last executing test programs: 22.501952542s ago: executing program 4 (id=887): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) io_uring_setup(0x53b6, 0x0) syz_io_uring_setup(0x2003, 0x0, &(0x7f0000000240), 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, 0x0, 0x0, 0x1000, 0x2000}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10002) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}]}, 0x34}}, 0x0) 17.217296204s ago: executing program 4 (id=902): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0, @ANYBLOB="0000fdffefffffdbdf250b10"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 16.466311784s ago: executing program 4 (id=904): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x5, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 12.80669847s ago: executing program 0 (id=921): syz_open_dev$dri(0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, &(0x7f0000000400)={@desc={0x1, 0x0, @desc4}}) 12.572003201s ago: executing program 4 (id=922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 11.583213082s ago: executing program 3 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6400000010000304000000000000ff", @ANYRES32=r2, @ANYBLOB="0000000000000000440012800b0003006272696467650000340002"], 0x64}}, 0x0) 11.538219402s ago: executing program 4 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x4080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 11.253219467s ago: executing program 0 (id=927): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0000fdffefffffdbdf250b10"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) 10.505136333s ago: executing program 3 (id=929): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) fcntl$notify(0xffffffffffffffff, 0x402, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f000059e000/0x5000)=nil, 0x5000, 0x9) 10.153895893s ago: executing program 4 (id=931): unshare(0x6a040000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r0}) 10.077569883s ago: executing program 0 (id=932): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x5, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 7.946416532s ago: executing program 1 (id=934): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x301240, 0x4) open_tree(r1, &(0x7f00000001c0)='./file0\x00', 0x100001) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, 0x0, 0x0, 0x200000, 0x8000000000000001}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) 7.902183006s ago: executing program 3 (id=935): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0xffffffffffffff6c, 0x0, 0xffffffffffffffff, 0x200000800000, 0xfffffffffffffffc}, {0x0, 0xa00, 0x4, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x2}}, 0xb8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) socket$nl_xfrm(0x10, 0x3, 0x6) 7.522987037s ago: executing program 2 (id=936): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) fsmount(0xffffffffffffffff, 0x0, 0xf) setreuid(0xee01, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x9, 0x5, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r3, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) 6.556051634s ago: executing program 1 (id=937): syz_open_dev$dri(0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, &(0x7f0000000400)={@desc={0x1, 0x0, @desc4}}) 5.608864116s ago: executing program 1 (id=938): connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r0 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)) 5.562186888s ago: executing program 2 (id=939): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6400000010000304000000000000ff", @ANYRES32=r2, @ANYBLOB="0000000000000000440012800b0003006272696467650000340002"], 0x64}}, 0x0) 5.51030633s ago: executing program 3 (id=940): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb"], 0xf8}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 5.342825231s ago: executing program 3 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x4080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5.342676996s ago: executing program 0 (id=942): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0000fdffefffffdbdf250b10"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) 5.29529738s ago: executing program 1 (id=943): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) fcntl$notify(0xffffffffffffffff, 0x402, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x5411, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r2, 0x3) madvise(&(0x7f000059e000/0x5000)=nil, 0x5000, 0x9) landlock_create_ruleset(&(0x7f0000000300)={0x1102}, 0x18, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000000), 0x12) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r1, 0x2, {0x0, 0xf0, 0x3}, 0xfd}, 0x18) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b6411248000004b6", 0x9}], 0x1}, 0x4048001) 5.294673926s ago: executing program 2 (id=944): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_delete(r2) 3.452569892s ago: executing program 0 (id=945): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) fcntl$notify(0xffffffffffffffff, 0x402, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f000059e000/0x5000)=nil, 0x5000, 0x9) 3.451924239s ago: executing program 1 (id=946): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2) timer_create(0x2, 0x0, 0x0) timer_delete(0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x600}, 0x90) 3.450958911s ago: executing program 2 (id=947): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000a00)={0x0, 0x2}, 0x8) writev(r0, &(0x7f0000001300), 0x0) 3.450041291s ago: executing program 3 (id=948): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081ec00000486060b830eeaa1144eb44e4c8ac08e6a6eac4a860fdc1851ddab64fe213700008c63f0c84444fdb3d33f1cee37d289ff436030da41bf010000005b3b3b09551036"]) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e00200001b00000428bd7000fedbdf25fe880000000000040000000000000001640101010000000008000000000000004e2200044e21ffff", @ANYBLOB], 0x2e0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb10000844b9c9", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x8040) memfd_secret(0x0) ppoll(0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0, 0x0) unshare(0x40020000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xd, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x4}]}}]}, 