last executing test programs: 21.516864636s ago: executing program 2 (id=189): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) setuid(0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) 20.414871148s ago: executing program 2 (id=191): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) pipe2$9p(0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$sndseq(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023892) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x210) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 20.376211406s ago: executing program 1 (id=192): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0) 18.48408044s ago: executing program 2 (id=194): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$rxrpc(0x21, 0x2, 0xa) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 17.027955715s ago: executing program 1 (id=198): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x294, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x26d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}, [{0xdd, 0x25, "8a70254dad90829ddb18be62e84e877606f1bb15aaeda7b68c72bb816a45e603389a3d1c4f"}, {0xdd, 0xe3, "a9b8e8b2e8815dfdd27ddf0d9e1cb4fa1bbb67c1e564d75e01a3568e885b2ad15a99d00b7ffdeb02eebcc7545ca67fcad48c79ee89e03a97f892233201e08cb02c084d6cc9e65633c4f51e62e7d245088db7b2a0857ec4e5f911cb353d191498218794a9bd9095865f05de5722159704b56e4dd354369f3480578abd5a8f408dc04f90e5953feace89747961bbd24dac7393ae66ff9e5c5dd5e0b7cf50058a5b5f27dea29e01315b0b6d58d4a2f6b6f06eb7d71f09f0aae4848147d50a60273e11cfa79f5c1cdea51bfd799af914fcb2b635cabc24982a2645999206bdd136f149b323"}, {0xdd, 0x72, "d603975e745cf0818ddf6d630340422b5efe14e9cb1adb7c07146829be39ac24aa70b63265f5d01e584ea220662ae06b9f29b8c0db55b8973efcc8e2131746af14a7d9eec224a2ecee11fec779abcc890cc3efddbb5192105d5f3e94261bec464121a596e5a12dab164fdd7f9d86075b048c"}, {0xdd, 0x7f, "844485144ae31589b65f2b2495e4a044244c614b4546e50d85069c3aaede2f341775ec7e4c686a3910b4c4de14babb923cc2c888ce1c1bf2c37c73917ee9b073d0966153f3f38618f91c68279e45ea37ea7da95c8d10bfb68cbe7dbeaea77e1155e7ba64a002b943b33c2f80bcbb7bacac5c6b44c78c1a8c8b8edaba807abc"}]}}]}, 0x294}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 16.809901064s ago: executing program 1 (id=199): r0 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x40, 0x2}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00031c0000001c0355"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x26, @string={0x26, 0x3, "eabe3ed51dc691746bc0469c017f16f0b8e6f61851c41fd2ce656425f7640b597d63713c"}}, 0x0, 0x0, 0x0}, 0x0) 14.027511567s ago: executing program 4 (id=208): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0) 12.488230054s ago: executing program 4 (id=213): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) setuid(0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) 11.705778907s ago: executing program 1 (id=217): socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) 11.241849291s ago: executing program 4 (id=220): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x9, 0x2, 0x4, "9e8d2745585f6400d1de4d18f5127e7a79a91a95161c79fb72b118bbcca20a4f", 0x34565559}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) 8.890857273s ago: executing program 0 (id=223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 8.678244032s ago: executing program 4 (id=225): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0) 7.380060243s ago: executing program 4 (id=227): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) 7.129016622s ago: executing program 0 (id=229): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x4ed, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x8000, 0x400253}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'geneve0\x00', {0x20000001}, 0x4}) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 6.853477441s ago: executing program 2 (id=231): openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.827112228s ago: executing program 0 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000006200)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000100000022bbd7000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="211000005400a90f880b1c0158e2a7d031b3d89c030000000a00010005a2aaaaaa0c5cf16e8c8d8659d8"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3.830898785s ago: executing program 0 (id=236): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) timer_create(0x2, 0x0, &(0x7f00000001c0)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x4a}) 3.772900627s ago: executing program 2 (id=237): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) close(0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3e0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3) socket$igmp(0x2, 0x3, 0x2) 3.676125273s ago: executing program 4 (id=238): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0xffffffff}, @typedef={0x7}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x61, 0x30, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 3.204825128s ago: executing program 3 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r1, 0xfd39e943ccf1163b, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) 3.104033247s ago: executing program 3 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="f240faee97a626a1e9d61dc9133538f4a02ef9a79626d64055fa06d1fa58652c97ebc44eff4266c3", 0x28}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x30040040) 3.009698615s ago: executing program 3 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0xffffffff}, @typedef={0x7}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x61, 0x30, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)) 2.991855468s ago: executing program 1 (id=243): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x43, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) close_range(r3, 0xffffffffffffffff, 0x0) 2.844163824s ago: executing program 3 (id=244): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) setuid(0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) 2.733721088s ago: executing program 0 (id=245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, 0x0, 0x4000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 2.133231286s ago: executing program 2 (id=246): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000006200)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000100000022bbd7000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="211000005400a90f880b1c0158e2a7d031b3d89c030000000a00010005a2aaaaaa0c5cf16e8c8d8659d8"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1.77196178s