last executing test programs: 22.209555001s ago: executing program 1 (id=215): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/220, 0xdc}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 21.89904368s ago: executing program 1 (id=217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x68, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x528, 0xc8, 0x0, 0x398, 0x1a0, 0x1a0, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0xff], [0xff], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x6, 0x0, 0x14}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000010000000}}, @HL={0x24}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {}, {0x100}, 0xfffffffc}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, [0xffffffff], [0xffffffff, 0x0, 0xffffff00], 'dummy0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0xa4, 0x110, 0x48000000}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x401ff, 0x8, 0x4, 0x0, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0x0, 0x8}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x584) 20.650552568s ago: executing program 3 (id=219): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 19.396563715s ago: executing program 1 (id=222): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x2c, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f00000016c0)='./file0\x00', 0x0, 0x4801, 0x0) lstat(&(0x7f0000001400)='./file0\x00', &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001440)={{0x1, 0x1, 0x18, r6, {0x0, 0x0}}, './file0\x00'}) r9 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000001540)={0x1, 0x4, [{r0, 0x0, 0x1000000000000}, {r0, 0x0, 0xfffffffff0000000, 0x100000000}, {r0, 0x0, 0x1000000000000, 0x4000}, {r0, 0x0, 0x1000000, 0xfffffffff0000000}]}) r10 = openat$mice(0xffffffffffffff9c, &(0x7f00000015c0), 0x80000) sendmsg$netlink(r1, &(0x7f0000001680)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)=[{&(0x7f00000001c0)={0x60, 0x25, 0x200, 0x70bd29, 0x25dfdbfd, "", [@generic="810fc8250a689a4aeebf9a650d2942e0ddf64a7dda4b89fef8b121da863080f99258a8665da0dc7daa2a184de4a463124eee4e4b7a5f89782ce9dfb929b24de2b60f985cf171a10367d92d32c6"]}, 0x60}, {&(0x7f0000000300)={0x18, 0x22, 0x400, 0x70bd29, 0x25dfdbfb, "", [@nested={0x8, 0x10b, 0x0, 0x1, [@nested={0x4, 0x11b}]}]}, 0x18}, {&(0x7f0000000380)={0x1010, 0x1b, 0x10, 0x70bd2c, 0x25dfdbfb, "", [@generic="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"]}, 0x1010}], 0x3, &(0x7f0000001600)=[@cred={{0x1c, 0x1, 0x2, {r3, r7, r8}}}, @rights={{0x34, 0x1, 0x1, [r1, r2, r9, r1, r2, r0, r1, r10, r1]}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, r5]}}], 0x78, 0x4000000}, 0x20000040) umount2(&(0x7f0000000000)='./file0\x00', 0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) linkat(r0, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) userfaultfd(0x1) 19.38842991s ago: executing program 3 (id=223): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) userfaultfd(0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r4, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x81) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, &(0x7f0000000100)=0x3910, 0x4) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x105, 0x40009975, r6, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211002000300000008001b000000000014002b8008000100", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000000) 16.94193068s ago: executing program 1 (id=227): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000080)=0x3, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_trace', 0x149a82, 0x100) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) socket$key(0xf, 0x3, 0x2) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000040)={'fscrypt:', @auto=[0x31, 0x32, 0x37, 0x32, 0x36, 0x38, 0x64, 0x33, 0x31, 0x61, 0x33, 0x61, 0x39, 0x0, 0x0, 0x39]}, &(0x7f0000000080)={0x0, "5d9bc1e2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecac000", 0x13}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000440), 0x80) 13.744553477s ago: executing program 1 (id=229): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='personality\x00') ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000001000000000000080000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 12.340572393s ago: executing program 0 (id=232): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0xd, 0x1, 0x9, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 12.247337911s ago: executing program 0 (id=233): bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_setup(0x892, &(0x7f0000000080)=0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x87c}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000f000000000000000085000000180000001801000020756c2500000000002020207b1af8ff00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000800}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) ioctl(r0, 0xffffffff, 0x0) io_uring_setup(0x1d34, &(0x7f0000000300)={0x0, 0x5779, 0x2, 0x0, 0xd4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 11.768661207s ago: executing program 2 (id=234): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa9f6}, [@exit, @jmp={0x5, 0x0, 0x0, 0x3, 0x3, 0xfffffffffffffffe, 0xffffffffffffffff}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0xbe, &(0x7f00000003c0)=""/190, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1f, r1, 0x8, &(0x7f0000000540)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xe, 0x860, 0x7}, 0x10, 0x0, r1, 0x2, 0x0, &(0x7f00000005c0)=[{0x5, 0x5, 0x7, 0x7}, {0x4, 0x5, 0x4, 0xa}], 0x10, 0x5}, 0x94) 10.883131727s ago: executing program 2 (id=235): syz_open_dev$loop(&(0x7f0000000040), 0x40000007fe, 0x909c0) r0 = syz_open_dev$sndctrl(0x0, 0x84, 0x32b002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000500)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000900)={0x0, &(0x7f0000000480)}) mbind(&(0x7f000076f000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000200)=0x4, 0x5, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x10000002}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010402ffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800c0001006d6163766c616e000c000280060002000000000008000500", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESHEX], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x11, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x38}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000060000000300000000000004050000000000000001000004260100000400000004000000030000000100000000000012010000000400000000000012030000000300000000000007000000000061615f2e"], 0x0, 0x66, 0x0, 0x1}, 