last executing test programs: 33.558267009s ago: executing program 2 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x4000000) 26.135155736s ago: executing program 2 (id=37): r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r2, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 24.767632777s ago: executing program 2 (id=43): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001f80)=r1, 0x4) r4 = socket$kcm(0x2, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7, 0xee9e, 0x5, 0x100}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x4000000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0xfffffffffffffe21, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x2383, @loopback}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r9, &(0x7f0000000240), &(0x7f0000000280)=@udp=r8}, 0x20) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fbdbdf2505000000200001800d0001007564703a73797a235e2f199adb44268008000200ffffffff"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x29b}}, './file0\x00'}) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) pwritev(r10, &(0x7f0000000240)=[{&(0x7f0000000080)="9bbf54613447920367fff229978a5fcad5a4cf0ff3ca457672211e34bc8e3e3d5a7b900fe042c17910d5193c305c8aca693dc50a0e075ca99c81217567895b2c", 0x40}], 0x1, 0x3, 0x9) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) 21.402662941s ago: executing program 2 (id=48): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @func={0xe, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x30]}}, 0x0, 0x34}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 18.31747937s ago: executing program 4 (id=53): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) 18.087154531s ago: executing program 2 (id=54): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x10000}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e28, 0x0, @remote}}, 0x0, 0x0, 0xb, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x23, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r5, 0x0, 0x0, 0x20004002, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x3d0000, 0x4, 0x0, r6, 0x0, 0x0}) 16.724329571s ago: executing program 0 (id=57): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$kcm(0x23, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) ptrace(0x10, 0x0) 15.491815917s ago: executing program 4 (id=58): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1200000006"], 0x50) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 15.32693944s ago: executing program 1 (id=59): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000140)={0x454a83, 0x5c, 0x8}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x801, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 15.093165817s ago: executing program 0 (id=61): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)='9,\x00', 0x3}], 0x1) 13.808722934s ago: executing program 0 (id=62): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0002"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @local, 0xf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 11.740535067s ago: executing program 2 (id=64): inotify_init() socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x6}) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x40) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r5, &(0x7f0000000440), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20) 11.344660546s ago: executing program 1 (id=65): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000140)={0x454a83, 0x5c, 0x8}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 10.953532377s ago: executing program 4 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x4000000) 9.246894995s ago: executing program 1 (id=68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1df) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='never', 0x5) 7.74911356s ago: executing program 1 (id=71): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$kcm(0x23, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) ptrace(0x10, 0x0) 6.248889006s ago: executing program 0 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9feddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$setown(r1, 0x8, r0) 5.340915907s ago: executing program 3 (id=73): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000980)={0x2, 0xe, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @empty}}, @sadb_key={0x1d, 0x9, 0x700, 0x0, "b4577c86270919d9ab350e1343eb84659de8d3b230d74f92c868b2d4269a49f6d79668c1873456320d11f92f2f5e6eb9675658ceb36113a316d324fddb375432a2a6ff2ee38aac478d4707d5a2a47998d564918c3a23445e2a38db74b92de3eaec42351abc7a61635d7f269677ca61867bfafe9d207f28e583c0cf921a341b6ef2021015e95fd669f53cc2340098b9c023014809d922c8c5b31194f71d26ef118200203d9e5ee410e529bc390852d931da92f43fc21f020b950319bbdd298f799e6cffc96cf1ee65b98be5c98cb89138c231aa37bea5ef36a95a75204bd563ae"}]}, 0x120}}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$can_bcm(0x1d, 0x2, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x525042, 0x0) r1 = syz_clone(0x80202000, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "07ec685224472d3ce62614a517a532cfa6faa7f4f33fb9fdc06c584b134c2a90b2a009126445277df563f444ba32540429912475d90df0e9844f65bf11763185", 0x2a}, 0x48, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc5", 0x97}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9a9c41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x9, 0xca, &(0x7f0000000780)=""/202, 0x41100, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x90a}, 0x10}, 0x94) mmap(&(0x7f0000323000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x30, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 5.226810519s ago: executing program 1 (id=74): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x10000}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e28, 0x0, @remote}}, 0x0, 0x0, 0xb, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x23, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r5, 0x0, 0x0, 