last executing test programs: 2m58.230980584s ago: executing program 0 (id=134): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_destroy(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x6, 0x7ffc1ffc}]}) bpf$LINK_DETACH(0x22, &(0x7f0000000080), 0x4) 2m58.135367655s ago: executing program 0 (id=135): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, r3, 0x0, 0x46) 2m58.118754885s ago: executing program 0 (id=137): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) 2m57.976440527s ago: executing program 0 (id=142): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0, 0x0, 0x8}, 0x18) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000980)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x36, 0x6a}, 0x0, 0x0, 0x7, 0x7, 0x2, 0x1000, 0xfffffffffffffff8, 0x9, 0x3, 0x8}) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0)="88", 0x1, 0xd0, &(0x7f0000000480)={0xa, 0x4e60, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffff37}, 0x1c) r1 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000700)=ANY=[], 0x381, 0x2) 2m57.499870895s ago: executing program 0 (id=154): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0xffff8000, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kmem_cache_free\x00', r2, 0x0, 0xd22}, 0x17) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 2m56.093064138s ago: executing program 0 (id=162): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x1, 0x3}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) 2m55.757706393s ago: executing program 32 (id=162): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x1, 0x3}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) 27.744564746s ago: executing program 3 (id=1269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mq_timedreceive(r0, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, 0x0) 26.304895368s ago: executing program 3 (id=1275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f00000006c0)=ANY=[], 0xffdd) 22.678552347s ago: executing program 2 (id=1285): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) rt_sigsuspend(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) 21.759195102s ago: executing program 2 (id=1286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x338c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3360, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_ACT={0x3304, 0x1, [@m_ife={0x54, 0x6, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x6}]}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x8, 0x6, "1d49a5e3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x1064, 0xa, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x11c, 0x16, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x3, 0x10000000, 0x0, 0x1}, @multicast2, @multicast2, 0xffff00}}]}, {0xcc, 0x6, "d21cdd1cbdf1abe8fd615cc15d0b17cd57eba849a669915926355c504ac357b3f4ac1b0c70bab164b07b45475526b9979da4c9d055ab77e9ccafc2f06e1a4f24c1da9ec105a8374fb0efa14fbdf5f01f7711407426f814d07853ed320ff1d03954d299e01c8ea17b8359cac637f15cd1ece341c0fbceb0822dd821514435979221b1b2c473677d3eee85e0b7769c30f82a09bdd558d9feeb106589899d61b17f434360b9ad6658c0b0e47503d810a948ac34648673f1850c0dd831a8eb189c29c3fc0802420ed5f0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ct={0xf4, 0xa, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x6}]}, {0xc4, 0x6, "0c407c9f5e221b4210ff2c35b79d63890219080e2d404ec49deeb64a584bc327efdf71824479429276daee094a03cd75dbd8d9fdd74562afee62d90c37ad05c2037c360b1479f257180caf9600b4133094225df974704437cd473795ce2097abe5b3d9f4849c9ef9ebe6ef059258196ff603fad0cbb8d7e63400be2977605b507bc869fc271e769f605772b979ff9421c862548a42c9675ef2a896c63195289c17e2d1e27c58c677298c3fd3e41a65e37b6c3cd120b4966ab31ac21d98438f50"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x120, 0x1a, 0x0, 0x0, {{0xb}, {0xb0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x6, 0x4, 0x5, 0xc}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xbfed, 0x7, 0x401, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x9, 0x7, 0x9, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0x7, 0x3, '$&\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x4, 0x8, 0x9, 0x1800000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xfffffeff, 0x8, 0x2, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5e22, 0x3, 0x20000000, 0x2, 0x40}}]}, {0x45, 0x6, "bb3ea1f20d5688d5126d3bd2df9cfa01c939194e56d0c39c6fbdbfb84f167b272feddf8445a6b57373c459b508a5ab6e518a98adfc8821892a5cfcc74d9a4ecbb2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x1d4, 0x20, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x7, 0x4, 0x3, 0x4}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xe83a, 0x1, 0x10000, 0xdae}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x7, 0x3, 0x7, 0x3}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x60, 0x4, 0x20000000, 0x1, 0x3}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x10000000, 0x3, 0x407e}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x10000000, 0x2, 0x4f5c0c77}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x0, 0xa, 0x4}, 0x6b}}]}, {0xe1, 0x6, "fb76fc4099a3bdd65b1db6f52dcdec889c66e8a05f3548b16a9eace5c7fa3c900182ceb07005ad1972cc82c2b8250a59c0664bffbd84fd55f8045e77371f260554baa9a4e708b4bef51e2b09becf0bdd4d2a620995217ffc16436dcd11152078190f710ebe6cf269f13ae9c56f49b3e7b0dcdd2a7aed4b45533c9351756750451bba24466d12a7b536f14af461bbc3de8267d40ef7dc4dc6d1e027d899d653fb1dd062b9f59b027f00e12e702a68452645a0ea2ca0f16d0673f9674cc4c9426dfc33fe02e48f74d0ee4e7bdd9ff86481b97f7b695c77b07eb55bca54d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}, @m_police={0x1d44, 0x96d, 0x0, 0x0, {{0xb}, {0x1c44, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x80000001, 0x2, 0x9, 0x1, 0x7, 0x81, 0xff, 0x387, 0x4, 0xff, 0x9, 0x2, 0xe, 0x7, 0x80, 0xcb66, 0x8, 0x0, 0x2, 0x3, 0x6, 0x4, 0x95, 0x3, 0x10, 0x5, 0xff, 0x80000000, 0x0, 0x6, 0x100, 0x1, 0x7f36, 0x80000000, 0x20, 0x0, 0x9, 0x9, 0x5, 0x2, 0x3, 0xa12e, 0x2, 0x200, 0x5, 0x3, 0x7, 0x81, 0xcb5, 0x3, 0x0, 0x13, 0x0, 0x0, 0x218, 0x7f, 0xcc, 0x4f7, 0x5, 0x4, 0x1, 0x6f03af4f, 0x0, 0x9, 0x6, 0x4, 0x9, 0x3ff, 0x8, 0x52e, 0x5, 0x8, 0xffffff81, 0xff, 0x0, 0xffffff81, 0xffffecef, 0x5, 0xfffffff7, 0x3, 0x2, 0xca85, 0x8, 0xca, 0xffffffff, 0x7, 0x5e79ac64, 0x4000000, 0x1ff, 0x0, 0x0, 0x4, 0xc0000, 0x9cb, 0xb6f, 0x1000, 0x5, 0xfffffffe, 0x8, 0x5, 0x6, 0x4, 0xfffffc6f, 0x7fffffff, 0x1, 0x8, 0x8, 0x1, 0x80, 0x2, 0x3, 0x144c, 0xaa81, 0x5, 0x7, 0x8, 0x8001, 0x2, 0xffff, 0x3, 0x5, 0x5, 0xc, 0xfffffffe, 0x5, 0xfffffff5, 0x2, 0x800, 0x1, 0x80000001, 0x0, 0x0, 0x2, 0x1, 0x660, 0x5, 0x0, 0x3, 0xfffffffc, 0xc, 0x7, 0x0, 0x6, 0xea69, 0x9, 0x26, 0x5, 0x0, 0x3, 0x35e7, 0xef, 0x6, 0x8, 0x4, 0x80000000, 0x9, 0x31, 0xb, 0xe393, 0x2, 0x401, 0x7, 0x1469, 0x904, 0x9, 0x5, 0xc, 0x6520, 0x8, 0x8, 0x9, 0x401, 0x1ff, 0x3ff, 0x3, 0x3, 0xfc46, 0x3, 0x8, 0x80000001, 0xff, 0x7, 0x1, 0xfff, 0xa, 0x8, 0x9, 0x3, 0x6, 0x3, 0xb45, 0x0, 0x7ff, 0x81, 0xe, 0x8, 0x2, 0x1, 0x3, 0xffff, 0x4, 0x6, 0xe8df, 0x7, 0x101, 0x6e, 0x0, 0x200, 0xd, 0x9, 0x2, 0x401, 0x4, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0xc, 0x10000, 0x80000001, 0x1, 0x1, 0xfffffffa, 0xffffffff, 0x6, 0x200, 0x7, 0x3, 0x4d3d, 0xfffffffd, 0x80000000, 0x7ff, 0x2, 0xb, 0x5, 0x9, 0x8001, 0x9c2, 0x8, 0x7fff, 0x6, 0x2, 0x4, 0x0, 0x6, 0x80, 0x5ef, 0x8, 0x8, 0x3, 0x9, 0x101, 0xe]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x55, 0x8, 0x5, 0x5f, 0x3d4f, 0x1, 0x0, 0x3, 0x40, 0x8, 0x3, 0x81, 0x2, 0x100, 0x125, 0x1a959f59, 0x1, 0x323c, 0x9, 0x6, 0x4, 0x101, 0x979, 0x2, 0x1, 0x2, 0x5, 0xb, 0x3, 0xfffffff8, 0x4569, 0x2f6, 0x80000000, 0x8, 0x200, 0x101, 0x3, 0x81, 0x4, 0xc, 0x5, 0x6, 0x9, 0xfffffffd, 0xd, 0x2, 0xa, 0x4, 0x9, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x8000, 0x5, 0x1, 0x3, 0x401, 0x3, 0x9, 0x5, 0x9e, 0x0, 0x8, 0xa, 0x3, 0x7, 0x4, 0x2, 0x6, 0xfff, 0x2, 0xd, 0x9, 0x7, 0x4, 0x5fd, 0x3, 0x2, 0x4, 0x0, 0x7ff, 0x9, 0x2, 0x9, 0x3, 0x100, 0x3ff, 0x3, 0x2, 0x3, 0x6, 0x0, 0x2, 0x2, 0x4, 0x80, 0xd0, 0x5, 0x9, 0xe, 0x2, 0x7, 0x8001, 0xe46, 0xe, 0x1, 0x6, 0x1, 0x8, 0x40, 0x5, 0xe, 0x5, 0x80000001, 0x0, 0x7ff, 0x521, 0x3, 0x10, 0xffffffff, 0x8, 0x3, 0xb, 0x8, 0x3, 0x374a, 0xfffffffb, 0x8000, 0x80000001, 0x8000, 0x7, 0x10000, 0x9, 0xcfd, 0x4, 0xe, 0x1, 0x5, 0xe, 0x3, 0x7, 0x8, 0x9, 0x1, 0x5, 0x7ff, 0x42d, 0x61, 0x101, 0x9, 0x58a16a01, 0x7, 0x7, 0x7, 0x10001, 0xb5, 0xfff, 0xb, 0x1, 0xff, 0x578b, 0xa506, 0x80000001, 0x7fff, 0x17, 0x3, 0x80000001, 0x81, 0x4, 0xdc, 0x3, 0x7ff, 0xde, 0x80, 0x3, 0x2, 0x2, 0x6, 0x1000, 0x5, 0x80000001, 0x8000, 0x7, 0x6, 0x4, 0x3, 0xc2, 0x2, 0x7ff, 0x8, 0x7, 0x8, 0xe53, 0x54, 0x6, 0x10000000, 0x6, 0x4, 0x2, 0x0, 0x40, 0x8, 0xfffffffe, 0x9, 0x81, 0x582, 0x5, 0x6, 0x6, 0x3, 0x7, 0x9, 0x602, 0xe48, 0x77, 0x2, 0x14, 0x6, 0x60, 0x5, 0x6, 0x6f9e, 0xffffffff, 0x3e07, 0x8001, 0x7, 0x3, 0x3, 0x0, 0x1, 0xffffff70, 0x2, 0x7, 0x7, 0x2, 0x8, 0x100, 0x2b57, 0x5b1, 0x1, 0x4, 0x3, 0xffff, 0xa, 0xa, 0x9, 0x7, 0x2, 0x0, 0x4, 0x400, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x6, 0x0, 0x5, 0x3, 0x9, 0x7, 0x4f, 0x6, 0x37c, 0x5, 0x0, 0x1, 0xcd, 0x7, 0x1, 0xffffffff, 0xa, 0xc, 0x6, 0x40000000, 0x8000, 0x3, 0x0, 0xfffffff3, 0x7ff, 0x1, 0x6, 0x1000, 0x8, 0x7, 0x1, 0x5, 0x7fff, 0x4, 0xfffffffc, 0x4, 0x2, 0xee, 0x4, 0xf1, 0x8, 0xa60, 0xe0f, 0xc, 0x5, 0x4, 0x6, 0x5, 0x6, 0x8, 0x5, 0xffff, 0x3, 0xa942, 0x4, 0xa, 0x2, 0x60, 0xb4fe, 0x6, 0xfffffffe, 0x7, 0x0, 0x6, 0x80000000, 0x59de, 0x654, 0xc, 0xb5a, 0xc7b, 0x9, 0x4, 0xfffffffe, 0x7, 0x6, 0x2, 0x9, 0x6, 0xe0, 0x3, 0x7, 0x7, 0x7, 0x1, 0xb0, 0x5, 0x9, 0xfffffff7, 0x2, 0x29, 0x10000, 0x0, 0x6, 0x8, 0x5, 0x7f, 0x8000, 0xb68, 0x10, 0x6, 0xfffffff9, 0x5, 0x1d, 0x8, 0x6, 0x6, 0xf98, 0xa, 0x0, 0x2a, 0x7, 0x8cb, 0x2, 0xffffffff, 0x9, 0x8, 0x5, 0xffff3e24, 0x1, 0xb8c8, 0xb, 0xff, 0xff, 0x7, 0x7847, 0x8, 0x3, 0x80000001, 0x9, 0x4, 0x6a, 0x3, 0x81, 0x7, 0x7fffffff, 0x8, 0x37, 0x7, 0x7ff, 0xc4, 0xb5d6, 0xfffffc01, 0x4, 0x1, 0x6, 0x1, 0x8001, 0x621, 0x8, 0xfffff957, 0x0, 0x3, 0x9, 0x8, 0x1, 0x80000000, 0xfb, 0x2, 0x7, 0x1000, 0x5, 0x7fffffff, 0x40, 0x4, 0xfffffffd, 0x7, 0xa5e08296, 0xd29c, 0xcffc, 0x0, 0x3, 0x0, 0x9, 0xd, 0x80000001, 0x0, 0x10001, 0x401, 0x1, 0x401, 0xffffffff, 0x6, 0x2, 0xb, 0x1, 0x9, 0x0, 0x6, 0x3, 0x400, 0x0, 0x3ff, 0x7, 0x8, 0x0, 0x9, 0x2, 0xffff, 0x7, 0x9, 0xc5, 0x5a, 0x0, 0xbb, 0xbc, 0x0, 0x13, 0x4304645d, 0xa2ea, 0x8001, 0x12, 0x5, 0x62fa, 0xc5, 0x80000001, 0x3, 0x2, 0x2, 0x2, 0x4, 0x1, 0x4, 0xf3a, 0x1c2, 0xff, 0x5, 0x1000, 0x0, 0x9, 0x9, 0x401, 0x5, 0x7fffffff, 0x5, 0x7ff, 0x1, 0x5, 0x3, 0x60, 0xfffffffe, 0x5, 0xffff1e68, 0x8f71, 0x1000, 0x56, 0x7, 0x0, 0xfffffffb, 0x1, 0x3ff, 0x5, 0x37, 0x2, 0x6, 0xfffffff8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3, 0x2, 0x7, 0x5, 0xa, 0x80000001, 0x5, 0xfa, 0x32, 0x73d, 0xffffff00, 0x6dd, 0x4, 0x7, 0x10001, 0x58f, 0x4, 0x5, 0x8, 0x7ff, 0x2, 0xaad, 0xfffffffe, 0x9, 0x2, 0x9, 0x4, 0x66119c00, 0x4, 0x0, 0x4, 0x0, 0x2, 0x7ff, 0x66b, 0xa4, 0x5, 0x4, 0x2, 0x7fffffff, 0x6, 0x400, 0x7, 0xfffffffd, 0x7, 0x3, 0x3, 0xfc10, 0xc7d, 0x0, 0x0, 0x6, 0x400, 0x8001, 0x6, 0x6, 0x7f, 0x4, 0x80000000, 0x47, 0x0, 0x6da, 0xfffffffa, 0xc, 0xc315, 0x8, 0x6, 0x2, 0x0, 0x7, 0x7, 0x10000, 0x2, 0x7, 0x3, 0x3000, 0xb3bd, 0x4, 0xfffffffe, 0x80000000, 0x7, 0x5, 0x0, 0x0, 0x458, 0x9, 0x3, 0x3ff, 0x9, 0x8, 0x4d, 0x7, 0x2, 0x5, 0x7fff, 0x9, 0x8, 0x380, 0x8, 0x6, 0x4, 0x2, 0xfffffffc, 0x3ff, 0x0, 0xf, 0x7, 0x6d, 0x1, 0x40, 0x5, 0x0, 0x400, 0x4, 0x2fb0b96, 0x5, 0x8, 0x400, 0x0, 0x2, 0xfffffffa, 0x10000, 0x8, 0x100, 0x8, 0x8, 0x7, 0x90, 0xaca5, 0x10000, 0x1, 0x5, 0x5, 0x7ff, 0x7, 0x1000000, 0x7, 0x8, 0x6, 0x9, 0xfffffffd, 0x1, 0xa, 0x0, 0x400, 0x5, 0x7, 0x4, 0x7fff, 0x80000000, 0x80000001, 0x9, 0x3, 0x3, 0x0, 0x100, 0x0, 0x7, 0x2, 0x8, 0x91, 0xffff, 0x8, 0xacbc, 0x2, 0x4, 0x81, 0xd, 0x7, 0x4, 0x0, 0x800, 0x1d, 0x2, 0x2, 0x6, 0x3, 0x10, 0x2, 0x9, 0xb48, 0x40, 0x5, 0xe, 0x81, 0x3ff, 0x80, 0x4, 0x7, 0xfffffffd, 0x10001, 0x3, 0x7, 0xfffffeff, 0xfffff147, 0x2, 0x3, 0x2, 0x0, 0x0, 0xb4, 0x7ff, 0x4, 0xa8, 0x0, 0x0, 0x2, 0x81, 0x1, 0x6, 0x1, 0x2, 0x9, 0x3, 0x41, 0x5, 0x6, 0x400, 0xfffffff7, 0x21d, 0x3, 0xfffffffa, 0x8000, 0x946, 0x6, 0x7, 0x5, 0x8b, 0x1, 0x4, 0x9d, 0x2, 0x0, 0x8, 0x8000, 0x0, 0x73, 0x4, 0x7, 0xfffffff6, 0x0, 0x7, 0xe, 0x3, 0x5, 0xfffffffe, 0x2, 0xe, 0x0, 0x5, 0x7006, 0x8, 0x6, 0x8, 0x81]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8203}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0x3, 0x1000, 0x80, 0x2, 0x7fff, 0x9b, 0x4, 0x894, 0x8, 0x3, 0x8, 0x3, 0x1, 0x7, 0x7, 0x8, 0xfffffffb, 0x2c907d61, 0x8, 0x4, 0x401, 0x0, 0x0, 0x4, 0x35, 0x7fffffff, 0x7, 0xd, 0x1, 0x3, 0x3ff, 0x4d, 0x1, 0x87, 0x3, 0xb, 0x7, 0xc7a, 0x4, 0x98, 0x9, 0x1, 0xfffffffd, 0x2, 0x80000000, 0x10, 0x5, 0x8, 0x1f, 0x8, 0x3, 0x9, 0xfffffff1, 0x6, 0xffffffff, 0x74df, 0x2, 0x1, 0x7fff, 0x8, 0xa, 0xd, 0xfff, 0x0, 0x7fff, 0x3, 0x9, 0x100, 0x1, 0x9d9, 0x3, 0x7, 0x2, 0x6, 0x0, 0x4, 0x8, 0x4, 0x3, 0x9, 0x5, 0x8, 0x2, 0x7, 0x548, 0xd, 0x1, 0x2, 0x7, 0x800, 0x10001, 0xa8, 0x8, 0x10001, 0x1fffc000, 0x0, 0xb, 0x8221, 0x9, 0x5, 0x71a, 0x3, 0x3, 0x633, 0x3, 0x7fffffff, 0x2, 0x2, 0x9, 0xc541, 0x4, 0x1ff, 0x1, 0x4, 0x100, 0x4, 0x8, 0x0, 0x6000000, 0xfffffffb, 0x80, 0x9, 0x8, 0x7fffffff, 0x0, 0x4, 0x4, 0x200, 0x9, 0x0, 0xfffffff6, 0x3, 0x1, 0xa1, 0x0, 0xffffffff, 0xcd9, 0x7, 0x9, 0x0, 0x89, 0x617f97d5, 0x5, 0xb59, 0x0, 0x1, 0xfff, 0x4, 0xfffffff7, 0x541, 0x4, 0x9, 0x6, 0x7, 0x5, 0x401, 0x100, 0xa0a4, 0xf, 0x9, 0x2, 0x7, 0x5, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x4, 0x8000, 0xffffffff, 0x6, 0x4, 0x5, 0x7fffffff, 0x45b4, 0x4, 0x9d, 0xf9, 0x80, 0x1, 0x80, 0x6, 0x68ab000, 0x7ff, 0x1ff, 0x4, 0xfffffffb, 0x5, 0x0, 0x1ff, 0x8, 0xfffffffb, 0xed0f, 0x4, 0x2, 0x0, 0x6, 0x4e, 0x1000, 0x5, 0x7fff, 0x74a15d52, 0x0, 0x0, 0x3, 0x81, 0x7fffffff, 0x0, 0x0, 0xee23, 0x7ff, 0x0, 0x2, 0x9, 0x86, 0x9, 0x7, 0xc4, 0x7fff, 0xfffff6fb, 0x4, 0x4, 0x4, 0x6, 0x4, 0x3, 0xf, 0x68, 0x1, 0x0, 0x10, 0x6, 0x3, 0x6, 0x9, 0x30, 0x8, 0x9, 0x800, 0x401, 0x6, 0x4, 0x5, 0x1, 0xe, 0x5, 0x4, 0xda, 0x8000, 0x1, 0x6, 0xffffffbf, 0x5, 0xd6e]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3e8000, 0x8001, 0x25, 0x80000001, 0x7, 0x7, 0x1, 0x3, 0xd0, 0x4, 0x4, 0xffffcf6a, 0x8001, 0xfff, 0xffff, 0x8, 0x8, 0x6, 0x8, 0x200, 0x0, 0x51a, 0x4, 0x7, 0x5, 0x10001, 0x4, 0xe821, 0x63, 0x6, 0xffffffff, 0x8, 0xf, 0xa47b, 0x7, 0xffff0000, 0x1d3, 0x44, 0x5, 0x9, 0xfe, 0x7, 0x7, 0x9, 0x5, 0x2, 0x1, 0x9, 0x1, 0x2, 0x2, 0x0, 0x4, 0x7, 0x8, 0x3, 0x4, 0xe6b, 0x6, 0xb4, 0x3, 0x5, 0x9bfd, 0xf9, 0xffffffff, 0x4, 0x7b80, 0xfffffffa, 0x4, 0x9734, 0x4, 0x8, 0x8, 0x3, 0x8, 0x80000001, 0x6, 0x1, 0x2, 0x8000, 0x1ff, 0x0, 0x8, 0x5, 0x1, 0x9, 0x0, 0x5b, 0x5, 0x3, 0x5, 0x5963, 0x6, 0x6, 0xffffff01, 0x2, 0x1, 0xfffffffc, 0x200, 0x13f5, 0x7fff, 0x3, 0x400, 0x4, 0x647a, 0x0, 0x6c5, 0x1, 0x4, 0x9, 0x4, 0x3, 0x5, 0x7, 0x2, 0x8001, 0x6, 0xffffffff, 0xfffffffb, 0x0, 0x1, 0x4, 0x100, 0x4, 0x3, 0xfffffff9, 0x644, 0x5f, 0x7ff, 0xd6, 0x200, 0x6, 0x8, 0x9, 0x7, 0x8000, 0x8, 0x1, 0x40, 0x200, 0x7, 0x75, 0xffff21e5, 0x4, 0x33, 0x6, 0x3, 0x45a, 0x2, 0x3ff, 0x6, 0x9, 0x2, 0x35, 0x94, 0xd9, 0x7fff0, 0x2, 0x4f, 0x4, 0xbd57, 0x80, 0x9, 0xe8, 0xfffffffc, 0x100, 0x5, 0x7fffffff, 0x2, 0x1, 0xff, 0x10, 0x5, 0x3, 0x3, 0x57c, 0x2dc4, 0xfffffffa, 0x2, 0x4, 0x5, 0x4, 0x10000, 0x9, 0xcf, 0x3, 0x4, 0x4, 0x8, 0x2, 0x400, 0x8, 0xfffffff9, 0x5, 0x1, 0x1, 0x1, 0xb, 0x0, 0x1, 0x9, 0x7, 0x9, 0x7fff, 0x9, 0xe, 0x6, 0x8000, 0x6, 0x20, 0x5, 0x4, 0x8, 0x9, 0x8, 0x85, 0xfffffffd, 0x9, 0x6ca, 0x6, 0xf5c, 0x9, 0x0, 0x2, 0xb7, 0x4, 0x1, 0x0, 0x8, 0x8, 0x2, 0x9c, 0x200, 0x9, 0x10, 0xfffffffc, 0x6, 0x3, 0xc, 0x5153, 0x1, 0x2, 0x4, 0x2, 0xa7, 0x71f2, 0x8, 0x887, 0x400, 0x400, 0x4, 0x1, 0x8, 0x5, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x10, 0x0, 0xfff, 0x6, 0x0, 0x74, 0x0, 0xfffffffe, 0x40000000, 0x81, 0xb, 0xdc, 0x0, 0x3, 0x0, 0x7, 0xfffffffa, 0x400, 0x8, 0x1, 0x8, 0x2, 0xfffffff7, 0x45, 0x2, 0x7, 0xe, 0x2, 0x0, 0x5016, 0x3, 0x2, 0xff, 0x2e3, 0x8, 0x38, 0xd, 0x7, 0x4, 0x2, 0xc7d2, 0x5, 0x3, 0x80, 0x101, 0x1ff, 0x7, 0x6, 0x3ff, 0x0, 0x12d, 0x9, 0x4, 0x1, 0x5, 0x8, 0x8, 0x3, 0x9, 0x7b0, 0x5, 0x40, 0x4, 0x8, 0x0, 0x7f, 0x1, 0x7fff, 0x8, 0x5, 0xffffffff, 0x8, 0x5, 0x5, 0xffff2408, 0x0, 0xb, 0x8000, 0x7, 0x98, 0x3ff, 0x5, 0x1, 0xfc, 0x80, 0xd0c, 0x21aa, 0x2, 0x1dccefdd, 0x724, 0x4, 0xa, 0x6c, 0x4, 0x4, 0xfffffffc, 0x0, 0x8, 0x8, 0x4, 0x3, 0x5, 0x0, 0x3ff, 0x4, 0xffffffff, 0x9, 0x5, 0x9, 0x6, 0x8, 0x1, 0x4, 0x7fff, 0x7fffffff, 0x3, 0x0, 0xffffffff, 0x1, 0xc429, 0xfffffffa, 0xfffff001, 0x7, 0x8, 0x5, 0x2, 0xc3aa, 0x7ff, 0x3ff, 0x200, 0x2, 0x1, 0x6, 0x1, 0x2, 0x6, 0xf, 0x70, 0x7, 0x3, 0x4, 0xfffffffa, 0x0, 0x1, 0xa7ae, 0xfff, 0x8, 0x9, 0x101, 0x2, 0x6, 0x7, 0x9, 0xffff, 0xfa7a, 0x4797, 0xe, 0x3, 0x1, 0x4, 0x2020000, 0x1ff, 0x4, 0x80000001, 0x94da, 0x8, 0x2, 0x0, 0x401, 0xe9, 0x800, 0x80, 0xfffffffe, 0x3, 0x1ff, 0x7bd2, 0x2, 0xffff41a1, 0x8, 0x7a, 0x1, 0x40, 0x4, 0x0, 0x1d, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8, 0x6, 0x5, 0x6, 0x8001, 0x8, 0xf, 0x9, 0x0, 0x5, 0x8a, 0x0, 0x400, 0x6e0, 0x6, 0x8, 0x1, 0x1, 0x3, 0x3, 0x3, 0xad6, 0xb00, 0x80000000, 0x8, 0xffff, 0x200, 0x400000, 0x8001, 0x7, 0x0, 0x978, 0x7, 0x9, 0x7, 0x9, 0x4, 0x3, 0x0, 0x8, 0xa, 0x400, 0xdbc, 0x80000001, 0x0, 0x6, 0xc, 0x1000, 0x643e9050, 0x7, 0x1000, 0xffff, 0x4d, 0x7, 0x3, 0xe0, 0x401, 0x7, 0x6, 0x400, 0x400, 0xdc4, 0x6, 0xc, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]]}, {0xd8, 0x6, "88ff210f2d321b2a6822ff67db1f9b8c41fd67cc8d0af8f2d5dcd7a6d12c13a07a98f934ac1522b4278575b09d458690e73e9b05d7c584fbaab9828e67f86d622a02ecc100812995219a55868068d160d365030b759e6bdec13ef583a818d0ee83b17188457326cde96d77c344a7cbeadf15dd55f465de4395b1326d4e6f71c624dfc823e88aca5dc7249223622a77807bcc4c9f1ba03f0a49dba3187c407025c0345c304611c0f7479e1437d782e8b7e845bf37f70af73f225ffc787163418173121ddb627cb6eaeea8f99f9c50f9bc0bbf072c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x42, 0xf9, 0x49, 0x1000}, {0xc, 0xc, 0x1, 0x8}, {0xf4c6, 0xf9, 0xb, 0x6}, {0x3, 0x6, 0x9, 0x2}, {0x6, 0xd9, 0xac, 0x8}, {0x8, 0xdf, 0x0, 0x5}, {0x400, 0x7, 0xb, 0xa}]}}]}}]}, 0x338c}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 13.852590288s ago: executing program 3 (id=1287): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x800) 13.73289973s ago: executing program 1 (id=1288): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 13.631937782s ago: executing program 2 (id=1290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 13.630954202s ago: executing