0x28) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000010c0)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5d57b757b550180000000000000a7f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29ca8fb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73d087eac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df29cbbd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb2873af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a91f759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57e07105d1fa1efd44529b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3569fb86225b6cce291da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f608617a308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485ddd967c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca151d3095232820a847042fdf0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3286761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e91fa3997f0970d4a4e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0701f7eea196519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4bae802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea078e81f6ed7f242c5a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d93617c4783133f9abab2d692dd54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343fa1fbbbeecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x40000000000201, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac00000000000100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x4, 0xfffffffffffffffc]}}) 10.580342907s ago: executing program 0 (id=236): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) close(0x3) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdir(0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101400, 0xad) lseek(r4, 0x100000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) 10.495442181s ago: executing program 3 (id=238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000280)={0x2, 0x2}, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4814) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) recvfrom$inet6(r4, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) 8.915963618s ago: executing program 4 (id=239): socket(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="01025673f188"}) futex(0x0, 0x80, 0x1, 0x0, 0x0, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') 8.465093858s ago: executing program 2 (id=240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) 8.420968167s ago: executing program 1 (id=241): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='personality\x00') ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000001000000000000080000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) syz_emit_ethernet(0x11dc0, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) 8.357430086s ago: executing program 0 (id=242): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="0600150007000000"], 0x38}}, 0x10) 8.333539923s ago: executing program 3 (id=243): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0xd, 0x1, 0x9, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, 0x0, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 6.781676497s ago: executing program 2 (id=244): mknod(0x0, 0x8001420, 0x0) mknod(0x0, 0x8000, 0x6) landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.627218698s ago: executing program 0 (id=245): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.504667385s ago: executing program 3 (id=246): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2000002, 0xffffffff, 0x0, 0x5, 0x0, 0x42}) 5.814117712s ago: executing program 0 (id=247): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) userfaultfd(0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000100)=0x3910, 0x4) fanotify_init(0xf00, 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211002000300000008001b000000000014002b8008000100", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000000) 5.707169394s ago: executing program 2 (id=248): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x40000000}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 5.503353788s ago: executing program 4 (id=249): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x4, 0x4, 0x800006}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 4.958210654s ago: executing program 4 (id=250): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) 4.498101542s ago: executing program 2 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.434870702s ago: executing program 4 (id=252): ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe654, 0x40, 0x1, 0x80000}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) 4.195701265s ago: executing program 3 (id=253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3}, 0x38) recvmsg$can_bcm(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/83, 0x53}, {&(0x7f0000000540)=""/132, 0x84}, {&(0x7f0000000600)=""/146, 0x92}, {&(0x7f00000006c0)=""/94, 0x5e}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f0000000740)=""/142, 0x8e}, {&(0x7f00000003c0)=""/26, 0x1a}], 0x7, &(0x7f0000000940)=""/119, 0x77}, 0x2001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 4.181934592s ago: executing program 4 (id=254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000300)=""/120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3}, 0x38) recvmsg$can_bcm(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/83, 0x53}, {&(0x7f0000000540)=""/132, 0x84}, {&(0x7f0000000600)=""/146, 0x92}, {&(0x7f00000006c0)=""/94, 0x5e}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f0000000740)=""/142, 0x8e}, {&(0x7f00000003c0)=""/26, 0x1a}], 0x7, &(0x7f0000000940)=""/119, 0x77}, 0x2001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 0s ago: executing program 4 (id=255): r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 92.066486][ T5786] cgroup: Unknown subsys name 'net' [ 92.097034][ T44] cfg80211: failed to load regulatory.db [ 92.348472][ T5786] cgroup: Unknown subsys name 'cpuset' [ 92.402279][ T5786] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.383270][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.790416][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.811017][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.823978][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.829873][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.835597][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.838780][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.840191][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.840614][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.840793][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.844368][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.848567][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.851305][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.855048][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.856686][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.871832][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.934243][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.949850][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.952587][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.970785][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.970987][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.974809][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.977786][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.997155][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.023389][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.042200][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.174915][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 100.237908][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 100.428809][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 100.523620][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 100.572796][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 101.053554][ T5807] Bluetooth: hci2: command tx timeout [ 101.053960][ T5812] Bluetooth: hci0: command tx timeout [ 101.054059][ T5807] Bluetooth: hci1: command tx timeout [ 101.054151][ T61] Bluetooth: hci4: command tx timeout [ 101.131712][ T61] Bluetooth: hci3: command tx timeout [ 101.192952][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.194355][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.194799][ T5801] bridge_slave_0: entered allmulticast mode [ 101.196875][ T5801] bridge_slave_0: entered promiscuous mode [ 101.249424][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.249542][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.249675][ T5798] bridge_slave_0: entered allmulticast mode [ 101.271962][ T5798] bridge_slave_0: entered promiscuous mode [ 101.276262][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.276387][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.276548][ T5801] bridge_slave_1: entered allmulticast mode [ 101.278463][ T5801] bridge_slave_1: entered promiscuous mode [ 101.382624][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.382761][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.382899][ T5798] bridge_slave_1: entered allmulticast mode [ 101.384877][ T5798] bridge_slave_1: entered promiscuous mode [ 101.934378][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.934567][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.934744][ T5797] bridge_slave_0: entered allmulticast mode [ 101.936789][ T5797] bridge_slave_0: entered promiscuous mode [ 102.027452][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.027702][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.027842][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.028024][ T5800] bridge_slave_0: entered allmulticast mode [ 102.030274][ T5800] bridge_slave_0: entered promiscuous mode [ 102.132826][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.133017][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.133242][ T5797] bridge_slave_1: entered allmulticast mode [ 102.135414][ T5797] bridge_slave_1: entered promiscuous mode [ 102.140438][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.150361][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.162190][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.162537][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.163122][ T5800] bridge_slave_1: entered allmulticast mode [ 102.170484][ T5800] bridge_slave_1: entered promiscuous mode [ 102.183273][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.183407][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.183541][ T5799] bridge_slave_0: entered allmulticast mode [ 102.185421][ T5799] bridge_slave_0: entered promiscuous mode [ 102.365254][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.542536][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.542685][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.542823][ T5799] bridge_slave_1: entered allmulticast mode [ 102.544739][ T5799] bridge_slave_1: entered promiscuous mode [ 102.886476][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.890102][ T5801] team0: Port device team_slave_0 added [ 102.986243][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.075276][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.077426][ T5801] team0: Port device team_slave_1 added [ 103.079497][ T5798] team0: Port device team_slave_0 added [ 103.092879][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.108438][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.132711][ T5807] Bluetooth: hci4: command tx timeout [ 103.132746][ T5807] Bluetooth: hci2: command tx timeout [ 103.132764][ T5807] Bluetooth: hci0: command tx timeout [ 103.133285][ T61] Bluetooth: hci1: command tx timeout [ 103.211781][ T61] Bluetooth: hci3: command tx timeout [ 103.295473][ T5798] team0: Port device team_slave_1 added [ 103.375106][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.925019][ T5797] team0: Port device team_slave_0 added [ 103.926384][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.926396][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.926415][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.055280][ T5800] team0: Port device team_slave_0 added [ 104.135232][ T5797] team0: Port device team_slave_1 added [ 104.136064][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.136075][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.136103][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.137238][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.137248][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.137266][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.141344][ T5800] team0: Port device team_slave_1 added [ 104.165684][ T5799] team0: Port device team_slave_0 added [ 104.302352][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.302371][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.302402][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.395040][ T5799] team0: Port device team_slave_1 added [ 