last executing test programs: 14.785361397s ago: executing program 3 (id=4): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) 13.349043723s ago: executing program 4 (id=6): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000140)={@desc={0x1, 0x0, @desc3}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06007c0c"], 0x9) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000140)=0xd1) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18) 13.249335107s ago: executing program 3 (id=7): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x9, 0x5}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000540)={[{0xc, 0x4e00, "1560254722cb66187f3b68d0"}, {0xc, 0x4e00, "15545f8d8777043c1e3f9dc4"}]}) 12.799330846s ago: executing program 0 (id=9): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f6fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe508185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c6be0ed9257851ed916219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c5b901dbd7387f49e0b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000053046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25132a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a068c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238e3fee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e89884cb73f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182060e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000008835196ed0c6a1c1d4c140e5ff0000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fcd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d372e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36d3cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f200d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000028bfaaf1dce7970ae04e33a3d130761c0c0a53997716ebfa0e03c0acdb52e4af877a339d154fea243453e69bc89bb18fc501cf3a623bb871047060234ebc21155d0dc6efa64749afb63a0f8a9c28f62861e826ddf243bd9dda895a9b24d38641856dc058040a418e15139c0b13d52258254eacf045386abe27e8756c29758330146da2e25822afd92467974f70fa71a971517be63845c1eeb1a7a39a8e01750a67925746ffbc35c0046a1d660ebe5967bbc0496d0c9ba9758f9fcf46ecbd2e07523af5e56ff1d8eee549ecc92b0d13ad2edb0149b25debe70d227afb1ad45991bfb63f7cf6a8b5bcabf504d7fe21df0a23e8615055df856d88b7379a4c4499d01221d10c286c10b12ff5c89903806eab61c18721be6edc3d0fdbe2448f130b87b375f0de009ac38fd159a9f54771388f54b50caf5caf896ceb214b298b524c6cfeca9e0343038c68de8856772de2c498e191b9da24cc2a4b722c88a0fd2cca32ea9445e06549d1b5e9c1c90f4de9ce818694c1ced8354729bbec6a828876dae455e24f0f40490aaf80825d0fcdd8620b43da6b7f94c82aac9b256a469312aff3411ac73a377f01f7329a8027d9b47212c2ae9f2038152d0e99b4622a6eb35ba206e43cfbb50ef80b84a1854208c8414b309eb8a3408050772e161beac866e7247b3dc245c9ea14965f2a1a4a97c8baa5a4dd9f8904d47"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000001280), 0x6) 12.345361119s ago: executing program 4 (id=10): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r0 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x2) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) userfaultfd(0x801) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0xc9, 0x9d, 0xc5, 0x10, 0x12d6, 0x444, 0x6cde, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfc, 0xae, 0xb4}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1012c, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) read$char_usb(r5, &(0x7f0000000080)=""/139, 0xfdef) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, r0, 0xb05}, 0x14}}, 0x0) 11.795503351s ago: executing program 0 (id=13): memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0xa00}, {0x65, 0x0, 0x5}}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x4, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x0) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f00000001c0)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10.311919362s ago: executing program 0 (id=14): r0 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000"]) keyctl$KEYCTL_WATCH_KEY(0x15, r0, 0xffffffffffffffff, 0x0) 10.044093198s ago: executing program 0 (id=16): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000b00)=""/214, 0xd6}, {0x0}, {0x0}], 0x3}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4(r0, &(0x7f0000000140)=@generic, &(0x7f0000000040)=0x80, 0x800) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, r1, r1}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100"], 0x16) 8.117750441s ago: executing program 3 (id=17): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00f596d90d416c1b10f9c992626700001000000000001900000000000000001a61107f6fd336d6d9"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') socket$vsock_stream(0x28, 0x1, 0x0) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) write$binfmt_elf64(r4, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000280)=@md5={0x1, "bf5110b0dbe094319d585e800e0e621c"}, 0x11, 0x0) dup3(r5, r4, 0x0) finit_module(r5, 0x0, 0x0) 8.063435068s ago: executing program 1 (id=19): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffff50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00', 0x6, r5) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x4d5}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000001}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x48}}, 0x0) 8.049762429s ago: executing program 0 (id=20): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="4df193f35347"}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) 6.846727332s ago: executing program 2 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, &(0x7f0000000100)=[@cr0={0x0, 0x4}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000040)="26260fae49000f1c70080fc7b90000008066baf80cb88cf2a689ef66bafc0cb037ee0f01dfdc7a0067670f01c381fa080000000f2c8423f47f00000f2045", 0x3e}], 0x1, 0x2a, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 6.840687855s ago: executing program 4 (id=22): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @dev={0xac, 0x14, 0x14, 0x15}, 0x15, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)={@map=r2, r3, 