last executing test programs: 6.739603072s ago: executing program 0 (id=54): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 6.677687115s ago: executing program 0 (id=55): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) 6.651378447s ago: executing program 0 (id=56): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x110000, 0x32, 0x43a1bd76, 0x0, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.434824169s ago: executing program 0 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0/file0\x00') 6.376200533s ago: executing program 0 (id=60): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mbind(&(0x7f00004c2000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1fc9, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004d9000/0x2000)=nil) mlock2(&(0x7f00008cd000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2, 0x0) 6.103796978s ago: executing program 0 (id=61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002900)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x85c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x26}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4d7, 0x5, 0x18800000, 0x4b, 0x7fffffff, 0xffffffff, 0x8, 0x3, 0x8, 0x5, 0x2, 0x8, 0x1ff, 0x5, 0x7, 0x0, 0x3, 0x7fffffff, 0x1, 0x1, 0xb7a, 0x8001, 0x1, 0x800, 0x81, 0x7, 0x6, 0x8ee, 0xe, 0x7, 0x2e, 0x3, 0x1, 0x0, 0xfffffff9, 0x13dd, 0xf05, 0x0, 0x4, 0xb, 0x78f7e8f0, 0x4, 0xfff, 0xffffff7f, 0x0, 0x3ff, 0x1, 0x80, 0x9, 0xf, 0x1, 0xc, 0x4ba, 0x3, 0x1f9, 0x1, 0x3, 0x87f, 0x32, 0x5, 0xffff, 0x9, 0x200, 0x7, 0x2, 0x400, 0x8, 0x2, 0x5, 0x3, 0x1000, 0xfff, 0x3, 0x1, 0xc864, 0x2, 0x1711, 0xfa, 0x5, 0x9, 0x101, 0x5f, 0xffffffe7, 0x345, 0x6, 0x1, 0xeaa, 0xffffffff, 0x8, 0x9, 0x80000001, 0x6, 0x7, 0x5, 0x5, 0x8, 0x7, 0x7ff, 0xfff, 0x0, 0x1, 0x3, 0x22cd, 0xa0d, 0x0, 0x7, 0xa627, 0x9, 0x6, 0xadd4, 0x1000000, 0x7, 0x79d, 0x7ff, 0x8000, 0x9, 0x7f, 0x2, 0x3ff, 0x1, 0xe7c, 0x40, 0xf, 0x2, 0x1080000, 0x3, 0x2, 0xf, 0xfffffffb, 0xfffffffb, 0x4, 0x10000, 0x3, 0x8, 0x1, 0xa, 0x0, 0x40, 0x0, 0x0, 0x200, 0x0, 0x8, 0x2cf, 0x36, 0x5, 0xfffffffe, 0x3a03, 0x0, 0x3a, 0x2, 0x100, 0x7, 0x100, 0x9831, 0x2, 0x80000000, 0x1ff, 0x8, 0xfffffffb, 0x7, 0x7ff, 0x2, 0x8, 0x4898, 0x5, 0x384, 0x0, 0x5, 0x7, 0x1, 0x2, 0x6, 0x3d8, 0xf, 0x5, 0x7, 0x5, 0x2, 0x7f, 0x1, 0x621595c2, 0xfd, 0x3, 0x5, 0xb, 0x5, 0x7, 0xde71, 0x8001, 0xff, 0x65, 0x2, 0x5, 0x2, 0x12000, 0x10000, 0x3, 0x6, 0x7fffffff, 0x4, 0x1, 0xebb, 0x2, 0x7d9, 0x7ff, 0xf5b, 0x4, 0xf, 0xf2c5, 0xa09e, 0x6, 0xc, 0x5, 0x5, 0xdf, 0x91, 0xec, 0x0, 0x5, 0x2, 0x3434, 0xffffffff, 0x4, 0x2, 0x9, 0xb9e9, 0x0, 0x1, 0x1, 0x40, 0x6, 0x200, 0x7, 0x4, 0x9, 0x3, 0x1, 0x7, 0x5, 0x1000, 0x4, 0x2353, 0x200, 0xfffffffe, 0xc, 0x2, 0x0, 0x1000, 0x1, 0xff, 0xf, 0x0, 0x4, 0x4, 0x1c54]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xfffffff0, 0x7, 0x0, 0x0, 0x10000, 0x1, 0x400, 0x8, 0x45f, 0x101, 0x8, 0x401, 0x7, 0xfff, 0x7, 0x9, 0x3, 0x8, 0x7, 0x7ff, 0x1, 0xe, 0x2, 0xffff, 0x1ce1a37f, 0x3, 0x0, 0x5, 0x9, 0x6, 0xb, 0x8, 0x1, 0x8, 0x7e5f3f3d, 0xee, 0x80000001, 0x7, 0x0, 0x5, 0x8001, 0x9, 0xd, 0x3, 0x0, 0x3, 0x8c, 0x9, 0x92, 0xf1f, 0x4, 0x4, 0x400, 0x5, 0x16, 0x2, 0x9, 0x6, 0x4, 0x5, 0x1, 0xfffffff4, 0x5, 0x4, 0x6, 0x5, 0x4, 0xbec, 0x40, 0x1, 0xc2, 0x7bf, 0xfffffffb, 0xa23, 0xa, 0x9, 0x4, 0xfd4, 0xe, 0x3, 0x4, 0x5, 0x1, 0x6, 0x6, 0x7, 0x0, 0x3, 0x7, 0x5, 0x2, 0x1, 0x6, 0xe, 0x8, 0x4, 0x7, 0x7, 0x8, 0x2, 0x3, 0x7, 0x6, 0xe560, 0x8, 0x5, 0x7, 0xffff, 0x1, 0x100000, 0xfffff000, 0x2, 0x900, 0xffffffff, 0x6, 0x4, 0x1, 0xffffd361, 0x6, 0x3, 0x3, 0x1, 0x4, 0x5, 0x4, 0xdf8, 0x3, 0x3, 0x9, 0x1, 0x80, 0x2, 0x696f, 0x2, 0x5, 0x10001, 0xfffffffb, 0xfffffffe, 0x7fff, 0x80000000, 0x5, 0x0, 0x6, 0x9, 0x7, 0x80000000, 0x6, 0x9, 0x8f1a, 0x3, 0x200, 0x8, 0xff, 0x2, 0xabe3, 0x401, 0x6, 0x0, 0x8, 0xffffffff, 0x4, 0xffffffff, 0x0, 0x6, 0x6, 0x9, 0x8000, 0x3ff, 0x101, 0xe27, 0x3, 0xd9c, 0xfffffffd, 0x0, 0x4, 0xa509, 0x9ed, 0x8, 0x7ff, 0x5, 0x7fffffff, 0x6, 0x1, 0x8, 0x4, 0x1, 0xb7, 0x26, 0x800, 0x6, 0x9, 0x101, 0x7b, 0xfffffffc, 0x9, 0x2, 0x20, 0x0, 0x80000000, 0x424, 0x9, 0xb, 0x2, 0x9a, 0x5, 0x10, 0x0, 0xfffffff4, 0x0, 0x2, 0x80000000, 0x0, 0x8001, 0x1, 0x9, 0x36, 0x7, 0x8, 0x4, 0x9, 0xe902, 0x4, 0x1, 0x2, 0x1, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x5, 0x9, 0x3, 0xdb, 0xb, 0x4, 0x4, 0x6, 0x7, 0x6c136a2f, 0x2ec, 0x7, 0x0, 0x9, 0x4, 0x2, 0x8, 0x2, 0x50, 0x6, 0x7, 0x8, 0x6, 0x101]}, @TCA_POLICE_TBF={0x12, 0x1, {0x3ff, 0x10000008, 0x8000, 0x0, 0x2, {0x9, 0x2, 0x3, 0x1, 0xfff, 0x7ff}, {0x5, 0x0, 0xe, 0x0, 0xfcc, 0xaf1}, 0x79ce381c, 0x9, 0x8}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 6.103454938s ago: executing program 32 (id=61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002900)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x85c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x26}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4d7, 0x5, 0x18800000, 0x4b, 0x7fffffff, 0xffffffff, 0x8, 0x3, 0x8, 0x5, 0x2, 0x8, 0x1ff, 0x5, 0x7, 0x0, 0x3, 0x7fffffff, 0x1, 0x1, 0xb7a, 0x8001, 0x1, 0x800, 0x81, 0x7, 0x6, 0x8ee, 0xe, 0x7, 0x2e, 0x3, 0x1, 0x0, 0xfffffff9, 0x13dd, 0xf05, 0x0, 0x4, 0xb, 0x78f7e8f0, 0x4, 0xfff, 0xffffff7f, 0x0, 0x3ff, 0x1, 0x80, 0x9, 0xf, 0x1, 0xc, 0x4ba, 0x3, 0x1f9, 0x1, 0x3, 0x87f, 0x32, 0x5, 0xffff, 0x9, 0x200, 0x7, 0x2, 0x400, 0x8, 0x2, 0x5, 0x3, 0x1000, 0xfff, 0x3, 0x1, 0xc864, 0x2, 0x1711, 0xfa, 0x5, 0x9, 0x101, 0x5f, 0xffffffe7, 0x345, 0x6, 0x1, 0xeaa, 0xffffffff, 0x8, 0x9, 0x80000001, 0x6, 0x7, 0x5, 0x5, 0x8, 0x7, 0x7ff, 0xfff, 0x0, 0x1, 0x3, 0x22cd, 0xa0d, 0x0, 0x7, 0xa627, 0x9, 0x6, 0xadd4, 0x1000000, 0x7, 0x79d, 0x7ff, 0x8000, 0x9, 0x7f, 0x2, 0x3ff, 0x1, 0xe7c, 0x40, 0xf, 0x2, 0x1080000, 0x3, 0x2, 0xf, 0xfffffffb, 0xfffffffb, 0x4, 0x10000, 0x3, 0x8, 0x1, 0xa, 0x0, 0x40, 0x0, 0x0, 0x200, 0x0, 0x8, 0x2cf, 0x36, 0x5, 0xfffffffe, 0x3a03, 0x0, 0x3a, 0x2, 0x100, 0x7, 0x100, 0x9831, 0x2, 0x80000000, 0x1ff, 0x8, 0xfffffffb, 0x7, 0x7ff, 0x2, 0x8, 0x4898, 0x5, 0x384, 0x0, 0x5, 0x7, 0x1, 0x2, 0x6, 0x3d8, 0xf, 0x5, 0x7, 0x5, 0x2, 0x7f, 0x1, 0x621595c2, 0xfd, 0x3, 0x5, 0xb, 0x5, 0x7, 0xde71, 0x8001, 0xff, 0x65, 0x2, 0x5, 0x2, 0x12000, 0x10000, 0x3, 0x6, 0x7fffffff, 0x4, 0x1, 0xebb, 0x2, 0x7d9, 0x7ff, 0xf5b, 0x4, 0xf, 0xf2c5, 0xa09e, 0x6, 0xc, 0x5, 0x5, 0xdf, 0x91, 0xec, 0x0, 0x5, 0x2, 0x3434, 0xffffffff, 0x4, 0x2, 0x9, 0xb9e9, 0x0, 0x1, 0x1, 0x40, 0x6, 0x200, 0x7, 0x4, 0x9, 0x3, 0x1, 0x7, 0x5, 0x1000, 0x4, 0x2353, 0x200, 0xfffffffe, 0xc, 0x2, 0x0, 0x1000, 0x1, 0xff, 0xf, 0x0, 0x4, 0x4, 0x1c54]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xfffffff0, 0x7, 0x0, 0x0, 0x10000, 0x1, 0x400, 0x8, 0x45f, 0x101, 0x8, 0x401, 0x7, 0xfff, 0x7, 0x9, 0x3, 0x8, 0x7, 0x7ff, 0x1, 0xe, 0x2, 0xffff, 0x1ce1a37f, 0x3, 0x0, 0x5, 0x9, 0x6, 0xb, 0x8, 0x1, 0x8, 0x7e5f3f3d, 0xee, 0x80000001, 0x7, 0x0, 0x5, 0x8001, 0x9, 0xd, 0x3, 0x0, 0x3, 0x8c, 0x9, 0x92, 0xf1f, 0x4, 0x4, 0x400, 0x5, 0x16, 0x2, 0x9, 0x6, 0x4, 0x5, 0x1, 