program 4 (id=1291): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)='%', 0x1}], 0x1}}], 0x1, 0x0) 13.585370672s ago: executing program 1 (id=1292): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) 13.387958115s ago: executing program 5 (id=1293): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x9, 0x800000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x34020840) 13.387178746s ago: executing program 4 (id=1294): add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="0100000000", 0x5, 0x0) 13.384056586s ago: executing program 3 (id=1295): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 13.255723668s ago: executing program 5 (id=1296): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) rt_sigsuspend(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) 13.251883308s ago: executing program 4 (id=1297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x40, 0x8, '9P2000.u'}, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x8000, &(0x7f0000000440)={[{@errors_remount}, {@grpid}, {@init_itable}, {@orlov}, {@grpid}]}, 0x0, 0x63b, &(0x7f0000001bc0)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 12.868027444s ago: executing program 3 (id=1298): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 11.980414998s ago: executing program 4 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f00000006c0)=ANY=[], 0xffdd) 11.85880688s ago: executing program 2 (id=1300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2) 11.803772771s ago: executing program 1 (id=1301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x338c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3360, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file1\x00'}, @TCA_BPF_ACT={0x3304, 0x1, [@m_ife={0x54, 0x6, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x6}]}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x8, 0x6, "1d49a5e3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x1064, 0xa, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x11c, 0x16, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x3, 0x10000000, 0x0, 0x1}, @multicast2, @multicast2, 0xffff00}}]}, {0xcc, 0x6, "d21cdd1cbdf1abe8fd615cc15d0b17cd57eba849a669915926355c504ac357b3f4ac1b0c70bab164b07b45475526b9979da4c9d055ab77e9ccafc2f06e1a4f24c1da9ec105a8374fb0efa14fbdf5f01f7711407426f814d07853ed320ff1d03954d299e01c8ea17b8359cac637f15cd1ece341c0fbceb0822dd821514435979221b1b2c473677d3eee85e0b7769c30f82a09bdd558d9feeb106589899d61b17f434360b9ad6658c0b0e47503d810a948ac34648673f1850c0dd831a8eb189c29c3fc0802420ed5f0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ct={0xf4, 0xa, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x6}]}, {0xc4, 0x6, "0c407c9f5e221b4210ff2c35b79d63890219080e2d404ec49deeb64a584bc327efdf71824479429276daee094a03cd75dbd8d9fdd74562afee62d90c37ad05c2037c360b1479f257180caf9600b4133094225df974704437cd473795ce2097abe5b3d9f4849c9ef9ebe6ef059258196ff603fad0cbb8d7e63400be2977605b507bc869fc271e769f605772b979ff9421c862548a42c9675ef2a896c63195289c17e2d1e27c58c677298c3fd3e41a65e37b6c3cd120b4966ab31ac21d98438f50"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x120, 0x1a, 0x0, 0x0, {{0xb}, {0xb0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x6, 0x4, 0x5, 0xc}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xbfed, 0x7, 0x401, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x9, 0x7, 0x9, 0x1}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0x7, 0x3, '$&\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x4, 0x8, 0x9, 0x1800000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xfffffeff, 0x8, 0x2, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5e22, 0x3, 0x20000000, 0x2, 0x40}}]}, {0x45, 0x6, "bb3ea1f20d5688d5126d3bd2df9cfa01c939194e56d0c39c6fbdbfb84f167b272feddf8445a6b57373c459b508a5ab6e518a98adfc8821892a5cfcc74d9a4ecbb2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x1d4, 0x20, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x7, 0x4, 0x3, 0x4}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xe83a, 0x1, 0x10000, 0xdae}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x7, 0x3, 0x7, 0x3}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x60, 0x4, 0x20000000, 0x1, 0x3}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x10000000, 0x3, 0x407e}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x10000000, 0x2, 0x4f5c0c77}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x0, 0xa, 0x4}, 0x6b}}]}, {0xe1, 0x6, "fb76fc4099a3bdd65b1db6f52dcdec889c66e8a05f3548b16a9eace5c7fa3c900182ceb07005ad1972cc82c2b8250a59c0664bffbd84fd55f8045e77371f260554baa9a4e708b4bef51e2b09becf0bdd4d2a620995217ffc16436dcd11152078190f710ebe6cf269f13ae9c56f49b3e7b0dcdd2a7aed4b45533c9351756750451bba24466d12a7b536f14af461bbc3de8267d40ef7dc4dc6d1e027d899d653fb1dd062b9f59b027f00e12e702a68452645a0ea2ca0f16d0673f9674cc4c9426dfc33fe02e48f74d0ee4e7bdd9ff86481b97f7b695c77b07eb55bca54d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}, @m_police={0x1d44, 0x96d, 0x0, 0x0, {{0xb}, {0x1c44, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x80000001, 0x2, 0x9, 0x1, 0x7, 0x81, 0xff, 0x387, 0x4, 0xff, 0x9, 0x2, 0xe, 0x7, 0x80, 0xcb66, 0x8, 0x0, 0x2, 0x3, 0x6, 0x4, 0x95, 0x3, 0x10, 0x5, 0xff, 0x80000000, 0x0, 0x6, 0x100, 0x1, 0x7f36, 0x80000000, 0x20, 0x0, 0x9, 0x9, 0x5, 0x2, 0x3, 0xa12e, 0x2, 0x200, 0x5, 0x3, 0x7, 0x81, 0xcb5, 0x3, 0x0, 0x13, 0x0, 0x0, 0x218, 0x7f, 0xcc, 0x4f7, 0x5, 0x4, 0x1, 0x6f03af4f, 0x0, 0x9, 0x6, 0x4, 0x9, 0x3ff, 0x8, 0x52e, 0x5, 0x8, 0xffffff81, 0xff, 0x0, 0xffffff81, 0xffffecef, 0x5, 0xfffffff7, 0x3, 0x2, 0xca85, 0x8, 0xca, 0xffffffff, 0x7, 0x5e79ac64, 0x4000000, 0x1ff, 0x0, 0x0, 0x4, 0xc0000, 0x9cb, 0xb6f, 0x1000, 0x5, 0xfffffffe, 0x8, 0x5, 0x6, 0x4, 0xfffffc6f, 0x7fffffff, 0x1, 0x8, 0x8, 0x1, 0x80, 0x2, 0x3, 0x144c, 0xaa81, 0x5, 0x7, 0x8, 0x8001, 0x2, 0xffff, 0x3, 0x5, 0x5, 0xc, 0xfffffffe, 0x5, 0xfffffff5, 0x2, 0x800, 0x1, 0x80000001, 0x0, 0x0, 0x2, 0x1, 0x660, 0x5, 0x0, 0x3, 0xfffffffc, 0xc, 0x7, 0x0, 0x6, 0xea69, 0x9, 0x26, 0x5, 0x0, 0x3, 0x35e7, 0xef, 0x6, 0x8, 0x4, 0x80000000, 0x9, 0x31, 0xb, 0xe393, 0x2, 0x401, 0x7, 0x1469, 0x904, 0x9, 0x5, 0xc, 0x6520, 0x8, 0x8, 0x9, 0x401, 0x1ff, 0x3ff, 0x3, 0x3, 0xfc46, 0x3, 0x8, 0x80000001, 0xff, 0x7, 0x1, 0xfff, 0xa, 0x8, 0x9, 0x3, 0x6, 0x3, 0xb45, 0x0, 0x7ff, 0x81, 0xe, 0x8, 0x2, 0x1, 0x3, 0xffff, 0x4, 0x6, 0xe8df, 0x7, 0x101, 0x6e, 0x0, 0x200, 0xd, 0x9, 0x2, 0x401, 0x4, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0xc, 0x10000, 0x80000001, 0x1, 0x1, 0xfffffffa, 0xffffffff, 0x6, 0x200, 0x7, 0x3, 0x4d3d, 0xfffffffd, 0x80000000, 0x7ff, 0x2, 0xb, 0x5, 0x9, 0x8001, 0x9c2, 0x8, 0x7fff, 0x6, 0x2, 0x4, 0x0, 0x6, 0x80, 0x5ef, 0x8, 0x8, 0x3, 0x9, 0x101, 0xe]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x55, 0x8, 0x5, 0x5f, 0x3d4f, 0x1, 0x0, 0x3, 0x40, 0x8, 0x3, 0x81, 0x2, 0x100, 0x125, 0x1a959f59, 0x1, 0x323c, 0x9, 0x6, 0x4, 0x101, 0x979, 0x2, 0x1, 0x2, 0x5, 0xb, 0x3, 0xfffffff8, 0x4569, 0x2f6, 0x80000000, 0x8, 0x200, 0x101, 0x3, 0x81, 0x4, 0xc, 0x5, 0x6, 0x9, 0xfffffffd, 0xd, 0x2, 0xa, 0x4, 0x9, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x8000, 0x5, 0x1, 0x3, 0x401, 0x3, 0x9, 0x5, 0x9e, 0x0, 0x8, 0xa, 0x3, 0x7, 0x4, 0x2, 0x6, 0xfff, 0x2, 0xd, 0x9, 0x7, 0x4, 0x5fd, 0x3, 0x2, 0x4, 0x0, 0x7ff, 0x9, 0x2, 0x9, 0x3, 0x100, 0x3ff, 0x3, 0x2, 0x3, 0x6, 0x0, 0x2, 0x2, 0x4, 0x80, 0xd0, 0x5, 0x9, 0xe, 0x2, 0x7, 0x8001, 0xe46, 0xe, 0x1, 0x6, 0x1, 0x8, 0x40, 0x5, 0xe, 0x5, 0x80000001, 0x0, 0x7ff, 0x521, 0x3, 0x10, 0xffffffff, 0x8, 0x3, 0xb, 0x8, 0x3, 0x374a, 0xfffffffb, 0x8000, 0x80000001, 0x8000, 0x7, 0x10000, 0x9, 0xcfd, 0x4, 0xe, 0x1, 0x5, 0xe, 0x3, 0x7, 0x8, 0x9, 0x1, 0x5, 0x7ff, 0x42d, 0x61, 0x101, 0x9, 0x58a16a01, 0x7, 0x7, 0x7, 0x10001, 0xb5, 0xfff, 0xb, 0x1, 0xff, 0x578b, 0xa506, 0x80000001, 0x7fff, 0x17, 0x3, 0x80000001, 0x81, 0x4, 0xdc, 0x3, 0x7ff, 0xde, 0x80, 0x3, 0x2, 0x2, 0x6, 0x1000, 0x5, 0x80000001, 0x8000, 0x7, 0x6, 0x4, 0x3, 0xc2, 0x2, 0x7ff, 0x8, 0x7, 0x8, 0xe53, 0x54, 0x6, 0x10000000, 0x6, 0x4, 0x2, 0x0, 0x40, 0x8, 0xfffffffe, 0x9, 0x81, 0x582, 0x5, 0x6, 0x6, 0x3, 0x7, 0x9, 0x602, 0xe48, 0x77, 0x2, 0x14, 0x6, 0x60, 0x5, 0x6, 0x6f9e, 0xffffffff, 0x3e07, 0x8001, 0x7, 0x3, 0x3, 0x0, 0x1, 0xffffff70, 0x2, 0x7, 0x7, 0x2, 0x8, 0x100, 0x2b57, 0x5b1, 0x1, 0x4, 0x3, 0xffff, 0xa, 0xa, 0x9, 0x7, 0x2, 0x0, 0x4, 0x400, 0x6]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x6, 0x0, 0x5, 0x3, 0x9, 0x7, 0x4f, 0x6, 0x37c, 0x5, 0x0, 0x1, 0xcd, 0x7, 0x1, 0xffffffff, 0xa, 0xc, 0x6, 0x40000000, 0x8000, 0x3, 0x0, 0xfffffff3, 0x7ff, 0x1, 0x6, 0x1000, 0x8, 0x7, 0x1, 0x5, 0x7fff, 0x4, 0xfffffffc, 0x4, 0x2, 0xee, 0x4, 0xf1, 0x8, 0xa60, 0xe0f, 0xc, 0x5, 0x4, 0x6, 0x5, 0x6, 0x8, 0x5, 0xffff, 0x3, 0xa942, 0x4, 0xa, 0x2, 0x60, 0xb4fe, 0x6, 0xfffffffe, 0x7, 0x0, 0x6, 0x80000000, 0x59de, 0x654, 0xc, 0xb5a, 0xc7b, 0x9, 0x4, 0xfffffffe, 0x7, 0x6, 0x2, 0x9, 0x6, 0xe0, 0x3, 0x7, 0x7, 0x7, 0x1, 0xb0, 0x5, 0x9, 0xfffffff7, 0x2, 0x29, 0x10000, 0x0, 0x6, 0x8, 0x5, 0x7f, 0x8000, 0xb68, 0x10, 0x6, 0xfffffff9, 0x5, 0x1d, 0x8, 0x6, 0x6, 0xf98, 0xa, 0x0, 0x2a, 0x7, 0x8cb, 0x2, 0xffffffff, 0x9, 0x8, 0x5, 0xffff3e24, 0x1, 0xb8c8, 0xb, 0xff, 0xff, 0x7, 0x7847, 0x8, 0x3, 0x80000001, 0x9, 0x4, 0x6a, 0x3, 0x81, 0x7, 0x7fffffff, 0x8, 0x37, 0x7, 0x7ff, 0xc4, 0xb5d6, 0xfffffc01, 0x4, 0x1, 0x6, 0x1, 0x8001, 0x621, 0x8, 0xfffff957, 0x0, 0x3, 0x9, 0x8, 0x1, 0x80000000, 0xfb, 0x2, 0x7, 0x1000, 0x5, 0x7fffffff, 0x40, 0x4, 0xfffffffd, 0x7, 0xa5e08296, 0xd29c, 0xcffc, 0x0, 0x3, 0x0, 0x9, 0xd, 0x80000001, 0x0, 0x10001, 0x401, 0x1, 0x401, 0xffffffff, 0x6, 0x2, 0xb, 0x1, 0x9, 0x0, 0x6, 0x3, 0x400, 0x0, 0x3ff, 0x7, 0x8, 0x0, 0x9, 0x2, 0xffff, 0x7, 0x9, 0xc5, 0x5a, 0x0, 0xbb, 0xbc, 0x0, 0x13, 0x4304645d, 0xa2ea, 0x8001, 0x12, 0x5, 0x62fa, 0xc5, 0x80000001, 0x3, 0x2, 0x2, 0x2, 0x4, 0x1, 0x4, 0xf3a, 0x1c2, 0xff, 0x5, 0x1000, 0x0, 0x9, 0x9, 0x401, 0x5, 0x7fffffff, 0x5, 0x7ff, 0x1, 0x5, 0x3, 0x60, 0xfffffffe, 0x5, 0xffff1e68, 0x8f71, 0x1000, 0x56, 0x7, 0x0, 0xfffffffb, 0x1, 0x3ff, 0x5, 0x37, 0x2, 0x6, 0xfffffff8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3, 0x2, 0x7, 0x5, 0xa, 0x80000001, 0x5, 0xfa, 0x32, 0x73d, 0xffffff00, 0x6dd, 0x4, 0x7, 0x10001, 0x58f, 0x4, 0x5, 0x8, 0x7ff, 0x2, 0xaad, 0xfffffffe, 0x9, 0x2, 0x9, 0x4, 0x66119c00, 0x4, 0x0, 0x4, 0x0, 0x2, 0x7ff, 0x66b, 0xa4, 0x5, 0x4, 0x2, 0x7fffffff, 0x6, 0x400, 0x7, 0xfffffffd, 0x7, 0x3, 0x3, 0xfc10, 0xc7d, 0x0, 0x0, 0x6, 0x400, 0x8001, 0x6, 0x6, 0x7f, 0x4, 0x80000000, 0x47, 0x0, 0x6da, 0xfffffffa, 0xc, 0xc315, 0x8, 0x6, 0x2, 0x0, 0x7, 0x7, 0x10000, 0x2, 0x7, 0x3, 0x3000, 0xb3bd, 0x4, 0xfffffffe, 0x80000000, 0x7, 0x5, 0x0, 0x0, 0x458, 0x9, 0x3, 0x3ff, 0x9, 0x8, 0x4d, 0x7, 0x2, 0x5, 0x7fff, 0x9, 0x8, 0x380, 0x8, 0x6, 0x4, 0x2, 0xfffffffc, 0x3ff, 0x0, 0xf, 0x7, 0x6d, 0x1, 0x40, 0x5, 0x0, 0x400, 0x4, 0x2fb0b96, 0x5, 0x8, 0x400, 0x0, 0x2, 0xfffffffa, 0x10000, 0x8, 0x100, 0x8, 0x8, 0x7, 0x90, 0xaca5, 0x10000, 0x1, 0x5, 0x5, 0x7ff, 0x7, 0x1000000, 0x7, 0x8, 0x6, 0x9, 0xfffffffd, 0x1, 0xa, 0x0, 0x400, 0x5, 0x7, 0x4, 0x7fff, 0x80000000, 0x80000001, 0x9, 0x3, 0x3, 0x0, 0x100, 0x0, 0x7, 0x2, 0x8, 0x91, 0xffff, 0x8, 0xacbc, 0x2, 0x4, 0x81, 0xd, 0x7, 0x4, 0x0, 0x800, 0x1d, 0x2, 0x2, 0x6, 0x3, 0x10, 0x2, 0x9, 0xb48, 0x40, 0x5, 0xe, 0x81, 0x3ff, 0x80, 0x4, 0x7, 0xfffffffd, 0x10001, 0x3, 0x7, 0xfffffeff, 0xfffff147, 0x2, 0x3, 0x2, 0x0, 0x0, 0xb4, 0x7ff, 0x4, 0xa8, 0x0, 0x0, 0x2, 0x81, 0x1, 0x6, 0x1, 0x2, 0x9, 0x3, 0x41, 0x5, 0x6, 0x400, 0xfffffff7, 0x21d, 0x3, 0xfffffffa, 0x8000, 0x946, 0x6, 0x7, 0x5, 0x8b, 0x1, 0x4, 0x9d, 0x2, 0x0, 0x8, 0x8000, 0x0, 0x73, 0x4, 0x7, 0xfffffff6, 0x0, 0x7, 0xe, 0x3, 0x5, 0xfffffffe, 0x2, 0xe, 0x0, 0x5, 0x7006, 0x8, 0x6, 0x8, 0x81]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8203}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0x3, 0x1000, 0x80, 0x2, 0x7fff, 0x9b, 0x4, 0x894, 0x8, 0x3, 0x8, 0x3, 0x1, 0x7, 0x7, 0x8, 0xfffffffb, 0x2c907d61, 0x8, 0x4, 0x401, 0x0, 0x0, 0x4, 0x35, 0x7fffffff, 0x7, 0xd, 0x1, 0x3, 0x3ff, 0x4d, 0x1, 0x87, 0x3, 0xb, 0x7, 0xc7a, 0x4, 0x98, 0x9, 0x1, 0xfffffffd, 0x2, 0x80000000, 0x10, 0x5, 0x8, 0x1f, 0x8, 0x3, 0x9, 0xfffffff1, 0x6, 0xffffffff, 0x74df, 0x2, 0x1, 0x7fff, 0x8, 0xa, 0xd, 0xfff, 0x0, 0x7fff, 0x3, 0x9, 0x100, 0x1, 0x9d9, 0x3, 0x7, 0x2, 0x6, 0x0, 0x4, 0x8, 0x4, 0x3, 0x9, 0x5, 0x8, 0x2, 0x7, 0x548, 0xd, 0x1, 0x2, 0x7, 0x800, 0x10001, 0xa8, 0x8, 0x10001, 0x1fffc000, 0x0, 0xb, 0x8221, 0x9, 0x5, 0x71a, 0x3, 0x3, 0x633, 0x3, 0x7fffffff, 0x2, 0x2, 0x9, 0xc541, 0x4, 0x1ff, 0x1, 0x4, 0x100, 0x4, 0x8, 0x0, 0x6000000, 0xfffffffb, 0x80, 0x9, 0x8, 0x7fffffff, 0x0, 0x4, 0x4, 0x200, 0x9, 0x0, 0xfffffff6, 0x3, 0x1, 0xa1, 0x0, 0xffffffff, 0xcd9, 0x7, 0x9, 0x0, 0x89, 0x617f97d5, 0x5, 0xb59, 0x0, 0x1, 0xfff, 0x4, 0xfffffff7, 0x541, 0x4, 0x9, 0x6, 0x7, 0x5, 0x401, 0x100, 0xa0a4, 0xf, 0x9, 0x2, 0x7, 0x5, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x4, 0x8000, 0xffffffff, 0x6, 0x4, 0x5, 0x7fffffff, 0x45b4, 0x4, 0x9d, 0xf9, 0x80, 0x1, 0x80, 0x6, 0x68ab000, 0x7ff, 0x1ff, 0x4, 0xfffffffb, 0x5, 0x0, 0x1ff, 0x8, 0xfffffffb, 0xed0f, 0x4, 0x2, 0x0, 0x6, 0x4e, 0x1000, 0x5, 0x7fff, 0x74a15d52, 0x0, 0x0, 0x3, 0x81, 0x7fffffff, 0x0, 0x0, 0xee23, 0x7ff, 0x0, 0x2, 0x9, 0x86, 0x9, 0x7, 0xc4, 0x7fff, 0xfffff6fb, 0x4, 0x4, 0x4, 0x6, 0x4, 0x3, 0xf, 0x68, 0x1, 0x0, 0x10, 0x6, 0x3, 0x6, 0x9, 0x30, 0x8, 0x9, 0x800, 0x401, 0x6, 0x4, 0x5, 0x1, 0xe, 0x5, 0x4, 0xda, 0x8000, 0x1, 0x6, 0xffffffbf, 0x5, 0xd6e]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3e8000, 0x8001, 0x25, 0x80000001, 0x7, 0x7, 0x1, 0x3, 0xd0, 0x4, 0x4, 0xffffcf6a, 0x8001, 0xfff, 0xffff, 0x8, 0x8, 0x6, 0x8, 0x200, 0x0, 0x51a, 0x4, 0x7, 0x5, 0x10001, 0x4, 0xe821, 0x63, 0x6, 0xffffffff, 0x8, 0xf, 0xa47b, 0x7, 0xffff0000, 0x1d3, 0x44, 0x5, 0x9, 0xfe, 0x7, 0x7, 0x9, 0x5, 0x2, 0x1, 0x9, 0x1, 0x2, 0x2, 0x0, 0x4, 0x7, 0x8, 0x3, 0x4, 0xe6b, 0x6, 0xb4, 0x3, 0x5, 0x9bfd, 0xf9, 0xffffffff, 0x4, 0x7b80, 0xfffffffa, 0x4, 0x9734, 0x4, 0x8, 0x8, 0x3, 0x8, 0x80000001, 0x6, 0x1, 0x2, 0x8000, 0x1ff, 0x0, 0x8, 0x5, 0x1, 0x9, 0x0, 0x5b, 0x5, 0x3, 0x5, 0x5963, 0x6, 0x6, 0xffffff01, 0x2, 0x1, 0xfffffffc, 0x200, 0x13f5, 0x7fff, 0x3, 0x400, 0x4, 0x647a, 0x0, 0x6c5, 0x1, 0x4, 0x9, 0x4, 0x3, 0x5, 0x7, 0x2, 0x8001, 0x6, 0xffffffff, 0xfffffffb, 0x0, 0x1, 0x4, 0x100, 0x4, 0x3, 0xfffffff9, 0x644, 0x5f, 0x7ff, 0xd6, 0x200, 0x6, 0x8, 0x9, 0x7, 0x8000, 0x8, 0x1, 0x40, 0x200, 0x7, 0x75, 0xffff21e5, 0x4, 0x33, 0x6, 0x3, 0x45a, 0x2, 0x3ff, 0x6, 0x9, 0x2, 0x35, 0x94, 0xd9, 0x7fff0, 0x2, 0x4f, 0x4, 0xbd57, 0x80, 0x9, 0xe8, 0xfffffffc, 0x100, 0x5, 0x7fffffff, 0x2, 0x1, 0xff, 0x10, 0x5, 0x3, 0x3, 0x57c, 0x2dc4, 0xfffffffa, 0x2, 0x4, 0x5, 0x4, 0x10000, 0x9, 0xcf, 0x3, 0x4, 0x4, 0x8, 0x2, 0x400, 0x8, 0xfffffff9, 0x5, 0x1, 0x1, 0x1, 0xb, 0x0, 0x1, 0x9, 0x7, 0x9, 0x7fff, 0x9, 0xe, 0x6, 0x8000, 0x6, 0x20, 0x5, 0x4, 0x8, 0x9, 0x8, 0x85, 0xfffffffd, 0x9, 0x6ca, 0x6, 0xf5c, 0x9, 0x0, 0x2, 0xb7, 0x4, 0x1, 0x0, 0x8, 0x8, 0x2, 0x9c, 0x200, 0x9, 0x10, 0xfffffffc, 0x6, 0x3, 0xc, 0x5153, 0x1, 0x2, 0x4, 0x2, 0xa7, 0x71f2, 0x8, 0x887, 0x400, 0x400, 0x4, 0x1, 0x8, 0x5, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x10, 0x0, 0xfff, 0x6, 0x0, 0x74, 0x0, 0xfffffffe, 0x40000000, 0x81, 0xb, 0xdc, 0x0, 0x3, 0x0, 0x7, 0xfffffffa, 0x400, 0x8, 0x1, 0x8, 0x2, 0xfffffff7, 0x45, 0x2, 0x7, 0xe, 0x2, 0x0, 0x5016, 0x3, 0x2, 0xff, 0x2e3, 0x8, 0x38, 0xd, 0x7, 0x4, 0x2, 0xc7d2, 0x5, 0x3, 0x80, 0x101, 0x1ff, 0x7, 0x6, 0x3ff, 0x0, 0x12d, 0x9, 0x4, 0x1, 0x5, 0x8, 0x8, 0x3, 0x9, 0x7b0, 0x5, 0x40, 0x4, 0x8, 0x0, 0x7f, 0x1, 0x7fff, 0x8, 0x5, 0xffffffff, 0x8, 0x5, 0x5, 0xffff2408, 0x0, 0xb, 0x8000, 0x7, 0x98, 0x3ff, 0x5, 0x1, 0xfc, 0x80, 0xd0c, 0x21aa, 0x2, 0x1dccefdd, 0x724, 0x4, 0xa, 0x6c, 0x4, 0x4, 0xfffffffc, 0x0, 0x8, 0x8, 0x4, 0x3, 0x5, 0x0, 0x3ff, 0x4, 0xffffffff, 0x9, 0x5, 0x9, 0x6, 0x8, 0x1, 0x4, 0x7fff, 0x7fffffff, 0x3, 0x0, 0xffffffff, 0x1, 0xc429, 0xfffffffa, 0xfffff001, 0x7, 0x8, 0x5, 0x2, 0xc3aa, 0x7ff, 0x3ff, 0x200, 0x2, 0x1, 0x6, 0x1, 0x2, 0x6, 0xf, 0x70, 0x7, 0x3, 0x4, 0xfffffffa, 0x0, 0x1, 0xa7ae, 0xfff, 0x8, 0x9, 0x101, 0x2, 0x6, 0x7, 0x9, 0xffff, 0xfa7a, 0x4797, 0xe, 0x3, 0x1, 0x4, 0x2020000, 0x1ff, 0x4, 0x80000001, 0x94da, 0x8, 0x2, 0x0, 0x401, 0xe9, 0x800, 0x80, 0xfffffffe, 0x3, 0x1ff, 0x7bd2, 0x2, 0xffff41a1, 0x8, 0x7a, 0x1, 0x40, 0x4, 0x0, 0x1d, 0xffffffff, 0x8, 0x1, 0x3, 0x7, 0x8, 0x6, 0x5, 0x6, 0x8001, 0x8, 0xf, 0x9, 0x0, 0x5, 0x8a, 0x0, 0x400, 0x6e0, 0x6, 0x8, 0x1, 0x1, 0x3, 0x3, 0x3, 0xad6, 0xb00, 0x80000000, 0x8, 0xffff, 0x200, 0x400000, 0x8001, 0x7, 0x0, 0x978, 0x7, 0x9, 0x7, 0x9, 0x4, 0x3, 0x0, 0x8, 0xa, 0x400, 0xdbc, 0x80000001, 0x0, 0x6, 0xc, 0x1000, 0x643e9050, 0x7, 0x1000, 0xffff, 0x4d, 0x7, 0x3, 0xe0, 0x401, 0x7, 0x6, 0x400, 0x400, 0xdc4, 0x6, 0xc, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]]}, {0xd8, 0x6, "88ff210f2d321b2a6822ff67db1f9b8c41fd67cc8d0af8f2d5dcd7a6d12c13a07a98f934ac1522b4278575b09d458690e73e9b05d7c584fbaab9828e67f86d622a02ecc100812995219a55868068d160d365030b759e6bdec13ef583a818d0ee83b17188457326cde96d77c344a7cbeadf15dd55f465de4395b1326d4e6f71c624dfc823e88aca5dc7249223622a77807bcc4c9f1ba03f0a49dba3187c407025c0345c304611c0f7479e1437d782e8b7e845bf37f70af73f225ffc787163418173121ddb627cb6eaeea8f99f9c50f9bc0bbf072c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x42, 0xf9, 0x49, 0x1000}, {0xc, 0xc, 0x1, 0x8}, {0xf4c6, 0xf9, 0xb, 0x6}, {0x3, 0x6, 0x9, 0x2}, {0x6, 0xd9, 0xac, 0x8}, {0x8, 0xdf, 0x0, 0x5}, {0x400, 0x7, 0xb, 0xa}]}}]}}]}, 0x338c}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 11.012062564s ago: executing program 5 (id=1302): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x800b2a9, 0x0, 0x0, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x300, 0x0, 0x0, 0x0) 464.085303ms ago: executing program 4 (id=1303): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x6, 0x9c1a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x20, 0x20, 0x3, 0x986}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x80) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461"], 0xd8}}, 0x0) 409.901153ms ago: executing program 1 (id=1304): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) 384.287024ms ago: executing program 2 (id=1305): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x800) 325.836595ms ago: executing program 5 (id=1306): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x9, 0x800000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x34020840) 282.524556ms ago: executing program 5 (id=1307): add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="0100000000", 