0x20004002, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x3d0000, 0x4, 0x0, r6, 0x0, 0x0}) 5.125824083s ago: executing program 4 (id=75): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000140)={0x454a83, 0x5c, 0x8}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x801, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r3}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 3.669760691s ago: executing program 1 (id=76): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1200000006"], 0x50) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 3.423572738s ago: executing program 3 (id=77): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) 3.245881129s ago: executing program 0 (id=78): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x300002, 0x0) syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='/dev/loop0,655', 0xe) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000540)) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001400110500000000000000002b0000014e22000000000000000000000000000000000c0000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./mnt/test\x00', 0x42, 0x1ff) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffd03, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x3}}, 0xfffffffffffffd71) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc06c4124, 0x0) mount$afs(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/@cell/foo@sys\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 3.082848639s ago: executing program 3 (id=79): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x10, 0x101000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) 1.795739193s ago: executing program 3 (id=80): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.31203512s ago: executing program 3 (id=81): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1df) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='never', 0x5) 738.412787ms ago: executing program 3 (id=82): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000680)=ANY=[@ANYBLOB="12010102000000201e04483040000102030109026e000301004002080b0201012030040904000000010130"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f00000002c0)) stat(&(0x7f0000000280)='tracing\x00', &(0x7f0000000340)) stat(&(0x7f00000003c0)='tracing/events/xfs/xfs_rmap_convert/trigger\x00', 0x0) fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r3, @ANYBLOB=',wf\x00\x00\x00\x00', @ANYBLOB=',\x00']) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000426bd7000ffdbdf25380000000c00580060000000000000000c00580026000000000000000c00580034000000000000000c0058005c000000000000000c0058000a000000000000000c0058005e000000000000000c0058006b00"], 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x20000080) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='offline', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='online_movable', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f000002b8c0)='tracing\x00', 0x1ff) mount(0x0, &(0x7f000002b940)='tracing\x00', &(0x7f000002b980)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000040)='tracing/events/xfs/xfs_rmap_convert/trigger\x00', 0x150) 710.802337ms ago: executing program 0 (id=83): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x800) 496.777846ms ago: executing program 4 (id=84): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$kcm(0x23, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) ptrace(0x10, 0x0) 0s ago: executing program 4 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x4000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. [ 73.928421][ T5569] cgroup: Unknown subsys name 'net' [ 74.180826][ T5569] cgroup: Unknown subsys name 'cpuset' [ 74.245209][ T5569] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.814799][ T5569] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.219409][ T5591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.236130][ T5597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.254207][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.271940][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.272910][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.290786][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.299889][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.300896][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.303321][ T5601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.319772][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.320809][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.322534][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.322713][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.325547][ T5601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.325693][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.329605][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.329816][ T5601] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.330258][ T5601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.331230][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.331951][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.332902][ T5601] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.333961][ T5601] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.340281][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.370797][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.489076][ T5591] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.356641][ T5594] Bluetooth: hci1: command tx timeout [ 80.434579][ T5594] Bluetooth: hci3: command tx timeout [ 80.434588][ T4897] Bluetooth: hci2: command tx timeout [ 80.514540][ T5594] Bluetooth: hci0: command tx timeout [ 80.595877][ T5594] Bluetooth: hci4: command tx timeout [ 80.726849][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.728559][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.728814][ T5583] bridge_slave_0: entered allmulticast mode [ 80.731868][ T5583] bridge_slave_0: entered promiscuous