last executing test programs: 19.515529523s ago: executing program 1 (id=44): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010102ff"], 0x0) 15.943705663s ago: executing program 1 (id=58): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x80, 0xf4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xf7, 0x9, 0x6, {0x7, 0x25, 0x1, 0x83, 0x2, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x26, 0x6, 0x1, {0x7, 0x25, 0x1, 0x3, 0x8, 0xdd60}}}}}}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000001180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000440)={0x20, 0x8, 0x1, "d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) 14.79011638s ago: executing program 3 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000400)={{0x8, 0x4, 0x4, 0x2, 'syz0\x00', 0x40}, 0x3, 0x10000000, 0x1, r0, 0x4, 0x5, 'syz1\x00', &(0x7f0000000000)=['rcu_utilization\x00', '\x85--\x00', '/dev/bus/usb/00#/00#\x00', 'rcu_utilization\x00'], 0x39}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) setresuid(0xee01, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r4 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, 0x0, &(0x7f00000000c0)) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x1) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x6}], 0x18}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 14.734972594s ago: executing program 2 (id=61): fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) memfd_create(0x0, 0x7) openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) 13.993984224s ago: executing program 4 (id=62): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) gettid() ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0) 13.803903525s ago: executing program 3 (id=63): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x80, 0xf4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xf7, 0x9, 0x6, {0x7, 0x25, 0x1, 0x83, 0x2, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x26, 0x6, 0x1, {0x7, 0x25, 0x1, 0x3, 0x8, 0xdd60}}}}}}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000001180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000440)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 13.098252644s ago: executing program 4 (id=64): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r2, 0x2619, 0x7721, 0x16, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) close(r0) 12.769246903s ago: executing program 4 (id=65): syz_open_dev$hiddev(0x0, 0x800, 0x82400) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000400)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x19, 0x2, "125f"}, 0x0, 0x0, 0x0, 0x0}) 11.275489041s ago: executing program 0 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x123a40) pidfd_send_signal(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newtaction={0x80, 0x30, 0xb, 0x5, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0xfffffffc, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_LABELS={0x14, 0x7, "e14221dc6b3a3dd0a0eb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080) 10.048969498s ago: executing program 0 (id=67): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="146f449cfcb3da783966ee9ecde817dc8ba41a658766339a708bbba692b11e41d5821f508d919010aad0a7f1e09e41c681fa9b1c73cb9ac0253eb55a444635ad6ddc0d827fd72a744d7706e19e0bb39327bf65d022b2ca53f02f5f3c546606a824a2992553ad624064bfdc83f1fa", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="040e8f45fffdf50e4c7910c171b127c3cab890c81f614f27ad683b963769ef24d84f082556fd1b43f878a65dcc23ad409d4ef51c5a36900c6a5ab314bb2a406d10a6a499793d7a2e03661510116d87dc79356005e01c7474b76cacaf8136be8cda811a39567f643c0612dc5d7cf19330c281bb05c1f040dd51aea0dc4d2afa3e4aaa6c3abce4cfaeb2ba13", 0x8b}, {&(0x7f0000000c80)="57c4451b3c7c75655c57ffb8dccde119b54a69a485415fd700812b78ca50a3e54c8889a100a7f82a7f53238a20b00bd47bc39e1db1b3e2694f378c94e9184aa53cc6032a2783db559dba2208439229a2bae2e355ebfe4f7563f0579056d94e75e1c33b5b68fe4cf4a85b48558a56b4e4076d56e10087c6ec2b3c50ea02951bbb8d8b36197ed4e2fcb1cf8686dffe5f3f9a3e9f565daa2ea6c783c11ef3f63dc91a0e66add12776e48fab54a2494e4fadc2ef061f489139cd012acd", 0xbb}, {&(0x7f0000000b80)="6f0070751b7d82b11bf815a5a39052adc265313a00e70250de1cf2af793b6fa1f5c5d603cf3fc8a89b0bebd59dc535fe23b45ea92cc77c6bd1b9e06eeb847e70cf231771050820bdc0521f72ba507ad7241fe7e91a1575c01cb37892c93cf0ea46dfb147f330534806ab5374870e0762ef26", 0x72}, {&(0x7f0000000500)="38ebeb016e356fee4cda85d0cd971519cbb747f2f5dc8aa685667417945724349c2e53956a81cc01b96257be6cf756ee9a1dbdb4805abaadcdb0", 0x3a}, {&(0x7f00000012c0)="ab07cb5269eaac6a6d8297a151f6ff8a153e45bf2a870dfe905021cdda98e2d6477ec965f23931447052dc921b69a55a12335828601119c981897e5f9d23246304c348b44d28b95fe7fb2e3464e8cbca139ef88350e5009432e741b1e76efaf855d18b7583abc382ae1007611eb41150ce1a7244f400691426252a7da7033ed275dbfa75153d247ab17aed244023c89edc8dae89d2748d2a59a87e7062d3d17c7c5fe0cbf61e709d5d62181d7c8bd12d21ff6f437150ef26fc26bbab9c00f788e11201628f229c46a6ac29494bc8487e5fc89fb0cd958a91bed8f36a7a57243f1fd6c9", 0xe3}, {&(0x7f0000000a80)="7827d3e65741740426d89147d59fd333d253aded53fa8a969a0f05177236c0", 0x1f}], 0x6}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000d80)="c8c9bb0395733c925946bc562a54294b423cabffedb1436e2eeafec0dd5c365ee1453384a53151ac4520d0219b79105da2854cf859b2c67258d1b6e49b896188564a215ed2d8e36b81b1752c752f2ac52c559f562459a8b2f1f3da79b25b40062732bca7bf5b651c411cec17ef07fab31d5762eaaea7eaf30a5f52423d6c923b2125809279561c8000dad1c6fd86f3a4439a72d085fee666a9e251a92bde44605d4bca2dcc5a9ed5b751ee3c30646752fbbc797f2b4d593ec4ca4f898eb6c60c3fac", 0xc2}], 0x1}}], 0x3, 0x40) 10.008359507s ago: executing program 3 (id=68): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) r5 = syz_open_dev$video4linux(0x0, 0x6d6b, 0x480) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ecm(0x2, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002020000102505a1a440000102030109027d000101aa200d090400f70302060007052406000005240003000000000900ffff0905240100021524120500a317a88b045e4f01a607c0ffcb7e392a0a2407000400060008001524120300a317a88b045e"], &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x93, 0x1, 0x8, 0x10, 0x55}, 0x10c, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x439}}]}) 9.909149795s ago: executing program 1 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{}, {0x2, 0x6}], {}, [], {0x10, 0x2}}, 0x34, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc1485544, &(0x7f0000000000)=0x5) 8.480186082s ago: executing program 1 (id=70): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d010140000102030109025f0003010380f40904000000010100000a24010f0003020102090401000001020000090401010101020000090501090000f7090607250183020c000904020000010200000904020101010200000905820940002606"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 8.403426215s ago: executing program 4 (id=71): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) dup(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f00000034c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/prev\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 8.349180215s ago: executing program 0 (id=72): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) syz_open_procfs(0x0, &(0x7f0000000040)='attr/prev\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, 0x0) 8.112146327s ago: executing program 2 (id=73): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newtaction={0x80, 0x30, 0xb, 0x5, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0xfffffffc, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_LABELS={0x14, 0x7, "e14221dc6b3a3dd0a0eb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080) 7.453628066s ago: executing program 0 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000400)={{0x8, 0x4, 0x4, 0x2, 'syz0\x00', 0x40}, 0x3, 0x10000000, 0x1, r0, 0x4, 0x5, 'syz1\x00', &(0x7f0000000000)=['rcu_utilization\x00', '\x85--\x00', '/dev/bus/usb/00#/00#\x00', 