0x5, 0x0) 208.089207ms ago: executing program 1 (id=1308): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) membarrier(0x2, 0x0) 207.806477ms ago: executing program 3 (id=1309): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000010a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) syz_open_dev$loop(0x0, 0x101, 0x901) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x7000, 0x0, 0x20000}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 119.491128ms ago: executing program 33 (id=1309): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000010a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) syz_open_dev$loop(0x0, 0x101, 0x901) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x7000, 0x0, 0x20000}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 104.180529ms ago: executing program 5 (id=1311): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) 103.939258ms ago: executing program 1 (id=1312): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) rt_sigsuspend(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) 85.108079ms ago: executing program 2 (id=1313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0308004d6b71ef288563", @ANYRES32, @ANYRES64=0x0, @ANYRES64], 0xffdd) 0s ago: executing program 4 (id=1314): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0), 0x1, 0x50c, &(0x7f0000000400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab968508", 0xd, 0x0, &(0x7f0000000200)={0x11, 0xe2, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0xf00) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) kernel console output (not intermixed with test programs): ][ T4434] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.377158][ T4434] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:11: Failed to release dquot type 0 [ 99.416569][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 100.216629][ T4868] loop0: detected capacity change from 0 to 1024 [ 100.219371][ T4868] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.276248][ T4868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.392171][ T4883] loop3: detected capacity change from 0 to 128 [ 100.406613][ T4881] netlink: 'syz.4.149': attribute type 4 has an invalid length. [ 100.431292][ T4883] capability: warning: `syz.3.150' uses deprecated v2 capabilities in a way that may be insecure [ 100.459298][ T4881] netlink: 'syz.4.149': attribute type 4 has an invalid length. [ 100.656035][ T4884] EXT4-fs (loop0): unmounting filesystem. [ 100.858528][ T4904] loop2: detected capacity change from 0 to 1024 [ 100.929197][ T4904] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 102.435389][ T4920] loop4: detected capacity change from 0 to 512 [ 102.500855][ T4920] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 102.584042][ T4522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.682866][ T4927] 9pnet_fd: Insufficient options for proto=fd [ 102.774438][ T4522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.931003][ T4307] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.934782][ T4307] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.937294][ T4307] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.940203][ T4307] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.942661][ T4307] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 102.945152][ T4307] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.983931][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 103.083347][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 103.083361][ T27] audit: type=1326 audit(103.060:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 103.111665][ T27] audit: type=1326 audit(103.080:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 103.125142][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 103.152440][ T27] audit: type=1326 audit(103.130:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 103.179616][ T27] audit: type=1326 audit(103.130:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 103.211665][ T27] audit: type=1326 audit(103.130:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 103.221427][ T27] audit: type=1326 audit(103.130:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 103.227437][ T27] audit: type=1326 audit(103.130:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 103.235885][ T4522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.273252][ T27] audit: type=1326 audit(103.130:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 103.313097][ T27] audit: type=1326 audit(103.130:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 103.319116][ T27] audit: type=1326 audit(103.130:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 103.339927][ T4952] xt_hashlimit: size too large, truncated to 1048576 [ 103.348102][ T4522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.356209][ T4946] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 104.014060][ T4931] chnl_net:caif_netlink_parms(): no params data found [ 104.144936][ T4978] loop4: detected capacity change from 0 to 736 [ 104.307817][ T4978] rock: directory entry would overflow storage [ 104.317988][ T4978] rock: sig=0x3b10, size=4, remaining=3 [ 104.358439][ T4931] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.375754][ T4931] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.378497][ T4931] device bridge_slave_0 entered promiscuous mode [ 104.484116][ T4931] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.484125][ T4984] loop1: detected capacity change from 0 to 4096 [ 104.486166][ T4931] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.519909][ T4931] device bridge_slave_1 entered promiscuous mode [ 104.524828][ T4984] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 104.616405][ T4931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.626243][ T4931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.640234][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 104.720009][ T4931] team0: Port device team_slave_0 added [ 104.723128][ T4931] team0: Port device team_slave_1 added [ 104.886785][ T4931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.888788][ T4931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.920177][ T4931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.969556][ T4297] Bluetooth: hci2: command 0x0409 tx timeout [ 105.057972][ T4931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.060081][ T4931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.090428][ T4931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.120043][ T5010] 9pnet_fd: Insufficient options for proto=fd [ 105.356874][ T4931] device hsr_slave_0 entered promiscuous mode [ 105.385823][ T4931] device hsr_slave_1 entered promiscuous mode [ 105.419867][ T4931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.422093][ T4931] Cannot create hsr debugfs directory [ 105.425252][ T5016] loop1: detected capacity change from 0 to 1024 [ 105.437737][ T5016] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 105.464917][ T5018] loop3: detected capacity change from 0 to 1024 [ 105.467792][ T5016] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 105.488723][ T5018] EXT4-fs: Ignoring removed orlov option [ 105.631482][ T5018] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.130882][ T5044] netlink: 104 bytes leftover after parsing attributes in process `syz.4.200'. [ 106.211220][ T4931] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.217638][ T5046] loop1: detected capacity change from 0 to 764 [ 106.228687][ T5046] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 106.261285][ T4931] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.312792][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 106.557650][ T4931] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.589894][ T5062] vhci_hcd: invalid port number 96 [ 106.591437][ T5062] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 106.611525][ T4931] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.654328][ T5056] netlink: 'syz.3.204': attribute type 10 has an invalid length. [ 106.656843][ T5056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.204'. [ 106.727069][ T5056] team0: Port device geneve0 added [ 106.798438][ T5068] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 106.830150][ T4522] device hsr_slave_0 left promiscuous mode [ 106.875438][ T4522] device hsr_slave_1 left promiscuous mode [ 106.939738][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.942037][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.945404][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.949816][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.955736][ T4522] device bridge_slave_1 left promiscuous mode [ 106.961730][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.020813][ T4522] device bridge_slave_0 left promiscuous mode [ 107.022782][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.049794][ T4297] Bluetooth: hci2: command 0x041b tx timeout [ 107.156864][ T5078] loop4: detected capacity change from 0 to 512 [ 107.197828][ T5078] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.199964][ T4522] device veth1_macvtap left promiscuous mode [ 107.205011][ T5078] EXT4-fs (loop4): mount failed [ 107.205171][ T4522] device veth0_macvtap left promiscuous mode [ 107.208178][ T4522] device veth1_vlan left promiscuous mode [ 107.237998][ T4522] device veth0_vlan left promiscuous mode [ 107.813102][ T5092] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.129598][ T4307] Bluetooth: hci2: command 0x040f tx timeout [ 109.233406][ T4522] team0 (unregistering): Port device team_slave_1 removed [ 109.436806][ T4522] team0 (unregistering): Port device team_slave_0 removed [ 109.611186][ T4522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.810242][ T4522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.210365][ T4297] Bluetooth: hci2: command 0x0419 tx timeout [ 112.165688][ T4522] bond0 (unregistering): Released all slaves [ 112.446597][ T5087] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 112.448865][ T5087] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 112.521200][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 112.531429][ T5100] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 112.534039][ T5100] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 112.608989][ T4931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.612158][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 112.629413][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.632246][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.648881][ T4931] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.654420][ T5106] loop4: detected capacity change from 0 to 512 [ 112.668220][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.671243][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.674143][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.676117][ T4383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.688890][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.694623][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.697681][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.719146][ T4383] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.721279][ T4383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.760751][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.790468][ T5106] EXT4-fs (loop4): too many log groups per flexible block group [ 112.792773][ T5106] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 112.794667][ T5106] EXT4-fs (loop4): mount failed [ 112.823224][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.832657][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.845755][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.851958][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.867361][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.873487][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.895487][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.898761][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.906437][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.914852][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.924401][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.985626][ T5122] loop4: detected capacity change from 0 to 164 [ 113.011806][ T5122] rock: directory entry would overflow storage [ 113.014816][ T5122] rock: sig=0x66, size=4, remaining=3 [ 113.164174][ T5109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'. [ 113.310405][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.312631][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.329976][ T4931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.717810][ T5153] serio: Serial port ptm0 [ 114.006095][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.009175][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.043806][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.048197][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.066261][ T4931] device veth0_vlan entered promiscuous mode [ 114.086158][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.093139][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.101288][ T4931] device veth1_vlan entered promiscuous mode [ 114.179862][ T4931] device veth0_macvtap entered promiscuous mode [ 114.199318][ T4931] device veth1_macvtap entered promiscuous mode [ 114.230435][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.233531][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.236079][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.250204][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.260621][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.277391][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.298401][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.319334][ T5177] loop4: detected capacity change from 0 to 8192 [ 114.323921][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.326767][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.329374][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.344022][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.349734][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.352837][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.362610][ T4931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.376401][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.379138][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.382423][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.441728][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.444682][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.447298][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.460054][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.462838][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.465705][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.468389][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.493635][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.502064][ T4931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.514358][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.517182][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.537255][ T4931] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.543512][ T5185] loop1: detected capacity change from 0 to 8192 [ 114.545564][ T4931] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.547933][ T4931] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.567502][ T4931] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.742171][ T5206] random: crng reseeded on system resumption [ 114.805682][ T5209] netlink: 9 bytes leftover after parsing attributes in process `syz.4.251'. [ 114.856402][ T533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.858854][ T533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.864334][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.934342][ T4528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.936674][ T4528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.943066][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.005959][ T5216] smc: net device bond0 applied user defined pnetid SYZ0 [ 115.022404][ T5216] smc: net device bond0 erased user defined pnetid SYZ0 [ 115.991329][ T5230] netlink: 68 bytes leftover after parsing attributes in process `syz.1.256'. [ 116.026965][ T5234] vhci_hcd: invalid port number 0 [ 116.077627][ T5236] loop2: detected capacity change from 0 to 2048 [ 116.220058][ T5236] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 116.290945][ T24] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 116.293322][ T24] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 116.295336][ T24] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 116.349267][ T24] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 116.355129][ T27] kauditd_printk_skb: 84 callbacks suppressed [ 116.355142][ T27] audit: type=1326 audit(116.330:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5252 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 116.373088][ T27] audit: type=1326 audit(116.330:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5252 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 116.400427][ T27] audit: type=1326 audit(116.330:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5252 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 116.406278][ T27] audit: type=1326 audit(116.330:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5252 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 116.464664][ T27] audit: type=1326 audit(116.330:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5252 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 116.497656][ T27] audit: type=1326 audit(116.330:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5252 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 116.520814][ T27] audit: type=1326 audit(116.330:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5252 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 116.546481][ T27] audit: type=1326 audit(116.330:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5252 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=276 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 116.574911][ T27] audit: type=1326 audit(116.380:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5252 comm="syz.5.265" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 116.601126][ T27] audit: type=1326 audit(116.400:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.3.