last executing test programs:

4m9.207941526s ago: executing program 2 (id=105):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff})
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c)

4m7.947454613s ago: executing program 2 (id=113):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
socketpair(0x2, 0x2, 0x1, &(0x7f0000002c40))

4m6.686344606s ago: executing program 2 (id=117):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, 0x0, 0x20004050)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x200000000000b, &(0x7f0000000040)='\x00', 0x1)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4890}, 0x4000080)
open(0x0, 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
open(&(0x7f0000000180)='./file0\x00', 0x2240, 0x6a)
setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0)

4m5.059956768s ago: executing program 2 (id=124):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1e00000081000000000000000300000041000100", @ANYRES32=r0, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000003000000010000000400"/24, @ANYRES32=r2, @ANYBLOB="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"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r5, &(0x7f0000000340), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r8}, 0x10)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

4m2.485161417s ago: executing program 2 (id=133):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486"], 0xfdef)

4m0.409019384s ago: executing program 2 (id=142):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file3\x00', 0x404, &(0x7f0000000f00)={[{@nogrpid}, {@jqfmt_vfsv0}, {@grpquota}, {@debug}, {@nodioread_nolock}, {@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3ff}}, {}, {@debug}]}, 0x1, 0x43d, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendfile(r1, r1, 0x0, 0xe0000000)

3m45.102816869s ago: executing program 32 (id=142):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file3\x00', 0x404, &(0x7f0000000f00)={[{@nogrpid}, {@jqfmt_vfsv0}, {@grpquota}, {@debug}, {@nodioread_nolock}, {@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3ff}}, {}, {@debug}]}, 0x1, 0x43d, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendfile(r1, r1, 0x0, 0xe0000000)

2m1.411837801s ago: executing program 1 (id=349):
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

1m57.724165326s ago: executing program 1 (id=358):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x55, 0x0, &(0x7f00000012c0)="02174b98f1c8c8d1e976fd61b724f48a77b50431037bcd41ca285a2a91934f8f0c8ca40000000043f9633f0f6bbbb5c98adcc60bc1c8892526a3efb71e688c52d9d3f4ab4d62a95f25117444d2a137acb3076899df"})

1m56.904344307s ago: executing program 1 (id=361):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
recvmsg(0xffffffffffffffff, 0x0, 0x40fd)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18)
syz_open_dev$evdev(0x0, 0xa, 0x0)
write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7, 0x8400000, 0x1, 0x3}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fscache'])

1m55.559780037s ago: executing program 1 (id=363):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000000000fa10"])

1m54.572079273s ago: executing program 0 (id=366):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

1m54.367221851s ago: executing program 1 (id=368):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xb0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)

1m53.491985838s ago: executing program 0 (id=371):
sched_setscheduler(0x0, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

1m53.326648529s ago: executing program 1 (id=373):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESOCT, @ANYBLOB="ac82fa3da8cb64cc9eacb70c5918a0fd0f53ab333860bfb7988f9b8200a0d9b5f31f4d5b386152286170eda7f0291b03bafde1116c6f4799c9f36b7247c9664cfa9b290a30352b971c", @ANYRESHEX], 0x8, 0x2f8, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r7)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r8, 0x0}, 0x20)
write(r0, &(0x7f0000000f80)="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", 0x1000)

1m52.880318095s ago: executing program 0 (id=375):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)

1m51.65851178s ago: executing program 0 (id=378):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
readv(r1, &(0x7f0000000480)=[{&(0x7f0000000380)=""/2, 0x2}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1m49.082651708s ago: executing program 0 (id=381):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)

1m48.179110273s ago: executing program 0 (id=385):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)={0x2, 0x0, [{0xdddd1000, 0x45, &(0x7f0000000400)=""/69}, {0x2, 0x24, &(0x7f00000005c0)=""/36}]})

1m38.054892474s ago: executing program 33 (id=373):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESOCT, @ANYBLOB="ac82fa3da8cb64cc9eacb70c5918a0fd0f53ab333860bfb7988f9b8200a0d9b5f31f4d5b386152286170eda7f0291b03bafde1116c6f4799c9f36b7247c9664cfa9b290a30352b971c", @ANYRESHEX], 0x8, 0x2f8, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r7)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r8, 0x0}, 0x20)
write(r0, &(0x7f0000000f80)="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", 0x1000)

1m29.386351744s ago: executing program 34 (id=385):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)={0x2, 0x0, [{0xdddd1000, 0x45, &(0x7f0000000400)=""/69}, {0x2, 0x24, &(0x7f00000005c0)=""/36}]})

36.372505973s ago: executing program 7 (id=412):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x52, 0x0, &(0x7f0000001140)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395e01f1e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba17281680c05bcb51e638e833e81bfa5c3688803c8a124dcb2"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x55, 0x0, &(0x7f00000012c0)="02174b98f1c8c8d1e976fd61b724f48a77b50431037bcd41ca285a2a91934f8f0c8ca40000000043f9633f0f6bbbb5c98adcc60bc1c8892526a3efb71e688c52d9d3f4ab4d62a95f25117444d2a137acb3076899df"})

34.18956026s ago: executing program 7 (id=496):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, r2)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4881c}, 0x81)
syz_open_dev$dri(&(0x7f0000000000), 0xe, 0x20c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
prctl$PR_GET_FPEXC(0xb, 0x0)
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x2, 0x1}, 0x5, 0x5, 0x400001})
getsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000003800)=0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, 0x0)

29.797256139s ago: executing program 7 (id=506):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x52, 0x0, &(0x7f0000001140)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395e01f1e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba17281680c05bcb51e638e833e81bfa5c3688803c8a124dcb2"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x55, 0x0, &(0x7f00000012c0)="02174b98f1c8c8d1e976fd61b724f48a77b50431037bcd41ca285a2a91934f8f0c8ca40000000043f9633f0f6bbbb5c98adcc60bc1c8892526a3efb71e688c52d9d3f4ab4d62a95f25117444d2a137acb3076899df"})

27.947075787s ago: executing program 7 (id=510):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001e00150d2cbd7000fddbdf2507000000", @ANYRES32=r2, @ANYBLOB="020000000000000008000a00", @ANYRES32=r1], 0x28}}, 0x48010)

26.202743675s ago: executing program 7 (id=513):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c)

24.54065741s ago: executing program 7 (id=517):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x16, 0xc, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x36, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESOCT, @ANYBLOB="ac82fa3da8cb64cc9eacb70c5918a0fd0f53ab333860bfb7988f9b8200a0d9b5f31f4d5b386152286170eda7f0291b03bafde1116c6f4799c9f36b7247c9664cfa9b290a30352b971c", @ANYRESHEX], 0x8, 0x2f8, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0)

15.222699281s ago: executing program 6 (id=540):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
rename(&(0x7f0000000040)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
recvfrom$packet(r1, 0x0, 0x0, 0x2000, 0x0, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, r2, 0x1, 0x0, @void}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x79, 0x0, 0x0, 0x4c}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x69)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

11.282976507s ago: executing program 4 (id=547):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, r2)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4881c}, 0x81)
syz_open_dev$dri(&(0x7f0000000000), 0xe, 0x20c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
prctl$PR_GET_FPEXC(0xb, 0x0)
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x2, 0x1}, 0x5, 0x5, 0x400001})
getsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000003800)=0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, 0x0)

9.965992736s ago: executing program 6 (id=550):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000680)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

9.103370941s ago: executing program 35 (id=517):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x16, 0xc, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x36, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESOCT, @ANYBLOB="ac82fa3da8cb64cc9eacb70c5918a0fd0f53ab333860bfb7988f9b8200a0d9b5f31f4d5b386152286170eda7f0291b03bafde1116c6f4799c9f36b7247c9664cfa9b290a30352b971c", @ANYRESHEX], 0x8, 0x2f8, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0)

8.93919141s ago: executing program 6 (id=552):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c0022000000000400000000050024000100000006000800a8880000080005000100000005002b"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)

7.996524183s ago: executing program 5 (id=555):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x403, 0x1, 0x1, 0x0, @sint={0x6, 0x4000008}}]})

7.867707229s ago: executing program 3 (id=556):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

7.639168345s ago: executing program 6 (id=557):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
ioctl$TCXONC(r0, 0x540a, 0x0)

6.795805973s ago: executing program 5 (id=558):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x1000000, &(0x7f0000000040)={[{@usrjquota}, {}]}, 0x0, 0x248, &(0x7f0000000940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @b}, 0x40, 0x0, '\x00', @a})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a})
openat$cgroup_int(r1, &(0x7f0000000800)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)

6.528079718s ago: executing program 6 (id=559):
syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10)
syz_emit_ethernet(0x3e, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000f0ff000000000000000000c2610000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, 0x0, &(0x7f0000000bc0)=0x2c)
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x8001)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

6.450447664s ago: executing program 3 (id=560):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r1=>0x0})
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000400)}], 0x1, &(0x7f0000000680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x56f2929c}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5f75}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0xa8}, 0x4004)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000400)={0x1, 0x8, 0x4, 0x1ec95890, @vifc_lcl_addr=@multicast2, @remote}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
getresuid(&(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000200))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15)

6.072322161s ago: executing program 4 (id=561):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000680)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

5.519562809s ago: executing program 3 (id=562):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x52, 0x0, &(0x7f0000001140)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395e01f1e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba17281680c05bcb51e638e833e81bfa5c3688803c8a124dcb2"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000002880)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x55, 0x0, &(0x7f00000012c0)="02174b98f1c8c8d1e976fd61b724f48a77b50431037bcd41ca285a2a91934f8f0c8ca40000000043f9633f0f6bbbb5c98adcc60bc1c8892526a3efb71e688c52d9d3f4ab4d62a95f25117444d2a137acb3076899df"})

5.134174827s ago: executing program 5 (id=563):
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020)

5.059833544s ago: executing program 4 (id=564):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3)

4.44775083s ago: executing program 3 (id=565):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xa8)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)
write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4)
write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc)
write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc)
write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38)

