427.562512][T11061] CR2: 0000200000000000 CR3: 0000000020a9c000 CR4: 00000000003506e0
[  427.566477][T11065] device syzkaller0 entered promiscuous mode
[  427.570602][T11061] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  427.570618][T11061] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  427.570631][T11061] Call Trace:
[  427.570638][T11061]  <TASK>
[  427.598775][T11061]  ? rcu_is_watching+0x11/0xa0
[  427.603635][T11061]  __delete_from_page_cache+0xbc/0x6c0
[  427.609118][T11061]  ? _raw_spin_lock_irq+0x86/0xf0
[  427.614173][T11061]  ? lockdep_hardirqs_off+0x70/0x100
[  427.619579][T11061]  ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30
[  427.626673][T11061]  ? _raw_spin_lock_irq+0xb7/0xf0
[  427.631726][T11061]  ? _raw_spin_lock_irqsave+0x100/0x100
[  427.637296][T11061]  ? page_mapping+0x30e/0x440
[  427.641996][T11061]  delete_from_page_cache+0x121/0x190
[  427.647392][T11061]  truncate_inode_page+0x8d/0xb0
[  427.652384][T11061]  shmem_undo_range+0x4f4/0x19a0
[  427.657357][T11061]  ? shmem_truncate_range+0xa0/0xa0
[  427.662593][T11061]  ? do_raw_spin_lock+0x128/0x2f0
[  427.667728][T11061]  ? __rwlock_init+0x140/0x140
[  427.672521][T11061]  shmem_evict_inode+0x1e2/0x9a0
[  427.677487][T11061]  ? _raw_spin_unlock+0x24/0x40
[  427.682366][T11061]  ? shmem_free_in_core_inode+0xb0/0xb0
[  427.687962][T11061]  ? do_raw_spin_lock+0x128/0x2f0
[  427.693019][T11061]  ? bit_waitqueue+0x30/0x30
[  427.697691][T11061]  ? do_raw_spin_unlock+0x11d/0x230
[  427.702914][T11061]  ? shmem_free_in_core_inode+0xb0/0xb0
[  427.708483][T11061]  evict+0x4b6/0x8b0
[  427.712411][T11061]  ? __lock_acquire+0x7b50/0x7b50
[  427.717470][T11061]  ? proc_nr_inodes+0x320/0x320
[  427.722345][T11061]  ? do_raw_spin_unlock+0x11d/0x230
[  427.727568][T11061]  ? _raw_spin_unlock+0x24/0x40
[  427.732446][T11061]  __dentry_kill+0x412/0x630
[  427.737065][T11061]  dentry_kill+0xb8/0x290
[  427.741419][T11061]  dput+0xd8/0x1a0
[  427.745170][T11061]  __fput+0x5a5/0x8c0
[  427.749183][T11061]  task_work_run+0x125/0x1a0
[  427.753801][T11061]  exit_to_user_mode_loop+0x10f/0x130
[  427.759265][T11061]  exit_to_user_mode_prepare+0xee/0x180
[  427.764859][T11061]  syscall_exit_to_user_mode+0x16/0x40
[  427.770340][T11061]  do_syscall_64+0x58/0xa0
[  427.774778][T11061]  ? clear_bhb_loop+0x30/0x80
[  427.779654][T11061]  ? clear_bhb_loop+0x30/0x80
[  427.784367][T11061]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  427.793933][T11061] RIP: 0033:0x7f4b5a33f019
[  427.798384][T11061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  427.818042][T11061] RSP: 002b:00007ffe6434bbc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  427.826502][T11061] RAX: 0000000000000000 RBX: 00007ffe6434bcb0 RCX: 00007f4b5a33f019
[  427.834505][T11061] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  427.842509][T11061] RBP: 000000000006849f R08: 0000000000000001 R09: 0000000000000000
[  427.850596][T11061] R10: 0000001b31720000 R11: 0000000000000246 R12: 00007ffe6434bcf0
[  427.858600][T11061] R13: 00007f4b5a5c6fac R14: 00000000000684e1 R15: 00007f4b5a5c6fa0
[  427.866608][T11061]  </TASK>
[  427.869661][T11061] Modules linked in:
[  427.873605][T11061] ---[ end trace 9297102a76008750 ]---
[  427.879081][T11061] RIP: 0010:unaccount_page_cache_page+0x74d/0x860
[  427.885533][T11061] Code: e8 c8 17 db ff 4c 89 f7 48 c7 c6 20 02 33 8a e8 c9 fc 0d 00 0f 0b e8 b2 17 db ff 4c 89 f7 48 c7 c6 60 02 33 8a e8 b3 fc 0d 00 <0f> 0b 48 85 ed 75 59 e8 97 17 db ff eb 5d e8 90 17 db ff 4c 89 f7
[  427.905169][T11061] RSP: 0018:ffffc90003d3f6e8 EFLAGS: 00010046
[  427.911260][T11061] RAX: ca6cc586bce01d00 RBX: 0000000000000000 RCX: 0000000000000000
[  427.919253][T11061] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff520007a7ed0
[  427.927267][T11061] RBP: ffffea000121e808 R08: ffff8880b912795b R09: fffff520007a7e8c
[  427.935294][T11061] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffffea000121e800
[  427.943291][T11061] R13: dffffc0000000000 R14: ffffea000121e800 R15: 1ffffd4000243d01
[  427.951296][T11061] FS:  0000555566166500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  427.960242][T11061] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  427.966848][T11061] CR2: 0000200000000000 CR3: 0000000020a9c000 CR4: 00000000003506e0
[  427.974857][T11061] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  427.982844][T11061] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  427.990848][T11061] Kernel panic - not syncing: Fatal exception
[  427.997233][T11061] Kernel Offset: disabled
[  428.001584][T11061] Rebooting in 86400 seconds..