last executing test programs: 17m26.335923228s ago: executing program 32 (id=746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 17m26.317544199s ago: executing program 33 (id=747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70fc2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x6, 0x7}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 17m26.29953912s ago: executing program 34 (id=742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000140)=ANY=[], 0x16) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r4, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x4005) 17m25.283154303s ago: executing program 35 (id=748): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x530, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x51c, 0x1, [@m_skbedit={0xe4, 0x1b, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x2, 0x3, 0x3, 0xfff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x401, 0x5, 0x5, 0x7, 0x76}}]}, {0x65, 0x6, "6cbc0be399313f4862f2515a09a917bc7d87e474f1fa546fbadeeb6072c89858dd5906147999216cc48ed5d8632b5794d3e6a0bd431512d88965230f9e7bb16005b9e4f3174da5eacbf2b53d7b323d0342cbadd5a0fe23aa33b26b099837fd9f51"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6b31a6586b121e0b, 0x2}}}}, @m_police={0x434, 0x19, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9880, 0xfffffc00, 0xfffffff8, 0x6, 0x800, 0x80000000, 0x7d, 0xfffffffd, 0x3ff, 0xfffffe01, 0x7, 0x1, 0x0, 0x5, 0x3, 0x3, 0x4, 0x8, 0x200, 0x0, 0xfffffffe, 0x8000, 0x2, 0x92, 0x4, 0x3, 0x6, 0x2, 0xe, 0x2b8, 0x50, 0x5, 0x9, 0x3, 0x6, 0x10000, 0x7fff, 0x0, 0xb, 0x8, 0x5, 0xf, 0x1, 0x9, 0x99b, 0x4, 0x6, 0x0, 0x3, 0x6, 0x4, 0x5, 0x2, 0x7, 0x7, 0x5, 0x3, 0x5, 0x29, 0x0, 0x8, 0x2, 0x80000000, 0xaf9d, 0x6, 0x9, 0x80000001, 0x7, 0x5, 0xfffffffb, 0xd00000, 0x9e, 0x8, 0x2, 0x3, 0x6, 0x8, 0x3, 0x3, 0x2, 0x100, 0xfffffc01, 0x6, 0x545, 0x0, 0x9, 0x200, 0xd3, 0x0, 0x5, 0x7, 0x2, 0x8, 0x9, 0x451f, 0x1, 0xaffc, 0xfffffffd, 0x9294, 0x3, 0x1, 0x71b, 0x2, 0x9, 0x80, 0x6, 0x401, 0x9, 0x8001, 0x4, 0x10, 0x200, 0x91e, 0x80000001, 0x793bd975, 0x71f, 0x9, 0x8, 0x6, 0x5, 0x9f6, 0xf, 0x4, 0x6, 0x7f, 0x2, 0xb, 0x2eb, 0x4, 0x0, 0xdd65, 0x80000000, 0x6, 0x8, 0x0, 0xff800000, 0xfffffff2, 0x4, 0x1000, 0x0, 0x7, 0xa882, 0x7, 0x9, 0x881, 0x4, 0x8, 0x2, 0x80, 0x0, 0x8000, 0xfffffffb, 0x10001, 0x4, 0x5, 0x8, 0x0, 0x0, 0x7ff, 0xfff, 0x40, 0x0, 0x9, 0xe, 0xc, 0x1, 0x5, 0x81, 0x6, 0x7ff, 0x86, 0x2, 0xcd, 0x0, 0x8, 0x8, 0xd9bd, 0xcc3c, 0x92, 0xa, 0x9, 0x2, 0x26, 0x4, 0x80000000, 0xb, 0x4, 0x80, 0xe5, 0x1026, 0x3, 0xffffffe1, 0xfffffff3, 0x4, 0x7fff, 0x1, 0x1, 0x0, 0xd7ec, 0xd, 0xfffffffb, 0x0, 0x915, 0x3, 0x5, 0x6, 0x7, 0x10, 0x3, 0x6, 0x0, 0xb017, 0x8, 0x1, 0x8, 0x3, 0x3ff, 0xd37, 0x3ff, 0xe54, 0x9191, 0xff, 0x3, 0xff, 0xc0000000, 0x0, 0x5, 0x87, 0x5, 0x0, 0xef0, 0x8, 0xd, 0x6, 0x3, 0x4, 0xfffffff0, 0x200, 0x0, 0xbc, 0x7, 0x3ff, 0x1, 0xffffff6f, 0x40, 0x9, 0x5, 0x7, 0x8000, 0x6, 0x774, 0x10001, 0x5af, 0xc, 0x7, 0x80000000]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x530}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0x20) 15m39.021837564s ago: executing program 36 (id=958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x3, 0x2, {0x0, 0x0, 0x3}, {0x0, 0xf0, 0x1}, 0xff, 0xfe}, {0x1, 0x3, {0x2, 0xff}, {0x1, 0xff, 0x2}, 0xff, 0x8ba7f48ebc57eea8}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 15m39.008419384s ago: executing program 37 (id=963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close(0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0xb, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x0, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x8000, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffa, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0xc73c, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x17, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x10001, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0d, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 15m38.993937305s ago: executing program 38 (id=961): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000280)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x609, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 15m38.961543445s ago: executing program 39 (id=965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x5, 0x6, 0x401}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="2c548f2664234aea5882c40b008c", 0xe}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045) 15m38.931722696s ago: executing program 40 (id=969): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvfrom(r0, 0x0, 0x3f, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 14m58.745104008s ago: executing program 41 (id=1003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x4c, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x800003, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x6, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x0, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0x5, 0xc, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0xffffffff, 0x5}, {0x9, 0xd76, 0x4, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158144, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x9, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0x8000000f}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x400007ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x6, 0x6, 0x7ffc, 0x9, 0x500, 0x6}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x0, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x9e, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x10, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x402, 0x2b00, 0xf7fff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0x0, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x40057}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x61a6}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x87, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff02, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x80000, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x5, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x3, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x1000003, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x2, 0x4, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xe6d, 0x62f, 0x401, 0xffff9d44}, {0x9a2f, 0x800, 0x8, 0x1, 0x10000007}, {0x20000009, 0x2, 0x800, 0x200, 0x10001, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0xd28, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0xa, 0x1}, {0x3}, {0x2}, {0x3}, {0x3}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885) 14m57.723672032s ago: executing program 42 (id=1008): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0xa) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}, 0x1, 0x0, 0x0, 0x40901}, 0x0) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_FSGROWFSRT(r4, 0x40105870, &(0x7f0000000100)={0x9, 0x4}) 14m57.707178762s ago: executing program 43 (id=1010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 12m27.584059582s ago: executing program 44 (id=1355): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000bf000000000000000000850000002000000085"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 12m27.569892862s ago: executing program 45 (id=1339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 12m27.538092363s ago: executing program 46 (id=1343): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0)=0x1, 0x4) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00', 0x7}], 0x1}}], 0x1, 0x40008c1) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 12m27.516198043s ago: executing program 47 (id=1350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="08008848"], 0x92) 10m56.423791129s ago: executing program 48 (id=1714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x88000, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000300)={0x1, 0x20, 0x1, 0x1b, 0x3, 0xff, 0x4, 0x14b, 0x1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) listen(r4, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) 10m56.408923569s ago: executing program 49 (id=1713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0xb, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x0, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x8000, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffa, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0xc73c, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x17, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x10001, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0d, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x14}], 0x1}, 0x20000885) 10m56.386797929s ago: executing program 50 (id=1716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10m56.35850536s ago: executing program 51 (id=1718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10m56.318336811s ago: executing program 52 (id=1715): socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1, @le_set_ext_scan_params={{0x2041, 0x79}, {0x2, 0x9, 0x15, "ad88de6023fa62ba12c32ccc199a1b940cde532acc074fd2d02c3626701c6da08bcaa20922d2339636de8366adb7a96f34d0bca22ef4373b7a3034a80767d1f5bbb53bf9c510b15a532be572ae2c3835fbe6e1531338ca23f2450b0407419119e3503ae75a48623817209df0aa31cdde266035b5bb64"}}}, 0x7d) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 10m8.020093233s ago: executing program 53 (id=1772): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 10m7.932401155s ago: executing program 54 (id=1777): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10m1.130657995s ago: executing program 55 (id=1830): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) 9m50.101852133s ago: executing program 56 (id=1900): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 8m53.06284884s ago: executing program 57 (id=2067): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 8m51.051355647s ago: executing program 58 (id=2078): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000400000002000000"], 0x44}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'aio_aio12_8\x00', [0x100, 0x12, 0xd0, 0x2, 0x2, 0x100, 0x3, 0x7f, 0x5, 0xb, 0x2, 0x7, 0xffffffff, 0x401, 0x10001, 0x1, 0x9, 0xe, 0xfe5, 0x403, 0x0, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20003, 0x9]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xff}, 0x3a, [0x8000, 0xc95b, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x1004c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x10001, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x8000, 0x8, 0x0, 0x1, 0x40], [0x1000000a, 0x1, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0xa0fe, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xe, 0x4e0, 0x2, 0x80000000, 0xb, 0x40001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000000, 0x6, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x800100, 0x8d3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0xffffffff, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0xffffffff, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x4, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x5, 0x1000000a, 0x0, 0x5, 0x201c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93b, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x4fa, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x5, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) 7m53.218666763s ago: executing program 59 (id=2276): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x20000000, 0x859, 0xaedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x2, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0xffffff00, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) 6m47.618555911s ago: executing program 60 (id=2505): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 6m31.957521208s ago: executing program 2 (id=2551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 6m31.950998338s ago: executing program 7 (id=2614): r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 6m30.897087253s ago: executing program 2 (id=2605): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 6m30.895667333s ago: executing program 7 (id=2606): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x24000, 0x0) mkdirat$cgroup(r4, &(0x7f0000000000)='syz1\x00', 0x1ff) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000003c0)={@llc={0x1a, 0x230, 0x6, 0xee, 0x6, 0xd2, @broadcast}, {&(0x7f0000000280)=""/172, 0xac}, &(0x7f0000000380), 0x10}, 0xa0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)='fusb302 0x22\x00', 0xd) 6m29.895899547s ago: executing program 2 (id=2610): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, 0x0, 0x0) listen(r5, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x53, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000200), 0x0}) 6m28.601142527s ago: executing program 2 (id=2617): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x401064d0, &(0x7f0000000000)={0x1, 0x2}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r4, 0x540b, 0x1) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r6 = fsmount(r5, 0x0, 0x6) fchdir(r6) ioctl$UBLK_U_CMD_ADD_DEV(r6, 0xc0207504, &(0x7f0000000280)={0xffffffff, 0xffff, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) 6m26.497431376s ago: executing program 2 (id=2618): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r5, 0xfffff789) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) ioctl$TCSETS(r6, 0x8910, &(0x7f0000000100)={0x4, 0x0, 0x1003, 0x4, 0x12, "bb40af00008000"}) accept(r5, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 6m26.390094838s ago: executing program 7 (id=2621): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 6m25.544592298s ago: executing program 2 (id=2624): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x20000000, 0x859, 0xaedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x2, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0xffffff00, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 6m24.62224255s ago: executing program 7 (id=2630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 6m23.622498003s ago: executing program 7 (id=2632): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x24000, 0x0) mkdirat$cgroup(r4, &(0x7f0000000000)='syz1\x00', 0x1ff) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000003c0)={@llc={0x1a, 0x230, 0x6, 0xee, 0x6, 0xd2, @broadcast}, {&(0x7f0000000280)=""/172, 0xac}, &(0x7f0000000380), 0x10}, 0xa0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)='fusb302 0x22\x00', 0xd) 6m22.373177333s ago: executing program 7 (id=2634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(0xffffffffffffffff, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)=""/245, 0xf5}, {&(0x7f0000000800)=""/163, 0xa3}, {&(0x7f0000000f00)=""/161, 0xa1}, {0x0}, {&(0x7f0000001f00)=""/4093, 0xffd}, {&(0x7f00000008c0)=""/124, 0x7c}], 0x6}, 0xe}], 0x1, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_skb}, 0x94) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m10.026843302s ago: executing program 61 (id=2624): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x20000000, 0x859, 0xaedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x2, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0xffffff00, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 6m6.768524438s ago: executing program 62 (id=2634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(0xffffffffffffffff, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)=""/245, 0xf5}, {&(0x7f0000000800)=""/163, 0xa3}, {&(0x7f0000000f00)=""/161, 0xa1}, {0x0}, {&(0x7f0000001f00)=""/4093, 0xffd}, {&(0x7f00000008c0)=""/124, 0x7c}], 0x6}, 0xe}], 0x1, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_skb}, 0x94) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5m52.1664007s ago: executing program 3 (id=2718): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x2080) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 5m51.208572813s ago: executing program 5 (id=2722): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 5m50.435337361s ago: executing program 5 (id=2713): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f00000003c0)=[{{}, {0x80000000}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, 0x0, 0x0) listen(r6, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x53, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={r1, &(0x7f0000000200), 0x0}) 5m49.117446672s ago: executing program 5 (id=2721): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x401064d0, &(0x7f0000000000)={0x1, 0x2}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) write$binfmt_aout(r5, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r5, 0x540b, 0x1) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r7 = fsmount(r6, 0x0, 0x6) fchdir(r7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"/21], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b}, 0x94) 5m49.114457062s ago: executing program 3 (id=2723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 5m48.197151844s ago: executing program 5 (id=2726): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 5m48.107855026s ago: executing program 3 (id=2727): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f00000009c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 5m48.001422308s ago: executing program 3 (id=2728): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 5m47.884970721s ago: executing program 3 (id=2729): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 5m47.023718431s ago: executing program 3 (id=2737): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x8, 0x0, 0x0, 0xf7, 0x42}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5m47.023433111s ago: executing program 5 (id=2738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 5m44.683562776s ago: executing program 5 (id=2743): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x20000000, 0x859, 0xaedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x2, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0xffffff00, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 5m31.454309136s ago: executing program 63 (id=2737): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x8, 0x0, 0x0, 0xf7, 0x42}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5m30.053918239s ago: executing program 64 (id=2743): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x20000000, 0x859, 0xaedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x2, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0xffffff00, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 16.474331917s ago: executing program 1 (id=4488): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x1, 0x0, 0x20, 0x66, 0x0, 0x8, 0x1, 0x0, @rand_addr=0x64010102, @local, {[@rr={0x7, 0x3, 0x2}]}}, @info_request={0xf, 0x0, 0x0, 0x401}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x140, 0xb, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xaa}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="44bcde330673"}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x48884}, 0x24000041) write(r1, &(0x7f0000000140)="41000200010078", 0x7) 16.145342145s ago: executing program 1 (id=4498): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000006890086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 16.096444346s ago: executing program 1 (id=4499): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0xb, 0x63552b74}]}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 16.005162808s ago: executing program 1 (id=4500): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f00000006c0)=""/201, 0xc9) mount$binder(0x0, &(0x7f0000000140)='./control\x00', 0x0, 0x120c00, 0x0) 15.4994689s ago: executing program 1 (id=4503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x440, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000400), 0x0}, 0x20) 14.322813538s ago: executing program 1 (id=4519): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc9, "cab60c5a0eda8e373b4d1e5a1bdb8a23"}}}, 0x16) 14.23583386s ago: executing program 65 (id=4519): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc9, "cab60c5a0eda8e373b4d1e5a1bdb8a23"}}}, 0x16) 13.685594453s ago: executing program 6 (id=4540): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@quota}, {@inlinecrypt}]}, 0xfe, 0x470, &(0x7f0000000a00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 13.224273364s ago: executing program 6 (id=4533): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x4, 0x0) 12.306868966s ago: executing program 6 (id=4535): syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001f00)=""/4093, 0xffd) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x1014009, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYRES64], 0x0, 0x151e, &(0x7f0000001680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fsopen(0x0, 0x1) lseek(0xffffffffffffffff, 0x101, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x6}, 0x52) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) 12.176364569s ago: executing program 0 (id=4544): r0 = fanotify_init(0x40, 0x40000) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000400)=""/8, 0x8}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11.341480329s ago: executing program 6 (id=4546): syz_read_part_table(0x5d1, &(0x7f0000000600)="$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") 11.340489699s ago: executing program 0 (id=4547): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x1000c00, &(0x7f00000000c0)=ANY=[], 0xf5, 0x218, &(0x7f0000000480)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70020000", @ANYRES16=r1, @ANYBLOB="0f0700000000000000006700000048000e00"], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x0) 11.178950623s ago: executing program 0 (id=4549): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x80) 11.177516533s ago: executing program 6 (id=4550): unshare(0x20000400) r0 = socket$inet(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x1, @rand_addr=0x64010102}, 0x10) 10.573210258s ago: executing program 6 (id=4551): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_sock_diag(0x10, 0x3, 0x4) sendto$packet(r0, 0x0, 0x0, 0x100400c1, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9900, &(0x7f0000000040)={0x4, 0xf5, 0x80000}, 0x20) 3.266240022s ago: executing program 0 (id=4564): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_sock_diag(0x10, 0x3, 0x4) sendto$packet(r0, 0x0, 0x0, 0x100400c1, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9900, &(0x7f0000000040)={0x4, 0xf5, 0x80000}, 0x20) 2.754942404s ago: executing program 0 (id=4559): r0 = socket$inet6(0xa, 0x3, 0x100) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a00)={r1, r3, 0xb, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x1, @mcast1, 0x6}, 0x1c) 2.406065412s ago: executing program 9 (id=4562): syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="acb7e5526c1fa708d9912e04ccf211f5cb6818f4399d88d4b14657ad75f1c63f0b2897c20e1328ff6d94a1540bdf614c2ae12c519220eb04d6a5f8834c480d603ca0b9ad1b94077d8e040b4894415422a6797a49dc6525408accf52c530a65821ab6a4689c84c1df40e68c6e76cfd7be85de4e7c6ad71234fa45cffdc30fc27897d90b451b3f97e47b388f8ffdaffc6703", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES32], 0x1, 0x6b2, &(0x7f0000000980)="$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") memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000100)={0x40000001, 0x4, 0x1, 0xe20, 'syz0\x00', 0xfffffffc}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10158, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x800) keyctl$set_timeout(0xf, 0x0, 0xd) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x21, 0x0, 0x0) process_mrelease(r5, 0x0) 2.239584697s ago: executing program 0 (id=4569): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {0x8, 0x7, 0x40, 0x9}, 0x4f, [0x3, 0x3, 0x7ff, 0x2, 0x80000000, 0x7, 0xa, 0x7, 0x7fb, 0x4000, 0x8, 0x5, 0x7688b117, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x9, 0x2, 0x80000000, 0x880, 0x3, 0x6, 0x0, 0x2, 0x1, 0x1, 0xfffffffd, 0x9, 0x8, 0x746d, 0x6, 0xd1b0, 0x7ff, 0x1, 0x8, 0x6, 0x10000, 0x0, 0x80000000, 0x1, 0xaa2, 0x9, 0xc1, 0x9, 0x8000, 0x1, 0x2, 0x2, 0xfffffe07, 0x0, 0x0, 0x0, 0x4, 0x1, 0xfffffffc, 0x4, 0x9, 0x4, 0xffffff9a, 0x1, 0x7], [0x2, 0xf7c7, 0x800, 0x8, 0xfffffff8, 0x40, 0x4, 0x5, 0x0, 0xb01505e1, 0x3, 0x4, 0x4, 0x81, 0xef, 0x5, 0x1, 0x100, 0xa, 0x1, 0x3, 0x8, 0x1, 0xfffffffb, 0x1, 0x3, 0x8, 0x9, 0x0, 0xf, 0x5, 0x7, 0x3, 0x4f, 0x8, 0x400, 0xffff, 0x5e7, 0x7, 0x1, 0x9, 0x3, 0x0, 0x1, 0x2, 0x2, 0x7f, 0x1, 0x4, 0x0, 0xc, 0xf65, 0x6, 0x101, 0xc5, 0x5, 0x8, 0x5, 0xfffffffe, 0x6, 0x42, 0x8, 0x9, 0x1000], [0x0, 0xff86, 0xb, 0x800, 0x400, 0x401, 0x800, 0x9, 0x6, 0x80000001, 0xffff, 0xd1, 0x6, 0x7, 0x5, 0x6, 0x5, 0xe7, 0x9, 0x3, 0xfffffff7, 0xfffffff8, 0x6, 0x80000000, 0xdc4, 0x78901295, 0x401, 0x1, 0x200, 0x3, 0x2, 0xfffffffe, 0x7, 0x6, 0x67, 0x2, 0x30a0, 0x7, 0x5, 0x7, 0x6, 0x3a3, 0x3, 0x0, 0x401, 0x3, 0x3, 0x0, 0x7, 0x1, 0x0, 0xfff, 0x8000, 0x4, 0x3, 0xb8d3, 0x7, 0x6, 0x2, 0x9, 0x1, 0x1, 0x7a37, 0x1000], [0x0, 0x0, 0x3, 0x0, 0x5, 0x54, 0x7, 0x5e5c, 0xeef9, 0x5, 0xfffffff8, 0x4, 0x6, 0x27d3, 0x1, 0xef, 0x7ff, 0xd5a00000, 0x5, 0x0, 0xb9, 0x3, 0x2aa8, 0x5, 0x1783, 0x4, 0x4dd9, 0x4, 0x6, 0x3, 0x3, 0x3ac, 0x3, 0x6, 0x100, 0x4, 0x6, 0xfffffff8, 0x2, 0xef8, 0x88b5, 0x8, 0x5, 0x3, 0xfffffff9, 0x6, 0x8000, 0x6, 0x4, 0x401, 0xa95, 0x3, 0x9, 0x9, 0x4, 0x1fc00000, 0xa, 0x0, 0xff, 0x8, 0x4, 0x7, 0x4, 0xec4]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1d) 1.838933956s ago: executing program 66 (id=4569): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {0x8, 0x7, 0x40, 0x9}, 0x4f, [0x3, 0x3, 0x7ff, 0x2, 0x80000000, 0x7, 0xa, 0x7, 0x7fb, 0x4000, 0x8, 0x5, 0x7688b117, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x9, 0x2, 0x80000000, 0x880, 0x3, 0x6, 0x0, 0x2, 0x1, 0x1, 0xfffffffd, 0x9, 0x8, 0x746d, 0x6, 0xd1b0, 0x7ff, 0x1, 0x8, 0x6, 0x10000, 0x0, 0x80000000, 0x1, 0xaa2, 0x9, 0xc1, 0x9, 0x8000, 0x1, 0x2, 0x2, 0xfffffe07, 0x0, 0x0, 0x0, 0x4, 0x1, 0xfffffffc, 0x4, 0x9, 0x4, 0xffffff9a, 0x1, 0x7], [0x2, 0xf7c7, 0x800, 0x8, 0xfffffff8, 0x40, 0x4, 0x5, 0x0, 0xb01505e1, 0x3, 0x4, 0x4, 0x81, 0xef, 0x5, 0x1, 0x100, 0xa, 0x1, 0x3, 0x8, 0x1, 0xfffffffb, 0x1, 0x3, 0x8, 0x9, 0x0, 0xf, 0x5, 0x7, 0x3, 0x4f, 0x8, 0x400, 0xffff, 0x5e7, 0x7, 0x1, 0x9, 0x3, 0x0, 0x1, 0x2, 0x2, 0x7f, 0x1, 0x4, 0x0, 0xc, 0xf65, 0x6, 0x101, 0xc5, 0x5, 0x8, 0x5, 0xfffffffe, 0x6, 0x42, 0x8, 0x9, 0x1000], [0x0, 0xff86, 0xb, 0x800, 0x400, 0x401, 0x800, 0x9, 0x6, 0x80000001, 0xffff, 0xd1, 0x6, 0x7, 0x5, 0x6, 0x5, 0xe7, 0x9, 0x3, 0xfffffff7, 0xfffffff8, 0x6, 0x80000000, 0xdc4, 0x78901295, 0x401, 0x1, 0x200, 0x3, 0x2, 0xfffffffe, 0x7, 0x6, 0x67, 0x2, 0x30a0, 0x7, 0x5, 0x7, 0x6, 0x3a3, 0x3, 0x0, 0x401, 0x3, 0x3, 0x0, 0x7, 0x1, 0x0, 0xfff, 0x8000, 0x4, 0x3, 0xb8d3, 0x7, 0x6, 0x2, 0x9, 0x1, 0x1, 0x7a37, 0x1000], [0x0, 0x0, 0x3, 0x0, 0x5, 0x54, 0x7, 0x5e5c, 0xeef9, 0x5, 0xfffffff8, 0x4, 0x6, 0x27d3, 0x1, 0xef, 0x7ff, 0xd5a00000, 0x5, 0x0, 0xb9, 0x3, 0x2aa8, 0x5, 0x1783, 0x4, 0x4dd9, 0x4, 0x6, 0x3, 0x3, 0x3ac, 0x3, 0x6, 0x100, 0x4, 0x6, 0xfffffff8, 0x2, 0xef8, 0x88b5, 0x8, 0x5, 0x3, 0xfffffff9, 0x6, 0x8000, 0x6, 0x4, 0x401, 0xa95, 0x3, 0x9, 0x9, 0x4, 0x1fc00000, 0xa, 0x0, 0xff, 0x8, 0x4, 0x7, 0x4, 0xec4]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1d) 1.482809725s ago: executing program 4 (id=4576): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) 1.482644305s ago: executing program 4 (id=4577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0x0, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, 0x0, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x0, &(0x7f0000000940)) sendmsg$unix(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0, 0x24000090}, 0x4044011) r3 = socket$inet6(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') read$FUSE(r4, &(0x7f0000004800)={0x2020}, 0x2020) 1.450872125s ago: executing program 9 (id=4578): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10008, &(0x7f0000000140)={[{@errors_remount}, {@usrjquota}]}, 0xff, 0x49d, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) fallocate(r0, 0x10, 0x37ec, 0x683) 1.044907525s ago: executing program 9 (id=4580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x3c, r1, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_KEYS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) 712.289583ms ago: executing program 9 (id=4582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000880)={0x60, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @random="4c5b9fc30ed2", {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x60}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 707.275503ms ago: executing program 8 (id=4590): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x44) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 628.142535ms ago: executing program 4 (id=4583): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) r2 = fsopen(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="09000000010001", 0x7) 618.838835ms ago: executing program 8 (id=4592): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000840)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {@umask={'umask', 0x3d, 0x2}}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x106}}, {@fmask={'fmask', 0x3d, 0x9}}, {@fmask={'fmask', 0x3d, 0x6}}, {@fmask={'fmask', 0x3d, 0x3}}]}, 0x1, 0x1524, &(0x7f00000037c0)="$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") 587.150126ms ago: executing program 9 (id=4584): sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) 562.600896ms ago: executing program 4 (id=4585): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x1, 0x25dfdbfe, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x5, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840) 509.224148ms ago: executing program 8 (id=4586): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000440)=""/53, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/86, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xeeee0000}) 509.056968ms ago: executing program 9 (id=4587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r3, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES16], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) 446.359469ms ago: executing program 8 (id=4588): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) process_mrelease(r0, 0x0) 47.513819ms ago: executing program 4 (id=4589): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 45.586669ms ago: executing program 8 (id=4599): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) process_mrelease(r0, 0x0) 12.54091ms ago: executing program 4 (id=4591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x3c, r1, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_KEYS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) 0s ago: executing program 8 (id=4593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14) kernel console output (not intermixed with test programs): BIFS error (pid: 22177): cannot open "", error -22 [ 1246.319738][T22177] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3499'. [ 1246.326617][T22181] UBIFS error (pid: 22181): cannot open "", error -22 [ 1247.030874][T22221] UBIFS error (pid: 22221): cannot open "", error -22 [ 1247.328802][T22228] trusted_key: encrypted_key: insufficient parameters specified [ 1247.339469][T22228] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1248.836026][T22240] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1249.963593][T22266] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1250.872754][T22283] UBIFS error (pid: 22283): cannot open "", error -22 [ 1250.874695][T22283] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3516'. [ 1252.082853][T22305] trusted_key: encrypted_key: insufficient parameters specified [ 1252.090996][T22305] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1252.770815][T22320] UBIFS error (pid: 22320): cannot open "", error -22 [ 1253.370538][T22329] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1253.466705][T22338] device syzkaller0 entered promiscuous mode [ 1253.740116][T22363] UBIFS error (pid: 22363): cannot open "", error -22 [ 1253.742539][T22363] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3531'. [ 1254.068054][T22370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3532'. [ 1254.422653][T22379] UBIFS error (pid: 22379): cannot open "", error -22 [ 1255.442739][T22399] trusted_key: encrypted_key: insufficient parameters specified [ 1255.451201][T22399] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1256.595311][T22432] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1256.630830][T22428] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1256.637603][T22436] UBIFS error (pid: 22436): cannot open "", error -22 [ 1257.520709][T22450] device syzkaller0 entered promiscuous mode [ 1257.586695][T22452] UBIFS error (pid: 22452): cannot open "", error -22 [ 1257.589590][T22452] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3547'. [ 1258.421731][T22465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3548'. [ 1258.611667][T22491] UBIFS error (pid: 22491): cannot open "", error -22 [ 1259.852273][T22504] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1260.459469][T22513] device syzkaller0 entered promiscuous mode [ 1261.185626][T22533] UBIFS error (pid: 22533): cannot open "", error -22 [ 1261.188322][T22533] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3564'. [ 1261.410061][T22540] device syzkaller0 entered promiscuous mode [ 1261.466924][T22546] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3568'. [ 1262.359933][T22568] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1262.372948][T22572] UBIFS error (pid: 22572): cannot open "", error -22 [ 1262.481969][T22574] UBIFS error (pid: 22574): cannot open "", error -22 [ 1262.973678][T22585] UBIFS error (pid: 22585): cannot open "", error -22 [ 1263.333096][T22593] device syzkaller0 entered promiscuous mode [ 1263.550819][T22599] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1264.236571][T22618] UBIFS error (pid: 22618): cannot open "", error -22 [ 1264.237283][T22618] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3584'. [ 1264.454076][T22607] device syzkaller0 entered promiscuous mode [ 1265.085425][T22631] device syzkaller0 entered promiscuous mode [ 1265.367146][T22672] UBIFS error (pid: 22672): cannot open "", error -22 [ 1265.888225][T22673] 9pnet: Could not find request transport: rdma. [ 1266.206823][T22699] device syzkaller0 entered promiscuous mode [ 1266.307434][T22700] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1266.793013][T22701] UBIFS error (pid: 22701): cannot open "", error -22 [ 1267.497771][T22731] UBIFS error (pid: 22731): cannot open "", error -22 [ 1267.501077][T22731] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3600'. [ 1268.049697][T22747] device syzkaller0 entered promiscuous mode [ 1268.623465][T22763] 9pnet: Could not find request transport: rdma. [ 1268.696526][T22767] tipc: Enabled bearer , priority 0 [ 1268.805196][T22782] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1268.949692][T22784] UBIFS error (pid: 22784): cannot open "", error -22 [ 1269.081337][T22766] tipc: Disabling bearer [ 1269.728123][T22818] netlink: 'syz.1.3622': attribute type 10 has an invalid length. [ 1270.079512][T22826] UBIFS error (pid: 22826): cannot open "", error -22 [ 1270.080116][T22826] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3621'. [ 1270.336107][T22830] device syzkaller0 entered promiscuous mode [ 1271.199714][T22880] UBIFS error (pid: 22880): cannot open "", error -22 [ 1271.201657][T22880] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3636'. [ 1271.461354][T22888] tipc: Enabled bearer , priority 0 [ 1271.465565][T22879] 9pnet: Could not find request transport: rdma. [ 1271.502932][T22887] tipc: Disabling bearer [ 1271.581916][T22897] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1272.320733][T22920] netlink: 'syz.4.3639': attribute type 10 has an invalid length. [ 1272.387747][T22922] UBIFS error (pid: 22922): cannot open "", error -22 [ 1273.237471][T22944] device syzkaller0 entered promiscuous mode [ 1273.250965][T22937] 9pnet: Could not find request transport: rdma. [ 1273.260994][T22944] tipc: Enabled bearer , priority 0 [ 1273.265934][T22944] tipc: Resetting bearer [ 1273.272862][T22941] tipc: Resetting bearer [ 1273.284597][T22949] process 'syz.8.3645' launched './file0' with NULL argv: empty string added [ 1273.342995][T22941] tipc: Disabling bearer [ 1273.571138][T22952] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3646'. [ 