4.216555416s ago: executing program 5 (id=566):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='X'], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x2502})
ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r4}, 0x0, 0x0}, 0x20)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)

3.768294693s ago: executing program 3 (id=567):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$packet(0x11, 0x2, 0x300)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8844)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')

3.34744354s ago: executing program 4 (id=568):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xfffffffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

2.670298832s ago: executing program 5 (id=569):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

2.012477101s ago: executing program 4 (id=570):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, r2)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4881c}, 0x81)
syz_open_dev$dri(&(0x7f0000000000), 0xe, 0x20c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
prctl$PR_GET_FPEXC(0xb, 0x0)
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x2, 0x1}, 0x5, 0x5, 0x400001})
getsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000003800)=0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, 0x0)

518.444431ms ago: executing program 3 (id=571):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r1, r0, 0x0, 0x578410e9)
sendfile(r1, r0, 0x0, 0x100000000)

159.368533ms ago: executing program 5 (id=572):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
write$binfmt_script(r2, 0x0, 0x0)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

154.035624ms ago: executing program 4 (id=573):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0)

0s ago: executing program 6 (id=574):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts.
[  157.776450][ T5792] cgroup: Unknown subsys name 'net'
[  157.922138][ T5792] cgroup: Unknown subsys name 'cpuset'
[  157.936025][ T5792] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  163.081495][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  163.088102][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  163.317435][ T5792] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  167.077595][   T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  167.086407][   T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  167.095135][   T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  167.105892][   T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  167.113551][   T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  167.123445][   T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  167.131885][   T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  167.143650][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  167.155976][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  167.165644][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  167.199724][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  167.211911][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  167.221209][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  167.250844][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  167.261462][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  167.272146][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  167.279170][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  167.283110][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  167.288215][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  167.295586][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  167.312228][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  167.323601][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  167.337962][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  167.364479][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  167.375369][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  168.515877][ T5815] chnl_net:caif_netlink_parms(): no params data found
[  168.750229][ T5819] chnl_net:caif_netlink_parms(): no params data found
[  169.044929][ T5811] chnl_net:caif_netlink_parms(): no params data found
[  169.223168][ T5813] Bluetooth: hci1: command tx timeout
[  169.305305][ T5813] Bluetooth: hci0: command tx timeout
[  169.390300][ T5821] chnl_net:caif_netlink_parms(): no params data found
[  169.514338][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.521957][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.529552][ T5815] bridge_slave_0: entered allmulticast mode
[  169.540435][ T5815] bridge_slave_0: entered promiscuous mode
[  169.546710][ T5813] Bluetooth: hci4: command tx timeout
[  169.557161][ T5813] Bluetooth: hci3: command tx timeout
[  169.564441][ T5813] Bluetooth: hci2: command tx timeout
[  169.589219][ T5824] chnl_net:caif_netlink_parms(): no params data found
[  169.645053][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.653231][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.660783][ T5815] bridge_slave_1: entered allmulticast mode
[  169.670041][ T5815] bridge_slave_1: entered promiscuous mode
[  169.998902][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.097188][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.155111][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.163227][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.170756][ T5819] bridge_slave_0: entered allmulticast mode
[  170.180123][ T5819] bridge_slave_0: entered promiscuous mode
[  170.325789][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.335868][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.343641][ T5811] bridge_slave_0: entered allmulticast mode
[  170.352945][ T5811] bridge_slave_0: entered promiscuous mode
[  170.365051][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.372747][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.380306][ T5819] bridge_slave_1: entered allmulticast mode
[  170.389417][ T5819] bridge_slave_1: entered promiscuous mode
[  170.409535][ T5815] team0: Port device team_slave_0 added
[  170.422523][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.429998][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.438140][ T5811] bridge_slave_1: entered allmulticast mode
[  170.447488][ T5811] bridge_slave_1: entered promiscuous mode
[  170.507074][ T5815] team0: Port device team_slave_1 added
[  170.619936][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.775709][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.792519][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.915233][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.922880][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.930441][ T5824] bridge_slave_0: entered allmulticast mode
[  170.939572][ T5824] bridge_slave_0: entered promiscuous mode
[  170.982996][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.990448][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.998198][ T5821] bridge_slave_0: entered allmulticast mode
[  171.007787][ T5821] bridge_slave_0: entered promiscuous mode
[  171.027129][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.036798][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.047958][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.055726][ T5821] bridge_slave_1: entered allmulticast mode
[  171.065027][ T5821] bridge_slave_1: entered promiscuous mode
[  171.102520][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.109623][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.135937][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.160061][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.167666][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.175544][ T5824] bridge_slave_1: entered allmulticast mode
[  171.184716][ T5824] bridge_slave_1: entered promiscuous mode
[  171.302304][ T5813] Bluetooth: hci1: command tx timeout
[  171.317994][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.325254][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.352616][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.382508][ T5813] Bluetooth: hci0: command tx timeout
[  171.463484][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.483102][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.500232][ T5819] team0: Port device team_slave_0 added
[  171.534975][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.551630][ T5811] team0: Port device team_slave_0 added
[  171.589653][ T5819] team0: Port device team_slave_1 added
[  171.628660][ T5813] Bluetooth: hci2: command tx timeout
[  171.629714][   T49] Bluetooth: hci4: command tx timeout
[  171.634335][ T5813] Bluetooth: hci3: command tx timeout
[  171.658443][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.675048][ T5811] team0: Port device team_slave_1 added
[  171.873100][ T5821] team0: Port device team_slave_0 added
[  171.915384][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.922753][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.948987][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.968112][ T5824] team0: Port device team_slave_0 added
[  171.977416][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.985805][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.013025][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.064921][ T5821] team0: Port device team_slave_1 added
[  172.074182][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.081570][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.107811][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.132755][ T5815] hsr_slave_0: entered promiscuous mode
[  172.142256][ T5815] hsr_slave_1: entered promiscuous mode
[  172.157358][ T5824] team0: Port device team_slave_1 added
[  172.219743][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.226933][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.253356][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.401566][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.408664][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.435163][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.503496][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.510597][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.536872][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.606565][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.613911][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.640161][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.730209][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.737457][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.763796][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.788565][ T5811] hsr_slave_0: entered promiscuous mode
[  172.798335][ T5811] hsr_slave_1: entered promiscuous mode
[  172.806651][ T5811] debugfs: 'hsr0' already exists in 'hsr'
[  172.812635][ T5811] Cannot create hsr debugfs directory
[  173.025225][ T5824] hsr_slave_0: entered promiscuous mode
[  173.034923][ T5824] hsr_slave_1: entered promiscuous mode
[  173.043380][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[  173.049253][ T5824] Cannot create hsr debugfs directory
[  173.069896][ T5819] hsr_slave_0: entered promiscuous mode
[  173.078279][ T5819] hsr_slave_1: entered promiscuous mode
[  173.086890][ T5819] debugfs: 'hsr0' already exists in 'hsr'
[  173.092808][ T5819] Cannot create hsr debugfs directory
[  173.381867][ T5821] hsr_slave_0: entered promiscuous mode
[  173.382665][ T5813] Bluetooth: hci1: command tx timeout
[  173.391648][ T5821] hsr_slave_1: entered promiscuous mode
[  173.401643][ T5821] debugfs: 'hsr0' already exists in 'hsr'
[  173.407528][ T5821] Cannot create hsr debugfs directory
[  173.461199][ T5813] Bluetooth: hci0: command tx timeout
[  173.701398][ T5813] Bluetooth: hci3: command tx timeout
[  173.707012][ T5813] Bluetooth: hci4: command tx timeout
[  173.713914][ T5813] Bluetooth: hci2: command tx timeout
[  174.415319][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  174.440151][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  174.475291][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  174.513694][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  174.680567][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  174.740312][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  174.763227][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  174.785386][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  174.983534][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  175.026126][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  175.048076][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  175.067495][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  175.108844][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  175.135744][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  175.190291][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  175.218091][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  175.463314][   T49] Bluetooth: hci1: command tx timeout
[  175.477521][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  175.542598][   T49] Bluetooth: hci0: command tx timeout
[  175.549435][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  175.661869][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  175.732752][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  175.787253][   T49] Bluetooth: hci2: command tx timeout
[  175.793270][   T49] Bluetooth: hci4: command tx timeout
[  175.798822][   T49] Bluetooth: hci3: command tx timeout
