last executing test programs: 16.408035153s ago: executing program 1 (id=301): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) 16.106191171s ago: executing program 4 (id=303): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x40}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) 14.798846137s ago: executing program 1 (id=306): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0xaf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000780)='!', 0x6}]) dup3(r2, r0, 0x0) 14.481514984s ago: executing program 4 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x3bf, 0x5, 0x1}, 0x10) 14.365180581s ago: executing program 1 (id=309): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000340)={0x9, 0x0, 0xfffffe3f, 0x0, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x0, 0x8}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000000001010400000000000000000a"], 0xc0}}, 0x200000b0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0xa0}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.132697603s ago: executing program 4 (id=311): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0xbadb, 0x8, 0x4, 0x1d}, &(0x7f0000000480)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb459e00d3ef17", 0x7}, {0x0}, {&(0x7f0000000300)}, {&(0x7f0000000380)}], 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="28000000000000000e010000b0000000"], 0x28}, 0x0, 0x8000, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 11.016132429s ago: executing program 1 (id=316): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) 9.52686078s ago: executing program 2 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) 9.391986997s ago: executing program 3 (id=319): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) r4 = dup(r3) r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x24, 0x0, 0x0, 0x0) 8.227557421s ago: executing program 2 (id=321): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x723000, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r1, 0x1) connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @any, 0x11}, 0xa) close(r1) socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@local}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000004a00030000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000140001"], 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(0x4) 8.002312253s ago: executing program 2 (id=322): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) 7.482721849s ago: executing program 0 (id=323): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) memfd_create(0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0xbedffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 7.244452542s ago: executing program 3 (id=324): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) writev(r0, &(0x7f0000000a00)=[{&(0x7f00000004c0)="f4", 0x1}], 0x1) 6.878451055s ago: executing program 4 (id=325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r3, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) prctl$PR_SCHED_CORE(0x27, 0x800020000000001, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 6.037465407s ago: executing program 3 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) 5.991748084s ago: executing program 0 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.000643182s ago: executing program 3 (id=328): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 3.839021014s ago: executing program 0 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000400), 0xe) listen(r3, 0x0) 3.746588821s ago: executing program 1 (id=330): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) eventfd(0x7) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x1}}, 0x20) syz_open_dev$video4linux(&(0x7f0000000400), 0x7e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 3.711409113s ago: executing program 4 (id=331): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0xd8) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 3.631482897s ago: executing program 2 (id=332): socket$alg(0x26, 0x5, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 2.648058544s ago: executing program 0 (id=333): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xd) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000040)) 1.335341262s ago: executing program 0 (id=334): mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000006c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x4, 0x10000000, 0x0, 0xfffe, 0x0, 0xe6d7, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f00000041c0)={0x2020}, 0x2020) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80101, 0x0) dup2(r5, r3) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.279305496s ago: executing program 4 (id=335): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = getpgid(0x0) ptrace$poke(0x4, r1, &(0x7f0000000000), 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_io_uring_setup(0x760a, &(0x7f00000003c0)={0x0, 0x4f0e, 0x80, 0x0, 0x14f}, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, 0x0, 0x0) r4 = dup(r2) ioctl$TCXONC(r2, 0x540a, 0x0) write$6lowpan_control(r4, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$FUSE_INIT(r4, &(0x7f00000004c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) 1.182217842s ago: executing program 2 (id=336): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 809.199191ms ago: executing program 2 (id=337): openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r1 = fanotify_init(0x8, 0x1) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) fcntl$setlease(r0, 0x400, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close(0x3) 777.803807ms ago: executing program 3 (id=338): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 695.261837ms ago: executing program 0 (id=339): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000140)=0x12) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 447.466572ms ago: executing program 3 (id=340): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000380), 0x4) 0s ago: executing program 1 (id=341): r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x927da08212a98c6}}, './file0\x00'}) connect$unix(r4, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x7, 0x1, r5, 0x15b4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0xffffffff00000000}, 0x38) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x7, @sdr={0x31424752, 0x5}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. [ 84.369996][ T5785] cgroup: Unknown subsys name 'net' [ 84.619723][ T5785] cgroup: Unknown subsys name 'cpuset' [ 84.664190][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.605234][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.401318][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.416246][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.417167][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.447773][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.449332][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.474666][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.475200][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.480725][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.528036][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.529061][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.620211][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.627300][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.629749][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.633208][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.634326][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.770902][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.786337][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.788536][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.792255][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.805784][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.834753][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.839242][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.843234][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.872453][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.880866][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.676315][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 91.689296][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 91.730941][ T31] cfg80211: failed to load regulatory.db [ 92.113193][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 92.450466][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 92.525102][ T5117] Bluetooth: hci0: command tx timeout [ 92.604409][ T5117] Bluetooth: hci1: command tx timeout [ 92.624782][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 92.683651][ T5117] Bluetooth: hci2: command tx timeout [ 92.714780][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.715535][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.715939][ T5799] bridge_slave_0: entered allmulticast mode [ 92.718000][ T5799] bridge_slave_0: entered promiscuous mode [ 92.761750][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.761838][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.761972][ T5796] bridge_slave_0: entered allmulticast mode [ 92.773189][ T5796] bridge_slave_0: entered promiscuous mode [ 92.808209][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.808311][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.808455][ T5799] bridge_slave_1: entered allmulticast mode [ 92.810347][ T5799] bridge_slave_1: entered promiscuous mode [ 92.914485][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.914626][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.915024][ T5796] bridge_slave_1: entered allmulticast mode [ 92.916952][ T5796] bridge_slave_1: entered promiscuous mode [ 92.923587][ T5800] Bluetooth: hci3: command tx timeout [ 92.923766][ T5117] Bluetooth: hci4: command tx timeout [ 93.424418][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.424690][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.424874][ T5805] bridge_slave_0: entered allmulticast mode [ 93.427046][ T5805] bridge_slave_0: entered promiscuous mode [ 93.432669][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.492547][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.492798][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.492939][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.493101][ T5805] bridge_slave_1: entered allmulticast mode [ 93.526489][ T5805] bridge_slave_1: entered promiscuous mode [ 93.530628][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.617076][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.314701][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.314915][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.315126][ T5808] bridge_slave_0: entered allmulticast mode [ 94.317410][ T5808] bridge_slave_0: entered promiscuous mode [ 94.418897][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.421236][ T5799] team0: Port device team_slave_0 added [ 94.421593][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.421726][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.421909][ T5809] bridge_slave_0: entered allmulticast mode [ 94.426138][ T5809] bridge_slave_0: entered promiscuous mode [ 94.434810][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.435198][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.435854][ T5808] bridge_slave_1: entered allmulticast mode [ 94.448245][ T5808] bridge_slave_1: entered promiscuous mode [ 94.460672][ T5796] team0: Port device team_slave_0 added [ 94.474957][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.492119][ T5799] team0: Port device team_slave_1 added [ 94.492626][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.492930][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.497164][ T5809] bridge_slave_1: entered allmulticast mode [ 94.509520][ T5809] bridge_slave_1: entered promiscuous mode [ 94.603624][ T5117] Bluetooth: hci0: command tx timeout [ 94.612080][ T5796] team0: Port device team_slave_1 added [ 94.683717][ T5117] Bluetooth: hci1: command tx timeout [ 94.763880][ T5117] Bluetooth: hci2: command tx timeout [ 95.004538][ T5117] Bluetooth: hci4: command tx timeout [ 95.004553][ T5800] Bluetooth: hci3: command tx timeout [ 95.208060][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.426841][ T5805] team0: Port device team_slave_0 added [ 95.429663][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.429676][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.429695][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.437017][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.451325][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.459184][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.459237][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.459306][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.473117][ T5805] team0: Port device team_slave_1 added [ 95.477765][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.477809][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.477883][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.499798][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.625305][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.625320][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.625339][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.066882][ T5808] team0: Port device team_slave_0 added [ 96.070956][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.070973][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.071000][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.074747][ T5809] team0: Port device team_slave_0 added [ 96.083225][ T5808] team0: Port device team_slave_1 added [ 96.195333][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.195347][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.195366][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.298083][ T5809] team0: Port device team_slave_1 added [ 96.683587][ T5117] Bluetooth: hci0: command tx timeout [ 96.763784][ T5117] Bluetooth: hci1: command tx timeout [ 96.787420][ T5799] hsr_slave_0: entered promiscuous mode [ 96.788625][ T5799] hsr_slave_1: entered promiscuous mode [ 96.807021][ T5796] hsr_slave_0: entered promiscuous mode [ 96.808060][ T5796] hsr_slave_1: entered promiscuous mode [ 96.808922][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 96.809014][ T5796] Cannot create hsr debugfs directory [ 96.843556][ T5117] Bluetooth: hci2: command tx timeout [ 96.926292][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.926311][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.926338][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.930550][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.930564][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.930590][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.931815][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.931839][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.931866][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.076299][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.076314][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.076336][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.083770][ T5117] Bluetooth: hci3: command tx timeout [ 97.083799][ T5800] Bluetooth: hci4: command tx timeout [ 97.349437][ T5805] hsr_slave_0: entered promiscuous mode [ 97.350485][ T5805] hsr_slave_1: entered promiscuous mode [ 97.351208][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 97.351227][ T5805] Cannot create hsr debugfs directory [ 97.961257][ T5808] hsr_slave_0: entered promiscuous mode [ 97.962288][ T5808] hsr_slave_1: entered promiscuous mode [ 97.963079][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 97.963097][ T5808] Cannot create hsr debugfs directory [ 98.011019][ T5809] hsr_slave_0: entered promiscuous mode [ 98.012037][ T5809] hsr_slave_1: entered promiscuous mode [ 98.012718][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 98.012736][ T5809] Cannot create hsr debugfs directory [ 98.765034][ T5800] Bluetooth: hci0: command tx timeout [ 98.843673][ T5800] Bluetooth: hci1: command tx timeout [ 98.923523][ T5800] Bluetooth: hci2: command tx timeout [ 99.163852][ T5800] Bluetooth: hci3: command tx timeout [ 99.163887][ T5800] Bluetooth: hci4: command tx timeout [ 99.283240][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.333187][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.358472][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.395354][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.515435][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.544434][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.579691][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.638340][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.768864][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.806031][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.831676][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.892538][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.032713][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.074778][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.121824][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.160845][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.282812][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.326661][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.361624][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.401595][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.467423][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.532737][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.579082][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.580227][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.621201][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.636889][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.637034][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.729072][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.759596][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.776771][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.776922][ T3575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.821783][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.821950][ T3575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.891138][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.916975][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.937487][ T1440] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.937637][ T1440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.006808][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.012461][ T4497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.061310][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.119105][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.119766][ T4497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.171183][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.171390][ T4497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.191816][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.330401][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.390993][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.396253][ T4497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.463307][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.483710][ T3575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.550358][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.694393][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.870288][ T5799] veth0_vlan: entered promiscuous mode [ 101.926865][ T5799] veth1_vlan: entered promiscuous mode [ 101.982261][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.998417][ T5809] veth0_vlan: entered promiscuous mode [ 102.056331][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.059475][ T5809] veth1_vlan: entered promiscuous mode [ 102.163750][ T5799] veth0_macvtap: entered promiscuous mode [ 102.191332][ T5799] veth1_macvtap: entered promiscuous mode [ 102.248022][ T5796] veth0_vlan: entered promiscuous mode [ 102.264466][ T5809] veth0_macvtap: entered promiscuous mode [ 102.285669][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.299649][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.319197][ T5809] veth1_macvtap: entered promiscuous mode [ 102.358877][ T5796] veth1_vlan: entered promiscuous mode [ 102.362401][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.381920][ T5805] veth0_vlan: entered promiscuous mode [ 102.432820][ T1341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.456472][ T3472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.460465][ T3472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.485851][ T3472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.489378][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.518061][ T5805] veth1_vlan: entered promiscuous mode [ 102.582401][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.711331][ T1341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.753531][ T1341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.783292][ T4497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.799716][ T1440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.877279][ T5796] veth0_macvtap: entered promiscuous mode [ 102.924063][ T5796] veth1_macvtap: entered promiscuous mode [ 102.963262][ T4497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.963290][ T4497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.092008][ T5805] veth0_macvtap: entered promiscuous mode [ 103.152604][ T5805] veth1_macvtap: entered promiscuous mode [ 103.158603][ T4497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.158623][ T4497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.207943][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.238278][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.270814][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.270836][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.325136][ T3472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.354959][ T3472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.384357][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.384693][ T1341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.396267][ T1341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.396794][ T5808] veth0_vlan: entered promiscuous mode [ 103.399020][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.399038][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.437712][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.514860][ T5808] veth1_vlan: entered promiscuous mode [ 103.574428][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.577260][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.578025][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.578210][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.779066][ T5913] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.963652][ T3575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.963673][ T3575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.033324][ T5808] veth0_macvtap: entered promiscuous mode [ 104.110588][ T5808] veth1_macvtap: entered promiscuous mode [ 104.147604][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.147627][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.301348][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.301373][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.346513][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.459829][ T4497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.459855][ T4497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.510880][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.580050][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.594816][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.622268][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 104.622994][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.932491][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.279536][ T5938] process 'syz.3.4' launched '/dev/fd/6' with NULL argv: empty string added [ 105.390225][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.390247][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.570764][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.570784][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.016432][ T6021] faux_driver vkms: [drm] Unknown color mode 3; guessing buffer size. [ 112.383955][ T37] audit: type=1326 audit(1768289781.929:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7ae1f749 code=0x7ffc0000 [ 112.386673][ T37] audit: type=1326 audit(1768289781.959:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5b7ae1f749 code=0x7ffc0000 [ 112.386736][ T37] audit: type=1326 audit(1768289781.959:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7ae1f749 code=0x7ffc0000 [ 112.391152][ T37] audit: type=1326 audit(1768289781.959:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b7ae1f749 code=0x7ffc0000 [ 112.391205][ T37] audit: type=1326 audit(1768289781.959:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7ae1f749 code=0x7ffc0000 [ 112.407350][ T37] audit: type=1326 audit(1768289781.979:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f5b7ae1f749 code=0x7ffc0000 [ 112.422969][ T37] audit: type=1326 audit(1768289781.979:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7ae1f749 code=0x7ffc0000 [ 112.424614][ T37] audit: type=1326 audit(1768289781.999:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7ae1f749 code=0x7ffc0000 [ 112.437843][ T37] audit: type=1326 audit(1768289781.999:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5b7ae1f749 code=0x7ffc0000 [ 112.448471][ T37] audit: type=1326 audit(1768289782.009:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.4.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7ae1f749 code=0x7ffc0000 [ 112.873840][ T6032] ======================================================= [ 112.873840][ T6032] WARNING: The mand mount option has been deprecated and [ 112.873840][ T6032] and is ignored by this kernel. Remove the mand [ 112.873840][ T6032] option from the mount to silence this warning. [ 112.873840][ T6032] ======================================================= [ 113.704885][ T6044] netlink: 104 bytes leftover after parsing attributes in process `syz.1.40'. [ 115.623455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.633431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.643436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.645327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.645419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.863700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.306162][ T5876] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.544634][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 116.567652][ T5876] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 116.567684][ T5876] usb 4-1: config 0 has no interface number 0 [ 116.567747][ T5876] usb 4-1: config 0 interface 113 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 116.567787][ T5876] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.567809][ T5876] usb 4-1: config 0 interface 113 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 116.567833][ T5876] usb 4-1: config 0 interface 113 has no altsetting 0 [ 116.640275][ T5876] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 116.640307][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.640328][ T5876] usb 4-1: Product: syz [ 116.640343][ T5876] usb 4-1: Manufacturer: syz [ 116.640358][ T5876] usb 4-1: SerialNumber: syz [ 116.732289][ T5876] usb 4-1: config 0 descriptor?? [ 116.757916][ T6083] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.850118][ C1] usb 4-1: NFC: Urb failure (status -71) [ 116.870337][ T5876] usb 4-1: NFC: Unable to get FW version [ 116.904525][ T5876] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 116.999810][ T5876] usb 4-1: USB disconnect, device number 2 [ 117.112848][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 118.397894][ T6127] netlink: 'syz.2.73': attribute type 30 has an invalid length. [ 118.767835][ T6127] Zero length message leads to an empty skb [ 118.784527][ T6133] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.269967][ T6142] loop5: detected capacity change from 0 to 4095 [ 122.898416][ T6194] netlink: 44 bytes leftover after parsing attributes in process `syz.3.95'. [ 122.957508][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.957838][ T6195] netlink: 'syz.3.95': attribute type 10 has an invalid length. [ 122.988418][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.036747][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.036927][ T6195] bridge0: port 2(bridge_slave_1) entered listening state [ 123.038124][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.038293][ T6195] bridge0: port 1(bridge_slave_0) entered listening state [ 123.043223][ T6195] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 124.693559][ T6223] capability: warning: `syz.0.104' uses 32-bit capabilities (legacy support in use) [ 124.807238][ T5947] libceph: connect (1)[c::]:6789 error -101 [ 124.807902][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 124.842571][ T5947] libceph: connect (1)[c::]:6789 error -101 [ 124.842784][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 124.860506][ T6218] ceph: No