0x44}}, 0x0) 2.997701415s ago: executing program 2 (id=949): syz_open_dev$dri(0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, &(0x7f0000000400)={@desc={0x1, 0x0, @desc4}}) 2.227429557s ago: executing program 0 (id=950): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0xffffffffffffff6c, 0x0, 0xffffffffffffffff, 0x200000800000, 0xfffffffffffffffc}, {0x0, 0xa00, 0x4, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x2}}, 0xb8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) socket$nl_xfrm(0x10, 0x3, 0x6) 1.497651155s ago: executing program 2 (id=951): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r0, 0x0, 0x0, 0x3000000000000000}]) 0s ago: executing program 1 (id=952): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb"], 0xf8}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts. [ 91.000620][ T5786] cgroup: Unknown subsys name 'net' [ 91.241591][ T5786] cgroup: Unknown subsys name 'cpuset' [ 91.296502][ T5786] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.089874][ T9] cfg80211: failed to load regulatory.db [ 93.440942][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.958054][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.961968][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.963823][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.964309][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.966362][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.971481][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.972433][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.992265][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.036501][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.038005][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.047631][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.066240][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.096327][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.098535][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.103795][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.196148][ T62] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.201184][ T62] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.201991][ T62] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.219185][ T62] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.223777][ T62] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.231520][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.263274][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.269751][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.288471][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.289504][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.168339][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 97.247854][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 97.407343][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 97.604084][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 97.907356][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 98.067335][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.068560][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.069046][ T5808] bridge_slave_0: entered allmulticast mode [ 98.071186][ T5808] bridge_slave_0: entered promiscuous mode [ 98.167450][ T62] Bluetooth: hci0: command tx timeout [ 98.167672][ T5117] Bluetooth: hci2: command tx timeout [ 98.167815][ T5807] Bluetooth: hci1: command tx timeout [ 98.206968][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.207186][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.207390][ T5808] bridge_slave_1: entered allmulticast mode [ 98.209283][ T5808] bridge_slave_1: entered promiscuous mode [ 98.325992][ T5117] Bluetooth: hci4: command tx timeout [ 98.326250][ T5807] Bluetooth: hci3: command tx timeout [ 98.327394][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.327521][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.327661][ T5800] bridge_slave_0: entered allmulticast mode [ 98.329634][ T5800] bridge_slave_0: entered promiscuous mode [ 98.607992][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.608143][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.608308][ T5800] bridge_slave_1: entered allmulticast mode [ 98.610179][ T5800] bridge_slave_1: entered promiscuous mode [ 98.755205][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.755390][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.755544][ T5799] bridge_slave_0: entered allmulticast mode [ 98.765171][ T5799] bridge_slave_0: entered promiscuous mode [ 98.964042][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.982776][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.982960][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.983108][ T5799] bridge_slave_1: entered allmulticast mode [ 98.985111][ T5799] bridge_slave_1: entered promiscuous mode [ 99.159964][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.250388][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.356949][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.357056][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.357205][ T5810] bridge_slave_0: entered allmulticast mode [ 99.359156][ T5810] bridge_slave_0: entered promiscuous mode [ 99.580167][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.581428][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.581533][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.581718][ T5810] bridge_slave_1: entered allmulticast mode [ 99.583557][ T5810] bridge_slave_1: entered promiscuous mode [ 99.790285][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.929171][ T5808] team0: Port device team_slave_0 added [ 99.929450][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.929573][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.929818][ T5811] bridge_slave_0: entered allmulticast mode [ 99.931891][ T5811] bridge_slave_0: entered promiscuous mode [ 99.939048][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.089694][ T5808] team0: Port device team_slave_1 added [ 100.089963][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.090089][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.090218][ T5811] bridge_slave_1: entered allmulticast mode [ 