[  175.845377][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.023554][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[  176.057785][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.138595][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.178828][ T4562] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.186557][ T4562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.272317][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[  176.308193][ T4562] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.315950][ T4562] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.484748][ T4562] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.492311][ T4562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.512690][ T4562] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.520132][ T4562] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.573141][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[  176.634175][ T4562] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.641753][ T4562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.768212][ T4562] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.775909][ T4562] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.094839][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.388751][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[  177.419756][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.468027][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.475617][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.568942][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.576476][ T5052] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.663330][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[  177.751069][ T5052] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.758524][ T5052] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.884537][ T5824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  177.895397][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  178.006054][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.013622][ T5052] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.170277][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  178.181688][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  178.893896][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.048102][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.218978][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.477911][ T5815] veth0_vlan: entered promiscuous mode
[  179.627819][ T5811] veth0_vlan: entered promiscuous mode
[  179.644449][ T5815] veth1_vlan: entered promiscuous mode
[  179.803494][ T5811] veth1_vlan: entered promiscuous mode
[  179.828263][ T5819] veth0_vlan: entered promiscuous mode
[  179.981171][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.068100][ T5819] veth1_vlan: entered promiscuous mode
[  180.112453][ T5815] veth0_macvtap: entered promiscuous mode
[  180.207296][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.244043][ T5815] veth1_macvtap: entered promiscuous mode
[  180.288744][ T5811] veth0_macvtap: entered promiscuous mode
[  180.377723][ T5819] veth0_macvtap: entered promiscuous mode
[  180.393069][ T5811] veth1_macvtap: entered promiscuous mode
[  180.468602][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.558934][ T5819] veth1_macvtap: entered promiscuous mode
[  180.589782][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.646553][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.704031][ T3848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.729120][ T3848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.760400][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.776588][ T5824] veth0_vlan: entered promiscuous mode
[  180.795933][ T1136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.876062][ T1136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.907046][ T5824] veth1_vlan: entered promiscuous mode
[  180.924530][ T1136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.940301][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.979515][ T1136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.025452][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.094353][ T1136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.141888][ T1136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.199118][ T1136] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.304088][ T1136] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.345330][ T1124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.357552][ T5824] veth0_macvtap: entered promiscuous mode
[  181.402057][ T1124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.430754][ T5824] veth1_macvtap: entered promiscuous mode
[  181.603273][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.703662][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.817626][ T3748] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.875901][ T3748] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.929538][ T3748] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.983814][ T3748] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.869589][ T5821] veth0_vlan: entered promiscuous mode
[  182.977715][ T5821] veth1_vlan: entered promiscuous mode
[  183.266969][ T5821] veth0_macvtap: entered promiscuous mode
[  183.360721][ T5821] veth1_macvtap: entered promiscuous mode
[  183.583980][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.686021][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.843465][ T1124] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.910657][ T1124] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.947874][ T3574] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.006376][ T3574] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.145751][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.153918][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.360548][ T3970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.369497][ T3970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.423919][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.432977][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.482516][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.490524][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.595471][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.597024][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.604161][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.619752][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.897669][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  188.455949][ T1881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.464556][ T1881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.553861][ T6000] tun0: tun_chr_ioctl cmd 1074025675
[  188.559346][ T6000] tun0: persist disabled
[  188.593111][ T5997] tun0: tun_chr_ioctl cmd 1074025675
[  188.598697][ T5997] tun0: persist enabled
[  188.653899][ T3970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.713707][ T3970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.765476][ T6015] netlink: 'syz.3.9': attribute type 21 has an invalid length.
[  189.773525][ T6015] netlink: 'syz.3.9': attribute type 20 has an invalid length.
[  190.542740][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.556398][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.988878][ T3970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.997250][ T3970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.814355][ T6062] veth0_vlan: entered allmulticast mode
[  194.080665][ T6062] ŞŞŞŞŞŞ: renamed from vlan0
[  194.961595][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  195.081315][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[  195.111357][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  195.125807][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  195.366723][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  203.337979][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.322041][ T6257] loop4: detected capacity change from 0 to 2048
[  213.489877][ T6257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.055204][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.323891][ T6275] veth0_vlan: left promiscuous mode
[  215.341079][ T6275] veth0_vlan: entered promiscuous mode
[  217.004591][ T6299] loop1: detected capacity change from 0 to 2048
[  217.086980][ T6299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.648400][ T5811] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.507948][ T6337] loop1: detected capacity change from 0 to 2048
[  220.616345][ T6337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.113647][ T5811] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.416993][ T6356] veth0_vlan: entered allmulticast mode
[  222.573079][ T6356] ˙˙˙˙˙˙: renamed from vlan1
[  224.520295][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  224.527650][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  224.581473][ T6377] loop4: detected capacity change from 0 to 2048
[  224.637686][ T6383] loop2: detected capacity change from 0 to 512
[  224.658646][ T6383] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  224.672522][ T6383] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  224.753114][ T6383] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  224.762190][ T6383] System zones: 1-12
[  224.782098][ T6383] EXT4-fs (loop2): 1 truncate cleaned up
[  224.789842][ T6383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.891797][ T6377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.062138][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  225.164571][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  225.525212][   T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  225.768865][   T11] usb 2-1: device descriptor read/64, error -71
[  225.994474][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.041990][   T11] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  226.233665][   T11] usb 2-1: device descriptor read/64, error -71
[  226.362509][   T11] usb usb2-port1: attempt power cycle
[  226.981559][   T11] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  227.068332][   T11] usb 2-1: device descriptor read/8, error -71
[  227.340125][   T11] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  227.394197][   T11] usb 2-1: device descriptor read/8, error -71
[  227.476460][ T6404] overlayfs: failed to resolve './file1': -2
[  227.522071][   T11] usb usb2-port1: unable to enumerate USB device
[  229.057708][ T6419] loop1: detected capacity change from 0 to 2048
[  229.307310][ T6419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.800100][ T5811] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.321704][ T6438] overlayfs: failed to resolve './file1': -2
[  230.431222][   T42] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  230.611203][   T42] usb 4-1: device descriptor read/64, error -71
[  230.871509][   T42] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  231.072653][   T42] usb 4-1: device descriptor read/64, error -71
[  231.196009][   T42] usb usb4-port1: attempt power cycle
[  231.581365][   T42] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  231.668028][   T42] usb 4-1: device descriptor read/8, error -71
[  231.913247][   T42] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  231.993967][   T42] usb 4-1: device descriptor read/8, error -71
[  232.116599][   T42] usb usb4-port1: unable to enumerate USB device
[  232.802333][ T6461] loop0: detected capacity change from 0 to 2048
[  232.983496][ T6461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.588490][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.531146][   T11] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  236.571690][ T6500] loop1: detected capacity change from 0 to 2048
[  236.650145][ T6500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.692448][   T11] usb 4-1: device descriptor read/64, error -71
[  236.961228][   T11] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  236.975558][ T6504] netlink: 'syz.4.188': attribute type 29 has an invalid length.
[  237.037473][ T6504] netlink: 'syz.4.188': attribute type 29 has an invalid length.
[  237.091777][ T6504] netlink: 'syz.4.188': attribute type 29 has an invalid length.
[  237.110242][ T6504] netlink: 'syz.4.188': attribute type 29 has an invalid length.
[  237.131680][   T11] usb 4-1: device descriptor read/64, error -71
[  237.156928][ T5811] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.287223][   T11] usb usb4-port1: attempt power cycle
[  237.681404][   T11] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  237.713804][   T11] usb 4-1: device descriptor read/8, error -71
[  237.962395][   T11] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  238.070288][   T11] usb 4-1: device descriptor read/8, error -71
[  238.194609][   T11] usb usb4-port1: unable to enumerate USB device
[  240.865486][ T6534] loop0: detected capacity change from 0 to 2048
[  241.021073][ T6035] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.293231][   T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  241.308098][   T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  241.327492][   T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  241.348544][   T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  241.361587][   T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  241.412260][ T6542] netlink: 60 bytes leftover after parsing attributes in process `syz.4.204'.