0x14, 0x80ffff, 0x4, @void, @void, @value}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r9 = socket$kcm(0x2, 0x5, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r10, 0xc0405668, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x80c00}) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000040)='#', 0x1}], 0x1}, 0x0) recvmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x7, &(0x7f0000000180), 0x43) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r6) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xa0, r11, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb84e}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x880}, 0x40801) 6.685512986s ago: executing program 1 (id=23): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) 6.116623221s ago: executing program 3 (id=24): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) write$cgroup_type(r1, &(0x7f0000000280), 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket$nl_xfrm(0x10, 0x3, 0x6) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x541402, 0x10, 0x15}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) 5.259340701s ago: executing program 0 (id=25): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) syz_emit_ethernet(0x83, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x42, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66864e02"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f0000000380)=[{r1, 0xc0}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) 5.012672062s ago: executing program 4 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ppoll(0xfffffffffffffffe, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140), 0x4) epoll_create1(0x0) epoll_create1(0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000240)={0x2, 0x0, 0x0}) 4.690608935s ago: executing program 2 (id=27): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(r1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000240)=0x60, 0x2) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, @private0, @mcast2={0xff, 0x3}}}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@fwd={0x5}]}, {0x0, [0x30, 0x5f, 0x61, 0x4f, 0x61, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000340)=""/39, 0x2e, 0x27, 0x1, 0x9, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x7c6d8e7b, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, r8, 0x4, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000}], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='rpcgss_svc_seqno_low\x00', r0}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000032460f8029ea2fa4f368601400ac1e000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 4.656303558s ago: executing program 1 (id=28): syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x100) ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0xc4dc, 0x8}}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5800005, 0x11, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fallocate(0xffffffffffffffff, 0x0, 0x55d7, 0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000000)={0x1, 0x1, 0x1b, 0x0, 0x2, 0x0}) ioctl$TCFLSH(r1, 0x40384708, 0x20000000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) setresuid(0x0, 0x0, 0xee00) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r3, 0xd, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/201, 0xc9}, {&(0x7f0000000400)=""/107, 0x6b}, {&(0x7f0000000480)=""/165, 0xa5}], 0x3, 0x0, 0x0) read$rfkill(r5, &(0x7f00000000c0), 0x8) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4048011) socket$igmp(0x2, 0x3, 0x2) 2.828425977s ago: executing program 2 (id=29): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000002c0)="33b71d471409d7f5d6a903e9ea4988f28ed6a0b1d7c713efdc2e5fd5d3c90c095d3f97ea2c1421276023455e79a6303b785ac66d709e647b4d25a08322a8cdbe7e8ab7d56aec1319f0baeba551824dfa51538c8485741b412261c0884af81aa5ea3517916bfcbae439a257e5501abc40a5b3a21e35c743b0a7126a3d8e41eedfa0f1e7620a2f736ec35cbf66018b65c7ecf7e623cd555a6db18e961374b6", 0x9e) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040f0004010b08"], 0x49) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3100}, [@RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, @local}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffffffff}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@empty}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) set_mempolicy(0x4003, &(0x7f00000001c0)=0x8000000100000003, 0xe1) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x06\x00'}]}]}, 0x24}}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x2, 0x36) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) 2.822709644s ago: executing program 3 (id=30): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x7}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x102, 0x2}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.821798901s ago: executing program 4 (id=31): r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x80, 0x5}, 0x9, 0x0, 0x6, 0x8, 0x0, 0x0, 0xc}) 1.71122276s ago: executing program 2 (id=32): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x55, 0xa32d, 0x1, {0x402, 0x1}, {0x46, 0x4}, @ramp={0x4, 0xfff7, {0x3, 0x9, 0x6, 0x7}}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.360710049s ago: executing program 1 (id=33): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') write$cgroup_int(r0, 0x0, 0x0) 1.298006017s ago: executing program 4 (id=34): r0 = io_uring_setup(0xc34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b", @ANYRES16], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xc2, 0x7}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1.273803318s ago: executing program 2 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 1.198322935s ago: executing program 3 (id=36): bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = dup(r0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f0000001a80)='./file0/../file0/file0\x00') renameat2(r3, &(0x7f0000000200)='./file0/../file0/file0\x00', r3, 0x0, 0x2) 965.521821ms ago: executing program 1 (id=37): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x180) getdents(r1, &(0x7f0000000140)=""/30, 0x1e) 86.888917ms ago: executing program 2 (id=38): socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x7f) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="63dc795835b4abc3c66a6e43fe", 0xd}], 0x1}, 0x0) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) splice(r4, 0x0, r5, 0x0, 0xe8, 0x0) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70f6fddbdf2501000000080004007f000901"], 0x1c}, 0x1, 0x0, 0x0, 0x10044}, 0x0) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r10, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) 0s ago: executing program 1 (id=39): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e370248018000f0", 0x2a}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000440)="c01803002e000b12d35a80648c4b64f90324fc604fb4fc963803dcd465b380c8179142100c024002000000053582b8eb484d3c19289ba1a00f8593bdb3e27efc2b268616e73ef966811ce9a62986285df25d3433b9f1a40fb31585abdd2d31fdffdff1d3f98e9b4ad23f7d866001bf2cfee36c68f0d9ef64be0f88567ba50952006daa2a893d978679a644a5de018d62a2daadb0963ef2d76471b4919a3c5f372a986e6210cda8138e76734becac579f75c14348f4711e82b6612899eea089f4b586626fb3be7aedfd55eb4eb114071715eca2ece14cf9ec2799a6c80bcacaddb7df5aaedc74db0e6b145586f948a59f9378918c446dbb416de1b4e32e62ae3eb4cd4877ea42dda0398eb0c521e2c2f3e48c0dd3d5b9089b69472108c141e05f13427bb9dd3209142282e31d644078b5dfbffbd277180d8a8c5190b395f8934d9ce01538a1b7838f36cb19f714a16ee130bcf325cc65c01aed9c00f7be802604a0569ccc99a58a9b84b13697fc2c4a8cd3d9630e49f64649ae64f88cda005db858a72090b3399723", 0x116}], 0x1}, 0x400000c) r4 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000100}, 0x14) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f00000001c0)=0x6, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r5, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x800442d3, &(0x7f0000000080)={'netpci0\x00', @dev}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x18, r9, 0xf15, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc894}, 0x20008000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. [ 57.319250][ T5837] cgroup: Unknown subsys name 'net' [ 57.426966][ T5837] cgroup: Unknown subsys name 'cpuset' [ 57.436639][ T5837] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.766429][ T5837] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.619313][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.629997][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.651405][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.659176][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.667381][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.675944][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.684874][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.693209][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.702639][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.708120][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.710868][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.731863][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.741953][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.742223][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.757039][ T5867] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.764385][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.770442][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.773626][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.780916][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.786893][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.794075][ T5869] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.800624][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.806735][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.814320][ T5867] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.820692][ T5869] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.829736][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.844774][ T5869] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.850714][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.852235][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.859940][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.239629][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 63.335825][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 63.459146][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 63.468815][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.477455][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.485019][ T5848] bridge_slave_0: entered allmulticast mode [ 63.491655][ T5848] bridge_slave_0: entered promiscuous mode [ 63.502555][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.509780][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.517093][ T5848] bridge_slave_1: entered allmulticast mode [ 63.524065][ T5848] bridge_slave_1: entered promiscuous mode [ 63.531402][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 63.552075][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 63.602065][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.649420][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.691591][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.698831][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.709337][ T5849] bridge_slave_0: entered allmulticast mode [ 63.716124][ T5849] bridge_slave_0: entered promiscuous mode [ 63.750797][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.760969][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.768444][ T5849] bridge_slave_1: entered allmulticast mode [ 63.775594][ T5849] bridge_slave_1: entered promiscuous mode [ 63.806364][ T5848] team0: Port device team_slave_0 added [ 63.849596][ T5848] team0: Port device team_slave_1 added [ 63.870351][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.877552][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.884963][ T5847] bridge_slave_0: entered allmulticast mode [ 63.892004][ T5847] bridge_slave_0: entered promiscuous mode [ 63.899472][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.908753][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.917529][ T5859] bridge_slave_0: entered allmulticast mode [ 63.926063][ T5859] bridge_slave_0: entered promiscuous mode [ 63.934881][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.941994][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.949763][ T5859] bridge_slave_1: entered allmulticast mode [ 63.956581][ T5859] bridge_slave_1: entered promiscuous mode [ 63.973109][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.990724][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.998501][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.006086][ T5847] bridge_slave_1: entered allmulticast mode [ 64.012917][ T5847] bridge_slave_1: entered promiscuous mode [ 64.038000][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.047557][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.055037][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.062195][ T5854] bridge_slave_0: entered allmulticast mode [ 64.069204][ T5854] bridge_slave_0: entered promiscuous mode [ 64.090098][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.097250][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.124154][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.142513][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.149862][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.157347][ T5854] bridge_slave_1: entered allmulticast mode [ 64.164958][ T5854] bridge_slave_1: entered promiscuous mode [ 64.179290][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.191387][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.201004][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.208019][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.234213][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.261550][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.291789][ T5849] team0: Port device team_slave_0 added [ 64.308798][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.340219][ T5849] team0: Port device team_slave_1 added [ 64.347986][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.359874][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.380749][ T5859] team0: Port device team_slave_0 added [ 64.415207][ T5847] team0: Port device team_slave_0 added [ 64.422542][ T5859] team0: Port device team_slave_1 added [ 64.435711][ T5848] hsr_slave_0: entered promiscuous mode [ 64.441827][ T5848] hsr_slave_1: entered promiscuous mode [ 64.471923][ T5847] team0: Port device team_slave_1 added [ 64.495041][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.502036][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.528470][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.543448][ T5854] team0: Port device team_slave_0 added [ 64.562322][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.569613][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.597189][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.609575][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.616925][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.643054][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.661757][ T5854] team0: Port device team_slave_1 added [ 64.675424][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.682488][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.708831][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.735103][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.742060][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.768459][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.800183][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.807290][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.833315][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.870629][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.878636][ T5857] Bluetooth: hci0: command tx timeout [ 64.883487][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.884251][ T5164] Bluetooth: hci2: command tx timeout [ 64.916072][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.938619][ T5849] hsr_slave_0: entered promiscuous mode [ 64.945464][ T5849] hsr_slave_1: entered promiscuous mode [ 64.951533][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.959620][ T5857] Bluetooth: hci3: command tx timeout [ 64.959654][ T5867] Bluetooth: hci1: command tx timeout [ 64.971160][ T5164] Bluetooth: hci4: command tx timeout [ 64.971332][ T5849] Cannot create hsr debugfs directory [ 64.984082][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.991094][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.017321][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.079795][ T5847] hsr_slave_0: entered promiscuous mode [ 65.086856][ T5847] hsr_slave_1: entered promiscuous mode [ 65.093842][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.101437][ T5847] Cannot create hsr debugfs directory [ 65.110178][ T5859] hsr_slave_0: entered promiscuous mode [ 65.117115][ T5859] hsr_slave_1: entered promiscuous mode [ 65.123390][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.130959][ T5859] Cannot create hsr debugfs directory [ 65.212475][ T5854] hsr_slave_0: entered promiscuous mode [ 65.219296][ T5854] hsr_slave_1: entered promiscuous mode [ 65.226033][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.233898][ T5854] Cannot create hsr debugfs directory [ 