0xfffffff4, 0x5, 0x4, 0x6, 0x5, 0x4, 0xbec, 0x40, 0x1, 0xc2, 0x7bf, 0xfffffffb, 0xa23, 0xa, 0x9, 0x4, 0xfd4, 0xe, 0x3, 0x4, 0x5, 0x1, 0x6, 0x6, 0x7, 0x0, 0x3, 0x7, 0x5, 0x2, 0x1, 0x6, 0xe, 0x8, 0x4, 0x7, 0x7, 0x8, 0x2, 0x3, 0x7, 0x6, 0xe560, 0x8, 0x5, 0x7, 0xffff, 0x1, 0x100000, 0xfffff000, 0x2, 0x900, 0xffffffff, 0x6, 0x4, 0x1, 0xffffd361, 0x6, 0x3, 0x3, 0x1, 0x4, 0x5, 0x4, 0xdf8, 0x3, 0x3, 0x9, 0x1, 0x80, 0x2, 0x696f, 0x2, 0x5, 0x10001, 0xfffffffb, 0xfffffffe, 0x7fff, 0x80000000, 0x5, 0x0, 0x6, 0x9, 0x7, 0x80000000, 0x6, 0x9, 0x8f1a, 0x3, 0x200, 0x8, 0xff, 0x2, 0xabe3, 0x401, 0x6, 0x0, 0x8, 0xffffffff, 0x4, 0xffffffff, 0x0, 0x6, 0x6, 0x9, 0x8000, 0x3ff, 0x101, 0xe27, 0x3, 0xd9c, 0xfffffffd, 0x0, 0x4, 0xa509, 0x9ed, 0x8, 0x7ff, 0x5, 0x7fffffff, 0x6, 0x1, 0x8, 0x4, 0x1, 0xb7, 0x26, 0x800, 0x6, 0x9, 0x101, 0x7b, 0xfffffffc, 0x9, 0x2, 0x20, 0x0, 0x80000000, 0x424, 0x9, 0xb, 0x2, 0x9a, 0x5, 0x10, 0x0, 0xfffffff4, 0x0, 0x2, 0x80000000, 0x0, 0x8001, 0x1, 0x9, 0x36, 0x7, 0x8, 0x4, 0x9, 0xe902, 0x4, 0x1, 0x2, 0x1, 0x4, 0x1, 0x0, 0x0, 0x4, 0x0, 0x5, 0x9, 0x3, 0xdb, 0xb, 0x4, 0x4, 0x6, 0x7, 0x6c136a2f, 0x2ec, 0x7, 0x0, 0x9, 0x4, 0x2, 0x8, 0x2, 0x50, 0x6, 0x7, 0x8, 0x6, 0x101]}, @TCA_POLICE_TBF={0x12, 0x1, {0x3ff, 0x10000008, 0x8000, 0x0, 0x2, {0x9, 0x2, 0x3, 0x1, 0xfff, 0x7ff}, {0x5, 0x0, 0xe, 0x0, 0xfcc, 0xaf1}, 0x79ce381c, 0x9, 0x8}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 1.916300409s ago: executing program 2 (id=112): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 1.807479125s ago: executing program 4 (id=116): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) wait4(r0, 0x0, 0x8, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.758730448s ago: executing program 5 (id=117): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) open(&(0x7f0000000200)='./file0\x00', 0xa5941, 0x0) 1.649200375s ago: executing program 5 (id=119): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x440b0) 1.612795837s ago: executing program 2 (id=121): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01ffdbdf5e050000000c0001800807", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x8111, 0x0) 1.586062588s ago: executing program 1 (id=122): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904", 0x10}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.522791522s ago: executing program 1 (id=123): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) 1.517901372s ago: executing program 5 (id=124): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.516349182s ago: executing program 2 (id=125): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.481978874s ago: executing program 5 (id=126): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x20004055) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4000000000000008, 0x6}, 0x0, 0x10002, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.399657229s ago: executing program 5 (id=127): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105c01, 0x1b0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 943.024025ms ago: executing program 4 (id=128): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='lp', 0x2) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34", 0x6f}, {&(0x7f00000021c0)}], 0x2}}], 0x2, 0x2090) 923.521636ms ago: executing program 4 (id=129): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 877.809259ms ago: executing program 4 (id=130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xc, 0x2}, {0xffe0, 0x9}, {0xc, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 809.981403ms ago: executing program 4 (id=131): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xf, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vcsa(0xffffffffffffff9c, 0x0, 0x6e082, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x14, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000800}) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 767.619345ms ago: executing program 4 (id=133): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000001b40)={0xa, 0x4e23, 0x2, @mcast2, 0xa}, 0x1c) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000002d40)=""/4095, 0xfff) 643.849712ms ago: executing program 1 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 642.963542ms ago: executing program 2 (id=137): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000240)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffd, 0x4, @empty, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="3b651e0eba74c3a6ce", 0x9, 0x24000000, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x99bcb88da02606f2, 0x0, 0x46) 613.758434ms ago: executing program 2 (id=138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4040004) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {}, {0xffe0, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x69}}, @TCA_CHAIN={0x0, 0xb, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20048850) 549.574618ms ago: executing program 2 (id=140): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20) 528.896139ms ago: executing program 1 (id=141): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) 429.782255ms ago: executing program 3 (id=142): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r2, r2) mincore(&(0x7f0000675000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/81) 399.631737ms ago: executing program 1 (id=143): r0 = inotify_init() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r1, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x400}], 0x1, &(0x7f0000000140), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 264.929964ms ago: executing program 3 (id=144): ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3f, 0x80000004}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) unlink(&(0x7f0000000100)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 180.055809ms ago: executing program 3 (id=145): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x7e, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="e7", 0x1}], 0x1) 101.666664ms ago: executing program 3 (id=146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000001c0)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x20, 0x8e7b0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)=';e', 0x2, 0x24000000, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x99bcb88de02507f2, 0x0, 0x0) 76.632605ms ago: executing program 3 (id=147): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0xff, 0x9, 0x5}, {0x12, 0x2, 0x200, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x5}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x3}, @TCA_FQ_CODEL_TARGET={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) 73.366015ms ago: executing program 1 (id=148): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) capset(0x0, &(0x7f0000000080)) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock2(&(0x7f000000f000/0x3000)=nil, 0x3000, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) 