[  241.502051][ T6539] netlink: 60 bytes leftover after parsing attributes in process `syz.4.204'.
[  241.668524][ T6534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.671475][ T6544] netlink: 60 bytes leftover after parsing attributes in process `syz.4.204'.
[  242.439991][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.681934][   T42] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  242.851250][   T42] usb 2-1: device descriptor read/64, error -71
[  243.131725][   T42] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  243.441537][   T42] usb 2-1: device descriptor read/64, error -71
[  243.463074][   T49] Bluetooth: hci5: command tx timeout
[  243.487506][ T6540] chnl_net:caif_netlink_parms(): no params data found
[  243.553621][   T42] usb usb2-port1: attempt power cycle
[  243.931390][   T42] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  243.992223][   T42] usb 2-1: device descriptor read/8, error -71
[  244.281563][   T42] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  244.373710][   T42] usb 2-1: device descriptor read/8, error -71
[  244.522427][   T42] usb usb2-port1: unable to enumerate USB device
[  244.566956][ T4562] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.835255][ T4562] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.065676][ T4562] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.372627][ T4562] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.546708][   T49] Bluetooth: hci5: command tx timeout
[  245.562818][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.570388][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.579562][ T6540] bridge_slave_0: entered allmulticast mode
[  245.661599][ T6540] bridge_slave_0: entered promiscuous mode
[  245.858361][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.866056][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.874077][ T6540] bridge_slave_1: entered allmulticast mode
[  245.883257][ T6540] bridge_slave_1: entered promiscuous mode
[  246.009815][ T4562] bridge_slave_1: left allmulticast mode
[  246.015907][ T4562] bridge_slave_1: left promiscuous mode
[  246.023940][ T4562] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.162392][ T4562] bridge_slave_0: left allmulticast mode
[  246.168229][ T4562] bridge_slave_0: left promiscuous mode
[  246.174865][ T4562] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.130661][ T6591] loop0: detected capacity change from 0 to 2048
[  247.222805][ T4562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  247.301428][ T4562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  247.358138][ T4562] bond0 (unregistering): Released all slaves
[  247.393299][ T6603] loop4: detected capacity change from 0 to 128
[  247.444192][ T6603] EXT4-fs: Ignoring removed nobh option
[  247.604824][ T6603] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  247.636243][   T49] Bluetooth: hci5: command tx timeout
[  247.760461][ T6603] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  247.857323][ T6591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.934717][ T6540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.080732][ T3970] Bluetooth: hci1: Frame reassembly failed (-84)
[  248.138974][ T6540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.877950][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.011415][ T6540] team0: Port device team_slave_0 added
[  249.121668][ T6540] team0: Port device team_slave_1 added
[  249.656541][ T6617] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  249.691948][ T4562] hsr_slave_0: left promiscuous mode
[  249.701209][ T5813] Bluetooth: hci5: command tx timeout
[  249.721752][ T4562] hsr_slave_1: left promiscuous mode
[  249.729632][ T4562] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.744153][ T4562] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.886298][ T4562] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.894209][ T4562] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.019612][ T4562] veth1_macvtap: left promiscuous mode
[  250.025818][ T4562] veth0_macvtap: left promiscuous mode
[  250.031988][ T4562] veth1_vlan: left promiscuous mode
[  250.037502][ T4562] veth0_vlan: left promiscuous mode
[  250.103031][ T5813] Bluetooth: hci1: command 0x1003 tx timeout
[  250.121625][   T49] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  250.279214][ T5821] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  250.802026][ T6629] loop3: detected capacity change from 0 to 1024
[  250.811356][ T6629] =======================================================
[  250.811356][ T6629] WARNING: The mand mount option has been deprecated and
[  250.811356][ T6629]          and is ignored by this kernel. Remove the mand
[  250.811356][ T6629]          option from the mount to silence this warning.
[  250.811356][ T6629] =======================================================
[  251.008239][ T6629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  251.021915][ T6629] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  252.183639][ T6606] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  253.393019][ T4562] team0 (unregistering): Port device team_slave_1 removed
[  253.614744][ T4562] team0 (unregistering): Port device team_slave_0 removed
[  254.331999][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_0
[  254.339120][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.370707][ T6540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  254.632379][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_1
[  254.639489][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.671859][ T6540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.291321][   T11] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  255.571682][   T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  255.583646][   T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  255.596355][ T6540] hsr_slave_0: entered promiscuous mode
[  255.606515][ T6540] hsr_slave_1: entered promiscuous mode
[  255.661859][   T11] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  255.671493][   T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  255.682930][   T11] usb 5-1: SerialNumber: syz
[  256.365534][   T11] usb 5-1: 0:2 : does not exist
[  256.516780][   T11] usb 5-1: USB disconnect, device number 2
[  256.638110][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  256.828916][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  257.441474][   T30] audit: type=1326 audit(1755954058.938:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59858ebe9 code=0x7ffc0000
[  257.464469][   T30] audit: type=1326 audit(1755954058.968:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc59858ebe9 code=0x7ffc0000
[  257.487289][   T30] audit: type=1326 audit(1755954058.968:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59858ebe9 code=0x7ffc0000
[  257.677394][ T6663] loop3: detected capacity change from 0 to 2048
[  257.978831][   T30] audit: type=1326 audit(1755954059.048:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fc59858ebe9 code=0x7ffc0000
[  258.001513][   T30] audit: type=1326 audit(1755954059.048:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59858ebe9 code=0x7ffc0000
[  258.024013][   T30] audit: type=1326 audit(1755954059.058:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59858ebe9 code=0x7ffc0000
[  258.113964][ T6663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.567661][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.595801][ T6540] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  258.799616][ T6540] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  259.168980][ T6685] loop0: detected capacity change from 0 to 1024
[  259.401692][ T6685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.455253][ T6540] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  259.943096][ T6540] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  264.718389][ T6704] loop3: detected capacity change from 0 to 128
[  264.839300][ T6705] loop4: detected capacity change from 0 to 128
[  264.904842][ T6704] EXT4-fs: Ignoring removed nobh option
[  265.013095][ T6705] vfat: Unknown parameter ''
[  265.203401][ T6704] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  265.263059][ T6540] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.390779][ T6704] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  266.479666][ T6540] 8021q: adding VLAN 0 to HW filter on device team0
[  266.563994][ T6714] sch_fq: defrate 0 ignored.
[  266.574644][   T42] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  267.548156][ T1881] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.555759][ T1881] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.701429][   T42] usb 2-1: Using ep0 maxpacket: 16
[  267.846934][   T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  267.858038][   T42] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  267.878070][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.973493][ T1881] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.981128][ T1881] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.259203][   T42] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  268.268848][   T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.281791][   T42] usb 2-1: Product: syz
[  268.286123][   T42] usb 2-1: Manufacturer: syz
[  268.292595][   T42] usb 2-1: SerialNumber: syz
[  268.875465][ T5819] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  269.160263][   T42] usb 2-1: can't set config #1, error -71
[  269.242302][   T42] usb 2-1: USB disconnect, device number 10
[  269.727457][ T6721] loop4: detected capacity change from 0 to 2048
[  270.084769][ T6721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.408204][ T6723] loop3: detected capacity change from 0 to 4096
[  270.576930][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.719892][ T6723] EXT4-fs (loop3): Test dummy encryption mode enabled
[  270.729326][ T6723] EXT4-fs (loop3): unsupported descriptor size 255
[  274.240809][ T6747] loop4: detected capacity change from 0 to 256
[  274.294693][ T6746] netlink: 'syz.1.256': attribute type 3 has an invalid length.
[  274.303509][ T6746] netlink: 'syz.1.256': attribute type 3 has an invalid length.
[  274.459877][ T6540] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.481466][   T30] audit: type=1800 audit(1755954076.008:8): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.254" name="file1" dev="loop4" ino=1048601 res=0 errno=0
[  275.032315][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  275.133989][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  275.442036][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  275.552527][ T6755] loop3: detected capacity change from 0 to 32768
[  278.477264][ T6760] netlink: 'syz.4.258': attribute type 1 has an invalid length.
[  278.485665][ T6760] netlink: 5 bytes leftover after parsing attributes in process `syz.4.258'.
[  278.806807][ T6765] loop1: detected capacity change from 0 to 256
[  279.438894][ T6772] loop0: detected capacity change from 0 to 128
[  279.488101][ T6772] EXT4-fs (loop0): Test dummy encryption mode enabled
[  279.602255][ T6772] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  279.668582][ T6772] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  279.888217][ T6772] fscrypt (loop0): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))")
[  280.365456][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'.
[  280.592353][ T6782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.262'.
[  281.017240][ T6781] loop4: detected capacity change from 0 to 2048
[  281.389047][ T6781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.391678][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.284200][ T6800] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  284.506677][ T6540] veth0_vlan: entered promiscuous mode
[  284.801135][ T6540] veth1_vlan: entered promiscuous mode
[  285.188402][ T6800] loop4: detected capacity change from 0 to 2048
[  285.778101][ T6800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.845396][ T6540] veth0_macvtap: entered promiscuous mode
[  286.009227][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  286.015938][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  286.103582][ T6540] veth1_macvtap: entered promiscuous mode
[  286.291604][   T30] audit: type=1800 audit(1755954087.758:9): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.265" name="bus" dev="loop4" ino=18 res=0 errno=0
[  286.313683][   T30] audit: type=1800 audit(1755954087.808:10): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.265" name="bus" dev="loop4" ino=18 res=0 errno=0
[  286.710054][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.826462][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.863811][ T1881] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.928959][ T1881] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.945756][ T5824] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  286.990479][ T1881] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.071282][ T1881] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.156865][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.236877][ T6815] loop4: detected capacity change from 0 to 32768
[  291.151712][ T6828] netlink: 'syz.1.272': attribute type 1 has an invalid length.
[  291.159535][ T6828] netlink: 5 bytes leftover after parsing attributes in process `syz.1.272'.
[  292.301848][ T6840] loop0: detected capacity change from 0 to 2048
[  292.569353][ T6844] syzkaller0: entered promiscuous mode