104.613438][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.613452][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.613470][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.618856][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.618870][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.618889][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.823666][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.823680][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.823708][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.826089][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.826101][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.826120][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.004807][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.004832][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.004852][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.202275][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.202290][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.202309][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.210418][ T5801] hsr_slave_0: entered promiscuous mode [ 105.211824][ T5812] Bluetooth: hci0: command tx timeout [ 105.211857][ T5812] Bluetooth: hci2: command tx timeout [ 105.211880][ T5812] Bluetooth: hci4: command tx timeout [ 105.212016][ T61] Bluetooth: hci1: command tx timeout [ 105.220558][ T5801] hsr_slave_1: entered promiscuous mode [ 105.292073][ T5807] Bluetooth: hci3: command tx timeout [ 105.360649][ T5798] hsr_slave_0: entered promiscuous mode [ 105.364086][ T5798] hsr_slave_1: entered promiscuous mode [ 105.367498][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 105.367870][ T5798] Cannot create hsr debugfs directory [ 105.807561][ T5797] hsr_slave_0: entered promiscuous mode [ 105.808658][ T5797] hsr_slave_1: entered promiscuous mode [ 105.809410][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 105.809438][ T5797] Cannot create hsr debugfs directory [ 105.834645][ T5800] hsr_slave_0: entered promiscuous mode [ 105.835682][ T5800] hsr_slave_1: entered promiscuous mode [ 105.836423][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 105.836442][ T5800] Cannot create hsr debugfs directory [ 106.197059][ T5799] hsr_slave_0: entered promiscuous mode [ 106.198385][ T5799] hsr_slave_1: entered promiscuous mode [ 106.199078][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 106.199096][ T5799] Cannot create hsr debugfs directory [ 107.291626][ T5802] Bluetooth: hci1: command tx timeout [ 107.291660][ T5802] Bluetooth: hci0: command tx timeout [ 107.291707][ T61] Bluetooth: hci4: command tx timeout [ 107.291744][ T5807] Bluetooth: hci2: command tx timeout [ 107.371680][ T5807] Bluetooth: hci3: command tx timeout [ 107.553205][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.602012][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.636539][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.693702][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.823641][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.875995][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.918489][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.976172][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.116256][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.166651][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.198777][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.261025][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.420746][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.463668][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.515153][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.567735][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.678185][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.733557][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.759766][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.806803][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.839788][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.928072][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.974250][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.974710][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.005844][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.030089][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.030639][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.120343][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.160859][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.177998][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.178154][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.240113][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.240359][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.330166][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.381236][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.388750][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.403566][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.444584][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.444697][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.549768][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.570620][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.609270][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.609502][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.673035][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.673214][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.734309][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.796662][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.796899][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.838103][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.838487][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.957893][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.180179][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.289189][ T5801] veth0_vlan: entered promiscuous mode [ 110.369571][ T5801] veth1_vlan: entered promiscuous mode [ 110.398553][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.510961][ T5798] veth0_vlan: entered promiscuous mode [ 110.578173][ T5798] veth1_vlan: entered promiscuous mode [ 110.629455][ T5801] veth0_macvtap: entered promiscuous mode [ 110.657272][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.684251][ T5801] veth1_macvtap: entered promiscuous mode [ 110.722041][ T5797] veth0_vlan: entered promiscuous mode [ 110.765356][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.807788][ T5797] veth1_vlan: entered promiscuous mode [ 110.818356][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.832226][ T5798] veth0_macvtap: entered promiscuous mode [ 110.870500][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.882660][ T5798] veth1_macvtap: entered promiscuous mode [ 110.925228][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.945230][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.947553][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.949572][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.096833][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.098932][ T5799] veth0_vlan: entered promiscuous mode [ 111.200488][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.245105][ T5797] veth0_macvtap: entered promiscuous mode [ 111.316540][ T5799] veth1_vlan: entered promiscuous mode [ 111.330217][ T3546] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.344951][ T3546] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.347935][ T5797] veth1_macvtap: entered promiscuous mode [ 111.368325][ T3546] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.386117][ T3546] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.495436][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.495459][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.600436][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.705769][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.731169][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.731191][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.808996][ T5799] veth0_macvtap: entered promiscuous mode [ 111.818829][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.842300][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.844712][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.849138][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.849153][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.876868][ T5800] veth0_vlan: entered promiscuous mode [ 111.905701][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.906237][ T5799] veth1_macvtap: entered promiscuous mode [ 112.072065][ T5800] veth1_vlan: entered promiscuous mode [ 112.177686][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.177703][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.203536][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.288135][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 112.290808][ T5920] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 112.290829][ T5920] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6'. [ 112.701078][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.728334][ T82] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.730820][ T82] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.760406][ T82] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.816288][ T82] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.899636][ T5800] veth0_macvtap: entered promiscuous mode [ 112.969970][ T5800] veth1_macvtap: entered promiscuous mode [ 113.184891][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.184915][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.621836][ T5923] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.622075][ T5923] block device autoloading is deprecated and will be removed. [ 115.478023][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.526254][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.579281][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.579303][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.634737][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.663901][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.708613][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.708711][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.708727][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.747062][ T3546] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.881234][ T1361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.881255][ T1361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.501457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.234992][ T5929] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.364104][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.364126][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.411485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.411571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.411613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.411654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.411695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.411743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.411785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.411826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.411867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.085048][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 119.145768][ T5929] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.192364][ T5929] usb 4-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.40 [ 119.192387][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.192401][ T5929] usb 4-1: Product: syz [ 119.192412][ T5929] usb 4-1: Manufacturer: 츸Й섟꽈ꏱ࿴ጰ齴蠤쫩煎웞漾ѭ❺轖Ę즉сᡩ쩔蹆崶⾛䮱舡侵彃ㅿ蘖脤┋ㄌꬦ쓂굄ꏲ턊踲쉌킼ٟ㨇멍픥聐몕ꈅꕕ뱸퓢ꭍꄧⵀ먰돮㮩ျｼ㵢負䇅馔䯴Җ먴쏟갨짛縯࿼僄勽㫶좝謫蹼辘Ⱞ㛺ᥥ镄鰑툳㶚鍴 [ 119.192435][ T5929] usb 4-1: SerialNumber: syz [ 119.567453][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.584089][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.878910][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.878935][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.338507][ T5929] usbhid 4-1:1.0: can't add hid device: -71 [ 120.338610][ T5929] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 120.484669][ T5929] usb 4-1: USB disconnect, device number 2 [ 121.461893][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 121.802707][ T5979] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 122.058559][ T5973] hsr_slave_1 (unregistering): left promiscuous mode [ 124.616511][ T5888] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.841777][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 124.847847][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 124.869215][ T5888] usb 5-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.40 [ 124.869252][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.869273][ T5888] usb 5-1: Product: syz [ 124.869297][ T5888] usb 5-1: Manufacturer: 츸Й섟꽈ꏱ࿴ጰ齴蠤쫩煎웞漾ѭ❺轖Ę즉сᡩ쩔蹆崶⾛䮱舡侵彃ㅿ蘖脤┋ㄌꬦ쓂굄ꏲ턊踲쉌킼ٟ㨇멍픥聐몕ꈅꕕ뱸퓢ꭍꄧⵀ먰돮㮩ျｼ㵢負䇅馔䯴Җ먴쏟갨짛縯࿼僄勽㫶좝謫蹼辘Ⱞ㛺ᥥ镄鰑툳㶚鍴 [ 124.869328][ T5888] usb 5-1: SerialNumber: syz [ 125.309134][ T6003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.312135][ T6003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.652888][ T5888] usbhid 5-1:1.0: can't add hid device: -71 [ 126.653013][ T5888] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 126.712357][ T5888] usb 5-1: USB disconnect, device number 2 [ 126.850675][ T6021] faux_driver vkms: [drm] Unknown color mode 8388614; guessing buffer size. [ 127.495800][ T37] audit: type=1326 audit(1767562759.675:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6025 comm="syz.2.27" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccd855f749 code=0x0 [ 127.925287][ T6036] netlink: 36 bytes leftover after parsing attributes in process `syz.3.31'. [ 129.841885][ T5888] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 130.141536][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 130.145136][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 130.149843][ T5888] usb 2-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.40 [ 130.149873][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.149893][ T5888] usb 2-1: Product: syz [ 130.149907][ T5888] usb 2-1: Manufacturer: 츸Й섟꽈ꏱ࿴ጰ齴蠤쫩煎웞漾ѭ❺轖Ę즉сᡩ쩔蹆崶⾛䮱舡侵彃ㅿ蘖脤┋ㄌꬦ쓂굄ꏲ턊踲쉌킼ٟ㨇멍픥聐몕ꈅꕕ뱸퓢ꭍꄧⵀ먰돮㮩ျｼ㵢負䇅馔䯴Җ먴쏟갨짛縯࿼僄勽㫶좝謫蹼辘Ⱞ㛺ᥥ镄鰑툳㶚鍴 [ 130.149940][ T5888] usb 2-1: SerialNumber: syz [ 130.436985][ T6077] netlink: 36 bytes leftover after parsing attributes in process `syz.4.45'. [ 130.517178][ T6064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.525685][ T6064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.597028][ T37] audit: type=1326 audit(1767562762.745:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.0.46" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f593b78f749 code=0x0 [ 132.901582][ T5888] usbhid 2-1:1.0: can't add hid device: -71 [ 132.901728][ T5888] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 132.908784][ T5888] usb 2-1: USB disconnect, device number 2 [ 133.354186][ T6104] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 138.189141][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.397371][ T37] audit: type=1326 audit(1767562770.575:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.1.60" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a01e5f749 code=0x0 [ 138.457687][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 141.647517][ T6164] vlan2: entered promiscuous mode [ 141.662875][ T6164] vlan2: entered allmulticast mode [ 141.662897][ T6164] hsr_slave_1: entered allmulticast mode [ 142.446876][ T6174] 9pnet_virtio: no channels available for device syz [ 142.677288][ T6178] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.334481][ T6186] warning: `syz.2.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 143.426376][ T6190] netlink: 324 bytes leftover after parsing attributes in process `syz.4.78'. [ 143.430123][ T6190] Bluetooth: MGMT ver 1.23 [ 149.093572][ T6239] lo speed is unknown, defaulting to 1000 [ 149.093805][ T6239] lo speed is unknown, defaulting to 1000 [ 149.172459][ T6239] lo speed is unknown, defaulting to 1000 [ 149.254882][ T6239] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 149.514746][ T6237] 9pnet_virtio: no channels available for device syz [ 149.691507][ T6239] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 150.019176][ T6239] lo speed is unknown, defaulting to 1000 [ 150.034684][ T6239] lo speed is unknown, defaulting to 1000 [ 150.049395][ T6239] lo speed is unknown, defaulting to 1000 [ 150.090085][ T6239] lo speed is unknown, defaulting to 1000 [ 150.144452][ T6239] lo speed is unknown, defaulting to 1000 [ 151.704908][ T37] audit: type=1800 audit(1767562783.805:5): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.99" name="bus" dev="ramfs" ino=8994 res=0 errno=0 [ 151.773880][ T6273] ptrace attach of "./syz-executor exec"[5797] was attempted by ""[6273] [ 152.463241][ T6289] siw: device registration error -23 [ 156.270749][ T6325] overlayfs: failed to resolve './file0': -2 [ 156.552657][ T6330] lo speed is unknown, defaulting to 1000 [ 156.552723][ T6330] lo speed is unknown, defaulting to 1000 [ 156.553680][ T6330] lo speed is unknown, defaulting to 1000 [ 156.816765][ T6330] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 157.075613][ T6330] lo speed is unknown, defaulting to 1000 [ 157.142397][ T6330] lo speed is unknown, defaulting to 1000 [ 157.147654][ T6330] lo speed is unknown, defaulting to 1000 [ 157.183794][ T6330] lo speed is unknown, defaulting to 1000 [ 157.187696][ T6330] lo speed is unknown, defaulting to 1000 [ 158.627869][ T6352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.784264][ T6369] overlayfs: failed to resolve './file0': -2 [ 159.856557][ T6375] 9pnet_virtio: no channels available for device syz [ 160.032306][ T6378] siw: device registration error -23 [ 160.110229][ T6382] vlan2: entered promiscuous mode [ 160.110405][ T6382] vlan2: entered allmulticast mode [ 160.110417][ T6382] hsr_slave_1: entered allmulticast mode [ 160.141288][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.138'. [ 162.565015][ T6401] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.694354][ T6407] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 162.695523][ T6407] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.703587][ T6407] vhci_hcd vhci_hcd.0: Device attached [ 163.702283][ T5861] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 163.885938][ T6407] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 164.269610][ T6409] vhci_hcd: connection reset by peer [ 164.306594][ T807] vhci_hcd vhci_hcd.2: stop threads [ 164.307772][ T807] vhci_hcd vhci_hcd.2: release socket [ 164.308083][ T807] vhci_hcd vhci_hcd.2: disconnect device [ 165.065991][ T6424] siw: device registration error -23 [ 166.637109][ T44] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 167.785760][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.785889][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.786006][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.786516][ T44] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.786657][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.896997][ T44] usb 5-1: config 0 descriptor?? [ 169.590584][ T5861] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 170.294840][ T5875] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 170.718034][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 170.718169][ T44] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 170.759906][ T44] usb 5-1: USB disconnect, device number 3 [ 170.769304][ T6454] libceph: resolve '400' (ret=-3): failed [ 172.194212][ T6468] vlan2: entered promiscuous mode [ 172.194389][ T6468] vlan2: entered allmulticast