last executing test programs: 9.378997419s ago: executing program 0 (id=18): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) mmap$KVM_VCPU(&(0x7f0000a95000/0x2000)=nil, 0x0, 0x100000b, 0x22012, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000289000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000429000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mlock(&(0x7f0000ea4000/0xf000)=nil, 0xf000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000468000/0x4000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f00001b6000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil) read$FUSE(r1, &(0x7f0000005200)={0x2020}, 0x2020) 6.655904364s ago: executing program 0 (id=24): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda", 0x3}], 0x1) 6.655630248s ago: executing program 2 (id=25): io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 6.357089224s ago: executing program 3 (id=27): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) 6.296779752s ago: executing program 0 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) 5.148210153s ago: executing program 0 (id=31): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, 0x0) ioctl$TCXONC(r0, 0x4b3a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r5, 0x100000000) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6d6c55303b2b7f07) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key$keyring(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x7c) r9 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r6, 0x36) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 5.136133782s ago: executing program 3 (id=32): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267db", 0xc7}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.067662875s ago: executing program 1 (id=33): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x0, 0xe, 0x1, 0x200, &(0x7f0000000880)="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"}) 4.888190654s ago: executing program 2 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000900)={'syz1\x00', {0x8725, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x0, 0xfffffffe, 0x0, 0x4, 0x2, 0x28ad, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x3, 0x0, 0x20, 0x3, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x20004, 0x0, 0x0, 0x101, 0x2, 0xfffffffe], [0x10, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0xfffffffd, 0x800, 0x0, 0xfffffffc, 0x2, 0x1, 0x0, 0x3, 0x0, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x5, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x7, 0x3, 0xfffffffc], [0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0x2, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4, 0xfffffffe, 0x2af, 0x8, 0x9, 0x0, 0x0, 0x3, 0x0, 0x10001, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x2ff, 0x4000005, 0x0, 0x4, 0x2, 0x0, 0x40000000, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20e, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x1, 0x7fff, 0x0, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x40000003, 0x2, 0xfffffffe, 0x4, 0x3, 0x0, 0x0, 0x0, 0x5, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x5, 0x0, 0x0, 0x0, 0x8, 0x7, 0x8000, 0x0, 0x7fff, 0x80000002, 0x1000000, 0x0, 0x3]}, 0x45c) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r1, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 4.789344174s ago: executing program 2 (id=35): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r5, 0x81}, &(0x7f00000000c0)=0x8) 4.69777642s ago: executing program 3 (id=36): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000000)=0x7fff) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x60000800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) 3.66203307s ago: executing program 1 (id=37): unshare(0x2000400) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$getflags(r0, 0x401) 3.607114829s ago: executing program 2 (id=38): unshare(0x2c020400) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) 3.426749938s ago: executing program 1 (id=39): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140), 0x18) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r2, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) 3.308332442s ago: executing program 0 (id=40): gettid() socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x1fa, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x142) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) socket$l2tp6(0xa, 0x2, 0x73) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0xfffffff7, 0x84a8, 0x515f3157, 0x4, "78e1141009fd93233bce43f20613281f43d01f"}) write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 1.423399434s ago: executing program 1 (id=41): openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r0], 0x30}}, 0x94) 1.109354358s ago: executing program 3 (id=42): io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 1.109106489s ago: executing program 0 (id=43): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x201) listen(r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x81, @mcast2, 0xfffffffe}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000740)=0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3, 0x80000001, 0x30}, &(0x7f0000000180)=0xc) 1.108955564s ago: executing program 2 (id=44): r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40045506, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x8080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000005000000080001005d", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) 860.249424ms ago: executing program 1 (id=45): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3e, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x2, 0x7, 0x200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x3, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x200006, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x4, 0x3, 0x4, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) 750.389276ms ago: executing program 1 (id=46): r0 = fanotify_init(0x200, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) read(r0, 0x0, 0x0) 406.990857ms ago: executing program 3 (id=47): r0 = syz_open_dev$video(&(0x7f0000000080), 0x6, 0x80280) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000100)={0x8000, 0x2, 0x4, 0x2000, 0x9, {0x77359400}, {0x5, 0x1, 0x9, 0x84, 0xb4, 