1273.576383][T22959] UBIFS error (pid: 22959): cannot open "", error -22 [ 1274.372790][T23011] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1274.427448][T23014] tipc: Enabled bearer , priority 0 [ 1274.505682][T23005] tipc: Disabling bearer [ 1274.561036][T23017] device syzkaller0 entered promiscuous mode [ 1275.462236][T23026] device syzkaller0 entered promiscuous mode [ 1275.502079][T23046] netlink: 'syz.6.3656': attribute type 10 has an invalid length. [ 1275.505722][T23046] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1276.346321][T23065] 9pnet: Could not find request transport: rdma. [ 1276.363609][T23063] device syzkaller0 entered promiscuous mode [ 1276.412424][T23063] tipc: Enabled bearer , priority 0 [ 1276.467846][T23075] UBIFS error (pid: 23075): cannot open "", error -22 [ 1276.617903][T23077] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3661'. [ 1276.676644][T23063] tipc: Resetting bearer [ 1276.683168][T23062] tipc: Resetting bearer [ 1276.719081][T23062] tipc: Disabling bearer [ 1276.921530][T23097] device syzkaller0 entered promiscuous mode [ 1276.984933][T23102] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1277.732943][T23113] tipc: Started in network mode [ 1277.733725][T23113] tipc: Node identity 2aa2c88ba9ad, cluster identity 4711 [ 1277.756571][T23113] tipc: Enabled bearer , priority 0 [ 1277.782732][T23112] tipc: Disabling bearer [ 1277.816888][T23127] netlink: 'syz.8.3673': attribute type 10 has an invalid length. [ 1277.825169][T23127] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1278.109306][T23141] UBIFS error (pid: 23141): cannot open "", error -22 [ 1278.379465][T23132] device syzkaller0 entered promiscuous mode [ 1278.844085][T23160] UBIFS error (pid: 23160): cannot open "", error -22 [ 1278.991399][T23159] 9pnet: Could not find request transport: rdma. [ 1279.106309][T23178] device syzkaller0 entered promiscuous mode [ 1279.123757][T23178] tipc: Enabled bearer , priority 0 [ 1279.151201][T23178] tipc: Resetting bearer [ 1279.191293][T23182] trusted_key: encrypted_key: key user:syz not found [ 1279.196859][T23182] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1279.491598][T23175] tipc: Resetting bearer [ 1279.559155][T23175] tipc: Disabling bearer [ 1279.634596][T23195] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3684'. [ 1279.843726][T23193] device syzkaller0 entered promiscuous mode [ 1280.326624][T23228] trusted_key: encrypted_key: key user:syz not found [ 1280.327709][T23228] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1280.332030][T23225] tipc: Enabled bearer , priority 0 [ 1280.471313][T23224] tipc: Disabling bearer [ 1280.803485][T23257] UBIFS error (pid: 23257): cannot open "", error -22 [ 1281.171162][T23263] device syzkaller0 entered promiscuous mode [ 1281.233200][T23270] UBIFS error (pid: 23270): cannot open "", error -22 [ 1281.894752][T23276] device syzkaller0 entered promiscuous mode [ 1281.909732][T23282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3700'. [ 1282.131975][T23308] UBIFS error (pid: 23308): cannot open "", error -22 [ 1282.134789][T23308] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3702'. [ 1283.008329][T23323] trusted_key: encrypted_key: key user:syz not found [ 1283.013358][T23323] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1283.217141][T23332] tipc: Enabled bearer , priority 0 [ 1283.759957][T23344] UBIFS error (pid: 23344): cannot open "", error -22 [ 1283.982545][T23331] tipc: Disabling bearer [ 1284.161951][T23346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3712'. [ 1284.271682][T23365] UBIFS error (pid: 23365): cannot open "", error -22 [ 1284.532059][T23368] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3714'. [ 1284.865457][T23385] UBIFS error (pid: 23385): cannot open "", error -22 [ 1284.866402][T23385] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3719'. [ 1285.243153][T23404] device syzkaller0 entered promiscuous mode [ 1285.338297][T23409] trusted_key: encrypted_key: key user:syz not found [ 1285.344614][T23409] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1286.483411][T23425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.485706][T23425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.712818][T23440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3730'. [ 1286.837490][T23454] UBIFS error (pid: 23454): cannot open "", error -22 [ 1287.493414][T23475] UBIFS error (pid: 23475): cannot open "", error -22 [ 1287.496190][T23475] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3734'. [ 1287.505209][T23479] trusted_key: encrypted_key: key user:syz not found [ 1287.514662][T23479] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1287.803526][T23491] device syzkaller0 entered promiscuous mode [ 1287.922465][T23484] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3737'. [ 1289.183414][T23523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3744'. [ 1289.559528][T23528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.564150][T23528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.675971][T23533] UBIFS error (pid: 23533): cannot open "", error -22 [ 1290.540924][T23558] device syzkaller0 entered promiscuous mode [ 1290.574068][T23559] trusted_key: encrypted_key: key user:syz not found [ 1290.716504][T23561] UBIFS error (pid: 23561): cannot open "", error -22 [ 1290.720827][T23561] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3752'. [ 1290.726452][T23559] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1290.778548][T23554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3750'. [ 1291.562243][T23588] UBIFS error (pid: 23588): cannot open "", error -22 [ 1291.566231][T23588] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3768'. [ 1292.481243][T23604] UBIFS error (pid: 23604): cannot open "", error -22 [ 1293.108122][T23620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.115190][T23620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.387645][T23630] trusted_key: encrypted_key: key user:syz not found [ 1293.393305][T23630] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1293.409186][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 1293.412082][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 1293.629531][T23641] device syzkaller0 entered promiscuous mode [ 1294.139202][T23645] 9pnet: Could not find request transport: rdma. [ 1294.350970][T23660] UBIFS error (pid: 23660): cannot open "", error -22 [ 1294.353963][T23660] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3774'. [ 1295.083258][T23669] UBIFS error (pid: 23669): cannot open "", error -22 [ 1297.493662][T23720] trusted_key: encrypted_key: key user:syz not found [ 1297.496408][T23720] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1297.840128][T23719] device syzkaller0 entered promiscuous mode [ 1298.448958][T23743] 9pnet: Could not find request transport: rdma. [ 1298.577335][T23759] UBIFS error (pid: 23759): cannot open "", error -22 [ 1298.579733][T23759] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3790'. [ 1298.710897][T23761] UBIFS error (pid: 23761): cannot open "", error -22 [ 1299.570694][T23786] UBIFS error (pid: 23786): cannot open "", error -22 [ 1299.574366][T23786] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3806'. [ 1300.382737][T23795] device syzkaller0 entered promiscuous mode [ 1301.177782][T23819] trusted_key: encrypted_key: key user:syz not found [ 1301.441155][T23831] UBIFS error (pid: 23831): cannot open "", error -22 [ 1301.445401][T23831] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3811'. [ 1302.706542][T23854] UBIFS error (pid: 23854): cannot open "", error -22 [ 1302.942528][T23852] 9pnet: Could not find request transport: rdma. [ 1303.634455][T23867] device syzkaller0 entered promiscuous mode [ 1303.995272][T23892] device syzkaller0 entered promiscuous mode [ 1304.642978][T23913] trusted_key: encrypted_key: key user:syz not found [ 1304.648794][T23913] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1304.785355][T23915] UBIFS error (pid: 23915): cannot open "", error -22 [ 1304.787919][T23915] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3821'. [ 1305.768780][T23952] UBIFS error (pid: 23952): cannot open "", error -22 [ 1307.285226][T23996] trusted_key: encrypted_key: key user:syz not found [ 1307.292582][T23996] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1307.491427][T23992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3830'. [ 1307.753566][T24021] UBIFS error (pid: 24021): cannot open "", error -22 [ 1307.756278][T24021] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3837'. [ 1308.041545][T24027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.044404][T24027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.996123][T24079] UBIFS error (pid: 24079): cannot open "", error -22 [ 1309.329536][T24096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3850'. [ 1310.241564][T24120] trusted_key: encrypted_key: key user:syz not found [ 1310.246265][T24120] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1310.879997][T24152] UBIFS error (pid: 24152): cannot open "", error -22 [ 1310.883837][T24152] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3856'. [ 1311.189261][T24156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.191771][T24156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.056453][T24205] UBIFS error (pid: 24205): cannot open "", error -22 [ 1312.057681][T24202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3863'. [ 1312.678924][T24217] device syzkaller0 entered promiscuous mode [ 1312.811367][T24231] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1313.533193][T24252] device syzkaller0 entered promiscuous mode [ 1313.609877][T24259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3872'. [ 1314.220611][T24280] UBIFS error (pid: 24280): cannot open "", error -22 [ 1314.223320][T24280] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3875'. [ 1314.795977][T24298] UBIFS error (pid: 24298): cannot open "", error -22 [ 1315.060928][T24320] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1315.440749][T24329] device syzkaller0 entered promiscuous mode [ 1316.261350][T24349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3888'. [ 1316.702846][T24383] UBIFS error (pid: 24383): cannot open "", error -22 [ 1316.703779][T24383] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3896'. [ 1317.056148][T24376] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1317.480175][T24402] device syzkaller0 entered promiscuous mode [ 1317.485800][T24402] tipc: Enabled bearer , priority 0 [ 1317.505519][T24402] tipc: Resetting bearer [ 1317.512873][T24398] tipc: Resetting bearer [ 1317.571217][T24398] tipc: Disabling bearer [ 1317.936946][T24413] device syzkaller0 entered promiscuous mode [ 1318.041089][T24423] UBIFS error (pid: 24423): cannot open "", error -22 [ 1318.159809][T24425] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3907'. [ 1319.329814][T24444] UBIFS error (pid: 24444): cannot open "", error -22 [ 1319.331088][T24444] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3912'. [ 1319.336738][T24451] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1320.060041][T24473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3918'. [ 1320.266205][T24486] device syzkaller0 entered promiscuous mode [ 1320.278101][T24482] device syzkaller0 entered promiscuous mode [ 1320.362017][T24492] UBIFS error (pid: 24492): cannot open "", error -22 [ 1320.642536][T24482] tipc: Enabled bearer , priority 0 [ 1320.652404][T24482] tipc: Resetting bearer [ 1320.656882][T24476] tipc: Resetting bearer [ 1320.701392][T24476] tipc: Disabling bearer [ 1321.342417][T24521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.356481][T24521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.636658][T24542] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1322.670722][T24559] UBIFS error (pid: 24559): cannot open "", error -22 [ 1322.673496][T24559] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3931'. [ 1323.131609][T24571] device syzkaller0 entered promiscuous mode [ 1323.148441][T24573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3936'. [ 1323.649558][T24583] device syzkaller0 entered promiscuous mode [ 1323.666082][T24583] tipc: Enabled bearer , priority 0 [ 1323.675981][T24583] tipc: Resetting bearer [ 1323.689444][T24582] tipc: Resetting bearer [ 1323.761257][T24590] UBIFS error (pid: 24590): cannot open "", error -22 [ 1324.093463][T24582] tipc: Disabling bearer [ 1324.194461][T24605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.203178][T24605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.689441][T24618] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1325.137681][T24635] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3946'. [ 1325.434903][T24641] device syzkaller0 entered promiscuous mode [ 1325.450348][T24641] tipc: Enabled bearer , priority 0 [ 1325.463894][T24641] tipc: Resetting bearer [ 1325.475123][T24639] tipc: Resetting bearer [ 1325.589274][T24639] tipc: Disabling bearer [ 1325.681444][T24660] UBIFS error (pid: 24660): cannot open "", error -22 [ 1325.684035][T24660] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3950'. [ 1326.020159][T24664] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3951'. [ 1326.042884][T24669] device syzkaller0 entered promiscuous mode [ 1326.556979][T24686] device syzkaller0 entered promiscuous mode [ 1326.859589][T24691] UBIFS error (pid: 24691): cannot open "", error -22 [ 1327.468385][T24709] UBIFS error (pid: 24709): cannot open "", error -22 [ 1327.898394][T24717] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1328.163366][T24716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.164802][T24716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.255173][T24723] device syzkaller0 entered promiscuous mode [ 1328.268264][T24723] tipc: Enabled bearer , priority 0 [ 1328.291071][T24723] tipc: Resetting bearer [ 1328.371651][T24735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3964'. [ 1328.609288][T24721] tipc: Resetting bearer [ 1328.680233][T24721] tipc: Disabling bearer [ 1328.774474][T24743] UBIFS error (pid: 24743): cannot open "", error -22 [ 1328.777102][T24743] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3968'. [ 1329.286339][T24745] 9pnet: Could not find request transport: rdma. [ 1329.567357][T24768] UBIFS error (pid: 24768): cannot open "", error -22 [ 1329.713810][T24764] device syzkaller0 entered promiscuous mode [ 1330.472615][T24789] UBIFS error (pid: 24789): cannot open "", error -22 [ 1331.161814][T24806] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1331.413653][T24811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.418443][T24811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.656098][T24814] UBIFS error (pid: 24814): cannot open "", error -22 [ 1331.656724][T24814] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3981'. [ 1331.661378][T24821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3983'. [ 1332.296757][T24856] device syzkaller0 entered promiscuous mode [ 1332.302279][T24856] tipc: Started in network mode [ 1332.303140][T24856] tipc: Node identity 0e7da626e141, cluster identity 4711 [ 1332.304501][T24856] tipc: Enabled bearer , priority 0 [ 1332.309503][T24856] tipc: Resetting bearer [ 1332.313678][T24854] tipc: Resetting bearer [ 1332.383268][T24854] tipc: Disabling bearer [ 1332.971807][T24869] 9pnet: Could not find request transport: rdma. [ 1333.070191][T24881] UBIFS error (pid: 24881): cannot open "", error -22 [ 1334.357289][T24909] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1334.508684][T24911] UBIFS error (pid: 24911): cannot open "", error -22 [ 1334.509507][T24911] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3995'. [ 1335.153956][T24923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.232948][T24923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.515692][T24933] UBIFS error (pid: 24933): cannot open "", error -22 [ 1339.749889][T25003] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1340.011920][T25002] 9pnet: Could not find request transport: rdma. [ 1340.246959][T25021] UBIFS error (pid: 25021): cannot open "", error -22 [ 1340.247705][T25021] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4012'. [ 1341.307873][T25086] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1342.274325][T25107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.278845][T25107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.471038][T25150] binder: 25148:25150 tried to acquire reference to desc 0, got 1 instead [ 1343.476799][T25150] binder: 25148:25150 got reply transaction with no transaction stack [ 1343.479356][T25150] binder_debug: 14 callbacks suppressed [ 1343.479372][T25150] binder: 25148:25150 transaction reply to 0:0 failed 589/29201/-71, size 72-24 line 2963 [ 1343.769883][ T8589] binder: undelivered TRANSACTION_ERROR: 29201 [ 1343.771064][ T8589] binder: send failed reply for transaction 588 to 25148:25150 [ 1343.772472][ T8589] binder: undelivered TRANSACTION_COMPLETE [ 1343.773421][ T8589] binder: undelivered TRANSACTION_ERROR: 29189 [ 1343.951841][T25163] UBIFS error (pid: 25163): cannot open "", error -22 [ 1343.952446][T25163] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4030'. [ 1344.509225][T25177] i2c i2c-0: Failed to register i2c client fusb302 at 0x22 (-16) [ 1345.417261][T25191] 9pnet: Could not find request transport: rdma. [ 1346.083289][T25224] binder: 25222:25224 tried to acquire reference to desc 0, got 1 instead [ 1346.089911][T25224] binder: 25222:25224 got reply transaction with no transaction stack [ 1346.091362][T25224] binder: 25222:25224 transaction reply to 0:0 failed 595/29201/-71, size 72-24 line 2963 [ 1346.100718][ T8591] binder: release 25222:25224 transaction 594 out, still active [ 1346.101950][ T8591] binder: undelivered TRANSACTION_COMPLETE [ 1346.102910][ T8591] binder: undelivered TRANSACTION_ERROR: 29201 [ 1346.103966][ T8591] binder: send failed reply for transaction 594, target dead [ 1346.505243][T25231] device syzkaller0 entered promiscuous mode [ 1346.545833][T25231] tipc: Enabled bearer , priority 