'rcu_utilization\x00'], 0x39}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) setresuid(0xee01, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r4 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, 0x0, &(0x7f00000000c0)) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x1) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x6}], 0x18}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$kcm(0x2b, 0x1, 0x0) listen(r6, 0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 6.232083179s ago: executing program 2 (id=75): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0x3, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 6.187819732s ago: executing program 3 (id=76): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.30397273s ago: executing program 0 (id=77): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x1, 0x2, {0x2, 0x0, 0xfffffff8, 0x0, 0x1}, 0x400}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1c3102, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='ext4\x00', 0x8000, 0x0) 5.228824124s ago: executing program 3 (id=78): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 3.610557795s ago: executing program 0 (id=79): openat$nvram(0xffffffffffffff9c, 0x0, 0x52001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f00000014c0)={0xfffffffd, 0xffffffcb, 0x1c02, 0x2, 0x7f, "cc33101d3f0000002000"}) r3 = syz_open_pts(r2, 0x42) r4 = dup3(r3, r2, 0x0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 3.608909934s ago: executing program 1 (id=80): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000002c0)="ee3714aa7756572d12ad3cd80207f0ea76a0bc3c9248ca350afa19d6fbf95238e23db454a07c93a0831e31bdca1de56a48b55c0e56450721a31ba40ea9fb151d57852e371a2ace8bf18e4f347744d20282453e4d54f49b050ae57bc7515d2c546523d307712455c5a01a19915dceb94ccf3e2abdaf29911893b524ea0d6ca87d4825a041d818377f8477c405da221d3716f02e3fd540a49b538ddb62e1ef22a43d8beefc546acb78e429214b5ebe368617f4c2cd", 0xb4}, {&(0x7f0000000380)="08909a79dd9783363f6ec6795014e732a237722fd113e5b2df06331471284deb980af4fba2b20b257d426c27b35133bea57a0a9126", 0x35}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 3.599281145s ago: executing program 4 (id=81): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400"], 0x50) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f00000004c0)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000080)='^', 0x1}, {&(0x7f0000000500)="a2a5a3a9abbd71acfdbd0235645d4849582f311deb9c3f66833ed7b860053597db975838258a8d382816ffb52bc596bc5d6436b6463c2dc120fdb5501ee1d88da673e6dee8d3f4ab5d897204382e56cf916f31b199b7ee11f91230f036f6d2437b111d4b05cdec25b8ce4d", 0x6b}, {&(0x7f0000000580)="3e6b942f49752e492443f7609b95cb2ab6c73c061233b736b94d95b3968eec28d464b1f42ea0e8d656775dc916105bb588953ac72084871e7f2ff62bae587bf81e11f2756e185ce7feaa4a00", 0x4c}], 0x3}, 0x64) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x2000000000000000, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 3.211518426s ago: executing program 1 (id=82): syz_open_dev$hiddev(0x0, 0x800, 0x82400) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000400)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x19, 0x2, "125f"}, 0x0, 0x0, 0x0, 0x0}) 2.561381416s ago: executing program 3 (id=83): fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) memfd_create(0x0, 0x7) openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) 1.263860731s ago: executing program 2 (id=84): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) syz_open_procfs(0x0, &(0x7f0000000040)='attr/prev\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, 0x0) 260.173132ms ago: executing program 2 (id=85): ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000140)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{0x8000000, 0x4000000000000e8}]}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 154.2776ms ago: executing program 4 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x123a40) pidfd_send_signal(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newtaction={0x80, 0x30, 0xb, 0x5, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0xfffffffc, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_LABELS={0x14, 0x7, "e14221dc6b3a3dd0a0eb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080) 0s ago: executing program 2 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000400)={{0x8, 0x4, 0x4, 0x2, 'syz0\x00', 0x40}, 0x3, 0x10000000, 0x1, r0, 0x4, 0x5, 'syz1\x00', &(0x7f0000000000)=['rcu_utilization\x00', '\x85--\x00', '/dev/bus/usb/00#/00#\x00', 'rcu_utilization\x00'], 0x39}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) setresuid(0xee01, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r4 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, 0x0, &(0x7f00000000c0)) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x1) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 81.017480][ T5785] cgroup: Unknown subsys name 'net' [ 81.258309][ T5785] cgroup: Unknown subsys name 'cpuset' [ 81.294194][ T5785] cgroup: Unknown subsys name 'rlimit' [ 81.590990][ T9] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 83.104988][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.888449][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.895598][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.900256][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.911432][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.914968][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.918166][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.918715][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.920052][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.921858][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.922998][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.924451][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.925107][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.006027][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.006845][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.028458][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.030069][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.030842][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.031931][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.032697][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.040985][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.044904][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.045662][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.114605][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.116521][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.117329][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.030215][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 87.049031][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 87.110814][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 87.345762][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 87.490871][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 87.985273][ T5798] Bluetooth: hci0: command tx timeout [ 88.063750][ T5798] Bluetooth: hci4: command tx timeout [ 88.063756][ T5802] Bluetooth: hci3: command tx timeout [ 88.176313][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.177085][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.177722][ T5807] bridge_slave_0: entered allmulticast mode [ 88.179430][ T5807] bridge_slave_0: entered promiscuous mode [ 88.195367][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.195491][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.195648][ T5811] bridge_slave_0: entered allmulticast mode [ 88.198218][ T5811] bridge_slave_0: entered promiscuous mode [ 88.224815][ T5802] Bluetooth: hci1: command tx timeout [ 88.224924][ T5802] Bluetooth: hci2: command tx timeout [ 