0x0, "78fac7fb"}, 0x4, 0x4, {}, 0x8}) 215.702µs ago: executing program 2 (id=48): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000000)=0x7fff) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x5, 0x0, &(0x7f0000000080)=0x272) 0s ago: executing program 3 (id=49): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 74.066034][ T5809] cgroup: Unknown subsys name 'net' [ 74.306365][ T5809] cgroup: Unknown subsys name 'cpuset' [ 74.362930][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.960374][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.201342][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.226659][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.240605][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.257556][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.273868][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.274674][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.275907][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.277690][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.278451][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.280334][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.284970][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.285329][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.287996][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.288725][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.298905][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.299790][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.309507][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.311887][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.312730][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.314709][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.098285][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 79.179917][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 79.231117][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 79.271095][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 79.397033][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.397201][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.397343][ T5819] bridge_slave_0: entered allmulticast mode [ 79.399781][ T5819] bridge_slave_0: entered promiscuous mode [ 79.443047][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.443269][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.443457][ T5819] bridge_slave_1: entered allmulticast mode [ 79.445410][ T5819] bridge_slave_1: entered promiscuous mode [ 79.527383][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.527583][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.527717][ T5822] bridge_slave_0: entered allmulticast mode [ 79.529418][ T5822] bridge_slave_0: entered promiscuous mode [ 79.584363][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.584560][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.584897][ T5822] bridge_slave_1: entered allmulticast mode [ 79.586492][ T5822] bridge_slave_1: entered promiscuous mode [ 79.595925][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.596246][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.596496][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.596706][ T5820] bridge_slave_0: entered allmulticast mode [ 79.600759][ T5820] bridge_slave_0: entered promiscuous mode [ 79.660047][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.660350][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.660520][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.660665][ T5820] bridge_slave_1: entered allmulticast mode [ 79.662974][ T5820] bridge_slave_1: entered promiscuous mode [ 79.666088][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.666420][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.666639][ T5821] bridge_slave_0: entered allmulticast mode [ 79.669635][ T5821] bridge_slave_0: entered promiscuous mode [ 79.732349][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.732650][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.732794][ T5821] bridge_slave_1: entered allmulticast mode [ 79.734510][ T5821] bridge_slave_1: entered promiscuous mode [ 79.744266][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.797405][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.799872][ T5819] team0: Port device team_slave_0 added [ 79.805910][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.844331][ T5819] team0: Port device team_slave_1 added [ 79.847426][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.850906][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.914139][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.916491][ T5822] team0: Port device team_slave_0 added [ 79.963297][ T5822] team0: Port device team_slave_1 added [ 79.964652][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.964660][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.964674][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.968303][ T5820] team0: Port device team_slave_0 added [ 80.031058][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.031067][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.031081][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.036246][ T5820] team0: Port device team_slave_1 added [ 80.040842][ T5821] team0: Port device team_slave_0 added [ 80.343903][ T5141] Bluetooth: hci1: command tx timeout [ 80.344105][ T5828] Bluetooth: hci3: command tx timeout [ 80.400031][ T5821] team0: Port device team_slave_1 added [ 80.401510][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.401520][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.401534][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.422477][ T5141] Bluetooth: hci2: command tx timeout [ 80.422649][ T5828] Bluetooth: hci0: command tx timeout [ 80.454501][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.454513][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.454536][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.459990][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.460001][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.460024][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.521985][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.522000][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.522023][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.525642][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.525654][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.525675][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.573435][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.573450][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.573479][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.588733][ T5819] hsr_slave_0: entered promiscuous mode [ 80.590707][ T5819] hsr_slave_1: entered promiscuous mode [ 80.694925][ T5822] hsr_slave_0: entered promiscuous mode [ 80.696025][ T5822] hsr_slave_1: entered promiscuous mode [ 80.696988][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 80.697065][ T5822] Cannot create hsr debugfs directory [ 80.763105][ T5820] hsr_slave_0: entered promiscuous mode [ 80.764211][ T5820] hsr_slave_1: entered promiscuous mode [ 80.765245][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 80.765267][ T5820] Cannot create hsr debugfs directory [ 80.808176][ T5821] hsr_slave_0: entered promiscuous mode [ 80.809350][ T5821] hsr_slave_1: entered promiscuous mode [ 80.810486][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 80.810508][ T5821] Cannot create hsr debugfs directory [ 81.710207][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.777338][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.780925][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.809031][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.811684][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.837581][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.858031][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.900041][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.001811][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.038883][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.043257][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.075202][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.077602][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.115721][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.145661][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.175660][ T5820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.297582][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.326264][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.330528][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.348137][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.359043][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.389127][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.411368][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.423993][ T5828] Bluetooth: hci3: command tx timeout [ 82.424019][ T5828] Bluetooth: hci1: command tx timeout [ 82.446462][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.503000][ T5828] Bluetooth: hci0: command tx timeout [ 82.503008][ T5141] Bluetooth: hci2: command tx timeout [ 82.568803][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.608830][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.618904][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.645312][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.663753][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.689172][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.694507][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.725435][ T5822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.806706][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.883768][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.905536][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.928398][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.928528][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.968691][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.968777][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.018350][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.049045][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.056990][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.057632][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.091261][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.091346][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.148829][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.171976][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.198469][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.198622][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.251009][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.251197][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.328597][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.373742][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.376163][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.470809][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.471472][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.734594][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.854674][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.074889][ T5819] veth0_vlan: entered promiscuous mode [ 84.114627][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.136911][ T5819] veth1_vlan: entered promiscuous mode [ 84.161198][ T5820] veth0_vlan: entered promiscuous mode [ 84.233682][ T5820] veth1_vlan: entered promiscuous mode [ 84.250561][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.335269][ T5819] veth0_macvtap: entered promiscuous mode [ 84.376434][ T5819] veth1_macvtap: entered promiscuous mode [ 84.405704][ T5821] veth0_vlan: entered promiscuous mode [ 84.422206][ T5820] veth0_macvtap: entered promiscuous mode [ 84.453018][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.454330][ T5820] veth1_macvtap: entered promiscuous mode [ 84.460799][ T5821] veth1_vlan: entered promiscuous mode [ 84.474134][ T5822] veth0_vlan: entered promiscuous mode [ 84.495989][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.504144][ T5141] Bluetooth: hci1: command tx timeout [ 84.504167][ T5828] Bluetooth: hci3: command tx timeout [ 84.548431][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.561922][ T5822] veth1_vlan: entered promiscuous mode [ 