0 [ 1346.552622][T25231] tipc: Resetting bearer [ 1346.556747][T25230] tipc: Resetting bearer [ 1346.722382][T25230] tipc: Disabling bearer [ 1347.199755][T25257] UBIFS error (pid: 25257): cannot open "", error -22 [ 1347.200576][T25257] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4047'. [ 1349.325675][T25319] binder: 25314:25319 tried to acquire reference to desc 0, got 1 instead [ 1349.333257][T25319] binder: 25314:25319 got reply transaction with no transaction stack [ 1349.336490][T25319] binder: 25314:25319 transaction reply to 0:0 failed 601/29201/-71, size 72-24 line 2963 [ 1349.345838][T25317] 9pnet: Could not find request transport: rdma. [ 1349.363879][T13986] binder: release 25314:25319 transaction 600 out, still active [ 1349.365279][T13986] binder: undelivered TRANSACTION_COMPLETE [ 1349.366254][T13986] binder: undelivered TRANSACTION_ERROR: 29201 [ 1349.367226][T13986] binder: send failed reply for transaction 600, target dead [ 1350.378430][T25344] device syzkaller0 entered promiscuous mode [ 1350.426703][T25344] tipc: Enabled bearer , priority 0 [ 1350.503336][T25344] tipc: Resetting bearer [ 1350.517503][T25343] tipc: Resetting bearer [ 1350.543332][T25364] UBIFS error (pid: 25364): cannot open "", error -22 [ 1350.544058][T25364] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4061'. [ 1350.599131][T25343] tipc: Disabling bearer [ 1352.524257][T25439] 9pnet: Could not find request transport: rdma. [ 1352.603280][T25434] device syzkaller0 entered promiscuous mode [ 1353.119319][T25457] device syzkaller0 entered promiscuous mode [ 1353.152376][T25457] tipc: Enabled bearer , priority 0 [ 1353.222661][T25457] tipc: Resetting bearer [ 1353.232382][T25456] tipc: Resetting bearer [ 1353.276209][T25478] UBIFS error (pid: 25478): cannot open "", error -22 [ 1353.282131][T25478] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4080'. [ 1353.537114][T25456] tipc: Disabling bearer [ 1354.730624][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 1354.732097][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 1355.419411][T25559] 9pnet: Could not find request transport: rdma. [ 1355.743256][T25565] device syzkaller0 entered promiscuous mode [ 1356.922353][T25617] UBIFS error (pid: 25617): cannot open "", error -22 [ 1356.923237][T25617] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4098'. [ 1359.860360][T25696] device syzkaller0 entered promiscuous mode [ 1360.585958][T25732] UBIFS error (pid: 25732): cannot open "", error -22 [ 1360.590621][T25732] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4117'. [ 1365.131370][T25827] UBIFS error (pid: 25827): cannot open "", error -22 [ 1365.132031][T25827] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4134'. [ 1365.915273][T25852] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1366.985689][T25880] loop0: detected capacity change from 0 to 1024 [ 1367.010163][T25880] ======================================================= [ 1367.010163][T25880] WARNING: The mand mount option has been deprecated and [ 1367.010163][T25880] and is ignored by this kernel. Remove the mand [ 1367.010163][T25880] option from the mount to silence this warning. [ 1367.010163][T25880] ======================================================= [ 1367.029047][T25880] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1367.031700][T25880] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1367.032723][T25880] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz.0.4145: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 1367.036397][T25880] EXT4-fs error (device loop0): ext4_quota_enable:7052: comm syz.0.4145: Bad quota inode: 3, type: 0 [ 1367.038448][T25880] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1367.046865][T25880] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 1367.047984][T25880] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1367.203957][T17632] EXT4-fs (loop0): unmounting filesystem. [ 1367.312880][T25900] loop1: detected capacity change from 0 to 512 [ 1367.314450][T25900] EXT4-fs: Ignoring removed oldalloc option [ 1367.322234][T25900] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1367.325659][T25900] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1367.327747][T25900] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1367.367709][T25900] EXT4-fs (loop1): 1 truncate cleaned up [ 1367.371062][T25900] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1367.539363][T17596] EXT4-fs (loop1): unmounting filesystem. [ 1367.559907][T25926] loop4: detected capacity change from 0 to 1024 [ 1367.582056][T25926] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1367.583755][T25926] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1367.585894][T25926] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.4156: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 1367.597928][T25926] EXT4-fs error (device loop4): ext4_quota_enable:7052: comm syz.4.4156: Bad quota inode: 3, type: 0 [ 1367.600889][T25926] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1367.603178][T25926] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1367.604282][T25926] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1367.620576][T18230] EXT4-fs (loop4): unmounting filesystem. [ 1367.629033][T25933] loop1: detected capacity change from 0 to 512 [ 1367.649160][T25933] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1367.674472][T25936] loop4: detected capacity change from 0 to 256 [ 1367.675749][T25936] exfat: Unknown parameter '000000000000000000000050xffffffffffffffff' [ 1367.680104][T25933] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.4157: bad orphan inode 131083 [ 1367.685143][T25933] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1367.779578][T25933] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #2: block 13: comm syz.1.4157: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1367.807558][T17596] EXT4-fs (loop1): unmounting filesystem. [ 1367.855461][T25951] loop1: detected capacity change from 0 to 16 [ 1367.867235][T25951] erofs: (device loop1): mounted with root inode @ nid 36. [ 1367.877167][T25951] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1367.884113][T25951] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1367.887089][T25951] syz.1.4161: attempt to access beyond end of device [ 1367.887089][T25951] loop1: rw=524288, sector=296, nr_sectors = 8 limit=16 [ 1368.117211][T25968] loop1: detected capacity change from 0 to 2048 [ 1368.171458][T25975] loop6: detected capacity change from 0 to 512 [ 1368.181039][T25975] EXT4-fs: inline encryption not supported [ 1368.209550][T25975] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 1368.213875][T25975] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.4166: invalid indirect mapped block 2683928664 (level 1) [ 1368.380939][T25975] EXT4-fs (loop6): 1 truncate cleaned up [ 1368.381868][T25975] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1368.521714][T25988] loop0: detected capacity change from 0 to 512 [ 1368.524095][T14809] EXT4-fs (loop6): unmounting filesystem. [ 1368.554586][T25988] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.4171: inode #1: comm syz.0.4171: iget: illegal inode # [ 1368.565983][T25988] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.4171: error while reading EA inode 1 err=-117 [ 1368.578380][T25988] EXT4-fs (loop0): 1 orphan inode deleted [ 1368.601404][T25992] loop6: detected capacity change from 0 to 512 [ 1368.607744][T25988] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1368.684781][T17632] EXT4-fs (loop0): unmounting filesystem. [ 1368.722194][T25994] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1368.723878][T25994] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1368.726016][T25992] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1368.748647][T25994] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.4169: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 1368.751774][T25994] EXT4-fs error (device loop1): ext4_quota_enable:7052: comm syz.1.4169: Bad quota inode: 3, type: 0 [ 1368.757172][T25994] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1368.766357][T26008] EXT4-fs: Ignoring removed bh option [ 1368.768712][T25994] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 1368.774187][T25994] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1368.784940][T26008] EXT4-fs: inline encryption not supported [ 1368.796014][T14809] EXT4-fs (loop6): unmounting filesystem. [ 1368.838859][T17596] EXT4-fs (loop1): unmounting filesystem. [ 1368.877580][T26008] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1368.947654][T26008] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1368.958174][T26008] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4174: bg 0: block 248: padding at end of block bitmap is not set [ 1368.972336][T26008] Quota error (device loop4): write_blk: dquota write failed [ 1368.978232][T26008] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1368.984388][T26008] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.4174: Failed to acquire dquot type 1 [ 1368.994965][T26008] EXT4-fs (loop4): 1 truncate cleaned up [ 1368.995821][T26008] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1369.034471][T26031] EXT4-fs: Ignoring removed nobh option [ 1369.073622][T18230] EXT4-fs (loop4): unmounting filesystem. [ 1369.102112][T26031] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1369.128640][ T8591] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1369.323038][ T8591] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1369.326145][ T8591] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1369.330728][ T8591] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1369.332352][ T8591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.336202][ T8591] usb 1-1: Product: syz [ 1369.336802][ T8591] usb 1-1: Manufacturer: syz [ 1369.340914][ T8591] usb 1-1: SerialNumber: syz [ 1369.564228][ T8591] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1369.566180][ T8591] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1369.573077][ T8591] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 1369.575549][ T8591] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1369.577570][ T8591] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1369.580880][ T8591] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 1369.582380][ T8591] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1369.586518][ T8591] usb 1-1: failed to enable PITCH for EP 0x82 [ 1369.643120][ T8591] usb 1-1: USB disconnect, device number 2 [ 1369.859275][T14809] EXT4-fs (loop6): unmounting filesystem. [ 1369.897498][T18338] udevd[18338]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1369.901736][T26081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.908688][T26081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.919534][T26081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.920887][T26081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.951199][T26087] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1369.964507][T18211] EXT4-fs (loop8): unmounting filesystem. [ 1370.040747][T26096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.048855][T26096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.254659][T26125] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1370.377803][T18211] EXT4-fs (loop8): unmounting filesystem. [ 1370.421228][T26146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.422772][T26146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.509580][T26159] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1370.511980][T26159] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1370.515126][T26159] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1370.964952][T26177] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1370.966779][T26177] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1370.969450][T26177] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.4209: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1370.972998][T26177] EXT4-fs (loop4): no journal found [ 1370.973759][T26177] EXT4-fs (loop4): can't get journal size [ 1370.977819][T26177] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1370.997490][T18230] EXT4-fs (loop4): unmounting filesystem. [ 1371.059062][T26183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1371.059797][T26179] syz.1.4211: attempt to access beyond end of device [ 1371.059797][T26179] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1371.060530][T13985] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1371.139563][T26190] ext4: Unknown parameter 'seclabel' [ 1371.179688][T26085] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1371.182817][T18230] EXT4-fs (loop4): unmounting filesystem. [ 1371.192314][T26190] EXT4-fs (loop1): unable to read superblock [ 1371.214082][T26190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.217747][T26190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.240746][T13985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.242467][T13985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.243990][T13985] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1371.245914][T13985] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1371.262712][T13985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.266143][T13985] usb 1-1: config 0 descriptor?? [ 1371.279185][T26203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.283949][T26203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.291314][T26203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.295482][T26203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.517371][T26228] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1371.547181][T18211] EXT4-fs (loop8): unmounting filesystem. [ 1372.000642][T13985] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 1372.013789][T13985] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1372.040961][T26249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.054607][T26249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.059613][T26250] set_capacity_and_notify: 13 callbacks suppressed [ 1372.059624][T26250] loop1: detected capacity change from 0 to 512 [ 1372.071234][T26250] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1372.145058][T17596] EXT4-fs (loop1): unmounting filesystem. [ 1372.204467][ T8591] usb 1-1: USB disconnect, device number 3 [ 1372.237657][T26265] binder: 26264:26265 tried to acquire reference to desc 0, got 1 instead [ 1372.240731][T26265] binder_alloc: 26264: binder_alloc_buf, no vma [ 1372.241811][T26265] binder: cannot allocate buffer: vma cleared, target dead or dying [ 1372.241837][T26265] binder: 26264:26265 transaction call to 26264:0 failed 613/29189/-3, size 0-0 line 3247 [ 1372.245737][ T8588] binder: release 26264:26265 transaction 606 out, still active [ 1372.246958][ T8588] binder: undelivered TRANSACTION_COMPLETE [ 1372.258119][ T8588] binder: undelivered TRANSACTION_ERROR: 29189 [ 1372.260509][ T8588] binder: send failed reply for transaction 606, target dead [ 1372.277137][T26270] loop1: detected capacity change from 0 to 256 [ 1372.283359][T26270] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1372.285347][T26270] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1372.289743][T26270] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1372.402589][T26277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.403919][T26277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.145273][T26327] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4238'. [ 1373.186327][T26337] loop1: detected capacity change from 0 to 512 [ 1373.215056][T26337] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1373.270466][T17596] EXT4-fs (loop1): unmounting filesystem. [ 1373.274510][T26345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.292672][T26345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.379008][ T8591] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1373.412182][T26364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.413660][T26364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.558592][ T8591] usb 1-1: Using ep0 maxpacket: 16 [ 1373.561702][ T8591] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1373.562837][ T8591] usb 1-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.00 [ 1373.564184][ T8591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.567692][ T8591] usb 1-1: config 0 descriptor?? [ 1374.016105][T26424] loop4: detected capacity change from 0 to 256 [ 1374.037837][ T8591] ntrig 0003:1B96:000B.0002: unknown main item tag 0x6 [ 1374.039162][ T8591] ntrig 0003:1B96:000B.0002: ignoring exceeding usage max [ 1374.042854][ T8591] ntrig 0003:1B96:000B.0002: hidraw0: USB HID v0.08 Device [HID 1b96:000b] on usb-dummy_hcd.0-1/input0 [ 1374.048047][T26424] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1374.053123][T26424] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1374.138171][T26431] binder: 26413:26431 ioctl c0306201 0 returned -14 [ 1374.156137][T26431] loop6: detected capacity change from 0 to 256 [ 1374.246412][ T8591] usb 1-1: USB disconnect, device number 4 [ 1374.286607][T26431] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1374.335700][T26424] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1374.361651][T26435] loop8: detected capacity change from 0 to 16 [ 1374.383504][T26435] erofs: (device loop8): mounted with root inode @ nid 36. [ 1374.586508][T26442] erofs: (device loop8): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 1374.588236][T26442] erofs: (device loop8): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 1374.589783][T26442] erofs: (device loop8): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1374.591356][T26442] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1374.593190][T26442] erofs: (device loop8): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1374.594753][T26442] erofs: (device loop8): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1374.596883][T26442] syz.8.4257: attempt to access beyond end of device [ 1374.596883][T26442] loop8: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1374.599250][T26442] syz.8.4257: attempt to access beyond end of device [ 1374.599250][T26442] loop8: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1374.601649][T26442] syz.8.4257: attempt to access beyond end of device [ 1374.601649][T26442] loop8: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 1374.604323][T26442] syz.8.4257: attempt to access beyond end of device [ 1374.604323][T26442] loop8: rw=524288, sector=720, nr_sectors = 80 limit=16 [ 1375.332854][T13985] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1375.336376][T13985] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1375.374515][T26447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.391919][T26447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.405557][T26444] loop1: detected capacity change from 0 to 4096 [ 1375.437325][T26444] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1375.463641][T26444] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1375.555504][T26438] fido_id[26438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1375.635734][T17596] EXT4-fs (loop1): unmounting filesystem. [ 1376.045535][T26471] loop6: detected capacity change from 0 to 8 [ 1376.047978][T26471] squashfs: Unknown parameter ' [ 1376.047978][T26471] Ýpő>ţŰCNŇ5P6rĐŁšâţÍl>máM.