100.092950][ T5811] bridge_slave_1: entered promiscuous mode [ 100.179001][ T5800] team0: Port device team_slave_0 added [ 100.182471][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.246045][ T62] Bluetooth: hci0: command tx timeout [ 100.247803][ T5117] Bluetooth: hci2: command tx timeout [ 100.247952][ T5807] Bluetooth: hci1: command tx timeout [ 100.406075][ T62] Bluetooth: hci4: command tx timeout [ 100.406204][ T5807] Bluetooth: hci3: command tx timeout [ 100.409370][ T5800] team0: Port device team_slave_1 added [ 100.412011][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.799795][ T5799] team0: Port device team_slave_0 added [ 100.937765][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.937780][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.937800][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.942993][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.945228][ T5799] team0: Port device team_slave_1 added [ 101.127929][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.127948][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.127975][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.131391][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.237476][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.237491][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.237511][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.240388][ T5810] team0: Port device team_slave_0 added [ 101.408411][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.408430][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.408455][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.411255][ T5810] team0: Port device team_slave_1 added [ 101.537800][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.537820][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.537847][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.729726][ T5811] team0: Port device team_slave_0 added [ 101.732209][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.732222][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.732243][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.918929][ T5811] team0: Port device team_slave_1 added [ 101.935537][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.935550][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.935570][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.207477][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.207491][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.207511][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.236128][ T5808] hsr_slave_0: entered promiscuous mode [ 102.237591][ T5808] hsr_slave_1: entered promiscuous mode [ 102.327354][ T5117] Bluetooth: hci2: command tx timeout [ 102.327509][ T62] Bluetooth: hci0: command tx timeout [ 102.327591][ T5807] Bluetooth: hci1: command tx timeout [ 102.486074][ T62] Bluetooth: hci4: command tx timeout [ 102.486178][ T5807] Bluetooth: hci3: command tx timeout [ 102.508822][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.508839][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.508867][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.529213][ T5800] hsr_slave_0: entered promiscuous mode [ 102.533686][ T5800] hsr_slave_1: entered promiscuous mode [ 102.539300][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 102.539647][ T5800] Cannot create hsr debugfs directory [ 102.649311][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.649330][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.649356][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.783671][ T5799] hsr_slave_0: entered promiscuous mode [ 102.784695][ T5799] hsr_slave_1: entered promiscuous mode [ 102.785487][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 102.785505][ T5799] Cannot create hsr debugfs directory [ 103.271900][ T5810] hsr_slave_0: entered promiscuous mode [ 103.272950][ T5810] hsr_slave_1: entered promiscuous mode [ 103.273661][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 103.273679][ T5810] Cannot create hsr debugfs directory [ 103.663121][ T5811] hsr_slave_0: entered promiscuous mode [ 103.664406][ T5811] hsr_slave_1: entered promiscuous mode [ 103.665094][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 103.665112][ T5811] Cannot create hsr debugfs directory [ 104.406048][ T5807] Bluetooth: hci1: command tx timeout [ 104.406085][ T5807] Bluetooth: hci0: command tx timeout [ 104.406109][ T5807] Bluetooth: hci2: command tx timeout [ 104.566990][ T62] Bluetooth: hci3: command tx timeout [ 104.567024][ T62] Bluetooth: hci4: command tx timeout [ 104.918540][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.967623][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.011314][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.067677][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.195890][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.225432][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.261759][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.321773][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.453229][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.497167][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.534121][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.590918][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.765006][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.795488][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.843011][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.905055][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.997948][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.077348][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.117907][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.153447][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.203412][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.247670][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.288576][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.289552][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.322912][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.362214][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.362333][