last executing test programs: 4.611065608s ago: executing program 4 (id=5): r0 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write(r0, &(0x7f0000000140)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x0) 4.40333921s ago: executing program 2 (id=3): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x32, 0x59, 0xc8, 0x8, 0x5e1, 0x893, 0xde43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x45, 0xb7}}]}}]}}, 0x0) 4.375389744s ago: executing program 0 (id=1): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="b403000000000000071000000000023f01000500000000000000c204000000000000007a9e9a6bc963a79056a7b537366fd13dc9d6560f5c8ce9dfc7d20f6e6db4c75ab91d36e2fceb9f25508e504e690efef2dddd075a577c61418ca254e14861746ffad91403bc4efba5e8f659ae3d6106baa1565b74b3f847ff8aded41e9d6e5b1dbf6511d9e08b5dda76e0d105ff04b9c1f72b615e126cf25ff2fef07172c77b90063dba98beb586528cbb454d238c44945789fe2c295dd7779aa9da59bb4dc58ced5f976e5be9ed206308d684a9103c5d95b8ec19ec9428626cb95d67c3f4c668868e73046bf41e96ea0a74c4dee607bfcb6a4b8b2e7838e81a58a2da691d08aaf5f794e48cd9605def8a758bf5c14557d646c2b886fd5d249dfd08e065c9bf8c29315435b76e517cdd42a307faa836738ae8c734e5141e8a5093b64a124ef0"], 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x0, 0x0) openat$incfs(r3, 0x0, 0x630240, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c13715", 0x22}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x150}}, 0x48044) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 4.160653167s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc1105511, &(0x7f0000000280)={{0xa, 0x0, 0x0, 0x0, 'syz1\x00'}}) 3.280186091s ago: executing program 4 (id=6): r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x10\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\x1b\x88\xa9\x88)\xf0Q\xcb\x0f\xe0\x92\xc1\x8aDT\xca\r\x17\xed\xf8\xb9\xd6\x87\xc5\xf6YD)\'\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5E\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xb4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca5\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\t\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[a\x86\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9d\xc8\x93n\x97g\xe0\x12\x96\xfc;8\xb3^(28\xe2\x9e\xef\xc7\x9d\x83>\xbfi\x84\xa3\x7f\xa0\xe6X\xbf_T\xc1z=\xbc?\xae\xb3\xac\xe5y&\x84\xbb\xc7-\x9b%\x00'/1264, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) write(r0, &(0x7f0000000100)="2f709d91a5901c22ff4591e5cc97ff1b838b9e7a3e3c48dd9790229c22c5d0c8dc94e64286956f36e43440cb71475fb5f18dc993f88343609b7dda2eab9818c4e9", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000002400)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000002800), 0x8) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00') memfd_create(&(0x7f00000006c0)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x86?\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccv\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\x15\xdf\xe9\xe8\xa3\x8f\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xab\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x15\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x1f\xa8`\x01\xa7\x15\"\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xc0\xdf\x1b`\xb7\xff\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaa\xa4<\xd7\xe1$\xa4r/\xf5\x06\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x8f\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92h\xc2\x10\x8d\xa55\xde\x87\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86\x8e\x00\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\xeaH\xe2\x82C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\xf5\xc95\x04#\xbb\xc3\x121\xa9g_\xb0P4g\x9a\x8c\xe3\x9d\xef$\xa1o\xdf\x81\xed\x8d\xfa\xf9\xc1\x15\x88\x83]\xfa\xcd\xf3\x82\x890\xa5\v\xc4Y\xccY\x95\xd7\f\x8e\x8c>\x8995z\xeaX\xca\xb9\n\x15\xb5_\xb8\xe83=J\xcd\xfd\x015\xc2\xb8\xb6\x91\xda\x18_\x956\x9fk\xd96\xe0\x8d`\x84\f\x98\xf4\x83\x00\x8e\xdbI\xaaK,I~\xdf\x83\xfdIsIRX\xc9\xca\x85m\xc1\xa5\b{ML\xf1\xae\x1f\x94Nv,\x87\x9dg\x84\xba\xe0\xffV\xe7v\f\x15\xbe6\x83D\x11XF\xf2\vpyj\x88\x1d\xdd\xca\xceUA\xb4>]\xbbh\x1a.\xb2\xd7\xbec\xb8\xa5!\x940\xae\"\xa3R6\x7f,\x05\x13\x83\x19\x03\xd8I\x0f\x9fNb\x957\x85\x1e\xcc\x10F\x7f|\xb4\xbc\fR\x98\x16]\xf8\xd6\xb1\xf6k\xac\x0e%Y\xf6[R2\xb0t\x14\x06D\b\x06\x8c\x9a \xff%\xbf', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 3.180713556s ago: executing program 1 (id=7): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001040)="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", 0x219}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 3.144880372s ago: executing program 0 (id=8): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') 3.105577218s ago: executing program 3 (id=4): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 2.949108721s ago: executing program 0 (id=9): open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r1, &(0x7f0000002280)=[{&(0x7f0000000180)="15", 0x1}], 0x1) writev(r1, &(0x7f00000023c0)=[{0x0}, {&(0x7f00000012c0)='.', 0x1}], 0x2) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000100)=0x9, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRESOCT], 0x0) 2.330413786s ago: executing program 1 (id=10): mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 2.277211874s ago: executing program 4 (id=11): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) sigaltstack(&(0x7f0000002580)={0x0}, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) 2.089671382s ago: executing program 3 (id=12): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) open(0x0, 0x1c1042, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) gettid() io_getevents(0x0, 0x4a, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.769998601s ago: executing program 2 (id=13): r0 = memfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(r0, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x8000, 0x0) rmdir(&(0x7f0000000380)='./file0\x00') prlimit64(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fstat(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) 1.383112269s ago: executing program 4 (id=14): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 1.310142191s ago: executing program 4 (id=15): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) readv(r1, 0x0, 0x0) 1.229811343s ago: executing program 0 (id=16): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) shutdown(r0, 0x1) 1.131837628s ago: executing program 3 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc1105511, &(0x7f0000000280)={{0xa, 0x0, 