65.389690][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.426084][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.456400][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.465538][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.540518][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.561515][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.570752][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.591151][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.636383][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.647702][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.658983][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.691183][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.739229][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.748944][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.759404][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.795022][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.849828][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.861081][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.881335][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.890637][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.907406][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.918931][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.938620][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.946018][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.998969][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.006130][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.066164][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.088719][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.110069][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.159391][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.171511][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.181894][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.234336][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.241473][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.257709][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.264858][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.275925][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.283061][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.297757][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.304878][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.351308][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.358483][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.372168][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.379724][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.477175][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.544519][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.578479][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.585634][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.619458][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.634126][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.665540][ T3660] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.672647][ T3660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.790041][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.805399][ T5848] veth0_vlan: entered promiscuous mode [ 66.841545][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.853903][ T5848] veth1_vlan: entered promiscuous mode [ 66.953842][ T5164] Bluetooth: hci2: command tx timeout [ 66.959300][ T5164] Bluetooth: hci0: command tx timeout [ 66.981844][ T5848] veth0_macvtap: entered promiscuous mode [ 66.991100][ T5847] veth0_vlan: entered promiscuous mode [ 67.017452][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.028398][ T5848] veth1_macvtap: entered promiscuous mode [ 67.033215][ T5867] Bluetooth: hci1: command tx timeout [ 67.035400][ T5857] Bluetooth: hci3: command tx timeout [ 67.039580][ T5164] Bluetooth: hci4: command tx timeout [ 67.065536][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.074549][ T5854] veth0_vlan: entered promiscuous mode [ 67.084123][ T5847] veth1_vlan: entered promiscuous mode [ 67.105399][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.131482][ T5854] veth1_vlan: entered promiscuous mode [ 67.156215][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.165666][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.175438][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.184794][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.236829][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.275342][ T5854] veth0_macvtap: entered promiscuous mode [ 67.298763][ T5854] veth1_macvtap: entered promiscuous mode [ 67.316577][ T5847] veth0_macvtap: entered promiscuous mode [ 67.345291][ T5847] veth1_macvtap: entered promiscuous mode [ 67.389751][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.401361][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.413588][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.435652][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.446791][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.460796][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.472401][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.483591][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.494285][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.504989][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.520685][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.534527][ T3660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.542522][ T3660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.544017][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.565780][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.575050][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.584272][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.599258][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.610005][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.620077][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.630613][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.641309][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.662089][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.672399][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.682033][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.691285][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.764429][ T3433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.772264][ T3433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.780632][ T5849] veth0_vlan: entered promiscuous mode [ 67.792980][ T5859] veth0_vlan: entered promiscuous mode [ 67.862115][ T5849] veth1_vlan: entered promiscuous mode [ 67.890704][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.912304][ T3660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.921269][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.929515][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.935617][ T3660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.938005][ T5859] veth1_vlan: entered promiscuous mode [ 67.992255][ T5859] veth0_macvtap: entered promiscuous mode [ 68.001443][ T5859] veth1_macvtap: entered promiscuous mode [ 68.016007][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.026668][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.036562][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.047075][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.056930][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.067437][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.081106][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.115842][ T5849] veth0_macvtap: entered promiscuous mode [ 68.136869][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.147667][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.158073][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.169087][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.179256][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.189875][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.200917][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.210544][ T5849] veth1_macvtap: entered promiscuous mode [ 68.233886][ T5859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.242631][ T5859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.252183][ T5859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.264270][ T5859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.278176][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.288645][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.312456][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.330548][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.342491][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.353487][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.364280][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.375056][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.386138][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.396976][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.403026][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.408691][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.435135][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.456638][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.554933][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.570630][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.581317][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.592195][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.592359][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 68.602464][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.618405][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.628580][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.640728][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.643877][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.653987][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.691980][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.698054][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.712455][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.723258][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.742212][ T9] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 68.750598][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.760915][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.781288][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.791810][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.807430][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.814931][ T9] usb 1-1: Product: syz [ 68.827480][ T9] usb 1-1: Manufacturer: syz [ 68.832215][ T9] usb 1-1: SerialNumber: syz [ 68.854335][ T9] usb 1-1: config 0 descriptor?? [ 68.857767][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.873779][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.886978][ T9] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 68.914275][ T5937] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.975368][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.006589][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.040083][ T5857] Bluetooth: hci2: command tx timeout [ 69.046011][ T5164] Bluetooth: hci0: command tx timeout [ 69.064419][ T5903] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.076129][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.084752][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.108045][ T5937] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 69.116574][ T5164] Bluetooth: hci4: command tx timeout [ 69.122142][ T5857] Bluetooth: hci1: command tx timeout [ 69.127981][ T5857] Bluetooth: hci3: command tx timeout [ 69.133722][ T5937] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 69.141848][ T5937] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 69.152178][ T5937] usb 3-1: config 0 has no interface number 0 [ 69.158357][ T5937] usb 3-1: config 0 has no interface number 1 [ 69.165151][ T5937] usb 3-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 69.176134][ T5937] usb 3-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 69.189166][ T5937] usb 3-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 69.200416][ T5937] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 69.211114][ T5937] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 69.223557][ T5937] usb 3-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 69.235478][ T5937] usb 