ŠMI­o b ×Č.?íѧŁž^WúĺR)á0m]żÉƉ»ĺ‰vOő^˙ Ńöŕ´9ůÖš‚§wKeŔ—Ü*ůLßĐ [ 1376.047978][T26471] şĺVîŚ.¸#e’MC;OŐŚIڿס“ÍGÚo{Öú`÷®9K¶ÇĹ-e6/8a˘pć´®ą»pŁęý»5ctŹ˝w'A„p¶ăŤT!ĎuŤ¦ľ@ń-çďs˙2ů9' [ 1376.143433][T26481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.144950][T26481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.231145][T26487] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4269'. [ 1376.234413][T26469] fido_id[26469]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1376.405161][T26490] binder: 26482:26490 ioctl c0306201 0 returned -14 [ 1376.430121][T26490] loop1: detected capacity change from 0 to 256 [ 1376.606758][T26490] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1376.635717][T26492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.639152][T26492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.655747][T26497] loop0: detected capacity change from 0 to 16 [ 1376.673140][T26497] erofs: (device loop0): mounted with root inode @ nid 36. [ 1376.865730][T26505] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 1376.867525][T26505] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 1376.869158][T26505] erofs: (device loop0): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1376.870766][T26505] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1376.872358][T26505] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1376.873874][T26505] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1376.875526][T26505] syz.0.4272: attempt to access beyond end of device [ 1376.875526][T26505] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1376.877688][T26505] syz.0.4272: attempt to access beyond end of device [ 1376.877688][T26505] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1376.880358][T26505] syz.0.4272: attempt to access beyond end of device [ 1376.880358][T26505] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 1376.882709][T26505] syz.0.4272: attempt to access beyond end of device [ 1376.882709][T26505] loop0: rw=524288, sector=720, nr_sectors = 80 limit=16 [ 1377.755551][T26511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.757181][T26511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.772324][T26513] loop6: detected capacity change from 0 to 512 [ 1377.792180][T26513] EXT4-fs: Ignoring removed nobh option [ 1377.803322][T26513] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1377.878962][T14809] EXT4-fs (loop6): unmounting filesystem. [ 1377.880096][T14809] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Out of memory [ 1377.883930][T14809] EXT4-fs error (device loop6): ext4_quota_off:7147: inode #4: comm syz-executor: mark_inode_dirty error [ 1378.007560][T26522] loop0: detected capacity change from 0 to 256 [ 1378.018285][T26522] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1378.021784][T26522] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1378.038360][T26527] loop8: detected capacity change from 0 to 2048 [ 1378.044188][T26530] loop4: detected capacity change from 0 to 512 [ 1378.063139][T26522] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc4d1c548, utbl_chksum : 0xe619d30d) [ 1378.101567][T26530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1378.169396][T18230] EXT4-fs (loop4): unmounting filesystem. [ 1379.401098][T26556] binder: 26550:26556 ioctl c0306201 0 returned -14 [ 1379.404209][T26556] loop4: detected capacity change from 0 to 256 [ 1379.456854][T26556] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1379.597764][T26561] loop1: detected capacity change from 0 to 16 [ 1379.601015][T26561] erofs: (device loop1): mounted with root inode @ nid 36. [ 1379.647971][T26564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.690698][T26564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.691932][T26567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.693333][T26567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.786481][T26576] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 1379.788157][T26576] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 1379.789726][T26576] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1379.791248][T26576] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1379.792933][T26576] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1379.794228][T26576] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1379.795771][T26576] syz.1.4290: attempt to access beyond end of device [ 1379.795771][T26576] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1379.797915][T26576] syz.1.4290: attempt to access beyond end of device [ 1379.797915][T26576] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1379.800241][T26576] syz.1.4290: attempt to access beyond end of device [ 1379.800241][T26576] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 1379.802555][T26576] syz.1.4290: attempt to access beyond end of device [ 1379.802555][T26576] loop1: rw=524288, sector=720, nr_sectors = 80 limit=16 [ 1380.834663][T26581] loop4: detected capacity change from 0 to 512 [ 1380.836255][T26581] EXT4-fs: inline encryption not supported [ 1380.838724][T26581] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1380.845806][T26581] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.4295: corrupted in-inode xattr [ 1380.849612][T26581] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.4295: couldn't read orphan inode 15 (err -117) [ 1380.859487][T26581] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1380.917505][T18230] EXT4-fs (loop4): unmounting filesystem. [ 1381.006694][T26601] loop4: detected capacity change from 0 to 512 [ 1381.024762][T26601] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1381.044796][T26603] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1381.045936][T26603] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 1381.055004][T26601] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.4300: iget: bad i_size value: 38620345925642 [ 1381.057122][T26601] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.4300: couldn't read orphan inode 15 (err -117) [ 1381.061411][T26601] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1381.228685][ T4487] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1381.630478][ T4487] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.632176][ T4487] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1381.633603][ T4487] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1381.637735][ T4487] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1381.639372][ T4487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.640609][ T4487] usb 1-1: Product: syz [ 1381.641194][ T4487] usb 1-1: Manufacturer: syz [ 1381.641975][ T4487] usb 1-1: SerialNumber: syz [ 1381.645598][ T4487] cdc_ncm 1-1:1.0: skipping garbage [ 1381.646555][ T4487] usb 1-1: selecting invalid altsetting 1 [ 1381.770585][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.854906][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.864078][T16474] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:24: bg 0: block 5: invalid block bitmap [ 1381.877059][T16474] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 1381.883459][T16474] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1381.883459][T16474] [ 1381.885366][T16474] EXT4-fs (loop4): Total free blocks count 0 [ 1381.935157][ T4331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1381.938318][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1381.950991][T16474] EXT4-fs (loop4): Free/Dirty block details [ 1381.951972][T16474] EXT4-fs (loop4): free_blocks=0 [ 1381.955769][T16474] EXT4-fs (loop4): dirty_blocks=65 [ 1381.955983][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1381.956648][T16474] EXT4-fs (loop4): Block reservation details [ 1381.959595][ T4331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1381.960823][T16474] EXT4-fs (loop4): i_reserved_data_blocks=65 [ 1381.963049][T18230] EXT4-fs (loop4): unmounting filesystem. [ 1381.972792][ T4331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1381.978897][ T4331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1381.995333][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.077930][T26629] binder: 26622:26629 ioctl c0306201 0 returned -14 [ 1382.093229][T26629] loop8: detected capacity change from 0 to 256 [ 1382.236910][T26629] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1382.324808][T26628] loop4: detected capacity change from 0 to 16 [ 1382.326598][ T4487] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1382.327473][ T4487] cdc_ncm 1-1:1.0: bind() failure [ 1382.331326][ T4487] usb 1-1: USB disconnect, device number 5 [ 1382.332729][T26628] erofs: (device loop4): mounted with root inode @ nid 36. [ 1382.412541][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.528111][T26639] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 1382.529950][T26639] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 1382.531470][T26639] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1382.533171][T26639] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1382.535801][T26639] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1382.537203][T26639] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1382.538935][T26639] syz.4.4305: attempt to access beyond end of device [ 1382.538935][T26639] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1382.541285][T26639] syz.4.4305: attempt to access beyond end of device [ 1382.541285][T26639] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1382.543484][T26639] syz.4.4305: attempt to access beyond end of device [ 1382.543484][T26639] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 1382.545891][T26639] syz.4.4305: attempt to access beyond end of device [ 1382.545891][T26639] loop4: rw=524288, sector=720, nr_sectors = 80 limit=16 [ 1383.430990][T26624] chnl_net:caif_netlink_parms(): no params data found [ 1383.464004][T26650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.465692][T26650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.523303][T26624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.525507][T26624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.527033][T26624] device bridge_slave_0 entered promiscuous mode [ 1383.588731][T26624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.592236][T26624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.593742][T26624] device bridge_slave_1 entered promiscuous mode [ 1383.673081][ T11] tipc: Left network mode [ 1383.684072][T26624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.686677][T26624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.706293][T26624] team0: Port device team_slave_0 added [ 1383.711845][T26624] team0: Port device team_slave_1 added [ 1383.724081][T26624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1383.725333][T26624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.785502][T26624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.935824][T26624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1384.029347][ T8088] Bluetooth: hci0: command 0x0409 tx timeout [ 1384.056952][T26624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1384.069469][T26624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1384.114872][T26663] binder: 26662:26663 ioctl c00c620f 20000000 returned -22 [ 1384.310008][T26624] device hsr_slave_0 entered promiscuous mode [ 1384.350555][T26675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.352868][T26675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.398973][T26624] device hsr_slave_1 entered promiscuous mode [ 1384.518178][T26677] binder: 26672:26677 ioctl c0306201 0 returned -14 [ 1384.539749][T26677] loop0: detected capacity change from 0 to 256 [ 1384.769704][T26677] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1385.201847][T26704] loop6: detected capacity change from 0 to 16 [ 1385.210572][T26704] erofs: (device loop6): mounted with root inode @ nid 36. [ 1385.393518][T26711] erofs: (device loop6): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 1385.395299][T26711] erofs: (device loop6): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 1385.396922][T26711] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1385.398618][T26711] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1385.400136][T26711] erofs: (device loop6): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1385.401680][T26711] erofs: (device loop6): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1385.403254][T26711] syz.6.4323: attempt to access beyond end of device [ 1385.403254][T26711] loop6: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1385.405364][T26711] syz.6.4323: attempt to access beyond end of device [ 1385.405364][T26711] loop6: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1385.407557][T26711] syz.6.4323: attempt to access beyond end of device [ 1385.407557][T26711] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 1385.409840][T26711] syz.6.4323: attempt to access beyond end of device [ 1385.409840][T26711] loop6: rw=524288, sector=720, nr_sectors = 80 limit=16 [ 1385.598762][ T7113] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1386.147358][ T8088] Bluetooth: hci0: command 0x041b tx timeout [ 1386.205194][T26713] loop4: detected capacity change from 0 to 8 [ 1386.283471][T26713] SQUASHFS error: Failed to read block 0x2d7: -5 [ 1386.284524][T26713] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1386.343306][ T7113] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1386.344793][ T7113] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1386.348122][ T7113] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1386.356555][ T7113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.357846][ T7113] usb 1-1: Product: syz [ 1386.362132][ T7113] usb 1-1: Manufacturer: syz [ 1386.362888][ T7113] usb 1-1: SerialNumber: syz [ 1386.377833][ T7113] usb 1-1: config 0 descriptor?? [ 1386.398007][T26710] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1386.399306][T26710] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1386.484956][T26730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.486569][T26730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.553555][T26738] loop8: detected capacity change from 0 to 4096 [ 1386.580490][T26738] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1386.588112][T26738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.591181][T26738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.603816][T26710] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1386.604956][T26710] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1387.278324][T26624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1387.309713][ T7113] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1387.317457][ T7113] usb 1-1: USB disconnect, device number 6 [ 1387.320108][T26624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1387.329841][T18211] EXT4-fs (loop8): unmounting filesystem. [ 1387.425432][T26624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1387.834327][T26624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1387.929975][ T11] device hsr_slave_0 left promiscuous mode [ 1387.969472][ T11] device hsr_slave_1 left promiscuous mode [ 1388.038908][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1388.040162][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1388.041721][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1388.042904][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.044391][ T11] device bridge_slave_0 left promiscuous mode [ 1388.045336][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.168521][ T4345] Bluetooth: hci0: command 0x040f tx timeout [ 1388.168692][ T11] device veth1_macvtap left promiscuous mode [ 1388.170482][ T11] device veth0_macvtap left promiscuous mode [ 1388.171434][ T11] device veth1_vlan left promiscuous mode [ 1388.172343][ T11] device veth0_vlan left promiscuous mode [ 1388.295693][T26830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.297325][T26830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.328318][T26836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.336081][T26836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.388212][T26842] loop4: detected capacity change from 0 to 1024 [ 1388.395714][T26842] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1388.397997][T26842] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1388.400447][T26842] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1388.401868][T26842] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.4353: Freeing blocks not in datazone - block = 0, count = 4096 [ 1388.406672][T26842] EXT4-fs (loop4): Remounting filesystem read-only [ 1388.407894][T26842] EXT4-fs (loop4): 1 orphan inode deleted [ 1388.409509][T26842] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1388.420973][T26842] EXT4-fs error (device loop4): ext4_get_group_desc:277: comm syz.4.4353: block_group >= groups_count - block_group = 