last executing test programs: 28.629103756s ago: executing program 0 (id=66): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 27.537593618s ago: executing program 0 (id=67): socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0x41) 23.732002936s ago: executing program 4 (id=73): socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$IPC_RMID(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 19.124673693s ago: executing program 1 (id=82): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000", @ANYRES16=r0], 0x78) 18.656952462s ago: executing program 4 (id=84): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100"/149], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r4, &(0x7f0000000c40)=[{&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {&(0x7f0000000900)}], 0x3) 17.361578003s ago: executing program 3 (id=85): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x8000, 0x0, "000200000500"}) 16.580916664s ago: executing program 2 (id=86): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_group_source_req(r3, 0x0, 0x1, 0x0, 0x0) 16.57877838s ago: executing program 0 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x40400c0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="6e725f626c6f636b733d34782c34c5c45b6c6f636b733d3137363737356b1c322c00d2935e31b57885ac07e82dfea802bce7004f7895ccfc028da4c6315d407a30fb5df63657913bcab2b051bec67e33c71470e1d191186bffb8b169000000", @ANYRES8=r2]) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x40) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file1/file0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 16.234363706s ago: executing program 4 (id=88): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1f}, {0xc, 0x90}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x40090) 15.00923808s ago: executing program 2 (id=89): syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) io_submit(0x0, 0x1, &(0x7f00000013c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8aa0, r1, 0x0, 0x0, 0x400, 0x0, 0x1}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x14, 0x0, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20008020) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) move_pages(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240)=[0x1], 0x0, 0x0) 14.741425781s ago: executing program 3 (id=90): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c0085"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f00000004c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 14.621303431s ago: executing program 1 (id=91): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 12.421314258s ago: executing program 4 (id=92): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 11.545026941s ago: executing program 3 (id=93): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r5, 0x8) pipe2$watch_queue(&(0x7f0000000040), 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000013c0)=ANY=[@ANYBLOB], &(0x7f0000000300)=""/4096, 0x61, 0x1000, 0x1, 0xb6, 0x10000}, 0x28) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto(r6, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001840)={0x0, 0x3}, 0x8) r7 = syz_pidfd_open(0x0, 0x0) setns(r7, 0x24020000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r8, r8, 0x1, 0x1, &(0x7f0000000100)="8d", 0x9, 0x8, 0x2, 0x5508, 0xc338, 0x1, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 11.532122516s ago: executing program 1 (id=94): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r4, 0x8) pipe2$watch_queue(&(0x7f0000000040), 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000013c0)=ANY=[@ANYBLOB], &(0x7f0000000300)=""/4096, 0x61, 0x1000, 0x1, 0xb6, 0x10000}, 0x28) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x1, 0x1, &(0x7f0000000100)="8d", 0x9, 0x8, 0x2, 0x5508, 0xc338, 0x1, 0x7, 'syz0\x00'}) 10.611955592s ago: executing program 4 (id=95): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) listen(r4, 0x4000) r6 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) 9.796585996s ago: executing program 2 (id=96): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r5, 0x8) pipe2$watch_queue(&(0x7f0000000040), 0x80) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto(r6, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001840)={0x0, 0x3}, 0x8) r7 = syz_pidfd_open(0x0, 0x0) setns(r7, 0x24020000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r8, r8, 0x1, 0x1, &(0x7f0000000100)="8d", 0x9, 0x8, 0x2, 0x5508, 0xc338, 0x1, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 9.742866772s ago: executing program 3 (id=97): r0 = socket$inet_icmp(0x2, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_io_uring_setup(0xb, 0x0, &(0x7f0000000040), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), 0x0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=""/7, &(0x7f0000000500), &(0x7f00000005c0)="1c0f4c2d9e466f707ad2aa6c44e3778bb62e2d77a78b3ff5824686b6455aebca6a84e7c401d6514a0f56a3365b96a14b6da2f52d8faef3b0dbad602fca11a27a4b274dc4135dd023fc121f326ecf7657cc3cfcad218554bf3dc658ca3a6f430be33e61ff73d9db823c2e5fc3952996c6e030c65380671355313f02ce5902ad7fd2a9335f56c63a7846355b2ff616aec5b2bbc40f3eb9b4b2de3f6e85037aae4666dce71e9c7069e536c632f34e87540b3bfbb3fb44892a79d596c35be91d3763e938aa8225bb187c0e106cba48cb9a830229befcc1fcb643cb823f9ffac2b4", 0x81, r6}, 0x38) nanosleep(0x0, &(0x7f00000003c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0180000000000000000001000000000000000b00000000"], 0x28}}, 0x40000) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e73cb203d78de176cbd8865ca99db21fa99388dee947766646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',cache=fscache,\x00']) 9.735297193s ago: executing program 0 (id=98): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100"/149], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r4, &(0x7f0000000c40)=[{&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {&(0x7f0000000900)}], 0x3) 8.301234983s ago: executing program 2 (id=99): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='block_bio_remap\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'sit0\x00', @random="000003000701"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) ioctl$FITRIM(r7, 0xff09, 0x0) sendfile(r3, r5, 0x0, 0x20000023893) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448c9, &(0x7f0000000080)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 6.58319675s ago: executing program 1 (id=100): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x8000, 0x0, "000200000500"}) 5.967752639s ago: executing program 1 (id=101): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac65", 0xce}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x12571144d43d7ee5, 0x10008095, 0x0, 0x0) 5.9540057s ago: executing program 2 (id=102): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r5, 0x8) pipe2$watch_queue(&(0x7f0000000040), 0x80) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto(r6, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001840)={0x0, 0x3}, 0x8) r7 = syz_pidfd_open(0x0, 0x0) setns(r7, 0x24020000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r8, r8, 0x1, 0x1, &(0x7f0000000100)="8d", 0x9, 0x8, 0x2, 0x5508, 0xc338, 0x1, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 5.94950376s ago: executing program 3 (id=103): dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5df6}}, @map_fd={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004800010928bd700018dcdf250a000100", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 5.94815042s ago: executing program 4 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 5.879553833s ago: executing program 0 (id=105): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 3.733551465s ago: executing program 2 (id=106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) listen(r3, 0x4000) close(r3) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) 3.732531044s ago: executing program 0 (id=107): syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) io_submit(0x0, 0x1, &(0x7f00000013c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8aa0, r1, 0x0, 0x0, 0x400, 0x0, 0x1}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x14, 0x0, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20008020) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) move_pages(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240)=[0x1], 0x0, 0x0) 2.538044773s ago: executing program 3 (id=108): syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') socket(0x2, 0x3, 0xff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r5 = socket$kcm(0x29, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000400)=@phonet={0x23, 0x1, 0x9, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f00000005c0)="8e350dbef5f3e9f887f32acf918553f9d88c3e6860021b7e040a34e291de24a16fd855dfe2f2f0b0a64f28f6fc02902d4e1337817d40c68c4d5d4ed8e02e8e0c5b36a89e14b8e57d2212136e732aa95d1786c162ef0b98115a0ec49ed00e3650637c7a0125c1a07fa21969f5c2d36feacc3869ab599fffbe46dc1f259dfad2a98f375aff457ca98fcf5d05d836e41fd2ab9cc9f452283bbb50e9b11e42a91bce725d5df71abac2ae732d60dac849648e", 0xb0}, {&(0x7f0000000680)="31139bbec67e8dc9497b3cf3b58fdc2f9165e9237375ad4c7bb05749fbc4b7e0fd5f88dcdc21c758ed4c4b732003ef4be1071c8fb6619513519e41b8de64517186db0a937bf041ed62d20ced42eae60a3170ac4259d00b40ad0f0a3b71c8b3983012417036253a08792dd9b84c299b804917decf263c260838fd2e8cfc92d1664011ac9c3968685f6d3b5da44b260d12958e0a641f193991bfcb3c0d53bb96bae12c06e15bcafa6395346d3850faeaf7e8f6127e5f0f429b02c6c57050ba5f6d37b7ee4ef43f0bd1ea831618cd849e0b74685574b2dbd56d76e53bc343286ba7aa5d9c9d9b83f3757e759aaaee3ad7", 0xef}, {&(0x7f0000000780)="d0a9816e5fbf83d0a03932b9b4e1e447f0bc6e77f287219fc1444d8e99069d575346b1a129a51376e06801f628e33006c86304ef4739c79692abb4b60c0375b3389de52c6f9b3ae695ac739931f6309feeecfbbf266be3ca9b4686249212a2490431acb3a4403d3f435e89ba72f03d734cd850bdec66fb793f08ed92bea9d67aa68152853f680c1e438f343f60c19d5f02c97a008d4e04e758a335a92d7c56f2fcd0caf0b7dba8c041d9c3f01290f30e421f997eae214fc7b6ec9b88c954afd416ff694ff5caf51a876711dd395357eb1191836944252de1eb67e0290f3f4f2aa89ff5436702cded134466e0bb2088b4", 0xf0}, {0x0}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1230}, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x60) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) 0s ago: executing program 1 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e00"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. [ 88.991653][ T5782] cgroup: Unknown subsys name 'net' [ 89.212886][ T5782] cgroup: Unknown subsys name 'cpuset' [ 89.277588][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.214546][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.057154][ T10] cfg80211: failed to load regulatory.db [ 93.816639][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.826449][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.838827][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.839683][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.840504][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.840834][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.846330][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.879476][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.881640][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.908120][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.939638][ T5115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.967834][ T5115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.974052][ T5115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.980269][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.993692][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.001614][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.006581][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.012557][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.028653][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.029971][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.038455][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.067857][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.068872][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.074803][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.084370][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.080385][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 95.125957][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 95.400772][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 95.422239][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 95.433669][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 95.938376][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.939607][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.940073][ T5793] bridge_slave_0: entered allmulticast mode [ 95.942153][ T5793] bridge_slave_0: entered promiscuous mode [ 95.973525][ T5801] Bluetooth: hci0: command tx timeout [ 95.974066][ T5798] Bluetooth: hci1: command tx timeout [ 96.085402][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.085511][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.085645][ T5793] bridge_slave_1: entered allmulticast mode [ 96.091786][ T5793] bridge_slave_1: entered promiscuous mode [ 96.118937][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.119065][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.119199][ T5792] bridge_slave_0: entered allmulticast mode [ 96.121082][ T5792] bridge_slave_0: entered promiscuous mode [ 96.128986][ T5801] Bluetooth: hci2: command tx timeout [ 96.129362][ T5803] Bluetooth: hci3: command tx timeout [ 96.129523][ T5798] Bluetooth: hci4: command tx timeout [ 96.285477][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.285609][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.285757][ T5792] bridge_slave_1: entered allmulticast mode [ 96.291617][ T5792] bridge_slave_1: entered promiscuous mode [ 96.701977][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.960643][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.960900][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.961071][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.961202][ T5794] bridge_slave_0: entered allmulticast mode [ 96.963046][ T5794] bridge_slave_0: entered promiscuous mode [ 96.978487][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.978725][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.978850][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.979021][ T5797] bridge_slave_0: entered allmulticast mode [ 96.985501][ T5797] bridge_slave_0: entered promiscuous mode [ 96.994905][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.995262][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.995721][ T5795] bridge_slave_0: entered allmulticast mode [ 97.022775][ T5795] bridge_slave_0: entered promiscuous mode [ 97.149382][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.149516][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.149714][ T5794] bridge_slave_1: entered allmulticast mode [ 97.151641][ T5794] bridge_slave_1: entered promiscuous mode [ 97.155593][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.155865][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.155985][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.156110][ T5797] bridge_slave_1: entered allmulticast mode [ 97.182662][ T5797] bridge_slave_1: entered promiscuous mode [ 97.193840][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.194231][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.195545][ T5795] bridge_slave_1: entered allmulticast mode [ 97.203036][ T5795] bridge_slave_1: entered promiscuous mode [ 97.690241][ T5793] team0: Port device team_slave_0 added [ 97.950766][ T5793] team0: Port device team_slave_1 added [ 98.041941][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.044525][ T5792] team0: Port device team_slave_0 added [ 98.048707][ T5798] Bluetooth: hci1: command tx timeout [ 98.048738][ T5798] Bluetooth: hci0: command tx timeout [ 98.075804][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.171736][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.174585][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.187014][ T5792] team0: Port device team_slave_1 added [ 98.196019][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.207145][ T5801] Bluetooth: hci2: command tx timeout [ 98.207176][ T5801] Bluetooth: hci3: command tx timeout [ 98.207243][ T5798] Bluetooth: hci4: command tx timeout [ 98.291790][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.709381][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.709396][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.709415][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.050097][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.050112][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.050131][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.160191][ T5794] team0: Port device team_slave_0 added [ 