last executing test programs: 13m1.494774939s ago: executing program 4 (id=1151): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0x3ff}}], 0x18}}], 0x2, 0x20004874) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}}, 0x4840) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'system.', '%\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 13m1.407996511s ago: executing program 4 (id=1154): getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 12m58.612903557s ago: executing program 4 (id=1169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3, 0x8000}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r0) tkill(r1, 0x13) 12m57.391854596s ago: executing program 4 (id=1161): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') 12m55.785596324s ago: executing program 4 (id=1166): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 12m51.813954967s ago: executing program 4 (id=1186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 12m51.003124486s ago: executing program 32 (id=1186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 16.964124394s ago: executing program 0 (id=4044): timer_create(0x0, 0x0, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 14.826009513s ago: executing program 0 (id=4051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) getpriority(0x1, r0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x5b77, 0x0, &(0x7f0000000640), 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 13.295113727s ago: executing program 3 (id=4054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13.266840978s ago: executing program 1 (id=4055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13.20194975s ago: executing program 3 (id=4058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 12.889967637s ago: executing program 0 (id=4069): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007f8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2077, 0x101301) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000000)) ioctl$USBDEVFS_FREE_STREAMS(r4, 0xc0105500, &(0x7f0000000040)=ANY=[@ANYRES8=r4]) 12.158066643s ago: executing program 3 (id=4060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3, 0x80000002, 0x2, 0x8000000000000000, 0xc}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) 11.935252319s ago: executing program 1 (id=4062): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 9.450255685s ago: executing program 3 (id=4064): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 9.366818477s ago: executing program 0 (id=4065): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) 9.272320309s ago: executing program 5 (id=4066): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 5.961571735s ago: executing program 1 (id=4068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.820101428s ago: executing program 5 (id=4070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r6) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000f00fdc6c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003000000", 0xfdd0}], 0x1}, 0x4005) 5.794549608s ago: executing program 1 (id=4071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x6, 0x2001) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bridge_slave_0\x00', 0x4}, 0x18) 5.73987046s ago: executing program 2 (id=4072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x6, 0x2001) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bridge_slave_0\x00', 0x4}, 0x18) 5.066660925s ago: executing program 5 (id=4073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000) 3.579540598s ago: executing program 1 (id=4074): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 3.579353218s ago: executing program 2 (id=4075): openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = memfd_create(0x0, 0x0) fcntl$addseals(r0, 0x409, 0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) prlimit64(r2, 0xd, &(0x7f0000000280)={0x100000000, 0xf}, &(0x7f00000003c0)) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) 3.578680758s ago: executing program 5 (id=4084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 3.365548954s ago: executing program 3 (id=4076): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close(r3) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000400)) syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="e3875d521f5532124979134cee223e3b811021bfe1f72c45dffda9ca1c0ed71b1140ce4294b7128da40685c173b8aef0a8d1deea7da01bcb5130b02b4d199c24d4f64a2cabf05df6cb8b5bb31f16f0b3242109414fa7d4117548b88b42e4aeee291a40d33563c7808461dc72cd2f6d6cc7b3c9ae9bf60362ad54bd3677a94fb74b6907d6d3d00e4385b2459f3fbf1a9512f9858a9342bd773a080587bf66016cf54549cb76958043b5d865b6435b56df4a2be99aff0f40456cb1fc14e35948a3db27be2c8f84e5276f", @ANYRES16], 0xff, 0x6de, &(0x7f0000000c00)="$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") openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 2.792553527s ago: executing program 2 (id=4077): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) 2.791925247s ago: executing program 1 (id=4088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x6, 0x2001) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bridge_slave_0\x00', 0x4}, 0x18) 1.632735293s ago: executing program 0 (id=4078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, r0) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x2a18805, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0xb03, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000c080}, 0x814) 1.632100533s ago: executing program 5 (id=4090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0xa400, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.621607173s ago: executing program 3 (id=4091): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) 432.87289ms ago: executing program 0 (id=4079): r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0xb6bc}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x92, 0x5, r2}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, 0x0, 0x0) 432.75828ms ago: executing program 2 (id=4080): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 187.549436ms ago: executing program 5 (id=4081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 83.361208ms ago: executing program 2 (id=4082): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) symlink(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=4083): socketpair$unix(0x1, 0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1f, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000}, 0x50) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000200)=@multiplanar_overlay={0x8001, 0x2, 0x4, 0x100, 0x9, {}, {0x3, 0x0, 0xfd, 0x8, 0x10, 0xfe, "1a719613"}, 0x25, 0x3, {&(0x7f00000003c0)=[{0x4, 0x7, {0x1ff}, 0x1e}, {0xe, 0x0, {0x2}, 0x6}]}, 0x6}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)='%:\x00') kernel console output (not intermixed with test programs): ype 2 family 0 port 6081 - 0 [ 274.630349][ T7422] bond3: (slave geneve2): making interface the new active one [ 274.648427][ T7422] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 276.856347][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 276.868547][ T7451] device bridge2 entered promiscuous mode [ 276.942712][ T7422] syz.4.950 (7422) used greatest stack depth: 18352 bytes left [ 276.962646][ T7447] device bridge2 entered promiscuous mode [ 278.273688][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.968'. [ 279.422988][ T7492] fuse: Bad value for 'fd' [ 280.810678][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 283.409927][ C1] bridge0: port 1(syz_tun) entered forwarding state [ 283.416627][ C1] bridge0: topology change detected, propagating [ 283.433088][ T7507] netlink: 68 bytes leftover after parsing attributes in process `syz.3.970'. [ 284.417311][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.013743][ T7528] device bridge4 entered promiscuous mode [ 286.132822][ T7531] device bridge4 entered promiscuous mode [ 286.250688][ T7553] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.259707][ T7553] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.270230][ T7553] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.279275][ T7553] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.288366][ T7553] device geneve2 entered promiscuous mode [ 286.303394][ T7555] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.312520][ T7555] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.321290][ T7555] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.330028][ T7555] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.404191][ T7560] device macsec0 entered promiscuous mode [ 286.415294][ T7560] device virt_wifi0 entered promiscuous mode [ 291.869923][ T7594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.996'. [ 294.239125][ T7610] loop4: detected capacity change from 0 to 128 [ 294.422230][ T7610] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 294.435240][ T7610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.058308][ T7625] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 295.332562][ T7625] CIFS mount error: No usable UNC path provided in device string! [ 295.332562][ T7625] [ 295.342878][ T7625] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 301.060419][ T7715] device macsec1 entered promiscuous mode [ 301.066306][ T7715] device virt_wifi0 entered promiscuous mode [ 308.629756][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 311.389539][ T7765] netlink: 'syz.3.1054': attribute type 21 has an invalid length. [ 311.398589][ T7765] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1054'. [ 311.951530][ T7769] tipc: Failed to remove unknown binding: 66,0,0/0:1731620618/1731620620 [ 312.023656][ T7769] tipc: Failed to remove unknown binding: 66,0,0/0:1731620618/1731620619 [ 312.033202][ T7769] tipc: Failed to remove unknown binding: 66,0,0/0:1731620618/1731620620 [ 312.042421][ T7769] tipc: Failed to remove unknown binding: 66,0,0/0:1731620618/1731620619 [ 312.114183][ T7771] IPv6: sit3: Disabled Multicast RS [ 314.259453][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'. [ 314.273682][ T7791] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1064'. [ 318.060252][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.066885][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.647211][ T7831] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 322.449959][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 324.054141][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 324.054156][ T26] audit: type=1326 audit(1784170060.288:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.4.1091" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb920f31e59 code=0x0 [ 325.046059][ T7905] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1096'. [ 325.056814][ T7905] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1096'. [ 326.739815][ C1] hrtimer: interrupt took 42016 ns [ 330.760976][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.769779][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.778259][ T4552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.786965][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.796633][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.805326][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.817212][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.838069][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 330.891716][ T7984] netlink: 'syz.2.1119': attribute type 1 has an invalid length. [ 330.916836][ T7984] netlink: 'syz.2.1119': attribute type 2 has an invalid length. [ 331.021646][ T7990] loop4: detected capacity change from 0 to 2048 [ 331.079696][ T7990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.403163][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.412821][ T4552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.438622][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.984794][ T8016] netlink: 'syz.4.1127': attribute type 3 has an invalid length. [ 332.007074][ T8016] netlink: 'syz.4.1127': attribute type 3 has an invalid length. [ 332.143430][ T8021] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1130'. [ 332.230614][ T8027] can: request_module (can-proto-0) failed. [ 332.249613][ T8033] tipc: Enabling of bearer rejected, failed to enable media [ 333.459406][ T8045] tipc: Enabling of bearer rejected, failed to enable media [ 335.820128][ T8083] net_ratelimit: 3 callbacks suppressed [ 335.820779][ T8083] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.142066][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.160127][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.169021][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.177164][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.185955][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.194509][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.206051][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.217355][ T4335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.225953][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.209763][ T8110] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1155'. [ 342.026481][ T8155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1164'. [ 342.324753][ T4319] net_ratelimit: 4 callbacks suppressed [ 342.324769][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.807104][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.818064][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.826932][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.000787][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.009854][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.020942][ T4319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.029116][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.037264][ T4335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.047068][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.088591][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 343.589660][ T8173] device vlan2 entered promiscuous mode [ 343.678537][ T4552] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.220565][ T8184] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 344.232686][ T8184] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 344.509022][ T4552] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.805275][ T4552] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.817328][ T4552] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.828466][ T8198] hugetlbfs: syz.2.1180 (8198): Using mlock ulimits for SHM_HUGETLB is deprecated [ 347.814075][ T4233] net_ratelimit: 6 callbacks suppressed [ 347.814176][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.901063][ T8248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.940410][ T8248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.948717][ T8248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.988878][ T8251] fuse: Bad value for 'fd' [ 348.028401][ T8254] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.059181][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.069579][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.077761][ T8262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.087604][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.143808][ T8262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.365024][ T8254] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.683996][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.956881][ T8254] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.040947][ T8255] virt_wifi0 speed is unknown, defaulting to 1000 [ 349.187595][ T8291] overlayfs: failed to clone upperpath [ 349.203930][ T8254] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.324119][ T8255] chnl_net:caif_netlink_parms(): no params data found [ 349.425731][ T8255] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.433191][ T8255] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.441387][ T8255] device bridge_slave_0 entered promiscuous mode [ 349.450068][ T8255] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.457362][ T8255] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.470673][ T8255] device bridge_slave_1 entered promiscuous mode [ 349.699458][ T8255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.836186][ T8255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.044507][ T8255] team0: Port device team_slave_0 added [ 350.054924][ T8255] team0: Port device team_slave_1 added [ 350.105461][ T8255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.112655][ T8255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.138729][ T8255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.152019][ T8255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.159023][ T8255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.185751][ T1346] Bluetooth: hci4: command 0x0409 tx timeout [ 350.191413][ T8255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.298852][ T8254] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.319578][ T8254] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.346166][ T8254] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.376658][ T8254] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.758904][ T8255] device hsr_slave_0 entered promiscuous mode [ 350.883666][ T8255] device hsr_slave_1 entered promiscuous mode [ 350.995441][ T8255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.035800][ T8255] Cannot create hsr debugfs directory [ 352.135205][ T8255] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.155093][ T8255] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.185664][ T8255] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.199929][ T1107] Bluetooth: hci4: command 0x041b tx timeout [ 352.227060][ T8348] netlink: 'syz.1.1213': attribute type 1 has an invalid length. [ 352.240880][ T8348] netlink: 'syz.1.1213': attribute type 4 has an invalid length. [ 352.248655][ T8348] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1213'. [ 352.281336][ T8255] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 352.357212][ T4552] device hsr_slave_0 left promiscuous mode [ 352.367206][ T4552] device hsr_slave_1 left promiscuous mode [ 352.384405][ T4552] device virt_wifi0 left promiscuous mode [ 352.526100][ T4552] bond3 (unregistering): (slave geneve2): Releasing active interface [ 352.598207][ T4552] bond3 (unregistering): Released all slaves [ 352.630843][ T4552] bond2 (unregistering): (slave bridge3): Releasing active interface [ 352.697497][ T4552] bond2 (unregistering): Released all slaves [ 352.724415][ T4552] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 352.742951][ T4552] device bridge2 left promiscuous mode [ 352.845615][ T4552] bond1 (unregistering): Released all slaves [ 353.410540][ T4233] net_ratelimit: 11 callbacks suppressed [ 353.410558][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.708871][ T4552] bond0 (unregistering): Released all slaves [ 353.768287][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 353.803298][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.814849][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.872377][ T8379] overlayfs: failed to clone lowerpath [ 354.184961][ T8370] bridge5: port 1(erspan0) entered blocking state [ 354.198939][ T8370] bridge5: port 1(erspan0) entered disabled state [ 354.257543][ T8370] device erspan0 entered promiscuous mode [ 354.310954][ T8370] bridge5: port 1(erspan0) entered blocking state [ 354.317537][ T8370] bridge5: port 1(erspan0) entered forwarding state [ 354.405090][ T1346] Bluetooth: hci4: command 0x040f tx timeout [ 354.411529][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.504822][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.517694][ T8384] xt_CT: No such helper "syz1" [ 354.718418][ T8255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.398413][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.241384][ T8255] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.427262][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.440260][ T1346] Bluetooth: hci4: command 0x0419 tx timeout [ 357.321276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 357.329344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.337549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 357.346656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.356739][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.363882][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.373549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 357.382446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.391675][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.398747][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.428977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 357.448547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 357.460414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 357.469726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 357.484526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 357.502081][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.519293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 357.529398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 357.540806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.659907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 357.671969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.711115][ T8255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.480806][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.493179][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.589758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.600166][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.608891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.718398][ T8458] fuse: Bad value for 'fd' [ 359.743627][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.945815][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.782256][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.916860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 361.933659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 361.967544][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.982771][ T8255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.178842][ T8502] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 363.126840][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.136588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.145693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.271036][ T8255] device veth0_vlan entered promiscuous mode [ 363.284213][ T8255] device veth1_vlan entered promiscuous mode [ 363.306967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 364.000588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 364.053802][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.067891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 364.077805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 364.098090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 364.126370][ T8538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1254'. [ 364.168264][ T8538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1254'. [ 364.226074][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.342118][ T8549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.404100][ T8555] bond2: (slave ip6gretap1): making interface the new active one [ 364.413996][ T8555] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 364.424620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 364.468468][ T8255] device veth0_macvtap entered promiscuous mode [ 364.471106][ T8560] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 364.508920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 364.536346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.589295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 364.647256][ T8255] device veth1_macvtap entered promiscuous mode [ 364.754704][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.841672][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.456402][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.485260][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.508339][ T8255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.547358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 365.580950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 366.327290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.410133][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.471059][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.509955][ T8602] IPVS: rr: FWM 3 0x00000003 - no destination available [ 366.511205][ T8255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.517503][ T8602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.540672][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.598019][ T8255] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.626938][ T8255] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.639986][ T8597] xt_CT: No such helper "syz1" [ 366.727885][ T8255] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.122067][ T8255] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.446759][ T8595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1268'. [ 367.489925][ T8595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1268'. [ 367.520141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.550739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 367.564639][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.653146][ T8611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 367.689062][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1273'. [ 367.802189][ T8614] device dummy0 entered promiscuous mode [ 367.879573][ T8614] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 367.887523][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.948685][ T8614] bond4: (slave macvlan2): making interface the new active one [ 367.967179][ T8614] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 369.441440][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.924891][ T8618] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 369.992689][ T26] audit: type=1326 audit(1784170106.228:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8639 comm="syz.3.1278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61634fce59 code=0x0 [ 370.078141][ T8614] syz.0.1271 (8614) used greatest stack depth: 18160 bytes left [ 370.091585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 370.194202][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.216134][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.248553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 370.356897][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.379016][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.396558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 370.540428][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.329140][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.111661][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.254600][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.264720][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.342757][ T8688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1284'. [ 379.107655][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.114279][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.144390][ T8688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1284'. [ 379.450901][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.682050][ T8704] netlink: 'syz.5.1292': attribute type 11 has an invalid length. [ 380.787136][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.320486][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.777273][ T8740] xt_connbytes: Forcing CT accounting to be enabled [ 381.784060][ T8740] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 381.828397][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1300'. [ 381.880101][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.320130][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.360159][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.426739][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.755104][ T8811] cgroup: Name too long [ 388.885382][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.894049][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.127928][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.207577][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.710996][ T8840] netlink: 'syz.1.1327': attribute type 1 has an invalid length. [ 390.900471][ T8840] device bond3 entered promiscuous mode [ 390.961230][ T8840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 390.994702][ T8853] bond3: (slave erspan1): making interface the new active one [ 391.007330][ T8853] device erspan1 entered promiscuous mode [ 391.041211][ T8853] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 391.073807][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 391.899538][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.964483][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.143871][ T8890] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1338'. [ 393.708886][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.808408][ T26] audit: type=1326 audit(1784170130.038:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.2.1345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac71586e59 code=0x0 [ 394.660774][ T8921] device ipip0 entered promiscuous mode [ 395.027980][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.053399][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.120529][ T8939] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 395.131065][ T8940] IPVS: stopping master sync thread 8939 ... [ 395.142304][ T8932] bridge0: port 4(veth0_vlan) entered blocking state [ 395.149035][ T8932] bridge0: port 4(veth0_vlan) entered disabled state [ 395.208155][ T8929] loop5: detected capacity change from 0 to 4096 [ 395.356488][ T8929] NILFS (loop5): unrecognized mount option "o Õi/|Ûæ‘i±‚!