mode [ 80.769341][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.769480][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.769635][ T5582] bridge_slave_0: entered allmulticast mode [ 80.772036][ T5582] bridge_slave_0: entered promiscuous mode [ 80.776859][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.776971][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.777120][ T5581] bridge_slave_0: entered allmulticast mode [ 80.780624][ T5581] bridge_slave_0: entered promiscuous mode [ 80.788968][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.789136][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.789290][ T5583] bridge_slave_1: entered allmulticast mode [ 80.794333][ T5583] bridge_slave_1: entered promiscuous mode [ 80.819605][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.819953][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.820433][ T5582] bridge_slave_1: entered allmulticast mode [ 80.823094][ T5582] bridge_slave_1: entered promiscuous mode [ 80.826499][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.826611][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.826748][ T5581] bridge_slave_1: entered allmulticast mode [ 80.830058][ T5581] bridge_slave_1: entered promiscuous mode [ 80.977126][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.992331][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.993394][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.993540][ T5580] bridge_slave_0: entered allmulticast mode [ 80.997860][ T5580] bridge_slave_0: entered promiscuous mode [ 81.005429][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.010032][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.013942][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.015675][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.015797][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.015943][ T5579] bridge_slave_0: entered allmulticast mode [ 81.018290][ T5579] bridge_slave_0: entered promiscuous mode [ 81.020392][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.020510][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.020645][ T5580] bridge_slave_1: entered allmulticast mode [ 81.024303][ T5580] bridge_slave_1: entered promiscuous mode [ 81.034872][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.038136][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.057908][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.058030][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.058531][ T5579] bridge_slave_1: entered allmulticast mode [ 81.062669][ T5579] bridge_slave_1: entered promiscuous mode [ 81.330534][ T5583] team0: Port device team_slave_0 added [ 81.348399][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.352140][ T5582] team0: Port device team_slave_0 added [ 81.356999][ T5581] team0: Port device team_slave_0 added [ 81.360738][ T5583] team0: Port device team_slave_1 added [ 81.365269][ T5579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.371041][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.373722][ T5582] team0: Port device team_slave_1 added [ 81.377044][ T5581] team0: Port device team_slave_1 added [ 81.401728][ T5579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.493753][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.493823][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.493847][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.525582][ T5580] team0: Port device team_slave_0 added [ 81.527840][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.527853][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.527877][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.531270][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.531283][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.531306][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.532501][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.532512][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.532535][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.538314][ T5579] team0: Port device team_slave_0 added [ 81.542646][ T5580] team0: Port device team_slave_1 added [ 81.543729][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.543741][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.543765][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.564935][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.564951][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.564975][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.571313][ T5579] team0: Port device team_slave_1 added [ 81.699285][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.699300][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.699323][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.729025][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.729041][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.729065][ T5579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.730379][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.730391][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.730414][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.810839][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.810855][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.810879][ T5579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.824116][ T5583] hsr_slave_0: entered promiscuous mode [ 81.826885][ T5583] hsr_slave_1: entered promiscuous mode [ 81.901789][ T5582] hsr_slave_0: entered promiscuous mode [ 81.903358][ T5582] hsr_slave_1: entered promiscuous mode [ 81.904274][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 81.907262][ T5582] Cannot create hsr debugfs directory [ 81.917515][ T5581] hsr_slave_0: entered promiscuous mode [ 81.918770][ T5581] hsr_slave_1: entered promiscuous mode [ 81.919692][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 81.919713][ T5581] Cannot create hsr debugfs directory [ 82.086413][ T5580] hsr_slave_0: entered promiscuous mode [ 82.088150][ T5580] hsr_slave_1: entered promiscuous mode [ 82.089074][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 82.089097][ T5580] Cannot create hsr debugfs directory [ 82.188761][ T5579] hsr_slave_0: entered promiscuous mode [ 82.190077][ T5579] hsr_slave_1: entered promiscuous mode [ 82.190918][ T5579] debugfs: 'hsr0' already exists in 'hsr' [ 82.190940][ T5579] Cannot create hsr debugfs directory [ 82.434591][ T5594] Bluetooth: hci1: command tx timeout [ 82.514920][ T4897] Bluetooth: hci2: command tx timeout [ 82.518906][ T5594] Bluetooth: hci3: command tx timeout [ 82.595726][ T5594] Bluetooth: hci0: command tx timeout [ 82.674707][ T5594] Bluetooth: hci4: command tx timeout [ 83.248779][ T5583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.284176][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.291584][ T5583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.322401][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.330034][ T5583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.358660][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.376759][ T5583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.417943][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.494325][ T5581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.529537][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.541894][ T5581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.566881][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.576431][ T5581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.599707][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.622314][ T5581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.648805][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.748528][ T5580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.787794][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.799169][ T5580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.837847][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.846842][ T5580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.878734][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.907156][ T5580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.937206][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.082797][ T5582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.133147][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.156598][ T5582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.188575][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.198285][ T5582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.227828][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.250461][ T5582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.287674][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.379615][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.420171][ T5579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.449439][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.460396][ T5579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.490262][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.504796][ T5579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.514879][ T5594] Bluetooth: hci1: command tx timeout [ 84.531348][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.539560][ T5579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.568851][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.594571][ T5594] Bluetooth: hci3: command tx timeout [ 84.594633][ T4897] Bluetooth: hci2: command tx timeout [ 84.646161][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.681653][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.684506][ T4897] Bluetooth: hci0: command tx timeout [ 84.703090][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.703684][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.754790][ T4897] Bluetooth: hci4: command tx timeout [ 84.774180][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.775175][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.832870][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.866195][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.890704][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.890925][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.935754][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.936430][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.989929][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.030683][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.030900][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.082055][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.082260][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.101588][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.244666][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.304346][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.323463][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.323705][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.379435][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.387813][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.501691][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.611970][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.620821][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.696959][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.704266][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.220422][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.594987][ T4897] Bluetooth: hci1: command tx timeout [ 86.674552][ T4897] Bluetooth: hci2: command tx timeout [ 86.677277][ T4897] Bluetooth: hci3: command tx timeout [ 86.746609][ T9] cfg80211: failed to load regulatory.db [ 86.754577][ T5594] Bluetooth: hci0: command tx timeout [ 86.772176][ T5583] veth0_vlan: entered promiscuous mode [ 