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.433856][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.471054][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.471244][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.492453][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.535009][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.535174][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.614590][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.659034][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.662530][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.662729][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.732798][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.732976][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.828702][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.882376][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.904268][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.904374][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.994230][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.994386][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.092962][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.139379][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.153095][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.213233][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.213415][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.240736][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.496902][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.606468][ T5808] veth0_vlan: entered promiscuous mode [ 107.667421][ T5808] veth1_vlan: entered promiscuous mode [ 107.697817][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.839635][ T5800] veth0_vlan: entered promiscuous mode [ 107.901445][ T5808] veth0_macvtap: entered promiscuous mode [ 107.917448][ T5800] veth1_vlan: entered promiscuous mode [ 107.924791][ T5808] veth1_macvtap: entered promiscuous mode [ 107.971298][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.005256][ T5799] veth0_vlan: entered promiscuous mode [ 108.041913][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.074040][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.090698][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.096812][ T5799] veth1_vlan: entered promiscuous mode [ 108.178727][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.182865][ T5800] veth0_macvtap: entered promiscuous mode [ 108.220480][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.222979][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.258982][ T3486] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.268875][ T5800] veth1_macvtap: entered promiscuous mode [ 108.451977][ T5811] veth0_vlan: entered promiscuous mode [ 108.541238][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.558626][ T5799] veth0_macvtap: entered promiscuous mode [ 108.576069][ T5811] veth1_vlan: entered promiscuous mode [ 108.590597][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.608608][ T5799] veth1_macvtap: entered promiscuous mode [ 108.661369][ T1109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.677294][ T1410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.677315][ T1410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.692734][ T1109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.721813][ T1109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.724941][ T1109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.822880][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.909317][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.909341][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.934072][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.037297][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.038468][ T5811] veth0_macvtap: entered promiscuous mode [ 109.069852][ T5810] veth0_vlan: entered promiscuous mode [ 109.073372][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.114505][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.149647][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.150287][ T5811] veth1_macvtap: entered promiscuous mode [ 109.254684][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.254708][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.290027][ T5810] veth1_vlan: entered promiscuous mode [ 109.498446][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.500584][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.500607][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.632676][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.693469][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.693486][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.731041][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.748176][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.768421][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.804207][ T3587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.838594][ T5810] veth0_macvtap: entered promiscuous mode [ 109.865809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.866594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.001398][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.001420][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.045786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.152644][ T5810] veth1_macvtap: entered promiscuous mode [ 110.401313][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.487923][ T5920] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.530339][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.638085][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.638108][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.674534][ T3587] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.680259][ T3587] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.727426][ T3587] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.765570][ T3587] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.017312][ T5925] capability: warning: `syz.1.2' uses 32-bit capabilities (legacy support in use) [ 