last executing test programs: 1m5.98467967s ago: executing program 2 (id=3): socket$netlink(0x10, 0x3, 0x4) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x66a42, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) open(&(0x7f00000001c0)='./file0\x00', 0x48afd, 0x180) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x103000) open$dir(&(0x7f0000000080)='./file0\x00', 0x28080, 0x108) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x1ff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m1.2437056s ago: executing program 2 (id=20): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000640)=""/4096, 0x19fb8}], 0x1) 53.686962292s ago: executing program 2 (id=28): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) 45.684694448s ago: executing program 2 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 45.590377735s ago: executing program 2 (id=39): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) msgget$private(0x0, 0x790) close(r0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r4, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x4}, 0x1c) 44.088768482s ago: executing program 2 (id=41): fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d00000000"], 0x254}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x19) fcntl$setlease(r5, 0x400, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) link(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file2\x00') unlink(&(0x7f00000001c0)='./file0/file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc06c4124, &(0x7f0000000080)) 29.442767044s ago: executing program 4 (id=56): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000640)=""/4096, 0x19fb8}], 0x1) 24.458985961s ago: executing program 32 (id=41): fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d00000000"], 0x254}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x19) fcntl$setlease(r5, 0x400, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) link(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file2\x00') unlink(&(0x7f00000001c0)='./file0/file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc06c4124, &(0x7f0000000080)) 24.138954584s ago: executing program 4 (id=62): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x9c340, 0x6db8a9a1ff80d21a) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) syz_io_uring_setup(0x6fb2, 0x0, &(0x7f0000000100), 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x26004808) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x80) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) 18.495932622s ago: executing program 4 (id=65): socket(0x10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x6e32, &(0x7f0000000580)={0x0, 0x4, 0x800, 0xfffffffa, 0x2cc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x5, 0x1}) fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000010008500000085000400"/40], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendto$inet6(r4, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) 17.402968433s ago: executing program 1 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 14.707827687s ago: executing program 3 (id=70): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) setresuid(0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000a00)={0x0, 0x9, 0x0, [0x0, 0x4, 0x100000000, 0x9, 0x81], [0xfff, 0xffffffffffffffff, 0x8, 0x4, 0x4, 0x28, 0x0, 0x0, 0x6, 0x12aa00000000000, 0xd, 0x8, 0xffffffffffffd8fe, 0x81, 0x6, 0x1ff, 0x6f3, 0x7, 0x9, 0xb, 0x503f879a, 0x40, 0x400, 0x7, 0x894b, 0x8, 0xbd, 0x1, 0x0, 0x8, 0x9, 0x9, 0x4f, 0x1, 0x2, 0x5, 0x9, 0xfffffffffffffffe, 0xf, 0x7, 0x8, 0xe, 0x101, 0x7, 0x80, 0x101, 0xffffffffffffffff, 0x0, 0x40000000000004, 0x8000, 0x9, 0x3, 0x65, 0x5d2, 0x9, 0x6, 0x3, 0x6, 0x1, 0x5, 0x38e, 0x993, 0x800, 0x48, 0x1ff, 0x21, 0xfffffffffffff801, 0x46b7, 0x9, 0x4, 0x1, 0x3, 0x10000, 0x10000006, 0x8, 0x5, 0xbc, 0x45, 0xff, 0xfffffffffffffffb, 0x8, 0x1000, 0x4, 0x0, 0x73e1, 0x9, 0x101, 0x5, 0x974, 0x1, 0x8, 0x82e, 0x677, 0x2f75ac38, 0x9, 0x4, 0xa, 0xe, 0x7, 0x7, 0xfffffffffffffff9, 0x3ff, 0x4, 0x40000, 0x8001, 0xb8b, 0x3, 0x9b, 0x1b, 0xc0, 0x80, 0x6, 0x8000000080000000, 0xff, 0x8, 0x80, 0xfffffffffffff801, 0xff, 0xffffffff00000001, 0x3, 0xa4c]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/147, 0x93) 14.60415731s ago: executing program 0 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x0, &(0x7f0000000400)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_complete(0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000038c0)=""/4109, 0x100a}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2, 0x0, 0xfffffffffffffc68}}], 0x1, 0x142, 0x0) statfs(0x0, &(0x7f0000000540)=""/194) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) 13.501743082s ago: executing program 3 (id=72): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/862], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r3, 0x3516, 0xa00100, 0x0, 0x0, 0x0) 13.294288232s ago: executing program 1 (id=73): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x9, 0x62ca, 0x20, 0x0, 0x4, 0xffffffffffffffff, 0x53, 0xecbc}, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, 0xffffffffffffffff, 0xb}}, 0x48) 11.527181031s ago: executing program 1 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000001c00000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa"], 