86.795330][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.833010][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.836528][ T5594] Bluetooth: hci4: command tx timeout [ 86.884224][ T5583] veth1_vlan: entered promiscuous mode [ 87.102324][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.138037][ T5583] veth0_macvtap: entered promiscuous mode [ 87.142132][ T5581] veth0_vlan: entered promiscuous mode [ 87.147099][ T5580] veth0_vlan: entered promiscuous mode [ 87.173681][ T5583] veth1_macvtap: entered promiscuous mode [ 87.251113][ T5581] veth1_vlan: entered promiscuous mode [ 87.263130][ T5580] veth1_vlan: entered promiscuous mode [ 87.313110][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.390594][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.413917][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.561597][ T5581] veth0_macvtap: entered promiscuous mode [ 87.573767][ T5580] veth0_macvtap: entered promiscuous mode [ 87.617223][ T5581] veth1_macvtap: entered promiscuous mode [ 87.629240][ T5580] veth1_macvtap: entered promiscuous mode [ 87.859002][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.873859][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.949302][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.981440][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.002655][ T5579] veth0_vlan: entered promiscuous mode [ 88.032704][ T1805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.039227][ T1805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.077249][ T5582] veth0_vlan: entered promiscuous mode [ 88.130946][ T5579] veth1_vlan: entered promiscuous mode [ 88.246449][ T5582] veth1_vlan: entered promiscuous mode [ 88.280647][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.281092][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.798580][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.798944][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.803022][ T5579] veth0_macvtap: entered promiscuous mode [ 88.857519][ T5582] veth0_macvtap: entered promiscuous mode [ 88.887404][ T5579] veth1_macvtap: entered promiscuous mode [ 88.906130][ T5582] veth1_macvtap: entered promiscuous mode [ 88.911224][ T1287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.911241][ T1287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.134238][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.134305][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.280579][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.297513][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.297602][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.320345][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.337538][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.377005][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.442729][ T5782] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.971953][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.977499][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.266321][ T1287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.266385][ T1287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.518954][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.519014][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.614212][ T5805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 92.120369][ T1805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.120435][ T1805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.325028][ T1287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.522871][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.567813][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.977332][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.981610][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.109306][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.163448][ T1287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.204775][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.208141][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.208362][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.208572][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.208788][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.208958][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.225754][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.228300][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.228342][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.228376][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.228410][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.228443][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.228476][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.596249][ T5720] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.061718][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 95.109171][ T5720] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.117263][ T5720] usb 1-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 95.168360][ T5720] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.190629][ T5720] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.215068][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.224598][ T5720] usb 1-1: Product: syz [ 95.224618][ T5720] usb 1-1: Manufacturer: syz [ 95.224632][ T5720] usb 1-1: SerialNumber: syz [ 95.501656][ T5587] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.665248][ T5587] usb 4-1: Using ep0 maxpacket: 32 [ 95.708892][ T5587] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.708991][ T5587] usb 4-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 95.784098][ T5587] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.784182][ T5587] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.789303][ T5587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.789326][ T5587] usb 4-1: Product: syz [ 95.789341][ T5587] usb 4-1: Manufacturer: syz [ 95.789355][ T5587] usb 4-1: SerialNumber: syz [ 95.866889][ T5720] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 95.869322][ T5846] ======================================================= [ 95.869322][ T5846] WARNING: The mand mount option has been deprecated and [ 95.869322][ T5846] and is ignored by this kernel. Remove the mand [ 95.869322][ T5846] option from the mount to silence this warning. [ 95.869322][ T5846] ======================================================= [ 95.869528][ T5846] 9pnet_fd: Insufficient options for proto=fd [ 96.150755][ T5858] 9pnet_fd: Insufficient options for proto=fd [ 97.348053][ T5858] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x4fe00 [ 97.384532][ T5858] flags: 0x80000000000000(node=0|zone=1) [ 97.384687][ T5858] raw: 0080000000000000 ffffea00013f8008 ffffea00013f8008 0000000000000000 [ 97.384704][ T5858] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 97.384716][ T5858] page dumped because: unmovable page [ 97.384732][ T5858] page_owner tracks the page as allocated [ 97.384740][ T5858] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5577, tgid 5577 (syz-executor), ts 77845205869 [ 97.384771][ T5858] post_alloc_hook+0x1f9/0x250 [ 97.384805][ T5858] get_page_from_freelist+0x2591/0x2600 [ 97.384832][ T5858] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 97.384858][ T5858] alloc_pages_mpol+0xd4/0x280 [ 97.384887][ T5858] alloc_pages_noprof+0xd2/0x2f0 [ 97.384915][ T5858] __vmalloc_node_range_noprof+0x6e5/0x1540 [ 97.384938][ T5858] vmalloc_user_noprof+0xad/0xe0 [ 97.384961][ T5858] kcov_ioctl+0x58/0x650 [ 97.384983][ T5858] __se_sys_ioctl+0xff/0x170 [ 97.385007][ T5858] do_syscall_64+0x166/0x520 [ 97.385027][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.385046][ T5858] page_owner free stack trace missing [ 97.913143][ T5720] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 97.937075][ T5587] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 98.307430][ T5720] usb 1-1: USB disconnect, device number 2 [ 98.564104][ T5691] udevd[5691]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.069484][ T5587] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 99.142598][ T5587] usb 4-1: USB disconnect, device number 2 [ 99.414417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.424418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.434414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.444412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.454415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.464421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.474410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.484415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.494413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.504407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.444872][ T5882] kernel profiling enabled (shift: 9) [ 100.885317][ T5691] udevd[5691]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.109055][ T5888] ip6gretap1: entered allmulticast mode [ 107.570008][ T5927] tipc: Started in network mode [ 107.574097][ T5927] tipc: Node identity ac14140f, cluster identity 4711 [ 107.584036][ T5927] tipc: New replicast peer: 255.255.255.255 [ 107.825395][ T5937] block2mtd: error: cannot open device Ta4Gg)_դEvr!4>=Z{By<0\i= [ 107.825395][ T5937] \!ug[ [ 108.677734][ T5927] tipc: Enabled bearer , priority 10 [ 108.687441][ T5940] ip6gretap1: entered allmulticast mode [ 108.849006][ T5937] syz.2.43 (5937) used greatest stack depth: 19160 bytes left [ 109.009884][ T9] tipc: Node number set to 2886997007 [ 109.254492][ T5595] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.388868][ T5592] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.465960][ T5595] usb 5-1: Using ep0 maxpacket: 32 [ 109.484874][ T5595] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.484969][ T5595] usb 5-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 109.487887][ T5595] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.487908][ T5595] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.500706][ T5595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.500731][ T5595] usb 5-1: Product: syz [ 109.500746][ T5595] usb 5-1: Manufacturer: syz [ 109.500761][ T5595] usb 5-1: SerialNumber: syz [ 109.547009][ T5592] usb 4-1: Using ep0 maxpacket: 8 [ 109.563868][ T5592] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.593831][ T5592] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.593910][ T5592] usb 4-1: config 0 has no interface number 0 [ 109.593953][ T5592] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.593994][ T5592] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.772276][ T5592] usb 4-1: config 0 descriptor?? [ 109.903074][ T5595] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 110.036109][ T5954] 9pnet_fd: Insufficient options for proto=fd [ 110.488026][ T5592] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 111.823445][ T5595] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 111.895865][ T5592] usb 4-1: USB disconnect, device number 3 [ 112.031588][ T5685] usb 5-1: USB disconnect, device number 2 [ 112.105242][ T5691] udevd[5691]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.568642][ T5979] Can't find a SQUASHFS superblock on nullb0 [ 119.027240][ T5592] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.246028][ T5592] usb 4-1: Using ep0 maxpacket: 8 [ 119.252905][ T5592] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.254114][ T5592] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.254138][ T5592] usb 4-1: config 0 has no interface number 0 [ 119.254182][ T5592] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.254224][ T5592] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.325901][ T5592] usb 4-1: config 0 descriptor?? [ 119.448025][ T5592] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 120.196347][ T5721] usb 4-1: USB disconnect, device number 4 [ 123.502056][ T6042] Can't find a SQUASHFS