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 117.576528][ T5282] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2 [ 117.603119][ T5282] netdevsim netdevsim5: Falling back to sysfs fallback for: ..€ [ 117.615185][ T5260] fido_id[5260]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.631174][ T5284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.274'. [ 117.665531][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 117.705707][ T5289] loop4: detected capacity change from 0 to 1024 [ 117.762852][ T5289] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.807325][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 117.832019][ T5298] netlink: 40 bytes leftover after parsing attributes in process `syz.3.278'. [ 117.848157][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 118.078829][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 119.219712][ T5328] netlink: 96 bytes leftover after parsing attributes in process `syz.2.289'. [ 119.222383][ T5328] netlink: 'syz.2.289': attribute type 5 has an invalid length. [ 119.224462][ T5328] netlink: 44 bytes leftover after parsing attributes in process `syz.2.289'. [ 119.502352][ T5345] loop1: detected capacity change from 0 to 2048 [ 119.523985][ T5348] loop3: detected capacity change from 0 to 2048 [ 119.574812][ T5345] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.578144][ T5348] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 119.748621][ T5360] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 119.902856][ T5366] loop4: detected capacity change from 0 to 1024 [ 119.918260][ T5366] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 119.936373][ T5366] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 119.939403][ T5366] EXT4-fs (loop4): orphan cleanup on readonly fs [ 119.946491][ T5366] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.298: Inode bitmap for bg 0 marked uninitialized [ 119.957816][ T5366] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 120.337560][ T5361] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.347766][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 120.349719][ T5361] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 120.353524][ T5361] EXT4-fs (loop3): This should not happen!! Data will be lost [ 120.353524][ T5361] [ 120.356435][ T5361] EXT4-fs (loop3): Total free blocks count 0 [ 120.358177][ T5361] EXT4-fs (loop3): Free/Dirty block details [ 120.361724][ T5361] EXT4-fs (loop3): free_blocks=2415919104 [ 120.363432][ T5361] EXT4-fs (loop3): dirty_blocks=7728 [ 120.365036][ T5361] EXT4-fs (loop3): Block reservation details [ 120.369888][ T5361] EXT4-fs (loop3): i_reserved_data_blocks=483 [ 120.449236][ T4434] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 121.649862][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 121.715868][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 121.715879][ T27] audit: type=1326 audit(121.690:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 121.727663][ T27] audit: type=1326 audit(121.690:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 121.733986][ T27] audit: type=1326 audit(121.690:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=230 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 122.367604][ T27] audit: type=1326 audit(122.340:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 122.373731][ T27] audit: type=1326 audit(122.340:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5390 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 122.606416][ T5394] loop3: detected capacity change from 0 to 2048 [ 122.634646][ T5394] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 122.786831][ T5400] loop1: detected capacity change from 0 to 2048 [ 122.825827][ T5400] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.908347][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 122.973948][ T27] audit: type=1326 audit(122.950:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 122.981762][ T27] audit: type=1326 audit(122.950:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=66 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 122.987501][ T27] audit: type=1326 audit(122.950:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 123.472951][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 123.687965][ T5416] loop3: detected capacity change from 0 to 256 [ 123.770124][ T5416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 124.854190][ T5422] netlink: 76 bytes leftover after parsing attributes in process `syz.1.316'. [ 124.912731][ T5422] netlink: 76 bytes leftover after parsing attributes in process `syz.1.316'. [ 124.999035][ T5422] netlink: 76 bytes leftover after parsing attributes in process `syz.1.316'. [ 125.303025][ T5435] loop1: detected capacity change from 0 to 2048 [ 125.327884][ T5435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.423899][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 125.572606][ T5445] loop1: detected capacity change from 0 to 2048 [ 125.602724][ T5445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.930866][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.933448][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.450860][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 131.517623][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 131.526467][ T5413] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 131.541711][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 131.776363][ T5472] loop5: detected capacity change from 0 to 2048 [ 131.854692][ T5472] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 131.989759][ T5475] infiniband syz2: set active [ 131.991514][ T5475] infiniband syz2: added veth0_to_bond [ 132.110647][ T5475] RDS/IB: syz2: added [ 132.112523][ T5475] smc: adding ib device syz2 with port count 1 [ 132.132561][ T5501] loop4: detected capacity change from 0 to 764 [ 132.135775][ T5475] smc: ib device syz2 port 1 has pnetid [ 132.154877][ T5501] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 132.158787][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 132.573677][ T5521] 9pnet_fd: Insufficient options for proto=fd [ 133.568299][ T5534] loop3: detected capacity change from 0 to 2048 [ 133.624992][ T5534] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.784433][ T5543] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.798011][ T27] audit: type=1326 audit(133.770:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 133.825523][ T5543] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 222 with error 28 [ 133.834704][ T27] audit: type=1326 audit(133.810:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 133.843770][ T27] audit: type=1326 audit(133.820:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 133.878466][ T27] audit: type=1326 audit(133.820:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 133.889771][ T5543] EXT4-fs (loop3): This should not happen!! Data will be lost [ 133.889771][ T5543] [ 133.899960][ T5543] EXT4-fs (loop3): Total free blocks count 0 [ 133.901689][ T5543] EXT4-fs (loop3): Free/Dirty block details [ 133.929776][ T5543] EXT4-fs (loop3): free_blocks=2415919104 [ 133.959551][ T27] audit: type=1326 audit(133.820:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 133.965715][ T27] audit: type=1326 audit(133.820:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 133.991088][ T5543] EXT4-fs (loop3): dirty_blocks=224 [ 133.992678][ T5543] EXT4-fs (loop3): Block reservation details [ 133.994564][ T5543] EXT4-fs (loop3): i_reserved_data_blocks=14 [ 134.025167][ T27] audit: type=1326 audit(133.820:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 134.035670][ T5555] loop2: detected capacity change from 0 to 512 [ 134.038611][ T27] audit: type=1326 audit(133.820:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 134.304363][ T5557] hub 8-0:1.0: USB hub found [ 134.307273][ T5557] hub 8-0:1.0: 8 ports detected [ 134.571112][ T5555] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.609708][ T5555] ext4: Unknown parameter 'seclabel' [ 134.850454][ T5556] netlink: 'syz.1.355': attribute type 1 has an invalid length. [ 134.856670][ T27] audit: type=1326 audit(133.820:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 134.862688][ T27] audit: type=1326 audit(133.820:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa0558dd4 code=0x7ffc0000 [ 134.890642][ T4391] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 135.001157][ T5556] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.004192][ T5556] bond1: (slave bond2): making interface the new active one [ 135.006661][ T5556] bond1: (slave bond2): Enslaving as an active interface with an up link [ 135.186212][ T5556] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 136.034626][ T5556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.355'. [ 136.067492][ T5556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.182735][ T5594] loop4: detected capacity change from 0 to 512 [ 136.223719][ T5594] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.261096][ T5602] loop1: detected capacity change from 0 to 2048 [ 136.308113][ T5602] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 136.369002][ T5601] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.390986][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 136.505332][ T5613] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 136.515420][ T5613] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 772 with error 28 [ 136.520822][ T5613] EXT4-fs (loop1): This should not happen!! Data will be lost [ 136.520822][ T5613] [ 136.523696][ T5613] EXT4-fs (loop1): Total free blocks count 0 [ 136.525346][ T5613] EXT4-fs (loop1): Free/Dirty block details [ 136.527067][ T5613] EXT4-fs (loop1): free_blocks=2415919104 [ 136.528717][ T5613] EXT4-fs (loop1): dirty_blocks=784 [ 136.536184][ T5613] EXT4-fs (loop1): Block reservation details [ 136.537945][ T5613] EXT4-fs (loop1): i_reserved_data_blocks=49 [ 136.542781][ T5601] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.592182][ T5619] netlink: 'syz.4.371': attribute type 10 has an invalid length. [ 136.600115][ T5619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.371'. [ 136.604040][ T5619] device dummy0 entered promiscuous mode [ 136.606852][ T5619] bridge0: port 3(dummy0) entered blocking state [ 136.610254][ T5619] bridge0: port 3(dummy0) entered disabled state [ 136.615433][ T5619] bridge0: port 3(dummy0) entered blocking state [ 136.617506][ T5619] bridge0: port 3(dummy0) entered forwarding state [ 136.681757][ T5601] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.928705][ T5601] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.118924][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 137.121131][ T5601] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.141679][ T5601] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.154423][ T5601] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.161174][ T5601] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.251247][ T5636] netlink: 'syz.1.376': attribute type 1 has an invalid length. [ 137.263178][ T5636] netlink: 240 bytes leftover after parsing attributes in process `syz.1.376'. [ 137.287703][ T5641] netlink: 'syz.5.378': attribute type 1 has an invalid length. [ 137.317528][ T5641] bond1 (unregistering): Released all slaves [ 137.341822][ T5644] loop2: detected capacity change from 0 to 1024 [ 137.368123][ T5644] JBD2: no valid journal superblock found [ 137.385734][ T5644] EXT4-fs (loop2): error loading journal [ 137.511184][ T5641] netlink: 28 bytes leftover after parsing attributes in process `syz.5.378'. [ 137.593424][ T5656] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 137.744557][ T5665] loop4: detected capacity change from 0 to 1024 [ 137.747241][ T5665] EXT4-fs: Ignoring removed bh option [ 137.755607][ T5665] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.810885][ T5665] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.811398][ T5657] loop3: detected capacity change from 0 to 1024 [ 137.828594][ T5657] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 137.893765][ T5657] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 137.896572][ T5657] EXT4-fs (loop3): orphan cleanup on readonly fs [ 137.918475][ T5657] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.384: Inode bitmap for bg 0 marked uninitialized [ 137.924435][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 137.937345][ T5657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 138.004543][ T5678] loop4: detected capacity change from 0 to 128 [ 138.018836][ T5677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 138.036122][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 138.056286][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 138.192623][ T5684] netlink: 36 bytes leftover after parsing attributes in process `syz.4.395'. [ 138.202617][ T5683] loop8: detected capacity change from 0 to 16384 [ 138.208457][ T5684] loop4: detected capacity change from 0 to 512 [ 138.217560][ T5677] loop2: detected capacity change from 0 to 256 [ 138.279393][ T5684] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.355999][ T5677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 138.460291][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 138.710123][ T5700] netlink: 'syz.4.397': attribute type 1 has an invalid length. [ 138.833792][ T27] kauditd_printk_skb: 54 callbacks suppressed [ 138.833805][ T27] audit: type=1326 audit(138.810:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5681 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 138.856280][ T27] audit: type=1326 audit(138.830:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5681 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 138.862474][ T5704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.876795][ T5704] bond1: (slave bond2): making interface the new active one [ 138.884566][ T5704] bond1: (slave bond2): Enslaving as an active interface with an up link [ 138.897733][ T5700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.397'. [ 138.935432][ T5700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.206633][ T5716] loop4: detected capacity change from 0 to 1024 [ 139.231866][ T5716] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 139.238566][ T5716] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 139.245995][ T5716] EXT4-fs (loop4): orphan cleanup on readonly fs [ 139.248541][ T5716] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.404: Inode bitmap for bg 0 marked uninitialized [ 139.257340][ T5719] usb usb1: usbfs: process 5719 (syz.1.405) did not claim interface 0 before use [ 139.277594][ T5716] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.325744][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 139.853783][ T27] audit: type=1107 audit(139.830:348): pid=5738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 139.929335][ T111] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 139.933089][ T111] hid-generic 0003:0000:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 140.003431][ T5745] fido_id[5745]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 140.688195][ T5764] loop4: detected capacity change from 0 to 8192 [ 140.793316][ T5765] loop2: detected capacity change from 0 to 512 [ 140.798539][ T5765] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.800587][ T5765] EXT4-fs: Ignoring removed bh option [ 140.842867][ T5765] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.846349][ T5765] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.982331][ T5765] EXT4-fs (loop2): 1 truncate cleaned up [ 140.984025][ T5765] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 141.473555][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 141.693858][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 141.705601][ T27] audit: type=1326 audit(141.680:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 141.715487][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 141.723627][ T27] audit: type=1326 audit(141.680:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 141.767031][ T27] audit: type=1326 audit(141.680:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 141.796015][ T27] audit: type=1326 audit(141.680:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 141.818736][ T27] audit: type=1326 audit(141.680:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 141.847407][ T27] audit: type=1326 audit(141.700:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=73 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 141.873414][ T27] audit: type=1326 audit(141.750:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5785 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 142.072394][ T5810] devtmpfs: Too few inodes for current use [ 142.202437][ T5815] loop2: detected capacity change from 0 to 128 [ 142.398464][ T5815] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 144.295474][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 144.466126][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 144.493282][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 144.536986][ T5847] loop2: detected capacity change from 0 to 2048 [ 144.595364][ T5847] Alternate GPT is invalid, using primary GPT. [ 144.597641][ T5847] loop2: p1 p2 p3 [ 144.617146][ T3912] Alternate GPT is invalid, using primary GPT. [ 144.619123][ T3912] loop2: p1 p2 p3 [ 144.775227][ T5856] loop4: detected capacity change from 0 to 2048 [ 144.819614][ T5861] netlink: 'syz.1.449': attribute type 4 has an invalid length. [ 144.829220][ T5856] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 144.922030][ T5866] loop5: detected capacity change from 0 to 512 [ 144.928405][ T5861] netlink: 'syz.1.449': attribute type 4 has an invalid length. [ 144.970667][ T5860] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.191469][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'. [ 145.201189][ T5877] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 