88.307476][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.307583][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.307742][ T5811] bridge_slave_1: entered allmulticast mode [ 88.310545][ T5811] bridge_slave_1: entered promiscuous mode [ 88.395755][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.395892][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.396063][ T5807] bridge_slave_1: entered allmulticast mode [ 88.398872][ T5807] bridge_slave_1: entered promiscuous mode [ 88.400202][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.400426][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.400593][ T5797] bridge_slave_0: entered allmulticast mode [ 88.402684][ T5797] bridge_slave_0: entered promiscuous mode [ 88.694662][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.694860][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.695240][ T5797] bridge_slave_1: entered allmulticast mode [ 88.696985][ T5797] bridge_slave_1: entered promiscuous mode [ 88.834511][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.834668][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.834852][ T5800] bridge_slave_0: entered allmulticast mode [ 88.836634][ T5800] bridge_slave_0: entered promiscuous mode [ 89.018199][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.018450][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.018594][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.018757][ T5800] bridge_slave_1: entered allmulticast mode [ 89.020582][ T5800] bridge_slave_1: entered promiscuous mode [ 89.027731][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.096837][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.096947][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.097077][ T5801] bridge_slave_0: entered allmulticast mode [ 89.098590][ T5801] bridge_slave_0: entered promiscuous mode [ 89.102358][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.166828][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.169671][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.169996][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.170150][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.170319][ T5801] bridge_slave_1: entered allmulticast mode [ 89.172150][ T5801] bridge_slave_1: entered promiscuous mode [ 89.366891][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.677616][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.866794][ T5811] team0: Port device team_slave_0 added [ 89.869435][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.871011][ T5807] team0: Port device team_slave_0 added [ 89.947898][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.950916][ T5811] team0: Port device team_slave_1 added [ 90.026065][ T5807] team0: Port device team_slave_1 added [ 90.027837][ T5797] team0: Port device team_slave_0 added [ 90.030511][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.063726][ T5798] Bluetooth: hci0: command tx timeout [ 90.144017][ T5802] Bluetooth: hci4: command tx timeout [ 90.145550][ T5798] Bluetooth: hci3: command tx timeout [ 90.296111][ T5797] team0: Port device team_slave_1 added [ 90.305960][ T5798] Bluetooth: hci2: command tx timeout [ 90.305990][ T5802] Bluetooth: hci1: command tx timeout [ 90.446870][ T5800] team0: Port device team_slave_0 added [ 90.665684][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.665696][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.665709][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.668960][ T5800] team0: Port device team_slave_1 added [ 90.905223][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.905236][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.905249][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.006094][ T5801] team0: Port device team_slave_0 added [ 91.007307][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.007321][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.007345][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.115498][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.115509][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.115522][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.116710][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.116720][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.116732][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.118737][ T5801] team0: Port device team_slave_1 added [ 91.214412][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.214428][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.214451][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.296645][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.296656][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.296669][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.477696][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.477708][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.477721][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.480180][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.480191][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.480203][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.705943][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.705954][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.705967][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.003458][ T5811] hsr_slave_0: entered promiscuous mode [ 92.006213][ T5811] hsr_slave_1: entered promiscuous mode [ 92.016810][ T5807] hsr_slave_0: entered promiscuous mode [ 92.018126][ T5807] hsr_slave_1: entered promiscuous mode [ 92.019222][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 92.019324][ T5807] Cannot create hsr debugfs directory [ 92.144130][ T5802] Bluetooth: hci0: command tx timeout [ 92.190612][ T5797] hsr_slave_0: entered promiscuous mode [ 92.191402][ T5797] hsr_slave_1: entered promiscuous mode [ 92.191994][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 92.192012][ T5797] Cannot create hsr debugfs directory [ 92.223757][ T5802] Bluetooth: hci3: command tx timeout [ 92.223787][ T5802] Bluetooth: hci4: command tx timeout [ 92.379393][ T5800] hsr_slave_0: entered promiscuous mode [ 92.380187][ T5800] hsr_slave_1: entered promiscuous mode [ 92.380773][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 92.380793][ T5800] Cannot create hsr debugfs directory [ 92.383924][ T5798] Bluetooth: hci1: command tx timeout [ 92.383951][ T5798] Bluetooth: hci2: command tx timeout [ 92.619805][ T5801] hsr_slave_0: entered promiscuous mode [ 92.620614][ T5801] hsr_slave_1: entered promiscuous mode [ 92.621228][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 92.621245][ T5801] Cannot create hsr debugfs directory [ 93.955261][ T5811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.992390][ T5811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.027826][ T5811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.078374][ T5811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.187894][ T5807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.223777][ T5802] Bluetooth: hci0: command tx timeout [ 94.230629][ T5807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.267615][ T5807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.300172][ T5807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.303855][ T5798] Bluetooth: hci3: command tx timeout [ 94.303897][ T5802] Bluetooth: hci4: command tx timeout [ 94.412006][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.456224][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.464028][ T5798] Bluetooth: hci1: command tx timeout [ 94.464068][ T5802] Bluetooth: hci2: command tx timeout [ 