3-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 69.247077][ T5937] usb 3-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 69.257454][ T5937] usb 3-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 69.270845][ T5937] usb 3-1: config 0 interface 66 has no altsetting 0 [ 69.309967][ T5937] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 69.319352][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.327468][ T5937] usb 3-1: Product: syz [ 69.331667][ T5937] usb 3-1: Manufacturer: syz [ 69.336660][ T5937] usb 3-1: SerialNumber: syz [ 69.346931][ T5937] usb 3-1: config 0 descriptor?? [ 69.364974][ T5903] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.384637][ T5903] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.403196][ T5937] ljca 3-1:0.84: bulk endpoints not found [ 69.424385][ T5903] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 69.464795][ T5903] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 69.487282][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.518165][ T5943] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 69.638797][ T5937] ljca 3-1:0.66: probe with driver ljca failed with error -71 [ 69.720290][ T5950] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.860213][ T9] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 70.273424][ T9] gspca_pac7302 1-1:0.0: submit int URB failed with error -90 [ 70.404105][ T5937] usb 3-1: USB disconnect, device number 2 [ 70.422957][ T9] usb 1-1: USB disconnect, device number 2 [ 70.783715][ T5936] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.954151][ T5903] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 70.974516][ T5903] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input5 [ 71.055102][ T5903] usb 2-1: USB disconnect, device number 2 [ 71.055156][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 71.091904][ T5936] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 71.103642][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.111697][ T5936] usb 4-1: Product: syz [ 71.120269][ T5936] usb 4-1: Manufacturer: syz [ 71.124026][ T5857] Bluetooth: hci0: command tx timeout [ 71.125250][ T5936] usb 4-1: SerialNumber: syz [ 71.268466][ T5857] Bluetooth: hci3: command tx timeout [ 71.274863][ T5857] Bluetooth: hci4: command tx timeout [ 71.281405][ T5857] Bluetooth: hci1: command tx timeout [ 71.595849][ T5936] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 71.642566][ T5962] Bluetooth: MGMT ver 1.23 [ 71.690107][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.794075][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.831919][ T5904] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 72.472719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 72.575567][ T5936] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.353264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 73.372722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 73.462934][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 73.507101][ T5936] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=6c.de [ 73.542713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 73.551399][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.562444][ T5936] usb 5-1: Product: syz [ 73.576617][ T5936] usb 5-1: Manufacturer: syz [ 73.582196][ T5936] usb 5-1: SerialNumber: syz [ 73.592706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.605880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.673294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 73.684300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 73.695566][ T5936] usb 5-1: config 0 descriptor?? [ 73.733991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.762490][ T5984] fuse: Bad value for 'fd' [ 73.764087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #380!!! [ 73.777190][ T5937] usb 4-1: USB disconnect, device number 2 [ 73.782914][ T5936] ems_usb 5-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 73.806562][ T5936] ems_usb 5-1:0.0: probe with driver ems_usb failed with error -22 [ 74.580405][ T5904] usb 4-1: Service connection timeout for: 256 [ 74.776922][ T5164] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 74.785635][ T5164] Bluetooth: hci2: Injecting HCI hardware error event [ 74.794658][ T5164] Bluetooth: hci2: hardware error 0x00 [ 74.888281][ T5904] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 74.897525][ T5904] ath9k_htc: Failed to initialize the device [ 74.907689][ T5937] usb 4-1: ath9k_htc: USB layer deinitialized [ 76.809730][ T5937] usb 5-1: USB disconnect, device number 2 [ 76.977010][ T6009] evm: overlay not supported [ 76.983828][ T6009] Invalid ELF header magic: != ELF [ 77.062317][ T29] audit: type=1804 audit(1730617826.581:2): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.17" name="/newroot/2/bus/bus" dev="overlay" ino=35 res=1 errno=0 [ 77.357555][ T6013] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.386462][ T29] audit: type=1800 audit(1730617826.591:3): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17" name="file2" dev="overlay" ino=36 res=0 errno=0 [ 78.360006][ T5164] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 78.584376][ T5937] IPVS: starting estimator thread 0... [ 78.698137][ T6023] IPVS: using max 17 ests per chain, 40800 per kthread [ 81.106390][ T5164] Bluetooth: hci3: unexpected event 0x0f length: 70 > 4 [ 81.212920][ T6053] netlink: 'syz.2.29': attribute type 1 has an invalid length. [ 82.011365][ T29] audit: type=1326 audit(1730617830.811:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f7e719 code=0x7ffc0000 [ 82.206349][ T29] audit: type=1326 audit(1730617830.821:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f7e719 code=0x7ffc0000 [ 82.377457][ T59] cfg80211: failed to load regulatory.db [ 82.491322][ T29] audit: type=1326 audit(1730617830.821:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1bf3f7e719 code=0x7ffc0000 [ 82.627040][ T29] audit: type=1326 audit(1730617830.821:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f7e719 