1, groups_count = 1 [ 1388.424289][T26842] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4643: inode #40: comm syz.4.4353: unable to read itable block [ 1388.435817][T18230] EXT4-fs (loop4): unmounting filesystem. [ 1388.458383][T26845] loop4: detected capacity change from 0 to 512 [ 1388.496504][T26845] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1388.527184][T18230] EXT4-fs (loop4): unmounting filesystem. [ 1390.201225][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1390.248605][ T8088] Bluetooth: hci0: command 0x0419 tx timeout [ 1390.379733][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1390.549999][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1390.749662][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1390.959442][ T11] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1392.369803][ T11] bond0 (unregistering): Released all slaves [ 1392.684353][T26624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.693564][T26849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4358'. [ 1392.713560][T17374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1392.715059][T17374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1392.728076][T26624] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.744207][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1392.745987][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1392.747378][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.748457][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.753184][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1392.778950][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1392.780852][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1392.782244][T14649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.783351][T14649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.786873][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1392.813493][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1392.816845][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1392.823007][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1392.826152][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1392.829435][T26868] loop0: detected capacity change from 0 to 512 [ 1392.832491][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1392.834207][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1392.836588][T26869] binder: 26867:26869 got reply transaction with no transaction stack [ 1392.836764][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1392.837878][T26869] binder: 26867:26869 transaction reply to 0:0 failed 619/29201/-71, size 0-0 line 2963 [ 1392.848067][T26869] binder: 26867:26869 ioctl c0306201 200007c0 returned -14 [ 1392.852998][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1392.856775][T26624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1392.859305][T26624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1392.861544][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1392.864846][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1392.873461][T26877] loop6: detected capacity change from 0 to 1024 [ 1392.896049][T26878] loop8: detected capacity change from 0 to 1024 [ 1392.908630][T26868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1392.943755][T26878] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1392.956759][T26885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.958335][T26885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.973325][T26878] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1392.975060][T26878] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1392.978032][T17632] EXT4-fs (loop0): unmounting filesystem. [ 1393.001518][T26878] EXT4-fs error (device loop8): ext4_free_blocks:6220: comm syz.8.4364: Freeing blocks not in datazone - block = 0, count = 4096 [ 1393.021345][T26878] EXT4-fs (loop8): Remounting filesystem read-only [ 1393.022576][T26878] EXT4-fs (loop8): 1 orphan inode deleted [ 1393.023461][T26878] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1393.035216][T26895] loop0: detected capacity change from 0 to 1024 [ 1393.074868][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1393.076181][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1393.087498][T26624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1393.101628][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1393.103289][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1393.105755][T26878] EXT4-fs error (device loop8): ext4_get_group_desc:277: comm syz.8.4364: block_group >= groups_count - block_group = 1, groups_count = 1 [ 1393.114165][T26878] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4643: inode #40: comm syz.8.4364: unable to read itable block [ 1393.118303][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1393.119929][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1393.121470][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1393.122883][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1393.142894][T26624] device veth0_vlan entered promiscuous mode [ 1393.155937][T26624] device veth1_vlan entered promiscuous mode [ 1393.162299][T18211] EXT4-fs (loop8): unmounting filesystem. [ 1393.163739][ T4855] hfsplus: b-tree write err: -5, ino 25 [ 1393.164837][ T4855] hfsplus: b-tree write err: -5, ino 4 [ 1393.178780][ T4855] hfsplus: b-tree write err: -5, ino 2 [ 1393.179822][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1393.181447][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1393.182857][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1393.184319][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1393.186965][T26624] device veth0_macvtap entered promiscuous mode [ 1393.194571][T26624] device veth1_macvtap entered promiscuous mode [ 1393.231833][T26909] loop8: detected capacity change from 0 to 256 [ 1393.234790][T26624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1393.236506][T26624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.238258][T26906] loop6: detected capacity change from 0 to 764 [ 1393.240625][T26909] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1393.244287][T26624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1393.249737][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1393.251328][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1393.252781][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1393.264205][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1393.270707][T26624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1393.272409][T26624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.279506][T26624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1393.283122][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1393.284783][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1393.311221][T26624] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.312743][T26624] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.314051][T26624] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.315426][T26624] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.756816][ T4855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.761319][ T4855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.765114][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1393.795287][T14649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.801815][T14649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.805321][T16474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1393.817575][T26926] loop6: detected capacity change from 0 to 1024 [ 1393.858920][T26934] loop4: detected capacity change from 0 to 256 [ 1393.875132][T26934] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1393.910837][T26939] loop0: detected capacity change from 0 to 512 [ 1393.943124][T26939] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.4379: inode has both inline data and extents flags [ 1393.946625][T26942] loop1: detected capacity change from 0 to 1024 [ 1393.955043][T26942] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1393.970957][T26942] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1393.971986][T26939] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.4379: couldn't read orphan inode 15 (err -117) [ 1393.972748][T26942] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1393.975470][T26942] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.4380: Freeing blocks not in datazone - block = 0, count = 4096 [ 1393.979344][T26942] EXT4-fs (loop1): Remounting filesystem read-only [ 1393.980993][T26942] EXT4-fs (loop1): 1 orphan inode deleted [ 1393.981989][T26942] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1393.986488][T26939] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1394.003160][T26948] binder: 26947:26948 got reply transaction with no transaction stack [ 1394.004515][T26948] binder: 26947:26948 transaction reply to 0:0 failed 620/29201/-71, size 0-0 line 2963 [ 1394.006394][T13985] binder: undelivered TRANSACTION_ERROR: 29201 [ 1394.040963][T17632] EXT4-fs (loop0): unmounting filesystem. [ 1394.042738][ T4389] hfsplus: b-tree write err: -5, ino 25 [ 1394.043742][ T4389] hfsplus: b-tree write err: -5, ino 4 [ 1394.044625][ T4389] hfsplus: b-tree write err: -5, ino 2 [ 1394.076810][T26942] EXT4-fs error (device loop1): ext4_get_group_desc:277: comm syz.1.4380: block_group >= groups_count - block_group = 1, groups_count = 1 [ 1394.083647][T26942] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4643: inode #40: comm syz.1.4380: unable to read itable block [ 1394.102892][T26624] EXT4-fs (loop1): unmounting filesystem. [ 1394.170079][T26962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.171619][T26962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.254911][T26965] hfsplus: unknown catalog record type 9 [ 1394.280159][T26973] EXT4-fs: Ignoring removed oldalloc option [ 1394.281141][T26973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1394.289350][T26973] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1394.289944][ T4389] hfsplus: b-tree write err: -5, ino 25 [ 1394.292017][ T4389] hfsplus: b-tree write err: -5, ino 4 [ 1394.292894][ T4389] hfsplus: b-tree write err: -5, ino 2 [ 1394.317784][T26973] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1394.349901][T18230] EXT4-fs (loop4): unmounting filesystem. [ 1394.378657][ T6940] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1394.400729][T26985] EXT4-fs: Ignoring removed oldalloc option [ 1394.407079][T26985] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1394.418425][T26985] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1394.433651][T26994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1394.445695][T26985] EXT4-fs (loop6): 1 truncate cleaned up [ 1394.446574][T26985] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1394.472337][ T11] hfsplus: b-tree write err: -5, ino 25 [ 1394.473339][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1394.474162][ T11] hfsplus: b-tree write err: -5, ino 2 [ 1394.526443][T14809] EXT4-fs (loop6): unmounting filesystem. [ 1394.561559][ T6940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1394.563293][ T6940] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1394.565385][ T6940] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1394.566730][ T6940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.569431][ T6940] usb 1-1: config 0 descriptor?? [ 1394.571620][T26952] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1395.213442][ T6940] uclogic 0003:28BD:0094.0004: interface is invalid, ignoring [ 1395.277044][T27039] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1395.356186][T14809] EXT4-fs (loop6): unmounting filesystem. [ 1395.415492][T13985] usb 1-1: USB disconnect, device number 7 [ 1395.454280][T27064] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4409'. [ 1395.482583][T27073] hfsplus: unable to parse mount options [ 1395.525529][T26876] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1396.655224][T27134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.661300][T27134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.798031][T27147] EXT4-fs error (device loop4): __ext4_iget:5102: inode #11: block 1: comm syz.4.4430: invalid block [ 1396.800179][T27147] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.4430: couldn't read orphan inode 11 (err -117) [ 1396.970904][T27179] Bluetooth: MGMT ver 1.22 [ 1397.115316][T18230] EXT4-fs unmount: 1 callbacks suppressed [ 1397.115329][T18230] EXT4-fs (loop4): unmounting filesystem. [ 1397.776197][T27243] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1398.190509][T27285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.196893][T27280] set_capacity_and_notify: 10 callbacks suppressed [ 1398.196901][T27280] loop8: detected capacity change from 0 to 1024 [ 1398.202228][T27285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.615050][T14977] hfsplus: b-tree write err: -5, ino 25 [ 1398.616149][T14977] hfsplus: b-tree write err: -5, ino 4 [ 1398.617137][T14977] hfsplus: b-tree write err: -5, ino 2 [ 1398.676388][T27301] loop8: detected capacity change from 0 to 1024 [ 1398.712127][T27301] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1398.932052][T27327] loop4: detected capacity change from 0 to 256 [ 1398.947432][T27327] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1398.977887][T18211] EXT4-fs (loop8): unmounting filesystem. [ 1399.714525][T27354] loop0: detected capacity change from 0 to 512 [ 1399.723933][T27358] loop1: detected capacity change from 0 to 16 [ 1399.726707][T27353] loop4: detected capacity change from 0 to 1024 [ 1399.728436][T27354] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1399.742356][T27354] EXT4-fs (loop0): 1 truncate cleaned up [ 1399.743295][T27354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1399.746847][T27358] erofs: (device loop1): mounted with root inode @ nid 36. [ 1399.752927][T27354] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.4463: Logical block already allocated [ 1399.771582][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1399.773232][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 1399.773733][T27354] EXT4-fs (loop0): Remounting filesystem read-only [ 1399.774546][T27358] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1399.776852][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 1399.778204][T27358] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1399.779718][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1399.781105][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 1399.782449][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1399.783793][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 1399.785053][T27358] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1399.786392][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1399.787671][T27358] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1399.789263][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1399.790630][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1399.792000][T27358] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1399.793384][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1399.794666][T27358] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1399.796004][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1399.797286][T27358] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1399.798691][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1399.799969][T27358] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1399.801281][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1399.802682][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1399.803990][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1399.805398][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1399.806833][T27358] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1399.808167][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1399.809635][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 1399.811069][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1399.812465][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1399.813813][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 1399.815214][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 1399.816602][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1399.817877][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1399.819308][T27358] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1399.820662][T27358] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 1399.822094][T27358] syz.1.4464: attempt to access beyond end of device [ 1399.822094][T27358] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1399.824077][T27358] syz.1.4464: attempt to access beyond end of device [ 1399.824077][T27358] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1399.826352][T27358] syz.1.4464: attempt to access beyond end of device [ 1399.826352][T27358] loop1: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 1399.828352][T27358] syz.1.4464: attempt to access beyond end of device [ 1399.828352][T27358] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1399.830663][T27358] syz.1.4464: attempt to access beyond end of device [ 1399.830663][T27358] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1399.832773][T27358] syz.1.4464: attempt to access beyond end of device [ 1399.832773][T27358] loop1: rw=524288, sector=8, nr_sectors = 72 limit=16 [ 1399.841420][T27353] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1399.844834][T17632] EXT4-fs (loop0): unmounting filesystem. [ 1400.007276][T18230] EXT4-fs (loop4): unmounting filesystem. [ 1400.354760][T27389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.358978][T27387] loop8: detected capacity change from 0 to 512 [ 1400.360357][T27387] EXT4-fs: Ignoring removed bh option [ 1400.362406][T27389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.375155][T27391] loop6: detected capacity change from 0 to 512 [ 1400.377777][T27391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1400.383295][T27387] EXT4-fs (loop8): 1 truncate cleaned up [ 