99.161181][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.161197][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.161222][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.164087][ T5797] team0: Port device team_slave_0 added [ 99.232149][ T5795] team0: Port device team_slave_0 added [ 99.234802][ T5794] team0: Port device team_slave_1 added [ 99.235628][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.235638][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.235657][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.253452][ T5797] team0: Port device team_slave_1 added [ 99.275993][ T5795] team0: Port device team_slave_1 added [ 99.749013][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.749031][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.749058][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.878958][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.878972][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.878991][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.968839][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.968857][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.968885][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.970316][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.970331][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.970357][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.088833][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.088847][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.088867][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.095699][ T5793] hsr_slave_0: entered promiscuous mode [ 100.099798][ T5793] hsr_slave_1: entered promiscuous mode [ 100.109675][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.109719][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.109793][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.126932][ T5798] Bluetooth: hci0: command tx timeout [ 100.126965][ T5798] Bluetooth: hci1: command tx timeout [ 100.286945][ T5801] Bluetooth: hci4: command tx timeout [ 100.286968][ T5803] Bluetooth: hci3: command tx timeout [ 100.287044][ T5798] Bluetooth: hci2: command tx timeout [ 100.315885][ T5792] hsr_slave_0: entered promiscuous mode [ 100.318706][ T5792] hsr_slave_1: entered promiscuous mode [ 100.322067][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 100.322467][ T5792] Cannot create hsr debugfs directory [ 100.946418][ T5794] hsr_slave_0: entered promiscuous mode [ 100.950613][ T5794] hsr_slave_1: entered promiscuous mode [ 100.953615][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 100.953684][ T5794] Cannot create hsr debugfs directory [ 101.064675][ T5797] hsr_slave_0: entered promiscuous mode [ 101.065713][ T5797] hsr_slave_1: entered promiscuous mode [ 101.066414][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 101.066443][ T5797] Cannot create hsr debugfs directory [ 101.100251][ T5795] hsr_slave_0: entered promiscuous mode [ 101.101266][ T5795] hsr_slave_1: entered promiscuous mode [ 101.101970][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 101.101988][ T5795] Cannot create hsr debugfs directory [ 102.207362][ T5803] Bluetooth: hci0: command tx timeout [ 102.207411][ T5798] Bluetooth: hci1: command tx timeout [ 102.367145][ T5803] Bluetooth: hci3: command tx timeout [ 102.367154][ T5801] Bluetooth: hci4: command tx timeout [ 102.367197][ T5798] Bluetooth: hci2: command tx timeout [ 102.482189][ T5793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.518256][ T5793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.572459][ T5793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.626564][ T5793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.774926][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.818225][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.853903][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.912152][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.052402][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.099492][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.143870][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.182278][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.334739][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.383498][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.427889][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.493633][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.633208][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.654422][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.706570][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.751958][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.785278][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.865645][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.915332][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.916326][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.940705][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.970917][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.971074][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.044088][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.091931][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.096207][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.096384][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.153054][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.153219][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.225899][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.260397][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.280138][ T1374] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.280298][ T1374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.338724][ T1374] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.338960][ T1374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.410913][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.462714][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.489195][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.489384][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.552281][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.552495][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.623304][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.686332][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.686627][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.741646][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.741838][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.852211][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.137695][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.371374][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.431831][ T5792] veth0_vlan: entered promiscuous mode [ 105.500556][ T5792] veth1_vlan: entered promiscuous mode [ 105.621555][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.690726][ T5794] veth0_vlan: entered promiscuous mode [ 105.731086][ T5792] veth0_macvtap: entered promiscuous mode [ 105.734905][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.738550][ T5794] veth1_vlan: entered promiscuous mode [ 105.777380][ T5792] veth1_macvtap: entered promiscuous mode [ 105.855892][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.868772][ T5793] veth0_vlan: entered promiscuous mode [ 105.908297][ T5797] veth0_vlan: entered promiscuous mode [ 105.924269][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.939285][ T5794] veth0_macvtap: entered promiscuous mode [ 105.955662][ T5793] veth1_vlan: entered promiscuous mode [ 105.982999][ T5794] veth1_macvtap: entered promiscuous mode [ 105.984885][ T3523] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.005738][ T3523] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.018541][ T5797] veth1_vlan: entered promiscuous mode [ 106.023512][ T3523] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.045814][ T3523] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.131246][ T5795] veth0_vlan: entered promiscuous mode [ 106.189742][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.268694][ T5795] veth1_vlan: entered promiscuous mode [ 106.291219][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.346388][ T5793] veth0_macvtap: entered promiscuous mode [ 106.363544][ T1365] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.399455][ T1365] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.428229][ T1365] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.435062][ T1365] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.435965][ T5793] veth1_macvtap: entered promiscuous mode [ 106.464387][ T5797] veth0_macvtap: entered promiscuous mode [ 106.485283][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.485299][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.543292][ T5797] veth1_macvtap: entered promiscuous mode [ 106.646048][ T1365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.646070][ T1365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.704160][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.778300][ T5795] veth0_macvtap: entered promiscuous mode [ 106.782837][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.825344][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.836445][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.836467][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.874534][ T5795] veth1_macvtap: entered promiscuous mode [ 106.888774][ T1490] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.896345][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.918627][ T1490] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.975403][ T1490] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.991265][ T1490] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.020521][ T1490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.033135][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.033206][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.060399][ T1490] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.099425][ T1490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.103054][ T1490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.161925][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.279907][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.777969][ T1490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.519371][ T1490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.697654][ T1490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.753632][ T1490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.757398][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.757416][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.826875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.828483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.836859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.846826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.856830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.866837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.869812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.876818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.879196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.879582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.452592][ T5860] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.697800][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.697824][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.763917][ T1365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.763939][ T1365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.962936][ T1365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.962957][ T1365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.029684][ T3591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.029707][ T3591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.526471][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.526493][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.107138][ T5925] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.829870][ T5925] usb 4-1: device descriptor read/all, error -71 [ 124.743331][ T5997] syz.3.20 uses obsolete (PF_INET,SOCK_PACKET) [ 132.099069][ T5986] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.357086][ T5986] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 132.357118][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.898632][ T5986] usb 3-1: config 0 descriptor?? [ 132.904733][ T5986] usb 3-1: can't set config #0, error -71 [ 133.769210][ T5986] usb 3-1: USB disconnect, device number 2 [ 135.693815][ T5986] hid-generic 0005:0002:5508.0001: item fetching failed at offset 0/1 [ 135.694628][ T5986] hid-generic 0005:0002:5508.0001: probe with driver hid-generic failed with error -22 [ 138.304924][ T6051] vxcan1 speed is unknown, defaulting to 1000 [ 138.309779][ T6051] vxcan1 speed is unknown, defaulting to 1000 [ 138.315892][ T6051] vxcan1 speed is unknown, defaulting to 1000 [ 138.656671][ T6051] infiniband syz2: set active [ 138.656693][ T6051] infiniband syz2: added vxcan1 [ 138.813779][ T6051] RDS/IB: syz2: added [ 138.814637][ T6051] smc: adding ib device syz2 with port count 1 [ 138.814890][ T6051] smc: ib device syz2 port 1 has no pnetid [ 138.819879][ T6051] vxcan1 speed is unknown, defaulting to 1000 [ 139.041583][ T5934] vxcan1 speed is unknown, defaulting to 1000 [ 139.045582][ T5962] vxcan1 speed is unknown, defaulting to 1000 [ 139.053485][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.053589][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.164526][ T6051] vxcan1 speed is unknown, defaulting to 1000 [ 139.487648][ T6051] vxcan1 speed is unknown, defaulting to 1000 [ 139.813443][ T6051] vxcan1 speed is unknown, defaulting to 1000 [ 140.131993][ T6051] vxcan1 speed is unknown, defaulting to 1000 [ 141.896344][ T49] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 142.986956][ T5918] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 144.652319][ T5798] Bluetooth: hci4: link tx timeout [ 144.652546][ T5798] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.116894][ T6082] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.267029][ T5918] usb 2-1: device not accepting address 2, error -71 [ 145.272798][ T6082] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 145.272827][ T6082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.279699][ T6082] usb 4-1: config 0 descriptor?? [ 146.505376][ T5798] Bluetooth: hci4: link tx timeout [ 146.505395][ T5798] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.740555][ T5798] Bluetooth: hci4: command 0x0406 tx timeout [ 148.754080][ T6082] ath6kl: Failed to submit usb control message: -71 [ 148.754133][ T6082] ath6kl: unable to send the bmi data to the device: -71 [ 148.754149][ T6082] ath6kl: Unable to send get target info: -71 [ 148.801734][ T6082] ath6kl: Failed to init ath6kl core: -71 [ 148.802492][ T6082] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 149.128467][ T6093] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 150.741238][ T6082] usb 4-1: USB disconnect, device number 4 [ 151.406998][ T6093] usb 1-1: device not accepting address 3, error -71 [ 157.784936][ T1168] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 158.976853][ T1168] usb 3-1: Using ep0 maxpacket: 32 [ 158.982075][ T1168] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 158.982105][ T1168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.990858][ T1168] usb 3-1: config 0 descriptor?? [ 159.905949][ T1168] usb 3-1: can't set config #0, error -71 [ 159.916690][ T1168] usb 3-1: USB disconnect, device number 4 [ 160.891023][ T6224] Zero length message leads to an empty skb [ 165.287677][ T6247] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 174.893909][ T6280] tmpfs: Bad value for 'nr_blocks' [ 178.401871][ T6334] 9p: Bad value for 'wfdno' [ 179.510443][ T6082] hid-generic 0005:0002:5508.0002: item fetching failed at offset 0/1 [ 179.511172][ T6082] hid-generic 0005:0002:5508.0002: probe with driver hid-generic failed with error -22 [ 186.011987][ T6374] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 186.714597][ T5962] ------------[ cut here ]------------ [ 186.714614][ T5962] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 186.714639][ T5962] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x39a/0x5c0, CPU#1: kworker/1:7/5962 [ 186.714688][ T5962] Modules linked in: [ 186.714730][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 186.714754][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.714770][ T5962] Workqueue: events drm_fb_helper_damage_work [ 186.714804][ T5962] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 186.714830][ T5962] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba d4 f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 186.714849][ T5962] RSP: 