code=0x7ffc0000 [ 82.737523][ T6067] process 'syz.3.36' launched '/dev/fd/4' with NULL argv: empty string added [ 82.749884][ T29] audit: type=1326 audit(1730617830.821:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f7e719 code=0x7ffc0000 [ 83.553859][ T29] audit: type=1326 audit(1730617830.821:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1bf3f7e719 code=0x7ffc0000 [ 83.576176][ T29] audit: type=1326 audit(1730617830.821:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f7e719 code=0x7ffc0000 [ 83.599119][ T29] audit: type=1326 audit(1730617830.821:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f7e719 code=0x7ffc0000 [ 83.669889][ T29] audit: type=1326 audit(1730617830.821:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1bf3f7e719 code=0x7ffc0000 [ 83.691992][ T29] audit: type=1326 audit(1730617830.851:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f7e719 code=0x7ffc0000 [ 83.714211][ T29] audit: type=1326 audit(1730617830.851:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.2.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf3f7e719 code=0x7ffc0000 [ 83.736188][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.981848][ T6067] ------------[ cut here ]------------ [ 83.987463][ T6067] kernel BUG at arch/x86/mm/physaddr.c:23! [ 83.995058][ T6067] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 84.002056][ T6067] CPU: 0 UID: 0 PID: 6067 Comm: syz.3.36 Not tainted 6.12.0-rc5-next-20241101-syzkaller #0 [ 84.012061][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.022243][ T6067] RIP: 0010:__phys_addr+0x16a/0x170 [ 84.027467][ T6067] Code: 40 a8 7a 8e 4c 89 f6 4c 89 fa e8 b1 4d aa 03 e9 45 ff ff ff e8 a7 1a 52 00 90 0f 0b e8 9f 1a 52 00 90 0f 0b e8 97 1a 52 00 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 84.047088][ T6067] RSP: 0018:ffffc90005667da0 EFLAGS: 00010283 [ 84.053175][ T6067] RAX: ffffffff8143a369 RBX: 000000007ffffff2 RCX: 0000000000040000 [ 84.061168][ T6067] RDX: ffffc90005059000 RSI: 000000000000525d RDI: 000000000000525e [ 84.069160][ T6067] RBP: 1ffff1100f42b389 R08: ffffffff8143a305 R09: 1ffffffff203a1f6 [ 84.077152][ T6067] R10: dffffc0000000000 R11: fffffbfff203a1f7 R12: dffffc0000000000 [ 84.085129][ T6067] R13: fffffffffffffff2 R14: 000000007ffffff2 R15: ffff88801ac75f58 [ 84.093102][ T6067] FS: 00007f92007d36c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 84.102035][ T6067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.108613][ T6067] CR2: 000000110c386525 CR3: 00000000299ca000 CR4: 00000000003526f0 [ 84.116580][ T6067] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.124547][ T6067] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.132511][ T6067] Call Trace: [ 84.135786][ T6067] [ 84.138714][ T6067] ? __die_body+0x5f/0xb0 [ 84.143041][ T6067] ? die+0x9e/0xc0 [ 84.146756][ T6067] ? do_trap+0x15a/0x3a0 [ 84.150996][ T6067] ? __phys_addr+0x16a/0x170 [ 84.155585][ T6067] ? do_error_trap+0x1dc/0x2c0 [ 84.160368][ T6067] ? __phys_addr+0x16a/0x170 [ 84.164955][ T6067] ? __pfx_do_error_trap+0x10/0x10 [ 84.170066][ T6067] ? report_bug+0x3e8/0x500 [ 84.174581][ T6067] ? handle_invalid_op+0x34/0x40 [ 84.179517][ T6067] ? __phys_addr+0x16a/0x170 [ 84.184110][ T6067] ? exc_invalid_op+0x38/0x50 [ 84.188877][ T6067] ? asm_exc_invalid_op+0x1a/0x20 [ 84.193897][ T6067] ? __phys_addr+0x105/0x170 [ 84.198483][ T6067] ? __phys_addr+0x169/0x170 [ 84.203069][ T6067] ? __phys_addr+0x16a/0x170 [ 84.207652][ T6067] ? free_bprm+0x2b5/0x300 [ 84.212067][ T6067] kfree+0x71/0x420 [ 84.215876][ T6067] ? free_bprm+0x295/0x300 [ 84.220291][ T6067] free_bprm+0x2b5/0x300 [ 84.224532][ T6067] do_execveat_common+0x3ae/0x750 [ 84.229549][ T6067] __x64_sys_execveat+0xc4/0xe0 [ 84.234399][ T6067] do_syscall_64+0xf3/0x230 [ 84.239070][ T6067] ? clear_bhb_loop+0x35/0x90 [ 84.243751][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.249643][ T6067] RIP: 0033:0x7f91ff97e719 [ 84.254067][ T6067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.273679][ T6067] RSP: 002b:00007f92007d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 84.282098][ T6067] RAX: ffffffffffffffda RBX: 00007f91ffb35f80 RCX: 00007f91ff97e719 [ 84.290075][ T6067] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 84.298043][ T6067] RBP: 00007f91ff9f132e R08: 0000000000001000 R09: 0000000000000000 [ 84.306006][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.313968][ T6067] R13: 0000000000000000 R14: 00007f91ffb35f80 R15: 00007ffe9f190c88 [ 84.321948][ T6067] [ 84.324958][ T6067] Modules linked in: [ 84.328864][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.335492][ T6067] ---[ end trace 0000000000000000 ]--- [ 84.342847][ T6067] RIP: 0010:__phys_addr+0x16a/0x170 [ 84.354857][ T6067] Code: 40 a8 7a 8e 4c 89 f6 4c 89 fa e8 b1 4d aa 03 e9 45 ff ff ff e8 a7 1a 52 00 90 0f 0b e8 9f 1a 52 00 90 0f 0b e8 97 1a 52 00 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 84.977960][ T5904] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.304983][ T6067] RSP: 0018:ffffc90005667da0 EFLAGS: 00010283 [ 85.336683][ T6067] RAX: ffffffff8143a369 RBX: 000000007ffffff2 RCX: 0000000000040000 [ 85.347015][ T6067] RDX: ffffc90005059000 RSI: 000000000000525d RDI: 000000000000525e [ 85.371336][ T6067] RBP: 1ffff1100f42b389 R08: ffffffff8143a305 R09: 1ffffffff203a1f6 [ 85.380009][ T6067] R10: dffffc0000000000 R11: fffffbfff203a1f7 R12: dffffc0000000000 [ 85.395062][ T6067] R13: fffffffffffffff2 R14: 000000007ffffff2 R15: ffff88801ac75f58 [ 85.421207][ T6067] FS: 00007f92007d36c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 85.430504][ T6067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.438015][ T6067] CR2: 000000110c3414f3 CR3: 00000000299ca000 CR4: 00000000003526f0 [ 85.446432][ T6067] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.455070][ T6067] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.463088][ T6067] Kernel panic - not syncing: Fatal exception [ 85.469294][ T6067] Kernel Offset: disabled [ 85.473604][ T6067] Rebooting in 86400 seconds..