1400.384255][T27387] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1400.389844][T27391] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1400.391490][T27391] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1400.393167][T27391] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1400.403840][T27391] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1400.405153][T27391] EXT4-fs (loop6): failed to initialize system zone (-117) [ 1400.406401][T27391] EXT4-fs (loop6): mount failed [ 1400.482460][T27399] loop6: detected capacity change from 0 to 256 [ 1400.493833][T27399] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1400.656338][T18211] EXT4-fs (loop8): unmounting filesystem. [ 1400.716204][T27417] device lo entered promiscuous mode [ 1400.732221][T27417] device tunl0 entered promiscuous mode [ 1400.737465][T27417] device gre0 entered promiscuous mode [ 1400.790368][T27417] device gretap0 entered promiscuous mode [ 1400.813994][T27429] loop4: detected capacity change from 0 to 256 [ 1400.815435][T27429] exfat: Unknown parameter '01777777777777777777777˙0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙' [ 1400.824098][T27417] device erspan0 entered promiscuous mode [ 1400.850558][T27417] device ip_vti0 entered promiscuous mode [ 1400.863859][T27417] device ip6_vti0 entered promiscuous mode [ 1400.914428][T27417] device sit0 entered promiscuous mode [ 1401.225772][T27417] device ip6tnl0 entered promiscuous mode [ 1401.233106][T27417] device ip6gre0 entered promiscuous mode [ 1401.239643][T27417] device ip6gretap0 entered promiscuous mode [ 1401.246317][T27417] device bridge0 entered promiscuous mode [ 1401.268931][T27417] device vcan0 entered promiscuous mode [ 1401.274557][T27417] device bond0 entered promiscuous mode [ 1401.275587][T27417] device bridge_slave_1 entered promiscuous mode [ 1401.295009][T27417] device team0 entered promiscuous mode [ 1401.310005][T27417] device dummy0 entered promiscuous mode [ 1401.327404][ T1577] hfsplus: b-tree write err: -5, ino 25 [ 1401.328590][ T1577] hfsplus: b-tree write err: -5, ino 4 [ 1401.329717][ T1577] hfsplus: b-tree write err: -5, ino 2 [ 1401.331065][T27417] device nlmon0 entered promiscuous mode [ 1401.334720][ T1577] hfsplus: b-tree write err: -5, ino 17 [ 1401.336286][T27417] device caif0 entered promiscuous mode [ 1401.349634][T27417] device batadv0 entered promiscuous mode [ 1401.357468][T27417] device vxcan0 entered promiscuous mode [ 1401.367270][T27417] device vxcan1 entered promiscuous mode [ 1401.373978][T27417] device veth0 entered promiscuous mode [ 1401.387903][T27417] device veth1 entered promiscuous mode [ 1401.429152][ T39] hfsplus: b-tree write err: -5, ino 25 [ 1401.430130][ T39] hfsplus: b-tree write err: -5, ino 4 [ 1401.431092][ T39] hfsplus: b-tree write err: -5, ino 2 [ 1401.432270][ T39] hfsplus: b-tree write err: -5, ino 26 [ 1401.478873][T27417] device wg0 entered promiscuous mode [ 1401.548714][T27417] device wg1 entered promiscuous mode [ 1401.580059][T27457] hfsplus: unable to parse mount options [ 1401.692181][T27417] device wg2 entered promiscuous mode [ 1401.983062][T27461] EXT4-fs: quotafile must be on filesystem root [ 1401.984586][T27417] device veth0_to_bridge entered promiscuous mode [ 1401.997902][T27417] device bridge_slave_0 entered promiscuous mode [ 1402.005297][T27417] device veth1_to_bridge entered promiscuous mode [ 1402.017080][T27417] device veth0_to_bond entered promiscuous mode [ 1402.027486][T27417] device bond_slave_0 entered promiscuous mode [ 1402.029145][T27417] device veth1_to_bond entered promiscuous mode [ 1402.036092][T27417] device bond_slave_1 entered promiscuous mode [ 1402.037379][T27417] device veth0_to_team entered promiscuous mode [ 1402.044452][T27417] device team_slave_0 entered promiscuous mode [ 1402.045838][T27417] device veth1_to_team entered promiscuous mode [ 1402.055590][T27417] device team_slave_1 entered promiscuous mode [ 1402.057224][T27417] device veth0_to_batadv entered promiscuous mode [ 1402.066602][T27417] device batadv_slave_0 entered promiscuous mode [ 1402.076901][T27417] device veth1_to_batadv entered promiscuous mode [ 1402.086637][T27417] device batadv_slave_1 entered promiscuous mode [ 1402.096146][T27417] device xfrm0 entered promiscuous mode [ 1402.105235][T27417] device veth0_to_hsr entered promiscuous mode [ 1402.116779][T27417] device veth1_to_hsr entered promiscuous mode [ 1402.129751][T27417] device hsr0 entered promiscuous mode [ 1402.137045][T27417] device veth1_virt_wifi entered promiscuous mode [ 1402.144221][T27417] device veth0_virt_wifi entered promiscuous mode [ 1402.146558][T27417] device virt_wifi0 entered promiscuous mode [ 1402.167862][T27417] device vlan0 entered promiscuous mode [ 1402.168963][T27417] device vlan1 entered promiscuous mode [ 1402.218765][T27417] device macvlan0 entered promiscuous mode [ 1402.258599][T27417] device macvlan1 entered promiscuous mode [ 1402.260859][T27417] device ipvlan0 entered promiscuous mode [ 1402.261928][T27417] device ipvlan1 entered promiscuous mode [ 1402.318624][T27417] device macvtap0 entered promiscuous mode [ 1402.325634][T27417] device macsec0 entered promiscuous mode [ 1402.568003][T15279] hfsplus: b-tree write err: -5, ino 25 [ 1402.569372][T15279] hfsplus: b-tree write err: -5, ino 4 [ 1402.570264][T15279] hfsplus: b-tree write err: -5, ino 2 [ 1402.571653][T27417] device geneve0 entered promiscuous mode [ 1402.581878][T27481] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a015c01c, mo2=0002] [ 1402.581960][T15279] hfsplus: b-tree write err: -5, ino 17 [ 1402.583291][T27481] System zones: 0-1, 3-36 [ 1402.584355][T27417] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.586224][T27417] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.587498][T27417] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.600548][T27417] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.601569][T27481] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1402.611801][T27417] device geneve1 entered promiscuous mode [ 1402.628719][T27417] device netdevsim0 entered promiscuous mode [ 1402.641355][T27417] device netdevsim1 entered promiscuous mode [ 1402.653773][T18211] EXT4-fs (loop8): unmounting filesystem. [ 1402.670025][T27417] device netdevsim2 entered promiscuous mode [ 1402.677675][T27417] device netdevsim3 entered promiscuous mode [ 1402.685091][T27487] exfat: Unknown parameter '01777777777777777777777˙0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙' [ 1402.783052][T27495] EXT4-fs: Ignoring removed bh option [ 1402.784004][T27495] EXT4-fs: Ignoring removed bh option [ 1402.803439][T27417] device wlan0 entered promiscuous mode [ 1403.092296][T27417] device wlan1 entered promiscuous mode [ 1403.129022][T27495] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1403.135128][T27417] device veth2 entered promiscuous mode [ 1403.136282][T27417] device veth3 entered promiscuous mode [ 1403.137377][T27417] device pim6reg0 entered promiscuous mode [ 1403.176084][T27488] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d3e, chksum : 0x09ccb45e, utbl_chksum : 0xe619d30d) [ 1403.195290][T27504] hfsplus: unable to parse mount options [ 1403.200482][T27502] set_capacity_and_notify: 11 callbacks suppressed [ 1403.200490][T27502] loop0: detected capacity change from 0 to 512 [ 1403.219383][T27502] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1403.312902][T26624] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /31/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1403.313546][T17632] EXT4-fs (loop0): unmounting filesystem. [ 1403.319458][T26624] EXT4-fs (loop1): Remounting filesystem read-only [ 1403.322370][T26624] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /31/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1403.334846][T26624] EXT4-fs (loop1): Remounting filesystem read-only [ 1403.336265][T26624] EXT4-fs error (device loop1): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1403.347573][T26624] EXT4-fs (loop1): Remounting filesystem read-only [ 1403.502970][T26624] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1403.607786][T26624] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /31/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1403.625307][T26624] EXT4-fs (loop1): Remounting filesystem read-only [ 1403.627631][T26624] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /31/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1403.636811][T26624] EXT4-fs (loop1): Remounting filesystem read-only [ 1403.638103][T26624] EXT4-fs error (device loop1): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1403.643729][T27519] loop8: detected capacity change from 0 to 1024 [ 1403.651483][T26624] EXT4-fs (loop1): Remounting filesystem read-only [ 1403.653778][T26624] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1403.656732][T26624] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /31/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1403.661715][T26624] EXT4-fs (loop1): Remounting filesystem read-only [ 1403.663016][T26624] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /31/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1403.674536][T26624] EXT4-fs (loop1): Remounting filesystem read-only [ 1403.685319][T26624] EXT4-fs error (device loop1): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 1403.695971][T26624] EXT4-fs (loop1): Remounting filesystem read-only [ 1403.700527][T26624] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1403.705475][T26624] EXT4-fs error (device loop1): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /31/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 1403.718799][T26624] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1403.727446][T26624] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1403.730401][T27526] loop0: detected capacity change from 0 to 256 [ 1403.732944][T14029] hfsplus: b-tree write err: -5, ino 25 [ 1403.733423][T26624] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1403.733958][T14029] hfsplus: b-tree write err: -5, ino 4 [ 1403.736956][T14029] hfsplus: b-tree write err: -5, ino 2 [ 1403.738352][T26624] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1403.740563][T14029] hfsplus: b-tree write err: -5, ino 17 [ 1403.750663][T26624] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1403.763400][T26624] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1403.775592][T26624] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 1403.778267][T27526] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1403.786462][T27526] FAT-fs (loop0): Filesystem has been set read-only [ 1403.889381][T27538] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4510'. [ 1403.955494][T27540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.958762][T27540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.041731][T27554] loop0: detected capacity change from 0 to 256 [ 1404.043033][T27554] exfat: Unknown parameter '01777777777777777777777˙0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙' [ 1404.164249][T27565] loop6: detected capacity change from 0 to 2048 [ 1404.169727][T27562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.551731][ T3940] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1404.553591][ T3940] Buffer I/O error on dev loop6, logical block 0, async page read [ 1404.554836][ T3940] ldm_validate_partition_table(): Disk read failed. [ 1404.555849][ T3940] Dev loop6: unable to read RDB block 0 [ 1404.556664][ T3940] loop6: unable to read partition table [ 1404.557537][ T3940] loop6: partition table beyond EOD, truncated [ 1404.564047][T27568] loop6: detected capacity change from 0 to 256 [ 1404.575782][T27568] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011d3e, chksum : 0x09ccb45e, utbl_chksum : 0xe619d30d) [ 1404.640710][ T4345] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1404.644063][ T4345] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1404.646991][ T4345] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1404.652407][ T4345] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1404.654054][ T4345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1404.655266][ T4345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1404.741384][T14029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.842572][T14029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.902896][T27577] chnl_net:caif_netlink_parms(): no params data found [ 1404.924713][T27607] loop0: detected capacity change from 0 to 512 [ 1404.948722][T27607] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1404.950506][T27607] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1404.998803][T27607] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1405.009128][T27607] EXT4-fs (loop0): 1 truncate cleaned up [ 1405.010021][T27607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1405.062181][T14029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.076393][T17632] EXT4-fs (loop0): unmounting filesystem. [ 1405.082840][T27577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.105500][T27577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.107167][T27577] device bridge_slave_0 entered promiscuous mode [ 1405.109640][T27577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.110649][T27577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.112093][T27577] device bridge_slave_1 entered promiscuous mode [ 1405.152534][T27629] loop0: detected capacity change from 0 to 1024 [ 1405.152737][T27631] loop6: detected capacity change from 0 to 512 [ 1405.153961][T27629] hfsplus: unable to parse mount options [ 1405.154881][T27631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1405.156495][T27631] EXT4-fs: inline encryption not supported [ 1405.170278][T14029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.182936][T27577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.185530][T27577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1405.203907][T27577] team0: Port device team_slave_0 added [ 1405.206106][T27634] loop8: detected capacity change from 0 to 2048 [ 1405.207664][T27577] team0: Port device team_slave_1 added [ 1405.213704][T27577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.214806][T27577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1405.218863][T27577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1405.221169][T27577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1405.222182][T27577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1405.226145][T27577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.242815][T27631] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1405.247117][T27631] EXT4-fs (loop6): 1 truncate cleaned up [ 1405.247958][T27631] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1405.293210][T27577] device hsr_slave_0 entered promiscuous mode [ 1405.581117][ T3940] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1405.582639][ T3940] Buffer I/O error on dev loop8, logical block 0, async page read [ 1405.583803][ T3940] ldm_validate_partition_table(): Disk read failed. [ 1405.584794][ T3940] Dev loop8: unable to read RDB block 0 [ 1405.585664][ T3940] loop8: unable to read partition table [ 1405.592961][T14809] EXT4-fs (loop6): unmounting filesystem. [ 1405.593410][ T3940] loop8: partition table beyond EOD, truncated [ 1405.617028][T27634] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011d3e, chksum : 0x09ccb45e, utbl_chksum : 0xe619d30d) [ 1405.619509][T27577] device hsr_slave_1 entered promiscuous mode [ 1405.648871][T27577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1405.650093][T27577] Cannot create hsr debugfs directory [ 1406.480322][T27694] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1406.482517][T27694] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1406.516740][T27699] exfat: Unknown parameter '01777777777777777777777˙0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙' [ 1407.507394][T27762] hfsplus: unable to parse mount options [ 1407.508836][T27756] erofs: (device loop0): mounted with root inode @ nid 36. [ 1407.989533][T26890] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1408.418289][T27786] set_capacity_and_notify: 7 callbacks suppressed [ 1408.418300][T27786] loop6: detected capacity change from 0 to 128 [ 1408.418415][T26890] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1408.422722][T26890] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1408.424391][T26890] Buffer I/O error on dev loop6, logical block 0, async page read [ 1408.428117][T27786] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1408.445670][T27784] loop4: detected capacity change from 0 to 4096 [ 1408.461885][T27784] EXT4-fs: quotafile must be on filesystem root [ 1408.468085][T27786] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1408.569635][T14809] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /521/mnt/lost+found: directory fails checksum at offset 6144 [ 1408.574481][T14809] EXT4-fs error (device loop6): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 1408.591956][T14809] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /521/mnt/lost+found: directory fails checksum at offset 6144 [ 1408.609188][T14809] EXT4-fs error (device loop6): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 1408.611553][T14809] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /521/mnt/lost+found: directory fails checksum at offset 6144 [ 1408.622102][T14809] EXT4-fs error (device loop6): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 1408.628287][T14809] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /521/mnt/lost+found: directory fails checksum at offset 6144 [ 1408.649463][T14809] EXT4-fs error (device loop6): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 1408.661666][T14809] EXT4-fs error (device loop6): ext4_readdir:223: inode #11: comm syz-executor: path /521/mnt/lost+found: directory fails checksum at offset 6144 [ 1408.667073][T14809] EXT4-fs error (device loop6): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 1409.263697][T14029] device hsr_slave_0 left promiscuous mode [ 1409.308069][T27796] EXT4-fs (loop6): unmounting filesystem. [ 1409.320986][T14029] device hsr_slave_1 left promiscuous mode [ 