mode [ 172.194400][ T6468] hsr_slave_1: entered allmulticast mode [ 172.247294][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 175.140656][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 175.984381][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.984416][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.984439][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.984482][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.984507][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.058757][ T44] usb 2-1: config 0 descriptor?? [ 176.516145][ T44] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 176.516176][ T44] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 176.516202][ T44] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 176.516220][ T44] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 176.516239][ T44] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 176.516257][ T44] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 176.516276][ T44] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 176.516295][ T44] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 176.516313][ T44] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 176.516332][ T44] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 176.655753][ T44] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 176.790440][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 176.817331][ T44] usb 2-1: USB disconnect, device number 3 [ 177.527778][ T6506] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.539910][ T6506] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 177.671052][ T6527] bridge0: port 3(syz_tun) entered blocking state [ 177.679208][ T6527] bridge0: port 3(syz_tun) entered disabled state [ 177.690649][ T6527] syz_tun: entered allmulticast mode [ 177.724686][ T6527] syz_tun: entered promiscuous mode [ 177.727709][ T6527] bridge0: port 3(syz_tun) entered blocking state [ 177.727843][ T6527] bridge0: port 3(syz_tun) entered forwarding state [ 177.758695][ T6506] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 177.837479][ T6506] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.839090][ T6506] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 178.458595][ T6506] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 179.531558][ T5807] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.554542][ T6506] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.554689][ T6506] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 179.851611][ T5807] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.922403][ T6506] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 180.584181][ T6506] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.584244][ T6506] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 180.656098][ T6506] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 180.694332][ T6506] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 180.694421][ T6506] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 180.742687][ T6506] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 181.616152][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.616551][ T5807] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.978053][ T5807] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.652091][ T5807] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.739606][ T5807] Bluetooth: hci4: command 0x0c1a tx timeout [ 182.866219][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 183.705123][ T5807] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.705162][ T5807] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.011581][ T61] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.680957][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 184.707891][ T6597] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 184.707916][ T6597] netlink: 224 bytes leftover after parsing attributes in process `syz.0.200'. [ 184.736421][ T61] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.811569][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 185.031591][ T6609] overlayfs: failed to resolve './file0': -2 [ 188.308033][ T5807] Bluetooth: hci2: command 0x0c1a tx timeout [ 188.308084][ T5807] Bluetooth: hci3: command 0x0c1a tx timeout [ 188.308111][ T5807] Bluetooth: hci4: command 0x0c1a tx timeout [ 188.309216][ T6601] tmpfs: Unknown parameter ' ' [ 188.813402][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.211'. [ 189.312673][ T6629] hsr_slave_1 (unregistering): left promiscuous mode [ 192.582724][ T6656] sctp: [Deprecated]: syz.0.218 (pid 6656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.582724][ T6656] Use struct sctp_sack_info instead [ 199.655318][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.725001][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'. [ 199.725316][ T6704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.725325][ T6704] IPv6: NLM_F_CREATE should be set when creating new route [ 202.217576][ T6711] 9pnet_virtio: no channels available for device syz [ 202.223652][ T6714] 9pnet_virtio: no channels available for device syz [ 207.542999][ T6445] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 207.703158][ T6445] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.703184][ T6445] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.703199][ T6445] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.703229][ T6445] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.703245][ T6445] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.794933][ T6445] usb 4-1: config 0 descriptor?? [ 208.208184][ T6445] hid_parser_main: 5 callbacks suppressed [ 208.208209][ T6445] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 208.208241][ T6445] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 208.208268][ T6445] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 208.210183][ T6445] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 208.234545][ T6445] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 208.234645][ T6445] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 208.234898][ T6445] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 208.234993][ T6445] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 208.235069][ T6445] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 208.235143][ T6445] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 208.450124][ T6445] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 208.490418][ T6445] usb 4-1: USB disconnect, device number 3 [ 208.766067][ T6768] overlayfs: failed to resolve './file0': -2 [ 