0018:ffffc90005327860 EFLAGS: 00010246 [ 186.714868][ T5962] RAX: 1ffff11029050400 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 186.714884][ T5962] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 186.714901][ T5962] RBP: ffffc90005327948 R08: 0000000000000000 R09: 0000000000000000 [ 186.714915][ T5962] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 186.714932][ T5962] R13: ffff888148282000 R14: 1ffff92000a64f10 R15: ffffffff8b569b80 [ 186.714956][ T5962] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 186.714974][ T5962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.714989][ T5962] CR2: 0000001b2eb1aff8 CR3: 0000000033bd0000 CR4: 00000000003526f0 [ 186.715008][ T5962] Call Trace: [ 186.715021][ T5962] [ 186.715036][ T5962] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 186.715059][ T5962] ? rt_spin_unlock+0x150/0x200 [ 186.715091][ T5962] ? __pfx_autoremove_wake_function+0x10/0x10 [ 186.715123][ T5962] ? rt_spin_unlock+0x161/0x200 [ 186.715177][ T5962] ? drm_vblank_get+0x147/0x260 [ 186.715205][ T5962] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 186.715246][ T5962] drm_fb_helper_damage_work+0xc9/0x650 [ 186.715275][ T5962] ? process_scheduled_works+0x9ef/0x1770 [ 186.715306][ T5962] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 186.715344][ T5962] ? process_scheduled_works+0x9ef/0x1770 [ 186.715368][ T5962] ? process_scheduled_works+0x9ef/0x1770 [ 186.715396][ T5962] process_scheduled_works+0xad1/0x1770 [ 186.715456][ T5962] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.715480][ T5962] ? do_raw_spin_lock+0x121/0x290 [ 186.715525][ T5962] worker_thread+0x8a0/0xda0 [ 186.715568][ T5962] ? __kthread_parkme+0x7b/0x200 [ 186.715608][ T5962] kthread+0x711/0x8a0 [ 186.715644][ T5962] ? __pfx_worker_thread+0x10/0x10 [ 186.715671][ T5962] ? __pfx_kthread+0x10/0x10 [ 186.715699][ T5962] ? rt_spin_unlock+0x150/0x200 [ 186.715735][ T5962] ? rt_spin_unlock+0x161/0x200 [ 186.715763][ T5962] ? __pfx_kthread+0x10/0x10 [ 186.715797][ T5962] ret_from_fork+0x510/0xa50 [ 186.715825][ T5962] ? __pfx_ret_from_fork+0x10/0x10 [ 186.715848][ T5962] ? __switch_to+0xc9e/0x1480 [ 186.715888][ T5962] ? __pfx_kthread+0x10/0x10 [ 186.715922][ T5962] ret_from_fork_asm+0x1a/0x30 [ 186.715978][ T5962] [ 186.715995][ T5962] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.716010][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 186.716034][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.716047][ T5962] Workqueue: events drm_fb_helper_damage_work [ 186.716071][ T5962] Call Trace: [ 186.716080][ T5962] [ 186.716089][ T5962] vpanic+0x1e0/0x670 [ 186.716125][ T5962] panic+0xb9/0xc0 [ 186.716156][ T5962] ? __pfx_panic+0x10/0x10 [ 186.716213][ T5962] ? ret_from_fork_asm+0x1a/0x30 [ 186.716256][ T5962] __warn+0x317/0x4b0 [ 186.716287][ T5962] ? drm_wait_one_vblank+0x39a/0x5c0 [ 186.716316][ T5962] ? drm_wait_one_vblank+0x39a/0x5c0 [ 186.716347][ T5962] __report_bug+0x288/0x500 [ 186.716384][ T5962] ? drm_wait_one_vblank+0x39a/0x5c0 [ 186.716422][ T5962] ? __pfx___report_bug+0x10/0x10 [ 186.716481][ T5962] report_bug_entry+0x19a/0x290 [ 186.716522][ T5962] ? drm_wait_one_vblank+0x587/0x5c0 [ 186.716545][ T5962] ? drm_wait_one_vblank+0x58c/0x5c0 [ 186.716568][ T5962] handle_bug+0xca/0x200 [ 186.716595][ T5962] exc_invalid_op+0x1a/0x50 [ 186.716621][ T5962] asm_exc_invalid_op+0x1a/0x20 [ 186.716643][ T5962] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 186.716667][ T5962] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba d4 f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 186.716685][ T5962] RSP: 0018:ffffc90005327860 EFLAGS: 00010246 [ 186.716703][ T5962] RAX: 1ffff11029050400 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 186.716723][ T5962] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 186.716738][ T5962] RBP: ffffc90005327948 R08: 0000000000000000 R09: 0000000000000000 [ 186.716750][ T5962] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 186.716766][ T5962] R13: ffff888148282000 R14: 1ffff92000a64f10 R15: ffffffff8b569b80 [ 186.716809][ T5962] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 186.716832][ T5962] ? rt_spin_unlock+0x150/0x200 [ 186.716862][ T5962] ? __pfx_autoremove_wake_function+0x10/0x10 [ 186.716893][ T5962] ? rt_spin_unlock+0x161/0x200 [ 186.716927][ T5962] ? drm_vblank_get+0x147/0x260 [ 186.716955][ T5962] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 186.716995][ T5962] drm_fb_helper_damage_work+0xc9/0x650 [ 186.717025][ T5962] ? process_scheduled_works+0x9ef/0x1770 [ 186.717056][ T5962] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 186.717088][ T5962] ? process_scheduled_works+0x9ef/0x1770 [ 186.717111][ T5962] ? process_scheduled_works+0x9ef/0x1770 [ 186.717139][ T5962] process_scheduled_works+0xad1/0x1770 [ 186.717206][ T5962] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.717230][ T5962] ? do_raw_spin_lock+0x121/0x290 [ 186.717274][ T5962] worker_thread+0x8a0/0xda0 [ 186.717316][ T5962] ? __kthread_parkme+0x7b/0x200 [ 186.717363][ T5962] kthread+0x711/0x8a0 [ 186.717399][ T5962] ? __pfx_worker_thread+0x10/0x10 [ 186.717425][ T5962] ? __pfx_kthread+0x10/0x10 [ 186.717453][ T5962] ? rt_spin_unlock+0x150/0x200 [ 186.717490][ T5962] ? rt_spin_unlock+0x161/0x200 [ 186.717518][ T5962] ? __pfx_kthread+0x10/0x10 [ 186.717552][ T5962] ret_from_fork+0x510/0xa50 [ 186.717579][ T5962] ? __pfx_ret_from_fork+0x10/0x10 [ 186.717602][ T5962] ? __switch_to+0xc9e/0x1480 [ 186.717642][ T5962] ? __pfx_kthread+0x10/0x10 [ 186.717675][ T5962] ret_from_fork_asm+0x1a/0x30 [ 186.717729][ T5962] [ 186.718318][ T5962] Kernel Offset: disabled