35.919607ms ago: executing program 3 (id=149): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0xfc3, 0x4, 0x121, 0x80000000, 0x9, "7f5972d4bbd7cf38f600deff28afebffffff00"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, 0x83, "00000000000000000000ffff00000000000008"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x7) 0s ago: executing program 5 (id=150): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0, 0xb6}, 0x18) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.238' (ED25519) to the list of known hosts. [ 34.064772][ T29] audit: type=1400 audit(1770285680.261:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.087824][ T29] audit: type=1400 audit(1770285680.291:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.090148][ T3301] cgroup: Unknown subsys name 'net' [ 34.115763][ T29] audit: type=1400 audit(1770285680.321:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.255767][ T3301] cgroup: Unknown subsys name 'cpuset' [ 34.262035][ T3301] cgroup: Unknown subsys name 'rlimit' [ 34.413799][ T29] audit: type=1400 audit(1770285680.611:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.448334][ T29] audit: type=1400 audit(1770285680.621:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.468867][ T29] audit: type=1400 audit(1770285680.621:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.489256][ T29] audit: type=1400 audit(1770285680.621:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.509580][ T29] audit: type=1400 audit(1770285680.631:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.530433][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.534618][ T29] audit: type=1400 audit(1770285680.631:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.566413][ T29] audit: type=1400 audit(1770285680.641:71): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.591546][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.670991][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.769608][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.776736][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.784018][ T3315] bridge_slave_0: entered allmulticast mode [ 35.791001][ T3315] bridge_slave_0: entered promiscuous mode [ 35.799084][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.806223][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.813505][ T3315] bridge_slave_1: entered allmulticast mode [ 35.820141][ T3315] bridge_slave_1: entered promiscuous mode [ 35.871180][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.884008][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.897925][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.950107][ T3315] team0: Port device team_slave_0 added [ 35.955842][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.966276][ T3315] team0: Port device team_slave_1 added [ 35.980267][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 36.007509][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.024696][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.031764][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.057791][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.073348][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.080369][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.107655][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.164814][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.172115][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.179389][ T3318] bridge_slave_0: entered allmulticast mode [ 36.185896][ T3318] bridge_slave_0: entered promiscuous mode [ 36.204906][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.212115][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.219414][ T3318] bridge_slave_1: entered allmulticast mode [ 36.225959][ T3318] bridge_slave_1: entered promiscuous mode [ 36.273499][ T3315] hsr_slave_0: entered promiscuous mode [ 36.279805][ T3315] hsr_slave_1: entered promiscuous mode [ 36.291152][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.298346][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.305624][ T3313] bridge_slave_0: entered allmulticast mode [ 36.312228][ T3313] bridge_slave_0: entered promiscuous mode [ 36.319999][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.329147][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.336305][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.343502][ T3313] bridge_slave_1: entered allmulticast mode [ 36.350129][ T3313] bridge_slave_1: entered promiscuous mode [ 36.361623][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.368759][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.376055][ T3323] bridge_slave_0: entered allmulticast mode [ 36.382592][ T3323] bridge_slave_0: entered promiscuous mode [ 36.389257][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.396355][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.403622][ T3314] bridge_slave_0: entered allmulticast mode [ 36.410173][ T3314] bridge_slave_0: entered promiscuous mode [ 36.417568][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.426725][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.433789][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.441046][ T3314] bridge_slave_1: entered allmulticast mode [ 36.447646][ T3314] bridge_slave_1: entered promiscuous mode [ 36.467696][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.474797][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.482082][ T3323] bridge_slave_1: entered allmulticast mode [ 36.488768][ T3323] bridge_slave_1: entered promiscuous mode [ 36.514937][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.539510][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.552531][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.574558][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.584511][ T3318] team0: Port device team_slave_0 added [ 36.591541][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.601717][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.618883][ T3318] team0: Port device team_slave_1 added [ 36.637239][ T3314] team0: Port device team_slave_0 added [ 36.668061][ T3314] team0: Port device team_slave_1 added [ 36.674624][ T3313] team0: Port device team_slave_0 added [ 36.684565][ T3323] team0: Port device team_slave_0 added [ 36.690699][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.697823][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.723771][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.746066][ T3313] team0: Port device team_slave_1 added [ 36.762471][ T3323] team0: Port device team_slave_1 added [ 