superblock on nullb0 [ 127.764528][ T5675] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.434481][ T5675] usb 1-1: Using ep0 maxpacket: 8 [ 128.441784][ T5675] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 128.453788][ T5675] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.461948][ T5675] usb 1-1: config 0 has no interface number 0 [ 128.468141][ T5675] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.479125][ T5675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.528881][ T5675] usb 1-1: config 0 descriptor?? [ 128.658293][ T5675] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 128.980656][ T5675] usb 1-1: USB disconnect, device number 3 [ 130.184558][ T5592] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.379314][ T5592] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 130.380704][ T5592] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.380755][ T5592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.394487][ T197] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 130.584477][ T197] usb 4-1: Using ep0 maxpacket: 32 [ 130.628018][ T197] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.628129][ T197] usb 4-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 130.651762][ T197] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.651850][ T197] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.675469][ T197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.675496][ T197] usb 4-1: Product: syz [ 130.675510][ T197] usb 4-1: Manufacturer: syz [ 130.675524][ T197] usb 4-1: SerialNumber: syz [ 130.725684][ T5592] as10x_usb: device has been detected [ 130.738105][ T5592] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 130.832436][ T6090] Zero length message leads to an empty skb [ 130.967521][ T197] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 132.102000][ T6083] 9pnet_fd: Insufficient options for proto=fd [ 132.546893][ T5592] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 132.782275][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.794785][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.915442][ T6097] INFO: trying to register non-static key. [ 132.921304][ T6097] The code is fine but needs lockdep annotation, or maybe [ 132.928417][ T6097] you didn't initialize this object before use? [ 132.934652][ T6097] turning off the locking correctness validator. [ 132.940976][ T6097] CPU: 1 UID: 0 PID: 6097 Comm: syz.0.83 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 132.950590][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.960647][ T6097] Call Trace: [ 132.963923][ T6097] [ 132.966840][ T6097] dump_stack_lvl+0xe8/0x150 [ 132.971447][ T6097] assign_lock_key+0x133/0x150 [ 132.976203][ T6097] register_lock_class+0xcc/0x2e0 [ 132.981220][ T6097] __lock_acquire+0xaf/0x2e40 [ 132.985889][ T6097] ? add_lock_to_list+0xc7/0x100 [ 132.990836][ T6097] ? lockdep_unlock+0x5c/0xd0 [ 132.995496][ T6097] ? __lock_acquire+0x14b9/0x2e40 [ 133.000538][ T6097] ? lockdep_unlock+0x5c/0xd0 [ 133.005207][ T6097] ? __lock_acquire+0x14b9/0x2e40 [ 133.010221][ T6097] lock_acquire+0x115/0x350 [ 133.014731][ T6097] ? as102_stream_ctrl+0x27/0xc0 [ 133.019660][ T6097] ? as102_stream_ctrl+0x27/0xc0 [ 133.024601][ T6097] ? as102_stream_ctrl+0x27/0xc0 [ 133.029642][ T6097] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 133.035701][ T6097] ? as102_stream_ctrl+0x27/0xc0 [ 133.040655][ T6097] as102_stream_ctrl+0x27/0xc0 [ 133.045407][ T6097] __dvb_frontend_open+0x2ef/0xc40 [ 133.050520][ T6097] ? mutex_lock_nested+0x152/0x1d0 [ 133.055623][ T6097] ? __pfx_dvb_frontend_open+0x10/0x10 [ 133.061073][ T6097] dvb_device_open+0x258/0x350 [ 133.065828][ T6097] chrdev_open+0x4dc/0x600 [ 133.070231][ T6097] ? __pfx_chrdev_open+0x10/0x10 [ 133.075158][ T6097] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 133.081480][ T6097] ? __pfx_chrdev_open+0x10/0x10 [ 133.086439][ T6097] do_dentry_open+0x849/0x1420 [ 133.091199][ T6097] vfs_open+0x3b/0x350 [ 133.095257][ T6097] ? path_openat+0x142d/0x1d60 [ 133.100005][ T6097] path_openat+0x1448/0x1d60 [ 133.104618][ T6097] do_file_open+0x23e/0x4a0 [ 133.109107][ T6097] ? __pfx_do_file_open+0x10/0x10 [ 133.114123][ T6097] ? alloc_fd+0x654/0x6d0 [ 133.118446][ T6097] do_sys_openat2+0x115/0x200 [ 133.123114][ T6097] ? __se_sys_futex+0x3a8/0x450 [ 133.127955][ T6097] ? __pfx_do_sys_openat2+0x10/0x10 [ 133.133141][ T6097] ? rcu_is_watching+0x16/0xb0 [ 133.137894][ T6097] __x64_sys_openat+0x138/0x170 [ 133.142744][ T6097] do_syscall_64+0x166/0x520 [ 133.147320][ T6097] ? trace_irq_disable+0x3b/0x140 [ 133.152333][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.158408][ T6097] ? clear_bhb_loop+0x70/0xc0 [ 133.163073][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.168954][ T6097] RIP: 0033:0x7f41061ce98e [ 133.173359][ T6097] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.192978][ T6097] RSP: 002b:00007f4104000b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 133.201407][ T6097] RAX: ffffffffffffffda RBX: 00007f41040016c0 RCX: 00007f41061ce98e [ 133.209363][ T6097] RDX: 0000000000000800 RSI: 00007f4104000c00 RDI: ffffffffffffff9c [ 133.217409][ T6097] RBP: 00007f4104000c00 R08: 0000000000000000 R09: 0000000000000000 [ 133.225362][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 133.233328][ T6097] R13: 00007f4106496308 R14: 00007f4106496270 R15: 00007ffefdff4a58 [ 133.241285][ T6097] [ 133.348996][ T197] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 133.369420][ T5592] as10x_usb: error during firmware upload part1 [ 133.381711][ T5592] Registered device Abilis Systems DVB-Titan [ 133.383298][ T197] usb 4-1: USB disconnect, device number 5 [ 133.516749][ T5691] udevd[5691]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.368118][ T5685] usb 1-1: USB disconnect, device number 4 [ 138.384670][ T5685] Unregistered device Abilis Systems DVB-Titan [ 138.385752][ T5685] as10x_usb: device has been disconnected