94.490763][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.521888][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.639110][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.675580][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.721616][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.776338][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.880914][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.923401][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.962026][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.001506][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.042367][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.098981][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.133418][ T4000] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.138325][ T4000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.159637][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.181861][ T4000] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.181989][ T4000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.246117][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.256642][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.296763][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.296902][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.335995][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.336114][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.368101][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.398611][ T4000] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.398730][ T4000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.419863][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.447571][ T4000] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.447799][ T4000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.538935][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.591963][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.599027][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.599247][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.645175][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.645317][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.716868][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.770758][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.775533][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.812826][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.824393][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.919099][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.075980][ T5801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.088554][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.378426][ T5807] veth0_vlan: entered promiscuous mode [ 96.392031][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.463542][ T5807] veth1_vlan: entered promiscuous mode [ 96.629303][ T5807] veth0_macvtap: entered promiscuous mode [ 96.649182][ T5797] veth0_vlan: entered promiscuous mode [ 96.663144][ T5807] veth1_macvtap: entered promiscuous mode [ 96.681457][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.702233][ T5797] veth1_vlan: entered promiscuous mode [ 96.725165][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.741131][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.771913][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.809943][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.830267][ T3485] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.833503][ T3485] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.851454][ T5811] veth0_vlan: entered promiscuous mode [ 96.852525][ T3485] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.940333][ T5797] veth0_macvtap: entered promiscuous mode [ 96.982252][ T5811] veth1_vlan: entered promiscuous mode [ 97.014073][ T5797] veth1_macvtap: entered promiscuous mode [ 97.057968][ T5800] veth0_vlan: entered promiscuous mode [ 97.139244][ T5801] veth0_vlan: entered promiscuous mode [ 97.157891][ T5800] veth1_vlan: entered promiscuous mode [ 97.171213][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.171235][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.176826][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.231582][ T5801] veth1_vlan: entered promiscuous mode [ 97.240645][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.282391][ T5811] veth0_macvtap: entered promiscuous mode [ 97.294042][ T4000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.296695][ T4000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.296765][ T4000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.296779][ T4000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.299597][ T4000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.317613][ T4000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.320162][ T5811] veth1_macvtap: entered promiscuous mode [ 97.474004][ T5800] veth0_macvtap: entered promiscuous mode [ 97.556387][ T5800] veth1_macvtap: entered promiscuous mode [ 97.561146][ T5801] veth0_macvtap: entered promiscuous mode [ 97.577156][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.649644][ T5801] veth1_macvtap: entered promiscuous mode [ 97.678225][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.693403][ T4000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.693423][ T4000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.716836][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.721766][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.722397][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.780043][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.935903][ T5923] binder: 5919:5923 ioctl 40182103 200000000300 returned -22 [ 98.047994][ T4000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.193620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.193656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.573630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.574791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.574958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.579218][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.629683][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.023636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.097004][ T5926] process 'syz.2.6' launched './file1' with NULL argv: empty string added [ 99.146217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.308421][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.308440][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.388106][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.405937][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.429886][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.462487][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.495994][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.544550][ T1164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.550292][ T1164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.691710][ T1164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.711538][ T1164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.800888][ T5931] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.865240][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.865260][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.092891][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.092912][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.168804][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.168824][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.309188][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.309208][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.509451][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.509470][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.275511][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.275530][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.681057][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 101.897083][ T9] usb 3-1: descriptor type invalid, skip [ 101.897102][ T9] usb 3-1: descriptor type invalid, skip [ 