145.617054][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 145.713414][ T5901] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 145.865682][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 145.865694][ T27] audit: type=1326 audit(145.840:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 145.904803][ T27] audit: type=1326 audit(145.880:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 145.911309][ T5908] Invalid ELF header magic: != ELF [ 145.936756][ T27] audit: type=1326 audit(145.890:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 145.973002][ T27] audit: type=1326 audit(145.890:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 145.995723][ T27] audit: type=1326 audit(145.890:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 146.028497][ T27] audit: type=1326 audit(145.890:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 146.060420][ T27] audit: type=1326 audit(145.900:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 146.066293][ T27] audit: type=1326 audit(145.900:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 146.114626][ T27] audit: type=1326 audit(145.900:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 146.130061][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 146.135015][ T27] audit: type=1326 audit(145.900:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5904 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 146.152115][ T5916] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 146.458026][ T5931] loop2: detected capacity change from 0 to 2048 [ 146.515270][ T5934] tipc: Started in network mode [ 146.516952][ T5934] tipc: Node identity 7f000001, cluster identity 4711 [ 146.527136][ T5931] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 146.565858][ T5934] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 146.568123][ T5934] tipc: Enabled bearer , priority 10 [ 146.625438][ T5940] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 146.636082][ T5941] loop4: detected capacity change from 0 to 512 [ 146.663838][ T5941] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 146.674700][ T5940] tipc: Enabled bearer , priority 10 [ 146.692320][ T5941] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.476: bg 0: block 254: padding at end of block bitmap is not set [ 146.700670][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 146.717769][ T5941] EXT4-fs (loop4): Remounting filesystem read-only [ 146.743063][ T5941] EXT4-fs (loop4): 1 truncate cleaned up [ 146.749296][ T5941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 146.839666][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 146.910957][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 146.980082][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.119750][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.259679][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.268673][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 147.280148][ T5954] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 147.288550][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 147.399656][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.539682][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.662493][ T5966] netlink: 'syz.4.488': attribute type 1 has an invalid length. [ 147.680642][ T4427] tipc: Node number set to 2130706433 [ 147.738732][ T5966] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.753322][ T5966] bond3: (slave bond4): making interface the new active one [ 147.769335][ T5966] bond3: (slave bond4): Enslaving as an active interface with an up link [ 147.785800][ T5971] netlink: 28 bytes leftover after parsing attributes in process `syz.4.488'. [ 147.795019][ T5971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.819624][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.953437][ T5975] loop4: detected capacity change from 0 to 512 [ 147.955878][ T5975] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.968798][ T5975] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.000032][ T5977] loop3: detected capacity change from 0 to 2048 [ 148.027429][ T5977] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 148.045862][ T5975] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.086688][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 148.093966][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 148.137192][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 148.148052][ T5987] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 148.677811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 148.852515][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 148.916244][ T6012] netlink: 'syz.2.501': attribute type 1 has an invalid length. [ 149.084910][ T6019] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.095680][ T6019] bond1: (slave bond2): making interface the new active one [ 149.109724][ T6019] bond1: (slave bond2): Enslaving as an active interface with an up link [ 149.113129][ T6012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.501'. [ 149.127912][ T6012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.313019][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 149.319342][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 149.465060][ T6032] netlink: 92 bytes leftover after parsing attributes in process `syz.2.506'. [ 149.829132][ T6048] loop2: detected capacity change from 0 to 1024 [ 149.870685][ T6048] EXT4-fs: inline encryption not supported [ 149.872653][ T6048] EXT4-fs: Ignoring removed bh option [ 150.046751][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 150.051862][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 150.094399][ T6048] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 150.207133][ T6069] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 150.356111][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 150.409723][ T6073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.425465][ T6073] bond1: (slave bond2): making interface the new active one [ 150.427927][ T6073] bond1: (slave bond2): Enslaving as an active interface with an up link [ 150.437428][ T6069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.517'. [ 150.460745][ T6069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.613112][ T6083] loop3: detected capacity change from 0 to 2048 [ 150.622550][ T6083] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.742600][ T6083] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 151.066283][ T6104] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 151.068452][ T6104] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 151.085109][ T6104] vhci_hcd vhci_hcd.0: Device attached [ 151.102992][ T6110] bridge0: port 3(gretap0) entered blocking state [ 151.107563][ T6110] bridge0: port 3(gretap0) entered disabled state [ 151.117064][ T6110] device gretap0 entered promiscuous mode [ 151.126907][ T6110] bridge0: port 3(gretap0) entered blocking state [ 151.129525][ T6110] bridge0: port 3(gretap0) entered forwarding state [ 151.148352][ T6107] vhci_hcd: connection closed [ 151.157435][ T9] vhci_hcd: stop threads [ 151.160815][ T9] vhci_hcd: release socket [ 151.162959][ T9] vhci_hcd: disconnect device [ 151.380826][ T39] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 234: padding at end of block bitmap is not set [ 151.393357][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 151.396780][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 151.396780][ T39] [ 151.410190][ T39] EXT4-fs (loop3): Total free blocks count 0 [ 151.411857][ T39] EXT4-fs (loop3): Free/Dirty block details [ 151.413351][ T39] EXT4-fs (loop3): free_blocks=0 [ 151.414662][ T39] EXT4-fs (loop3): dirty_blocks=4112 [ 151.416064][ T39] EXT4-fs (loop3): Block reservation details [ 151.417646][ T39] EXT4-fs (loop3): i_reserved_data_blocks=257 [ 151.425631][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28 [ 151.769693][ C0] net_ratelimit: 4 callbacks suppressed [ 151.769707][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 151.837531][ T6141] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 152.016725][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'. [ 152.144901][ T6148] device team1 entered promiscuous mode [ 152.198567][ T6148] Zero length message leads to an empty skb [ 152.481092][ T6162] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 152.809654][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 153.849607][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 154.252164][ T27] kauditd_printk_skb: 76 callbacks suppressed [ 154.252175][ T27] audit: type=1326 audit(154.230:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75a8a8 code=0x7ffc0000 [ 154.269085][ T27] audit: type=1326 audit(154.240:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff7f75a8a8 code=0x7ffc0000 [ 154.309079][ T27] audit: type=1326 audit(154.240:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75a8a8 code=0x7ffc0000 [ 154.359110][ T27] audit: type=1326 audit(154.240:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffff7f75a8a8 code=0x7ffc0000 [ 154.392284][ T27] audit: type=1326 audit(154.240:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.2.550" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75a8a8 code=0x7ffc0000 [ 154.428573][ T27] audit: type=1326 audit(154.330:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.5.549" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x0 [ 154.602626][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.551'. [ 154.889608][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 155.020300][ T6214] loop4: detected capacity change from 0 to 2048 [ 155.086372][ T6218] device pim6reg1 entered promiscuous mode [ 155.149981][ T6214] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 155.286619][ T6214] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 155.335197][ T6214] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 308 with error 28 [ 155.338819][ T6214] EXT4-fs (loop4): This should not happen!! Data will be lost [ 155.338819][ T6214] [ 155.380653][ T6214] EXT4-fs (loop4): Total free blocks count 0 [ 155.385042][ T6214] EXT4-fs (loop4): Free/Dirty block details [ 155.386770][ T6214] EXT4-fs (loop4): free_blocks=2415919104 [ 155.388341][ T6214] EXT4-fs (loop4): dirty_blocks=320 [ 155.407920][ T6214] EXT4-fs (loop4): Block reservation details [ 155.414137][ T6214] EXT4-fs (loop4): i_reserved_data_blocks=20 [ 155.561193][ T27] audit: type=1326 audit(155.540:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 155.573352][ T27] audit: type=1326 audit(155.550:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 155.640976][ T27] audit: type=1326 audit(155.550:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=195 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 155.674410][ T27] audit: type=1326 audit(155.550:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 155.698440][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 155.929621][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 156.760703][ T6265] device syz_tun entered promiscuous mode [ 156.762848][ T6265] device vlan2 entered promiscuous mode [ 156.847953][ T6264] IPv6: Can't replace route, no match found [ 156.974599][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 157.046200][ T6277] loop5: detected capacity change from 0 to 2048 [ 157.179859][ T6277] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 158.012792][ T6277] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 158.018329][ T6277] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 226 with error 28 [ 158.022068][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 158.025126][ T6294] 9pnet_fd: Insufficient options for proto=fd [ 158.029840][ T6277] EXT4-fs (loop5): This should not happen!! Data will be lost [ 158.029840][ T6277] [ 158.049664][ T6277] EXT4-fs (loop5): Total free blocks count 0 [ 158.051536][ T6277] EXT4-fs (loop5): Free/Dirty block details [ 158.053285][ T6277] EXT4-fs (loop5): free_blocks=2415919104 [ 158.093067][ T6277] EXT4-fs (loop5): dirty_blocks=240 [ 158.095964][ T6277] EXT4-fs (loop5): Block reservation details [ 158.097719][ T6277] EXT4-fs (loop5): i_reserved_data_blocks=15 [ 158.227257][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 158.416476][ T6311] loop3: detected capacity change from 0 to 1024 [ 158.479324][ T6311] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 158.702148][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 159.049620][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 160.026526][ T6323] lo speed is unknown, defaulting to 1000 [ 160.028561][ T6323] lo speed is unknown, defaulting to 1000 [ 160.030978][ T6323] lo speed is unknown, defaulting to 1000 [ 160.034884][ T6323] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 160.040113][ T6323] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 160.106071][ T6323] lo speed is unknown, defaulting to 1000 [ 160.114935][ T6323] lo speed is unknown, defaulting to 1000 [ 160.122239][ T6323] lo speed is unknown, defaulting to 1000 [ 160.133070][ T6323] lo speed is unknown, defaulting to 1000 [ 160.140724][ T6323] lo speed is unknown, defaulting to 1000 [ 160.736978][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 161.772639][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 162.555152][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.602'. [ 162.681563][ T6365] loop3: detected capacity change from 0 to 2048 [ 162.723149][ T6365] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 162.809935][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 162.812955][ T6365] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 162.817581][ T6365] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1060 with error 28 [ 162.821720][ T6365] EXT4-fs (loop3): This should not happen!! Data will be lost [ 162.821720][ T6365] [ 162.824540][ T6365] EXT4-fs (loop3): Total free blocks count 0 [ 162.826260][ T6365] EXT4-fs (loop3): Free/Dirty block details [ 162.829180][ T6365] EXT4-fs (loop3): free_blocks=2415919104 [ 162.831667][ T6365] EXT4-fs (loop3): dirty_blocks=1072 [ 162.833363][ T6365] EXT4-fs (loop3): Block reservation details [ 162.835067][ T6365] EXT4-fs (loop3): i_reserved_data_blocks=67 [ 162.920410][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 163.849648][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 163.849705][ T4307] Bluetooth: hci1: command 0x0406 tx timeout [ 163.853545][ T4311] Bluetooth: hci3: command 0x0406 tx timeout [ 163.855660][ T4301] Bluetooth: hci4: command 0x0406 tx timeout [ 163.857727][ T4297] Bluetooth: hci0: command 0x0406 tx timeout [ 164.714411][ T6398] loop5: detected capacity change from 0 to 2048 [ 164.778490][ T6398] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 164.828769][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 164.828781][ T27] audit: type=1326 audit(164.800:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 164.874039][ T27] audit: type=1326 audit(164.850:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 164.890016][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 164.899069][ T27] audit: type=1326 audit(164.870:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 164.911732][ T27] audit: type=1326 audit(164.880:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 164.917650][ T27] audit: type=1326 audit(164.880:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 164.954386][ T6398] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 164.977121][ T6398] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 542 with error 28 [ 164.983586][ T27] audit: type=1326 audit(164.880:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 164.993712][ T27] audit: type=1326 audit(164.910:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 165.004534][ T6398] EXT4-fs (loop5): This should not happen!! Data will be lost [ 165.004534][ T6398] [ 165.007431][ T6398] EXT4-fs (loop5): Total free blocks count 0 [ 165.009086][ T6398] EXT4-fs (loop5): Free/Dirty block details [ 165.014004][ T27] audit: type=1326 audit(164.910:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 165.022667][ T6398] EXT4-fs (loop5): free_blocks=2415919104 [ 165.027736][ T6398] EXT4-fs (loop5): dirty_blocks=544 [ 165.029343][ T27] audit: type=1326 audit(164.910:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 165.037936][ T6398] EXT4-fs (loop5): Block reservation details [ 165.045849][ T6398] EXT4-fs (loop5): i_reserved_data_blocks=34 [ 165.049705][ T27] audit: type=1326 audit(164.910:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 165.229366][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 165.263377][ T6417] netlink: 'syz.4.621': attribute type 11 has an invalid length. [ 165.266829][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.621'. [ 165.319116][ T6417] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 165.368022][ T6422] loop5: detected capacity change from 0 to 512 [ 165.375362][ T6422] EXT4-fs: Ignoring removed oldalloc option [ 165.451056][ T6422] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 165.504206][ T6422] EXT4-fs (loop5): 1 truncate cleaned up [ 165.506107][ T6422] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 165.554261][ T6430] loop4: detected capacity change from 0 to 1024 [ 165.639111][ T6430] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 165.672136][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 165.673974][ T6430] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.624: Allocating blocks 481-513 which overlap fs metadata [ 165.748181][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 165.818710][ T6438] mmap: syz.2.626 (6438) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 165.939642][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 166.760379][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.635'. [ 166.772619][ T6471] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 166.780662][ T6471] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 166.970003][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 167.413790][ T6375] Set syz1 is full, maxelem 65536 reached [ 167.817349][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.640'. [ 167.861995][ T6497] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 167.865710][ T6495] IPVS: stopping master sync thread 6497 ... [ 168.019626][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 168.028276][ T6503] loop3: detected capacity change from 0 to 1024 [ 168.038666][ T6504] netlink: 16 bytes leftover after parsing attributes in process `syz.5.643'. [ 168.285291][ T6503] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.456654][ T6503] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.644: Allocating blocks 385-513 which overlap fs metadata [ 168.475947][ T6502] EXT4-fs (loop3): pa 000000009d085525: logic 16, phys. 129, len 24 [ 168.478728][ T6502] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 169.050988][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 169.494590][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 169.662478][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.653'. [ 169.683589][ T6527] loop5: detected capacity change from 0 to 2048 [ 169.838481][ T6527] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 170.089636][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 171.139904][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 171.264895][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.665'. [ 172.231842][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 172.301297][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 172.301320][ T27] audit: type=1326 audit(172.280:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6579 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 172.313132][ T27] audit: type=1326 audit(172.290:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6579 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 172.344963][ T27] audit: type=1326 audit(172.290:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6579 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 172.380757][ T27] audit: type=1326 audit(172.320:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6579 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 172.414285][ T27] audit: type=1326 audit(172.320:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6579 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 172.433326][ T27] audit: type=1326 audit(172.320:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6579 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=72 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 172.445166][ T6586] netlink: 'syz.2.673': attribute type 4 has an invalid length. [ 172.457977][ T27] audit: type=1326 audit(172.330:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6579 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 172.515422][ T4343] lo speed is unknown, defaulting to 1000 [ 172.529607][ T6591] netlink: 'syz.2.673': attribute type 4 has an invalid length. [ 172.541327][ T1514] lo speed is unknown, defaulting to 1000 [ 173.290038][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 173.415478][ T6628] netlink: 'syz.4.691': attribute type 4 has an invalid length. [ 173.628915][ T27] audit: type=1326 audit(173.600:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 173.642928][ T27] audit: type=1326 audit(173.620:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=190 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 173.661981][ T27] audit: type=1326 audit(173.630:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 173.897514][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 173.901354][ T6628] netlink: 'syz.4.691': attribute type 4 has an invalid length. [ 173.943822][ T6640] netlink: 'syz.3.698': attribute type 13 has an invalid length. [ 173.987476][ T6642] loop4: detected capacity change from 0 to 736 [ 173.995462][ T6645] netlink: 56 bytes leftover after parsing attributes in process `syz.5.696'. [ 174.024009][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.073473][ T6642] rock: directory entry would overflow storage [ 174.075369][ T6642] rock: sig=0x3b10, size=4, remaining=3 [ 174.081050][ T6640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.100552][ T6642] netlink: 'syz.4.700': attribute type 27 has an invalid length. [ 174.329712][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 174.442911][ T6642] bridge0: port 3(dummy0) entered disabled state [ 174.445054][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.448774][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.991455][ T6642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.020261][ T6642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.369950][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 175.464193][ T6642] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.466847][ T6642] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.469354][ T6642] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.472190][ T6642] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.951685][ T6673] netlink: '+}[@': attribute type 4 has an invalid length. [ 175.981148][ T1514] lo speed is unknown, defaulting to 1000 [ 177.075094][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 177.213940][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.723'. [ 177.312918][ T27] audit: type=1326 audit(177.290:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 177.318941][ T27] audit: type=1326 audit(177.290:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 177.334139][ T6706] netlink: 96 bytes leftover after parsing attributes in process `syz.3.725'. [ 177.350935][ T27] audit: type=1326 audit(177.310:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 177.356886][ T27] audit: type=1326 audit(177.310:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 177.399669][ T27] audit: type=1326 audit(177.310:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 177.416202][ T27] audit: type=1326 audit(177.320:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 177.431254][ T27] audit: type=1326 audit(177.330:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 177.433648][ T6715] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 177.438558][ T27] audit: type=1326 audit(177.330:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 177.446388][ T27] audit: type=1326 audit(177.330:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 177.463094][ T27] audit: type=1326 audit(177.330:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.5.726" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 177.842828][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 178.089946][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 178.702736][ T6740] bond3 (unregistering): Released all slaves [ 178.852814][ T6740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.738'. [ 179.129660][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 179.490872][ T6748] lo speed is unknown, defaulting to 1000 [ 179.791764][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.742'. [ 179.808892][ T6752] loop3: detected capacity change from 0 to 2048 [ 179.855811][ T6753] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 179.920033][ T6752] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 180.031840][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 180.169863][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 181.119154][ T6780] bond3 (unregistering): Released all slaves [ 181.210844][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 181.290034][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.753'. [ 181.298200][ T6795] loop5: detected capacity change from 0 to 2048 [ 181.330172][ T6795] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 181.356043][ T6803] loop4: detected capacity change from 0 to 512 [ 181.391007][ T6803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 181.409264][ T6803] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #2: comm syz.4.762: corrupted inode contents [ 181.476117][ T6803] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #2: comm syz.4.762: mark_inode_dirty error [ 181.483855][ T6803] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #2: comm syz.4.762: corrupted inode contents [ 181.573882][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 182.137707][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 182.229300][ T6835] bond3 (unregistering): Released all slaves [ 182.251099][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 182.301614][ T6854] loop5: detected capacity change from 0 to 256 [ 182.307766][ T6854] FAT-fs (loop5): Unrecognized mount option "tz=cTC" or missing value [ 182.316030][ T6844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.775'. [ 182.412478][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.778'. [ 182.715028][ T27] kauditd_printk_skb: 54 callbacks suppressed [ 182.715041][ T27] audit: type=1326 audit(182.690:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 182.755284][ T27] audit: type=1326 audit(182.690:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=443 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 182.780515][ T27] audit: type=1326 audit(182.690:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 182.804101][ T27] audit: type=1326 audit(182.690:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6871 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 182.937403][ T6881] loop3: detected capacity change from 0 to 2048 [ 182.998794][ T6881] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 183.250252][ T6892] bond3 (unregistering): Released all slaves [ 183.269828][ T6899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.792'. [ 183.289616][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 183.709165][ T6924] loop5: detected capacity change from 0 to 1024 [ 183.776422][ T6924] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 183.796827][ T6924] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 183.814001][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 183.830206][ T6924] EXT4-fs error (device loop5): ext4_get_journal_inode:5735: inode #5: comm syz.5.803: unexpected bad inode w/o EXT4_IGET_BAD [ 183.873618][ T6924] EXT4-fs (loop5): no journal found [ 183.875249][ T6924] EXT4-fs (loop5): can't get journal size [ 183.894237][ T6924] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 183.935054][ T6924] EXT4-fs (loop5): unmounting filesystem. [ 184.917827][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 184.926204][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 185.352784][ T6961] loop5: detected capacity change from 0 to 1024 [ 185.384745][ T6961] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.532986][ T6965] loop3: detected capacity change from 0 to 764 [ 185.699055][ T6961] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 185.870092][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 186.128884][ T6979] tipc: Started in network mode [ 186.130608][ T6979] tipc: Node identity ac14140f, cluster identity 4711 [ 186.132704][ T6979] tipc: New replicast peer: 255.255.255.255 [ 186.135638][ T6972] loop3: detected capacity change from 0 to 8192 [ 186.177165][ T6979] tipc: Enabled bearer , priority 10 [ 186.290629][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.824'. [ 186.293261][ T6979] tipc: Disabling bearer [ 186.320344][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 186.328165][ T6982] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 186.502945][ T6990] Cannot find add_set index 2 as target [ 186.517501][ T27] audit: type=1326 audit(186.490:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 186.537964][ T27] audit: type=1326 audit(186.510:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=230 compat=0 ip=0xffff83b5a8a8 code=0x7ffc0000 [ 186.581598][ T6996] netlink: 132 bytes leftover after parsing attributes in process `syz.1.832'. [ 186.889655][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 187.398506][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 187.410205][ T7009] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 187.413157][ T7009] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 188.170580][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 188.174864][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.176679][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.676451][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'. [ 188.688149][ T7017] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 189.090277][ T27] audit: type=1326 audit(189.070:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 189.116981][ T27] audit: type=1326 audit(189.090:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 189.143333][ T27] audit: type=1326 audit(189.110:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 189.170663][ T27] audit: type=1326 audit(189.110:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 189.182706][ T27] audit: type=1326 audit(189.110:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 189.199135][ T27] audit: type=1326 audit(189.110:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 189.215814][ T27] audit: type=1326 audit(189.110:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 189.223870][ T7030] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 189.232270][ T27] audit: type=1326 audit(189.110:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 189.238204][ T27] audit: type=1326 audit(189.110:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 189.281467][ T27] audit: type=1326 audit(189.110:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.1.846" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 189.367561][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 189.799753][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.025212][ T7037] loop4: detected capacity change from 0 to 8192 [ 190.215339][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'. [ 190.242272][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): gre5: link becomes ready [ 191.328208][ T7069] netlink: 'syz.5.860': attribute type 1 has an invalid length. [ 191.870439][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 192.812341][ T7113] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 192.889680][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 192.960902][ T7120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.887'. [ 193.024058][ T7127] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 193.867231][ T7165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.888485][ T7165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.930041][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 194.361524][ T7194] futex_wake_op: syz.2.912 tries to shift op by -1; fix this program [ 194.969728][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 195.377121][ T7196] loop3: detected capacity change from 0 to 32768 [ 195.414904][ T7196] loop3: p1 p2 p3 < > [ 195.416299][ T7196] loop3: p1 size 242222080 extends beyond EOD, truncated [ 195.420423][ T7196] loop3: p2 start 4294967295 is beyond EOD, truncated [ 195.441416][ T7206] bridge0: port 3(gretap0) entered disabled state [ 195.498015][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.501531][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.532323][ T27] kauditd_printk_skb: 233 callbacks suppressed [ 195.532336][ T27] audit: type=1326 audit(195.510:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 195.546421][ T27] audit: type=1326 audit(195.510:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 195.571837][ T27] audit: type=1326 audit(195.520:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 195.586119][ T27] audit: type=1326 audit(195.520:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 195.608794][ T27] audit: type=1326 audit(195.520:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 195.620714][ T27] audit: type=1326 audit(195.540:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 195.627018][ T27] audit: type=1326 audit(195.540:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 195.634806][ T27] audit: type=1326 audit(195.540:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 195.641710][ T27] audit: type=1326 audit(195.540:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 195.647826][ T27] audit: type=1326 audit(195.540:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8595a8a8 code=0x7ffc0000 [ 195.749451][ T7219] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 195.752175][ T5466] udevd[5466]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 195.777714][ T5460] udevd[5460]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 195.876989][ T7206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.898218][ T7206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.009927][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 196.203276][ T7206] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.206203][ T7206] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.208953][ T7206] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.211733][ T7206] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.800302][ T7247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.933'. [ 197.018042][ T7258] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 197.049698][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 197.174548][ T7266] loop3: detected capacity change from 0 to 512 [ 197.215972][ T7262] loop5: detected capacity change from 0 to 8192 [ 197.233755][ T7266] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 197.265012][ T7266] EXT4-fs: Ignoring removed orlov option [ 197.270176][ T7266] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.275906][ T7266] EXT4-fs (loop3): can't enable nombcache during remount [ 197.344963][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 197.643139][ T7285] loop5: detected capacity change from 0 to 2048 [ 197.686326][ T7285] Alternate GPT is invalid, using primary GPT. [ 197.688183][ T7285] loop5: p1 p2 p3 [ 197.891791][ T7298] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 198.089936][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 198.354603][ T7312] device pim6reg1 entered promiscuous mode [ 198.519977][ T7322] loop5: detected capacity change from 0 to 128 [ 198.536214][ T7322] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 198.559333][ T7325] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 