111.120697][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.120720][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.583725][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.583748][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.635782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.941560][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.941584][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.735795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.015768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.415802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.416080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.421305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.975902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.553689][ T5997] Zero length message leads to an empty skb [ 124.228384][ T6016] netlink: 80 bytes leftover after parsing attributes in process `syz.4.20'. [ 124.228585][ T6016] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 125.036236][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.291726][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.291751][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 125.291770][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 125.291786][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.291818][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.291834][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.654028][ T9] usb 5-1: config 0 descriptor?? [ 126.158760][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 126.158858][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 126.381553][ T9] usb 5-1: USB disconnect, device number 2 [ 131.281031][ T6068] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 134.330628][ T6084] : entered promiscuous mode [ 136.211781][ T37] audit: type=1326 audit(1767693021.672:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6083 comm="syz.3.34" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75a42ef749 code=0x0 [ 137.156180][ T6091] openvswitch: netlink: IP tunnel dst address not specified [ 138.926771][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.939599][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.941617][ T6108] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 141.615774][ T6141] netlink: 'syz.1.50': attribute type 3 has an invalid length. [ 141.635166][ T6141] netlink: 'syz.1.50': attribute type 3 has an invalid length. [ 142.408240][ T5807] Bluetooth: hci4: link tx timeout [ 142.408514][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.465847][ T6172] ======================================================= [ 144.465847][ T6172] WARNING: The mand mount option has been deprecated and [ 144.465847][ T6172] and is ignored by this kernel. Remove the mand [ 144.465847][ T6172] option from the mount to silence this warning. [ 144.465847][ T6172] ======================================================= [ 144.468600][ T6172] overlayfs: missing 'lowerdir' [ 144.943405][ T5807] Bluetooth: hci4: command 0x0406 tx timeout [ 145.562712][ T6179] syz.3.61 (6179) used greatest stack depth: 17824 bytes left [ 146.289398][ T6195] vlan2: entered allmulticast mode [ 146.289421][ T6195] bond_slave_1: entered allmulticast mode [ 152.369138][ T6234] syz.2.76 (6234): drop_caches: 2 [ 153.497322][ T6245] 9p: Bad value for 'wfdno' [ 154.299995][ T6254] netlink: 104 bytes leftover after parsing attributes in process `syz.4.85'. [ 156.290799][ T6275] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.231256][ T6289] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 157.273839][ T6289] bond1 (unregistering): Released all slaves [ 158.728274][ T6304] syzkaller0: entered promiscuous mode [ 158.728304][ T6304] syzkaller0: entered allmulticast mode [ 160.333354][ T6330] overlayfs: overlapping lowerdir path [ 165.319652][ T6369] overlayfs: overlapping lowerdir path [ 166.477910][ T6381] capability: warning: `syz.0.129' uses deprecated v2 capabilities in a way that may be insecure [ 166.568706][ T6385] warning: `syz.2.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 170.275249][ T6395] syz.4.128 (6395): drop_caches: 2 [ 171.806785][ T6415] overlayfs: overlapping lowerdir path [ 172.258833][ T6423] netlink: 'syz.1.143': attribute type 39 has an invalid length. [ 172.545645][ T6432] 9p: Bad value for 'wfdno' [ 172.710369][ T6427] netlink: 128 bytes leftover after parsing attributes in process `syz.0.146'. [ 172.710399][ T6427] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 173.162819][ T6446] overlayfs: overlapping lowerdir path [ 173.327030][ T6451] 9p: Bad value for 'wfdno' [ 176.274520][ T6485] syzkaller1: entered promiscuous mode [ 176.274549][ T6485] syzkaller1: entered allmulticast mode [ 180.421428][ T6496] Set syz1 is full, maxelem 65536 reached [ 181.968323][ T6534] overlayfs: overlapping lowerdir path [ 186.504397][ T6599] overlayfs: missing 'lowerdir' [ 189.562106][ T6661] overlayfs: missing 'lowerdir' [ 190.105484][ T6630] syz.2.216 (6630) used greatest stack depth: 17784 bytes left [ 190.285985][ T6637] syz.2.216 (6637) used greatest stack depth: 16504 bytes left [ 190.346292][ T6668] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 190.346339][ T6668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.626327][ T6714] netlink: 'syz.3.237': attribute type 3 has an invalid length. [ 191.630118][ T6714] netlink: 'syz.3.237': attribute type 3 has an invalid length. [ 192.968173][ T6731] overlayfs: missing 'lowerdir' [ 193.695186][ T6729] vlan1: entered promiscuous mode [ 193.695448][ T6729] vlan1: entered allmulticast mode [ 193.695464][ T6729] veth0_vlan: entered allmulticast mode [ 195.493615][ T6776] netlink: 'syz.2.252': attribute type 3 has an invalid length. [ 195.497802][ T6776] netlink: 'syz.2.252': attribute type 3 has an invalid length. [ 196.896343][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.264'. [ 196.896384][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.264'. [ 196.975522][ T6800] team0: entered promiscuous mode [ 196.975547][ T6800] team_slave_0: entered promiscuous mode [ 196.976095][ T6800] team_slave_1: entered promiscuous mode [ 197.030536][ T6800] bond0: entered promiscuous mode [ 197.030560][ T6800] bond_slave_0: entered promiscuous mode [ 197.030837][ T6800] bond_slave_1: entered promiscuous mode [ 