0xb0}, 0x1, 0x7}, 0x0) syz_open_dev$loop(0x0, 0x2, 0x60500) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000380)={{0x6, @null, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) r6 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x48}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) 10.527925055s ago: executing program 0 (id=75): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc044560f, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000400)) 9.141946327s ago: executing program 3 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000640)=""/4096, 0x19fb8}], 0x1) 8.887979641s ago: executing program 1 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.759393334s ago: executing program 0 (id=78): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x3000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 5.983991021s ago: executing program 0 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 4.894476968s ago: executing program 3 (id=80): fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d00000000"], 0x254}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) link(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file2\x00') unlink(&(0x7f00000001c0)='./file0/file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') io_uring_setup(0x1694, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[], 0x10) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc06c4124, &(0x7f0000000080)) 4.765297498s ago: executing program 1 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) socket$alg(0x26, 0x5, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x4, 0x7, 0x3}) 4.605631469s ago: executing program 4 (id=82): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0) r2 = dup(r1) fallocate(r2, 0x10, 0x0, 0x1062200) 3.328350415s ago: executing program 1 (id=83): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r3, &(0x7f0000001180)=""/4096, 0x1000) 3.324824467s ago: executing program 3 (id=84): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x9, 0x62ca, 0x20, 0x0, 0x4, 0xffffffffffffffff, 0x53, 0xecbc}, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, 0xffffffffffffffff, 0xb}}, 0x48) 3.32339452s ago: executing program 4 (id=85): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000094003e8500000007000040950000000000", @ANYRESOCT=r0, @ANYRESOCT, @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec6106000440000400000500070006"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_socket_connect_nvme_tcp() r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, 0x0, &(0x7f0000003b00)) openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) 2.960931442s ago: executing program 0 (id=86): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x9, 0x62ca, 0x20, 0x0, 0x4, 0xffffffffffffffff, 0x53, 0xecbc}, 0x0, 0x0, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x7, r0}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000003, &(0x7f0000000000), 0x111, 0x4}}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f0000000000)=0x20) 1.188272216s ago: executing program 3 (id=87): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc044560f, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000400)) 507.977598ms ago: executing program 0 (id=88): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x5}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)=@mmap={0x9, 0x8, 0x4, 0x1, 0x2, {0x0, 0x2710}, {0x5, 0x2faa1a2108da7a8f, 0x5, 0x81, 0x1, 0x3, "a62bba87"}, 0x6, 0x1, {}, 0x7, 0x0, r3}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=89): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000640)=""/4096, 0x19fb8}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. [ 75.303134][ T5787] cgroup: Unknown subsys name 'net' [ 75.514087][ T5787] cgroup: Unknown subsys name 'cpuset' [ 75.589917][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.194669][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.731438][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.737468][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.758251][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.758779][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.773912][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.777311][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.778635][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.789032][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.819907][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.821548][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.825927][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.827483][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.827887][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.838214][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.845161][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.846046][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.851853][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.854398][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.855621][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.887326][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.920954][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.925218][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.926025][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.927212][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.927993][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.659515][ T827] cfg80211: failed to load regulatory.db [ 81.850586][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 81.861950][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 81.963908][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 82.033036][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 82.430411][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 82.921674][ T5811] Bluetooth: hci3: command tx timeout [ 82.922094][ T61] Bluetooth: hci2: command tx timeout [ 82.922510][ T61] Bluetooth: hci1: command tx timeout [ 82.924045][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.924793][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.925118][ T5798] bridge_slave_0: entered allmulticast mode [ 82.926636][ T5798] bridge_slave_0: entered promiscuous mode [ 82.931029][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.931144][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.931291][ T5800] bridge_slave_0: entered allmulticast mode [ 82.933599][ T5800] bridge_slave_0: entered promiscuous mode [ 82.999490][ T5815] Bluetooth: hci4: command tx timeout [ 82.999709][ T5811] Bluetooth: hci0: command tx timeout [ 83.111669][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.111747][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.111874][ T5798] bridge_slave_1: entered allmulticast mode [ 83.113261][ T5798] bridge_slave_1: entered promiscuous mode [ 83.121026][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.121160][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.121312][ T5800] bridge_slave_1: entered allmulticast mode [ 83.123652][ T5800] bridge_slave_1: entered promiscuous mode [ 83.127433][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.127571][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.127722][ T5805] bridge_slave_0: entered allmulticast mode [ 83.131256][ T5805] bridge_slave_0: entered promiscuous mode [ 83.400277][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.400370][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.400517][ T5805] bridge_slave_1: entered allmulticast mode [ 83.401895][ T5805] bridge_slave_1: entered promiscuous mode [ 83.403019][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.403110][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.403208][ T5799] bridge_slave_0: entered allmulticast mode [ 83.404536][ T5799] bridge_slave_0: entered promiscuous mode [ 83.630195][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.630292][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.630414][ T5799] bridge_slave_1: entered allmulticast mode [ 83.631794][ T5799] bridge_slave_1: entered promiscuous mode [ 83.636807][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.722950][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.842097][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.912824][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.915434][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.150138][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.150297][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.150410][ T5797] bridge_slave_0: entered allmulticast mode [ 84.151824][ T5797] bridge_slave_0: entered promiscuous mode [ 84.252172][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.254833][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.321234][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.321424][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.321589][ T5797] bridge_slave_1: entered allmulticast mode [ 84.323269][ T5797] bridge_slave_1: entered promiscuous mode [ 84.442090][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.443988][ T5798] team0: Port device team_slave_0 added [ 84.512480][ T5800] team0: Port device team_slave_0 added [ 84.632467][ T5798] team0: Port device team_slave_1 added [ 84.692193][ T5800] team0: Port device team_slave_1 added [ 84.693920][ T5805] team0: Port device team_slave_0 added [ 84.845275][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.848149][ T5805] team0: Port device team_slave_1 added [ 84.942009][ T5799] team0: Port device team_slave_0 added [ 84.999801][ T5811] Bluetooth: hci3: command tx timeout [ 84.999831][ T5811] Bluetooth: hci2: command tx timeout [ 84.999847][ T5811] Bluetooth: hci1: command tx timeout [ 85.005164][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.079520][ T5815] Bluetooth: hci0: command tx timeout [ 85.079528][ T5811] Bluetooth: hci4: command tx timeout [ 85.452015][ T5799] team0: Port device team_slave_1 added [ 85.454596][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.454607][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.454620][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.641958][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.641974][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.641990][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.720941][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.720955][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.720968][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.820854][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.820870][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.820893][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.822159][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.822173][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.822196][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.969134][ T5797] team0: Port device team_slave_0 added [ 85.970236][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.970250][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.970273][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.981723][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.981739][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.981762][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.000377][ T5797] team0: Port device team_slave_1 added [ 86.002892][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.002906][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.002929][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.550581][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.550594][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.550608][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.636275][ T5798] hsr_slave_0: entered promiscuous mode [ 86.637348][ T5798] hsr_slave_1: entered promiscuous mode [ 86.690926][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.690942][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.690964][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.696256][ T5800] hsr_slave_0: entered promiscuous mode [ 86.697089][ T5800] hsr_slave_1: entered promiscuous mode [ 86.697816][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 86.697912][ T5800] Cannot create hsr debugfs directory [ 86.775309][ T5805] hsr_slave_0: entered promiscuous mode [ 86.776027][ T5805] hsr_slave_1: entered promiscuous mode [ 86.776586][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 86.776603][ T5805] Cannot create hsr debugfs directory [ 86.858166][ T5799] hsr_slave_0: entered promiscuous mode [ 86.858902][ T5799] hsr_slave_1: entered promiscuous mode [ 86.860167][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 86.860191][ T5799] Cannot create hsr debugfs directory [ 87.080682][ T5811] Bluetooth: hci1: command tx timeout [ 87.080708][ T5815] Bluetooth: hci2: command tx timeout [ 87.080731][ T5815] Bluetooth: hci3: command tx timeout [ 87.159541][ T61] Bluetooth: hci4: command tx timeout [ 87.159623][ T5811] Bluetooth: hci0: command tx timeout [ 87.514772][ T5797] hsr_slave_0: entered promiscuous mode [ 87.515544][ T5797] hsr_slave_1: entered promiscuous mode [ 87.516054][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 87.516073][ T5797] Cannot create hsr debugfs directory [ 88.576344][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.618397][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.653712][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.706803][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.800451][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.835377][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.857895][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.910434][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.058525][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.105389][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.157473][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.159820][ T61] Bluetooth: hci1: command tx timeout [ 89.159847][ T61] Bluetooth: hci2: command tx timeout [ 89.159880][ T5811] Bluetooth: hci3: command tx timeout [ 89.205825][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.240639][ T5811] Bluetooth: hci0: command tx timeout [ 89.240657][ T61] Bluetooth: hci4: command tx timeout [ 89.306866][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.329142][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.366006][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.422986][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.566655][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.568639][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.603685][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.641523][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.678899][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.768238][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.776374][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.807860][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.808850][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.844583][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.844734][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.886460][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.924275][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.924776][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.964492][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.964614][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.991998][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.064412][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.067493][