mds server is up or the cluster is laggy [ 125.142931][ T5946] libceph: connect (1)[c::]:6789 error -101 [ 125.143145][ T5946] libceph: mon0 (1)[c::]:6789 connect error [ 125.385067][ T6229] loop2: detected capacity change from 0 to 7 [ 125.479877][ T5856] Dev loop2: unable to read RDB block 7 [ 125.479925][ T5856] loop2: unable to read partition table [ 125.480177][ T5856] loop2: partition table beyond EOD, truncated [ 125.520921][ T6229] Dev loop2: unable to read RDB block 7 [ 125.520971][ T6229] loop2: unable to read partition table [ 125.521203][ T6229] loop2: partition table beyond EOD, truncated [ 125.521247][ T6229] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 128.390355][ T6272] syz.0.122 (6272) used greatest stack depth: 15904 bytes left [ 133.016425][ T6350] evm: overlay not supported [ 133.213436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.713940][ T6358] binder: 6357:6358 ioctl c0306201 200000000280 returned -14 [ 135.433507][ T1563] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 135.593487][ T1563] usb 4-1: Using ep0 maxpacket: 32 [ 135.597710][ T1563] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 135.597737][ T1563] usb 4-1: config 0 has no interface number 0 [ 135.597813][ T1563] usb 4-1: config 0 interface 89 has no altsetting 0 [ 135.602254][ T1563] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 135.602283][ T1563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.602305][ T1563] usb 4-1: Product: syz [ 135.602320][ T1563] usb 4-1: Manufacturer: syz [ 135.602336][ T1563] usb 4-1: SerialNumber: syz [ 135.685932][ T1563] usb 4-1: config 0 descriptor?? [ 135.708568][ T1563] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 135.708611][ T1563] em28xx 4-1:0.89: Video interface 89 found: bulk [ 136.388234][ T1563] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 137.347211][ T6407] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 137.564434][ T1563] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 137.564475][ T1563] em28xx 4-1:0.89: board has no eeprom [ 137.640796][ T1563] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 137.640826][ T1563] em28xx 4-1:0.89: analog set to bulk mode. [ 137.644981][ T43] em28xx 4-1:0.89: Registering V4L2 extension [ 137.735331][ T1563] usb 4-1: USB disconnect, device number 3 [ 137.788005][ T1563] em28xx 4-1:0.89: Disconnecting em28xx [ 137.818331][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.818428][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.847733][ T43] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 137.847826][ T43] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 137.847844][ T43] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 137.847858][ T43] em28xx 4-1:0.89: No AC97 audio processor [ 137.996233][ T43] usb 4-1: Decoder not found [ 137.996255][ T43] em28xx 4-1:0.89: failed to create media graph [ 137.996306][ T43] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 138.120338][ T43] em28xx 4-1:0.89: Registering snapshot button... [ 138.176268][ T43] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input5 [ 138.275802][ T43] em28xx 4-1:0.89: Remote control support is not available for this card. [ 138.295681][ T1563] em28xx 4-1:0.89: Closing input extension [ 138.296464][ T1563] em28xx 4-1:0.89: Deregistering snapshot button [ 138.446547][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 138.447300][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 138.553455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.553816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.557871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 138.608136][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.609181][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.976609][ T1563] em28xx 4-1:0.89: Freeing device [ 139.145056][ T6430] netlink: 68 bytes leftover after parsing attributes in process `syz.0.172'. [ 139.887920][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 139.933620][ T5876] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.090096][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.090160][ T5876] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 140.090184][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.140067][ T5876] usb 3-1: config 0 descriptor?? [ 140.153379][ T5876] pwc: Askey VC010 type 2 USB webcam detected. [ 141.187099][ T5876] pwc: recv_control_msg error -32 req 02 val 2b00 [ 141.210987][ T5876] pwc: recv_control_msg error -32 req 02 val 2700 [ 141.211956][ T5876] pwc: recv_control_msg error -32 req 02 val 2c00 [ 141.213063][ T5876] pwc: recv_control_msg error -32 req 04 val 1000 [ 141.213071][ T6413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.260150][ T5876] pwc: recv_control_msg error -32 req 04 val 1300 [ 141.462474][ T5876] pwc: recv_control_msg error -32 req 04 val 1400 [ 141.476249][ T5876] pwc: recv_control_msg error -32 req 02 val 2000 [ 141.480451][ T5876] pwc: recv_control_msg error -32 req 02 val 2100 [ 141.985523][ T5876] pwc: recv_control_msg error -71 req 02 val 2500 [ 141.986005][ T5876] pwc: recv_control_msg error -71 req 02 val 2400 [ 141.986481][ T5876] pwc: recv_control_msg error -71 req 02 val 2600 [ 141.987032][ T5876] pwc: recv_control_msg error -71 req 02 val 2900 [ 141.987482][ T5876] pwc: recv_control_msg error -71 req 02 val 2800 [ 142.038860][ T5876] pwc: recv_control_msg error -71 req 04 val 1100 [ 142.039398][ T5876] pwc: recv_control_msg error -71 req 04 val 1200 [ 142.043071][ T6413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.071372][ T5876] pwc: Registered as video103. [ 142.086772][ T5876] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 142.115513][ T5876] usb 3-1: USB disconnect, device number 2 [ 143.363571][ T5941] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.513654][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 143.516460][ T5941] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.516503][ T5941] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.516524][ T5941] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 143.516558][ T5941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 143.516696][ T5941] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 143.516719][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.614994][ T5941] usb 3-1: config 0 descriptor?? [ 143.803874][ T3472] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.806199][ T3472] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.806348][ T3472] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.806389][ T3472] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.457590][ T5941] usb 3-1: USB disconnect, device number 3 [ 148.454319][ T6536] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 148.783486][ T5947] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.837716][ T5117] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 148.933534][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 148.935723][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 148.935755][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.935776][ T5947] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.935798][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 148.935818][ T5947] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 148.935855][ T5947] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 148.935876][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.031390][ T5947] usb 5-1: config 0 descriptor?? [ 149.273759][ T5117] Bluetooth: hci5: urb ffff888032a97700 submission failed (90) [ 149.342974][ T5947] usb 5-1: USB disconnect, device number 2 [ 149.894519][ T5947] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 150.114334][ T5947] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.114370][ T5947] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 150.114409][ T5947] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.114431][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.184089][ T6553] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.254862][ T5947] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.837523][ T5947] usb 2-1: USB disconnect, device number 2 [ 150.904600][ T6568] IPVS: Scheduler module ip_vs_sip not found [ 150.905309][ T6573] IPVS: length: 8 != 258125111200 [ 154.395385][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.395410][ C0] bridge0: topology change detected, propagating [ 154.395965][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.395982][ C0] bridge0: topology change detected, propagating [ 155.953274][ T6633] Bluetooth: MGMT ver 1.23 [ 161.890034][ T6706] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 164.203703][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.233438][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 165.251974][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.252002][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.321798][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.324366][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.324392][ T43] usb 3-1: Product: syz [ 165.324408][ T43] usb 3-1: Manufacturer: syz [ 165.324423][ T43] usb 3-1: SerialNumber: syz [ 165.614784][ T43] usb 3-1: 0:2 : does not exist [ 165.656360][ T43] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 167.155235][ T43] usb 3-1: USB disconnect, device number 4 [ 167.308816][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.735601][ T6761] Driver unsupported XDP return value 0 on prog (id 44) dev N/A, expect packet loss! [ 170.859176][ T5787] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 171.072369][ T5787] usb 4-1: device descriptor read/64, error -71 [ 172.014230][ T5787] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 172.372773][ T6766] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 172.424374][ T5787] usb 4-1: device descriptor read/64, error -71 [ 172.539167][ T5787] usb usb4-port1: attempt power cycle [ 176.674597][ T6821] sg_write: data in/out 1048540/10 bytes for SCSI command 0xfd-- guessing data in; [ 176.674597][ T6821] program syz.1.291 not setting count and/or reply_len properly [ 183.198056][ T6881] program syz.4.311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.007268][ T806] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 195.159374][ T806] usb 2-1: config index 0 descriptor too short (expected 25964, got 441) [ 195.159401][ T806] usb 2-1: config 121 has too many interfaces: 115, using maximum allowed: 32 [ 195.159422][ T806] usb 2-1: config 121 has an invalid descriptor of length 0, skipping remainder of the config [ 195.159440][ T806] usb 2-1: config 121 has 0 interfaces, different from the descriptor's value: 115 [ 195.159476][ T806] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 195.159499][ T806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.415996][ T806] usb 2-1: string descriptor 0 read error: -71 [ 195.447272][ T806] usb 2-1: USB disconnect, device number 3 [ 197.325638][ T5883] ------------[ cut here ]------------ [ 197.325655][ T5883] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 197.325679][ T5883] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x39a/0x5c0, CPU#1: kworker/1:6/5883 [ 197.325720][ T5883] Modules linked in: [ 197.325760][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 197.325815][ T5883] Tainted: [L]=SOFTLOCKUP [ 197.325830][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.325855][ T5883] Workqueue: events drm_fb_helper_damage_work [ 197.325892][ T5883] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 197.325918][ T5883] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 9a c3 f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 197.325937][ T5883] RSP: 0018:ffffc900052ff860 EFLAGS: 00010246 [ 197.325956][ T5883] RAX: 