×I¡rder=strict" [ 395.396366][ T8953] overlayfs: failed to clone upperpath [ 395.680617][ T8962] ODEBUG: Out of memory. ODEBUG disabled [ 397.834438][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.900467][ T8967] device ip6_vti0 entered promiscuous mode [ 398.145763][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.438814][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1359'. [ 398.634402][ T4280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.867746][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.899967][ T4280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.076240][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.095564][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.111355][ T8990] sctp: [Deprecated]: syz.1.1374 (pid 8990) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.111355][ T8990] Use struct sctp_sack_info instead [ 400.165495][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.179423][ T8990] sctp: [Deprecated]: syz.1.1374 (pid 8990) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.179423][ T8990] Use struct sctp_sack_info instead [ 400.930418][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.167951][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.248730][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'. [ 402.063525][ T9022] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.072466][ T9022] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.081380][ T9022] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.090179][ T9022] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.389281][ T9022] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 402.661006][ T9037] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by ""[9037] [ 403.581164][ T4234] net_ratelimit: 4 callbacks suppressed [ 403.581178][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.584228][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.646422][ T9043] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 403.720102][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.637367][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.737533][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.747991][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.568581][ T9090] netlink: 'syz.0.1390': attribute type 12 has an invalid length. [ 405.647694][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.801219][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.352259][ T9100] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 407.512133][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.619412][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.635826][ T9128] 9pnet_virtio: no channels available for device syz [ 408.618647][ T9135] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 409.043262][ T9137] ecryptfs_parse_options: eCryptfs: unrecognized option [³] [ 409.050790][ T9137] ecryptfs_parse_options: eCryptfs: unrecognized option [z\)] [ 409.058319][ T9137] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 409.073152][ T9137] Error parsing options; rc = [-22] [ 409.714824][ C1] net_ratelimit: 2 callbacks suppressed [ 409.714840][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.729551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.741746][ T4280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.750301][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.758587][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.132048][ T4280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.421346][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.429559][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.453084][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.490146][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.675098][ T4234] net_ratelimit: 1 callbacks suppressed [ 417.675116][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.689013][ T4280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.718107][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.009263][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.017856][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.092898][ T9183] netlink: 'syz.5.1409': attribute type 1 has an invalid length. [ 418.260975][ T9183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.275352][ T9192] bond1: (slave geneve2): making interface the new active one [ 418.287680][ T9192] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 418.313075][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 418.380403][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.509249][ T9064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.552517][ T9201] tipc: Started in network mode [ 418.647984][ T9201] tipc: Node identity 080211000001, cluster identity 4711 [ 418.803120][ T9201] tipc: Enabled bearer , priority 0 [ 420.142658][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.152301][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.161780][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.175455][ T23] tipc: Node number set to 134418688 [ 422.260405][ T9259] netlink: 'syz.3.1434': attribute type 10 has an invalid length. [ 422.354432][ T9268] futex_wake_op: syz.1.1436 tries to shift op by 144; fix this program [ 422.424849][ T9272] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1438'. [ 422.735164][ T9272] 9pnet: Insufficient options for proto=fd [ 422.886572][ T1176] net_ratelimit: 13 callbacks suppressed [ 422.886614][ T1176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.265832][ T9285] loop5: detected capacity change from 0 to 2048 [ 423.415407][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.425443][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.130342][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.153903][ T9285] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 424.200366][ T4280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.476500][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.482260][ T9321] futex_wake_op: syz.3.1450 tries to shift op by 144; fix this program [ 424.501351][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.739304][ T1176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.753969][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.880014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.935783][ T4234] net_ratelimit: 5 callbacks suppressed [ 427.935800][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.956921][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.680117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.824377][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.811881][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.817610][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.842903][ T9376] device erspan0 entered promiscuous mode [ 429.865095][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 429.909444][ T9376] device erspan0 left promiscuous mode [ 429.959898][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 430.140266][ T4552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.360035][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.435879][ T9415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.448163][ T9415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.186014][ T9425] netlink: 'syz.0.1476': attribute type 4 has an invalid length. [ 431.239486][ T9430] netlink: 'syz.0.1476': attribute type 4 has an invalid length. [ 431.335310][ T9425] netlink: 'syz.0.1476': attribute type 4 has an invalid length. [ 431.721291][ T9442] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 431.753114][ T9442] bond3: (slave macvlan2): Enslaving as an active interface with a down link [ 431.783168][ T9449] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1465'. [ 431.916137][ T9449] bond3: (slave macvlan2): Releasing active interface [ 431.946374][ T9449] bond0 (unregistering): Released all slaves [ 431.963789][ T9457] device erspan0 entered promiscuous mode [ 431.982108][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1482'. [ 432.029396][ T9457] device erspan0 left promiscuous mode [ 432.058193][ T9462] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1485'. [ 433.528141][ T1346] net_ratelimit: 13 callbacks suppressed [ 433.528159][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.595229][ T9483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.606014][ T9483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.616514][ T9483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.625355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.634444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.642564][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.697595][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'. [ 433.891414][ T9475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.977366][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.991080][ T9064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.340803][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 434.760083][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 434.910828][ T21] usb 6-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 8 [ 434.947149][ T21] usb 6-1: config 1 interface 0 has no altsetting 0 [ 435.660127][ T21] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 435.705627][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.728976][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1498'. [ 435.748643][ T21] usb 6-1: Product: syz [ 435.753686][ T21] usb 6-1: Manufacturer: syz [ 435.758301][ T21] usb 6-1: SerialNumber: syz [ 436.760309][ T9492] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 437.068876][ T21] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 437.151647][ T21] usb 6-1: USB disconnect, device number 2 [ 437.549936][ T9543] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1515'. [ 438.840309][ T4551] net_ratelimit: 11 callbacks suppressed [ 438.840327][ T4551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.064206][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.076629][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.200472][ T9563] futex_wake_op: syz.5.1509 tries to shift op by 32; fix this program [ 439.202100][ T9564] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1510'. [ 439.273075][ T9564] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 439.291280][ T9564] bond0 (unregistering): Released all slaves [ 439.386016][ T9582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.394491][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.050566][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.140986][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.149545][ T4281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.182954][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.204911][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.211285][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.235321][ T26] audit: type=1326 audit(1784170176.468:157): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.0.1519" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e1c8cae59 code=0x0 [ 440.275281][ T4551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.522292][ T9653] bond4: option mode: unable to set because the bond device has slaves [ 443.741550][ T9653] bond4: (slave macvlan3): Error -98 calling set_mac_address [ 443.840004][ T9656] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1531'. [ 443.885547][ T9656] device dummy0 left promiscuous mode [ 443.896875][ T9] net_ratelimit: 8 callbacks suppressed [ 443.896890][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.951196][ T9656] bond4: (slave macvlan2): Releasing active interface [ 443.958148][ T9656] bond4: (slave macvlan2): the permanent HWaddr of slave - 72:f3:e3:e1:73:86 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 444.049942][ T9656] bond4: (slave ip6gretap1): making interface the new active one [ 444.079198][ T9656] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 444.101244][ T9656] bond0 (unregistering): Released all slaves [ 444.230194][ T9670] tipc: Started in network mode [ 444.248369][ T9670] tipc: Node identity 84e, cluster identity 4711 [ 444.283240][ T9670] tipc: Node number set to 2126 [ 444.785202][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.801630][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.009656][ T9685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.018248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.033452][ T9685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.196036][ T9687] Cannot find add_set index 0 as target [ 445.693080][ T9685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.775271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.791121][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.811846][ T4337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.979458][ T9702] loop5: detected capacity change from 0 to 512 [ 446.199212][ T9702] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 446.317356][ T9702] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 446.391121][ T9716] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1546'. [ 446.589116][ T9702] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 446.628108][ T9702] System zones: 1-12 [ 447.227174][ T9702] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 447.260844][ T9702] EXT4-fs (loop5): 1 truncate cleaned up [ 447.266545][ T9702] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 447.862091][ T9744] device vlan2 entered promiscuous mode [ 448.426736][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1553'. [ 448.850203][ T9771] xt_CONNSECMARK: invalid mode: 0 [ 449.486090][ T1346] net_ratelimit: 8 callbacks suppressed [ 449.486109][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.964338][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.050091][ T9752] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1554'. [ 450.124520][ T9785] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1562'. [ 450.439890][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.014309][ T9825] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1575'. [ 453.645805][ T9826] tipc: Enabling of bearer rejected, failed to enable media [ 453.784694][ T9835] bond2: option mode: unable to set because the bond device has slaves [ 453.796358][ T9835] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1577'. [ 453.881778][ T9835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.899139][ T9835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.953451][ T9835] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 454.661418][ T9835] bond0 (unregistering): Released all slaves [ 454.887295][ T9848] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1579'. [ 454.935203][ T9849] ipt_REJECT: TCP_RESET invalid for non-tcp [ 457.921521][ T9875] netlink: 'syz.0.1590': attribute type 11 has an invalid length. [ 459.537331][ T9868] sctp: failed to load transform for md5: -2 [ 460.629723][ T9907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1598'. [ 461.398692][ T9925] Set syz0 is full, maxelem 0 reached [ 463.510250][ T9934] sctp: failed to load transform for md5: -2 [ 463.605843][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1609'. [ 463.918463][ T9958] device bond_slave_0 entered promiscuous mode [ 463.924789][ T9958] device bond_slave_1 entered promiscuous mode [ 463.931043][ T9958] device vxlan0 entered promiscuous mode [ 464.769410][ T9958] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 464.811705][ T9958] bond2: (slave macvlan2): making interface the new active one [ 464.881536][ T9958] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 464.924948][ T9971] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1610'. [ 464.994789][ T9971] device bond_slave_0 left promiscuous mode [ 465.001157][ T9971] device bond_slave_1 left promiscuous mode [ 465.007232][ T9971] device vxlan0 left promiscuous mode [ 465.072139][ T9971] bond2: (slave macvlan2): Releasing active interface [ 465.112719][ T9971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.147782][ T9971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.215243][ T9971] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 465.224968][ T9971] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.234091][ T9971] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.243068][ T9971] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.252037][ T9971] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.788619][ T9971] bond0 (unregistering): Released all slaves [ 465.954028][ T9982] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1628'. [ 468.521059][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 468.531804][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 468.541214][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 468.551098][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 468.560844][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 469.132533][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'. [ 469.141908][T10041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.346906][T10041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.350925][T10051] loop5: detected capacity change from 0 to 32768 [ 470.460627][T10051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1637 (10051) [ 471.191922][T10051] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 471.201576][T10051] BTRFS info (device loop5): turning on sync discard [ 471.208664][T10051] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 471.218898][T10051] BTRFS info (device loop5): use zstd compression, level 3 [ 471.226267][T10051] BTRFS info (device loop5): turning on async discard [ 471.233506][T10051] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 471.244442][T10051] BTRFS info (device loop5): trying to use backup root at mount time [ 471.252668][T10051] BTRFS info (device loop5): enabling auto defrag [ 471.259225][T10051] BTRFS info (device loop5): using free space tree [ 471.265835][T10051] BTRFS info (device loop5): has skinny extents [ 471.319408][T10069] bond0: (slave macvlan2): Opening slave failed [ 471.505592][T10078] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1641'. [ 472.474587][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 472.500940][ T4551] BTRFS warning (device loop5): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 472.673745][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 472.812448][T10051] BTRFS warning (device loop5): failed to read root (objectid=2): -5 [ 472.926290][ T4551] BTRFS warning (device loop5): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 473.127679][T10051] BTRFS warning (device loop5): couldn't read tree root [ 473.138992][T10051] BTRFS error (device loop5): parent transid verify failed on 5255168 wanted 5 found 7 [ 473.149419][T10051] BTRFS warning (device loop5): couldn't read tree root [ 473.230154][ T1346] Bluetooth: hci4: command 0x0406 tx timeout [ 473.238848][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 473.256555][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 473.265383][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 473.304013][T10097] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 473.620406][T10051] BTRFS error (device loop5): open_ctree failed: -22 [ 474.695449][T10149] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.702836][T10149] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.760455][T10155] device bridge_slave_1 left promiscuous mode [ 474.802453][T10155] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.819638][T10157] __sock_release: fasync list not empty! [ 474.842291][T10155] device bridge_slave_0 left promiscuous mode [ 474.848673][T10155] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.375262][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1661'. [ 476.172278][T10171] loop5: detected capacity change from 0 to 40427 [ 476.981569][T10171] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 476.992053][T10171] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 477.062102][T10182] ip6t_srh: unknown srh invflags 4000 [ 477.070398][T10171] F2FS-fs (loop5): Found nat_bits in checkpoint [ 477.134778][T10171] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 477.142418][T10171] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 477.359972][T10171] handle_bad_sector: 2 callbacks suppressed [ 477.360016][T10171] attempt to access beyond end of device [ 477.360016][T10171] loop5: rw=2049, want=78744, limit=40427 [ 477.434743][T10197] attempt to access beyond end of device [ 477.434743][T10197] loop5: rw=2049, want=80848, limit=40427 [ 478.188074][T10208] bond4: option mode: unable to set because the bond device has slaves [ 478.208574][T10208] bond4: (slave veth5): Enslaving as an active interface with a down link [ 478.228133][T10208] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1675'. [ 478.368680][ T4240] attempt to access beyond end of device [ 478.368680][ T4240] loop5: rw=1, want=45104, limit=40427 [ 478.392693][T10212] xt_hashlimit: max too large, truncated to 1048576 [ 478.727611][T10220] overlayfs: missing 'lowerdir' [ 479.333283][T10232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.209503][T10323] tipc: Enabled bearer , priority 0 [ 488.460963][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1710'. [ 493.377179][T10380] o2cb: This node has not been configured. [ 493.384005][T10380] o2cb: Cluster check failed. Fix errors before retrying. [ 493.391450][T10380] (syz.1.1721,10380,1):user_dlm_register:675 ERROR: status = -22 [ 493.399321][T10380] (syz.1.1721,10380,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file2" [ 494.338520][T10396] tipc: Enabling of bearer rejected, failed to enable media [ 495.707972][T10417] trusted_key: encrypted_key: key trusted:syz not found [ 497.310591][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1731'. [ 497.326391][T10427] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1737'. [ 497.344349][T10427] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 497.371341][T10427] [U] J"—E:ÀÆ" [ 497.420908][T10432] netlink: 'syz.1.1738': attribute type 1 has an invalid length. [ 497.645635][T10432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.087676][T10441] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 500.759825][T10480] [U]  [ 500.762838][T10480] [U] K{‘ [ 500.767160][T10480] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 500.779511][T10480] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 500.798433][T10480] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 500.820130][T10480] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 500.875370][T10480] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 500.903105][T10480] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 500.918410][T10480] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 500.936355][T10480] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/< rejected, failed to enable media [ 511.430924][T10627] sctp: failed to load transform for md5: -2 [ 511.464975][T10640] sctp: failed to load transform for md5: -4 [ 513.233478][T10687] tipc: Started in network mode [ 513.242903][T10687] tipc: Node identity ce3f5217c5c2, cluster identity 4711 [ 513.251916][T10687] tipc: Enabled bearer , priority 0 [ 513.259499][T10687] device syzkaller0 entered promiscuous mode [ 513.371391][T10687] tipc: Resetting bearer [ 513.400131][T10681] tipc: Resetting bearer [ 513.417915][T10681] tipc: Disabling bearer [ 514.530393][T10705] loop5: detected capacity change from 0 to 128 [ 514.794599][ T26] audit: type=1804 audit(1784170251.029:158): pid=10705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1805" name="/newroot/90/file0/bus" dev="loop5" ino=1048632 res=1 errno=0 [ 515.098175][ T26] audit: type=1804 audit(1784170251.299:159): pid=10705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1805" name="/newroot/90/file0/bus" dev="loop5" ino=1048632 res=1 errno=0 [ 515.200084][T10705] attempt to access beyond end of device [ 515.200084][T10705] loop5: rw=2049, want=241, limit=128 [ 515.215559][T10710] attempt to access beyond end of device [ 515.215559][T10710] loop5: rw=2049, want=177, limit=128 [ 515.239202][T10710] attempt to access beyond end of device [ 515.239202][T10710] loop5: rw=2049, want=281, limit=128 [ 519.716527][T10775] binder_alloc: 10774: pid 10774 spamming oneway? 2 buffers allocated for a total size of 5120 [ 519.907281][T10775] binder_alloc: 10774: pid 10774 spamming oneway? 3 buffers allocated for a total size of 5128 [ 524.369909][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1845'. [ 524.595948][T10843] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 524.915859][T10843] bridge4: port 1(erspan0) entered blocking state [ 525.300635][T10843] bridge4: port 1(erspan0) entered disabled state [ 525.316290][T10843] device erspan0 entered promiscuous mode [ 525.393497][T10843] bridge4: port 1(erspan0) entered blocking state [ 525.400146][T10843] bridge4: port 1(erspan0) entered forwarding state [ 525.425040][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge4: link becomes ready [ 525.940643][T10857] tipc: Failed to remove unknown binding: 66,0,0/0:329312879/329312880 [ 525.984741][T10865] tipc: Failed to remove unknown binding: 66,0,0/0:1020851211/1020851213 [ 526.100813][T10857] tipc: Failed to remove unknown binding: 66,0,0/0:329312879/329312880 [ 526.495932][T10876] device syzkaller0 entered promiscuous mode [ 529.765458][T10952] tipc: Enabled bearer , priority 0 [ 529.781885][T10952] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1881'. [ 529.802428][T10950] device syzkaller0 entered promiscuous mode [ 533.353343][T10993] netlink: 'syz.2.1879': attribute type 1 has an invalid length. [ 538.313926][T11074] tipc: Failed to remove unknown binding: 66,0,0/2130706433:2601136876/2601136877 [ 538.323529][T11074] tipc: Failed to remove unknown binding: 66,0,0/2130706433:2601136876/2601136877 [ 538.333366][T11079] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3172624388/3172624390 [ 542.424319][T11129] x_tables: ip_tables: osf match: only valid for protocol 6 [ 545.023148][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'. [ 547.680239][T11190] tipc: Enabled bearer , priority 0 [ 547.704672][T11190] tipc: Resetting bearer [ 547.851334][T11189] tipc: Disabling bearer [ 548.267342][T11215] overlayfs: failed to clone lowerpath [ 550.385410][T11239] tipc: Enabling of bearer rejected, already enabled [ 550.435307][T11248] tipc: Enabling of bearer rejected, already enabled [ 550.567765][T11252] device syzkaller0 entered promiscuous mode [ 551.268975][T11262] overlayfs: failed to clone upperpath [ 551.686625][T11272] overlayfs: failed to clone upperpath [ 554.237149][T11347] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1993'. [ 554.649709][T11361] tipc: Enabling of bearer rejected, already enabled [ 559.416254][T11446] loop5: detected capacity change from 0 to 2048 [ 559.437428][T11446] NILFS (loop5): unrecognized mount option "ÈÍÜÊûä¬V°l [ 559.437428][T11446] ´šnorecovery" [ 559.752342][T11452] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 560.306934][T11466] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2021'. [ 560.327028][T11466] netlink: 'syz.5.2021': attribute type 1 has an invalid length. [ 560.507924][T11470] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2023'. [ 561.717563][T11476] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.707724][T11476] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.778244][T11476] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.799793][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2030'. [ 562.893995][T11476] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.965158][T11495] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 563.052809][T11476] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.066355][T11476] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.082185][T11476] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.150226][T11476] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.026335][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.042400][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.470127][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2032'. [ 566.093657][T11532] netlink: 'syz.1.2044': attribute type 1 has an invalid length. [ 566.301430][T11532] bond4: (slave veth5): Enslaving as an active interface with a down link [ 567.354727][T11539] bond0: (slave veth0_to_bond): Releasing active interface [ 567.366611][T11539] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 568.369778][ T26] audit: type=1326 audit(1784170304.579:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.0.2050" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1c8cae59 code=0x7fc00000 [ 568.393966][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.618615][ T26] audit: type=1326 audit(1784170304.589:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.0.2050" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e1c8cae59 code=0x7fc00000 [ 568.643018][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.612185][ T26] audit: type=1326 audit(1784170304.589:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11558 comm="syz.0.2050" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1c8cae59 code=0x7fc00000 [ 570.071151][T11599] netlink: 'syz.0.2057': attribute type 2 has an invalid length. [ 577.542244][T11712] device syzkaller0 entered promiscuous mode [ 577.724937][T11728] tipc: Failed to remove unknown binding: 66,0,0/2126:1559918868/1559918870 [ 577.748006][T11728] tipc: Failed to remove unknown binding: 66,0,0/2126:1559918868/1559918869 [ 577.768636][T11728] tipc: Failed to remove unknown binding: 66,0,0/2126:1559918868/1559918870 [ 577.780304][T11728] tipc: Failed to remove unknown binding: 66,0,0/2126:1559918868/1559918869 [ 579.303447][T11749] sctp: [Deprecated]: syz.3.2102 (pid 11749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 579.303447][T11749] Use struct sctp_sack_info instead [ 579.410220][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2095'. [ 580.386335][T11775] device syzkaller0 entered promiscuous mode [ 580.466220][T11777] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2108'. [ 582.592633][T11805] xt_HMARK: spi-set and port-set can't be combined [ 592.947931][T11930] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 593.571339][T11943] loop5: detected capacity change from 0 to 512 [ 593.995622][T11943] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 594.085158][T11943] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 594.127113][T11943] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 596.141466][T11978] tipc: Enabled bearer , priority 0 [ 596.190534][T11978] device syzkaller0 entered promiscuous mode [ 596.236965][T11978] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 596.423431][T11978] tipc: Resetting bearer [ 596.833195][T11993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 597.169851][T11977] tipc: Resetting bearer [ 597.187812][T11977] tipc: Disabling bearer [ 600.100733][T12029] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 600.158453][T12029] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 600.312760][T12029] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 600.345665][T12029] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 600.946164][T12029] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 600.973272][T12029] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 601.053469][T12029] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 601.090436][T12029] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 601.254326][T12043] loop5: detected capacity change from 0 to 2048 [ 601.645632][T12043] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 603.164785][T12080] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 603.180984][T12080] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 747 with error 28 [ 603.193740][T12080] EXT4-fs (loop5): This should not happen!! Data will be lost [ 603.193740][T12080] [ 603.203377][T12080] EXT4-fs (loop5): Total free blocks count 0 [ 603.209361][T12080] EXT4-fs (loop5): Free/Dirty block details [ 603.215325][T12080] EXT4-fs (loop5): free_blocks=2415919504 [ 603.221104][T12080] EXT4-fs (loop5): dirty_blocks=752 [ 603.226409][T12080] EXT4-fs (loop5): Block reservation details [ 603.232422][T12080] EXT4-fs (loop5): i_reserved_data_blocks=47 [ 610.208472][T12145] loop5: detected capacity change from 0 to 128 [ 610.367212][T12145] EXT4-fs (loop5): Test dummy encryption mode enabled [ 610.473591][T12145] EXT4-fs (loop5): Test dummy encryption mode enabled [ 611.043109][T12145] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 611.061789][T12145] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 613.178254][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2217'. [ 616.579155][T12201] loop5: detected capacity change from 0 to 16 [ 616.734120][T12201] erofs: (device loop5): mounted with root inode @ nid 36. [ 618.446938][T12209] erofs: (device loop5): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 1740 of nid 36 [ 623.445823][T12252] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2239'. [ 624.610097][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.616643][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.717633][T12332] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2264'. [ 635.191588][T12394] syz.2.2280 sent an empty control message without MSG_MORE. [ 636.350473][T12389] tipc: Failed to remove unknown binding: 66,0,0/0:548283043/548283045 [ 636.371180][T12384] tipc: Failed to remove unknown binding: 66,0,0/0:2513067240/2513067241 [ 638.047411][T12419] netlink: 'syz.1.2285': attribute type 2 has an invalid length. [ 640.852125][T12452] 9pnet: Insufficient options for proto=fd [ 644.316369][T12497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 647.879840][ T5042] IPVS: ip_vs_send_async error -101 [ 649.912695][T12563] netlink: 'syz.2.2326': attribute type 2 has an invalid length. [ 650.564516][ T26] audit: type=1326 audit(1784170386.789:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.2.2329" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac71586e59 code=0x7ffc0000 [ 650.588699][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.323375][ T26] audit: type=1326 audit(1784170386.789:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.2.2329" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac71586e59 code=0x7ffc0000 [ 651.352770][ T26] audit: type=1326 audit(1784170386.789:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.2.2329" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fac71586e59 