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.115235][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.115437][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.172615][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.172786][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.180743][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.202459][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.223353][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.223554][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.263857][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.263990][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.362688][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.396247][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.396450][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.446293][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.446518][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.583995][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.697762][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.888330][ T5798] veth0_vlan: entered promiscuous mode [ 90.931907][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.936906][ T5798] veth1_vlan: entered promiscuous mode [ 91.168501][ T5798] veth0_macvtap: entered promiscuous mode [ 91.201752][ T5798] veth1_macvtap: entered promiscuous mode [ 91.207806][ T5805] veth0_vlan: entered promiscuous mode [ 91.226006][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.229139][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.267243][ T5805] veth1_vlan: entered promiscuous mode [ 91.296868][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.325528][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.365198][ T2999] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.371621][ T2999] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.391657][ T2999] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.398484][ T2999] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.523025][ T5805] veth0_macvtap: entered promiscuous mode [ 91.616543][ T5797] veth0_vlan: entered promiscuous mode [ 91.617055][ T5799] veth0_vlan: entered promiscuous mode [ 91.618407][ T5805] veth1_macvtap: entered promiscuous mode [ 91.650414][ T5800] veth0_vlan: entered promiscuous mode [ 91.694384][ T5797] veth1_vlan: entered promiscuous mode [ 91.702822][ T5799] veth1_vlan: entered promiscuous mode [ 91.727145][ T5800] veth1_vlan: entered promiscuous mode [ 91.756765][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.773062][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.773087][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.814061][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.863763][ T1018] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.868803][ T1018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.872280][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.872300][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.873094][ T1018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.886877][ T3448] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.074768][ T5799] veth0_macvtap: entered promiscuous mode [ 92.091183][ T5800] veth0_macvtap: entered promiscuous mode [ 92.093853][ T5797] veth0_macvtap: entered promiscuous mode [ 92.159605][ T5799] veth1_macvtap: entered promiscuous mode [ 92.184335][ T5800] veth1_macvtap: entered promiscuous mode [ 92.187856][ T5797] veth1_macvtap: entered promiscuous mode [ 92.269008][ T2144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.269028][ T2144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.317676][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.341502][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.407891][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.430552][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.454471][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.455529][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.455546][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.500014][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.500086][ T3448] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.549309][ T3448] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.592813][ T3448] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.625842][ T3448] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.630562][ T3448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.635081][ T3448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.637078][ T3448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.276483][ T3448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.305340][ T3448] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.386904][ T3448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.399540][ T3448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.438737][ T3448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.624224][ T5932] netlink: 300 bytes leftover after parsing attributes in process `syz.0.7'. [ 96.747102][ T5932] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 99.439871][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.439892][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.746646][ T5946] Bluetooth: MGMT ver 1.23 [ 99.786143][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.786163][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.949324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.959318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.969287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.979285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.989292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.999284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.009286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.019295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.320586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.419437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.531835][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.531858][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.927435][ T1273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.927455][ T1273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.013408][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.013428][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.306803][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.306823][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.126195][ T5971] netlink: 300 bytes leftover after parsing attributes in process `syz.3.16'. [ 104.210220][ T5972] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 105.219518][ T5982] netlink: 300 bytes leftover after parsing attributes in process `syz.0.12'. [ 105.377279][ T5982] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 115.539584][ T6028] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 115.960334][ T6032] netlink: 300 bytes leftover after parsing attributes in process `syz.1.27'. [ 116.035954][ T6033] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 123.947179][ T6063] No control pipe specified [ 128.983469][ T6089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.43'. [ 132.145977][ T6102] netlink: 300 bytes leftover after parsing attributes in process `syz.1.35'. [ 132.163449][ T6102] evm: overlay not supported [ 132.180329][ T6102] overlay: filesystem on ./file0 not supported as upperdir [ 133.052398][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.052490][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 152.546381][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.557170][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.567473][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.386713][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.396722][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.943218][ T6201] autofs: Bad value for 'fd' [ 156.679738][ T61] Bluetooth: hci5: command tx timeout [ 159.045604][ T61] Bluetooth: hci5: command tx timeout [ 161.729565][ T5811] Bluetooth: hci5: command tx timeout [ 163.834774][ T61] Bluetooth: hci5: command tx timeout [ 163.898111][ T6242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 163.898295][ T6242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 163.899748][ T6242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 163.899873][ T6242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 163.900307][ T6242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 163.900383][ T6242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 163.900802][ T6242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 163.900867][ T6242] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 163.900877][ T6242] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 164.695372][ T6189] chnl_net:caif_netlink_parms(): no params data found [ 165.313476][ T6258] netlink: 300 bytes leftover after parsing attributes in process `syz.3.80'. [ 165.438272][ T6258] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 166.532842][ T6269] autofs: Bad value for 'fd' [ 166.927183][ T1008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.966500][ T6156] ------------[ cut here ]------------ [ 169.966513][ T6156] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 169.966535][ T6156] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x39a/0x5c0, CPU#0: kworker/0:12/6156 [ 169.966576][ T6156] Modules linked in: [ 169.966612][ T6156] CPU: 0 UID: 0 PID: 6156 Comm: kworker/0:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 169.966632][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.966644][ T6156] Workqueue: events drm_fb_helper_damage_work [ 169.966669][ T6156] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 169.966689][ T6156] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 aa c3 f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 169.966703][ T6156] RSP: 0018:ffffc90005dc7860 EFLAGS: 00010246 [ 169.966726][ T6156] RAX: 1ffff110282f4600 RBX: ffffffff8ee5afc0 RCX: 0000000000000000 [ 169.966739][ T6156] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5afc0 [ 169.966752][ T6156] RBP: ffffc90005dc7948 R08: 0000000000000000 R09: 0000000000000000 [ 169.966764][ T6156] R10: dffffc0000000000 R11: fffffbfff1db66cf R12: ffffffff8b584ca0 [ 169.966778][ T6156] R13: ffff8881417a3000 R14: 1ffff92000bb8f10 R15: ffffffff8b569b80 [ 169.966791][ T6156] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 169.966806][ T6156] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.966819][ T6156] CR2: 000000110c36f067 CR3: 00000000353d0000 CR4: 00000000003526f0 [ 169.966834][ T6156] Call Trace: [ 169.966845][ T6156] [ 169.966859][ T6156] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 169.966877][ T6156] ? rt_spin_unlock+0x150/0x200 [ 169.966901][ T6156] ? __pfx_autoremove_wake_function+0x10/0x10 [ 169.966926][ T6156] ? rt_spin_unlock+0x161/0x200 [ 169.966951][ T6156] ? drm_vblank_get+0x147/0x260 [ 169.966971][ T6156] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 169.967008][ T6156] drm_fb_helper_damage_work+0x129/0x6e0 [ 169.967031][ T6156] ? process_scheduled_works+0x9ef/0x1770 [ 169.967053][ T6156] ? process_scheduled_works+0x9ef/0x1770 [ 169.967073][ T6156] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 169.967098][ T6156] ? process_scheduled_works+0x9ef/0x1770 [ 169.967116][ T6156] ? process_scheduled_works+0x9ef/0x1770 [ 169.967138][ T6156] process_scheduled_works+0xad1/0x1770 [ 169.967188][ T6156] ? __pfx_process_scheduled_works+0x10/0x10 [ 169.967205][ T6156] ? do_raw_spin_lock+0x121/0x290 [ 169.967243][ T6156] worker_thread+0x8a0/0xda0 [ 169.967277][ T6156] ? __kthread_parkme+0x7b/0x200 [ 169.967309][ T6156] kthread+0x711/0x8a0 [ 169.967335][ T6156] ? __pfx_worker_thread+0x10/0x10 [ 169.967355][ T6156] ? __pfx_kthread+0x10/0x10 [ 169.967375][ T6156] ? rt_spin_unlock+0x150/0x200 [ 169.967402][ T6156] ? rt_spin_unlock+0x161/0x200 [ 169.967422][ T6156] ? __pfx_kthread+0x10/0x10 [ 169.967447][ T6156] ret_from_fork+0x510/0xa50 [ 169.967469][ T6156] ? __pfx_ret_from_fork+0x10/0x10 [ 169.967487][ T6156] ? __switch_to+0xc9e/0x1480 [ 169.967516][ T6156] ? __pfx_kthread+0x10/0x10 [ 169.967540][ T6156] ret_from_fork_asm+0x1a/0x30 [ 169.967582][ T6156] [ 169.967596][ T6156] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 169.967609][ T6156] CPU: 0 UID: 0 PID: 6156 Comm: kworker/0:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 169.967629][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.967640][ T6156] Workqueue: events drm_fb_helper_damage_work [ 169.967659][ T6156] Call Trace: [ 169.967666][ T6156] [ 169.967673][ T6156] vpanic+0x1e0/0x670 [ 169.967700][ T6156] panic+0xb9/0xc0 [ 169.967729][ T6156] ? __pfx_panic+0x10/0x10 [ 169.967762][ T6156] ? ret_from_fork_asm+0x1a/0x30 [ 169.967791][ T6156] __warn+0x317/0x4b0 [ 169.967812][ T6156] ? drm_wait_one_vblank+0x39a/0x5c0 [ 169.967835][ T6156] ? drm_wait_one_vblank+0x39a/0x5c0 [ 169.967854][ T6156] __report_bug+0x288/0x500 [ 169.967873][ T6156] ? drm_wait_one_vblank+0x39a/0x5c0 [ 169.967899][ T6156] ? __pfx___report_bug+0x10/0x10 [ 169.967937][ T6156] report_bug_entry+0x19a/0x290 [ 169.967956][ T6156] ? drm_wait_one_vblank+0x587/0x5c0 [ 169.967973][ T6156] ? drm_wait_one_vblank+0x58c/0x5c0 [ 169.967991][ T6156] handle_bug+0xca/0x200 [ 169.968013][ T6156] exc_invalid_op+0x1a/0x50 [ 169.968034][ T6156] asm_exc_invalid_op+0x1a/0x20 [ 169.968051][ T6156] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 169.968070][ T6156] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 aa c3 f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 169.968084][ T6156] RSP: 0018:ffffc90005dc7860 EFLAGS: 00010246 [ 169.968098][ T6156] RAX: 1ffff110282f4600 RBX: ffffffff8ee5afc0 RCX: 0000000000000000 [ 169.968111][ T6156] RDX: ffffffff8b569b80 RSI: ffffffff8b584ca0 RDI: ffffffff8ee5afc0 [ 169.968125][ T6156] RBP: ffffc90005dc7948 R08: 0000000000000000 R09: 0000000000000000 [ 169.968136][ T6156] R10: dffffc0000000000 R11: fffffbfff1db66cf R12: ffffffff8b584ca0 [ 169.968149][ T6156] R13: ffff8881417a3000 R14: 1ffff92000bb8f10 R15: ffffffff8b569b80 [ 169.968185][ T6156] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 169.968203][ T6156] ? rt_spin_unlock+0x150/0x200 [ 169.968226][ T6156] ? __pfx_autoremove_wake_function+0x10/0x10 [ 169.968249][ T6156] ? rt_spin_unlock+0x161/0x200 [ 169.968275][ T6156] ? drm_vblank_get+0x147/0x260 [ 169.968297][ T6156] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 169.968325][ T6156] drm_fb_helper_damage_work+0x129/0x6e0 [ 169.968349][ T6156] ? process_scheduled_works+0x9ef/0x1770 [ 169.968370][ T6156] ? process_scheduled_works+0x9ef/0x1770 [ 169.968390][ T6156] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 169.968415][ T6156] ? process_scheduled_works+0x9ef/0x1770 [ 169.968433][ T6156] ? process_scheduled_works+0x9ef/0x1770 [ 169.968455][ T6156] process_scheduled_works+0xad1/0x1770 [ 169.968504][ T6156] ? __pfx_process_scheduled_works+0x10/0x10 [ 169.968522][ T6156] ? do_raw_spin_lock+0x121/0x290 [ 169.968558][ T6156] worker_thread+0x8a0/0xda0 [ 169.968592][ T6156] ? __kthread_parkme+0x7b/0x200 [ 169.968623][ T6156] kthread+0x711/0x8a0 [ 169.968649][ T6156] ? __pfx_worker_thread+0x10/0x10 [ 169.968669][ T6156] ? __pfx_kthread+0x10/0x10 [ 169.968694][ T6156] ? rt_spin_unlock+0x150/0x200 [ 169.968726][ T6156] ? rt_spin_unlock+0x161/0x200 [ 169.968747][ T6156] ? __pfx_kthread+0x10/0x10 [ 169.968771][ T6156] ret_from_fork+0x510/0xa50 [ 169.968793][ T6156] ? __pfx_ret_from_fork+0x10/0x10 [ 169.968810][ T6156] ? __switch_to+0xc9e/0x1480 [ 169.968839][ T6156] ? __pfx_kthread+0x10/0x10 [ 169.968863][ T6156] ret_from_fork_asm+0x1a/0x30 [ 169.968905][ T6156] [ 169.969300][ T6156] Kernel Offset: disabled