ago: executing program 3 (id=247): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000d5}, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 846.016678ms ago: executing program 1 (id=248): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="001201000000986804a248d38ed2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x9, 0x2, &(0x7f0000000100)={0xf, "f7b51030c4b7c54bf28facb1ed3ee206000000bc517b5452b3b94bce47509d00"}}) 395.797045ms ago: executing program 0 (id=249): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xa0}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. [ 90.680854][ T5778] cgroup: Unknown subsys name 'net' [ 90.932343][ T5778] cgroup: Unknown subsys name 'cpuset' [ 90.976924][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.970853][ T9] cfg80211: failed to load regulatory.db [ 92.941976][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.425070][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.446501][ T5110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.454253][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.455147][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.479599][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.495001][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.495728][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.500297][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.502753][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.505444][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.506768][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.507705][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.529037][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.549606][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.551357][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.618909][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.621748][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.622945][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.624379][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.627498][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.629570][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.630319][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.631291][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.681773][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.683770][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.642422][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 96.676629][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 96.789965][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 96.801239][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 96.815189][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 97.121786][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.122586][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.122961][ T5792] bridge_slave_0: entered allmulticast mode [ 97.125178][ T5792] bridge_slave_0: entered promiscuous mode [ 97.152942][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.153041][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.153222][ T5804] bridge_slave_0: entered allmulticast mode [ 97.155220][ T5804] bridge_slave_0: entered promiscuous mode [ 97.209093][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.209207][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.209352][ T5792] bridge_slave_1: entered allmulticast mode [ 97.211273][ T5792] bridge_slave_1: entered promiscuous mode [ 97.213786][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.213900][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.214257][ T5804] bridge_slave_1: entered allmulticast mode [ 97.219342][ T5804] bridge_slave_1: entered promiscuous mode [ 97.401710][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.401917][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.402092][ T5794] bridge_slave_0: entered allmulticast mode [ 97.404142][ T5794] bridge_slave_0: entered promiscuous mode [ 97.405901][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.406034][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.416756][ T5793] bridge_slave_0: entered allmulticast mode [ 97.424045][ T5793] bridge_slave_0: entered promiscuous mode [ 97.433328][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.433657][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.434116][ T5803] bridge_slave_0: entered allmulticast mode [ 97.446756][ T5803] bridge_slave_0: entered promiscuous mode [ 97.470687][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.483698][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.484415][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.486637][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.487969][ T5794] bridge_slave_1: entered allmulticast mode [ 97.494936][ T5794] bridge_slave_1: entered promiscuous mode [ 97.501741][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.502061][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.503771][ T5793] bridge_slave_1: entered allmulticast mode [ 97.513274][ T5793] bridge_slave_1: entered promiscuous mode [ 97.519110][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.519431][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.520724][ T5803] bridge_slave_1: entered allmulticast mode [ 97.532639][ T5803] bridge_slave_1: entered promiscuous mode [ 97.560318][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.571157][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.648005][ T5801] Bluetooth: hci1: command tx timeout [ 97.648008][ T5798] Bluetooth: hci2: command tx timeout [ 97.648243][ T5110] Bluetooth: hci0: command tx timeout [ 97.726365][ T5110] Bluetooth: hci4: command tx timeout [ 97.726563][ T5110] Bluetooth: hci3: command tx timeout [ 97.844076][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.858708][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.862803][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.865232][ T5792] team0: Port device team_slave_0 added [ 97.872009][ T5804] team0: Port device team_slave_0 added [ 97.885752][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.907665][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.910942][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.913496][ T5804] team0: Port device team_slave_1 added [ 97.916008][ T5792] team0: Port device team_slave_1 added [ 98.124501][ T5794] team0: Port device team_slave_0 added [ 98.133509][ T5793] team0: Port device team_slave_0 added [ 98.135759][ T5803] team0: Port device team_slave_0 added [ 98.148490][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.148504][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.148523][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.150867][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.150946][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.150973][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.153813][ T5794] team0: Port device team_slave_1 added [ 98.155898][ T5793] team0: Port device team_slave_1 added [ 98.219688][ T5803] team0: Port device team_slave_1 added [ 98.225571][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.225624][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.225700][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.236817][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.236864][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.236981][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.428257][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.428270][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.428289][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.429449][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.429464][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.429490][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.433825][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.433840][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.433865][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.448243][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.448296][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.448365][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.452754][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.452788][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.452857][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.463612][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.463654][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.463729][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.178144][ T5804] hsr_slave_0: entered promiscuous mode [ 99.179379][ T5804] hsr_slave_1: entered promiscuous mode [ 99.195260][ T5792] hsr_slave_0: entered promiscuous mode [ 99.200514][ T5792] hsr_slave_1: entered promiscuous mode [ 99.203767][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 99.204054][ T5792] Cannot create hsr debugfs directory [ 99.347479][ T5794] hsr_slave_0: entered promiscuous mode [ 99.348631][ T5794] hsr_slave_1: entered promiscuous mode [ 99.349299][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 99.349317][ T5794] Cannot create hsr debugfs directory [ 99.380341][ T5793] hsr_slave_0: entered promiscuous mode [ 99.381369][ T5793] hsr_slave_1: entered promiscuous mode [ 99.382091][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 99.382109][ T5793] Cannot create hsr debugfs directory [ 99.402847][ T5803] hsr_slave_0: entered promiscuous mode [ 99.407182][ T5803] hsr_slave_1: entered promiscuous mode [ 99.410775][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 99.410847][ T5803] Cannot create hsr debugfs directory [ 99.726328][ T5110] Bluetooth: hci2: command tx timeout [ 99.726374][ T5110] Bluetooth: hci1: command tx timeout [ 99.726446][ T5801] Bluetooth: hci0: command tx timeout [ 99.806334][ T5801] Bluetooth: hci3: command tx timeout [ 99.806370][ T5801] Bluetooth: hci4: command tx timeout [ 100.330325][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.361950][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.394654][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.444989][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.538963][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.573423][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.595026][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.652249][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.774425][ T5794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.810416][ T5794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.848498][ T5794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.900608][ T5794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.047830][ T5793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.090425][ T5793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.133038][ T5793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.172996][ T5793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.322435][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.363999][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.364482][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.404210][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.445612][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.544322][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.569520][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.592766][ T3201] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.593932][ T3201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.634077][ T3201] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.634354][ T3201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.684739][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.721689][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.742901][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.743053][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.788265][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.788472][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.806327][ T5110] Bluetooth: hci0: command tx timeout [ 101.806358][ T5110] Bluetooth: hci1: command tx timeout [ 101.806380][ T5110] Bluetooth: hci2: command tx timeout [ 101.870433][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.886311][ T5798] Bluetooth: hci3: command tx timeout [ 101.886387][ T5801] Bluetooth: hci4: command tx timeout [ 