197.088739][ T6800] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 197.119600][ T6800] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 198.028052][ T6830] overlayfs: missing 'lowerdir' [ 199.613048][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.613155][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.743521][ T62] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 199.991717][ T6856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.285'. [ 199.991774][ T6856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.285'. [ 200.048165][ T6856] gretap0: entered promiscuous mode [ 200.131838][ T6856] gretap0: left promiscuous mode [ 200.810573][ T6877] overlayfs: missing 'lowerdir' [ 203.108773][ T6908] netlink: 'syz.1.303': attribute type 39 has an invalid length. [ 203.297166][ T6916] netlink: 104 bytes leftover after parsing attributes in process `syz.0.305'. [ 203.629893][ T6926] overlayfs: missing 'lowerdir' [ 204.239801][ T6932] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 204.333085][ T6932] bond1: entered promiscuous mode [ 204.344911][ T6932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.832595][ T6934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.833198][ T6934] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 204.833221][ T6934] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 204.846245][ T6934] bond1: (slave ip6gre1): making interface the new active one [ 204.846432][ T6934] ip6gre1: entered promiscuous mode [ 204.873092][ T6934] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 204.889387][ T6951] netlink: 'syz.0.318': attribute type 10 has an invalid length. [ 204.889404][ T6951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.318'. [ 205.072582][ T6955] netlink: 104 bytes leftover after parsing attributes in process `syz.4.320'. [ 205.075387][ T6951] team0: Port device geneve0 added [ 205.134944][ T6953] netlink: 'syz.1.319': attribute type 39 has an invalid length. [ 205.754255][ T6975] overlayfs: overlapping lowerdir path [ 205.754374][ T6977] netlink: 532 bytes leftover after parsing attributes in process `syz.0.329'. [ 206.200046][ T6983] netlink: 104 bytes leftover after parsing attributes in process `syz.0.331'. [ 208.838767][ T7008] netlink: 532 bytes leftover after parsing attributes in process `syz.2.341'. [ 209.052108][ T7013] netlink: 104 bytes leftover after parsing attributes in process `syz.1.344'. [ 210.408524][ T7036] netlink: 532 bytes leftover after parsing attributes in process `syz.0.354'. [ 210.547390][ T7039] netlink: 104 bytes leftover after parsing attributes in process `syz.4.356'. [ 210.602024][ T7043] syz.0.357 uses obsolete (PF_INET,SOCK_PACKET) [ 212.234675][ T7069] netlink: 104 bytes leftover after parsing attributes in process `syz.1.369'. [ 216.592465][ T7100] netlink: 104 bytes leftover after parsing attributes in process `syz.3.380'. [ 222.578025][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 222.578066][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 222.578092][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 222.631682][ T7145] netlink: 104 bytes leftover after parsing attributes in process `syz.3.393'. [ 222.651636][ T7144] Bluetooth: hci2: command 0x0406 tx timeout [ 225.679683][ T7184] netlink: 104 bytes leftover after parsing attributes in process `syz.2.405'. [ 226.396194][ T7201] netlink: 'syz.3.412': attribute type 39 has an invalid length. [ 226.669657][ T7203] mmap: syz.0.410 (7203) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 227.871018][ T7221] netlink: 104 bytes leftover after parsing attributes in process `syz.2.419'. [ 229.671218][ T7252] netlink: 104 bytes leftover after parsing attributes in process `syz.4.432'. [ 229.914021][ T7260] netlink: 'syz.4.437': attribute type 39 has an invalid length. [ 230.889457][ T7278] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 231.108024][ T7288] netlink: 104 bytes leftover after parsing attributes in process `syz.4.447'. [ 231.111106][ T7278] bond1: entered promiscuous mode [ 231.112820][ T7278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.959098][ T7316] netlink: 104 bytes leftover after parsing attributes in process `syz.0.459'. [ 234.490355][ T7334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.461'. [ 234.490383][ T7334] openvswitch: netlink: Flow key attr not present in new flow. [ 235.222270][ T7349] netlink: 104 bytes leftover after parsing attributes in process `syz.0.470'. [ 235.816866][ T7363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.476'. [ 235.816893][ T7363] openvswitch: netlink: Flow key attr not present in new flow. [ 235.952312][ T7367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.478'. [ 235.952354][ T7367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.478'. [ 236.551129][ T7376] netlink: 104 bytes leftover after parsing attributes in process `syz.2.482'. [ 238.163634][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.493'. [ 238.163675][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.493'. [ 238.239824][ T7406] team0: entered promiscuous mode [ 238.239848][ T7406] team_slave_0: entered promiscuous mode [ 238.240117][ T7406] team_slave_1: entered promiscuous mode [ 238.290011][ T7406] bond0: entered promiscuous mode [ 238.290037][ T7406] bond_slave_0: entered promiscuous mode [ 238.290433][ T7406] bond_slave_1: entered promiscuous mode [ 238.293094][ T7406] debugfs: 'hsr1' already exists in 'hsr' [ 238.293124][ T7406] Cannot create hsr debugfs directory [ 238.293986][ T7406] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 240.789467][ T7458] Bluetooth: MGMT ver 1.23 [ 247.266720][ T7543] overlayfs: failed to resolve './file0': -2 [ 249.515459][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880314fcc00: rx timeout, send abort [ 250.549265][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031196c00: rx timeout, send abort [ 251.049360][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031196c00: abort rx timeout. Force session deactivation [ 251.223498][ T7587] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 253.963118][ T7621] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.569'. [ 257.452065][ T5117] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 