208.867175][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 214.653210][ T5803] ------------[ cut here ]------------ [ 214.653226][ T5803] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 214.653251][ T5803] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x39a/0x5c0, CPU#1: kworker/1:3/5803 [ 214.653308][ T5803] Modules linked in: [ 214.653346][ T5803] CPU: 1 UID: 0 PID: 5803 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 214.653372][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.653388][ T5803] Workqueue: events drm_fb_helper_damage_work [ 214.653424][ T5803] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 214.653450][ T5803] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba d4 f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 214.653468][ T5803] RSP: 0018:ffffc90004fef860 EFLAGS: 00010246 [ 214.653487][ T5803] RAX: 1ffff11028f50e00 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 214.653503][ T5803] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 214.653520][ T5803] RBP: ffffc90004fef948 R08: 0000000000000000 R09: 0000000000000000 [ 214.653534][ T5803] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 214.653551][ T5803] R13: ffff888147a87000 R14: 1ffff920009fdf10 R15: ffffffff8b569b80 [ 214.653568][ T5803] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 214.653586][ T5803] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.653601][ T5803] CR2: 000055558640d5c8 CR3: 000000003488e000 CR4: 00000000003526f0 [ 214.653620][ T5803] Call Trace: [ 214.653633][ T5803] [ 214.653650][ T5803] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 214.653677][ T5803] ? __pfx_autoremove_wake_function+0x10/0x10 [ 214.653709][ T5803] ? rt_spin_unlock+0x161/0x200 [ 214.653743][ T5803] ? drm_vblank_get+0x147/0x260 [ 214.653771][ T5803] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 214.653811][ T5803] drm_fb_helper_damage_work+0xc9/0x650 [ 214.653840][ T5803] ? process_scheduled_works+0x9ef/0x1770 [ 214.653871][ T5803] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 214.653898][ T5803] ? preempt_schedule_thunk+0x16/0x30 [ 214.653924][ T5803] ? process_scheduled_works+0x9ef/0x1770 [ 214.653948][ T5803] ? process_scheduled_works+0x9ef/0x1770 [ 214.653976][ T5803] process_scheduled_works+0xad1/0x1770 [ 214.654036][ T5803] ? __pfx_process_scheduled_works+0x10/0x10 [ 214.654060][ T5803] ? do_raw_spin_lock+0x121/0x290 [ 214.654106][ T5803] worker_thread+0x8a0/0xda0 [ 214.654149][ T5803] ? __kthread_parkme+0x7b/0x200 [ 214.654189][ T5803] kthread+0x711/0x8a0 [ 214.654225][ T5803] ? __pfx_worker_thread+0x10/0x10 [ 214.654251][ T5803] ? __pfx_kthread+0x10/0x10 [ 214.654279][ T5803] ? rt_spin_unlock+0x150/0x200 [ 214.654322][ T5803] ? rt_spin_unlock+0x161/0x200 [ 214.654349][ T5803] ? __pfx_kthread+0x10/0x10 [ 214.654383][ T5803] ret_from_fork+0x510/0xa50 [ 214.654412][ T5803] ? __pfx_ret_from_fork+0x10/0x10 [ 214.654435][ T5803] ? __switch_to+0xc9e/0x1480 [ 214.654475][ T5803] ? __pfx_kthread+0x10/0x10 [ 214.654509][ T5803] ret_from_fork_asm+0x1a/0x30 [ 214.654564][ T5803] [ 214.654580][ T5803] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 214.654595][ T5803] CPU: 1 UID: 0 PID: 5803 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 214.654620][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.654633][ T5803] Workqueue: events drm_fb_helper_damage_work [ 214.654657][ T5803] Call Trace: [ 214.654666][ T5803] [ 214.654674][ T5803] vpanic+0x1e0/0x670 [ 214.654711][ T5803] panic+0xb9/0xc0 [ 214.654742][ T5803] ? __pfx_panic+0x10/0x10 [ 214.654785][ T5803] ? ret_from_fork_asm+0x1a/0x30 [ 214.654826][ T5803] __warn+0x317/0x4b0 [ 214.654856][ T5803] ? drm_wait_one_vblank+0x39a/0x5c0 [ 214.654885][ T5803] ? drm_wait_one_vblank+0x39a/0x5c0 [ 214.654910][ T5803] __report_bug+0x288/0x500 [ 214.654945][ T5803] ? drm_wait_one_vblank+0x39a/0x5c0 [ 214.654978][ T5803] ? __pfx___report_bug+0x10/0x10 [ 214.655023][ T5803] ? drm_wait_one_vblank+0x58c/0x5c0 [ 214.655046][ T5803] ? drm_wait_one_vblank+0x587/0x5c0 [ 214.655081][ T5803] report_bug_entry+0x19a/0x290 [ 214.655118][ T5803] ? drm_wait_one_vblank+0x587/0x5c0 [ 214.655141][ T5803] ? drm_wait_one_vblank+0x58c/0x5c0 [ 214.655164][ T5803] handle_bug+0xca/0x200 [ 214.655191][ T5803] exc_invalid_op+0x1a/0x50 [ 214.655217][ T5803] asm_exc_invalid_op+0x1a/0x20 [ 214.655238][ T5803] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 214.655263][ T5803] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba d4 f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 214.655281][ T5803] RSP: 0018:ffffc90004fef860 EFLAGS: 00010246 [ 214.655304][ T5803] RAX: 1ffff11028f50e00 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 214.655320][ T5803] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 214.655336][ T5803] RBP: ffffc90004fef948 R08: 0000000000000000 R09: 0000000000000000 [ 214.655350][ T5803] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 214.655366][ T5803] R13: ffff888147a87000 R14: 1ffff920009fdf10 R15: ffffffff8b569b80 [ 214.655408][ T5803] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 214.655434][ T5803] ? __pfx_autoremove_wake_function+0x10/0x10 [ 214.655466][ T5803] ? rt_spin_unlock+0x161/0x200 [ 214.655500][ T5803] ? drm_vblank_get+0x147/0x260 [ 214.655527][ T5803] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 214.655567][ T5803] drm_fb_helper_damage_work+0xc9/0x650 [ 214.655596][ T5803] ? process_scheduled_works+0x9ef/0x1770 [ 214.655628][ T5803] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 214.655655][ T5803] ? preempt_schedule_thunk+0x16/0x30 [ 214.655680][ T5803] ? process_scheduled_works+0x9ef/0x1770 [ 214.655704][ T5803] ? process_scheduled_works+0x9ef/0x1770 [ 214.655732][ T5803] process_scheduled_works+0xad1/0x1770 [ 214.655791][ T5803] ? __pfx_process_scheduled_works+0x10/0x10 [ 214.655814][ T5803] ? do_raw_spin_lock+0x121/0x290 [ 214.655859][ T5803] worker_thread+0x8a0/0xda0 [ 214.655902][ T5803] ? __kthread_parkme+0x7b/0x200 [ 214.655941][ T5803] kthread+0x711/0x8a0 [ 214.655978][ T5803] ? __pfx_worker_thread+0x10/0x10 [ 214.656004][ T5803] ? __pfx_kthread+0x10/0x10 [ 214.656033][ T5803] ? rt_spin_unlock+0x150/0x200 [ 214.656069][ T5803] ? rt_spin_unlock+0x161/0x200 [ 214.656096][ T5803] ? __pfx_kthread+0x10/0x10 [ 214.656129][ T5803] ret_from_fork+0x510/0xa50 [ 214.656157][ T5803] ? __pfx_ret_from_fork+0x10/0x10 [ 214.656180][ T5803] ? __switch_to+0xc9e/0x1480 [ 214.656218][ T5803] ? __pfx_kthread+0x10/0x10 [ 214.656252][ T5803] ret_from_fork_asm+0x1a/0x30 [ 214.656311][ T5803] [ 214.656465][ T5803] Kernel Offset: disabled