[  292.576010][ T6844] syzkaller0: entered allmulticast mode
[  292.837057][ T6840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.196368][ T5820] Bluetooth: hci0: command 0x0406 tx timeout
[  293.203363][ T6852] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  293.231471][ T5820] Bluetooth: hci4: command 0x0406 tx timeout
[  293.237663][ T5820] Bluetooth: hci3: command 0x0406 tx timeout
[  293.246571][ T5816] Bluetooth: hci2: command 0x0406 tx timeout
[  293.677079][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.491971][ T2034] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  294.701912][ T2034] usb 1-1: Using ep0 maxpacket: 16
[  295.182371][ T6867] loop1: detected capacity change from 0 to 32768
[  295.246684][ T2034] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.258149][ T2034] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.268414][ T2034] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  295.281761][ T2034] usb 1-1: config 0 interface 0 has no altsetting 0
[  295.288598][ T2034] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  295.298268][ T2034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.735011][ T2034] usb 1-1: config 0 descriptor??
[  297.204306][ T2034] hid (null): unknown global tag 0xe
[  297.209887][ T2034] hid (null): bogus close delimiter
[  297.722234][ T2034] usb 1-1: USB disconnect, device number 2
[  299.026871][ T6888] capability: warning: `syz.4.270' uses deprecated v2 capabilities in a way that may be insecure
[  299.706518][ T4562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.717824][ T4562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.766030][ T6892] loop4: detected capacity change from 0 to 256
[  299.804454][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.814602][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.031774][   T30] audit: type=1800 audit(1755954101.558:11): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.283" name="file1" dev="loop4" ino=1048603 res=0 errno=0
[  301.328551][ T6902] loop0: detected capacity change from 0 to 2048
[  301.543990][ T6902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.786817][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  301.799453][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  301.814309][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  301.865956][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  301.893271][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  302.034558][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.615856][   T30] audit: type=1326 audit(1755954105.148:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59858ebe9 code=0x7ffc0000
[  303.640282][   T30] audit: type=1326 audit(1755954105.148:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fc59858ebe9 code=0x7ffc0000
[  303.663424][   T30] audit: type=1326 audit(1755954105.148:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.0.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59858ebe9 code=0x7ffc0000
[  304.049437][ T5813] Bluetooth: hci1: command tx timeout
[  304.359113][ T6909] chnl_net:caif_netlink_parms(): no params data found
[  304.467422][ T6929] loop0: detected capacity change from 0 to 1024
[  304.784234][ T6929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  304.797344][ T6929] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.936387][ T6929] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.294: lblock 0 mapped to illegal pblock 0 (length 6)
[  304.981406][   T30] audit: type=1800 audit(1755954106.458:15): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.294" name="file1" dev="loop0" ino=15 res=0 errno=0
[  305.086435][ T6927] loop4: detected capacity change from 0 to 8192
[  305.223296][ T6929] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.294: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  306.573128][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  307.129744][ T5813] Bluetooth: hci1: command tx timeout
[  307.540329][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.886587][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.016264][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.024359][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.032254][ T6909] bridge_slave_0: entered allmulticast mode
[  308.041650][ T6909] bridge_slave_0: entered promiscuous mode
[  308.182526][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.261730][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.269288][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.277215][ T6909] bridge_slave_1: entered allmulticast mode
[  308.286582][ T6909] bridge_slave_1: entered promiscuous mode
[  308.419844][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.629961][ T6956] loop0: detected capacity change from 0 to 2048
[  308.836552][ T6956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.987525][ T6909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.155640][ T5813] Bluetooth: hci1: command tx timeout
[  309.184252][ T6909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.292263][   T12] bridge_slave_1: left allmulticast mode
[  309.298235][   T12] bridge_slave_1: left promiscuous mode
[  309.306630][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.452054][   T12] bridge_slave_0: left allmulticast mode
[  309.457897][   T12] bridge_slave_0: left promiscuous mode
[  309.464964][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.625523][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.080414][ T6978] loop1: detected capacity change from 0 to 256
[  310.171641][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'.
[  310.920816][ T6981] loop3: detected capacity change from 0 to 1024
[  311.321361][ T5813] Bluetooth: hci1: command tx timeout
[  311.686573][ T6981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  311.704306][ T6981] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  312.136479][ T6981] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.304: lblock 0 mapped to illegal pblock 0 (length 6)
[  312.185964][   T30] audit: type=1800 audit(1755954113.658:16): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.304" name="file1" dev="loop3" ino=15 res=0 errno=0
[  312.229066][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  312.352602][ T6981] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.304: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  312.443476][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  312.520725][   T12] bond0 (unregistering): Released all slaves
[  313.222289][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  313.947107][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'.
[  314.645830][ T6909] team0: Port device team_slave_0 added
[  314.950740][ T6909] team0: Port device team_slave_1 added
[  315.541178][   T12] hsr_slave_0: left promiscuous mode
[  315.643070][   T12] hsr_slave_1: left promiscuous mode
[  315.651242][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  315.658787][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.814104][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.821821][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  317.722437][   T12] veth1_macvtap: left promiscuous mode
[  317.728225][   T12] veth0_macvtap: left promiscuous mode
[  317.740173][   T12] veth1_vlan: left promiscuous mode
[  317.745880][   T12] veth0_vlan: left promiscuous mode
[  319.439168][   T12] team0 (unregistering): Port device team_slave_1 removed
[  319.474238][   T12] team0 (unregistering): Port device team_slave_0 removed
[  320.040253][ T7021] loop0: detected capacity change from 0 to 2048
[  320.258176][   T30] audit: type=1326 audit(1755954121.748:17): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.4.312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb14618ebe9 code=0x0
[  320.548874][ T7021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.854859][ T7029] overlayfs: failed to resolve './file1': -2
[  320.964558][ T7024] loop1: detected capacity change from 0 to 1024
[  321.064248][ T7028] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  321.492238][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.499616][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.531815][ T6909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.849158][ T7024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  321.862253][ T7024] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  321.966091][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.973602][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  322.000009][ T6909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  322.120349][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.409535][   T30] audit: type=1800 audit(1755954123.908:18): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.314" name="file1" dev="loop1" ino=15 res=0 errno=0
[  322.772139][ T7042] syz.4.317 uses obsolete (PF_INET,SOCK_PACKET)
[  322.972585][ T6909] hsr_slave_0: entered promiscuous mode
[  322.982681][ T6909] hsr_slave_1: entered promiscuous mode
[  323.113498][ T5811] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  323.534729][ T7048] loop0: detected capacity change from 0 to 1024
[  323.583959][ T7048] EXT4-fs: Ignoring removed orlov option
[  323.639113][ T7048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.973687][ T7048] EXT4-fs: Ignoring sb option on remount
[  323.984513][ T7048] EXT4-fs: Ignoring removed orlov option
[  323.990663][ T7048] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  324.002439][ T7048] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  324.305839][ T7048] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  324.768336][ T2034] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  325.029702][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.076491][ T2034] usb 5-1: Using ep0 maxpacket: 16
[  325.202337][ T2034] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.219079][ T2034] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.232446][ T2034] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  325.246837][ T2034] usb 5-1: config 0 interface 0 has no altsetting 0
[  325.254798][ T2034] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  325.264962][ T2034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.572890][ T2034] usb 5-1: config 0 descriptor??
[  325.667139][ T7061] binder: BINDER_SET_CONTEXT_MGR already set
[  325.673562][ T7061] binder: 7059:7061 ioctl 4018620d 2000000002c0 returned -16
[  326.329872][ T6909] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  326.468233][ T2034] usb 5-1: USB disconnect, device number 3
[  326.706775][ T6909] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  326.837730][ T6909] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  326.839353][ T7072] loop0: detected capacity change from 0 to 512
[  326.998812][ T6909] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  327.043208][ T7072] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  327.173911][ T7072] EXT4-fs (loop0): 1 truncate cleaned up
[  327.182487][ T7072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.265978][ T7072] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.324: Logical block already allocated
[  327.371217][ T7072] EXT4-fs (loop0): Remounting filesystem read-only
[  327.743538][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.755323][ T7082] loop1: detected capacity change from 0 to 2048
[  327.781748][   T42] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  328.002359][   T42] usb 5-1: Using ep0 maxpacket: 16
[  328.028706][   T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  328.040274][   T42] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  328.049973][   T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.090244][   T42] usb 5-1: config 0 descriptor??
[  328.100440][ T7082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.411221][ T7090] tipc: Started in network mode
[  328.416947][ T7090] tipc: Node identity f2a18e61475e, cluster identity 4711
[  328.426601][ T7090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.463632][ T7092] loop0: detected capacity change from 0 to 256
[  328.477269][ T6909] 8021q: adding VLAN 0 to HW filter on device bond0
[  328.533580][ T7093] tipc: Resetting bearer <eth:syzkaller0>
[  328.647486][ T7087] tipc: Disabling bearer <eth:syzkaller0>
[  328.786585][ T5811] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.920476][ T6909] 8021q: adding VLAN 0 to HW filter on device team0
[  328.984020][ T3748] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.991618][ T3748] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.131750][   T42] usbhid 5-1:0.0: can't add hid device: -71
[  329.138405][   T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  329.173739][ T3748] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.181334][ T3748] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.241969][   T42] usb 5-1: USB disconnect, device number 4
[  329.540032][ T7102] loop1: detected capacity change from 0 to 256
[  332.935221][ T6909] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.762925][ T7137] loop0: detected capacity change from 0 to 512
[  334.828894][ T7137] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  334.995268][ T7137] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  335.048134][ T7137] EXT4-fs (loop0): 1 truncate cleaned up
[  335.056223][ T7137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.164754][ T7143] loop1: detected capacity change from 0 to 2048