36.773189][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.780221][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.806255][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.828437][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.835416][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.861538][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.886685][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.893723][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.919715][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.933234][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.940243][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.966297][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.977580][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.984544][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.010597][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.026444][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.033522][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.059609][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.070830][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.077875][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.103833][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.123149][ T3318] hsr_slave_0: entered promiscuous mode [ 37.129190][ T3318] hsr_slave_1: entered promiscuous mode [ 37.135109][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 37.140863][ T3318] Cannot create hsr debugfs directory [ 37.173614][ T3323] hsr_slave_0: entered promiscuous mode [ 37.179749][ T3323] hsr_slave_1: entered promiscuous mode [ 37.186204][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 37.191926][ T3323] Cannot create hsr debugfs directory [ 37.223870][ T3314] hsr_slave_0: entered promiscuous mode [ 37.230109][ T3314] hsr_slave_1: entered promiscuous mode [ 37.236258][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 37.242084][ T3314] Cannot create hsr debugfs directory [ 37.273953][ T3313] hsr_slave_0: entered promiscuous mode [ 37.280375][ T3313] hsr_slave_1: entered promiscuous mode [ 37.286327][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 37.292048][ T3313] Cannot create hsr debugfs directory [ 37.336199][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.345728][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.377726][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.404423][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.499358][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.511325][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.521230][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.530670][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.569688][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.578737][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.587776][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.605359][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.633177][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.645775][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.668129][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.675689][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.684652][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.699376][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.718697][ T1692] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.725838][ T1692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.752836][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.763080][ T1692] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.770283][ T1692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.780987][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.789853][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.805928][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.817764][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.835726][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.842823][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.851661][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.858732][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.867301][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.932262][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.942764][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.952626][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.006970][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.020646][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.039199][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.046346][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.055683][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.062777][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.072776][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.079874][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.099944][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.107111][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.138387][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.161694][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.188800][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.212880][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.250250][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.272983][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.280130][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.301833][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.316584][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.323746][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.366484][ T3315] veth0_vlan: entered promiscuous mode [ 38.408661][ T3315] veth1_vlan: entered promiscuous mode [ 38.417731][ T3314] veth0_vlan: entered promiscuous mode [ 38.446106][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.457806][ T3314] veth1_vlan: entered promiscuous mode [ 38.467468][ T3315] veth0_macvtap: entered promiscuous mode [ 38.477602][ T3315] veth1_macvtap: entered promiscuous mode [ 38.496040][ T3314] veth0_macvtap: entered promiscuous mode [ 38.508422][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.521911][ T3314] veth1_macvtap: entered promiscuous mode [ 38.540352][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.557663][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.567234][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.578127][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.600243][ T1692] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.638285][ T1692] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.656406][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.677818][ T3318] veth0_vlan: entered promiscuous mode [ 38.684358][ T1692] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.701743][ T1692] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.712399][ T3318] veth1_vlan: entered promiscuous mode [ 38.734631][ T1692] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.752171][ T1692] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.762566][ T3318] veth0_macvtap: entered promiscuous mode [ 38.772450][ T3318] veth1_macvtap: entered promiscuous mode [ 38.793314][ T3313] veth0_vlan: entered promiscuous mode [ 38.806966][ T1692] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.822901][ T3313] veth1_vlan: entered promiscuous mode [ 38.838461][ T1692] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.848528][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.866713][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.880862][ T1692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.892333][ T1692] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.906416][ T1692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.927928][ T1692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.937662][ T3313] veth0_macvtap: entered promiscuous mode [ 38.945988][ T3313] veth1_macvtap: entered promiscuous mode [ 38.982538][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.002651][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.035456][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.066200][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.083852][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.099880][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.128352][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 39.128370][ T29] audit: type=1400 audit(1770285685.331:102): avc: denied { allowed } for pid=3496 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.184212][ T3323] veth0_vlan: entered promiscuous mode [ 39.207390][ T3323] veth1_vlan: entered promiscuous mode [ 39.226441][ T29] audit: type=1400 audit(1770285685.361:103): avc: denied { create } for pid=3496 comm="syz.3.8" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.247464][ T29] audit: type=1400 audit(1770285685.361:104): avc: denied { map } for pid=3496 comm="syz.3.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.271307][ T29] audit: type=1400 audit(1770285685.361:105): avc: denied { read write } for pid=3496 comm="syz.3.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.331336][ T3323] veth0_macvtap: entered promiscuous mode [ 39.348029][ T3323] veth1_macvtap: entered promiscuous mode [ 39.371079][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.394688][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.427217][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.462092][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.523851][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.535829][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.733001][ T29] audit: type=1400 audit(1770285685.911:106): avc: denied { block_suspend } for pid=3516 comm="syz.1.14" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.793658][ T29] audit: type=1400 audit(1770285685.981:107): avc: denied { prog_load } for pid=3523 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.812588][ T29] audit: type=1400 audit(1770285685.981:108): avc: denied { bpf } for pid=3523 comm="syz.1.16" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.877821][ T29] audit: type=1400 audit(1770285686.051:109): avc: denied { open } for pid=3525 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.896984][ T29] audit: type=1400 audit(1770285686.051:110): avc: denied { kernel } for pid=3525 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.916175][ T29] audit: type=1400 audit(1770285686.071:111): avc: denied { tracepoint } for pid=3525 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.953694][ T3530] loop3: detected capacity change from 0 to 128 [ 39.985375][ T3530] msdos: Unknown parameter 'dos1xfl%›4?Ö…y' [ 40.040467][ T3533] loop3: detected capacity change from 0 to 1024 [ 40.070100][ T3535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 40.086720][ T3535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 40.105148][ T3533] ======================================================= [ 40.105148][ T3533] WARNING: The mand mount option has been deprecated and [ 40.105148][ T3533] and is ignored by this kernel. Remove the mand [ 40.105148][ T3533] option from the mount to silence this warning. [ 40.105148][ T3533] ======================================================= [ 40.230615][ T3533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.633680][ T3423] Process accounting resumed [ 40.895618][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.191063][ T3594] loop2: detected capacity change from 0 to 512 [ 41.214181][ T3596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.42'. [ 41.234389][ T3594] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 41.244059][ T3594] System zones: 1-12 [ 41.251796][ T3594] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.41: corrupted in-inode xattr: e_value size too large [ 41.279110][ T3594] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.41: couldn't read orphan inode 15 (err -117) [ 41.291077][ T3423] IPVS: starting estimator thread 0... [ 41.298166][ T3594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.385835][ T3598] IPVS: using max 2256 ests per chain, 112800 per kthread [ 41.477885][ T3613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 41.495286][ T3615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.46'. [ 41.710388][ T3626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.54'. [ 41.796197][ T3630] netlink: 'syz.0.56': attribute type 13 has an invalid length. [ 41.804002][ T3630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'. [ 41.853436][ T3630] netlink: 'syz.0.56': attribute type 13 has an invalid length. [ 41.855224][ T37] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.861282][ T3630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'. [ 41.877808][ T37] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.900549][ T37] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.915185][ T37] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.931258][ T3630] Zero length message leads to an empty skb [ 41.972532][ T3634] loop3: detected capacity change from 0 to 128 [ 42.035580][ T3634] syz.3.58: attempt to access beyond end of device [ 42.035580][ T3634] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 42.064598][ T3634] syz.3.58: attempt to access beyond end of device [ 42.064598][ T3634] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 42.078245][ T3634] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 42.106374][ T3637] syz.3.58: attempt to access beyond end of device [ 42.106374][ T3637] loop3: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 42.140299][ T3634] syz.3.58: attempt to access beyond end of device [ 42.140299][ T3634] loop3: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 42.153917][ T3634] Buffer I/O error on dev loop3, logical block 77, async page read [ 42.175121][ T3634] syz.3.58: attempt to