code=0x7ffc0000 [ 651.406867][ T26] audit: type=1326 audit(1784170386.789:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.2.2329" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac71586e59 code=0x7ffc0000 [ 652.428981][ T26] audit: type=1326 audit(1784170386.789:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.2.2329" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac71586e59 code=0x7ffc0000 [ 653.672819][ T26] audit: type=1326 audit(1784170386.789:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.2.2329" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fac71586e59 code=0x7ffc0000 [ 654.021943][ T26] audit: type=1326 audit(1784170386.789:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.2.2329" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac71586e59 code=0x7ffc0000 [ 654.274751][ T26] audit: type=1326 audit(1784170386.789:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.2.2329" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac71586e59 code=0x7ffc0000 [ 654.320238][ T26] audit: type=1326 audit(1784170386.789:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.2.2329" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fac71586e59 code=0x7ffc0000 [ 654.857841][ T26] audit: type=1326 audit(1784170386.789:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.2.2329" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac71586e59 code=0x7ffc0000 [ 654.876600][T12610] overlayfs: failed to clone upperpath [ 655.449729][ T5042] IPVS: ip_vs_send_async error -101 [ 655.741257][T12626] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2341'. [ 659.914379][T12656] netlink: 'syz.0.2348': attribute type 11 has an invalid length. [ 661.512165][T12665] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2353'. [ 661.521535][T12665] netlink: set zone limit has 8 unknown bytes [ 662.666748][T12684] loop5: detected capacity change from 0 to 2048 [ 662.770252][T12684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 663.673769][T12696] tipc: Enabling of bearer rejected, already enabled [ 665.161586][T12717] xt_HMARK: spi-set and port-set can't be combined [ 669.302368][T12759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.317805][T12761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.871108][T12772] xt_HMARK: spi-set and port-set can't be combined [ 671.345258][T12781] overlayfs: failed to clone lowerpath [ 672.771766][T12801] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 672.803276][T12801] netlink: 'syz.1.2391': attribute type 2 has an invalid length. [ 672.832975][T12801] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 677.463162][T12844] tipc: Resetting bearer [ 678.519173][T12880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 678.526525][T12880] IPv6: NLM_F_CREATE should be set when creating new route [ 679.196745][T12884] bridge5: port 1(erspan0) entered disabled state [ 680.015591][T12884] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.023014][T12884] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.849808][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 682.071722][T12884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.788657][T12884] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.798088][T12884] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.807140][T12884] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.816081][T12884] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.888299][T12884] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.897493][T12884] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.906825][T12884] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.915822][T12884] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.439142][T12988] tipc: Enabled bearer , priority 0 [ 686.287890][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.401935][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.896067][T12932] tipc: Node number set to 1044123085 [ 688.732529][T13021] device syzkaller0 entered promiscuous mode [ 693.517830][T13080] loop5: detected capacity change from 0 to 4096 [ 693.961918][T13080] __ntfs_warning: 10 callbacks suppressed [ 693.962037][T13080] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 694.141086][T13080] ntfs: volume version 3.1. [ 695.960910][T13114] tipc: Failed to remove unknown binding: 66,0,0/134418688:2453805806/2453805807 [ 695.989798][T13114] tipc: Failed to remove unknown binding: 66,0,0/134418688:2453805806/2453805807 [ 695.999751][T13118] tipc: Failed to remove unknown binding: 66,0,0/134418688:186214175/186214177 [ 697.205086][T13160] loop5: detected capacity change from 0 to 1024 [ 699.220116][T13175] tipc: Enabling of bearer rejected, already enabled [ 699.296815][T13175] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2481'. [ 706.513946][T13265] netlink: 'syz.1.2502': attribute type 1 has an invalid length. [ 710.227289][T13301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2513'. [ 711.303531][T13315] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 714.974692][T13347] loop4: detected capacity change from 0 to 7 [ 715.055254][T13347] Dev loop4: unable to read RDB block 7 [ 715.072080][T13347] loop4: AHDI p1 p2 [ 715.076036][T13347] loop4: partition table partially beyond EOD, truncated [ 715.110982][T13347] loop4: p1 start 1835360114 is beyond EOD, truncated [ 715.969299][T13364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 717.630837][T13377] x_tables: ip_tables: osf match: only valid for protocol 6 [ 720.624869][ T5042] IPVS: ip_vs_send_async error -101 [ 720.893797][T13400] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 721.550666][T13418] overlayfs: failed to clone upperpath [ 722.297218][T13437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 724.019735][T13454] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 726.442426][T13473] tipc: Enabled bearer , priority 0 [ 726.481897][T13473] device syzkaller0 entered promiscuous mode [ 727.186170][T13473] tipc: Resetting bearer [ 727.567374][T13471] tipc: Resetting bearer [ 727.810409][T13471] tipc: Disabling bearer [ 729.322388][ T1346] tipc: Node number set to 201150999 [ 730.735642][T13533] tipc: Enabled bearer , priority 0 [ 730.781611][T13533] device syzkaller0 entered promiscuous mode [ 730.948203][T13533] tipc: Resetting bearer [ 731.006075][T13530] tipc: Resetting bearer [ 731.062057][T13530] tipc: Disabling bearer [ 737.390768][T13651] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2603'. [ 741.024030][T13702] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2625'. [ 741.058385][T13702] netlink: 'syz.3.2625': attribute type 1 has an invalid length. [ 741.090184][T13704] device syzkaller0 entered promiscuous mode [ 741.504272][T13706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2627'. [ 745.059806][ T5042] IPVS: ip_vs_send_async error -101 [ 745.621488][T13743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2640'. [ 747.160193][T13773] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 747.430240][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.640356][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.130859][T13839] netlink: 'syz.0.2669': attribute type 1 has an invalid length. [ 753.317921][T13845] bond0: (slave veth7): Enslaving as an active interface with a down link [ 753.346225][T13846] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 754.125927][T13855] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 779.428855][T14126] MPTCP: kernel_bind error, err=-99 [ 793.470837][T14249] loop5: detected capacity change from 0 to 32768 [ 793.851800][T14249] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 793.921294][T14249] ocfs2: Unmounting device (7,5) on (node local) [ 798.974545][T14299] netlink: 79 bytes leftover after parsing attributes in process `syz.2.2801'. [ 798.995717][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2801'. [ 799.005170][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2801'. [ 799.140387][T14299] netlink: 'syz.2.2801': attribute type 11 has an invalid length. [ 806.279910][ T5042] IPVS: ip_vs_send_async error -101 [ 809.438239][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.453464][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.379577][T14463] overlayfs: failed to clone upperpath [ 819.943659][T14467] device batadv_slave_0 entered promiscuous mode [ 820.145009][T14475] overlayfs: missing 'lowerdir' [ 820.199064][T14467] device batadv_slave_0 left promiscuous mode [ 820.455178][T14486] loop5: detected capacity change from 0 to 512 [ 821.382131][T14478] tipc: Enabled bearer , priority 2 [ 823.073942][T14486] EXT4-fs (loop5): Unrecognized mount option "subj_role=+^[]@Ö/+\)(%" or missing value [ 824.389064][T14515] overlayfs: missing 'lowerdir' [ 828.383262][T14559] loop5: detected capacity change from 0 to 1024 [ 829.019952][T14559] hfsplus: request for non-existent node 33423360 in B*Tree [ 829.059696][T14559] hfsplus: request for non-existent node 33423360 in B*Tree [ 829.111394][T14570] hfsplus: request for non-existent node 33423360 in B*Tree [ 829.256497][T14570] hfsplus: request for non-existent node 33423360 in B*Tree [ 830.013937][T14559] hfsplus: request for non-existent node 33423360 in B*Tree [ 830.186644][T14559] hfsplus: request for non-existent node 33423360 in B*Tree [ 831.219978][T14570] hfsplus: request for non-existent node 33423360 in B*Tree [ 831.298016][T14570] hfsplus: request for non-existent node 33423360 in B*Tree [ 831.343573][T14587] hfsplus: request for non-existent node 33423360 in B*Tree [ 831.429587][T14587] hfsplus: request for non-existent node 33423360 in B*Tree [ 832.818592][T14612] device syzkaller0 entered promiscuous mode [ 834.739804][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2900'. [ 834.849713][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2900'. [ 834.858959][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2900'. [ 834.868140][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2900'. [ 834.877374][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2900'. [ 839.620885][T14676] device syzkaller0 entered promiscuous mode [ 857.317864][T14825] loop5: detected capacity change from 0 to 1024 [ 857.560845][T14825] hfsplus: request for non-existent node 33423360 in B*Tree [ 857.572697][T14825] hfsplus: request for non-existent node 33423360 in B*Tree [ 857.616362][T14829] hfsplus: request for non-existent node 33423360 in B*Tree [ 857.719698][T14829] hfsplus: request for non-existent node 33423360 in B*Tree [ 857.779657][T14825] hfsplus: request for non-existent node 33423360 in B*Tree [ 857.787067][T14825] hfsplus: request for non-existent node 33423360 in B*Tree [ 858.585035][T14829] hfsplus: request for non-existent node 33423360 in B*Tree [ 858.720678][T14829] hfsplus: request for non-existent node 33423360 in B*Tree [ 858.795574][T14825] hfsplus: request for non-existent node 33423360 in B*Tree [ 859.483758][T14825] hfsplus: request for non-existent node 33423360 in B*Tree [ 859.777477][T14838] hfsplus: request for non-existent node 33423360 in B*Tree [ 859.797042][T14838] hfsplus: request for non-existent node 33423360 in B*Tree [ 860.731016][T14829] hfsplus: request for non-existent node 33423360 in B*Tree [ 860.760546][T14829] hfsplus: request for non-existent node 33423360 in B*Tree [ 867.948129][ T5042] IPVS: ip_vs_send_async error -101 [ 870.420099][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.426427][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.833053][T14972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 880.921926][T15067] __sock_release: fasync list not empty! [ 881.296860][T15063] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.306014][T15063] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.315035][T15063] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.324047][T15063] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.435484][T15063] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.623851][T15063] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.634624][T15063] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.643922][T15063] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.702779][T15170] netlink: 'syz.5.3038': attribute type 11 has an invalid length. [ 902.798078][T15291] tipc: Enabling of bearer rejected, already enabled [ 902.854454][T15291] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3078'. [ 905.500365][T15327] loop5: detected capacity change from 0 to 128 [ 907.336196][T15354] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3109'. [ 909.470829][T15380] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3107'. [ 909.533569][T15383] tipc: Enabling of bearer rejected, already enabled [ 909.566668][T15385] tipc: Enabling of bearer rejected, already enabled [ 909.704692][T15388] tipc: Enabling of bearer rejected, already enabled [ 909.816892][T15392] netlink: 'syz.0.3105': attribute type 1 has an invalid length. [ 910.248992][T15394] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3113'. [ 912.495813][T15437] tipc: Enabling of bearer rejected, already enabled [ 912.578813][T15439] tipc: Enabled bearer , priority 0 [ 913.000754][T15434] tipc: Disabling bearer [ 913.064170][T15448] tipc: Enabling of bearer rejected, already enabled [ 913.265823][T15462] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3136'. [ 913.434358][T15472] tipc: Enabling of bearer rejected, already enabled [ 914.945362][T15481] tipc: Enabling of bearer rejected, already enabled [ 916.631843][T15508] tipc: Enabling of bearer rejected, already enabled [ 916.782090][T15516] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3154'. [ 918.514043][T15532] tipc: Enabling of bearer rejected, already enabled [ 920.710029][T15572] tipc: Enabling of bearer rejected, already enabled [ 920.836128][T15579] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3175'. [ 920.887843][T15581] tipc: Enabling of bearer rejected, failed to enable media [ 923.770974][T15620] tipc: Enabling of bearer rejected, already enabled [ 924.277925][T15631] tipc: Enabling of bearer rejected, already enabled [ 924.305505][T15632] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3193'. [ 924.759233][T15648] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 927.206622][T15668] device syzkaller0 entered promiscuous mode [ 928.210982][T15686] tipc: Enabled bearer , priority 0 [ 928.240680][T15689] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3214'. [ 928.258587][T15686] device syzkaller0 entered promiscuous mode [ 928.280215][T15690] tipc: Enabling of bearer rejected, already enabled [ 928.289895][T15694] tipc: Enabling of bearer rejected, already enabled [ 928.301292][T15693] tipc: Enabling of bearer rejected, already enabled [ 928.311540][T15686] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3211'. [ 928.322177][T15690] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3212'. [ 928.335237][T15694] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3215'. [ 928.350172][T15686] tipc: Resetting bearer [ 928.364252][T15693] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3213'. [ 928.385826][T15685] tipc: Resetting bearer [ 928.420398][T15685] tipc: Disabling bearer [ 928.609524][ T5042] IPVS: ip_vs_send_async error -101 [ 928.622947][T15713] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1395717609/1395717610 [ 928.639826][T15717] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3698188982/3698188984 [ 928.658830][T15713] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1395717609/1395717610 [ 929.591592][T15735] tipc: Enabling of bearer rejected, already enabled [ 930.075104][T15734] tipc: Enabled bearer , priority 0 [ 930.163363][T15735] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3231'. [ 930.291531][T15738] device syzkaller0 entered promiscuous mode [ 930.343481][T15734] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3230'. [ 930.359503][T15732] tipc: Resetting bearer [ 930.426092][T15732] tipc: Disabling bearer [ 930.437192][T15743] tipc: Enabling of bearer rejected, already enabled [ 930.476949][T15743] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3232'. [ 931.046650][T15751] tipc: Enabling of bearer rejected, already