101.897114][ T9] usb 3-1: descriptor type invalid, skip [ 101.934214][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 101.947532][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.947627][ T9] usb 3-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.947652][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 101.962391][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.962418][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.962436][ T9] usb 3-1: Product: й [ 101.962448][ T9] usb 3-1: Manufacturer: ᐊ [ 101.962461][ T9] usb 3-1: SerialNumber: syz [ 102.231897][ T5955] binder: 5947:5955 ioctl 40182103 200000000300 returned -22 [ 102.597053][ T5852] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.810393][ T5852] usb 4-1: Using ep0 maxpacket: 8 [ 103.243762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.243797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.093602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.463866][ T9] usb 3-1: bad CDC descriptors [ 104.790950][ T5852] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 104.791011][ T5852] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.791032][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.894676][ T9] usb 3-1: USB disconnect, device number 2 [ 105.266023][ T1803] usb 4-1: USB disconnect, device number 2 [ 106.413726][ T31] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 107.721016][ T31] usb 2-1: device descriptor read/64, error -71 [ 110.918594][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.971677][ T6004] binder: 5995:6004 ioctl 40182103 200000000300 returned -22 [ 111.163790][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 111.238792][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.238832][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.238886][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.238954][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.239064][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.239129][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.708115][ T31] usb 2-1: GET_CAPABILITIES returned 0 [ 111.708164][ T31] usbtmc 2-1:16.0: can't read capabilities [ 113.886101][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.915238][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.915652][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.915693][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.915730][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.915766][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.917008][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.917050][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.917087][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.917123][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.919844][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.920574][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.920615][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.920651][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.920688][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 113.922963][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 114.002303][ T1803] usb 2-1: USB disconnect, device number 4 [ 114.023784][ T5878] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.162505][ T5957] kernel read not supported for file /sysvipc/msg (pid: 5957 comm: kworker/0:7) [ 114.198878][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 114.198907][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 114.204011][ T5878] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.204038][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.204055][ T5878] usb 4-1: Product: syz [ 114.204068][ T5878] usb 4-1: Manufacturer: syz [ 114.204081][ T5878] usb 4-1: SerialNumber: syz [ 114.280838][ T5878] usb 4-1: config 0 descriptor?? [ 114.396785][ T5878] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 114.783777][ T1803] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.909609][ T5878] usb 4-1: USB disconnect, device number 3 [ 114.913866][ T1803] usb 3-1: device descriptor read/64, error -71 [ 115.013779][ T5877] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.053275][ T6032] macvlan2: entered promiscuous mode [ 115.053302][ T6032] macvlan2: entered allmulticast mode [ 115.163738][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 115.168589][ T5877] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 115.168646][ T5877] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 115.168671][ T5877] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.168694][ T5877] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.168717][ T5877] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 115.192136][ T1803] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.214109][ T5877] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 115.214163][ T5877] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 115.214189][ T5877] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.214213][ T5877] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.214235][ T5877] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 115.274493][ T5877] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 115.274558][ T5877] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 115.274583][ T5877] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.274606][ T5877] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.274628][ T5877] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 115.313750][ T1803] usb 3-1: device descriptor read/64, error -71 [ 115.353752][ T5877] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 115.353779][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.353798][ T5877] usb 2-1: Product: syz [ 115.353810][ T5877] usb 2-1: Manufacturer: syz [ 115.353823][ T5877] usb 2-1: SerialNumber: syz [ 115.425579][ T1803] usb usb3-port1: attempt power cycle [ 115.723756][ T5878] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.734643][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.735191][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.765621][ T5877] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 115.789516][ T5877] usb 2-1: USB disconnect, device number 5 [ 115.863751][ T1803] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.873783][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 115.880618][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.880641][ T5878] usb 4-1: config 0 has no interfaces? [ 115.882085][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.882106][ T5878] usb 4-1: config 0 has no interfaces? [ 115.885533][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.885555][ T5878] usb 4-1: config 0 has no interfaces? [ 115.888193][ T5878] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 115.888216][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.888234][ T5878] usb 4-1: Product: syz [ 115.888247][ T5878] usb 4-1: Manufacturer: syz [ 115.888259][ T5878] usb 4-1: SerialNumber: syz [ 115.897726][ T1803] usb 3-1: device descriptor read/8, error -71 [ 115.902123][ T5878] usb 4-1: config 0 descriptor?? [ 116.141896][ T5877] usb 4-1: USB disconnect, device number 4 [ 116.202596][ T1803] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 116.214836][ T1803] usb 3-1: device descriptor read/8, error -71 [ 116.324130][ T1803] usb usb3-port1: unable to enumerate USB device [ 117.575945][ T5877] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.823462][ T5877] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 117.823480][ T5877] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 117.823489][ T5877] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 117.823498][ T5877] usb 4-1: config 220 has no interface number 2 [ 117.823545][ T5877] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 117.871829][ T5877] usb 4-1: config 220 interface 0 has no altsetting 0 [ 117.871843][ T5877] usb 4-1: config 220 interface 76 has no altsetting 0 [ 117.871853][ T5877] usb 4-1: config 220 interface 1 has no altsetting 0 [ 117.897434][ T5877] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 117.897462][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.897480][ T5877] usb 4-1: Product: syz [ 117.897492][ T5877] usb 4-1: Manufacturer: syz [ 117.897505][ T5877] usb 4-1: SerialNumber: syz [ 117.923706][ T6009] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.094017][ T6009] usb 2-1: Using ep0 maxpacket: 8 [ 118.096603][ T6009] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.096625][ T6009] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.096724][ T6009] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.096736][ T6009] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.096760][ T6009] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.096771][ T6009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.187113][ T5877] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 118.187139][ T5877] uvcvideo 4-1:220.0: No valid video chain found. [ 118.188191][ T5877] usb 4-1: selecting invalid altsetting 0 [ 118.280288][ T5877] usb 4-1: selecting invalid altsetting 0 [ 118.280312][ T5877] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 118.308139][ T5877] usb 4-1: USB disconnect, device number 5 [ 118.390557][ T6009] usb 2-1: GET_CAPABILITIES returned 0 [ 118.390605][ T6009] usbtmc 2-1:16.0: can't read capabilities [ 119.500243][ T5877] usb 2-1: USB disconnect, device number 6 [ 123.128533][ T6009] kernel read not supported for file /sysvipc/msg (pid: 6009 comm: kworker/1:8) [ 124.337570][ T991] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.633633][ T991] usb 2-1: device descriptor read/64, error -71 [ 124.873716][ T991] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.101440][ T991] usb 2-1: device descriptor read/64, error -71 [ 125.220126][ T991] usb usb2-port1: attempt power cycle [ 125.783711][ T5878] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.823806][ T991] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 125.848010][ T991] usb 2-1: device descriptor read/8, error -71 [ 125.937761][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 125.937790][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 125.965984][ T5878] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 125.966012][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.966029][ T5878] usb 5-1: Product: syz [ 125.966042][ T5878] usb 5-1: Manufacturer: syz [ 125.966055][ T5878] usb 5-1: SerialNumber: syz [ 125.975798][ T5878] usb 5-1: config 0 descriptor?? [ 126.020227][ T5878] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 126.093737][ T991] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 126.114692][ T991] usb 2-1: device descriptor read/8, error -71 [ 126.234278][ T991] usb usb2-port1: unable to enumerate USB device [ 126.258886][ T5878] usb 5-1: USB disconnect, device number 2 [ 126.486615][ T6037] udevd[6037]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.627818][ T5877] kernel read not supported for file /sysvipc/msg (pid: 5877 comm: kworker/1:4) [ 128.885322][ T5878] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 129.458712][ T5878] usb 2-1: config 0 has no interfaces? [ 129.458749][ T5878] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 129.458771][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.513624][ T5878] usb 2-1: config 0 descriptor?? [ 129.724501][ T5877] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 129.732635][ T6140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.733138][ T6140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.755654][ T1632] usb 2-1: USB disconnect, device number 11 [ 129.905098][ T5877] usb 4-1: config 0 has no interfaces? [ 129.905137][ T5877] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 129.905159][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.926023][ T5877] usb 4-1: config 0 descriptor?? [ 130.213737][ T5878] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.274771][ T6157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.275673][ T6157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.302363][ T5957] usb 4-1: USB disconnect, device number 6 [ 130.364242][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 130.370768][ T5878] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 130.370796][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.370815][ T5878] usb 5-1: Product: syz [ 130.370828][ T5878] usb 5-1: Manufacturer: syz [ 130.370861][ T5878] usb 5-1: SerialNumber: syz [ 130.375394][ T5878] usb 5-1: config 0 descriptor?? [ 130.403743][ T1632] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 130.553682][ T1632] usb 2-1: Using ep0 maxpacket: 16 [ 130.556217][ T1632] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 130.556239][ T1632] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.558943][ T1632] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 130.558968][ T1632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.558987][ T1632] usb 2-1: Product: syz [ 130.559000][ T1632] usb 2-1: Manufacturer: syz [ 130.559013][ T1632] usb 2-1: SerialNumber: syz [ 130.579207][ T5878] usb read operation failed. (-32) [ 130.880136][ T5957] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.982048][ T5878] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 131.020767][ T5878] usb 5-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 131.020794][ T5878] usb 5-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 131.054289][ T1632] usb 2-1: 0:2 : does not exist [ 131.093775][ T5957] usb 4-1: Using ep0 maxpacket: 16 [ 131.096176][ T5957] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 131.096198][ T5957] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.182341][ T5957] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 131.182370][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.182389][ T5957] usb 4-1: Product: syz [ 131.182402][ T5957] usb 4-1: Manufacturer: syz [ 131.182415][ T5957] usb 4-1: SerialNumber: syz [ 132.489166][ T1632] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 132.539871][ T1632] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 132.591819][ T1632] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 132.624324][ T1632] usb 2-1: USB disconnect, device number 12 [ 132.715722][ T5957] usb 4-1: 0:2 : does not exist [ 132.746010][ T5957] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 132.773317][ T5957] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 132.794779][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.794835][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.822619][ T5957] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 134.084261][ T5957] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 134.110219][ T5957] usb 4-1: USB disconnect, device number 7 [ 134.471280][ T6011] kernel read not supported for file /sysvipc/msg (pid: 6011 comm: kworker/1:9) [ 135.060079][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 135.083754][ T1632] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 135.193845][ T5957] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 135.234555][ T1632] usb 2-1: Using ep0 maxpacket: 8 [ 135.239249][ T1632] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.239272][ T1632] usb 2-1: config 0 has no interfaces? [ 135.373425][ T5957] usb 4-1: descriptor type invalid, skip [ 135.373494][ T5957] usb 4-1: descriptor type invalid, skip [ 135.373530][ T5957] usb 4-1: descriptor type invalid, skip [ 135.379150][ T5957] usb 4-1: not running at top speed; connect to a high speed hub [ 135.384247][ T5957] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.385767][ T5957] usb 4-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.385854][ T5957] usb 4-1: config 1 interface 0 has no altsetting 0 [ 135.433407][ T5957] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.433435][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.437519][ T5957] usb 4-1: Product: й [ 135.437903][ T5957] usb 4-1: Manufacturer: ᐊ [ 135.438646][ T5957] usb 4-1: SerialNumber: syz [ 136.127360][ T5957] usb 4-1: can't set config #1, error -71 [ 136.151760][ T5957] usb 4-1: USB disconnect, device number 8 [ 136.168603][ T1632] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.168626][ T1632] usb 2-1: config 0 has no interfaces? [ 136.187638][ T1632] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.187661][ T1632] usb 2-1: config 0 has no interfaces? [ 136.192309][ T1632] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 136.192333][ T1632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.192351][ T1632] usb 2-1: Product: syz [ 136.192364][ T1632] usb 2-1: Manufacturer: syz [ 136.192377][ T1632] usb 2-1: SerialNumber: syz [ 136.507771][ T1632] usb 2-1: config 0 descriptor?? [ 137.410120][ T6020] Bluetooth: Error in BCSP hdr checksum [ 137.422853][ T1632] usb 2-1: USB disconnect, device number 13 [ 137.654241][ T799] Bluetooth: Error in BCSP hdr checksum [ 137.863710][ T5957] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.935184][ T1115] Bluetooth: Error in BCSP hdr checksum [ 138.013845][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 138.685233][ T5957] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.685260][ T5957] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.685284][ T5957] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.685306][ T5957] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.685346][ T5957] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.685365][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.692333][ T3487] Bluetooth: Error in BCSP hdr checksum [ 138.743789][ T1632] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 139.113731][ T5802] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 139.202921][ T5957] usb 4-1: GET_CAPABILITIES returned 0 [ 139.202967][ T5957] usbtmc 4-1:16.0: can't read capabilities [ 139.459005][ T5957] usb 4-1: USB disconnect, device number 9 [ 142.168740][ T1632] usb 2-1: device descriptor read/64, error -71 [ 142.445329][ T1632] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 142.603684][ T1632] usb 2-1: Using ep0 maxpacket: 8 [ 142.673152][ T1632] usb 2-1: device descriptor read/all, error -71 [ 142.673821][ T1632] usb usb2-port1: attempt power cycle [ 142.714222][ T1632] ================================================================== [ 142.714238][ T1632] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0xa2/0xf0 [ 142.714277][ T1632] Read of size 1 at addr ffff888038da88b8 by task kworker/1:2/1632 [ 142.714293][ T1632] [ 142.714320][ T1632] CPU: 1 UID: 0 PID: 1632 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.714341][ T1632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.714354][ T1632] Workqueue: usb_hub_wq hub_event [ 142.714383][ T1632] Call Trace: [ 142.714394][ T1632] [ 142.714403][ T1632] dump_stack_lvl+0x189/0x250 [ 142.714428][ T1632] ? rcu_is_watching+0x15/0xb0 [ 142.714450][ T1632] ? __kasan_check_byte+0x12/0x40 [ 142.714471][ T1632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.714492][ T1632] ? rcu_is_watching+0x15/0xb0 [ 142.714514][ T1632] ? lock_release+0x4b/0x3e0 [ 142.714535][ T1632] ? __virt_addr_valid+0x1c8/0x5c0 [ 142.714557][ T1632] ? __virt_addr_valid+0x4a5/0x5c0 [ 142.714579][ T1632] print_report+0xca/0x240 [ 142.714604][ T1632] ? _raw_spin_lock_irq+0xa2/0xf0 [ 142.714629][ T1632] kasan_report+0x118/0x150 [ 142.714650][ T1632] ? _raw_spin_lock_irq+0xa2/0xf0 [ 142.714678][ T1632] ? rtlock_slowlock_locked+0x3821/0x4010 [ 142.714701][ T1632] __kasan_check_byte+0x2a/0x40 [ 142.714721][ T1632] lock_acquire+0x8d/0x360 [ 142.714739][ T1632] ? __pfx___schedule+0x10/0x10 [ 142.714768][ T1632] _raw_spin_lock_irq+0xa2/0xf0 [ 142.714794][ T1632] ? rtlock_slowlock_locked+0x3821/0x4010 [ 142.714818][ T1632] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 142.714849][ T1632] rtlock_slowlock_locked+0x3821/0x4010 [ 142.714872][ T1632] ? unwind_next_frame+0xa5/0x2390 [ 142.714897][ T1632] ? __lock_acquire+0xab9/0xd20 [ 142.714918][ T1632] ? rtlock_slowlock_locked+0x286/0x4010 [ 142.714942][ T1632] ? do_raw_spin_lock+0x121/0x290 [ 142.714970][ T1632] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 142.714999][ T1632] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 142.715025][ T1632] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 142.715052][ T1632] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 142.715088][ T1632] rt_spin_lock+0x158/0x3e0 [ 142.715110][ T1632] ? __pfx_rt_spin_lock+0x10/0x10 [ 142.715130][ T1632] ? rt_mutex_slowunlock+0x493/0x8a0 [ 142.715155][ T1632] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 142.715178][ T1632] raw_queue_event+0x39/0x2e0 [ 142.715198][ T1632] gadget_disconnect+0x51/0xc0 [ 142.715215][ T1632] set_link_state+0xc0a/0x1220 [ 142.715238][ T1632] dummy_hub_control+0x9ac/0x1760 [ 142.715261][ T1632] usb_hcd_submit_urb+0xde9/0x1a80 [ 142.715288][ T1632] usb_start_wait_urb+0x114/0x4c0 [ 142.715315][ T1632] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 142.715350][ T1632] usb_control_msg+0x232/0x3e0 [ 142.715378][ T1632] hub_event+0x2cd1/0x4a20 [ 142.715418][ T1632] ? __pfx_hub_event+0x10/0x10 [ 142.715434][ T1632] ? process_scheduled_works+0x9ef/0x17b0 [ 142.715464][ T1632] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.715488][ T1632] ? process_scheduled_works+0x9ef/0x17b0 [ 142.715514][ T1632] ? process_scheduled_works+0x9ef/0x17b0 [ 142.715540][ T1632] process_scheduled_works+0xae1/0x17b0 [ 142.715579][ T1632] ? __pfx_process_scheduled_works+0x10/0x10 [ 142.715612][ T1632] worker_thread+0x8a0/0xda0 [ 142.715629][ T1632] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 142.715659][ T1632] ? __kthread_parkme+0x7b/0x200 [ 142.715682][ T1632] kthread+0x711/0x8a0 [ 142.715702][ T1632] ? __pfx_worker_thread+0x10/0x10 [ 142.715718][ T1632] ? __pfx_kthread+0x10/0x10 [ 142.715735][ T1632] ? rt_spin_unlock+0x150/0x200 [ 142.715757][ T1632] ? rt_spin_unlock+0x161/0x200 [ 142.715777][ T1632] ? __pfx_kthread+0x10/0x10 [ 142.715798][ T1632] ret_from_fork+0x4bc/0x870 [ 142.715824][ T1632] ? __pfx_ret_from_fork+0x10/0x10 [ 142.715850][ T1632] ? __switch_to_asm+0x39/0x70 [ 142.715874][ T1632] ? __switch_to_asm+0x33/0x70 [ 142.715897][ T1632] ? __pfx_kthread+0x10/0x10 [ 142.715918][ T1632] ret_from_fork_asm+0x1a/0x30 [ 142.715947][ T1632] [ 142.715954][ T1632] [ 142.715966][ T1632] Allocated by task 6226: [ 142.715975][ T1632] kasan_save_track+0x3e/0x80 [ 142.715991][ T1632] __kasan_kmalloc+0x93/0xb0 [ 142.716006][ T1632] __kmalloc_cache_noprof+0x1ef/0x6c0 [ 142.716022][ T1632] raw_open+0x8d/0x530 [ 142.716044][ T1632] misc_open+0x2de/0x350 [ 142.716058][ T1632] chrdev_open+0x4cf/0x5e0 [ 142.716082][ T1632] do_dentry_open+0x9b1/0x1350 [ 142.716102][ T1632] vfs_open+0x3b/0x350 [ 142.716119][ T1632] path_openat+0x2ef1/0x3840 [ 142.716141][ T1632] do_filp_open+0x1fa/0x410 [ 142.716161][ T1632] do_sys_openat2+0x121/0x1c0 [ 142.716180][ T1632] __x64_sys_openat+0x138/0x170 [ 142.716200][ T1632] do_syscall_64+0xfa/0xfa0 [ 142.716223][ T1632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.716239][ T1632] [ 142.716244][ T1632] Freed by task 6226: [ 142.716252][ T1632] kasan_save_track+0x3e/0x80 [ 142.716266][ T1632] __kasan_save_free_info+0x46/0x50 [ 142.716287][ T1632] __kasan_slab_free+0x5c/0x80 [ 142.716302][ T1632] kfree+0x197/0x950 [ 142.716325][ T1632] raw_release+0x191/0x260 [ 142.716348][ T1632] __fput+0x45b/0xa80 [ 142.716366][ T1632] task_work_run+0x1d4/0x260 [ 142.716386][ T1632] do_exit+0x6b5/0x2300 [ 142.716403][ T1632] do_group_exit+0x21c/0x2d0 [ 142.716420][ T1632] get_signal+0x125d/0x1310 [ 142.716442][ T1632] arch_do_signal_or_restart+0xa0/0x790 [ 142.716462][ T1632] exit_to_user_mode_loop+0x72/0x130 [ 142.716477][ T1632] do_syscall_64+0x2bd/0xfa0 [ 142.716498][ T1632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.716516][ T1632] [ 142.716520][ T1632] The buggy address belongs to the object at ffff888038da8000 [ 142.716520][ T1632] which belongs to the cache kmalloc-4k of size 4096 [ 142.716537][ T1632] The buggy address is located 2232 bytes inside of [ 142.716537][ T1632] freed 4096-byte region [ffff888038da8000, ffff888038da9000) [ 142.716554][ T1632] [ 142.716559][ T1632] The buggy address belongs to the physical page: [ 142.716577][ T1632] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x38da8 [ 142.716598][ T1632] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 142.716617][ T1632] flags: 0x80000000000040(head|node=0|zone=1) [ 142.716634][ T1632] page_type: f5(slab) [ 142.716652][ T1632] raw: 0080000000000040 ffff88813ff27140 dead000000000122 0000000000000000 [ 142.716666][ T1632] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 142.716680][ T1632] head: 0080000000000040 ffff88813ff27140 dead000000000122 0000000000000000 [ 142.716695][ T1632] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 142.716712][ T1632] head: 0080000000000003 ffffea0000e36a01 00000000ffffffff 00000000ffffffff [ 142.716728][ T1632] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 142.716737][ T1632] page dumped because: kasan: bad access detected [ 142.716750][ T1632] page_owner tracks the page as allocated [ 142.716757][ T1632] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6226, tgid 6224 (syz.1.82), ts 139572621913, free_ts 139524555773 [ 142.716790][ T1632] post_alloc_hook+0x240/0x2a0 [ 142.716808][ T1632] get_page_from_freelist+0x28c0/0x2960 [ 142.716828][ T1632] __alloc_frozen_pages_noprof+0x181/0x370 [ 142.716847][ T1632] alloc_pages_mpol+0xd1/0x380 [ 142.716864][ T1632] allocate_slab+0x96/0x3a0 [ 142.716884][ T1632] ___slab_alloc+0xb12/0x13f0 [ 142.716904][ T1632] __slab_alloc+0xc6/0x1f0 [ 142.716921][ T1632] __kmalloc_cache_noprof+0xec/0x6c0 [ 142.716937][ T1632] raw_open+0x8d/0x530 [ 142.716960][ T1632] misc_open+0x2de/0x350 [ 142.716972][ T1632] chrdev_open+0x4cf/0x5e0 [ 142.716988][ T1632] do_dentry_open+0x9b1/0x1350 [ 142.717007][ T1632] vfs_open+0x3b/0x350 [ 142.717025][ T1632] path_openat+0x2ef1/0x3840 [ 142.717045][ T1632] do_filp_open+0x1fa/0x410 [ 142.717074][ T1632] do_sys_openat2+0x121/0x1c0 [ 142.717093][ T1632] page last free pid 5168 tgid 5168 stack trace: [ 142.717103][ T1632] __free_frozen_pages+0xfb6/0x1140 [ 142.717120][ T1632] __put_partials+0x149/0x170 [ 142.717139][ T1632] __slab_free+0x29e/0x370 [ 142.717159][ T1632] qlist_free_all+0x97/0x140 [ 142.717181][ T1632] kasan_quarantine_reduce+0x148/0x160 [ 142.717204][ T1632] __kasan_slab_alloc+0x22/0x80 [ 142.717219][ T1632] kmem_cache_alloc_noprof+0x181/0x6b0 [ 142.717244][ T1632] getname_flags+0xb8/0x540 [ 142.717262][ T1632] do_sys_openat2+0xbc/0x1c0 [ 142.717281][ T1632] __x64_sys_openat+0x138/0x170 [ 142.717300][ T1632] do_syscall_64+0xfa/0xfa0 [ 142.717324][ T1632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.717342][ T1632] [ 142.717346][ T1632] Memory state around the buggy address: [ 142.717357][ T1632] ffff888038da8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.717369][ T1632] ffff888038da8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.717381][ T1632] >ffff888038da8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.717391][ T1632] ^ [ 142.717401][ T1632] ffff888038da8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.717413][ T1632] ffff888038da8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.717422][ T1632] ================================================================== [ 142.717439][ T1632] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.717454][ T1632] CPU: 1 UID: 0 PID: 1632 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.717475][ T1632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.717487][ T1632] Workqueue: usb_hub_wq hub_event [ 142.717506][ T1632] Call Trace: [ 142.717513][ T1632] [ 142.717521][ T1632] dump_stack_lvl+0x99/0x250 [ 142.717544][ T1632] ? __asan_memcpy+0x40/0x70 [ 142.717569][ T1632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.717588][ T1632] ? __pfx__printk+0x10/0x10 [ 142.717613][ T1632] vpanic+0x237/0x6d0 [ 142.717631][ T1632] ? __pfx_vpanic+0x10/0x10 [ 142.717654][ T1632] panic+0xb9/0xc0 [ 142.717670][ T1632] ? __pfx_panic+0x10/0x10 [ 142.717689][ T1632] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 142.717718][ T1632] ? _raw_spin_lock_irq+0xa2/0xf0 [ 142.717742][ T1632] check_panic_on_warn+0x89/0xb0 [ 142.717764][ T1632] ? _raw_spin_lock_irq+0xa2/0xf0 [ 142.717789][ T1632] end_report+0x78/0x160 [ 142.717809][ T1632] kasan_report+0x129/0x150 [ 142.717828][ T1632] ? _raw_spin_lock_irq+0xa2/0xf0 [ 142.717857][ T1632] ? rtlock_slowlock_locked+0x3821/0x4010 [ 142.717881][ T1632] __kasan_check_byte+0x2a/0x40 [ 142.717900][ T1632] lock_acquire+0x8d/0x360 [ 142.717919][ T1632] ? __pfx___schedule+0x10/0x10 [ 142.717947][ T1632] _raw_spin_lock_irq+0xa2/0xf0 [ 142.717972][ T1632] ? rtlock_slowlock_locked+0x3821/0x4010 [ 142.717996][ T1632] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 142.718026][ T1632] rtlock_slowlock_locked+0x3821/0x4010 [ 142.718049][ T1632] ? unwind_next_frame+0xa5/0x2390 [ 142.718080][ T1632] ? __lock_acquire+0xab9/0xd20 [ 142.718101][ T1632] ? rtlock_slowlock_locked+0x286/0x4010 [ 142.718125][ T1632] ? do_raw_spin_lock+0x121/0x290 [ 142.718151][ T1632] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 142.718177][ T1632] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 142.718203][ T1632] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 142.718230][ T1632] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 142.718256][ T1632] rt_spin_lock+0x158/0x3e0 [ 142.718278][ T1632] ? __pfx_rt_spin_lock+0x10/0x10 [ 142.718298][ T1632] ? rt_mutex_slowunlock+0x493/0x8a0 [ 142.718322][ T1632] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 142.718345][ T1632] raw_queue_event+0x39/0x2e0 [ 142.718363][ T1632] gadget_disconnect+0x51/0xc0 [ 142.718378][ T1632] set_link_state+0xc0a/0x1220 [ 142.718401][ T1632] dummy_hub_control+0x9ac/0x1760 [ 142.718425][ T1632] usb_hcd_submit_urb+0xde9/0x1a80 [ 142.718451][ T1632] usb_start_wait_urb+0x114/0x4c0 [ 142.718480][ T1632] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 142.718517][ T1632] usb_control_msg+0x232/0x3e0 [ 142.718547][ T1632] hub_event+0x2cd1/0x4a20 [ 142.718590][ T1632] ? __pfx_hub_event+0x10/0x10 [ 142.718608][ T1632] ? process_scheduled_works+0x9ef/0x17b0 [ 142.718639][ T1632] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.718665][ T1632] ? process_scheduled_works+0x9ef/0x17b0 [ 142.718692][ T1632] ? process_scheduled_works+0x9ef/0x17b0 [ 142.718720][ T1632] process_scheduled_works+0xae1/0x17b0 [ 142.718760][ T1632] ? __pfx_process_scheduled_works+0x10/0x10 [ 142.718795][ T1632] worker_thread+0x8a0/0xda0 [ 142.718814][ T1632] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 142.718845][ T1632] ? __kthread_parkme+0x7b/0x200 [ 142.718868][ T1632] kthread+0x711/0x8a0 [ 142.718891][ T1632] ? __pfx_worker_thread+0x10/0x10 [ 142.718909][ T1632] ? __pfx_kthread+0x10/0x10 [ 142.718928][ T1632] ? rt_spin_unlock+0x150/0x200 [ 142.718953][ T1632] ? rt_spin_unlock+0x161/0x200 [ 142.718975][ T1632] ? __pfx_kthread+0x10/0x10 [ 142.718996][ T1632] ret_from_fork+0x4bc/0x870 [ 142.719024][ T1632] ? __pfx_ret_from_fork+0x10/0x10 [ 142.719054][ T1632] ? __switch_to_asm+0x39/0x70 [ 142.719084][ T1632] ? __switch_to_asm+0x33/0x70 [ 142.719108][ T1632] ? __pfx_kthread+0x10/0x10 [ 142.719129][ T1632] ret_from_fork_asm+0x1a/0x30 [ 142.719162][ T1632] [ 142.719412][ T1632] Kernel Offset: disabled