[  337.481930][ T6909] veth0_vlan: entered promiscuous mode
[  337.557151][ T7147] loop4: detected capacity change from 0 to 256
[  337.605002][ T7143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.932758][ T6909] veth1_vlan: entered promiscuous mode
[  338.807560][ T5811] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.025392][ T6909] veth0_macvtap: entered promiscuous mode
[  339.044320][ T2034] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  339.264193][ T6909] veth1_macvtap: entered promiscuous mode
[  339.345288][ T2034] usb 5-1: Using ep0 maxpacket: 16
[  339.493572][ T2034] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.505873][ T2034] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  339.516381][ T2034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.713532][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.887033][ T2034] usb 5-1: config 0 descriptor??
[  340.027779][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_1
[  340.495793][ T1136] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.677966][ T3631] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.958034][ T3631] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.248402][ T3631] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.363780][ T2034] usbhid 5-1:0.0: can't add hid device: -71
[  341.370321][ T2034] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  341.531388][ T2034] usb 5-1: USB disconnect, device number 5
[  341.820563][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.610452][ T7180] loop4: detected capacity change from 0 to 1024
[  342.863677][ T7180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  342.876756][ T7180] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.747788][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  343.779518][ T5880] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  343.987324][ T5880] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  343.996936][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.094132][ T5880] usb 2-1: config 0 descriptor??
[  344.202165][ T7204] process 'syz.3.350' launched '/dev/fd/9' with NULL argv: empty string added
[  344.496597][ T7203] loop4: detected capacity change from 0 to 2048
[  344.547831][ T5880] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  344.560614][ T5880] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[  344.573343][ T5880] asix 2-1:0.0: probe with driver asix failed with error -32
[  344.702798][ T7203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  345.100795][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.205274][ T7213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.328398][ T7213] tipc: Resetting bearer <eth:syzkaller0>
[  345.406588][ T7211] tipc: Disabling bearer <eth:syzkaller0>
[  345.905564][ T7227] loop4: detected capacity change from 0 to 256
[  346.275669][ T7227] FAT-fs (loop4): Directory bread(block 64) failed
[  346.283195][ T7227] FAT-fs (loop4): Directory bread(block 65) failed
[  346.290070][ T7227] FAT-fs (loop4): Directory bread(block 66) failed
[  346.297108][ T7227] FAT-fs (loop4): Directory bread(block 67) failed
[  346.305789][ T7227] FAT-fs (loop4): Directory bread(block 68) failed
[  346.313185][ T7227] FAT-fs (loop4): Directory bread(block 69) failed
[  346.320199][ T7227] FAT-fs (loop4): Directory bread(block 70) failed
[  346.327075][ T7227] FAT-fs (loop4): Directory bread(block 71) failed
[  346.334017][ T7227] FAT-fs (loop4): Directory bread(block 72) failed
[  346.340731][ T7227] FAT-fs (loop4): Directory bread(block 73) failed
[  346.791550][ T5867] usb 2-1: USB disconnect, device number 11
[  346.881168][ T7241] loop3: detected capacity change from 0 to 256
[  346.982099][ T2034] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  347.037292][   T30] audit: type=1800 audit(1755954148.538:19): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.357" name="file1" dev="loop3" ino=1048614 res=0 errno=0
[  347.241992][ T2034] usb 1-1: Using ep0 maxpacket: 16
[  347.296166][ T2034] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.307893][ T2034] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  347.318355][ T2034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.409406][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  347.416310][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  347.465603][ T2034] usb 1-1: config 0 descriptor??
[  348.476465][ T2034] usbhid 1-1:0.0: can't add hid device: -71
[  348.483324][ T2034] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  348.621683][ T2034] usb 1-1: USB disconnect, device number 3
[  349.446571][ T7265] loop3: detected capacity change from 0 to 2048
[  349.615411][ T7265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.629601][ T3748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.637792][ T3748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.752197][ T7275] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  349.759927][ T7275] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  349.942159][ T7270] tipc: Started in network mode
[  349.947318][ T7270] tipc: Node identity 080211000001, cluster identity 4711
[  349.958016][ T7270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.113858][ T3848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.122167][ T3848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.203174][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.756474][ T7289] loop4: detected capacity change from 0 to 256
[  350.830143][   T30] audit: type=1800 audit(1755954152.348:20): pid=7289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.369" name="file1" dev="loop4" ino=1048619 res=0 errno=0
[  351.072622][ T2034] tipc: Node number set to 134418688
[  351.633246][ T7301] loop1: detected capacity change from 0 to 128
[  351.646000][ T7301] vfat: Unknown parameter '0xffffffffffffffff˙01777777777777777777777¬‚ú'
[  352.451486][ T2034] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  352.579179][ T7309] loop4: detected capacity change from 0 to 2048
[  353.123635][ T7309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.271898][ T2034] usb 6-1: Using ep0 maxpacket: 16
[  353.284003][ T2034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.295716][ T2034] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  353.305225][ T2034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.387537][ T7323] netlink: 'syz.3.377': attribute type 3 has an invalid length.
[  353.717902][ T2034] usb 6-1: config 0 descriptor??
[  354.765163][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.126459][ T2034] usbhid 6-1:0.0: can't add hid device: -71
[  355.133242][ T2034] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  355.385314][ T2034] usb 6-1: USB disconnect, device number 2
[  355.995615][ T7335] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.531527][ T5880] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  356.762692][ T5880] usb 6-1: Using ep0 maxpacket: 16
[  356.817396][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  356.831540][ T5880] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  356.842007][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.913790][ T5880] usb 6-1: config 0 descriptor??
[  357.490665][ T5880] dragonrise 0003:0079:0006.0003: hidraw0: USB HID v10.00 Device [HID 0079:0006] on usb-dummy_hcd.5-1/input0
[  357.504320][ T5880] dragonrise 0003:0079:0006.0003: no inputs found
[  357.511756][ T5880] dragonrise 0003:0079:0006.0003: force feedback init failed
[  357.796498][ T5880] usb 6-1: USB disconnect, device number 3
[  358.240256][ T7357] loop4: detected capacity change from 0 to 512
[  358.431746][ T7357] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.388: casefold flag without casefold feature
[  358.463409][ T7355] fido_id[7355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  358.542395][ T7357] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.388: couldn't read orphan inode 15 (err -117)
[  358.623287][ T7357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.954977][ T7361] loop3: detected capacity change from 0 to 2048
[  359.326996][ T7361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.202297][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.774644][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.100603][ T7380] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  362.809940][ T7385] loop4: detected capacity change from 0 to 512
[  363.055298][ T7385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  363.594570][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.439494][ T7394] loop5: detected capacity change from 0 to 2048
[  364.769177][ T7394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.343520][ T7394] EXT4-fs error (device loop5): empty_inline_dir:1760: inode #12: block 9: comm syz.5.401: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0
[  366.452379][ T7394] EXT4-fs (loop5): Remounting filesystem read-only
[  366.459198][ T7394] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[  366.943216][ T7408] loop3: detected capacity change from 0 to 256
[  367.027251][ T7408] exfat: Deprecated parameter 'namecase'
[  367.038091][ T7408] exfat: Deprecated parameter 'namecase'
[  367.109442][ T6909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.154038][ T5052] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started
[  367.165017][ T5052] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  367.312235][ T7408] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d)
[  368.311944][ T7413] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  370.172283][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  370.314519][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  370.342412][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  370.474446][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  370.511750][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  371.144533][ T7430] Zero length message leads to an empty skb
[  373.465200][ T7439] syz.3.411 (7439) used greatest stack depth: 2440 bytes left
[  374.339193][ T5827] Bluetooth: hci5: command tx timeout
[  375.939293][ T7451] loop5: detected capacity change from 0 to 256
[  376.116123][ T7425] chnl_net:caif_netlink_parms(): no params data found
[  376.146477][   T30] audit: type=1800 audit(1755954177.678:21): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.415" name="file1" dev="loop5" ino=1048622 res=0 errno=0
[  376.439561][ T5827] Bluetooth: hci5: command tx timeout
[  376.812649][ T5813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  376.872056][ T5813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  376.882210][ T5813] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  376.912368][ T5813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  376.932748][ T5813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  378.439131][ T7471] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  378.461224][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.468850][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.476780][ T7425] bridge_slave_0: entered allmulticast mode
[  378.502113][ T5827] Bluetooth: hci5: command tx timeout
[  378.574249][ T7425] bridge_slave_0: entered promiscuous mode
[  378.636372][   T11] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  378.636461][ T3574] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.858288][   T11] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  378.874208][   T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  378.887331][   T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  378.898033][   T11] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  378.911786][   T11] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  378.922915][   T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.091321][ T5827] Bluetooth: hci6: command tx timeout
[  379.299209][   T11] usb 6-1: config 0 descriptor??
[  379.519502][ T7425] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.527134][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.535752][ T7425] bridge_slave_1: entered allmulticast mode
[  379.545828][ T7425] bridge_slave_1: entered promiscuous mode
[  380.631437][ T5827] Bluetooth: hci5: command tx timeout
[  380.979531][ T3574] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.151586][ T5827] Bluetooth: hci6: command tx timeout
[  381.654128][ T3574] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.334311][   T11] usbhid 6-1:0.0: can't add hid device: -71
[  382.341296][   T11] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  382.380256][   T11] usb 6-1: USB disconnect, device number 4
[  382.408102][ T3574] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  382.486480][ T7425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.510698][ T7425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.750098][ T7486] veth1_macvtap: left promiscuous mode
[  382.761941][ T7486] macsec0: entered allmulticast mode
[  382.898720][ T7490] loop4: detected capacity change from 0 to 256
[  383.047190][ T7425] team0: Port device team_slave_0 added
[  383.193534][   T30] audit: type=1800 audit(1755954184.678:22): pid=7490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.425" name="file1" dev="loop4" ino=1048623 res=0 errno=0
[  383.230125][ T5827] Bluetooth: hci6: command tx timeout
[  383.342798][ T7425] team0: Port device team_slave_1 added
[  383.423694][ T3574] bridge_slave_1: left allmulticast mode
[  383.430085][ T3574] bridge_slave_1: left promiscuous mode