1409.398678][T14029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1409.399971][T14029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.401645][T14029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1409.402849][T14029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1409.404231][T14029] device bridge_slave_1 left promiscuous mode [ 1409.405296][T14029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.439067][T14029] device bridge_slave_0 left promiscuous mode [ 1409.440069][T14029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.558649][T14029] device veth1_macvtap left promiscuous mode [ 1409.559743][T14029] device veth0_macvtap left promiscuous mode [ 1409.560709][T14029] device veth1_vlan left promiscuous mode [ 1409.561606][T14029] device veth0_vlan left promiscuous mode [ 1411.724178][T14029] team0 (unregistering): Port device team_slave_1 removed [ 1411.909333][T14029] team0 (unregistering): Port device team_slave_0 removed [ 1412.069820][T14029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1412.309726][T14029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1413.860561][T14029] bond0 (unregistering): Released all slaves [ 1414.711666][T27577] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1414.730154][T27577] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1414.750117][T27577] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1414.801268][T27577] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1414.831178][T27577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1414.834652][T14977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1414.836231][T14977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1414.839977][T27577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1414.842437][T14977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1414.844037][T14977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1414.845416][T14977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.846557][T14977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1414.847822][T14977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1414.856258][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1414.857737][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1414.859676][T14649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.860778][T14649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1414.864322][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1414.867679][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1414.880823][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1414.883091][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1414.884754][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1414.942889][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1414.944574][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1414.949714][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1414.951332][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1414.956343][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1414.957900][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1414.965827][T27577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1415.067666][T27577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1415.070026][T14029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1415.071351][T14029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1415.181824][T14029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1415.183486][T14029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1415.225027][T27577] device veth0_vlan entered promiscuous mode [ 1415.227991][T27577] device veth1_vlan entered promiscuous mode [ 1415.230498][T14977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1415.232162][T14977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1415.233720][T14977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1415.236326][T14977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1415.237672][T14977] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1415.286187][T14977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1415.289426][T14977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1415.290953][T14977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1415.293648][T27577] device veth0_macvtap entered promiscuous mode [ 1415.295930][T27577] device veth1_macvtap entered promiscuous mode [ 1415.301905][T27577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.303633][T27577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.305664][T27577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1415.306869][T14029] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1415.308355][T14029] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1415.311238][T14029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1415.312646][T14029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1415.315602][T27577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1415.317235][T27577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.323062][T27577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1415.325606][T14029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1415.327285][T14029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1415.331077][T27577] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.332302][T27577] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.333628][T27577] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.334860][T27577] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.393002][T14649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.394291][T14649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.395613][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1415.410485][T14649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.411737][T14649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.413032][T14649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1415.453088][ T4389] tipc: Left network mode [ 1415.503819][ T8088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1415.540003][T27955] loop9: detected capacity change from 0 to 256 [ 1415.541391][T27955] exfat: Unknown parameter '01777777777777777777777˙0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙' [ 1415.550026][ T8088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1415.552403][ T8088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1415.554021][ T8088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1415.556163][ T8088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1415.557532][ T8088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1415.568302][T27959] loop0: detected capacity change from 0 to 128 [ 1415.574131][T27818] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1415.629785][T27959] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1415.651938][T27967] netlink: 'syz.4.4557': attribute type 3 has an invalid length. [ 1415.653195][T27967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4557'. [ 1415.665138][T27959] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1416.068417][T17632] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /372/mnt/lost+found: directory fails checksum at offset 6144 [ 1416.082650][T17632] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 1416.087205][T17632] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /372/mnt/lost+found: directory fails checksum at offset 6144 [ 1416.092060][T17632] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 1416.099445][T17632] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /372/mnt/lost+found: directory fails checksum at offset 6144 [ 1416.115829][T17632] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 1416.126488][T17632] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /372/mnt/lost+found: directory fails checksum at offset 6144 [ 1416.136561][T17632] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 1416.147424][T17632] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /372/mnt/lost+found: directory fails checksum at offset 6144 [ 1416.160403][T17632] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 1416.179756][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 1416.180776][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 1416.196997][T27990] loop4: detected capacity change from 0 to 128 [ 1416.360600][T27973] EXT4-fs (loop0): unmounting filesystem. [ 1416.467027][T28003] loop9: detected capacity change from 0 to 1024 [ 1416.498894][T28003] hfsplus: unable to parse mount options [ 1416.539347][T28014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.541508][T28014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.551643][T27824] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1416.605599][T27948] chnl_net:caif_netlink_parms(): no params data found [ 1416.642455][T28021] loop8: detected capacity change from 0 to 128 [ 1416.653070][T28021] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1416.726306][T28021] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1416.975234][T18211] EXT4-fs (loop8): unmounting filesystem. [ 1417.027890][ T4331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1417.031680][ T4331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1417.034157][ T4331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1417.035616][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1417.037056][ T4331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1417.039057][ T4331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1417.075338][T27948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.095611][T27948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.097295][T27948] device bridge_slave_0 entered promiscuous mode [ 1417.118067][T28038] Bluetooth: MGMT ver 1.22 [ 1417.136709][T27948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.145287][T27948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.146967][T27948] device bridge_slave_1 entered promiscuous mode [ 1417.191738][T28048] loop8: detected capacity change from 0 to 1024 [ 1417.217624][T28048] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1417.232903][T27948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1417.235721][T27948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1417.250947][T28048] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c018, mo2=0003] [ 1417.252328][T28048] System zones: 0-1, 3-12 [ 1417.253422][T28048] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1417.285345][T28048] EXT4-fs (loop8): shut down requested (1) [ 1417.341442][T18211] EXT4-fs (loop8): unmounting filesystem. [ 1417.380877][T27948] team0: Port device team_slave_0 added [ 1417.388217][T28061] loop9: detected capacity change from 0 to 512 [ 1417.391747][T27948] team0: Port device team_slave_1 added [ 1417.402907][T27948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.404161][T27948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.411556][T27948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.425630][T28061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1417.619457][ T4345] Bluetooth: hci1: command 0x0409 tx timeout [ 1417.712672][T28061] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #2: comm syz.9.4578: missing EA_INODE flag [ 1417.718010][T28028] chnl_net:caif_netlink_parms(): no params data found [ 1417.725431][T27948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.726701][T27948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.731209][T27948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.746600][T28061] EXT4-fs (loop9): Remounting filesystem read-only [ 1417.749529][T28061] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.4578: error while reading EA inode 2 err=-117 [ 1417.752642][T28061] EXT4-fs (loop9): Remounting filesystem read-only [ 1417.753785][T28061] EXT4-fs (loop9): 1 orphan inode deleted [ 1417.754689][T28061] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1417.770272][T27577] EXT4-fs (loop9): unmounting filesystem. [ 1417.811402][T28070] loop8: detected capacity change from 0 to 128 [ 1417.824215][T28070] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1417.864812][T18211] EXT4-fs (loop8): unmounting filesystem. [ 1417.970840][T28028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.972084][T28028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.973617][T28028] device bridge_slave_0 entered promiscuous mode [ 1418.010722][T27948] device hsr_slave_0 entered promiscuous mode [ 1418.048936][T27948] device hsr_slave_1 entered promiscuous mode [ 1418.089725][T28028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.090989][T28028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.092508][T28028] device bridge_slave_1 entered promiscuous mode [ 1418.175080][T28028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.201852][T28028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.216327][T28081] loop8: detected capacity change from 0 to 256 [ 1418.226498][T28081] exfat: Deprecated parameter 'namecase' [ 1418.240159][T28081] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1418.471603][T28095] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4587'. [ 1419.138594][ T4345] Bluetooth: hci3: command 0x0409 tx timeout [ 1419.143744][T14029] wlan1: Trigger new scan to find an IBSS to join [ 1419.178542][T14029] ------------[ cut here ]------------ [ 1419.179674][T14029] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 1419.181357][T14029] WARNING: CPU: 0 PID: 14029 at net/mac80211/rate.c:385 __rate_control_send_low+0x5a0/0x7a4 [ 1419.182772][T14029] Modules linked in: [ 1419.183373][T14029] CPU: 0 PID: 14029 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 1419.184561][T14029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 1419.186120][T14029] Workqueue: events_unbound cfg80211_wiphy_work [ 1419.187079][T14029] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 1419.188253][T14029] pc : __rate_control_send_low+0x5a0/0x7a4 [ 1419.189146][T14029] lr : __rate_control_send_low+0x5a0/0x7a4 [ 1419.190005][T14029] sp : ffff800021417350 [ 1419.190727][T14029] x29: ffff8000214173b0 x28: dfff800000000000 x27: ffff0000e01cb370 [ 1419.191968][T14029] x26: 000000000000000c x25: 000000000000000c x24: dfff800000000000 [ 1419.193168][T14029] x23: 0000000000000020 x22: ffff0000e01cb378 x21: ffff0000e735b528 [ 1419.194416][T14029] x20: ffff0000e01c8e80 x19: 00000000ffffffff x18: 1fffe00033e7277e [ 1419.195657][T14029] x17: 6d5f65746172206e x16: ffff800011b90510 x15: 62202c6666666666 [ 1419.196869][T14029] x14: 0000000000000001 x13: 1fffe00033e727a3 x12: 0000000000000000 [ 1419.198091][T14029] x11: ff00800008195f70 x10: 0000000000000000 x9 : bef9dc4b755bae00 [ 1419.199273][T14029] x8 : bef9dc4b755bae00 x7 : ffffffffffff8b98 x6 : ffffffffffff8b48 [ 1419.200487][T14029] x5 : ffff800021416dd8 x4 : ffff800015447e10 x3 : ffff800008540da0 [ 1419.201726][T14029] x2 : 0000000000000001 x1 : 0000000000000200 x0 : 0000000000000000 [ 1419.202985][T14029] Call trace: [ 1419.203473][T14029] __rate_control_send_low+0x5a0/0x7a4 [ 1419.204365][T14029] rate_control_send_low+0x168/0x688 [ 1419.205168][T14029] rate_control_get_rate+0x1a0/0x4c8 [ 1419.205938][T14029] ieee80211_tx_h_rate_ctrl+0x8ec/0x12fc [ 1419.206798][T14029] invoke_tx_handlers_late+0xa0/0x1358 [ 1419.207654][T14029] ieee80211_tx+0x258/0x3d4 [ 1419.208377][T14029] ieee80211_xmit+0x274/0x348 [ 1419.209064][T14029] __ieee80211_tx_skb_tid_band+0x464/0x5a0 [ 1419.209887][T14029] ieee80211_scan_state_send_probe+0x4b0/0x80c [ 1419.210790][T14029] ieee80211_scan_work+0x36c/0x1788 [ 1419.211602][T14029] cfg80211_wiphy_work+0x1e0/0x220 [ 1419.212359][T14029] process_one_work+0x7e4/0x13bc [ 1419.213070][T14029] worker_thread+0x8cc/0xfe8 [ 1419.213757][T14029] kthread+0x254/0x2e0 [ 1419.214331][T14029] ret_from_fork+0x10/0x20 [ 1419.215003][T14029] irq event stamp: 4069337 [ 1419.215685][T14029] hardirqs last enabled at (4069336): [] __up_console_sem+0xb4/0xfc [ 1419.217026][T14029] hardirqs last disabled at (4069337): [] el1_dbg+0x24/0x80 [ 1419.218362][T14029] softirqs last enabled at (4069282): [] ieee80211_configure_filter+0x52c/0xe8c [ 1419.219941][T14029] softirqs last disabled at (4069314): [] local_bh_disable+0x10/0x34 [ 1419.221380][T14029] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1419.688534][ T4345] Bluetooth: hci1: command 0x041b tx timeout [ 1421.208656][ T4331] Bluetooth: hci3: command 0x041b tx timeout [ 1421.768574][ T4331] Bluetooth: hci1: command 0x040f tx timeout [ 1421.799598][ T4389] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1423.100652][ T4389] bond0 (unregistering): Released all slaves [ 1423.288549][ T4331] Bluetooth: hci3: command 0x040f tx timeout [ 1424.098669][ T39] wlan1: Trigger new scan to find an IBSS to join [ 1425.028588][ T4855] wlan1: Creating new IBSS network, BSSID 1e:db:86:f3:da:3b [ 1425.605489][ T4389] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.700727][ T4389] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.809689][ T4389] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.901016][ T4389] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.088639][ T39] wlan1: Trigger new scan to find an IBSS to join [ 1426.092891][ T4389] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.169878][ T4389] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.249881][ T4389] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.329925][ T4389] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.521540][ T4389] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.599792][ T4389] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.679798][ T4389] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.759763][ T4389] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.954575][ T4389] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.029908][ T4389] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.109782][ T4389] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.212970][ T4389] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.788551][ T4389] tipc: Left network mode [ 1428.168547][ T4389] tipc: Left network mode [ 1428.348567][ T4389] tipc: Left network mode [ 1429.128854][T14649] wlan1: Trigger new scan to find an IBSS to join