101.932288][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.934611][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.934778][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.981356][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.981528][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.078833][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.109210][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.150648][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.150872][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.215780][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.220546][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.283424][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.318993][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.319887][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.382988][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.386945][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.545897][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.804290][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.840462][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.868128][ T5804] veth0_vlan: entered promiscuous mode [ 102.947664][ T5804] veth1_vlan: entered promiscuous mode [ 103.081724][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.098851][ T5794] veth0_vlan: entered promiscuous mode [ 103.120076][ T5792] veth0_vlan: entered promiscuous mode [ 103.147013][ T5804] veth0_macvtap: entered promiscuous mode [ 103.162786][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.188743][ T5794] veth1_vlan: entered promiscuous mode [ 103.216692][ T5792] veth1_vlan: entered promiscuous mode [ 103.222609][ T5804] veth1_macvtap: entered promiscuous mode [ 103.340380][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.385146][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.431790][ T5794] veth0_macvtap: entered promiscuous mode [ 103.451778][ T5792] veth0_macvtap: entered promiscuous mode [ 103.469093][ T157] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.485457][ T157] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.498942][ T157] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.499897][ T5794] veth1_macvtap: entered promiscuous mode [ 103.504274][ T5792] veth1_macvtap: entered promiscuous mode [ 103.538791][ T426] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.560911][ T5803] veth0_vlan: entered promiscuous mode [ 103.680956][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.682852][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.683422][ T5803] veth1_vlan: entered promiscuous mode [ 103.774726][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.784343][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.845440][ T157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.866003][ T157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.885849][ T157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.887848][ T5801] Bluetooth: hci0: command tx timeout [ 103.897768][ T5801] Bluetooth: hci1: command tx timeout [ 103.897797][ T5801] Bluetooth: hci2: command tx timeout [ 103.926249][ T157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.927027][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.927046][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.953417][ T1135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.966353][ T5798] Bluetooth: hci4: command tx timeout [ 103.966384][ T5798] Bluetooth: hci3: command tx timeout [ 103.982859][ T1135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.004487][ T1135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.098965][ T1135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.127819][ T5793] veth0_vlan: entered promiscuous mode [ 104.234401][ T3201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.234424][ T3201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.311962][ T5803] veth0_macvtap: entered promiscuous mode [ 104.398992][ T5793] veth1_vlan: entered promiscuous mode [ 104.423723][ T5803] veth1_macvtap: entered promiscuous mode [ 104.504202][ T3201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.504224][ T3201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.585886][ T3201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.585907][ T3201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.627012][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.655694][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.738981][ T5793] veth0_macvtap: entered promiscuous mode [ 104.755099][ T3201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.755119][ T3201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.785723][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.803013][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.827462][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.843097][ T5793] veth1_macvtap: entered promiscuous mode [ 104.844769][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.869431][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.869451][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.980760][ T809] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 105.147093][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.198431][ T809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.198459][ T809] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.208066][ T809] usb 2-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice=b4.df [ 105.208149][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.208204][ T809] usb 2-1: Product: syz [ 105.208247][ T809] usb 2-1: Manufacturer: syz [ 105.208284][ T809] usb 2-1: SerialNumber: syz [ 105.287773][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.322799][ T5913] dlm: non-version read from control device 0 [ 105.335595][ T809] usb 2-1: config 0 descriptor?? [ 105.715047][ T3201] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.720427][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.720445][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.923317][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.201741][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.306406][ T10] usb 2-1: USB disconnect, device number 2 [ 106.310976][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.482839][ T3201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.482861][ T3201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.646625][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.673592][ T3201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.673613][ T3201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.803575][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.803596][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.816236][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 106.840163][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.871204][ T9] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 106.871232][ T9] usb 4-1: config 7 has 0 interfaces, different from the descriptor's value: 2 [ 106.904256][ T9] usb 4-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=5e.f0 [ 106.904289][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.904309][ T9] usb 4-1: Product: syz [ 106.904324][ T9] usb 4-1: Manufacturer: syz [ 106.904339][ T9] usb 4-1: SerialNumber: syz [ 107.056381][ T5867] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.206285][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 107.251977][ T9] usb 4-1: USB disconnect, device number 2 [ 107.266991][ T5867] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 107.267018][ T5867] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 107.296396][ T5867] usb 3-1: New USB device found, idVendor=0729, idProduct=1284, bcdDevice=fe.b7 [ 107.296427][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.296447][ T5867] usb 3-1: Product: syz [ 107.296462][ T5867] usb 3-1: Manufacturer: syz [ 107.296476][ T5867] usb 3-1: SerialNumber: syz [ 107.630676][ T5860] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.826232][ T5860] usb 1-1: Using ep0 maxpacket: 32 [ 107.832597][ T5860] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 107.832623][ T5860] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 107.862261][ T5860] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f5.ec [ 107.862341][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.862389][ T5860] usb 1-1: Product: syz [ 107.862433][ T5860] usb 1-1: Manufacturer: syz [ 107.862483][ T5860] usb 1-1: SerialNumber: syz [ 107.885095][ T5867] usb 3-1: USB disconnect, device number 2 [ 108.188546][ T5860] usb 1-1: USB disconnect, device number 2 [ 109.556145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.566180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.570462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.576149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.581827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.658261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.185942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.190938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.480037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.480139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.236332][ T5963] binder: 5961:5963 ioctl c0306201 0 returned -14 [ 114.439075][ T5966] dlm: non-version read from control device 0 [ 114.439932][ T5860] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.596204][ T5860] usb 3-1: Using ep0 maxpacket: 16 [ 114.600250][ T5860] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.600276][ T5860] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 114.600360][ T5860] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 114.600386][ T5860] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.605893][ T5860] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.605923][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.605944][ T5860] usb 3-1: Product: syz [ 114.605958][ T5860] usb 3-1: Manufacturer: syz [ 114.605974][ T5860] usb 3-1: SerialNumber: syz [ 114.726287][ T824] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.946414][ T824] usb 5-1: Using ep0 maxpacket: 16 [ 116.001236][ T824] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.001345][ T824] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 116.001371][ T824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.109843][ T824] usb 5-1: config 0 descriptor?? [ 116.149205][ T5881] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.181153][ T824] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 116.187578][ T5860] usb 3-1: 0:2 : does not exist [ 116.490980][ T5969] Bluetooth: MGMT ver 1.23 [ 116.491022][ T5969] Bluetooth: hci0: load_link_keys: too big key_count value 48400 [ 116.528302][ T5985] usb 5-1: USB disconnect, device number 2 [ 116.556376][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 116.560156][ T5881] usb 4-1: unable to get BOS descriptor or descriptor too short [ 116.568674][ T5881] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 116.568734][ T5881] usb 4-1: config 12 has 0 interfaces, different from the descriptor's value: 1 [ 116.605093][ T5881] usb 4-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice=d4.d0 [ 116.605125][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.605146][ T5881] usb 4-1: Product: syz [ 116.605161][ T5881] usb 4-1: Manufacturer: syz [ 116.605179][ T5881] usb 4-1: SerialNumber: syz [ 117.046675][ T5881] apple-mfi-fastcharge 4-1: USB disconnect, device number 3 [ 117.404408][ T5860] usb 3-1: USB disconnect, device number 3 [ 120.502827][ T5998] warning: `syz.4.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.652624][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.779725][ T6010] dlm: non-version read from control device 0 [ 122.046035][ T6013] fuse: Bad value for 'fd' [ 122.518063][ T5881] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.766253][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 122.768825][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.768852][ T5881] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.771918][ T5881] usb 1-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=e7.57 [ 122.771947][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.771968][ T5881] usb 1-1: Product: syz [ 122.771982][ T5881] usb 1-1: Manufacturer: syz [ 122.771997][ T5881] usb 1-1: SerialNumber: syz [ 123.056566][ T5881] usb 1-1: config 0 descriptor?? [ 123.176253][ T5977] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 123.277027][ T31] usb 1-1: USB disconnect, device number 3 [ 123.345451][ T5977] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.346048][ T5977] usb 4-1: not running at top speed; connect to a high speed hub [ 123.367013][ T5977] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.367041][ T5977] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 123.367098][ T5977] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 123.367116][ T5977] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.369643][ T5977] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.369672][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.369687][ T5977] usb 4-1: Product: syz [ 123.369697][ T5977] usb 4-1: Manufacturer: syz [ 123.369708][ T5977] usb 4-1: SerialNumber: syz [ 123.555965][ T5926] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.707419][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 123.712516][ T5926] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 123.712547][ T5926] usb 3-1: config 0 has no interface number 0 [ 123.712662][ T5926] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.712692][ T5926] usb 3-1: config 0 interface 85 has no altsetting 0 [ 123.717792][ T5926] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 123.718053][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.718230][ T5926] usb 3-1: Product: syz [ 123.718281][ T5926] usb 3-1: Manufacturer: syz [ 123.718448][ T5926] usb 3-1: SerialNumber: syz [ 123.858514][ T5926] usb 3-1: config 0 descriptor?? [ 126.093931][ T5977] usb 4-1: 0:2 : does not exist [ 126.470900][ T5977] usb 4-1: USB disconnect, device number 4 [ 126.498113][ T5779] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.520890][ T5926] appletouch 3-1:0.85: Geyser mode initialized. [ 126.548205][ T5926] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input5 [ 126.847834][ T6022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.848525][ T6022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.011442][ T6043] autofs: Bad value for 'fd' [ 127.729285][ T5926] usb 3-1: USB disconnect, device number 4 [ 127.730327][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 127.759043][ T5779] usb 2-1: config 0 has no interfaces? [ 127.781056][ T5779] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.781078][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.781092][ T5779] usb 2-1: Product: syz [ 127.781103][ T5779] usb 2-1: Manufacturer: syz [ 127.781114][ T5779] usb 2-1: SerialNumber: syz [ 127.896049][ T6045] dlm: non-version read from control device 0 [ 127.960531][ T5779] usb 2-1: config 0 descriptor?? [ 128.355936][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.369514][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.388976][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.391518][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.118762][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 129.508667][ T5926] appletouch 3-1:0.85: input: appletouch disconnected [ 129.597924][ T5881] usb 2-1: USB disconnect, device number 3 [ 132.054450][ T5926] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 132.219401][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 132.220163][ T5926] usb 5-1: not running at top speed; connect to a high speed hub [ 132.248863][ T5926] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.248891][ T5926] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 132.248954][ T5926] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 132.248981][ T5926] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.260104][ T5926] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.260200][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.260252][ T5926] usb 5-1: Product: syz [ 132.260293][ T5926] usb 5-1: Manufacturer: syz [ 132.260335][ T5926] usb 5-1: SerialNumber: syz [ 133.650336][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.650443][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.915831][ T5926] usb 5-1: 0:2 : does not exist [ 134.661291][ T5926] usb 5-1: USB disconnect, device number 3 [ 135.003755][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.089539][ T5860] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.689293][ T5860] usb 1-1: config 0 has no interfaces? [ 135.694529][ T5860] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.694560][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.694581][ T5860] usb 1-1: Product: syz [ 135.694596][ T5860] usb 1-1: Manufacturer: syz [ 135.694610][ T5860] usb 1-1: SerialNumber: syz [ 135.798133][ T5860] usb 1-1: config 0 descriptor?? [ 136.029470][ T6100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.035326][ T6100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.048316][ T6100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.049671][ T6100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.053722][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.64'. [ 136.054977][ T6100] 8021q: VLANs not supported on nlmon0 [ 136.195398][ T5986] usb 1-1: USB disconnect, device number 4 [ 138.048945][ T5926] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 139.071558][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.072674][ T5926] usb 3-1: not running at top speed; connect to a high speed hub [ 139.074165][ T5926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.074190][ T5926] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 139.074254][ T5926] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 139.074281][ T5926] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.148207][ T5926] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.148240][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.148262][ T5926] usb 3-1: Product: syz [ 139.148277][ T5926] usb 3-1: Manufacturer: syz [ 139.148292][ T5926] usb 3-1: SerialNumber: syz [ 139.846279][ T5926] usb 3-1: 0:2 : does not exist [ 140.093808][ T5926] usb 3-1: USB disconnect, device number 5 [ 141.952343][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.756297][ T5977] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.989751][ T5977] usb 5-1: config 0 has no interfaces? [ 143.992564][ T5977] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.992595][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.992617][ T5977] usb 5-1: Product: syz [ 143.992632][ T5977] usb 5-1: Manufacturer: syz [ 143.992647][ T5977] usb 5-1: SerialNumber: syz [ 144.046276][ T5977] usb 5-1: config 0 descriptor?? [ 144.263559][ T6187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.264784][ T6187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.276342][ T5977] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 144.320081][ T6187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.320695][ T6187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.322215][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 144.322681][ T6187] 8021q: VLANs not supported on nlmon0 [ 144.442893][ T5926] usb 5-1: USB disconnect, device number 4 [ 144.468472][ T5977] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.469595][ T5977] usb 2-1: not running at top speed; connect to a high speed hub [ 144.471724][ T5977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.471740][ T5977] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 144.471783][ T5977] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 144.471801][ T5977] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.475435][ T5977] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.475466][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.475481][ T5977] usb 2-1: Product: syz [ 144.475491][ T5977] usb 2-1: Manufacturer: syz [ 144.475501][ T5977] usb 2-1: SerialNumber: syz [ 145.244410][ T5977] usb 2-1: 0:2 : does not exist [ 146.506250][ T5977] usb 2-1: USB disconnect, device number 4 [ 148.202117][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.486300][ T5977] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 148.669296][ T5977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.669355][ T5977] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 148.669383][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.738802][ T5977] usb 2-1: config 0 descriptor?? [ 148.745012][ T5977] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 151.322116][ T5860] usb 2-1: USB disconnect, device number 5 [ 153.190769][ T6287] autofs: Bad value for 'fd' [ 155.716735][ T5860] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 155.909593][ T5860] usb 1-1: unable to get BOS descriptor or descriptor too short [ 155.910345][ T5860] usb 1-1: not running at top speed; connect to a high speed hub [ 155.931248][ T5860] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.931343][ T5860] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 155.931513][ T5860] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 155.931588][ T5860] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.974528][ T5860] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.974560][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.974581][ T5860] usb 1-1: Product: syz [ 155.974596][ T5860] usb 1-1: Manufacturer: syz [ 155.974610][ T5860] usb 1-1: SerialNumber: syz [ 157.531146][ T5860] usb 1-1: 0:2 : does not exist [ 157.737990][ T5860] usb 1-1: USB disconnect, device number 5 [ 157.795683][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.796201][ T5977] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 157.956162][ T5977] usb 2-1: Using ep0 maxpacket: 32 [ 157.958715][ T5977] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 157.958744][ T5977] usb 2-1: config 0 has no interface number 0 [ 157.958790][ T5977] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.958818][ T5977] usb 2-1: config 0 interface 85 has no altsetting 0 [ 157.962345][ T5977] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 157.962375][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.962395][ T5977] usb 2-1: Product: syz [ 157.962410][ T5977] usb 2-1: Manufacturer: syz [ 157.962425][ T5977] usb 2-1: SerialNumber: syz [ 158.038265][ T5977] usb 2-1: config 0 descriptor?? [ 159.412969][ T5977] appletouch 2-1:0.85: Geyser mode initialized. [ 159.423498][ T5977] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input6 [ 160.142163][ T5977] usb 2-1: USB disconnect, device number 6 [ 160.142260][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 161.475871][ T5977] appletouch 2-1:0.85: input: appletouch disconnected [ 163.326225][ T5977] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 163.489977][ T5977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.490500][ T5977] usb 5-1: not running at top speed; connect to a high speed hub [ 163.492630][ T5977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.492647][ T5977] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 163.492690][ T5977] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 163.492709][ T5977] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.549283][ T5977] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.549315][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.549336][ T5977] usb 5-1: Product: syz [ 163.549351][ T5977] usb 5-1: Manufacturer: syz [ 163.549366][ T5977] usb 5-1: SerialNumber: syz [ 164.283631][ T5977] usb 5-1: 0:2 : does not exist [ 164.418222][ T5977] usb 5-1: USB disconnect, device number 5 [ 164.567316][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.682791][ C0] Unknown status report in ack skb [ 171.666338][ T5977] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 172.358756][ T5977] usb 2-1: unable to get BOS descriptor or descriptor too short [ 172.359533][ T5977] usb 2-1: not running at top speed; connect to a high speed hub [ 172.361050][ T5977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.361074][ T5977] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 172.361154][ T5977] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 172.361180][ T5977] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 172.364918][ T5977] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.364964][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.364985][ T5977] usb 2-1: Product: syz [ 172.365000][ T5977] usb 2-1: Manufacturer: syz [ 172.365016][ T5977] usb 2-1: SerialNumber: syz [ 172.462669][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 172.619334][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 172.628712][ T9] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 172.628797][ T9] usb 1-1: config 0 has no interface number 0 [ 172.628850][ T9] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.628878][ T9] usb 1-1: config 0 interface 85 has no altsetting 0 [ 172.663521][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 172.663619][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.663640][ T9] usb 1-1: Product: syz [ 172.663655][ T9] usb 1-1: Manufacturer: syz [ 172.663669][ T9] usb 1-1: SerialNumber: syz [ 172.752027][ T9] usb 1-1: config 0 descriptor?? [ 174.043176][ T9] appletouch 1-1:0.85: Failed to request geyser raw mode [ 174.043578][ T9] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 174.067663][ T5977] usb 2-1: 0:2 : does not exist [ 174.095499][ T9] usb 1-1: USB disconnect, device number 6 [ 174.158984][ T5977] usb 2-1: USB disconnect, device number 7 [ 174.264391][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.169003][ T6516] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 179.536377][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 179.687224][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 179.717342][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.717480][ T9] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 