enabled [ 931.115839][T15751] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3234'. [ 932.329687][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.336344][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.503657][T15775] xt_hashlimit: max too large, truncated to 1048576 [ 934.771565][T15791] x_tables: ip_tables: osf match: only valid for protocol 6 [ 934.808675][T15798] device syzkaller0 entered promiscuous mode [ 934.950666][T15798] tc action pedit 'at' offset 20 out of bounds [ 936.004661][T15826] tipc: Enabling of bearer rejected, already enabled [ 937.214083][T15826] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3260'. [ 937.242071][T15836] tipc: Enabling of bearer rejected, already enabled [ 937.283925][T15836] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3262'. [ 937.391123][T15838] tipc: Enabling of bearer rejected, already enabled [ 937.411038][T15841] tipc: Enabling of bearer rejected, already enabled [ 937.441252][T15844] tipc: Enabling of bearer rejected, already enabled [ 937.458270][T15841] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3263'. [ 937.475763][T15844] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3264'. [ 939.115442][T15865] tipc: Enabling of bearer rejected, already enabled [ 939.168389][T15870] tipc: Enabling of bearer rejected, already enabled [ 939.507228][T15882] tipc: Enabling of bearer rejected, already enabled [ 939.605776][T15889] tipc: Enabling of bearer rejected, already enabled [ 939.616885][T15889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3285'. [ 940.667965][T15914] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3292'. [ 940.780472][T15919] tipc: Enabling of bearer rejected, already enabled [ 940.876462][T15935] tipc: Enabling of bearer rejected, already enabled [ 940.905960][T15934] tipc: Enabling of bearer rejected, already enabled [ 940.917571][T15934] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3296'. [ 941.610131][T15949] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.767954][T15949] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.975598][T15949] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.036641][T15949] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.132349][T15949] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.216875][T15949] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.230772][T15949] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.244274][T15949] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.318379][T15957] tipc: Enabling of bearer rejected, already enabled [ 942.378688][T15960] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3306'. [ 942.809784][T15969] tipc: Enabling of bearer rejected, already enabled [ 942.897997][T15971] tipc: Enabled bearer , priority 0 [ 942.914952][T15971] device syzkaller0 entered promiscuous mode [ 942.949866][T15971] tipc: Resetting bearer [ 942.960318][T15968] tipc: Resetting bearer [ 942.974321][T15968] tipc: Disabling bearer [ 942.983417][T15976] tipc: Enabling of bearer rejected, already enabled [ 942.994206][T15976] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3311'. [ 944.430760][T15993] tipc: Enabling of bearer rejected, already enabled [ 945.682486][T16005] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3320'. [ 945.726954][T16015] tipc: Enabling of bearer rejected, already enabled [ 945.741195][T16015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3323'. [ 945.780516][T16017] tipc: Enabling of bearer rejected, already enabled [ 945.791138][T16017] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3326'. [ 945.833013][T16021] tipc: Enabling of bearer rejected, already enabled [ 946.088682][T16031] tipc: Enabling of bearer rejected, already enabled [ 946.129032][T16031] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3330'. [ 947.544532][T16052] tipc: Enabling of bearer rejected, already enabled [ 948.069666][T16050] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3336'. [ 948.299601][T16058] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3338'. [ 948.846413][T16070] tipc: Enabling of bearer rejected, already enabled [ 949.012841][T16066] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3340'. [ 949.557233][T16076] tipc: Enabling of bearer rejected, already enabled [ 949.578052][T16080] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3343'. [ 951.840557][T16103] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3352'. [ 951.882103][T16102] tipc: Enabling of bearer rejected, already enabled [ 952.134981][T16102] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3351'. [ 952.304274][T16109] tipc: Enabling of bearer rejected, already enabled [ 952.466923][T16109] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3355'. [ 952.779200][T16119] tipc: Enabling of bearer rejected, already enabled [ 953.065939][T16126] tipc: Enabling of bearer rejected, already enabled [ 953.103977][T16126] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3360'. [ 955.668845][T16158] tipc: Enabling of bearer rejected, already enabled [ 955.711832][T16164] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3369'. [ 955.727118][T16161] tipc: Enabling of bearer rejected, already enabled [ 955.738089][T16158] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3370'. [ 955.759904][T16163] tipc: Enabling of bearer rejected, already enabled [ 955.804744][T16161] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3372'. [ 955.822812][T16163] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3371'. [ 955.843053][T16172] device syzkaller0 entered promiscuous mode [ 955.923945][T16182] tipc: Enabling of bearer rejected, already enabled [ 955.941366][T16182] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3381'. [ 958.270318][T16198] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3386'. [ 958.338837][T16203] tipc: Enabling of bearer rejected, already enabled [ 958.565148][T16207] tipc: Enabled bearer , priority 0 [ 958.574569][T16207] device syzkaller0 entered promiscuous mode [ 958.584302][T16203] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3387'. [ 958.809579][T16213] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3389'. [ 959.509729][T16206] tipc: Resetting bearer [ 959.687019][T16206] tipc: Disabling bearer [ 959.695474][T16220] tipc: Enabling of bearer rejected, already enabled [ 959.714815][T16220] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3391'. [ 959.814039][T16225] tipc: Enabled bearer , priority 0 [ 959.822746][T16225] device syzkaller0 entered promiscuous mode [ 959.832509][T16225] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3393'. [ 959.851966][T16225] tipc: Resetting bearer [ 959.859335][T16223] tipc: Resetting bearer [ 959.915393][T16223] tipc: Disabling bearer [ 963.781025][T16256] tc action pedit 'at' offset 4 out of bounds [ 964.646515][T16264] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3403'. [ 964.723368][T16266] tipc: Enabling of bearer rejected, already enabled [ 964.823842][T16269] tipc: Enabling of bearer rejected, already enabled [ 964.844871][T16269] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3405'. [ 964.867427][T16266] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3404'. [ 964.945282][T16272] tipc: Enabling of bearer rejected, already enabled [ 964.960716][T16272] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3406'. [ 966.401574][T16276] tipc: Enabling of bearer rejected, already enabled [ 969.323546][T16307] tipc: Enabling of bearer rejected, already enabled [ 969.569859][T16310] MPTCP: kernel_bind error, err=-99 [ 970.310218][T16314] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3419'. [ 971.409061][T16322] tipc: Enabling of bearer rejected, already enabled [ 971.717072][T16329] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3422'. [ 972.105795][T16335] tipc: Enabling of bearer rejected, already enabled [ 972.466644][T16349] tipc: Enabling of bearer rejected, already enabled [ 972.950780][T16345] tipc: Enabled bearer , priority 0 [ 973.015816][T16353] device syzkaller0 entered promiscuous mode [ 973.057625][T16344] tipc: Resetting bearer [ 973.077449][T16344] tipc: Disabling bearer [ 973.289894][T16361] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3432'. [ 974.353604][T16375] tipc: Enabling of bearer rejected, already enabled [ 974.364091][T16375] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3435'. [ 974.421531][T16379] tipc: Enabling of bearer rejected, already enabled [ 975.561519][T16390] tipc: Enabled bearer , priority 0 [ 975.576068][T16390] device syzkaller0 entered promiscuous mode [ 975.613436][T16389] tipc: Resetting bearer [ 975.638540][T16389] tipc: Disabling bearer [ 975.699708][T16396] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3444'. [ 976.501896][T16402] tipc: Enabling of bearer rejected, already enabled [ 976.585320][T16402] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3456'. [ 976.595547][T16414] tipc: Enabling of bearer rejected, already enabled [ 976.616526][T16412] tipc: Enabled bearer , priority 0 [ 976.636254][T16412] device syzkaller0 entered promiscuous mode [ 976.655313][T16412] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3450'. [ 976.696405][T16416] tipc: Enabling of bearer rejected, already enabled [ 976.740140][T16411] tipc: Resetting bearer [ 977.246997][T16411] tipc: Disabling bearer [ 978.687337][T16431] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3458'. [ 980.490189][T16449] bridge0: port 1(syz_tun) entered disabled state [ 981.276753][T16450] tipc: Enabling of bearer rejected, already enabled [ 981.300372][T16453] bridge0: port 1(syz_tun) entered disabled state [ 981.363042][T16460] tipc: Enabling of bearer rejected, already enabled [ 981.371823][T16458] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3463'. [ 981.382079][T16462] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3465'. [ 981.473997][T16464] ip6t_srh: unknown srh invflags 4000 [ 981.527120][T16471] tipc: Enabling of bearer rejected, already enabled [ 983.405215][T16480] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3473'. [ 983.417961][T16482] tipc: Enabled bearer , priority 0 [ 984.777253][T16482] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3471'. [ 985.028866][T16481] tipc: Disabling bearer [ 986.629220][T16512] tipc: Enabling of bearer rejected, already enabled [ 986.762840][T16523] tipc: Enabling of bearer rejected, already enabled [ 986.783754][T16522] tipc: Enabling of bearer rejected, already enabled [ 986.800202][T16523] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3479'. [ 986.818476][T16522] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3483'. [ 986.866443][T16512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3480'. [ 988.457764][T16544] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3487'. [ 988.615412][T16551] tipc: Enabled bearer , priority 0 [ 988.660450][T16551] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3492'. [ 988.678919][T16551] tipc: Resetting bearer [ 988.697008][T16550] tipc: Disabling bearer [ 990.057585][T16564] tipc: Enabling of bearer rejected, already enabled [ 990.094468][T16564] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3497'. [ 990.107267][T16566] tipc: Enabling of bearer rejected, already enabled [ 990.166018][T16566] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3496'. [ 991.697592][ T5042] IPVS: ip_vs_send_async error -101 [ 991.735847][T16579] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3502'. [ 991.855838][T16575] tipc: Enabling of bearer rejected, already enabled [ 991.931911][T16575] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3499'. [ 992.770142][T16597] tipc: Enabling of bearer rejected, already enabled [ 992.780704][T16597] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3506'. [ 993.171539][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.620169][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.876279][T16613] tipc: Enabling of bearer rejected, already enabled [ 993.906513][T16610] tipc: Enabling of bearer rejected, already enabled [ 993.933795][T16613] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3509'. [ 994.067484][T16610] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3510'. [ 994.812794][T16623] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3513'. [ 995.118401][T16629] tipc: Enabled bearer , priority 0 [ 996.459807][T16636] device syzkaller0 entered promiscuous mode [ 996.485744][T16639] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3518'. [ 996.506559][T16629] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3516'. [ 996.576309][T16628] tipc: Resetting bearer [ 996.646249][T16628] tipc: Disabling bearer [ 997.798881][T16656] tipc: Enabling of bearer rejected, already enabled [ 997.818267][T16656] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3524'. [ 997.884809][T16659] tipc: Enabling of bearer rejected, already enabled [ 997.895354][T16659] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3525'. [ 997.916867][T16662] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3526'. [ 999.246168][T16672] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3529'. [ 1001.331819][T16680] tipc: Enabling of bearer rejected, already enabled [ 1001.383389][T16680] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3532'. [ 1001.494148][T16698] tipc: Enabled bearer , priority 0 [ 1001.523627][T16698] device syzkaller0 entered promiscuous mode [ 1001.569020][T16698] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3536'. [ 1001.622626][T16696] tipc: Resetting bearer [ 1001.692624][T16696] tipc: Disabling bearer [ 1001.713193][T16701] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3537'. [ 1002.951606][T16711] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3542'. [ 1003.099662][T16715] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3540'. [ 1003.386660][T16728] tipc: Enabling of bearer rejected, already enabled [ 1003.427102][T16728] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3547'. [ 1003.454792][T16730] tipc: Enabled bearer , priority 0 [ 1003.478235][T16732] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3549'. [ 1003.489076][T16730] device syzkaller0 entered promiscuous mode [ 1003.528133][T16730] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3548'. [ 1003.554494][T16729] tipc: Resetting bearer [ 1003.597919][T16729] tipc: Disabling bearer [ 1003.760700][T16740] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3553'. [ 1004.622355][T16748] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1004.685804][T16752] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3556'. [ 1004.923880][T16761] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3560'. [ 1004.964850][T16763] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3561'. [ 1005.307859][T16772] tipc: Enabling of bearer rejected, already enabled [ 1005.318779][T16774] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3566'. [ 1005.635828][T16781] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1006.375161][T16806] tipc: Enabling of bearer rejected, already enabled [ 1007.085528][T16816] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1007.241359][T16820] device syzkaller0 entered promiscuous mode [ 1007.453205][T16830] tipc: Enabling of bearer rejected, already enabled [ 1007.972661][T16855] __nla_validate_parse: 12 callbacks suppressed [ 1007.972713][T16855] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3599'. [ 1008.197352][T16862] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3603'. [ 1008.972141][T16869] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3605'. [ 1009.351500][T16878] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3609'. [ 1009.824752][T16885] device syzkaller0 entered promiscuous mode [ 1009.860272][T16885] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3612'. [ 1010.038226][T16891] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3614'. [ 1010.087790][T16896] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3616'. [ 1010.309244][T16906] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3620'. [ 1011.597236][T16926] tipc: Enabled bearer , priority 0 [ 1011.606592][T16926] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3627'. [ 