260.218952][ T7682] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 261.053124][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.053231][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.467504][ T5117] Bluetooth: hci3: command 0x0406 tx timeout [ 263.486532][ T7737] No control pipe specified [ 264.998801][ T7756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.617'. [ 264.998965][ T7756] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 268.929718][ T7777] No control pipe specified [ 269.349163][ T7785] netlink: 64 bytes leftover after parsing attributes in process `syz.1.630'. [ 269.817574][ T7787] overlayfs: workdir and upperdir must reside under the same mount [ 272.961306][ T7816] No control pipe specified [ 277.029128][ T7846] netlink: 48 bytes leftover after parsing attributes in process `syz.3.649'. [ 278.380278][ T7871] netlink: 52 bytes leftover after parsing attributes in process `syz.3.659'. [ 279.746392][ T7885] IPVS: length: 103 != 8 [ 279.799880][ T7887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.660'. [ 279.799911][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 280.638610][ T7887] bond2: entered promiscuous mode [ 283.025971][ T7933] netlink: 64 bytes leftover after parsing attributes in process `syz.4.676'. [ 288.204681][ T7986] netlink: 64 bytes leftover after parsing attributes in process `syz.0.692'. [ 290.474445][ T5872] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 290.836359][ T5872] usb 2-1: device descriptor read/64, error -71 [ 291.095878][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 291.278180][ T5872] usb 2-1: device descriptor read/64, error -71 [ 291.594730][ T5872] usb usb2-port1: attempt power cycle [ 294.825801][ T5872] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 298.538383][ T5872] usb 2-1: device descriptor read/8, error -71 [ 305.082711][ T8108] netlink: 160 bytes leftover after parsing attributes in process `syz.4.730'. [ 305.082740][ T8108] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 308.920685][ T8149] netlink: 'syz.2.745': attribute type 1 has an invalid length. [ 311.553478][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.751'. [ 311.553521][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.751'. [ 313.228495][ T5807] Bluetooth: hci1: unexpected event for opcode 0x0c1c [ 320.854020][ T8294] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 322.703628][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.703702][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.976590][ T8295] netlink: 'syz.0.798': attribute type 4 has an invalid length. [ 324.275425][ T8329] netlink: 'syz.3.810': attribute type 1 has an invalid length. [ 326.974919][ T8350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.816'. [ 326.974961][ T8350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.816'. [ 329.218056][ T8368] netlink: 'syz.4.821': attribute type 1 has an invalid length. [ 331.662058][ T8383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.822'. [ 331.662088][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 331.865895][ T8383] bond2: entered promiscuous mode [ 339.531698][ T8435] netlink: 28 bytes leftover after parsing attributes in process `syz.4.837'. [ 339.531742][ T8435] netlink: 28 bytes leftover after parsing attributes in process `syz.4.837'. [ 344.176536][ T5807] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 344.588531][ T8491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.860'. [ 344.588562][ T8491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.860'. [ 344.595039][ T8491] bond0: entered promiscuous mode [ 344.595056][ T8491] bond_slave_0: entered promiscuous mode [ 344.595235][ T8491] bond_slave_1: entered promiscuous mode [ 345.512198][ T8491] bond0: left promiscuous mode [ 345.512224][ T8491] bond_slave_0: left promiscuous mode [ 345.512508][ T8491] bond_slave_1: left promiscuous mode [ 349.973384][ T8541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.880'. [ 349.973424][ T8541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.880'. [ 349.998013][ T8541] bond0: entered promiscuous mode [ 349.998039][ T8541] bond_slave_0: entered promiscuous mode [ 349.998292][ T8541] bond_slave_1: entered promiscuous mode [ 350.319548][ T8541] bond0: left promiscuous mode [ 350.319576][ T8541] bond_slave_0: left promiscuous mode [ 350.319831][ T8541] bond_slave_1: left promiscuous mode [ 352.931905][ T8565] vxcan1: entered promiscuous mode [ 358.366396][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.901'. [ 358.366438][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.901'. [ 358.412368][ T8605] bond0: entered promiscuous mode [ 358.412394][ T8605] bond_slave_0: entered promiscuous mode [ 358.412659][ T8605] bond_slave_1: entered promiscuous mode [ 358.689465][ T8605] bond0: left promiscuous mode [ 358.689500][ T8605] bond_slave_0: left promiscuous mode [ 358.689772][ T8605] bond_slave_1: left promiscuous mode [ 360.177474][ T8628] netlink: 68 bytes leftover after parsing attributes in process `syz.3.911'. [ 362.074242][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.920'. [ 362.074294][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.920'. [ 362.160184][ T8647] bond0: entered promiscuous mode [ 362.160217][ T8647] bond_slave_0: entered promiscuous mode [ 362.160470][ T8647] bond_slave_1: entered promiscuous mode [ 362.416971][ T8647] bond0: left promiscuous mode [ 362.416999][ T8647] bond_slave_0: left promiscuous mode [ 362.417365][ T8647] bond_slave_1: left promiscuous mode [ 363.528085][ T8660] netlink: 68 bytes leftover after parsing attributes in process `syz.3.924'. [ 369.470179][ T8711] netlink: 68 bytes leftover after parsing attributes in process `syz.2.939'. [ 372.211498][ T8739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.948'. [ 372.211556][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 373.022306][ T8739] bond2: entered promiscuous mode [ 375.056825][ T7893] ------------[ cut here ]------------ [ 375.056839][ T7893] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 375.056859][ T7893] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x39a/0x5c0, CPU#0: kworker/0:11/7893 [ 375.056905][ T7893] Modules linked in: [ 375.056944][ T7893] CPU: 0 UID: 0 PID: 7893 Comm: kworker/0:11 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 375.056982][ T7893] Tainted: [L]=SOFTLOCKUP [ 375.056992][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.057010][ T7893] Workqueue: events drm_fb_helper_damage_work [ 375.057042][ T7893] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 375.057062][ T7893] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba cb f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 375.057077][ T7893] RSP: 0018:ffffc9001cdcf860 EFLAGS: 00010246 [ 375.057091][ T7893] RAX: 1ffff110282e8400 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 375.057103][ T7893] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 375.057116][ T7893] RBP: ffffc9001cdcf948 R08: 0000000000000000 R09: 0000000000000000 [ 375.057127][ T7893] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 375.057140][ T7893] R13: ffff888141742000 R14: 1ffff920039b9f10 R15: ffffffff8b569b80 [ 375.057153][ T7893] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 375.057167][ T7893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.057178][ T7893] CR2: 00007fd1b7d53f98 CR3: 000000005c8da000 CR4: 00000000003526f0 [ 375.057193][ T7893] Call Trace: [ 375.057208][ T7893] [ 375.057221][ T7893] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 375.057247][ T7893] ? rt_spin_unlock+0x150/0x200 [ 375.057274][ T7893] ? __pfx_autoremove_wake_function+0x10/0x10 [ 375.057299][ T7893] ? rt_spin_unlock+0x161/0x200 [ 375.057326][ T7893] ? drm_vblank_get+0x147/0x260 [ 375.057347][ T7893] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 375.057379][ T7893] drm_fb_helper_damage_work+0xc9/0x650 [ 375.057403][ T7893] ? process_scheduled_works+0x9ef/0x1770 [ 375.057433][ T7893] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 375.057463][ T7893] ? process_scheduled_works+0x9ef/0x1770 [ 375.057486][ T7893] ? process_scheduled_works+0x9ef/0x1770 [ 375.057512][ T7893] process_scheduled_works+0xad1/0x1770 [ 375.057568][ T7893] ? __pfx_process_scheduled_works+0x10/0x10 [ 375.057587][ T7893] ? do_raw_spin_lock+0x121/0x290 [ 375.057627][ T7893] worker_thread+0x8a0/0xda0 [ 375.057658][ T7893] ? __kthread_parkme+0x7b/0x200 [ 375.057688][ T7893] kthread+0x711/0x8a0 [ 375.057715][ T7893] ? __pfx_worker_thread+0x10/0x10 [ 375.057734][ T7893] ? __pfx_kthread+0x10/0x10 [ 375.057756][ T7893] ? rt_spin_unlock+0x150/0x200 [ 375.057784][ T7893] ? rt_spin_unlock+0x161/0x200 [ 375.057805][ T7893] ? __pfx_kthread+0x10/0x10 [ 375.057832][ T7893] ret_from_fork+0x510/0xa50 [ 375.057855][ T7893] ? __pfx_ret_from_fork+0x10/0x10 [ 375.057872][ T7893] ? __switch_to+0xc9e/0x1480 [ 375.057905][ T7893] ? __pfx_kthread+0x10/0x10 [ 375.057932][ T7893] ret_from_fork_asm+0x1a/0x30 [ 375.057976][ T7893] [ 375.057999][ T7893] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 375.058016][ T7893] CPU: 0 UID: 0 PID: 7893 Comm: kworker/0:11 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 375.058039][ T7893] Tainted: [L]=SOFTLOCKUP [ 375.058045][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.058056][ T7893] Workqueue: events drm_fb_helper_damage_work [ 375.058077][ T7893] Call Trace: [ 375.058084][ T7893] [ 375.058091][ T7893] vpanic+0x1e0/0x670 [ 375.058121][ T7893] panic+0xb9/0xc0 [ 375.058147][ T7893] ? __pfx_panic+0x10/0x10 [ 375.058188][ T7893] ? ret_from_fork_asm+0x1a/0x30 [ 375.058226][ T7893] __warn+0x317/0x4b0 [ 375.058261][ T7893] ? drm_wait_one_vblank+0x39a/0x5c0 [ 375.058289][ T7893] ? drm_wait_one_vblank+0x39a/0x5c0 [ 375.058311][ T7893] __report_bug+0x288/0x500 [ 375.058345][ T7893] ? drm_wait_one_vblank+0x39a/0x5c0 [ 375.058373][ T7893] ? __pfx___report_bug+0x10/0x10 [ 375.058422][ T7893] report_bug_entry+0x19a/0x290 [ 375.058453][ T7893] ? drm_wait_one_vblank+0x587/0x5c0 [ 375.058471][ T7893] ? drm_wait_one_vblank+0x58c/0x5c0 [ 375.058491][ T7893] handle_bug+0xca/0x200 [ 375.058515][ T7893] exc_invalid_op+0x1a/0x50 [ 375.058539][ T7893] asm_exc_invalid_op+0x1a/0x20 [ 375.058560][ T7893] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 375.058584][ T7893] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ba cb f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 375.058602][ T7893] RSP: 0018:ffffc9001cdcf860 EFLAGS: 00010246 [ 375.058620][ T7893] RAX: 1ffff110282e8400 RBX: ffffffff8ee5b070 RCX: 0000000000000000 [ 375.058636][ T7893] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5b070 [ 375.058652][ T7893] RBP: ffffc9001cdcf948 R08: 0000000000000000 R09: 0000000000000000 [ 375.058665][ T7893] R10: dffffc0000000000 R11: fffffbfff1db66ef R12: ffffffff8b584ca0 [ 375.058681][ T7893] R13: ffff888141742000 R14: 1ffff920039b9f10 R15: ffffffff8b569b80 [ 375.058722][ T7893] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 375.058743][ T7893] ? rt_spin_unlock+0x150/0x200 [ 375.058772][ T7893] ? __pfx_autoremove_wake_function+0x10/0x10 [ 375.058802][ T7893] ? rt_spin_unlock+0x161/0x200 [ 375.058836][ T7893] ? drm_vblank_get+0x147/0x260 [ 375.058862][ T7893] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 375.058899][ T7893] drm_fb_helper_damage_work+0xc9/0x650 [ 375.058928][ T7893] ? process_scheduled_works+0x9ef/0x1770 [ 375.058957][ T7893] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 375.058987][ T7893] ? process_scheduled_works+0x9ef/0x1770 [ 375.059010][ T7893] ? process_scheduled_works+0x9ef/0x1770 [ 375.059036][ T7893] process_scheduled_works+0xad1/0x1770 [ 375.059093][ T7893] ? __pfx_process_scheduled_works+0x10/0x10 [ 375.059116][ T7893] ? do_raw_spin_lock+0x121/0x290 [ 375.059159][ T7893] worker_thread+0x8a0/0xda0 [ 375.059197][ T7893] ? __kthread_parkme+0x7b/0x200 [ 375.059231][ T7893] kthread+0x711/0x8a0 [ 375.059273][ T7893] ? __pfx_worker_thread+0x10/0x10 [ 375.059298][ T7893] ? __pfx_kthread+0x10/0x10 [ 375.059325][ T7893] ? rt_spin_unlock+0x150/0x200 [ 375.059358][ T7893] ? rt_spin_unlock+0x161/0x200 [ 375.059383][ T7893] ? __pfx_kthread+0x10/0x10 [ 375.059415][ T7893] ret_from_fork+0x510/0xa50 [ 375.059442][ T7893] ? __pfx_ret_from_fork+0x10/0x10 [ 375.059462][ T7893] ? __switch_to+0xc9e/0x1480 [ 375.059501][ T7893] ? __pfx_kthread+0x10/0x10 [ 375.059533][ T7893] ret_from_fork_asm+0x1a/0x30 [ 375.059584][ T7893] [ 375.060196][ T7893] Kernel Offset: disabled