179.717539][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.863234][ T9] usb 5-1: config 0 descriptor?? [ 180.004133][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 182.796622][ T36] usb 5-1: USB disconnect, device number 6 [ 186.791989][ T5986] ------------[ cut here ]------------ [ 186.792004][ T5986] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 186.792028][ T5986] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:9/5986 [ 186.792086][ T5986] Modules linked in: [ 186.792130][ T5986] CPU: 1 UID: 0 PID: 5986 Comm: kworker/1:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 186.792154][ T5986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.792169][ T5986] Workqueue: events drm_fb_helper_damage_work [ 186.792210][ T5986] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 186.792247][ T5986] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a c0 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 186.792266][ T5986] RSP: 0018:ffffc9000586f8e0 EFLAGS: 00010246 [ 186.792285][ T5986] RAX: 1ffff11004ab9400 RBX: ffffffff8f751120 RCX: 0000000000000000 [ 186.792301][ T5986] RDX: ffffffff8bbf30c0 RSI: ffffffff8bc0efc0 RDI: ffffffff8f751120 [ 186.792318][ T5986] RBP: ffffc9000586f9c8 R08: 0000000000000000 R09: 0000000000000000 [ 186.792332][ T5986] R10: dffffc0000000000 R11: fffffbfff1ed4637 R12: ffffffff8bc0efc0 [ 186.792349][ T5986] R13: ffff8880255ca000 R14: 0000000000000000 R15: ffffffff8bbf30c0 [ 186.792365][ T5986] FS: 0000000000000000(0000) GS:ffff888126440000(0000) knlGS:0000000000000000 [ 186.792383][ T5986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.792398][ T5986] CR2: 000000110c291282 CR3: 00000000581b0000 CR4: 00000000003526f0 [ 186.792418][ T5986] Call Trace: [ 186.792431][ T5986] [ 186.792445][ T5986] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 186.792481][ T5986] ? rt_spin_unlock+0x14f/0x200 [ 186.792512][ T5986] ? __pfx_autoremove_wake_function+0x10/0x10 [ 186.792551][ T5986] ? rt_spin_unlock+0x160/0x200 [ 186.792579][ T5986] ? drm_vblank_get+0x147/0x260 [ 186.792623][ T5986] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 186.792658][ T5986] drm_fb_helper_damage_work+0x131/0x6f0 [ 186.792705][ T5986] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 186.792747][ T5986] ? process_scheduled_works+0xa25/0x1830 [ 186.792780][ T5986] ? process_scheduled_works+0xa25/0x1830 [ 186.792814][ T5986] process_scheduled_works+0xb02/0x1830 [ 186.792884][ T5986] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.792924][ T5986] ? assign_work+0x3d5/0x5e0 [ 186.792962][ T5986] worker_thread+0xa50/0xfc0 [ 186.793024][ T5986] kthread+0x388/0x470 [ 186.793048][ T5986] ? __pfx_worker_thread+0x10/0x10 [ 186.793079][ T5986] ? __pfx_kthread+0x10/0x10 [ 186.793104][ T5986] ret_from_fork+0x51e/0xb90 [ 186.793140][ T5986] ? __pfx_ret_from_fork+0x10/0x10 [ 186.793171][ T5986] ? __switch_to+0xc7d/0x1450 [ 186.793205][ T5986] ? __pfx_kthread+0x10/0x10 [ 186.793231][ T5986] ret_from_fork_asm+0x1a/0x30 [ 186.793271][ T5986] [ 186.793288][ T5986] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.793304][ T5986] CPU: 1 UID: 0 PID: 5986 Comm: kworker/1:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 186.793327][ T5986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.793341][ T5986] Workqueue: events drm_fb_helper_damage_work [ 186.793376][ T5986] Call Trace: [ 186.793384][ T5986] [ 186.793393][ T5986] vpanic+0x56c/0xa60 [ 186.793429][ T5986] ? __pfx__printk+0x10/0x10 [ 186.793454][ T5986] ? __pfx_vpanic+0x10/0x10 [ 186.793485][ T5986] ? is_bpf_text_address+0x292/0x2b0 [ 186.793515][ T5986] ? is_bpf_text_address+0x26/0x2b0 [ 186.793556][ T5986] panic+0xc5/0xd0 [ 186.793590][ T5986] ? __pfx_panic+0x10/0x10 [ 186.793640][ T5986] ? ret_from_fork_asm+0x1a/0x30 [ 186.793668][ T5986] __warn+0x315/0x4f0 [ 186.793701][ T5986] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 186.793738][ T5986] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 186.793776][ T5986] __report_bug+0x29a/0x540 [ 186.793813][ T5986] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 186.793849][ T5986] ? __pfx___report_bug+0x10/0x10 [ 186.793901][ T5986] report_bug_entry+0x19a/0x290 [ 186.793931][ T5986] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 186.793963][ T5986] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 186.793997][ T5986] handle_bug+0xca/0x200 [ 186.794033][ T5986] exc_invalid_op+0x1a/0x50 [ 186.794066][ T5986] asm_exc_invalid_op+0x1a/0x20 [ 186.794089][ T5986] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 186.794125][ T5986] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a c0 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 186.794142][ T5986] RSP: 0018:ffffc9000586f8e0 EFLAGS: 00010246 [ 186.794161][ T5986] RAX: 1ffff11004ab9400 RBX: ffffffff8f751120 RCX: 0000000000000000 [ 186.794176][ T5986] RDX: ffffffff8bbf30c0 RSI: ffffffff8bc0efc0 RDI: ffffffff8f751120 [ 186.794192][ T5986] RBP: ffffc9000586f9c8 R08: 0000000000000000 R09: 0000000000000000 [ 186.794206][ T5986] R10: dffffc0000000000 R11: fffffbfff1ed4637 R12: ffffffff8bc0efc0 [ 186.794221][ T5986] R13: ffff8880255ca000 R14: 0000000000000000 R15: ffffffff8bbf30c0 [ 186.794261][ T5986] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 186.794295][ T5986] ? rt_spin_unlock+0x14f/0x200 [ 186.794318][ T5986] ? __pfx_autoremove_wake_function+0x10/0x10 [ 186.794354][ T5986] ? rt_spin_unlock+0x160/0x200 [ 186.794381][ T5986] ? drm_vblank_get+0x147/0x260 [ 186.794417][ T5986] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 186.794449][ T5986] drm_fb_helper_damage_work+0x131/0x6f0 [ 186.794495][ T5986] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 186.794535][ T5986] ? process_scheduled_works+0xa25/0x1830 [ 186.794564][ T5986] ? process_scheduled_works+0xa25/0x1830 [ 186.794596][ T5986] process_scheduled_works+0xb02/0x1830 [ 186.794666][ T5986] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.794705][ T5986] ? assign_work+0x3d5/0x5e0 [ 186.794744][ T5986] worker_thread+0xa50/0xfc0 [ 186.794807][ T5986] kthread+0x388/0x470 [ 186.794832][ T5986] ? __pfx_worker_thread+0x10/0x10 [ 186.794863][ T5986] ? __pfx_kthread+0x10/0x10 [ 186.794888][ T5986] ret_from_fork+0x51e/0xb90 [ 186.794929][ T5986] ? __pfx_ret_from_fork+0x10/0x10 [ 186.794958][ T5986] ? __switch_to+0xc7d/0x1450 [ 186.794989][ T5986] ? __pfx_kthread+0x10/0x10 [ 186.795015][ T5986] ret_from_fork_asm+0x1a/0x30 [ 186.795055][ T5986] [ 186.795660][ T5986] Kernel Offset: disabled