84.570843][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.576136][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.582465][ T5828] Bluetooth: hci0: command tx timeout [ 84.582583][ T5828] Bluetooth: hci2: command tx timeout [ 84.597546][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.619103][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.638323][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.775966][ T153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.790947][ T1514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.799434][ T1514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.812097][ T1514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.893684][ T5821] veth0_macvtap: entered promiscuous mode [ 84.995754][ T5821] veth1_macvtap: entered promiscuous mode [ 85.119541][ T5822] veth0_macvtap: entered promiscuous mode [ 85.191792][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.191815][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.258577][ T5822] veth1_macvtap: entered promiscuous mode [ 85.307185][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.363393][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.364040][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.364055][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.416019][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.439617][ T1167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.457366][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.458109][ T1514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.458124][ T1514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.463091][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.495429][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.506935][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.586229][ T1167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.621754][ T1167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.640848][ T1167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.652781][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.652797][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.678501][ T1167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.584952][ T5141] Bluetooth: hci1: command tx timeout [ 86.584983][ T5141] Bluetooth: hci3: command tx timeout [ 86.664246][ T5828] Bluetooth: hci2: command tx timeout [ 86.664274][ T5828] Bluetooth: hci0: command tx timeout [ 86.710986][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.711000][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.870440][ T9] cfg80211: failed to load regulatory.db [ 87.024595][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.024612][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.081142][ T5912] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.148029][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.148047][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.177056][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.177073][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.193807][ T37] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.291828][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 87.363099][ T5912] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 87.363143][ T5912] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 87.363164][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.373290][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 87.384965][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.384993][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.385036][ T37] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 87.385058][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.501013][ T5912] usb 1-1: config 0 descriptor?? [ 87.710661][ T37] usb 3-1: config 0 descriptor?? [ 87.907469][ T37] hub 3-1:0.0: USB hub found [ 88.049481][ T5918] netlink: 'syz.2.5': attribute type 2 has an invalid length. [ 88.049956][ T5918] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5'. [ 88.107484][ T37] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 88.443573][ T5918] warning: `syz.2.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.586520][ T5918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.667573][ T5918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.746326][ T37] usbhid 3-1:0.0: can't add hid device: -71 [ 88.746981][ T37] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 88.759845][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.816270][ T5927] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 88.978827][ T37] usb 3-1: USB disconnect, device number 2 [ 89.396074][ T5922] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.521841][ T5893] IPVS: starting estimator thread 0... [ 89.557293][ T5922] usb 2-1: device descriptor read/64, error -71 [ 89.630330][ T5935] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 89.667223][ T5945] IPVS: using max 8 ests per chain, 19200 per kthread [ 89.877308][ T5922] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.013390][ T5922] usb 2-1: device descriptor read/64, error -71 [ 90.132599][ T5922] usb usb2-port1: attempt power cycle [ 91.391445][ T5958] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.424167][ T5955] syz.2.12 (5955): drop_caches: 2 [ 91.621582][ T5922] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.646133][ T5922] usb 2-1: device descriptor read/8, error -71 [ 91.917648][ T5922] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 91.934405][ T5922] usb 2-1: device descriptor read/8, error -71 [ 92.043202][ T5922] usb usb2-port1: unable to enumerate USB device [ 92.190216][ T5880] usb 1-1: USB disconnect, device number 2 [ 95.958116][ T5998] sg_write: process 11 (syz.0.24) changed security contexts after opening file descriptor, this is not allowed. [ 100.905678][ T6046] netlink: 'syz.1.41': attribute type 6 has an invalid length. [ 101.584051][ T6057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.44'. [ 102.423937][ T5880] ------------[ cut here ]------------ [ 102.423951][ T5880] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 102.423967][ T5880] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#0: kworker/0:5/5880 [ 102.424010][ T5880] Modules linked in: [ 102.424048][ T5880] CPU: 0 UID: 0 PID: 5880 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 