access beyond end of device [ 42.175121][ T3634] loop3: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 42.188707][ T3634] Buffer I/O error on dev loop3, logical block 78, async page read [ 42.211462][ T3634] syz.3.58: attempt to access beyond end of device [ 42.211462][ T3634] loop3: rw=8388608, sector=158, nr_sectors = 2 limit=128 [ 42.225049][ T3634] Buffer I/O error on dev loop3, logical block 79, async page read [ 42.253395][ T3634] syz.3.58: attempt to access beyond end of device [ 42.253395][ T3634] loop3: rw=8388608, sector=160, nr_sectors = 2 limit=128 [ 42.267077][ T3634] Buffer I/O error on dev loop3, logical block 80, async page read [ 42.282629][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.293025][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.325169][ T3634] syz.3.58: attempt to access beyond end of device [ 42.325169][ T3634] loop3: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 42.338838][ T3634] Buffer I/O error on dev loop3, logical block 77, async page read [ 42.350466][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.360921][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.453341][ T3634] syz.3.58: attempt to access beyond end of device [ 42.453341][ T3634] loop3: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 42.466979][ T3634] Buffer I/O error on dev loop3, logical block 78, async page read [ 42.485826][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.496229][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.534789][ T3634] syz.3.58: attempt to access beyond end of device [ 42.534789][ T3634] loop3: rw=8388608, sector=158, nr_sectors = 2 limit=128 [ 42.548425][ T3634] Buffer I/O error on dev loop3, logical block 79, async page read [ 42.589319][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 42.599909][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.612036][ T3634] Buffer I/O error on dev loop3, logical block 80, async page read [ 42.776850][ T37] bridge_slave_1: left allmulticast mode [ 42.782552][ T37] bridge_slave_1: left promiscuous mode [ 42.788410][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.825600][ T37] bridge_slave_0: left allmulticast mode [ 42.831300][ T37] bridge_slave_0: left promiscuous mode [ 42.837191][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.866559][ T3664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'. [ 43.067495][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.078676][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.089242][ T37] bond0 (unregistering): Released all slaves [ 43.136206][ T3682] syzkaller0: entered promiscuous mode [ 43.141746][ T3682] syzkaller0: entered allmulticast mode [ 43.187531][ T37] hsr_slave_0: left promiscuous mode [ 43.202442][ T37] hsr_slave_1: left promiscuous mode [ 43.208383][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.215984][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.224562][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.232137][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.244402][ T37] veth1_macvtap: left promiscuous mode [ 43.250395][ T37] veth0_macvtap: left promiscuous mode [ 43.256010][ T37] veth1_vlan: left promiscuous mode [ 43.261369][ T37] veth0_vlan: left promiscuous mode [ 43.298391][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.364201][ T37] team0 (unregistering): Port device team_slave_1 removed [ 43.374583][ T37] team0 (unregistering): Port device team_slave_0 removed [ 43.513231][ T3641] chnl_net:caif_netlink_parms(): no params data found [ 43.569791][ T3714] netlink: 104 bytes leftover after parsing attributes in process `syz.4.78'. [ 43.665827][ T3641] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.672949][ T3641] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.681602][ T3641] bridge_slave_0: entered allmulticast mode [ 43.688259][ T3641] bridge_slave_0: entered promiscuous mode [ 43.695657][ T57] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.717667][ T3641] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.724857][ T3641] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.732157][ T3641] bridge_slave_1: entered allmulticast mode [ 43.738790][ T3641] bridge_slave_1: entered promiscuous mode [ 43.759929][ T57] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.792616][ T3641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.810582][ T57] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.824235][ T57] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.834931][ T3641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.895644][ T3742] netlink: 'syz.1.86': attribute type 11 has an invalid length. [ 43.908544][ T366] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.922849][ T3742] netlink: 'syz.1.86': attribute type 11 has an invalid length. [ 43.957135][ T366] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.968741][ T3641] team0: Port device team_slave_0 added [ 43.989840][ T3641] team0: Port device team_slave_1 added [ 43.996302][ T366] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.026169][ T366] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.054034][ T3641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.061115][ T3641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.087102][ T3641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.137978][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 44.137994][ T29] audit: type=1400 audit(1770285946.343:158): avc: denied { create } for pid=3759 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.178836][ T3641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.185917][ T3641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.212497][ T3641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.298634][ T3641] hsr_slave_0: entered promiscuous mode [ 44.307444][ T3641] hsr_slave_1: entered promiscuous mode [ 44.577015][ T3641] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.607489][ T3641] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.661659][ T3641] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.685273][ T3641] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.795846][ T3641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.848482][ T3641] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.885063][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.892330][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.912460][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.919641][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.159060][ T3641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.217330][ T3836] __nla_validate_parse: 5 callbacks suppressed [ 45.217352][ T3836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.102'. [ 45.814716][ T3641] veth0_vlan: entered promiscuous mode [ 45.836478][ T3641] veth1_vlan: entered promiscuous mode [ 45.858908][ T29] audit: type=1400 audit(1770285948.053:159): avc: denied { shutdown } for pid=3859 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.878600][ T29] audit: type=1400 audit(1770285948.053:160): avc: denied { getopt } for pid=3859 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.913208][ T3641] veth0_macvtap: entered promiscuous mode [ 45.926873][ T3641] veth1_macvtap: entered promiscuous mode [ 45.954437][ T3641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.995708][ T3641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.073567][ T29] audit: type=1400 audit(1770285948.273:161): avc: denied { mounton } for pid=3641 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 46.159918][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.167164][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.213909][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.224601][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.268698][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.303761][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.323423][ T29] audit: type=1400 audit(1770285948.523:162): avc: denied { watch watch_reads } for pid=3876 comm="syz.5.62" path="/0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 46.349818][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.360651][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.372854][ T31] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.382293][ T31] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.391479][ T31] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.400672][ T31] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.429741][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.108'. [ 46.451003][ T3879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.108'. [ 46.737701][ T3884] loop2: detected capacity change from 0 to 32768 [ 46.803960][ T3907] netlink: 'syz.5.119': attribute type 1 has an invalid length. [ 46.843476][ T29] audit: type=1400 audit(1770285949.043:163): avc: denied { write } for pid=3908 comm="syz.2.121" name="mcfilter6" dev="proc" ino=4026532701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 46.952402][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.126'. [ 46.961330][ T3920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.126'. [ 46.970369][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.126'. [ 46.979361][ T3920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.126'. [ 47.509152][ T3927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 47.518195][ T3927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.129'. [ 47.527206][ T3927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 47.625041][ T3931] IPv6: Can't replace route, no match found [ 47.904261][ T29] audit: type=1326 audit(1770285950.103:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.1.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74199aeb9 code=0x7ffc0000 [ 47.931997][ T29] audit: type=1326 audit(1770285950.123:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.1.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc74199aeb9 code=0x7ffc0000 [ 47.955502][ T29] audit: type=1326 audit(1770285950.133:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.1.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74199aeb9 code=0x7ffc0000 [ 47.978956][ T29] audit: type=1326 audit(1770285950.133:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.1.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc74195b78e code=0x7ffc0000 [ 48.370481][ T3974] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 48.443609][ T3978] ================================================================== [ 48.451778][ T3978] BUG: KCSAN: data-race in __dentry_kill / shrink_dentry_list [ 48.459265][ T3978] [ 48.461624][ T3978] read-write to 0xffff88811a56a9c0 of 4 bytes by task 3641 on cpu 1: [ 48.469721][ T3978] shrink_dentry_list+0x1a6/0x3c0 [ 48.474785][ T3978] shrink_dcache_tree+0x5b/0x220 [ 48.479753][ T3978] d_invalidate+0x76/0x1d0 [ 48.484207][ T3978] proc_invalidate_siblings_dcache+0x1c8/0x2b0 [ 48.490418][ T3978] proc_flush_pid+0x1d/0x30 [ 48.494947][ T3978] release_task+0x988/0xb60 [ 48.499479][ T3978] wait_consider_task+0x1160/0x1670 [ 48.504707][ T3978] __do_wait+0xf9/0x510 [ 48.508884][ T3978] do_wait+0xb6/0x240 [ 48.512893][ T3978] kernel_wait4+0x19f/0x210 [ 48.517416][ T3978] __x64_sys_wait4+0x91/0x120 [ 48.522129][ T3978] x64_sys_call+0x28ec/0x3000 [ 48.526835][ T3978] do_syscall_64+0xc0/0x2a0 [ 48.531389][ T3978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.537310][ T3978] [ 48.539660][ T3978] read to 0xffff88811a56a9c0 of 4 bytes by task 3978 on cpu 0: [ 48.547227][ T3978] __dentry_kill+0x25c/0x460 [ 48.551855][ T3978] finish_dput+0x2b/0x200 [ 48.556207][ T3978] dput+0x52/0x60 [ 48.559868][ T3978] proc_invalidate_siblings_dcache+0x1d0/0x2b0 [ 48.566073][ T3978] proc_flush_pid+0x1d/0x30 [ 48.570599][ T3978] release_task+0x988/0xb60 [ 48.575131][ T3978] do_exit+0xd56/0x1590 [ 48.579311][ T3978] do_group_exit+0xfe/0x140 [ 48.583832][ T3978] get_signal+0xe4f/0xf60 [ 48.588182][ T3978] arch_do_signal_or_restart+0x96/0x450 [ 48.593768][ T3978] exit_to_user_mode_loop+0x6a/0x6f0 [ 48.599073][ T3978] do_syscall_64+0x1d3/0x2a0 [ 48.603691][ T3978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.609593][ T3978] [ 48.611938][ T3978] value changed: 0x0024040c -> 0x0000000c [ 48.617669][ T3978] [ 48.620010][ T3978] Reported by Kernel Concurrency Sanitizer on: [ 48.626214][ T3978] CPU: 0 UID: 0 PID: 3978 Comm: syz.5.150 Not tainted syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 48.635866][ T3978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.645958][ T3978] ================================================================== [ 48.717690][ T3298] sshd-session (3298) used greatest stack depth: 10320 bytes left [ 48.938911][ T366] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.998303][ T366] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.078434][ T366] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.128151][ T366] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.221361][ T366] bridge_slave_1: left allmulticast mode [ 49.227104][ T366] bridge_slave_1: left promiscuous mode [ 49.232878][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.240921][ T366] bridge_slave_0: left allmulticast mode [ 49.246653][ T366] bridge_slave_0: left promiscuous mode [ 49.252363][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.367230][ T366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.377369][ T366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.386790][ T366] bond0 (unregistering): Released all slaves [ 49.439840][ T366] hsr_slave_0: left promiscuous mode [ 49.447532][ T366] hsr_slave_1: left promiscuous mode [ 49.453392][ T366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.460962][ T366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.469322][ T366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.476803][ T366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.487702][ T366] veth1_macvtap: left promiscuous mode [ 49.493221][ T366] veth0_macvtap: left promiscuous mode [ 49.499025][ T366] veth1_vlan: left promiscuous mode [ 49.504291][ T366] veth0_vlan: left promiscuous mode [ 49.579310][ T366] team0 (unregistering): Port device team_slave_1 removed [ 49.589505][ T366] team0 (unregistering): Port device team_slave_0 removed [ 49.871530][ T366] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.918367][ T366] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.958690][ T366] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.008405][ T366] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.300860][ T366] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.311266][ T366] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.348320][ T366] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.359010][ T366] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.408741][ T366] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.419162][ T366] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.478193][ T366] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.488570][ T366] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.570245][ T366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.580596][ T366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.621455][ T366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.631805][ T366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.689059][ T366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.699487][ T366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.748155][ T366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.758670][ T366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.862511][ T366] bridge_slave_1: left allmulticast mode [ 50.868272][ T366] bridge_slave_1: left promiscuous mode [ 50.874015][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.882479][ T366] bridge_slave_0: left allmulticast mode [ 50.888269][ T366] bridge_slave_0: left promiscuous mode [ 50.893962][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.902889][ T366] bridge_slave_1: left allmulticast mode [ 50.908665][ T366] bridge_slave_1: left promiscuous mode [ 50.914582][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.922623][ T366] bridge_slave_0: left allmulticast mode [ 50.928377][ T366] bridge_slave_0: left promiscuous mode [ 50.934089][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.943029][ T366] bridge_slave_1: left allmulticast mode [ 50.948808][ T366] bridge_slave_1: left promiscuous mode [ 50.954544][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.962991][ T366] bridge_slave_0: left allmulticast mode [ 50.968726][ T366] bridge_slave_0: left promiscuous mode [ 50.974482][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.983315][ T366] bridge_slave_1: left allmulticast mode [ 50.989012][ T366] bridge_slave_1: left promiscuous mode [ 50.994772][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.003227][ T366] bridge_slave_0: left allmulticast mode [ 51.008937][ T366] bridge_slave_0: left promiscuous mode [ 51.014603][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.167138][ T366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.177500][ T366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.186988][ T366] bond0 (unregistering): Released all slaves [ 51.247960][ T366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.257376][ T366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.266619][ T366] bond0 (unregistering): Released all slaves [ 51.307904][ T366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.319976][ T366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.329435][ T366] bond0 (unregistering): Released all slaves [ 51.417925][ T366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.427826][ T366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.437317][ T366] bond0 (unregistering): Released all slaves [ 51.499991][ T366] hsr_slave_0: left promiscuous mode [ 51.505864][ T366] hsr_slave_1: left promiscuous mode [ 51.511640][ T366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.519124][ T366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.527639][ T366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.535275][ T366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.546062][ T366] hsr_slave_0: left promiscuous mode [ 51.551694][ T366] hsr_slave_1: left promiscuous mode [ 51.557684][ T366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.565464][ T366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.574865][ T366] hsr_slave_0: left promiscuous mode [ 51.580827][ T366] hsr_slave_1: left promiscuous mode [ 51.586685][ T366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.594088][ T366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.602057][ T366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.609570][ T366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.619402][ T366] hsr_slave_0: left promiscuous mode [ 51.625224][ T366] hsr_slave_1: left promiscuous mode [ 51.630950][ T366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.639377][ T366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.648568][ T366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.656069][ T366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.672446][ T366] veth1_macvtap: left promiscuous mode [ 51.678194][ T366] veth0_macvtap: left promiscuous mode [ 51.683722][ T366] veth1_vlan: left promiscuous mode [ 51.689119][ T366] veth0_vlan: left promiscuous mode [ 51.694880][ T366] veth1_macvtap: left promiscuous mode [ 51.700456][ T366] veth0_macvtap: left promiscuous mode [ 51.706072][ T366] veth1_vlan: left promiscuous mode [ 51.711289][ T366] veth0_vlan: left promiscuous mode [ 51.717166][ T366] veth1_macvtap: left promiscuous mode [ 51.722692][ T366] veth0_macvtap: left promiscuous mode [ 51.728555][ T366] veth1_vlan: left promiscuous mode [ 51.733777][ T366] veth0_vlan: left promiscuous mode [ 51.878929][ T366] team0 (unregistering): Port device team_slave_1 removed [ 51.891152][ T366] team0 (unregistering): Port device team_slave_0 removed [ 51.949480][ T366] team0 (unregistering): Port device team_slave_1 removed [ 51.960353][ T366] team0 (unregistering): Port device team_slave_0 removed [ 52.018779][ T366] team0 (unregistering): Port device team_slave_1 removed [ 52.029067][ T366] team0 (unregistering): Port device team_slave_0 removed [ 52.089567][ T366] team0 (unregistering): Port device team_slave_1 removed [ 52.099144][ T366] team0 (unregistering): Port device team_slave_0 removed [ 53.066954][ T366] IPVS: stop unused estimator thread 0...