0x0, 0x0, 'syz1\x00'}}) 1.100821202s ago: executing program 0 (id=18): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000180)='}', 0x1}]) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @loopback}}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 869.817948ms ago: executing program 2 (id=19): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@mcast2, 0x0}, &(0x7f0000000280)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$usbfs(0x0, 0x0, 0x20041) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185502, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x44001000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, 0x0, 0x0) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r6 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000000)={0x0, "b957e10d094d9cb7d695a839c3b3c5aed2c3b55a953ea812d31b0e9f5c7e33ca34239073506deefd2be32f474dce5153388b717095e1db9e72e30c9be32fea24"}, 0x48, 0xfffffffffffffffb) keyctl$read(0x1d, r6, 0x0, 0x0) 146.448428ms ago: executing program 0 (id=20): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x1, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) write$yama_ptrace_scope(r0, &(0x7f0000000340)='3\x00', 0x2) 145.958898ms ago: executing program 4 (id=21): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001040)="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", 0x219}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 118.953512ms ago: executing program 3 (id=22): ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) pwritev2(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}], 0x3, 0x72f, 0x14bb, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x14) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r4, &(0x7f0000000380), &(0x7f00000009c0)=""/180}, 0x20) 63.541721ms ago: executing program 3 (id=23): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 0s ago: executing program 2 (id=24): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x32, 0x59, 0xc8, 0x8, 0x5e1, 0x893, 0xde43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x45, 0xb7}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. syzkaller login: [ 38.121783][ T3492] cgroup: Unknown subsys name 'net' [ 38.255183][ T3492] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 39.518406][ T3492] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 40.095479][ T3510] chnl_net:caif_netlink_parms(): no params data found [ 40.265681][ T3505] chnl_net:caif_netlink_parms(): no params data found [ 40.283634][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.290989][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.299302][ T3510] device bridge_slave_0 entered promiscuous mode [ 40.307821][ T3513] chnl_net:caif_netlink_parms(): no params data found [ 40.317479][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.324631][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.332603][ T3510] device bridge_slave_1 entered promiscuous mode [ 40.369434][ T3502] chnl_net:caif_netlink_parms(): no params data found [ 40.389056][ T3511] chnl_net:caif_netlink_parms(): no params data found [ 40.426596][ T3510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.437687][ T3510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.479023][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.486278][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.494177][ T3505] device bridge_slave_0 entered promiscuous mode [ 40.535828][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.543014][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.551164][ T3505] device bridge_slave_1 entered promiscuous mode [ 40.573335][ T3510] team0: Port device team_slave_0 added [ 40.579230][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.586834][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.594702][ T3513] device bridge_slave_0 entered promiscuous mode [ 40.602400][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.609422][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.617723][ T3502] device bridge_slave_0 entered promiscuous mode [ 40.635602][ T3510] team0: Port device team_slave_1 added [ 40.650417][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.657529][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.665318][ T3513] device bridge_slave_1 entered promiscuous mode [ 40.676408][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.685221][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.693476][ T3502] device bridge_slave_1 entered promiscuous mode [ 40.701192][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.708223][ T3511] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.716157][ T3511] device bridge_slave_0 entered promiscuous mode [ 40.732640][ T3505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.761940][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.768992][ T3511] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.777484][ T3511] device bridge_slave_1 entered promiscuous mode [ 40.786670][ T3510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.793698][ T3510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.819760][ T3510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.833707][ T3505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.844935][ T3513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.866661][ T3510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.873705][ T3510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.900017][ T3510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.920368][ T3502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.931247][ T3513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.957983][ T3502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.976685][ T3511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.998104][ T3505] team0: Port device team_slave_0 added [ 41.017038][ T3511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.031584][ T3513] team0: Port device team_slave_0 added [ 41.057358][ T3502] team0: Port device team_slave_0 added [ 41.070436][ T3505] team0: Port device team_slave_1 added [ 41.084321][ T3513] team0: Port device team_slave_1 added [ 41.092867][ T3510] device hsr_slave_0 entered promiscuous mode [ 41.100598][ T3510] device hsr_slave_1 entered promiscuous mode [ 41.108180][ T3502] team0: Port device team_slave_1 added [ 41.152045][ T3511] team0: Port device team_slave_0 added [ 41.169680][ T3513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.176641][ T3513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.202983][ T3513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.215274][ T3511] team0: Port device team_slave_1 added [ 41.232243][ T3502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.239187][ T3502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.265324][ T3502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.282930][ T3505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.290055][ T3505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.316354][ T3505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.327866][ T3513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.335064][ T3513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.361145][ T3513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.380948][ T3511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.387894][ T3511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.413858][ T3511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.425824][ T3502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.433093][ T3502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.459171][ T3502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.474384][ T3505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.481481][ T3505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.507370][ T3505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.524986][ T3511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.532397][ T3511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.558322][ T3511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.622901][ T3513] device hsr_slave_0 entered promiscuous mode [ 41.629411][ T3513] device hsr_slave_1 entered promiscuous mode [ 41.636184][ T3513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.644001][ T3513] Cannot create hsr debugfs directory [ 41.687206][ T3511] device hsr_slave_0 entered promiscuous mode [ 41.694080][ T3511] device hsr_slave_1 entered promiscuous mode [ 41.700959][ T3511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.708491][ T3511] Cannot create hsr debugfs directory [ 41.716206][ T3502] device hsr_slave_0 entered promiscuous mode [ 41.723009][ T3502] device hsr_slave_1 entered promiscuous mode [ 41.729375][ T3502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.737161][ T3502] Cannot create hsr debugfs directory [ 41.744553][ T3505] device hsr_slave_0 entered promiscuous mode [ 41.752564][ T3505] device hsr_slave_1 entered promiscuous mode [ 41.759040][ T3505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.766798][ T3505] Cannot create hsr debugfs directory [ 41.860483][ T1064] Bluetooth: hci2: command 0x0409 tx timeout [ 41.860483][ T1279] Bluetooth: hci0: command 0x0409 tx timeout [ 41.872995][ T1064] Bluetooth: hci1: command 0x0409 tx timeout [ 41.939669][ T1064] Bluetooth: hci4: command 0x0409 tx timeout [ 41.945721][ T1064] Bluetooth: hci3: command 0x0409 tx timeout [ 42.075795][ T3510] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 42.093570][ T3510] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 42.102691][ T3510] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 42.114771][ T3510] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 42.159087][ T3513] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 42.168521][ T3513] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 42.185644][ T3513] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 42.196608][ T3513] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 42.237742][ T3502] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.279962][ T3502] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.289248][ T3502] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.308485][ T3502] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.355550][ T3510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.368105][ T3513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.404356][ T3511] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 42.420303][ T3510] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.427660][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.438800][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.448456][ T3511] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.458576][ T3511] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.471961][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.482157][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.491271][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.504905][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.515346][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.522591][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.540914][ T3513] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.548128][ T3511] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.564241][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.575316][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.584047][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.594207][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.601309][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.619727][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.628911][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.637482][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.644590][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.652429][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.661513][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.670617][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.677868][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.685922][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.694666][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.703330][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.712147][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.735839][ T3505] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.746349][ T3505] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.763061][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.772174][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.780338][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.788830][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.798163][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.806859][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.822413][ T3505] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.836927][ T3513] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.847899][ T3513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.868622][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.878753][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.888514][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.897919][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.906382][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.915395][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.924631][ T3505] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.955161][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.963675][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.972268][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.981938][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.992724][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.001536][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.030451][ T3502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.046934][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.055682][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.072358][ T3510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.133495][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.147545][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.155479][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.163791][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.174935][ T3513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.194449][ T3502] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.210247][ T3510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.221846][ T3511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.238227][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.247656][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.277533][ T3511] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.292679][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.303446][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.312908][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.320009][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.327807][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.336642][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.345180][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.352254][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.360092][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.367746][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.375594][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.384303][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.393256][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.401876][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.416872][ T3505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.424336][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.445829][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.455759][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.467095][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.481642][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.491316][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.498374][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.506084][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.514638][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.523462][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.530542][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.538089][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.546878][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.555667][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.563553][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.595641][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.610475][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.618811][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.635215][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.645141][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.653555][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.661628][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.678627][ T3502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.695542][ T3502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.707069][ T3505] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.720147][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.727922][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.738665][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.747486][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.759182][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.767735][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.778897][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.787366][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.796327][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.805520][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.821210][ T3513] device veth0_vlan entered promiscuous mode [ 43.843469][ T3511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.856406][ T3511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.869453][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.879106][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.887559][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.894639][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.902841][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.911468][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.920055][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.927125][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.934848][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.943586][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.949849][ T3548] Bluetooth: hci1: command 0x041b tx timeout [ 43.952175][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.962777][ T3548] Bluetooth: hci2: command 0x041b tx timeout [ 43.965866][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.976380][ T3548] Bluetooth: hci0: command 0x041b tx timeout [ 43.980061][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.992978][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.011460][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.020905][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.030225][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.034831][ T3548] Bluetooth: hci3: command 0x041b tx timeout [ 44.039089][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.044642][ T3548] Bluetooth: hci4: command 0x041b tx timeout [ 44.084268][ T3513] device veth1_vlan entered promiscuous mode [ 44.098789][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.108288][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.117723][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.127859][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.137018][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.150228][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.158570][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.172492][ T3510] device veth0_vlan entered promiscuous mode [ 44.195602][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.210340][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.218329][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.226408][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.235125][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.243791][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.252017][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.260495][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.272601][ T3510] device veth1_vlan entered promiscuous mode [ 44.290220][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.297689][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.307096][ T3505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.354869][ T3502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.365562][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.374040][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.401396][ T3511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.416180][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.425065][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.434214][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.442656][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.452632][ T3510] device veth0_macvtap entered promiscuous mode [ 44.471497][ T3513] device veth0_macvtap entered promiscuous mode [ 44.493243][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.502163][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.510479][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.520903][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.532548][ T3510] device veth1_macvtap entered promiscuous mode [ 44.546683][ T3513] device veth1_macvtap entered promiscuous mode [ 44.558246][ T3502] device veth0_vlan entered promiscuous mode [ 44.579045][ T3510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.588346][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.596951][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.605684][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.614017][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.622877][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.632552][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.646748][ T3502] device veth1_vlan entered promiscuous mode [ 44.675286][ T3510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.683807][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.691599][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.699209][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.707459][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.715727][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.724394][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.732931][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.741256][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.748689][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.757425][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.772185][ T3505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.785092][ T3502] device veth0_macvtap entered promiscuous mode [ 44.802005][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.810672][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.821068][ T3513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.833551][ T3513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.845395][ T3513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.856001][ T3510] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.865390][ T3510] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.874315][ T3510] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.883159][ T3510] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.899346][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.907826][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.916424][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.931111][ T3513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.944940][ T3513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.955892][ T3513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.964139][ T3502] device veth1_macvtap entered promiscuous mode [ 44.976026][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.985618][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.993987][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.002717][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.011383][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.022216][ T3511] device veth0_vlan entered promiscuous mode [ 45.035317][ T3513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.044206][ T3513] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.053198][ T3513] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.062204][ T3513] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.089862][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.097642][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.106581][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.115251][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.129204][ T3511] device veth1_vlan entered promiscuous mode [ 45.147246][ T3502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.158498][ T3502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.168683][ T3502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.179192][ T3502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.192600][ T3502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.224380][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.233155][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.241197][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.249897][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.263772][ T3502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.277936][ T3502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.288121][ T3502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.298824][ T3502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.313117][ T3502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.341258][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.356102][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.398457][ T3505] device veth0_vlan entered promiscuous mode [ 45.406781][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.415191][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.423890][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.432515][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.442850][ T3502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.453492][ T3502] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.469267][ T3502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.478270][ T3502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.498093][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.513278][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.522174][ T3511] device veth0_macvtap entered promiscuous mode [ 45.562122][ T3511] device veth1_macvtap entered promiscuous mode [ 45.592238][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.601319][ T3505] device veth1_vlan entered promiscuous mode [ 45.636114][ T1435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.641749][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.648331][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.670670][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.672022][ T1435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.682338][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.698297][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.708967][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.719878][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.730917][ T3511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.747587][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.758718][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.768835][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.780028][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.791037][ T3511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.801775][ T3511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.812790][ T3511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.829809][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.838532][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.847029][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.855249][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.863762][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.871706][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.879384][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.888146][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.896827][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.905546][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.927037][ T3505] device veth0_macvtap entered promiscuous mode [ 45.947267][ T3511] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.958259][ T3511] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.968920][ T3511] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.977915][ T3511] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.992536][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.001496][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.010429][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.030995][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 46.037208][ T3505] device veth1_macvtap entered promiscuous mode [ 46.044007][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 46.050297][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 46.064594][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.065719][ T1435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.073694][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.089825][ T1435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.099012][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.111905][ T3517] Bluetooth: hci4: command 0x040f tx timeout [ 46.118177][ T3517] Bluetooth: hci3: command 0x040f tx timeout [ 46.126072][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.136033][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.147131][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.157337][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.168480][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.179307][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.190066][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.202601][ T3505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.215443][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.227599][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.235528][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.243326][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.252402][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.266045][ T1435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.270782][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.280238][ T1435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.295828][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.306009][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.323700][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.335733][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.346975][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.358086][ T3505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.368566][ T3505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.380528][ T3505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.394270][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.405570][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.414492][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.443443][ T3505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.483017][ T3505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.513767][ T3505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.525987][ T3505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.550234][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.558197][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.609741][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.650273][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.682220][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.710128][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.790975][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.805363][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.856613][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.882057][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.895172][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.951513][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.072861][ T3580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.089821][ T3580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.497055][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 47.599455][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 47.729841][ T3546] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 47.775403][ T3543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.804412][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 47.813829][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 47.829508][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 47.838493][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 47.847397][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 47.856400][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 47.989582][ T3546] usb 3-1: Using ep0 maxpacket: 8 [ 48.027658][ T3597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 48.049088][ T3597] device bridge_slave_1 left promiscuous mode [ 48.067555][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.100105][ T3517] Bluetooth: hci1: command 0x0419 tx timeout [ 48.103216][ T3597] device bridge_slave_0 left promiscuous mode [ 48.107357][ T3517] Bluetooth: hci2: command 0x0419 tx timeout [ 48.134313][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.141740][ T3517] Bluetooth: hci0: command 0x0419 tx timeout [ 48.186023][ T3590] Bluetooth: hci3: command 0x0419 tx timeout [ 48.192338][ T3590] Bluetooth: hci4: command 0x0419 tx timeout [ 48.280479][ T3546] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=de.43 [ 48.295830][ T3546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.304223][ T3546] usb 3-1: Product: syz [ 48.308749][ T3546] usb 3-1: Manufacturer: syz [ 48.320568][ T3546] usb 3-1: SerialNumber: syz [ 48.337480][ T3546] usb 3-1: config 0 descriptor?? [ 48.385039][ T3546] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 48.398249][ T3546] usb 3-1: selecting invalid altsetting 1 [ 48.469649][ T3517] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 48.599754][ T3546] gspca_stk014: reg_r err -71 [ 48.604496][ T3546] stk014: probe of 3-1:0.0 failed with error -71 [ 48.625839][ T3546] usb 3-1: USB disconnect, device number 2 [ 48.839994][ T3517] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.865053][ T3517] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.969867][ T3517] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 48.987248][ T3517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 49.025764][ T3517] usb 1-1: SerialNumber: syz [ 49.343721][ T3517] usb 1-1: 0:2 : does not exist [ 49.348871][ T3517] usb 1-1: unit 55 not found! [ 49.436398][ T3517] usb 1-1: USB disconnect, device number 2 [ 49.493451][ T3494] udevd[3494]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 51.035489][ T3638] kernel profiling enabled (shift: 3) [ 51.091569][ T3644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 51.099649][ C0] ================================================================== [ 51.108593][ C0] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0 [ 51.115732][ C0] Read of size 8 at addr ffffc90002bf7be0 by task udevd/3494 [ 51.123100][ C0] [ 51.125432][ C0] CPU: 0 PID: 3494 Comm: udevd Not tainted 5.15.161-syzkaller #0 [ 51.133152][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 51.143223][ C0] Call Trace: [ 51.146513][ C0] [ 51.149460][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 51.154164][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 51.159847][ C0] ? _printk+0xd1/0x120 [ 51.164017][ C0] ? __wake_up_klogd+0xcc/0x100 [ 51.168901][ C0] ? panic+0x860/0x860 [ 51.172977][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 51.178938][ C0] print_address_description+0x63/0x3b0 [ 51.184495][ C0] ? profile_pc+0xa4/0xe0 [ 51.188826][ C0] kasan_report+0x16b/0x1c0 [ 51.193341][ C0] ? profile_pc+0xa4/0xe0 [ 51.197677][ C0] ? trigger_load_balance+0x1d5/0xd90 [ 51.203072][ C0] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 51.208990][ C0] profile_pc+0xa4/0xe0 [ 51.213151][ C0] profile_tick+0xd4/0x130 [ 51.217575][ C0] tick_sched_timer+0x390/0x550 [ 51.222433][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 51.228009][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 51.233250][ C0] ? hrtimer_interrupt+0x980/0x980 [ 51.238364][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 51.244446][ C0] hrtimer_interrupt+0x392/0x980 [ 51.249410][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 51.255396][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 51.261048][ C0] [ 51.264013][ C0] [ 51.266946][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 51.272938][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 51.279466][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 62 6c a2 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 57 ac 2f f7 65 8b 05 d8 b2 da 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 51.299075][ C0] RSP: 0018:ffffc90002bf7be0 EFLAGS: 00000206 [ 51.305152][ C0] RAX: aa99e131c3cad500 RBX: 1ffff9200057ef80 RCX: ffffffff913f0f03 [ 51.313139][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a00 RDI: 0000000000000001 [ 51.321117][ C0] RBP: ffffc90002bf7c68 R08: ffffffff8186db40 R09: fffffbfff22d2d86 [ 51.329103][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 51.337090][ C0] R13: 1ffff9200057ef7c R14: ffffc90002bf7c00 R15: 0000000000000246 [ 51.345085][ C0] ? trace_hardirqs_on+0x30/0x80 [ 51.350057][ C0] ? _raw_spin_unlock+0x40/0x40 [ 51.354920][ C0] debug_check_no_obj_freed+0x455/0x4e0 [ 51.360604][ C0] slab_free_freelist_hook+0x86/0x160 [ 51.365986][ C0] ? user_path_at_empty+0x12b/0x180 [ 51.371193][ C0] kmem_cache_free+0x91/0x1f0 [ 51.375884][ C0] user_path_at_empty+0x12b/0x180 [ 51.380920][ C0] __se_sys_inotify_add_watch+0x1a3/0xf00 [ 51.386658][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 51.392653][ C0] ? vtime_user_exit+0x2d1/0x400 [ 51.397602][ C0] ? __x64_sys_inotify_add_watch+0x80/0x80 [ 51.403427][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 