1ffff110283e1400 RBX: ffffffff8ee5afc0 RCX: 0000000000000000 [ 197.325973][ T5883] RDX: ffffffff8b569e80 RSI: ffffffff8b584fa0 RDI: ffffffff8ee5afc0 [ 197.325989][ T5883] RBP: ffffc900052ff948 R08: 0000000000000000 R09: 0000000000000000 [ 197.326004][ T5883] R10: dffffc0000000000 R11: fffffbfff1db66cf R12: ffffffff8b584fa0 [ 197.326021][ T5883] R13: ffff888141f0a000 R14: 1ffff92000a5ff10 R15: ffffffff8b569e80 [ 197.326038][ T5883] FS: 0000000000000000(0000) GS:ffff888126dee000(0000) knlGS:0000000000000000 [ 197.326056][ T5883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.326071][ T5883] CR2: 0000001b2f41dff8 CR3: 000000000d3a8000 CR4: 00000000003526f0 [ 197.326090][ T5883] Call Trace: [ 197.326103][ T5883] [ 197.326119][ T5883] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 197.326144][ T5883] ? rt_spin_unlock+0x150/0x200 [ 197.326176][ T5883] ? __pfx_autoremove_wake_function+0x10/0x10 [ 197.326208][ T5883] ? rt_spin_unlock+0x161/0x200 [ 197.326244][ T5883] ? drm_vblank_get+0x147/0x260 [ 197.326272][ T5883] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 197.326313][ T5883] drm_fb_helper_damage_work+0x129/0x6e0 [ 197.326345][ T5883] ? process_scheduled_works+0x9ef/0x1770 [ 197.326373][ T5883] ? process_scheduled_works+0x9ef/0x1770 [ 197.326400][ T5883] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 197.326439][ T5883] ? process_scheduled_works+0x9ef/0x1770 [ 197.326464][ T5883] ? process_scheduled_works+0x9ef/0x1770 [ 197.326492][ T5883] process_scheduled_works+0xad1/0x1770 [ 197.326552][ T5883] ? __pfx_process_scheduled_works+0x10/0x10 [ 197.326576][ T5883] ? do_raw_spin_lock+0x121/0x290 [ 197.326622][ T5883] worker_thread+0x8a0/0xda0 [ 197.326665][ T5883] ? __kthread_parkme+0x7b/0x200 [ 197.326706][ T5883] kthread+0x711/0x8a0 [ 197.326742][ T5883] ? __pfx_worker_thread+0x10/0x10 [ 197.326768][ T5883] ? __pfx_kthread+0x10/0x10 [ 197.326797][ T5883] ? rt_spin_unlock+0x150/0x200 [ 197.326835][ T5883] ? rt_spin_unlock+0x161/0x200 [ 197.326864][ T5883] ? __pfx_kthread+0x10/0x10 [ 197.326898][ T5883] ret_from_fork+0x510/0xa50 [ 197.326926][ T5883] ? __pfx_ret_from_fork+0x10/0x10 [ 197.326949][ T5883] ? __switch_to+0xc9e/0x1480 [ 197.326989][ T5883] ? __pfx_kthread+0x10/0x10 [ 197.327023][ T5883] ret_from_fork_asm+0x1a/0x30 [ 197.327078][ T5883] [ 197.327094][ T5883] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 197.327112][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 197.327141][ T5883] Tainted: [L]=SOFTLOCKUP [ 197.327149][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.327163][ T5883] Workqueue: events drm_fb_helper_damage_work [ 197.327189][ T5883] Call Trace: [ 197.327198][ T5883] [ 197.327207][ T5883] vpanic+0x1e0/0x670 [ 197.327243][ T5883] panic+0xb9/0xc0 [ 197.327273][ T5883] ? __pfx_panic+0x10/0x10 [ 197.327315][ T5883] ? ret_from_fork_asm+0x1a/0x30 [ 197.327356][ T5883] __warn+0x317/0x4b0 [ 197.327386][ T5883] ? drm_wait_one_vblank+0x39a/0x5c0 [ 197.327414][ T5883] ? drm_wait_one_vblank+0x39a/0x5c0 [ 197.327444][ T5883] __report_bug+0x288/0x500 [ 197.327466][ T5883] ? drm_wait_one_vblank+0x39a/0x5c0 [ 197.327499][ T5883] ? __pfx___report_bug+0x10/0x10 [ 197.327544][ T5883] report_bug_entry+0x19a/0x290 [ 197.327566][ T5883] ? drm_wait_one_vblank+0x587/0x5c0 [ 197.327590][ T5883] ? drm_wait_one_vblank+0x58c/0x5c0 [ 197.327614][ T5883] handle_bug+0xca/0x200 [ 197.327642][ T5883] exc_invalid_op+0x1a/0x50 [ 197.327670][ T5883] asm_exc_invalid_op+0x1a/0x20 [ 197.327691][ T5883] RIP: 0010:drm_wait_one_vblank+0x587/0x5c0 [ 197.327716][ T5883] Code: 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 9a c3 f6 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 8b 4c 24 04 <67> 48 0f b9 3a e9 d5 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f [ 197.327734][ T5883] RSP: 0018:ffffc900052ff860 EFLAGS: 00010246 [ 197.327752][ T5883] RAX: 1ffff110283e1400 RBX: ffffffff8ee5afc0 RCX: 0000000000000000 [ 197.327768][ T5883] RDX: ffffffff8b569e80 RSI: ffffffff8b584fa0 RDI: ffffffff8ee5afc0 [ 197.327784][ T5883] RBP: ffffc900052ff948 R08: 0000000000000000 R09: 0000000000000000 [ 197.327799][ T5883] R10: dffffc0000000000 R11: fffffbfff1db66cf R12: ffffffff8b584fa0 [ 197.327816][ T5883] R13: ffff888141f0a000 R14: 1ffff92000a5ff10 R15: ffffffff8b569e80 [ 197.327858][ T5883] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 197.327881][ T5883] ? rt_spin_unlock+0x150/0x200 [ 197.327913][ T5883] ? __pfx_autoremove_wake_function+0x10/0x10 [ 197.327944][ T5883] ? rt_spin_unlock+0x161/0x200 [ 197.327979][ T5883] ? drm_vblank_get+0x147/0x260 [ 197.328006][ T5883] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 197.328044][ T5883] drm_fb_helper_damage_work+0x129/0x6e0 [ 197.328075][ T5883] ? process_scheduled_works+0x9ef/0x1770 [ 197.328102][ T5883] ? process_scheduled_works+0x9ef/0x1770 [ 197.328128][ T5883] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 197.328161][ T5883] ? process_scheduled_works+0x9ef/0x1770 [ 197.328185][ T5883] ? process_scheduled_works+0x9ef/0x1770 [ 197.328213][ T5883] process_scheduled_works+0xad1/0x1770 [ 197.328273][ T5883] ? __pfx_process_scheduled_works+0x10/0x10 [ 197.328296][ T5883] ? do_raw_spin_lock+0x121/0x290 [ 197.328341][ T5883] worker_thread+0x8a0/0xda0 [ 197.328383][ T5883] ? __kthread_parkme+0x7b/0x200 [ 197.328421][ T5883] kthread+0x711/0x8a0 [ 197.328463][ T5883] ? __pfx_worker_thread+0x10/0x10 [ 197.328488][ T5883] ? __pfx_kthread+0x10/0x10 [ 197.328518][ T5883] ? rt_spin_unlock+0x150/0x200 [ 197.328555][ T5883] ? rt_spin_unlock+0x161/0x200 [ 197.328583][ T5883] ? __pfx_kthread+0x10/0x10 [ 197.328617][ T5883] ret_from_fork+0x510/0xa50 [ 197.328645][ T5883] ? __pfx_ret_from_fork+0x10/0x10 [ 197.328668][ T5883] ? __switch_to+0xc9e/0x1480 [ 197.328707][ T5883] ? __pfx_kthread+0x10/0x10 [ 197.328740][ T5883] ret_from_fork_asm+0x1a/0x30 [ 197.328793][ T5883] [ 197.329366][ T5883] Kernel Offset: disabled