199.129700][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 199.178334][ T7341] bond5 (unregistering): Released all slaves [ 199.236058][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.972'. [ 199.266524][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.975'. [ 199.723891][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 199.727120][ T7376] loop3: detected capacity change from 0 to 128 [ 199.878505][ T7381] futex_wake_op: syz.4.987 tries to shift op by -1; fix this program [ 200.169951][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 200.628797][ T7391] lo speed is unknown, defaulting to 1000 [ 200.821018][ T7387] loop4: detected capacity change from 0 to 2048 [ 200.877614][ T7387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 201.090103][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 201.209627][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 201.337980][ T7390] lo speed is unknown, defaulting to 1000 [ 201.453934][ T7407] netlink: 32 bytes leftover after parsing attributes in process `syz.1.995'. [ 202.249944][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 202.283586][ T7428] netlink: 'syz.4.1004': attribute type 1 has an invalid length. [ 202.319276][ T7428] 8021q: adding VLAN 0 to HW filter on device bond5 [ 202.326432][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 202.342921][ T7432] device ipvlan2 entered promiscuous mode [ 202.354155][ T7432] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 202.356992][ T7432] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 202.804892][ T7454] loop5: detected capacity change from 0 to 512 [ 202.927903][ T7454] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 203.280958][ T7454] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 203.289652][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 203.408871][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 203.990506][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 203.996064][ T7478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1021'. [ 204.178156][ T7485] netlink: 'syz.3.1023': attribute type 1 has an invalid length. [ 204.194888][ T7485] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1023'. [ 204.228362][ T27] kauditd_printk_skb: 239 callbacks suppressed [ 204.228376][ T27] audit: type=1326 audit(204.200:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 204.253700][ T27] audit: type=1326 audit(204.200:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 204.294555][ T27] audit: type=1326 audit(204.220:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 204.323287][ T27] audit: type=1326 audit(204.220:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 204.330013][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 204.349634][ T27] audit: type=1326 audit(204.220:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 204.377527][ T27] audit: type=1326 audit(204.220:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 204.387839][ T7500] netlink: 'syz.1.1029': attribute type 4 has an invalid length. [ 204.394698][ T27] audit: type=1326 audit(204.220:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 204.417759][ T7500] netlink: 'syz.1.1029': attribute type 4 has an invalid length. [ 204.434570][ T27] audit: type=1326 audit(204.220:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 204.447943][ T27] audit: type=1326 audit(204.220:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=228 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 204.457603][ T27] audit: type=1326 audit(204.220:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 204.523705][ T7507] loop5: detected capacity change from 0 to 512 [ 204.627698][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 204.700978][ T7507] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 204.703834][ T7507] EXT4-fs (loop5): orphan cleanup on readonly fs [ 204.725147][ T7507] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 204.745991][ T7507] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 204.754910][ T7507] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1034: bg 0: block 40: padding at end of block bitmap is not set [ 204.790942][ T7507] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 204.802755][ T7507] EXT4-fs (loop5): 1 truncate cleaned up [ 204.804422][ T7507] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 205.122663][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 205.138804][ T7540] netlink: 'syz.1.1048': attribute type 4 has an invalid length. [ 205.192213][ T7546] netlink: 'syz.1.1048': attribute type 4 has an invalid length. [ 205.369613][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.940415][ T7564] Falling back ldisc for ttyS3. [ 206.025640][ T7581] loop5: detected capacity change from 0 to 512 [ 206.050616][ T7579] netlink: 'syz.2.1063': attribute type 4 has an invalid length. [ 206.056754][ T7579] netlink: 'syz.2.1063': attribute type 4 has an invalid length. [ 206.075144][ T7581] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 206.087267][ T111] lo speed is unknown, defaulting to 1000 [ 206.409912][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 206.413708][ T7607] futex_wake_op: syz.2.1074 tries to shift op by -1; fix this program [ 207.190087][ T7611] lo speed is unknown, defaulting to 1000 [ 207.364943][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 207.449655][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 208.317149][ T7670] loop5: detected capacity change from 0 to 512 [ 208.349319][ T7670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 208.397806][ T7670] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 208.489936][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 208.510237][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 209.529663][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 210.133064][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 210.492657][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 210.492669][ T27] audit: type=1326 audit(210.470:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.5.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 210.504601][ T27] audit: type=1326 audit(210.480:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.5.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 210.519572][ T27] audit: type=1326 audit(210.480:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.5.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 210.525920][ T27] audit: type=1326 audit(210.490:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.5.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=182 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 210.537680][ T27] audit: type=1326 audit(210.490:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.5.1143" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 210.569887][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 211.273415][ T7785] netlink: 'syz.2.1145': attribute type 1 has an invalid length. [ 211.299650][ T7785] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1145'. [ 211.609661][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 212.430346][ T7807] netlink: 'syz.5.1152': attribute type 4 has an invalid length. [ 212.491972][ T7807] netlink: 'syz.5.1152': attribute type 4 has an invalid length. [ 212.649935][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.821020][ T7819] lo speed is unknown, defaulting to 1000 [ 213.894999][ T7819] hub 9-0:1.0: USB hub found [ 213.900430][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.903596][ T7819] hub 9-0:1.0: 8 ports detected [ 214.665358][ T7836] tipc: Started in network mode [ 214.666820][ T7836] tipc: Node identity 2e6bca2d9f51, cluster identity 4711 [ 214.668892][ T7836] tipc: Enabled bearer , priority 0 [ 214.688455][ T7835] tipc: Resetting bearer [ 214.975491][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.671214][ T4346] tipc: Node number set to 2973420077 [ 215.709430][ T7858] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1172'. [ 216.009630][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.049931][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.987370][ T7886] loop5: detected capacity change from 0 to 512 [ 217.993877][ T7886] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.995788][ T7886] EXT4-fs: Ignoring removed bh option [ 218.007425][ T7886] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.010736][ T7886] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 218.089662][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.257524][ T7886] EXT4-fs (loop5): 1 truncate cleaned up [ 218.259378][ T7886] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 219.129900][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.169827][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 221.209895][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 222.249666][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.289922][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 224.329661][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 225.289618][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 225.379892][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 226.409719][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 227.449912][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 228.221972][ T7835] tipc: Disabling bearer [ 228.228389][ T7862] netlink: 'syz.2.1174': attribute type 1 has an invalid length. [ 228.244093][ T7863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1174'. [ 228.285007][ T7887] lo speed is unknown, defaulting to 1000 [ 228.360327][ T7894] netlink: 'syz.1.1184': attribute type 1 has an invalid length. [ 228.374376][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1184'. [ 228.383089][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 228.489698][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 228.662422][ T7919] syz.5.1193 uses obsolete (PF_INET,SOCK_PACKET) [ 229.780943][ T7942] lo speed is unknown, defaulting to 1000 [ 229.820207][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 229.842550][ T7939] netlink: 'syz.2.1202': attribute type 1 has an invalid length. [ 229.861222][ T7936] loop4: detected capacity change from 0 to 512 [ 229.864241][ T7936] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.866007][ T7936] EXT4-fs: Ignoring removed bh option [ 229.905780][ T7936] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.909307][ T7936] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 229.948276][ T7936] EXT4-fs (loop4): 1 truncate cleaned up [ 229.950040][ T7936] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 229.985377][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1202'. [ 230.171169][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 230.386506][ T7960] loop2: detected capacity change from 0 to 1024 [ 230.388877][ T7960] EXT4-fs: Ignoring removed nobh option [ 230.393050][ T27] audit: type=1326 audit(230.370:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.5.1207" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 230.411491][ T27] audit: type=1326 audit(230.390:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.5.1207" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=158 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 230.421605][ T7960] EXT4-fs: Ignoring removed bh option [ 230.431168][ T27] audit: type=1326 audit(230.390:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.5.1207" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 230.480010][ T7960] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 231.539565][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 231.597974][ T4308] EXT4-fs (loop2): unmounting filesystem. [ 231.769691][ T7976] netlink: 'syz.5.1214': attribute type 1 has an invalid length. [ 232.064236][ T7980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.404842][ T7991] loop4: detected capacity change from 0 to 512 [ 232.411035][ T7991] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.412882][ T7991] EXT4-fs: Ignoring removed bh option [ 232.454716][ T7991] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 232.457899][ T7991] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 232.528857][ T7991] EXT4-fs (loop4): 1 truncate cleaned up [ 232.530688][ T7991] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 232.589308][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.753224][ T7980] bond1: (slave bond2): making interface the new active one [ 232.755670][ T7980] bond1: (slave bond2): Enslaving as an active interface with an up link [ 232.760790][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1214'. [ 232.772908][ T7983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.950145][ T7989] lo speed is unknown, defaulting to 1000 [ 233.056212][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 233.341716][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1224'. [ 233.551413][ T8013] loop4: detected capacity change from 0 to 512 [ 233.555534][ T8013] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.555629][ T8013] EXT4-fs: Ignoring removed bh option [ 233.560824][ T8013] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.560892][ T8013] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 234.081374][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 234.147910][ T8013] EXT4-fs (loop4): 1 truncate cleaned up [ 234.147940][ T8013] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 234.429026][ T27] audit: type=1326 audit(234.400:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 234.456746][ T27] audit: type=1326 audit(234.430:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=218 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 234.478016][ T27] audit: type=1326 audit(234.440:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 234.491377][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 234.508435][ T27] audit: type=1326 audit(234.440:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.5.1228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 234.734931][ T8033] lo speed is unknown, defaulting to 1000 [ 235.130084][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 235.268189][ T8044] loop5: detected capacity change from 0 to 512 [ 235.275948][ T8044] EXT4-fs: Ignoring removed mblk_io_submit option [ 235.277836][ T8044] EXT4-fs: Ignoring removed bh option [ 235.375535][ T8044] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.378822][ T8044] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 235.577711][ T8044] EXT4-fs (loop5): 1 truncate cleaned up [ 235.580484][ T8044] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 235.674555][ T8045] lo speed is unknown, defaulting to 1000 [ 235.951729][ T8054] device syzkaller0 entered promiscuous mode [ 236.179627][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 237.209905][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 238.249661][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.299886][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.339630][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 241.379901][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 242.409732][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 243.450284][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.489759][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.539952][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.569687][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.609872][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.826943][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 248.363490][ T8123] hub 8-0:1.0: USB hub found [ 248.365468][ T8123] hub 8-0:1.0: 8 ports detected [ 248.649667][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.929894][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.971372][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.079432][ T8129] loop5: detected capacity change from 0 to 8192 [ 249.148721][ T8129] loop5: p2 p3 p4 [ 249.149979][ T8129] loop5: partition table partially beyond EOD, truncated [ 249.152035][ T8129] loop5: p2 start 4294967295 is beyond EOD, truncated [ 249.153924][ T8129] loop5: p3 start 83886080 is beyond EOD, truncated [ 249.174644][ T8129] loop5: p4 size 3599499264 extends beyond EOD, truncated [ 249.482705][ T8083] udevd[8083]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 249.689940][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 250.229907][ T8147] lo speed is unknown, defaulting to 1000 [ 250.384199][ T8145] loop5: detected capacity change from 0 to 512 [ 250.386433][ T8145] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.388572][ T8145] EXT4-fs: Ignoring removed bh option [ 250.391090][ T8145] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 250.394192][ T8145] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 250.423245][ T8145] EXT4-fs (loop5): 1 truncate cleaned up [ 250.424898][ T8145] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 250.640317][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 250.708536][ T27] audit: type=1326 audit(250.680:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.5.1271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 250.720072][ T27] audit: type=1326 audit(250.700:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.5.1271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 250.729716][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 250.772056][ T27] audit: type=1326 audit(250.750:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.5.1271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 250.787005][ T27] audit: type=1326 audit(250.750:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.5.1271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 250.840268][ T27] audit: type=1326 audit(250.750:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.5.1271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 250.895793][ T27] audit: type=1326 audit(250.750:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.5.1271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 250.938121][ T27] audit: type=1326 audit(250.750:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.5.1271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 251.152475][ T8163] hub 8-0:1.0: USB hub found [ 251.154920][ T8163] hub 8-0:1.0: 8 ports detected [ 251.674022][ T27] audit: type=1326 audit(250.750:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.5.1271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 251.680799][ T27] audit: type=1326 audit(250.750:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.5.1271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 251.686898][ T27] audit: type=1326 audit(250.760:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.5.1271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacf5a8a8 code=0x7ffc0000 [ 251.769840][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.809780][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 253.147470][ T8191] loop1: detected capacity change from 0 to 512 [ 253.154938][ T8191] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.156933][ T8191] EXT4-fs: Ignoring removed bh option [ 253.187012][ T8191] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 253.190278][ T8191] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 253.454654][ T8191] EXT4-fs (loop1): 1 truncate cleaned up [ 253.456409][ T8191] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 253.849900][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.889673][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 255.929902][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.969696][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.009935][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 259.049687][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 260.099954][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 261.129721][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 262.169915][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 263.209706][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.249939][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.266507][ T8189] lo speed is unknown, defaulting to 1000 [ 264.366149][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 264.405798][ T8214] hub 8-0:1.0: USB hub found [ 264.407238][ T8214] hub 8-0:1.0: 8 ports detected [ 264.808888][ T8228] loop3: detected capacity change from 0 to 1024 [ 264.843503][ T8228] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 264.900015][ T8230] loop4: detected capacity change from 0 to 1024 [ 264.902434][ T8230] EXT4-fs: Ignoring removed orlov option [ 264.917042][ T8228] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 265.189137][ T4295] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /264/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 265.289653][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.418134][ T8241] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 265.420961][ T8241] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 266.049140][ T4295] EXT4-fs (loop3): Remounting filesystem read-only [ 266.060388][ T4295] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /264/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 266.077368][ T4295] EXT4-fs (loop3): Remounting filesystem read-only [ 266.088160][ T4295] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 266.109052][ T4295] EXT4-fs (loop3): Remounting filesystem read-only [ 266.139962][ T4295] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /264/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 266.169789][ T4295] EXT4-fs (loop3): Remounting filesystem read-only [ 266.171960][ T4295] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 266.182333][ T4295] EXT4-fs (loop3): Remounting filesystem read-only [ 266.184583][ T4295] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /264/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 266.209638][ T4295] EXT4-fs (loop3): Remounting filesystem read-only [ 266.211793][ T4295] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 266.248125][ T4295] EXT4-fs (loop3): Remounting filesystem read-only [ 266.250432][ T4295] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /264/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 266.279661][ T4295] EXT4-fs (loop3): Remounting filesystem read-only [ 266.281784][ T4295] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 266.290005][ T4295] EXT4-fs (loop3): Remounting filesystem read-only [ 266.292271][ T4295] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /264/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 266.339881][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.379615][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.410026][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.449653][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.489970][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 271.529657][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.569996][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.609707][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.649901][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.699694][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.729985][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 277.667243][ T8275] loop4: detected capacity change from 0 to 1024 [ 277.700019][ T8275] EXT4-fs: Ignoring removed oldalloc option [ 277.701802][ T8275] EXT4-fs: Ignoring removed orlov option [ 277.754074][ T8275] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 277.769746][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 277.822178][ T4295] EXT4-fs: 194 callbacks suppressed [ 277.822192][ T4295] EXT4-fs (loop3): unmounting filesystem. [ 277.879455][ T8287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1303'. [ 277.895990][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 277.896005][ T27] audit: type=1326 audit(277.870:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 277.909179][ T27] audit: type=1326 audit(277.870:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 277.937069][ T8275] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.1303: Allocating blocks 497-513 which overlap fs metadata [ 277.955039][ T27] audit: type=1326 audit(277.880:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=283 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 277.968053][ T27] audit: type=1326 audit(277.880:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 278.007455][ T27] audit: type=1326 audit(277.880:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.1308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa055a8a8 code=0x7ffc0000 [ 278.077940][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 278.155772][ T8300] loop4: detected capacity change from 0 to 512 [ 278.217391][ T8300] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 278.305679][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.310944][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.315669][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.319355][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.326828][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.329827][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.819530][ C0] ------------[ cut here ]------------ [ 278.821424][ C0] refcount_t: addition on 0; use-after-free. [ 278.823372][ C0] WARNING: CPU: 0 PID: 8298 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 278.825908][ C0] Modules linked in: [ 278.826950][ C0] CPU: 0 PID: 8298 Comm: syz.5.1311 Not tainted 6.1.141-syzkaller #0 [ 278.829231][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.832109][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 278.834342][ C0] pc : refcount_warn_saturate+0x134/0x1f8 [ 278.835986][ C0] lr : refcount_warn_saturate+0x134/0x1f8 [ 278.837628][ C0] sp : ffff8000080078c0 [ 278.838806][ C0] x29: ffff8000080078c0 x28: ffff0000ce6ee000 x27: ffff0000c3983a08 [ 278.841072][ C0] x26: ffff0000dbcf2d70 x25: dfff800000000000 x24: 1fffe00018730741 [ 278.843389][ C0] x23: ffff0000d9a02000 x22: ffff0000d3420154 x21: ffff0000d9799080 [ 278.845691][ C0] x20: ffff0000d3420154 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 278.847961][ C0] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 278.850266][ C0] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 278.852579][ C0] x11: ff0080000819149c x10: 0000000000000000 x9 : 7f870c3ea0d9f300 [ 278.854873][ C0] x8 : 7f870c3ea0d9f300 x7 : 0000000000000001 x6 : 0000000000000001 [ 278.857147][ C0] x5 : ffff800008007358 x4 : ffff800015154700 x3 : ffff80000852da40 [ 278.859446][ C0] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000000 [ 278.861824][ C0] Call trace: [ 278.862748][ C0] refcount_warn_saturate+0x134/0x1f8 [ 278.864335][ C0] tipc_crypto_xmit+0x1518/0x2014 [ 278.865781][ C0] tipc_bearer_xmit_skb+0x1f0/0x384 [ 278.867261][ C0] tipc_disc_timeout+0x4c8/0x608 [ 278.868681][ C0] call_timer_fn+0x1b8/0x964 [ 278.870008][ C0] __run_timers+0x460/0x6bc [ 278.871297][ C0] run_timer_softirq+0x7c/0x114 [ 278.872697][ C0] handle_softirqs+0x318/0xc6c [ 278.874035][ C0] __do_softirq+0x14/0x20 [ 278.875227][ C0] ____do_softirq+0x14/0x20 [ 278.876487][ C0] call_on_irq_stack+0x24/0x4c [ 278.877875][ C0] do_softirq_own_stack+0x20/0x2c [ 278.879416][ C0] __irq_exit_rcu+0x23c/0x43c [ 278.880716][ C0] irq_exit_rcu+0x14/0x84 [ 278.881965][ C0] el1_interrupt+0x38/0x54 [ 278.883184][ C0] el1h_64_irq_handler+0x18/0x24 [ 278.884624][ C0] el1h_64_irq+0x64/0x68 [ 278.885883][ C0] lock_is_held_type+0x60/0x198 [ 278.887264][ C0] __might_resched+0x98/0x4cc [ 278.888604][ C0] __might_sleep+0x94/0x110 [ 278.889881][ C0] __mutex_lock_common+0xcc/0x1f38 [ 278.891302][ C0] mutex_lock_nested+0x38/0x44 [ 278.892744][ C0] __unix_dgram_recvmsg+0x16c/0xae8 [ 278.894234][ C0] unix_dgram_recvmsg+0xd0/0xe8 [ 278.895604][ C0] ____sys_recvmsg+0x62c/0x71c [ 278.896946][ C0] do_recvmmsg+0x364/0x96c [ 278.898219][ C0] __arm64_sys_recvmmsg+0x17c/0x238 [ 278.899735][ C0] invoke_syscall+0x98/0x2bc [ 278.901036][ C0] el0_svc_common+0x138/0x258 [ 278.902411][ C0] do_el0_svc+0x58/0x13c [ 278.903647][ C0] el0_svc+0x58/0x138 [ 278.904771][ C0] el0t_64_sync_handler+0x84/0xf0 [ 278.906192][ C0] el0t_64_sync+0x18c/0x190 [ 278.907486][ C0] irq event stamp: 72113 [ 278.908714][ C0] hardirqs last enabled at (72112): [] __up_console_sem+0xb4/0x100 [ 278.911479][ C0] hardirqs last disabled at (72113): [] el1_dbg+0x24/0x80 [ 278.913938][ C0] softirqs last enabled at (70076): [] handle_softirqs+0xaf8/0xc6c [ 278.916774][ C0] softirqs last disabled at (72081): [] __do_softirq+0x14/0x20 [ 278.919420][ C0] ---[ end trace 0000000000000000 ]--- [ 278.921119][ C0] ------------[ cut here ]------------ [ 278.922611][ C0] refcount_t: underflow; use-after-free. [ 278.924457][ C0] WARNING: CPU: 0 PID: 8298 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 278.927039][ C0] Modules linked in: [ 278.928157][ C0] CPU: 0 PID: 8298 Comm: syz.5.1311 Tainted: G W 6.1.141-syzkaller #0 [ 278.930789][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.933582][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 278.935805][ C0] pc : refcount_warn_saturate+0x154/0x1f8 [ 278.937388][ C0] lr : refcount_warn_saturate+0x154/0x1f8 [ 278.938969][ C0] sp : ffff8000080078c0 [ 278.940151][ C0] x29: ffff8000080078c0 x28: ffff0000ce6ee000 x27: 0000000000000000 [ 278.942410][ C0] x26: ffff0000dbcf2d70 x25: dfff800000000000 x24: 1fffe0001b79e5b8 [ 278.944856][ C0] x23: 1fffe0001975ca69 x22: ffff0000c3983a00 x21: 00000000c0000000 [ 278.947142][ C0] x20: ffff0000d3420154 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 278.949498][ C0] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 278.951865][ C0] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 278.954131][ C0] x11: ff0080000819149c x10: 0000000000000000 x9 : 7f870c3ea0d9f300 [ 278.956458][ C0] x8 : 7f870c3ea0d9f300 x7 : 0000000000000001 x6 : 0000000000000001 [ 278.958713][ C0] x5 : ffff800008007358 x4 : ffff800015154700 x3 : ffff8000083115f4 [ 278.960914][ C0] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000000 [ 278.963150][ C0] Call trace: [ 278.964164][ C0] refcount_warn_saturate+0x154/0x1f8 [ 278.965651][ C0] tipc_crypto_xmit+0x1664/0x2014 [ 278.967059][ C0] tipc_bearer_xmit_skb+0x1f0/0x384 [ 278.968513][ C0] tipc_disc_timeout+0x4c8/0x608 [ 278.969850][ C0] call_timer_fn+0x1b8/0x964 [ 278.971154][ C0] __run_timers+0x460/0x6bc [ 278.972407][ C0] run_timer_softirq+0x7c/0x114 [ 278.973764][ C0] handle_softirqs+0x318/0xc6c [ 278.975143][ C0] __do_softirq+0x14/0x20 [ 278.976373][ C0] ____do_softirq+0x14/0x20 [ 278.977587][ C0] call_on_irq_stack+0x24/0x4c [ 278.978943][ C0] do_softirq_own_stack+0x20/0x2c [ 278.980377][ C0] __irq_exit_rcu+0x23c/0x43c [ 278.981654][ C0] irq_exit_rcu+0x14/0x84 [ 278.982841][ C0] el1_interrupt+0x38/0x54 [ 278.983995][ C0] el1h_64_irq_handler+0x18/0x24 [ 278.985426][ C0] el1h_64_irq+0x64/0x68 [ 278.986611][ C0] lock_is_held_type+0x60/0x198 [ 278.987950][ C0] __might_resched+0x98/0x4cc [ 278.989272][ C0] __might_sleep+0x94/0x110 [ 278.990547][ C0] __mutex_lock_common+0xcc/0x1f38 [ 278.991977][ C0] mutex_lock_nested+0x38/0x44 [ 278.993333][ C0] __unix_dgram_recvmsg+0x16c/0xae8 [ 278.994770][ C0] unix_dgram_recvmsg+0xd0/0xe8 [ 278.996144][ C0] ____sys_recvmsg+0x62c/0x71c [ 278.997496][ C0] do_recvmmsg+0x364/0x96c [ 278.998746][ C0] __arm64_sys_recvmmsg+0x17c/0x238 [ 279.000188][ C0] invoke_syscall+0x98/0x2bc [ 279.001478][ C0] el0_svc_common+0x138/0x258 [ 279.002917][ C0] do_el0_svc+0x58/0x13c [ 279.004116][ C0] el0_svc+0x58/0x138 [ 279.005204][ C0] el0t_64_sync_handler+0x84/0xf0 [ 279.006599][ C0] el0t_64_sync+0x18c/0x190 [ 279.007910][ C0] irq event stamp: 72145 [ 279.009160][ C0] hardirqs last enabled at (72144): [] __up_console_sem+0xb4/0x100 [ 279.011820][ C0] hardirqs last disabled at (72145): [] el1_dbg+0x24/0x80 [ 279.014251][ C0] softirqs last enabled at (70076): [] handle_softirqs+0xaf8/0xc6c [ 279.016894][ C0] softirqs last disabled at (72081): [] __do_softirq+0x14/0x20 [ 279.019394][ C0] ---[ end trace 0000000000000000 ]--- [ 279.021269][ C0] ------------[ cut here ]------------ [ 279.022810][ C0] refcount_t: saturated; leaking memory. [ 279.024672][ C0] WARNING: CPU: 0 PID: 8298 at lib/refcount.c:22 refcount_warn_saturate+0x1b4/0x1f8 [ 279.027204][ C0] Modules linked in: [ 279.028225][ C0] CPU: 0 PID: 8298 Comm: syz.5.1311 Tainted: G W 6.1.141-syzkaller #0 [ 279.030824][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.033674][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 279.035840][ C0] pc : refcount_warn_saturate+0x1b4/0x1f8 [ 279.037426][ C0] lr : refcount_warn_saturate+0x1b4/0x1f8 [ 279.038973][ C0] sp : ffff8000080078c0 [ 279.040147][ C0] x29: ffff8000080078c0 x28: ffff0000ce6ee400 x27: ffff0000c3983a08 [ 279.042437][ C0] x26: ffff0000dbcf2370 x25: dfff800000000000 x24: 1fffe00018730741 [ 279.044686][ C0] x23: ffff0000d84c6000 x22: ffff0000d3420154 x21: 000000007ffffffe [ 279.046894][ C0] x20: ffff0000d3420154 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 279.049082][ C0] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 279.051333][ C0] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 279.053564][ C0] x11: ff0080000819149c x10: 0000000000000000 x9 : 7f870c3ea0d9f300 [ 279.055863][ C0] x8 : 7f870c3ea0d9f300 x7 : 0000000000000001 x6 : 0000000000000001 [ 279.058203][ C0] x5 : ffff800008007358 x4 : ffff800015154700 x3 : ffff80000852da40 [ 279.060357][ C0] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000000 [ 279.062630][ C0] Call trace: [ 279.063540][ C0] refcount_warn_saturate+0x1b4/0x1f8 [ 279.064982][ C0] tipc_crypto_xmit+0x1518/0x2014 [ 279.066418][ C0] tipc_bearer_xmit_skb+0x1f0/0x384 [ 279.067893][ C0] tipc_disc_timeout+0x4c8/0x608 [ 279.069255][ C0] call_timer_fn+0x1b8/0x964 [ 279.070625][ C0] __run_timers+0x460/0x6bc [ 279.071965][ C0] run_timer_softirq+0x7c/0x114 [ 279.073324][ C0] handle_softirqs+0x318/0xc6c [ 279.074677][ C0] __do_softirq+0x14/0x20 [ 279.075863][ C0] ____do_softirq+0x14/0x20 [ 279.077138][ C0] call_on_irq_stack+0x24/0x4c [ 279.078522][ C0] do_softirq_own_stack+0x20/0x2c [ 279.079917][ C0] __irq_exit_rcu+0x23c/0x43c [ 279.081239][ C0] irq_exit_rcu+0x14/0x84 [ 279.082475][ C0] el1_interrupt+0x38/0x54 [ 279.083724][ C0] el1h_64_irq_handler+0x18/0x24 [ 279.085140][ C0] el1h_64_irq+0x64/0x68 [ 279.086395][ C0] lock_is_held_type+0x60/0x198 [ 279.087722][ C0] __might_resched+0x98/0x4cc [ 279.089097][ C0] __might_sleep+0x94/0x110 [ 279.090335][ C0] __mutex_lock_common+0xcc/0x1f38 [ 279.091812][ C0] mutex_lock_nested+0x38/0x44 [ 279.093192][ C0] __unix_dgram_recvmsg+0x16c/0xae8 [ 279.094708][ C0] unix_dgram_recvmsg+0xd0/0xe8 [ 279.096084][ C0] ____sys_recvmsg+0x62c/0x71c [ 279.097444][ C0] do_recvmmsg+0x364/0x96c [ 279.098665][ C0] __arm64_sys_recvmmsg+0x17c/0x238 [ 279.100097][ C0] invoke_syscall+0x98/0x2bc [ 279.101373][ C0] el0_svc_common+0x138/0x258 [ 279.102646][ C0] do_el0_svc+0x58/0x13c [ 279.103794][ C0] el0_svc+0x58/0x138 [ 279.104891][ C0] el0t_64_sync_handler+0x84/0xf0 [ 279.106303][ C0] el0t_64_sync+0x18c/0x190 [ 279.107575][ C0] irq event stamp: 72265 [ 279.108729][ C0] hardirqs last enabled at (72264): [] __up_console_sem+0xb4/0x100 [ 279.111442][ C0] hardirqs last disabled at (72265): [] el1_dbg+0x24/0x80 [ 279.113923][ C0] softirqs last enabled at (70076): [] handle_softirqs+0xaf8/0xc6c [ 279.116696][ C0] softirqs last disabled at (72081): [] __do_softirq+0x14/0x20 [ 279.119217][ C0] ---[ end trace 0000000000000000 ]--- [ 279.121012][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 280.089662][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.419601][ T4297] Bluetooth: hci0: command 0x0409 tx timeout [ 281.129725][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.169663][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 282.489630][ T4297] Bluetooth: hci0: command 0x041b tx timeout [ 283.209701][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 284.259665][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 284.569616][ T4297] Bluetooth: hci0: command 0x040f tx timeout [ 285.299660][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.339678][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 286.649640][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 287.369681][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 288.409710][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available