51.409415][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 51.414626][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 51.420620][ C0] do_syscall_64+0x3b/0xb0 [ 51.425054][ C0] ? clear_bhb_loop+0x15/0x70 [ 51.429736][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.435636][ C0] RIP: 0033:0x7fb7b57e7ee7 [ 51.440058][ C0] Code: f0 ff ff 73 01 c3 48 8b 0d 3e cf 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 fe 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 11 cf 0c 00 f7 d8 64 89 01 48 [ 51.459746][ C0] RSP: 002b:00007ffd822b1bd8 EFLAGS: 00000206 ORIG_RAX: 00000000000000fe [ 51.468346][ C0] RAX: ffffffffffffffda RBX: 000056208e1ce870 RCX: 00007fb7b57e7ee7 [ 51.476327][ C0] RDX: 0000000000000008 RSI: 000056208e145f00 RDI: 0000000000000007 [ 51.484312][ C0] RBP: 000056208e1ce870 R08: 0000000000000001 R09: d017e37b465e2b2b [ 51.492380][ C0] R10: 00000000000001b6 R11: 0000000000000206 R12: 000056208e165800 [ 51.500532][ C0] R13: 000056208e139af0 R14: 0000000000000008 R15: 000056208e130910 [ 51.508525][ C0] [ 51.511556][ C0] [ 51.513875][ C0] [ 51.516193][ C0] addr ffffc90002bf7be0 is located in stack of task udevd/3494 at offset 0 in frame: [ 51.525695][ C0] _raw_spin_unlock_irqrestore+0x0/0x130 [ 51.531338][ C0] [ 51.533663][ C0] this frame has 1 object: [ 51.538071][ C0] [32, 40) 'flags.i.i.i.i' [ 51.538087][ C0] [ 51.544883][ C0] Memory state around the buggy address: [ 51.550510][ C0] ffffc90002bf7a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.558574][ C0] ffffc90002bf7b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.566636][ C0] >ffffc90002bf7b80: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 51.574843][ C0] ^ [ 51.582042][ C0] ffffc90002bf7c00: 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.590123][ C0] ffffc90002bf7c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.598188][ C0] ================================================================== [ 51.606249][ C0] Disabling lock debugging due to kernel taint [ 51.612399][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 51.619588][ C0] CPU: 0 PID: 3494 Comm: udevd Tainted: G B 5.15.161-syzkaller #0 [ 51.628695][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 51.638747][ C0] Call Trace: [ 51.642038][ C0] [ 51.644881][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 51.649562][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 51.655197][ C0] ? panic+0x860/0x860 [ 51.659268][ C0] ? lock_release+0xb9/0x9a0 [ 51.663858][ C0] ? irq_work_queue+0xcd/0x150 [ 51.668625][ C0] panic+0x318/0x860 [ 51.670149][ T26] audit: type=1804 audit(1719543286.130:2): pid=3609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.10" name="/root/syzkaller.QwEWys/2/bus" dev="sda1" ino=1969 res=1 errno=0 [ 51.672516][ C0] ? check_panic_on_warn+0x1d/0xa0 [ 51.699382][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 51.704587][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 51.710487][ C0] ? _raw_spin_unlock+0x40/0x40 [ 51.715346][ C0] check_panic_on_warn+0x7e/0xa0 [ 51.720292][ C0] ? profile_pc+0xa4/0xe0 [ 51.724620][ C0] end_report+0x6d/0xf0 [ 51.728785][ C0] kasan_report+0x18e/0x1c0 [ 51.733377][ C0] ? profile_pc+0xa4/0xe0 [ 51.737704][ C0] ? trigger_load_balance+0x1d5/0xd90 [ 51.743087][ C0] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 51.748984][ C0] profile_pc+0xa4/0xe0 [ 51.753153][ C0] profile_tick+0xd4/0x130 [ 51.757577][ C0] tick_sched_timer+0x390/0x550 [ 51.762434][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 51.767979][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 51.773194][ C0] ? hrtimer_interrupt+0x980/0x980 [ 51.778304][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 51.784461][ C0] hrtimer_interrupt+0x392/0x980 [ 51.789410][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 51.795391][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 51.801033][ C0] [ 51.803963][ C0] [ 51.806958][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 51.812962][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 51.819486][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 62 6c a2 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 57 ac 2f f7 65 8b 05 d8 b2 da 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 51.839174][ C0] RSP: 0018:ffffc90002bf7be0 EFLAGS: 00000206 [ 51.845252][ C0] RAX: aa99e131c3cad500 RBX: 1ffff9200057ef80 RCX: ffffffff913f0f03 [ 51.853229][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a00 RDI: 0000000000000001 [ 51.861201][ C0] RBP: ffffc90002bf7c68 R08: ffffffff8186db40 R09: fffffbfff22d2d86 [ 51.869173][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 51.877169][ C0] R13: 1ffff9200057ef7c R14: ffffc90002bf7c00 R15: 0000000000000246 [ 51.885144][ C0] ? trace_hardirqs_on+0x30/0x80 [ 51.890096][ C0] ? _raw_spin_unlock+0x40/0x40 [ 51.894957][ C0] debug_check_no_obj_freed+0x455/0x4e0 [ 51.900505][ C0] slab_free_freelist_hook+0x86/0x160 [ 51.905881][ C0] ? user_path_at_empty+0x12b/0x180 [ 51.911089][ C0] kmem_cache_free+0x91/0x1f0 [ 51.915768][ C0] user_path_at_empty+0x12b/0x180 [ 51.920792][ C0] __se_sys_inotify_add_watch+0x1a3/0xf00 [ 51.926510][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 51.932488][ C0] ? vtime_user_exit+0x2d1/0x400 [ 51.937423][ C0] ? __x64_sys_inotify_add_watch+0x80/0x80 [ 51.943230][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 51.949222][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 51.954429][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 51.960409][ C0] do_syscall_64+0x3b/0xb0 [ 51.964825][ C0] ? clear_bhb_loop+0x15/0x70 [ 51.969497][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.975386][ C0] RIP: 0033:0x7fb7b57e7ee7 [ 51.979809][ C0] Code: f0 ff ff 73 01 c3 48 8b 0d 3e cf 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 fe 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 11 cf 0c 00 f7 d8 64 89 01 48 [ 51.999496][ C0] RSP: 002b:00007ffd822b1bd8 EFLAGS: 00000206 ORIG_RAX: 00000000000000fe [ 52.007910][ C0] RAX: ffffffffffffffda RBX: 000056208e1ce870 RCX: 00007fb7b57e7ee7 [ 52.015889][ C0] RDX: 0000000000000008 RSI: 000056208e145f00 RDI: 0000000000000007 [ 52.023871][ C0] RBP: 000056208e1ce870 R08: 0000000000000001 R09: d017e37b465e2b2b [ 52.031843][ C0] R10: 00000000000001b6 R11: 0000000000000206 R12: 000056208e165800 [ 52.039818][ C0] R13: 000056208e139af0 R14: 0000000000000008 R15: 000056208e130910 [ 52.047802][ C0] [ 52.051025][ C0] Kernel Offset: disabled [ 52.055351][ C0] Rebooting in 86400 seconds..