[  383.437748][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.583900][ T3574] bridge_slave_0: left allmulticast mode
[  383.589751][ T3574] bridge_slave_0: left promiscuous mode
[  383.596519][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.178669][ T7495] serio: Serial port ptm0
[  384.780164][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  384.887231][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  384.946398][ T3574] bond0 (unregistering): Released all slaves
[  385.311367][ T5827] Bluetooth: hci6: command tx timeout
[  385.508927][ T7516] loop3: detected capacity change from 0 to 256
[  385.604813][ T7516] exfat: Bad value for 'time_offset'
[  385.999590][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.007256][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.040651][ T7425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.086020][ T7507] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  386.098036][ T7456] chnl_net:caif_netlink_parms(): no params data found
[  386.649043][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.657016][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.685089][ T7425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.277740][ T7525] loop3: detected capacity change from 0 to 256
[  387.376060][ T3574] hsr_slave_0: left promiscuous mode
[  387.406249][ T3574] hsr_slave_1: left promiscuous mode
[  387.414576][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  387.423990][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.524935][   T30] audit: type=1800 audit(1755954189.058:23): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.435" name="file1" dev="loop3" ino=1048624 res=0 errno=0
[  387.528314][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  387.555390][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1
[  387.689647][ T3574] veth1_macvtap: left promiscuous mode
[  387.695926][ T3574] veth0_macvtap: left promiscuous mode
[  387.704401][ T3574] veth1_vlan: left promiscuous mode
[  387.710035][ T3574] veth0_vlan: left promiscuous mode
[  388.971386][ T3574] team0 (unregistering): Port device team_slave_1 removed
[  389.141462][ T3574] team0 (unregistering): Port device team_slave_0 removed
[  394.757216][ T7578] loop3: detected capacity change from 0 to 256
[  395.052825][   T30] audit: type=1800 audit(1755954196.568:24): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.445" name="file1" dev="loop3" ino=1048625 res=0 errno=0
[  395.087819][ T7573] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  395.645589][ T7425] hsr_slave_0: entered promiscuous mode
[  395.664947][ T7425] hsr_slave_1: entered promiscuous mode
[  395.674243][ T7425] debugfs: 'hsr0' already exists in 'hsr'
[  395.680650][ T7425] Cannot create hsr debugfs directory
[  397.074758][ T2034] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  397.569054][ T2034] usb 5-1: Using ep0 maxpacket: 32
[  397.612523][ T2034] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  397.624297][ T2034] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  397.646540][ T7456] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.655414][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.663946][ T7456] bridge_slave_0: entered allmulticast mode
[  397.672614][ T7456] bridge_slave_0: entered promiscuous mode
[  397.827752][ T2034] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  397.837761][ T2034] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  397.846855][ T2034] usb 5-1: Product: syz
[  397.851718][ T2034] usb 5-1: Manufacturer: syz
[  397.955080][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.963287][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.972904][ T7456] bridge_slave_1: entered allmulticast mode
[  397.983304][ T7456] bridge_slave_1: entered promiscuous mode
[  398.082838][ T2034] hub 5-1:4.0: USB hub found
[  398.323714][ T2034] hub 5-1:4.0: 2 ports detected
[  398.733525][ T7456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.890481][ T7456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  399.922511][ T7456] team0: Port device team_slave_0 added
[  399.977027][ T7456] team0: Port device team_slave_1 added
[  400.570432][   T11] usb 5-1: USB disconnect, device number 6
[  400.868970][ T7613] binder_alloc: 7612: binder_alloc_buf, no vma
[  400.919453][ T7425] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  400.961941][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_0
[  400.969574][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  400.999451][ T7456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.072888][ T7425] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  401.201702][ T7425] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  401.280545][ T2034] hub 5-1:4.0: hub_ext_port_status failed (err = -71)
[  401.284806][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.298973][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.326036][ T7456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.421848][ T7425] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  402.634198][ T7621] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  402.757962][ T7456] hsr_slave_0: entered promiscuous mode
[  402.768164][ T7456] hsr_slave_1: entered promiscuous mode
[  402.777638][ T7456] debugfs: 'hsr0' already exists in 'hsr'
[  402.784016][ T7456] Cannot create hsr debugfs directory
[  404.306898][ T7425] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.655751][ T7425] 8021q: adding VLAN 0 to HW filter on device team0
[  404.851408][ T3748] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.859077][ T3748] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.130796][ T3748] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.138683][ T3748] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.212315][ T7646] binder_alloc: 7644: binder_alloc_buf, no vma
[  405.227913][ T7456] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  405.272983][ T7456] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  405.299897][ T7456] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  405.323520][ T7456] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  406.316038][   T11] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  406.542909][   T11] usb 6-1: Using ep0 maxpacket: 32
[  406.596476][   T11] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.608429][   T11] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  406.724317][   T11] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  406.734616][   T11] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  406.745701][   T11] usb 6-1: Product: syz
[  406.750124][   T11] usb 6-1: Manufacturer: syz
[  406.886439][   T11] hub 6-1:4.0: USB hub found
[  407.006388][ T7456] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.104918][   T11] hub 6-1:4.0: 2 ports detected
[  407.249747][ T7456] 8021q: adding VLAN 0 to HW filter on device team0
[  407.383418][ T3970] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.391243][ T3970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.544603][ T3970] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.552347][ T3970] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.862244][ T7667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  407.969614][ T7667] syzkaller0: entered promiscuous mode
[  407.975709][ T7667] syzkaller0: entered allmulticast mode
[  408.127377][ T7669] tipc: Resetting bearer <eth:syzkaller0>
[  408.204900][ T7425] 8021q: adding VLAN 0 to HW filter on device batadv0
[  408.234132][ T7666] tipc: Resetting bearer <eth:syzkaller0>
[  408.269470][ T7666] tipc: Disabling bearer <eth:syzkaller0>
[  408.362202][   T11] hub 6-1:4.0: hub_ext_port_status failed (err = -71)
[  408.381923][   T42] usb 6-1: USB disconnect, device number 5
[  408.863726][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  408.873632][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  410.261474][ T7456] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.623441][ T7694] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  410.631581][ T7694] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  411.507561][ T7425] veth0_vlan: entered promiscuous mode
[  411.652529][   T30] audit: type=1326 audit(1755954213.168:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ed58ebe9 code=0x7ffc0000
[  411.675765][   T30] audit: type=1326 audit(1755954213.178:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6ed58ebe9 code=0x7ffc0000
[  411.742698][ T7425] veth1_vlan: entered promiscuous mode
[  412.201920][   T30] audit: type=1326 audit(1755954213.338:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ed58ebe9 code=0x7ffc0000
[  412.226829][   T30] audit: type=1326 audit(1755954213.338:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.5.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ed58ebe9 code=0x7ffc0000
[  412.768256][ T7425] veth0_macvtap: entered promiscuous mode
[  412.854795][ T7425] veth1_macvtap: entered promiscuous mode
[  413.059149][ T7713] tipc: Started in network mode
[  413.072757][ T7713] tipc: Node identity caafd41244ef, cluster identity 4711
[  413.084220][ T7713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  413.174920][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_0
[  413.248573][ T7717] syzkaller0: entered promiscuous mode
[  413.254875][ T7717] syzkaller0: entered allmulticast mode
[  413.267577][   T42] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  413.326624][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_1
[  413.433133][ T7713] tipc: Resetting bearer <eth:syzkaller0>
[  413.511263][   T42] usb 5-1: Using ep0 maxpacket: 32
[  413.518940][ T7712] tipc: Resetting bearer <eth:syzkaller0>
[  413.539434][   T42] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  413.554130][   T42] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  413.601325][ T7712] tipc: Disabling bearer <eth:syzkaller0>
[  413.644986][   T42] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  413.654572][   T42] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  413.663536][   T42] usb 5-1: Product: syz
[  413.668160][   T42] usb 5-1: Manufacturer: syz
[  413.703743][ T7441] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.755170][ T5052] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.813098][   T42] hub 5-1:4.0: USB hub found
[  413.831427][ T5052] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.929557][ T5052] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.071521][   T42] hub 5-1:4.0: 2 ports detected
[  414.342483][ T7456] veth0_vlan: entered promiscuous mode
[  414.495558][ T7456] veth1_vlan: entered promiscuous mode
[  414.855640][ T7726] loop5: detected capacity change from 0 to 512
[  414.903236][ T7726] ext4: Unknown parameter 'rootcontext'
[  415.052504][ T7456] veth0_macvtap: entered promiscuous mode
[  415.148211][ T7456] veth1_macvtap: entered promiscuous mode
[  415.431565][ T5880] usb 5-1: USB disconnect, device number 7
[  415.536491][ T7456] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.673273][ T7456] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.812873][ T3970] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.867310][ T1881] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.939303][ T1881] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.999047][ T1881] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.584619][ T7758] loop4: detected capacity change from 0 to 1024
[  418.898657][ T7758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  418.916550][ T7758] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  419.508225][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.780789][ T7775] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  422.402766][ T5865] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  422.478110][ T3748] Bluetooth: hci0: Frame reassembly failed (-84)
[  422.621702][ T5865] usb 5-1: Using ep0 maxpacket: 32
[  422.639136][ T5865] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  422.650591][ T5865] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  422.747303][ T5865] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  422.757248][ T5865] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  422.765984][ T5865] usb 5-1: Product: syz
[  422.770471][ T5865] usb 5-1: Manufacturer: syz
[  422.903020][ T5865] hub 5-1:4.0: USB hub found
[  423.191587][ T5865] hub 5-1:4.0: 2 ports detected
[  423.956460][ T3748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.964738][ T3748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.386129][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.397695][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.480104][ T5865] hub 5-1:4.0: hub_ext_port_status failed (err = -71)
[  424.488372][ T5880] usb 5-1: USB disconnect, device number 8
[  424.504108][   T49] Bluetooth: hci0: command 0x1003 tx timeout
[  424.515416][ T5827] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  425.120305][ T3574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.829792][ T3574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.326584][ T5813] Bluetooth: hci1: command 0x0406 tx timeout
[  426.784591][ T3574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.051351][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.059880][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.361650][ T3574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.416693][ T3970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.424848][ T3970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.157841][ T3574] bridge_slave_1: left allmulticast mode