102.424073][ T5880] Tainted: [L]=SOFTLOCKUP [ 102.424079][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 102.424091][ T5880] Workqueue: events drm_fb_helper_damage_work [ 102.424119][ T5880] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 102.424146][ T5880] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 6a 6f c0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 102.424161][ T5880] RSP: 0018:ffffc9000560f920 EFLAGS: 00010246 [ 102.424176][ T5880] RAX: 1ffff11004dcb200 RBX: ffffffff8fda86b0 RCX: 0000000000000000 [ 102.424191][ T5880] RDX: ffffffff8be35420 RSI: ffffffff8be51ac0 RDI: ffffffff8fda86b0 [ 102.424205][ T5880] RBP: ffffc9000560fa08 R08: 0000000000000000 R09: 0000000000000000 [ 102.424217][ T5880] R10: dffffc0000000000 R11: fffffbfff1f9e8ff R12: ffffffff8be51ac0 [ 102.424231][ T5880] R13: ffff888026e59000 R14: 0000000000000000 R15: ffffffff8be35420 [ 102.424244][ T5880] FS: 0000000000000000(0000) GS:ffff888125a62000(0000) knlGS:0000000000000000 [ 102.424259][ T5880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.424279][ T5880] CR2: 00007f172aea56b8 CR3: 0000000046a1e000 CR4: 00000000003526f0 [ 102.424300][ T5880] Call Trace: [ 102.424307][ T5880] [ 102.424319][ T5880] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 102.424344][ T5880] ? rt_spin_unlock+0x14f/0x200 [ 102.424370][ T5880] ? __pfx_autoremove_wake_function+0x10/0x10 [ 102.424395][ T5880] ? rt_spin_unlock+0x160/0x200 [ 102.424422][ T5880] ? drm_vblank_get+0x147/0x260 [ 102.424450][ T5880] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 102.424476][ T5880] drm_fb_helper_damage_work+0x131/0x6f0 [ 102.424505][ T5880] ? process_one_work+0x8b7/0x1710 [ 102.424528][ T5880] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 102.424564][ T5880] ? process_one_work+0x8b7/0x1710 [ 102.424582][ T5880] process_one_work+0x9a3/0x1710 [ 102.424624][ T5880] ? __pfx_process_one_work+0x10/0x10 [ 102.424641][ T5880] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.424679][ T5880] worker_thread+0xbee/0x11e0 [ 102.424709][ T5880] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 102.424731][ T5880] ? __kthread_parkme+0x7a/0x1f0 [ 102.424753][ T5880] ? __kthread_parkme+0x19c/0x1f0 [ 102.424780][ T5880] kthread+0x388/0x470 [ 102.424805][ T5880] ? __pfx_worker_thread+0x10/0x10 [ 102.424823][ T5880] ? __pfx_kthread+0x10/0x10 [ 102.424848][ T5880] ret_from_fork+0x514/0xb70 [ 102.424873][ T5880] ? __pfx_ret_from_fork+0x10/0x10 [ 102.424893][ T5880] ? __switch_to+0xc79/0x1410 [ 102.424924][ T5880] ? __pfx_kthread+0x10/0x10 [ 102.424950][ T5880] ret_from_fork_asm+0x1a/0x30 [ 102.424991][ T5880] [ 102.425001][ T5880] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.425016][ T5880] CPU: 0 UID: 0 PID: 5880 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 102.425040][ T5880] Tainted: [L]=SOFTLOCKUP [ 102.425046][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 102.425057][ T5880] Workqueue: events drm_fb_helper_damage_work [ 102.425082][ T5880] Call Trace: [ 102.425090][ T5880] [ 102.425097][ T5880] vpanic+0x56c/0xa60 [ 102.425120][ T5880] ? __pfx__printk+0x10/0x10 [ 102.425146][ T5880] ? __pfx_vpanic+0x10/0x10 [ 102.425167][ T5880] ? is_bpf_text_address+0x292/0x2b0 [ 102.425192][ T5880] ? is_bpf_text_address+0x26/0x2b0 [ 102.425224][ T5880] panic+0xc5/0xd0 [ 102.425247][ T5880] ? __pfx_panic+0x10/0x10 [ 102.425283][ T5880] ? ret_from_fork_asm+0x1a/0x30 [ 102.425311][ T5880] __warn+0x315/0x4c0 [ 102.425332][ T5880] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 102.425360][ T5880] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 102.425387][ T5880] __report_bug+0x29a/0x540 [ 102.425412][ T5880] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 102.425439][ T5880] ? __pfx___report_bug+0x10/0x10 [ 102.425481][ T5880] report_bug_entry+0x19a/0x290 [ 102.425501][ T5880] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 102.425525][ T5880] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 102.425550][ T5880] handle_bug+0xce/0x200 [ 102.425573][ T5880] exc_invalid_op+0x1a/0x50 [ 102.425595][ T5880] asm_exc_invalid_op+0x1a/0x20 [ 102.425613][ T5880] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 102.425640][ T5880] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 6a 6f c0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 102.425655][ T5880] RSP: 0018:ffffc9000560f920 EFLAGS: 00010246 [ 102.425670][ T5880] RAX: 1ffff11004dcb200 RBX: ffffffff8fda86b0 RCX: 0000000000000000 [ 102.425683][ T5880] RDX: ffffffff8be35420 RSI: ffffffff8be51ac0 RDI: ffffffff8fda86b0 [ 102.425697][ T5880] RBP: ffffc9000560fa08 R08: 0000000000000000 R09: 0000000000000000 [ 102.425709][ T5880] R10: dffffc0000000000 R11: fffffbfff1f9e8ff R12: ffffffff8be51ac0 [ 102.425723][ T5880] R13: ffff888026e59000 R14: 0000000000000000 R15: ffffffff8be35420 [ 102.425758][ T5880] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 102.425783][ T5880] ? rt_spin_unlock+0x14f/0x200 [ 102.425808][ T5880] ? __pfx_autoremove_wake_function+0x10/0x10 [ 102.425833][ T5880] ? rt_spin_unlock+0x160/0x200 [ 102.425860][ T5880] ? drm_vblank_get+0x147/0x260 [ 102.425888][ T5880] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 102.425914][ T5880] drm_fb_helper_damage_work+0x131/0x6f0 [ 102.425943][ T5880] ? process_one_work+0x8b7/0x1710 [ 102.425967][ T5880] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 102.426004][ T5880] ? process_one_work+0x8b7/0x1710 [ 102.426021][ T5880] process_one_work+0x9a3/0x1710 [ 102.426063][ T5880] ? __pfx_process_one_work+0x10/0x10 [ 102.426080][ T5880] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.426118][ T5880] worker_thread+0xbee/0x11e0 [ 102.426148][ T5880] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 102.426169][ T5880] ? __kthread_parkme+0x7a/0x1f0 [ 102.426190][ T5880] ? __kthread_parkme+0x19c/0x1f0 [ 102.426218][ T5880] kthread+0x388/0x470 [ 102.426243][ T5880] ? __pfx_worker_thread+0x10/0x10 [ 102.426261][ T5880] ? __pfx_kthread+0x10/0x10 [ 102.426310][ T5880] ret_from_fork+0x514/0xb70 [ 102.426333][ T5880] ? __pfx_ret_from_fork+0x10/0x10 [ 102.426353][ T5880] ? __switch_to+0xc79/0x1410 [ 102.426383][ T5880] ? __pfx_kthread+0x10/0x10 [ 102.426408][ T5880] ret_from_fork_asm+0x1a/0x30 [ 102.426447][ T5880] [ 102.426780][ T5880] Kernel Offset: disabled