1011.618597][T16926] tipc: Resetting bearer [ 1011.627167][T16925] tipc: Disabling bearer [ 1012.102408][T16934] tipc: Enabling of bearer rejected, already enabled [ 1012.125076][T16938] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3630'. [ 1013.521317][T16946] __nla_validate_parse: 1 callbacks suppressed [ 1013.521331][T16946] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3631'. [ 1013.549596][T16948] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3633'. [ 1014.017259][T16970] tipc: Enabling of bearer rejected, already enabled [ 1014.162733][T16973] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3642'. [ 1014.812511][T16978] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3644'. [ 1014.938678][T16984] tipc: Enabling of bearer rejected, already enabled [ 1014.986765][T16984] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3646'. [ 1015.037993][T16987] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3648'. [ 1015.717730][T17008] tipc: Enabled bearer , priority 0 [ 1015.726762][T17008] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3655'. [ 1015.738663][T17008] tipc: Resetting bearer [ 1015.753061][T17010] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3657'. [ 1015.781065][T17007] tipc: Disabling bearer [ 1016.617150][T17018] tipc: Enabling of bearer rejected, already enabled [ 1016.628466][T17018] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3660'. [ 1016.770223][T17027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3663'. [ 1018.163799][T17046] tipc: Enabling of bearer rejected, already enabled [ 1018.178299][T17047] tipc: Enabled bearer , priority 0 [ 1018.199257][T17047] tipc: Resetting bearer [ 1018.261467][T17045] tipc: Disabling bearer [ 1018.441150][T17054] tipc: Enabling of bearer rejected, already enabled [ 1019.986192][T17077] tipc: Enabling of bearer rejected, already enabled [ 1020.028467][T17077] __nla_validate_parse: 5 callbacks suppressed [ 1020.028481][T17077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3679'. [ 1020.115871][T17083] tipc: Enabling of bearer rejected, already enabled [ 1020.133132][T17083] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3682'. [ 1020.143525][T17089] tipc: Enabling of bearer rejected, already enabled [ 1020.192432][T17089] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3688'. [ 1020.244484][T17092] tipc: Enabling of bearer rejected, already enabled [ 1020.278954][T17092] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3689'. [ 1021.191129][T17119] tipc: Enabling of bearer rejected, already enabled [ 1021.208896][T17119] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3699'. [ 1021.415303][T17127] tipc: Enabling of bearer rejected, already enabled [ 1021.427976][T17125] tipc: Enabled bearer , priority 0 [ 1021.443432][T17127] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3702'. [ 1021.467933][T17125] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3701'. [ 1021.497767][T17125] tipc: Resetting bearer [ 1021.531217][T17124] tipc: Disabling bearer [ 1021.715510][T17135] tipc: Enabling of bearer rejected, already enabled [ 1021.733965][T17135] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3706'. [ 1022.774558][T17146] tipc: Enabled bearer , priority 0 [ 1022.829501][T17146] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3710'. [ 1023.017082][T17148] tipc: Resetting bearer [ 1023.178223][T17145] tipc: Disabling bearer [ 1023.709575][T17155] tipc: Enabling of bearer rejected, already enabled [ 1023.736450][T17155] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3713'. [ 1023.788409][T17159] tipc: Enabling of bearer rejected, already enabled [ 1023.846687][T17163] tipc: Enabling of bearer rejected, already enabled [ 1023.967079][T17172] tipc: Enabling of bearer rejected, already enabled [ 1026.180715][T17196] tipc: Enabling of bearer rejected, failed to enable media [ 1026.300595][T17202] __nla_validate_parse: 3 callbacks suppressed [ 1026.300610][T17202] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3727'. [ 1026.558927][T17208] tipc: Enabling of bearer rejected, failed to enable media [ 1026.708561][T17216] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3729'. [ 1026.755871][T17221] tipc: Enabling of bearer rejected, already enabled [ 1026.901607][T17221] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3732'. [ 1029.374338][T17250] tipc: Enabling of bearer rejected, already enabled [ 1029.431113][T17250] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3740'. [ 1030.196824][T17268] tipc: Enabling of bearer rejected, already enabled [ 1030.606472][T17268] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3745'. [ 1030.767300][T17272] tipc: Enabling of bearer rejected, failed to enable media [ 1030.880530][T17278] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3746'. [ 1031.677647][T17301] tipc: Enabling of bearer rejected, failed to enable media [ 1031.827513][T17307] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3753'. [ 1032.207363][T17320] device syzkaller0 entered promiscuous mode [ 1032.734464][T17328] tipc: Enabling of bearer rejected, already enabled [ 1032.745222][T17328] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3760'. [ 1032.868319][T17333] tipc: Enabling of bearer rejected, already enabled [ 1032.911197][T17339] tipc: Enabling of bearer rejected, already enabled [ 1033.190271][T17333] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3765'. [ 1033.850734][T17339] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3768'. [ 1034.004963][T17351] tipc: Enabling of bearer rejected, already enabled [ 1034.015965][T17351] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3782'. [ 1034.278901][T17367] tipc: Enabling of bearer rejected, already enabled [ 1034.306053][T17367] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3777'. [ 1035.481553][T17383] tipc: Enabling of bearer rejected, already enabled [ 1036.240007][T17385] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3785'. [ 1036.345381][T17392] tipc: Enabling of bearer rejected, already enabled [ 1036.368868][T17392] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3781'. [ 1037.523731][T17405] tipc: Enabling of bearer rejected, already enabled [ 1037.561108][T17405] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3792'. [ 1037.780751][T17425] tipc: Enabling of bearer rejected, already enabled [ 1037.790758][T17425] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3800'. [ 1038.894977][T17433] tipc: Enabling of bearer rejected, already enabled [ 1038.981079][T17433] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3801'. [ 1039.629254][T17445] tipc: Enabling of bearer rejected, already enabled [ 1039.893437][T17445] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1040.895826][T17464] tipc: Enabling of bearer rejected, failed to enable media [ 1041.179686][T17471] tipc: Enabling of bearer rejected, already enabled [ 1041.195970][T17471] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3815'. [ 1041.262401][T17477] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3814'. [ 1042.565928][T17492] tipc: Enabling of bearer rejected, already enabled [ 1042.606273][T17492] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3820'. [ 1042.632374][T17496] tipc: Enabled bearer , priority 2 [ 1044.542575][T17513] tipc: Enabling of bearer rejected, already enabled [ 1044.579994][T17513] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3827'. [ 1044.836332][T17529] tipc: Enabling of bearer rejected, failed to enable media [ 1044.956617][T17529] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3832'. [ 1047.264330][T17571] tipc: Enabling of bearer rejected, already enabled [ 1047.285890][T17571] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3843'. [ 1047.367263][T17576] tipc: Enabling of bearer rejected, already enabled [ 1047.382612][T17576] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3845'. [ 1051.497203][T17617] tipc: Enabling of bearer rejected, already enabled [ 1051.622847][T17617] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3858'. [ 1051.658775][T17623] tipc: Enabling of bearer rejected, already enabled [ 1051.706744][T17623] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3860'. [ 1051.810067][T17635] tipc: Enabling of bearer rejected, already enabled [ 1051.832698][T17633] tipc: Enabling of bearer rejected, already enabled [ 1051.847349][T17633] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3877'. [ 1051.874153][T17635] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3876'. [ 1054.601592][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.608445][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.477159][T17682] tipc: Enabling of bearer rejected, failed to enable media [ 1056.599735][T17701] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3874'. [ 1059.762991][T17745] tipc: Enabling of bearer rejected, already enabled [ 1059.980278][T17745] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3897'. [ 1060.685826][T17756] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3900'. [ 1062.012702][T17791] tipc: Enabling of bearer rejected, already enabled [ 1062.067138][T17791] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3912'. [ 1065.421880][T17844] tipc: Enabling of bearer rejected, already enabled [ 1065.434711][T17844] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3930'. [ 1065.454260][T17846] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3931'. [ 1069.048091][T17890] tipc: Enabling of bearer rejected, already enabled [ 1069.121228][T17890] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3943'. [ 1074.922486][T17920] tipc: Enabling of bearer rejected, already enabled [ 1074.971699][T17920] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3952'. [ 1075.147762][T17927] tipc: Enabling of bearer rejected, already enabled [ 1075.192749][T17927] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3955'. [ 1076.005543][T17944] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3348579555/3348579557 [ 1076.033178][T17944] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3348579555/3348579556 [ 1076.067608][T17948] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3348579555/3348579557 [ 1076.093761][T17948] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3348579555/3348579556 [ 1078.893317][T17975] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3967'. [ 1079.689787][T17978] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3969'. [ 1085.834020][T18027] loop5: detected capacity change from 0 to 128 [ 1085.881468][T18027] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1085.896101][T18027] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1086.002020][T18027] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 1086.061435][T18027] ext4 filesystem being mounted at /422/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.983719][T18027] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1089.082796][T18080] device bridge_slave_1 left promiscuous mode [ 1089.124667][T18080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.168603][T18080] device bridge_slave_0 left promiscuous mode [ 1089.198068][T18080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.268318][T18120] device syzkaller0 entered promiscuous mode [ 1094.307555][T18120] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4007'. [ 1096.961793][T18157] tipc: Enabling of bearer rejected, already enabled [ 1096.978908][T18157] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4018'. [ 1097.077370][T18162] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4020'. [ 1097.114940][T18164] tipc: Enabling of bearer rejected, already enabled [ 1097.125074][T18164] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4031'. [ 1097.243821][T18168] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4022'. [ 1097.293349][T18172] tipc: Enabling of bearer rejected, already enabled [ 1097.303901][T18172] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4023'. [ 1097.395129][T18180] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4038'. [ 1097.694819][T18187] device syzkaller0 entered promiscuous mode [ 1097.864832][T18187] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4032'. [ 1098.271626][T18193] netlink: 'syz.3.4026': attribute type 1 has an invalid length. [ 1099.185682][T18204] device syzkaller0 entered promiscuous mode [ 1099.362748][T18204] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4035'. [ 1100.457272][T18215] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4039'. [ 1100.705464][T18229] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4042'. [ 1103.905510][T18257] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4052'. [ 1104.577421][T18265] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4054'. [ 1104.889129][T18271] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4055'. [ 1111.845655][T18310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4068'. [ 1112.075563][T18317] device syzkaller0 entered promiscuous mode [ 1116.041448][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.047963][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.777013][T18373] device syzkaller0 entered promiscuous mode [ 1117.821613][T18373] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4081'. [ 1222.839282][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1222.846394][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18379/1:b..l [ 1222.855039][ C0] (detected by 0, t=10502 jiffies, g=58157, q=63) [ 1222.861613][ C0] task:syz.2.4083 state:R running task stack:27856 pid:18379 ppid: 4194 flags:0x00004000 [ 1222.873932][ C0] Call Trace: [ 1222.877383][ C0] [ 1222.880825][ C0] __schedule+0x11c3/0x4350 [ 1222.885672][ C0] ? rcu_lock_release+0x5/0x20 [ 1222.890659][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1222.896723][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 1222.902033][ C0] preempt_schedule_irq+0xbb/0x160 [ 1222.907303][ C0] ? __cond_resched+0xd0/0xd0 [ 1222.911967][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 1222.917865][ C0] irqentry_exit+0x63/0x70 [ 1222.922442][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 1222.927896][ C0] RIP: 0010:lock_release+0x5a4/0x8a0 [ 1222.933513][ C0] Code: 80 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 2c 04 f8 75 6f 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2c 00 00 00 00 43 c7 44 2c 08 00 00 00 00 65 48 8b 04 25 [ 1222.953802][ C0] RSP: 0018:ffffc900034af740 EFLAGS: 00000206 [ 1222.959955][ C0] RAX: 0000000000000001 RBX: 9be2421a50ef4013 RCX: 9668477227764000 [ 1222.968445][ C0] RDX: 0000000000000001 RSI: ffffffff8a2b3e80 RDI: ffffffff8a7a2a40 [ 1222.976437][ C0] RBP: ffffc900034af860 R08: ffffffff8d8aeaef R09: 1ffffffff1b15d5d [ 1222.984414][ C0] R10: dffffc0000000000 R11: fffffbfff1b15d5e R12: 1ffff92000695ef4 [ 1222.993039][ C0] R13: dffffc0000000000 R14: ffff888020958ae0 R15: 0000000000000246 [ 1223.001152][ C0] ? rcu_lock_acquire+0x30/0x30 [ 1223.006162][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 1223.011334][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1223.016733][ C0] percpu_ref_tryget+0xcf/0x150 [ 1223.021668][ C0] get_mem_cgroup_from_objcg+0xa4/0x120 [ 1223.027361][ C0] obj_cgroup_charge_pages+0x76/0x190 [ 1223.032758][ C0] ? __memcg_kmem_charge_page+0x380/0x380 [ 1223.038476][ C0] __memcg_kmem_charge_page+0x2fe/0x380 [ 1223.044286][ C0] dup_task_struct+0x94c/0xb70 [ 1223.049247][ C0] copy_process+0x61f/0x3ec0 [ 1223.053837][ C0] ? __might_fault+0xb7/0x110 [ 1223.058563][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 1223.063599][ C0] ? __lock_acquire+0x13dc/0x7b50 [ 1223.068617][ C0] ? __pidfd_prepare+0x140/0x140 [ 1223.073548][ C0] kernel_clone+0x23f/0x990 [ 1223.078041][ C0] ? create_io_thread+0x180/0x180 [ 1223.083087][ C0] __se_sys_clone3+0x312/0x3d0 [ 1223.088638][ C0] ? __x64_sys_clone3+0x60/0x60 [ 1223.093671][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 1223.098703][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1223.103892][ C0] do_syscall_64+0x4c/0xa0 [ 1223.108399][ C0] ? clear_bhb_loop+0x30/0x80 [ 1223.113272][ C0] ? clear_bhb_loop+0x30/0x80 [ 1223.117951][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1223.124200][ C0] RIP: 0033:0x7fac71587c49 [ 1223.129551][ C0] RSP: 002b:00007ffebfb18588 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 1223.138763][ C0] RAX: ffffffffffffffda RBX: 00007fac715431e0 RCX: 00007fac71587c49 [ 1223.146834][ C0] RDX: 00007fac715431e0 RSI: 0000000000000058 RDI: 00007ffebfb185e0 [ 1223.154891][ C0] RBP: 00007fac6f7df6c0 R08: 00007fac6f7df6c0 R09: 00007ffebfb186c7 [ 1223.162957][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 1223.170930][ C0] R13: 000000000000004d R14: 00007ffebfb185e0 R15: 00007ffebfb186c8 [ 1223.179190][ C0] [ 1223.182209][ C0] rcu: rcu_preempt kthread starved for 10524 jiffies! g58157 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1223.193574][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1223.204185][ C0] rcu: RCU grace-period kthread stack dump: [ 1223.210631][ C0] task:rcu_preempt state:R running task stack:27440 pid: 15 ppid: 2 flags:0x00004000 [ 1223.221973][ C0] Call Trace: [ 1223.225610][ C0] [ 1223.228543][ C0] __schedule+0x11c3/0x4350 [ 1223.233046][ C0] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 1223.238502][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1223.243714][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1223.249599][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1223.254536][ C0] ? rcu_is_watching+0x11/0xa0 [ 1223.259302][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1223.265193][ C0] schedule+0x11b/0x1e0 [ 1223.269339][ C0] schedule_timeout+0x184/0x2d0 [ 1223.274182][ C0] ? console_conditional_schedule+0x40/0x40 [ 1223.280066][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1223.286048][ C0] ? update_process_times+0x200/0x200 [ 1223.291496][ C0] ? prepare_to_swait_event+0x33d/0x360 [ 1223.297239][ C0] rcu_gp_fqs_loop+0x2be/0x11f0 [ 1223.302233][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1223.307525][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 1223.313668][ C0] ? rcu_gp_init+0xd72/0x10f0 [ 1223.318391][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 1223.323191][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1223.328427][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1223.333852][ C0] rcu_gp_kthread+0x9a/0x370 [ 1223.338442][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1223.343732][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1223.349655][ C0] ? __kthread_parkme+0x14e/0x1b0 [ 1223.354825][ C0] kthread+0x42e/0x520 [ 1223.358921][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1223.364032][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1223.368662][ C0] ret_from_fork+0x1f/0x30 [ 1223.374536][ C0] [ 1223.377765][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1223.384110][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1223.389581][ C1] NMI backtrace for cpu 1 [ 1223.389593][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1223.389608][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1223.389616][ C1] RIP: 0010:pie_calculate_probability+0x464/0x7f0 [ 1223.389746][ C1] Code: 18 e8 c0 e2 60 f9 45 85 ed 75 60 48 83 7c 24 28 00 75 58 48 83 7c 24 18 00 75 50 e8 c6 de 60 f9 48 8b 44 24 20 42 80 3c 38 00 <74> 08 48 89 df e8 32 fd a5 f9 49 89 ec 48 8b 1b 48 89 d8 48 c1 e8 [ 1223.389758][ C1] RSP: 0018:ffffc90000dd0a80 EFLAGS: 00000246 [ 1223.389772][ C1] RAX: 1ffff1100e643476 RBX: ffff88807321a3b0 RCX: ffff888016e98000 [ 1223.389783][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1223.389791][ C1] RBP: 1ffff1100f12e963 R08: 0000000000000003 R09: 0000000000000004 [ 1223.389800][ C1] R10: dffffc0000000000 R11: fffff520001ba150 R12: ffff888078974b00 [ 1223.389811][ C1] R13: 0000000000000000 R14: ffff88807321a390 R15: dffffc0000000000 [ 1223.389820][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1223.389832][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1223.389842][ C1] CR2: 00007f1e1c918540 CR3: 0000000023102000 CR4: 00000000003506e0 [ 1223.389855][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1223.389863][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1223.389871][ C1] Call Trace: [ 1223.389878][ C1] [ 1223.389891][ C1] fq_pie_timer+0x17f/0x3c0 [ 1223.389907][ C1] ? fq_pie_dump_stats+0x590/0x590 [ 1223.389920][ C1] call_timer_fn+0x17b/0x540 [ 1223.389937][ C1] ? fq_pie_dump_stats+0x590/0x590 [ 1223.389950][ C1] ? __run_timers+0x810/0x810 [ 1223.389974][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1223.389991][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1223.390006][ C1] ? fq_pie_dump_stats+0x590/0x590 [ 1223.390019][ C1] __run_timers+0x56c/0x810 [ 1223.390040][ C1] ? detach_timer+0x2b0/0x2b0 [ 1223.390053][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1223.390073][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 1223.390115][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1223.390132][ C1] run_timer_softirq+0x63/0xf0 [ 1223.390148][ C1] handle_softirqs+0x336/0x830 [ 1223.390165][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1223.390179][ C1] ? do_softirq+0x210/0x210 [ 1223.390191][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 1223.390207][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1223.390223][ C1] __irq_exit_rcu+0x13b/0x230 [ 1223.390236][ C1] ? irq_exit_rcu+0x20/0x20 [ 1223.390253][ C1] irq_exit_rcu+0x5/0x20 [ 1223.390265][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1223.390279][ C1] [ 1223.390283][ C1] [ 1223.390287][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1223.390302][ C1] RIP: 0010:default_idle+0xb/0x10 [ 1223.390317][ C1] Code: b7 48 89 df e8 56 a7 f5 f7 eb ad e8 3f ac f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 57 64 5d 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1223.390329][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 1223.390340][ C1] RAX: e702697521dacb00 RBX: ffff888016e98000 RCX: e702697521dacb00 [ 1223.390350][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a2a40 [ 1223.390360][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 1223.390375][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff920001acfb4 [ 1223.390385][ C1] R13: dffffc0000000000 R14: 1ffff11002dd3000 R15: 0000000000000000 [ 1223.390403][ C1] default_idle_call+0x81/0xc0 [ 1223.390418][ C1] do_idle+0x251/0x650 [ 1223.390436][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1223.390450][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1223.390464][ C1] ? asm_sysvec_apic_timer_interrupt+0x11/0x20 [ 1223.390481][ C1] ? schedule_idle+0x57/0x90 [ 1223.390496][ C1] cpu_startup_entry+0x14/0x20 [ 1223.390510][ C1] start_secondary+0x32f/0x430 [ 1223.390564][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 1223.390584][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 1223.390606][ C1] [ 1223.802003][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1224.092061][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1224.098653][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=408 sent=0 n=-1 (errno 32: Broken pipe) [ 1224.994275][T18391] virt_wifi0 speed is unknown, defaulting to 1000 [ 1225.512746][T18391] chnl_net:caif_netlink_parms(): no params data found [ 1225.718297][T18391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.813654][T18391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.834550][T18391] device bridge_slave_0 entered promiscuous mode [ 1225.912202][T18391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.926891][T18391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.936013][T18391] device bridge_slave_1 entered promiscuous mode [ 1226.031599][T18391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1226.049937][ T4240] tipc: Disabling bearer [ 1226.056137][ T4240] tipc: Disabling bearer [ 1226.070712][ T4240] tipc: Left network mode [ 1226.081885][T18391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.157269][T18391] team0: Port device team_slave_0 added [ 1226.182122][T18391] team0: Port device team_slave_1 added [ 1226.254454][ T4240] bond2: (slave ip6gretap1): Releasing active interface [ 1226.305214][T18391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.324612][T18391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1226.360465][T18391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.395317][T18391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1226.420145][T18391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1226.450325][T18391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.543298][T18391] device hsr_slave_0 entered promiscuous mode [ 1226.553340][T18391] device hsr_slave_1 entered promiscuous mode [ 1226.576767][T18391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1226.584773][T18391] Cannot create hsr debugfs directory [ 1226.750232][T18391] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1226.760839][T18391] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1226.772123][ T4240] device erspan0 left promiscuous mode [ 1226.781172][ T4240] bridge5: port 1(erspan0) entered disabled state [ 1226.803824][ T4240] bond3: (slave erspan1): Releasing active interface [ 1226.817537][ T4240] device erspan1 left promiscuous mode [ 1226.828742][T18391] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1226.839231][T18391] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1226.839367][T18381] Bluetooth: hci5: command 0x0409 tx timeout [ 1226.956857][T18391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.007499][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1227.027313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1227.039771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1227.051121][T18391] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.061709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1227.071218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1227.079866][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.088077][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.110259][ T4240] IPVS: stopping backup sync thread 13315 ... [ 1227.128527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1227.137220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1227.156032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1227.166309][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.173562][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.190567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1227.236375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1227.250179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1227.271534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1227.297262][T18391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1227.316965][T18391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1227.349986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1227.367618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1227.378000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1227.394650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1227.407319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1227.421592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1227.431746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1227.440911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1227.613146][ T4240] device hsr_slave_0 left promiscuous mode [ 1227.630567][ T4240] device hsr_slave_1 left promiscuous mode [ 1227.637217][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1227.683887][ T4240] bond4 (unregistering): (slave veth5): Releasing active interface [ 1227.701363][ T4240] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1227.711214][ T4240] bond4 (unregistering): Released all slaves [ 1227.724817][ T4240] bond0 (unregistering): Released all slaves [ 1227.737379][ T4240] bond3 (unregistering): Released all slaves [ 1227.750757][ T4240] bond2 (unregistering): Released all slaves [ 1227.822139][ T4240] bond1 (unregistering): (slave bridge3): Releasing active interface [ 1227.883749][ T4240] bond1 (unregistering): Released all slaves [ 1228.113539][T10580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1228.121583][T10580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1228.139567][T18391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1228.459774][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1228.468873][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1228.490859][T18391] device veth0_vlan entered promiscuous mode [ 1228.498257][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1228.516536][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1228.552194][T18391] device veth1_vlan entered promiscuous mode [ 1228.564082][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1228.583992][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1228.601510][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1228.646077][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1228.655400][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1228.681379][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1228.692056][T18391] device veth0_macvtap entered promiscuous mode [ 1228.703299][T18391] device veth1_macvtap entered promiscuous mode [ 1228.728450][T18391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1228.741154][T18391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.753153][T18391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1228.763629][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1228.778408][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1228.787239][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1228.803853][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1228.819038][T18391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1228.838748][T18391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.859943][T18391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1228.882306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1228.898229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1228.917144][T18391] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.927037][T18469] Bluetooth: hci5: command 0x041b tx timeout [ 1228.942517][T18391] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.956371][T18391] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.967682][T18391] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.115610][T10584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.137467][T10584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.190834][T10580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1229.205567][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.221485][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.250426][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1230.554412][ T4240] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.607850][ T4240] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.673489][ T4240] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.755968][ T4240] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.884435][ T4240] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1230.942276][ T4240] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1230.997614][ T4240] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1231.043653][ T4240] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1231.205392][ T4240] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.253653][ T4240] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.305366][ T4240] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.355925][ T4240] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.709675][ T4240] tipc: Disabling bearer [ 1231.715892][ T4240] tipc: Disabling bearer [ 1231.722157][ T4240] tipc: Left network mode [ 1231.746824][ T4240] tipc: Left network mode [ 1231.770086][ T4240] tipc: Disabling bearer [ 1231.788132][ T4240] tipc: Disabling bearer [ 1231.798817][ T4240] tipc: Left network mode [ 1231.826780][ T4240] tipc: Disabling bearer [ 1231.833290][ T4240] tipc: Left network mode [ 1232.078811][ T4240] bond4: (slave ip6gretap1): Releasing active interface [ 1232.588681][ T4240] bridge4: port 1(erspan0) entered disabled state [ 1232.670875][ T4240] device erspan0 left promiscuous mode [ 1232.676682][ T4240] bridge4: port 1(erspan0) entered disabled state