[  428.163937][ T3574] bridge_slave_1: left promiscuous mode
[  428.176440][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.515084][ T3574] bridge_slave_0: left promiscuous mode
[  428.523976][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.411949][ T3574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  431.429623][ T3574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  431.446410][ T3574] bond0 (unregistering): Released all slaves
[  432.326872][ T7849] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  433.427023][ T3574] hsr_slave_0: left promiscuous mode
[  433.456888][ T3574] hsr_slave_1: left promiscuous mode
[  433.465937][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  433.474179][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_0
[  433.521484][ T3574] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  433.529711][ T3574] batman_adv: batadv0: Removing interface: batadv_slave_1
[  433.639595][ T3574] veth1_macvtap: left promiscuous mode
[  433.645520][ T3574] veth0_macvtap: left promiscuous mode
[  433.656531][ T3574] veth1_vlan: left promiscuous mode
[  433.662185][ T3574] veth0_vlan: left promiscuous mode
[  433.681809][ T5872] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  434.171060][ T5872] usb 6-1: Using ep0 maxpacket: 32
[  434.203562][ T5872] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.218128][ T5872] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  434.282939][ T5872] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  434.292517][ T5872] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  434.301243][ T5872] usb 6-1: Product: syz
[  434.305763][ T5872] usb 6-1: Manufacturer: syz
[  434.516383][ T5872] hub 6-1:4.0: USB hub found
[  434.701472][ T5872] hub 6-1:4.0: 2 ports detected
[  434.783823][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.6.504'.
[  434.956740][ T3574] team0 (unregistering): Port device team_slave_1 removed
[  435.075487][ T3574] team0 (unregistering): Port device team_slave_0 removed
[  435.339542][ T5880] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  435.555238][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  435.566897][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  435.577259][ T5880] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  435.586780][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.812009][ T5880] usb 4-1: config 0 descriptor??
[  435.966684][ T5865] hub 6-1:4.0: hub_ext_port_status failed (err = 0)
[  436.231428][ T5865] usb 6-1: Failed to suspend device, error -71
[  436.239250][ T5872] usb 6-1: USB disconnect, device number 6
[  436.851851][ T5880] usb 4-1: string descriptor 0 read error: -71
[  436.921484][ T5880] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71
[  436.936922][ T5880] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71
[  436.947087][ T5880] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71
[  436.955661][ T5880] uclogic 0003:256C:006D.0004: failed probing parameters: -71
[  436.964066][ T5880] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71
[  438.010337][ T5880] usb 4-1: USB disconnect, device number 10
[  439.716682][ T7923] syz.6.515 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  440.520525][ T7933] loop7: detected capacity change from 0 to 128
[  440.679578][ T7933] vfat: Unknown parameter '0xffffffffffffffff˙01777777777777777777777¬‚ú'
[  443.088888][ T7938] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000005'
[  443.592605][   T42] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  443.813208][   T42] usb 5-1: Using ep0 maxpacket: 32
[  443.865169][   T42] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.876547][   T42] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  444.039897][   T42] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  444.050099][   T42] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  444.059583][   T42] usb 5-1: Product: syz
[  444.065118][   T42] usb 5-1: Manufacturer: syz
[  444.351636][   T42] hub 5-1:4.0: USB hub found
[  444.614977][   T42] hub 5-1:4.0: 2 ports detected
[  445.505448][ T7970] loop3: detected capacity change from 0 to 2048
[  445.652057][ T7970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  445.868921][   T42] hub 5-1:4.0: hub_ext_port_status failed (err = 0)
[  446.080444][ T5880] usb 5-1: USB disconnect, device number 9
[  446.300736][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.281354][ T5867] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  450.471433][ T5867] usb 6-1: Using ep0 maxpacket: 32
[  450.548177][ T5867] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  450.559583][ T5867] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  450.657282][ T5867] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  450.666809][ T5867] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  450.675671][ T5867] usb 6-1: Product: syz
[  450.680000][ T5867] usb 6-1: Manufacturer: syz
[  450.801402][ T5867] hub 6-1:4.0: USB hub found
[  451.044192][ T5867] hub 6-1:4.0: 2 ports detected
[  452.087451][ T8037] bridge0: port 3(gretap0) entered blocking state
[  452.094803][ T8037] bridge0: port 3(gretap0) entered disabled state
[  452.102202][ T8037] gretap0: entered allmulticast mode
[  452.112093][ T8037] gretap0: entered promiscuous mode
[  452.120185][ T8037] bridge0: port 3(gretap0) entered blocking state
[  452.127109][ T8037] bridge0: port 3(gretap0) entered forwarding state
[  453.061362][ T5867] hub 6-1:4.0: hub_ext_port_status failed (err = 0)
[  453.274100][   T42] usb 6-1: USB disconnect, device number 7
[  454.627572][ T8047] loop3: detected capacity change from 0 to 2048
[  454.703993][ T8047] EXT4-fs: Ignoring removed nomblk_io_submit option
[  454.985775][ T8047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  455.775491][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.522202][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.552'.
[  457.265405][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  457.279250][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  457.292507][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  457.319550][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  457.339786][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  458.048396][ T8092] loop5: detected capacity change from 0 to 128
[  458.197339][ T8092] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  458.212959][ T8092] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  458.835423][ T8092] fscrypt (loop5, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  459.383172][ T5827] Bluetooth: hci0: command tx timeout
[  459.513362][ T6909] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  459.537741][ T8112] binder_alloc: 8111: binder_alloc_buf, no vma
[  459.723175][ T8082] chnl_net:caif_netlink_parms(): no params data found
[  460.688897][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.866891][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.026894][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.385180][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.488169][ T5827] Bluetooth: hci0: command tx timeout
[  463.831797][ T5827] Bluetooth: hci0: command tx timeout
[  464.891969][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.899533][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.907473][ T8082] bridge_slave_0: entered allmulticast mode
[  464.916983][ T8082] bridge_slave_0: entered promiscuous mode
[  464.954961][ T8157] =====================================================
[  464.962392][ T8157] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a74/0x1ff0
[  464.970629][ T8157]  bpf_prog_run_generic_xdp+0x1a74/0x1ff0
[  464.976727][ T8157]  do_xdp_generic+0xd52/0x1690
[  464.978580][   T12] bridge_slave_1: left allmulticast mode
[  464.981769][ T8157]  tun_get_user+0x45be/0x6ca0
[  464.981876][ T8157]  tun_chr_write_iter+0x3e9/0x5c0
[  464.981974][ T8157]  vfs_write+0xbe2/0x15d0
[  464.982096][ T8157]  __x64_sys_write+0x1fb/0x4d0
[  464.982218][ T8157]  x64_sys_call+0x3014/0x3e20
[  464.982355][ T8157]  do_syscall_64+0xd9/0x210
[  464.982483][ T8157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.982595][ T8157] 
[  464.982617][ T8157] Uninit was stored to memory at:
[  464.982790][ T8157]  pskb_expand_head+0x310/0x1610
[  464.982913][ T8157]  do_xdp_generic+0xa79/0x1690
[  464.983031][ T8157]  tun_get_user+0x45be/0x6ca0
[  464.983134][ T8157]  tun_chr_write_iter+0x3e9/0x5c0
[  464.983232][ T8157]  vfs_write+0xbe2/0x15d0
[  464.983347][ T8157]  __x64_sys_write+0x1fb/0x4d0
[  464.983468][ T8157]  x64_sys_call+0x3014/0x3e20
[  464.983606][ T8157]  do_syscall_64+0xd9/0x210
[  464.983758][ T8157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.983867][ T8157] 
[  464.983891][ T8157] Uninit was created at:
[  464.984085][ T8157]  __kmalloc_node_track_caller_noprof+0x96d/0x12f0
[  464.984236][ T8157]  kmalloc_reserve+0x22f/0x4b0
[  464.984338][ T8157]  __alloc_skb+0x347/0x7d0
[  464.984432][ T8157]  alloc_skb_with_frags+0xc5/0xa60
[  464.984542][ T8157]  sock_alloc_send_pskb+0xad8/0xc70
[  464.984670][ T8157]  tun_get_user+0x113f/0x6ca0
[  464.984765][ T8157]  tun_chr_write_iter+0x3e9/0x5c0
[  464.984862][ T8157]  vfs_write+0xbe2/0x15d0
[  464.984976][ T8157]  __x64_sys_write+0x1fb/0x4d0
[  464.985104][ T8157]  x64_sys_call+0x3014/0x3e20
[  464.985239][ T8157]  do_syscall_64+0xd9/0x210
[  464.985363][ T8157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.985472][ T8157] 
[  464.985535][ T8157] CPU: 1 UID: 0 PID: 8157 Comm: syz.4.573 Not tainted syzkaller #0 PREEMPT(none) 
[  464.985649][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  464.985710][ T8157] =====================================================
[  464.985746][ T8157] Disabling lock debugging due to kernel taint
[  464.985790][ T8157] Kernel panic - not syncing: kmsan.panic set ...
[  464.985865][ T8157] CPU: 1 UID: 0 PID: 8157 Comm: syz.4.573 Tainted: G    B               syzkaller #0 PREEMPT(none) 
[  464.985997][ T8157] Tainted: [B]=BAD_PAGE
[  464.986032][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  464.986106][ T8157] Call Trace:
[  464.986153][ T8157]  <TASK>
[  464.986191][ T8157]  __dump_stack+0x26/0x30
[  464.986322][ T8157]  dump_stack_lvl+0x53/0x270
[  464.986455][ T8157]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  464.986591][ T8157]  dump_stack+0x1e/0x25
[  464.986713][ T8157]  vpanic+0x361/0xc50
[  464.986850][ T8157]  panic+0x15d/0x160
[  464.987021][ T8157]  kmsan_report+0x31c/0x320
[  464.987149][ T8157]  ? __msan_warning+0x1b/0x30
[  464.987249][ T8157]  ? bpf_prog_run_generic_xdp+0x1a74/0x1ff0
[  464.987382][ T8157]  ? do_xdp_generic+0xd52/0x1690
[  464.987501][ T8157]  ? tun_get_user+0x45be/0x6ca0
[  464.987600][ T8157]  ? tun_chr_write_iter+0x3e9/0x5c0
[  464.987702][ T8157]  ? vfs_write+0xbe2/0x15d0
[  464.987818][ T8157]  ? __x64_sys_write+0x1fb/0x4d0
[  464.987944][ T8157]  ? x64_sys_call+0x3014/0x3e20
[  464.988101][ T8157]  ? do_syscall_64+0xd9/0x210
[  464.988233][ T8157]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.988351][ T8157]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  464.988491][ T8157]  ? ___bpf_prog_run+0xea65/0xeba0
[  464.988625][ T8157]  ? kmsan_get_metadata+0xfb/0x160
[  464.988748][ T8157]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  464.988866][ T8157]  ? kmsan_get_metadata+0x150/0x160
[  464.988992][ T8157]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  464.989113][ T8157]  ? kmsan_get_metadata+0xfb/0x160
[  464.989247][ T8157]  __msan_warning+0x1b/0x30
[  464.989351][ T8157]  bpf_prog_run_generic_xdp+0x1a74/0x1ff0
[  464.989550][ T8157]  do_xdp_generic+0xd52/0x1690
[  464.989673][ T8157]  ? tun_get_user+0x4051/0x6ca0
[  464.989773][ T8157]  ? filter_irq_stacks+0x49/0x190
[  464.989949][ T8157]  ? kmsan_get_metadata+0xfb/0x160
[  464.990104][ T8157]  ? tun_get_user+0x453a/0x6ca0
[  464.990212][ T8157]  tun_get_user+0x45be/0x6ca0
[  464.990329][ T8157]  ? stack_depot_save_flags+0x35/0x7b0
[  464.990486][ T8157]  ? kmsan_get_metadata+0xfb/0x160
[  464.990608][ T8157]  ? kmsan_get_metadata+0xfb/0x160
[  464.990731][ T8157]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  464.990852][ T8157]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  464.991094][ T8157]  tun_chr_write_iter+0x3e9/0x5c0
[  464.991224][ T8157]  vfs_write+0xbe2/0x15d0
[  464.991372][ T8157]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  464.991493][ T8157]  __x64_sys_write+0x1fb/0x4d0
[  464.991643][ T8157]  x64_sys_call+0x3014/0x3e20
[  464.991783][ T8157]  do_syscall_64+0xd9/0x210
[  464.991910][ T8157]  ? irqentry_exit+0x16/0x60
[  464.992030][ T8157]  ? clear_bhb_loop+0x40/0x90
[  464.992151][ T8157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.992273][ T8157] RIP: 0033:0x7fb14618d69f
[  464.992351][ T8157] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  464.992448][ T8157] RSP: 002b:00007fb146fc8000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  464.992547][ T8157] RAX: ffffffffffffffda RBX: 00007fb1463b5fa0 RCX: 00007fb14618d69f
[  464.992623][ T8157] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8
[  464.992692][ T8157] RBP: 00007fb146211e19 R08: 0000000000000000 R09: 0000000000000000
[  464.992759][ T8157] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000
[  464.992823][ T8157] R13: 00007fb1463b6038 R14: 00007fb1463b5fa0 R15: 00007ffc89f8d198
[  464.992930][ T8157]  </TASK>
[  464.993127][ T8157] Kernel Offset: disabled